Skip to content

[ci] Bump the production-dependencies group across 1 directory with 12 updates#6476

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-cfc74e6f45
Open

[ci] Bump the production-dependencies group across 1 directory with 12 updates#6476
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-cfc74e6f45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 12 updates in the /cluster/pulumi directory:

Package From To
@google-cloud/sql 0.24.0 0.24.1
@dotenvx/dotenvx 1.71.0 1.75.1
@google-cloud/storage 7.19.0 7.21.0
@pulumi/gcp 9.18.0 9.30.0
@pulumi/pulumi 3.230.0 3.252.0
@pulumi/random 4.19.2 4.21.0
@pulumi/github 6.13.1 6.14.0
auth0 5.6.0 5.14.0
zod 4.3.6 4.4.3
@pulumi/auth0 3.39.0 3.48.0
semver 7.8.1 7.8.5
@pulumi/policy 1.20.0 1.21.0

Updates @google-cloud/sql from 0.24.0 to 0.24.1

Changelog

Sourced from @​google-cloud/sql's changelog.

0.24.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)
Commits

Updates @dotenvx/dotenvx from 1.71.0 to 1.75.1

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v1.75.1

see CHANGELOG

v1.75.0

see CHANGELOG

v1.74.3

see CHANGELOG

v1.74.2

see CHANGELOG

v1.74.1

see CHANGELOG

v1.74.0

see CHANGELOG

v1.73.1

see CHANGELOG

v1.73.0

see CHANGELOG

v1.72.0

see CHANGELOG

v1.71.3

see CHANGELOG

v1.71.2

see CHANGELOG

v1.71.1

see CHANGELOG

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

1.75.1 (2026-06-20)

Changed

  • Publish as named binaries (#851)

Removed

  • Remove references to dotenvx-vlt (now dotenvx-armor) (#849)

1.75.0 (2026-06-19)

Changed

  • Swap in @dotenvx/primitives (#848)
  • ext commands become first-class(#847)

1.74.4 (2026-06-19)

Removed

  • Remove separately published @dotenvx/next-env from this repo (#846)

1.74.3 (2026-06-19)

Changed

  • Bundle dotenvx with @dotenvx/next-env for user convenience (#845)

1.74.2 (2026-06-18)

Changed

  • Fix provenance for @dotenvx/next-env (#844)

1.74.1 (2026-06-18)

Added

  • Add README for @dotenvx/next-env (#843)

1.74.0 (2026-06-18)

Added

1.73.1 (2026-06-16)

Changed

... (truncated)

Commits

Updates @google-cloud/storage from 7.19.0 to 7.21.0

Changelog

Sourced from @​google-cloud/storage's changelog.

7.21.0 (2026-06-03)

Features

  • storage: Enable CRC32C validation by default in transfer manager (#8350) (86086a6)

Bug Fixes

7.20.0 (2026-05-11)

Features

  • storage: Implement Object Contexts with advanced filtering and validation (#7548) (d60757e)
  • storage: Implement robust path validation and structured skip reporting (#7546) (113d05c)
  • storage: Set CRC32C as the default checksum option (#7547) (1a693aa)

Bug Fixes

Commits
  • 106bb0e chore(main): release storage 7.21.0 (#8435)
  • b7433b3 chore: clean up linkinator configurations and test scripts across monorepo (#...
  • 3ec901e fix(deps): remove vulnerable dependency uuid (#8120)
  • 86086a6 feat(storage): enable CRC32C validation by default in transfer manager (#8350)
  • 92b328b chore: release main (#8242)
  • 9fd76ef fix: bump all node submodules (#8178)
  • 1a44778 fix: resolve flakiness in Service retry system tests (#7945)
  • d60757e feat(storage): implement Object Contexts with advanced filtering and validati...
  • 1a693aa feat(storage): Set CRC32C as the default checksum option (#7547)
  • 113d05c feat(storage): Implement robust path validation and structured skip reporting...
  • Additional commits viewable in compare view

Updates @pulumi/gcp from 9.18.0 to 9.30.0

Release notes

Sourced from @​pulumi/gcp's releases.

