Skip to content
This repository was archived by the owner on Aug 25, 2025. It is now read-only.

gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.149.0 #19

Open
dependabot wants to merge 1 commit into
base: trunk
Choose a base branch
from
Open

gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.149.0 #19

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 8, 2025

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.149.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.149.0

3.149.0 (2025-02-07)

Features

  • [cli] Update pulumi-java to 1.2.0

  • [cli/display] Always print resource summaries in preview, even after errors #18465

  • [cli/plugin] Improve the warning when using plugins from PATH #18476

  • [engine] Deployments continue past delete errors due to protect #18396

  • [sdk/python] [Experimental/Components] Add infrastructure to bootstrap providers from component resources #18403 #18401

  • [sdk/python] [Experimental/Components] Analyze ComponentResource properties #18403

  • [sdk/python] [Experimental/Components] Infer ComplexTypes for ComponentResources #18405

  • [sdk/python] [Experimental/Components] Handle complex types in inputs and outputs #18419

  • [sdk/python] [Experimental/Components] Support array types in component schema inference #18469

  • [sdk/python] [Experimental/Components] Support dict types in component schema inference #18472

Bug Fixes

  • [engine] Filter __internal keys when calling providers DiffConfig #18440

  • [engine] The engine will correctly use old state for provider config with no reported differences #18411

  • [cli/config] Fix setting indexed top-level config keys #18444

  • [cli/import] Fix the declaration of parameterized providers in import JSON files #18450

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.149.0 (2025-02-07)

Features

  • [cli] Update pulumi-java to 1.2.0

  • [cli/display] Always print resource summaries in preview, even after errors #18465

  • [cli/plugin] Improve the warning when using plugins from PATH #18476

  • [engine] Deployments continue past delete errors due to protect #18396

  • [sdk/python] [Experimental/Components] Add infrastructure to bootstrap providers from component resources #18403 #18401

  • [sdk/python] [Experimental/Components] Analyze ComponentResource properties #18403

  • [sdk/python] [Experimental/Components] Infer ComplexTypes for ComponentResources #18405

  • [sdk/python] [Experimental/Components] Handle complex types in inputs and outputs #18419

  • [sdk/python] [Experimental/Components] Support array types in component schema inference #18469

  • [sdk/python] [Experimental/Components] Support dict types in component schema inference #18472

Bug Fixes

  • [engine] Filter __internal keys when calling providers DiffConfig #18440

  • [engine] The engine will correctly use old state for provider config with no reported differences #18411

  • [cli/config] Fix setting indexed top-level config keys #18444

  • [cli/import] Fix the declaration of parameterized providers in import JSON files #18450

... (truncated)

Commits
  • ab282f7 Bump Java to 1.2.0 (#18493)
  • 3148990 Don’t set the files option codecov/test-results-action (#18491)
  • ffaea10 Detect when we are in the merge queue and override the branch name (#18488)
  • 9a2010b Don't always rebuild targets with %.ensure dependencies (#18474)
  • 24113d1 [Experimental/Components] Ensure component and type module is relative to the...
  • 18f064f Upload test results to codecov (#18479)
  • 698d5ab Improve the warning when using plugins from PATH (#18476)
  • 87de226 Rejig import files to record base plugin names and versions in the paramteris...
  • 0c37221 Go: fix packages/Go SDK generation when name contains "-" (#18457)
  • 66ab796 Bump bundled .Net and YAML versions (#18471)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.149.0
576a0f9 
Bumps [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from 3.142.0 to 3.149.0.
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.142.0...v3.149.0)

---
updated-dependencies:
- dependency-name: github.com/pulumi/pulumi/sdk/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from MAHDTech February 8, 2025 13:55
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 8, 2025

The following labels could not be found: dependencies, dependabot, gomod.

@dependabot dependabot bot mentioned this pull request Feb 8, 2025
Closed
github-advanced-security[bot]
github-advanced-security bot found potential problems Feb 8, 2025
View reviewed changes
vendor/github.com/djherbis/times/js.cover.dockerfile
@@ -0,0 +1,9 @@
FROM golang:1.17

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/djherbis/times/js.cover.dockerfile
@@ -0,0 +1,9 @@
FROM golang:1.17

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/djherbis/times/js.cover.dockerfile
FROM golang:1.17

RUN curl -sL https://deb.nodesource.com/setup_17.x | bash
RUN apt-get install --yes nodejs

Check failure

Code scanning / Trivy

&#39;apt-get&#39; missing &#39;--no-install-recommends&#39; High library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS029
Severity: HIGH
Message: '--no-install-recommends' flag is missed: 'apt-get install --yes nodejs'
Link: DS029
vendor/github.com/djherbis/times/linux.cover.dockerfile
@@ -0,0 +1,6 @@
FROM golang:1.17

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/djherbis/times/linux.cover.dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/djherbis/times/linux.cover.dockerfile
@@ -0,0 +1,6 @@
FROM golang:1.17

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/djherbis/times/linux.cover.dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@MAHDTech MAHDTech Awaiting requested review from MAHDTech

Assignees

@MAHDTech MAHDTech

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@MAHDTech