[Snyk] Upgrade @pulumi/pulumi from 3.30.0 to 3.144.1 #223
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @pulumi/pulumi from 3.30.0 to 3.144.1. See this package in npm: @pulumi/pulumi See this project in Snyk: https://app.snyk.io/org/lukeshay/project/71d1961f-c2fb-44d1-b2fb-b901a29beee6?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @pulumi/pulumi from 3.30.0 to 3.144.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1025 versions ahead of your current version.
The recommended version was released 23 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-PROTOBUFJS-2441248
SNYK-JS-PROTOBUFJS-5756498
SNYK-JS-SEMVER-3247795
SNYK-JS-SEMVER-3247795
SNYK-JS-GRPCGRPCJS-7242922
SNYK-JS-INFLIGHT-6095116
SNYK-JS-MINIMATCH-3050818
Release notes
Package name: @pulumi/pulumi
Co-authored-by: github-actions github-actions@github.com
3.144.0 (2024-12-20)
Features
[engine] Warn if
refreshordestroyuse older parameterized packages#18029
[sdk/dotnet] Update dotnet to 3.71.1
#18084
[auto/go] Add ConfigFile to GetConfig and SetConfig operations, add GetAllConfigWithOptions to extend GetAllConfig
#17939
[cli/plugin] Log plugin unstructured output to debug instead of info
#17943
[sdk/yaml] Update pulumi-yaml to 1.13.0
#18077
Bug Fixes
[backend/diy] Retry deletes of lock files if they fail
#18059
[auto/go] Fix potential race condition when using automation API
#18044
[auto/go] Fix "debug" flag in automation api
#18071
[cli/install] Avoid unnecessary Node.js installations
#18041
[engine] Use package load v2 in loader server so it can include paramaterization
#18072
#18021
[programgen/dotnet] Emit local dependencies in restore sources deterministically
#18026
[sdk/go] Ignore DependsOn for direct form invokes instead of raising an error
#18089
[sdk/nodejs] Respect the noCheck option from tsconfig.json
#18067
[sdk/nodejs] Gracefully handle errors that don't implement toString
#18080
[sdk/python] Fix hang on error when using uv on Windows
#18054
[sdkgen/dotnet] Compute restore sources from local dependencies and referenced packages
#18042
Miscellaneous
#18049
3.143.0 (2024-12-12)
Features
[cli] Autonaming configuration in experimental mode
#17916
[cli] Suggest
state repairas part of integrity panics#17919
[engine] Add PULUMI_DEBUG_LANGUAGES much like PULUMI_DEBUG_PROVIDERS so we can attach debuggers to languages easily
#17821
[engine] Warn if
refreshordestroyuse older plugins#12196
[protobuf] Add
Handshaketo the provider protocol#17819
[sdk/dotnet] Upgrade pulumi-dotnet to 3.71.0
#17937
[sdkgen/dotnet] Codegen for .NET InvokeOutputOptions
#17890
[programgen/{dotnet,nodejs,python}] Emit deferred outputs for mutually dependant components
#17859
[sdk/go] Allow specifying dependencies for output invokes. Go code generation for Output form invokes will use the new
Context.InvokeOutputmethod.#17791
[sdk/nodejs] Add getSchema to Provider interface
#17950
[sdk/{nodejs,python}] Update Python and NodeJS to use the new GetRequiredPackage functionality
#17910
[cli/package] Automatically set up package dependencies when adding a package when possible
#17815
[sdk/python] Drop Python 3.8 support
#17883
Bug Fixes
[backend/diy] Show a more correct URL for lock files in error messages
#17961
[sdk/go] Inherit
protectfromparents in the Go SDK#17936
[sdk/go] Fix a
deferleak when writing memory profiles#17581
[sdk/go] Return when rejecting the InvokeOutput output on error
#18010
[sdkgen/go] Fix writing of go.mod files for parameterized packages
#17923
[auto/{go,nodejs,python}] Expose
whoamitoken information in automation API types#17735
[cli/install] Don't recreate virtualenvs when using venv
#17892
[auto/nodejs] Don't hang indefinitely on failed inputs
#17899
[auto/python] Catch BaseException in automation API server
#17909
[sdk/nodejs] Throw from
output()on circular structures#17852
[sdkgen/{nodejs,python}] Bump the minimum SDK version to 3.142.0
#17997
Miscellaneous
[pkg] Upgrade pulumi-java to v0.19.0
#18014
[sdk/python] Switch to ruff for linting and formatting
#17882
[sdkgen] Include parameterization details in pulumi-plugin.json
#17867