v9.30.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.29.0...v9.30.0

v9.29.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.28.0...v9.29.0

v9.28.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.27.0...v9.28.0

v9.27.0

What's Changed

... (truncated)

Commits

Updates @pulumi/pulumi from 3.230.0 to 3.252.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.252.0

3.252.0 (2026-07-13)

Features

  • [auto] Add import to the generated automation APIs for NodeJS, Python and Go #23876
  • [cli] Improve the error message when using Pulumi ESC with a DIY backend to suggest logging into Pulumi Cloud #23811
  • [cli] Show command name for cli commands when running any command that lists logs #23889
  • [cli/display] Render strings containing non-UTF8 bytes as b"" in diffs and JSON output #23870
  • [cli/env] Add a --reason flag to pulumi env open-request to explain the request to approvers #23802
  • [cli/state] Improve the error message when a resource URN is not found in the state for pulumi state commands, suggesting close-matching URNs and how to list the URNs in the stack #23812
  • [pcl] Allow binding hooks to a resource's onError option #23838
  • [sdk/nodejs] Add a production runtime option for Node.js projects. When set to true in Pulumi.yaml, pulumi install skips devDependencies (npm --production, pnpm --production, yarn --production). #23849

Bug Fixes

  • [cli] Exit with a non-zero code when a command group such as pulumi env is given an unknown subcommand or no subcommand at all #23814
  • [cli] Fix a panic when displaying a stack-level policy violation #23692
  • [cli] Make reading non-secret stack outputs and running pulumi about no longer require the passphrase for passphrase-encrypted stacks #23820
  • [cli] Avoid pulumi logs <command> showing the log for the currently running command #23887
  • [cli/do] Fix calling delete on PF resources that need read called first #23837
  • [cli/env] Submit the change request created by pulumi env open-request so it is pending approval instead of being left as an unsubmitted draft #23802
  • [cli/neo] Fix the initial prompt sometimes rendering above the welcome banner in pulumi neo #23831
  • [engine] Fix importing a resource whose import identifier differs from its canonical ID causes the resource to be deleted on a subsequent update #23834
  • [programgen] Deduplicate identical apply arguments to avoid unnecessary Promise.all/pulumi.all/Output.All in generated code #22293
  • [sdk] Failed resource registrations will return faulted outputs, not unknown outputs #23844
  • [sdk/nodejs] Fix empty node_modules folders in serialized function archives when using pnpm or symlinked workspace packages #23866

Miscellaneous

  • [sdk/nodejs] Report the TypeScript version in pulumi about #23850
  • [sdk/nodejs] Update OpenTelemetry dependencies #23855

v3.251.0

3.251.0 (2026-07-08)

Bug Fixes

  • [cli] Show a retain marker for retain-on-delete resources in --diff output #23754
  • [cli] Don't miscopy out archives #23798

Miscellaneous

  • [cli] Add pulumi neo --debug-update and pulumi neo --debug-preview flags to investigate a failed update or preview, suggested in the failure output #23499

Improvements

  • [cli/convert] Add an ecosystem field to converter mapping requests so a converter can request mappings for the ecosystem it consumes rather than its own name #23804
  • [cli/deployment] pulumi deployment settings no longer writes the local Pulumi.<stack>.deploy.yaml file: the experimental init, pull, configure, and env subcommands have been removed, and the CLI no longer calls the deployment-settings encrypt endpoint. get/edit/destroy continue to manage settings directly in Pulumi Cloud #23480
  • [cli/deployment] The deployment settings file (Pulumi.<stack>.deploy.yaml) has been removed entirely. The experimental pulumi deployment settings push (update/up) command, the --config-file flag, and the SDK helpers that read the file have been removed. Manage deployment settings directly in Pulumi Cloud with pulumi deployment settings get, edit, and destroy #23480

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.252.0 (2026-07-13)

Features

  • [auto] Add import to the generated automation APIs for NodeJS, Python and Go #23876

