[Snyk] Upgrade @pulumi/pulumi from 3.30.0 to 3.143.0 #221
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @pulumi/pulumi from 3.30.0 to 3.143.0. See this package in npm: @pulumi/pulumi See this project in Snyk: https://app.snyk.io/org/lukeshay/project/71d1961f-c2fb-44d1-b2fb-b901a29beee6?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @pulumi/pulumi from 3.30.0 to 3.143.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1012 versions ahead of your current version.
The recommended version was released 25 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-PROTOBUFJS-2441248
SNYK-JS-PROTOBUFJS-5756498
SNYK-JS-SEMVER-3247795
SNYK-JS-SEMVER-3247795
SNYK-JS-GRPCGRPCJS-7242922
SNYK-JS-INFLIGHT-6095116
SNYK-JS-MINIMATCH-3050818
Release notes
Package name: @pulumi/pulumi
3.143.0 (2024-12-12)
Features
[cli] Autonaming configuration in experimental mode
#17916
[cli] Suggest
state repairas part of integrity panics#17919
[engine] Add PULUMI_DEBUG_LANGUAGES much like PULUMI_DEBUG_PROVIDERS so we can attach debuggers to languages easily
#17821
[engine] Warn if
refreshordestroyuse older plugins#12196
[protobuf] Add
Handshaketo the provider protocol#17819
[sdk/dotnet] Upgrade pulumi-dotnet to 3.71.0
#17937
[sdkgen/dotnet] Codegen for .NET InvokeOutputOptions
#17890
[programgen/{dotnet,nodejs,python}] Emit deferred outputs for mutually dependant components
#17859
[sdk/go] Allow specifying dependencies for output invokes. Go code generation for Output form invokes will use the new
Context.InvokeOutputmethod.#17791
[sdk/nodejs] Add getSchema to Provider interface
#17950
[sdk/{nodejs,python}] Update Python and NodeJS to use the new GetRequiredPackage functionality
#17910
[cli/package] Automatically set up package dependencies when adding a package when possible
#17815
[sdk/python] Drop Python 3.8 support
#17883
Bug Fixes
[backend/diy] Show a more correct URL for lock files in error messages
#17961
[sdk/go] Inherit
protectfromparents in the Go SDK#17936
[sdk/go] Fix a
deferleak when writing memory profiles#17581
[sdk/go] Return when rejecting the InvokeOutput output on error
#18010
[sdkgen/go] Fix writing of go.mod files for parameterized packages
#17923
[auto/{go,nodejs,python}] Expose
whoamitoken information in automation API types#17735
[cli/install] Don't recreate virtualenvs when using venv
#17892
[auto/nodejs] Don't hang indefinitely on failed inputs
#17899
[auto/python] Catch BaseException in automation API server
#17909
[sdk/nodejs] Throw from
output()on circular structures#17852
[sdkgen/{nodejs,python}] Bump the minimum SDK version to 3.142.0
#17997
Miscellaneous
[pkg] Upgrade pulumi-java to v0.19.0
#18014
[sdk/python] Switch to ruff for linting and formatting
#17882
[sdkgen] Include parameterization details in pulumi-plugin.json
#17867
3.142.0 (2024-11-26)
Features
[cli] Reduce binary size by stripping debug information
#17868
[sdk/go] Add OutputWithDependencies
#17856
[sdk/java] Bump pulumi-java to 0.18.0
Bug Fixes
[cli] Fix login --interactive when no accounts are in the credentials file
#17860
[cli/new] Fix new to work with local template directories again
#17866
[sdkgen/dotnet] Fix parameterized packages to have version.txt
#17851
[sdk/python] uv toolchain: preserve env-vars when executing uv command
#17849