Bug Fixes

  • [cli] Exit with a non-zero code when a command group such as pulumi env is given an unknown subcommand or no subcommand at all #23814
  • [cli] Fix a panic when displaying a stack-level policy violation #23692
  • [cli] Make reading non-secret stack outputs and running pulumi about no longer require the passphrase for passphrase-encrypted stacks #23820
  • [cli] Avoid pulumi logs <command> showing the log for the currently running command #23887

Improvements

  • [cli] Improve the error message when using Pulumi ESC with a DIY backend to suggest logging into Pulumi Cloud #23811
  • [cli] Show command name for cli commands when running any command that lists logs #23889
  • [cli/display] Render strings containing non-UTF8 bytes as b"" in diffs and JSON output #23870

Bug Fixes

  • [cli/do] Fix calling delete on PF resources that need read called first #23837
  • [cli/env] Submit the change request created by pulumi env open-request so it is pending approval instead of being left as an unsubmitted draft #23802

Improvements

  • [cli/env] Add a --reason flag to pulumi env open-request to explain the request to approvers #23802

Bug Fixes

  • [cli/neo] Fix the initial prompt sometimes rendering above the welcome banner in pulumi neo #23831

Improvements

  • [cli/state] Improve the error message when a resource URN is not found in the state for pulumi state commands, suggesting close-matching URNs and how to list the URNs in the stack #23812

Bug Fixes

  • [engine] Fix importing a resource whose import identifier differs from its canonical ID causes the resource to be deleted on a subsequent update #23834

Improvements

  • [pcl] Allow binding hooks to a resource's onError option #23838

Bug Fixes

  • [programgen] Deduplicate identical apply arguments to avoid unnecessary Promise.all/pulumi.all/Output.All in generated code #22293
  • [sdk] Failed resource registrations will return faulted outputs, not unknown outputs #23844

Features

... (truncated)

Commits
  • 0b0744b Remove the secrets SDK codegen test, covered by conformance tests (#23893)
  • 3560799 Fix install package test (#23895)
  • 1d42d5b Add import to the generated automation APIs (#23876)
  • 37bab5b Fix empty node_modules folders in serialized function archives when using pnp...
  • 37ac432 Add a conformance test for the recover function (#23881)
  • 1fecffa Add a production runtime option for Node.js projects (#23849)
  • da800a2 Fail outputs on failed creates (#23844)
  • 24c0931 Update OpenTelemetry dependencies (#23855)
  • 02a295a Report the TypeScript version in pulumi about (#23850)
  • d811644 Configure dependency cooldowns for npm, pnpm, uv, pip, poetry and bun (#23816)
  • Additional commits viewable in compare view

Updates @pulumi/random from 4.19.2 to 4.21.0

Release notes

Sourced from @​pulumi/random's releases.

v4.21.0

What's Changed

Full Changelog: pulumi/pulumi-random@v4.20.0...v4.21.0

v4.20.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @pulumi/github from 6.13.1 to 6.14.0

Release notes

Sourced from @​pulumi/github's releases.

v6.14.0

What's Changed

Full Changelog: pulumi/pulumi-github@v6.13.1...v6.14.0

Commits

Updates auth0 from 5.6.0 to 5.14.0

Release notes

Sourced from auth0's releases.

v5.13.0

Added

  • feat: add phone provider protection, token vault access, and cross-app connection support #1359 (fern-api[bot])

Fixed

v5.12.0

Added

  • feat: add tenant security headers, minute-based session lifetimes, and OIDC session expiry #1351 (developerkunal)

Fixed

v5.11.0

Added

  • feat: add rate limit policies, group/org role management, and user effective roles/permissions #1348 (fern-api[bot])

v5.10.0

Added

  • feat: add passkey authentication methods, online access support, and improved error handling #1342 (fern-api[bot])

v5.9.1

Security

v5.9.0

Added

  • feat: add events SSE streaming, bulk refresh token revocation, and query string builder #1331 (fern-api[bot])

v5.8.0

⚠️ BREAKING CHANGES

  • Removed invitation_landing_client_id and allowed_roles fields from ClientMyOrganizationPatchConfiguration, ClientMyOrganizationPostConfiguration, and ClientMyOrganizationResponseConfiguration #1328 (fern-api[bot])

Added

  • Session Transfer Delegation: new delegation property on ClientSessionTransferConfiguration with ClientSessionTransferDelegationConfiguration interface supporting allow_delegated_access and enforce_device_binding options #1328 (fern-api[bot])
  • Self-Service SSO Ticket Features: new enabled_features property on CreateSelfServiceProfileSsoTicketRequestContent with SelfServiceProfileSsoTicketEnabledFeatures interface supporting sso, domain_verification, and provisioning toggles #1328 (fern-api[bot])
  • Self-Service SSO Ticket Domain Aliases: new pending_domains field on SelfServiceProfileSsoTicketDomainAliasesConfig #1328 (fern-api[bot])

Changed

... (truncated)

Changelog

Sourced from auth0's changelog.

v5.14.0 (2026-07-09)

Full Changelog

Added

Fixed

  • fix: upgrade jose from v4 to v5 to fix pnpm trust policy install failure #1362 (ankita10119)

v5.13.0 (2026-06-24)

Full Changelog

Description has been truncated

@dependabot
[ci] Bump the production-dependencies group across 1 directory with 1…
c99df42 
…2 updates

Bumps the production-dependencies group with 12 updates in the /cluster/pulumi directory:

| Package | From | To |
| --- | --- | --- |
| [@google-cloud/sql](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-sql) | `0.24.0` | `0.24.1` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.71.0` | `1.75.1` |
| [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `7.21.0` |
| [@pulumi/gcp](https://github.com/pulumi/pulumi-gcp) | `9.18.0` | `9.30.0` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.230.0` | `3.252.0` |
| [@pulumi/random](https://github.com/pulumi/pulumi-random) | `4.19.2` | `4.21.0` |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.13.1` | `6.14.0` |
| [auth0](https://github.com/auth0/node-auth0) | `5.6.0` | `5.14.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@pulumi/auth0](https://github.com/pulumi/pulumi-auth0) | `3.39.0` | `3.48.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.1` | `7.8.5` |
| [@pulumi/policy](https://github.com/pulumi/pulumi-policy) | `1.20.0` | `1.21.0` |



Updates `@google-cloud/sql` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-sql/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/v0.24.1/packages/google-cloud-sql)

Updates `@dotenvx/dotenvx` from 1.71.0 to 1.75.1
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v1.71.0...v1.75.1)

Updates `@google-cloud/storage` from 7.19.0 to 7.21.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/storage-v7.21.0/handwritten/storage)

Updates `@pulumi/gcp` from 9.18.0 to 9.30.0
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v9.18.0...v9.30.0)

Updates `@pulumi/pulumi` from 3.230.0 to 3.252.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.252.0/sdk/nodejs)

Updates `@pulumi/random` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.19.2...v4.21.0)

Updates `@pulumi/github` from 6.13.1 to 6.14.0
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.13.1...v6.14.0)

Updates `auth0` from 5.6.0 to 5.14.0
- [Release notes](https://github.com/auth0/node-auth0/releases)
- [Changelog](https://github.com/auth0/node-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/node-auth0@v5.6.0...v5.14.0)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@pulumi/auth0` from 3.39.0 to 3.48.0
- [Release notes](https://github.com/pulumi/pulumi-auth0/releases)
- [Changelog](https://github.com/pulumi/pulumi-auth0/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-auth0@v3.39.0...v3.48.0)

Updates `semver` from 7.8.1 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.1...v7.8.5)

Updates `@pulumi/policy` from 1.20.0 to 1.21.0
- [Changelog](https://github.com/pulumi/pulumi-policy/blob/main/CHANGELOG.md)
- [Commits](pulumi/pulumi-policy@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: "@google-cloud/sql"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@google-cloud/storage"
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/gcp"
  dependency-version: 9.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.252.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/random"
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: auth0
  dependency-version: 5.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/auth0"
  dependency-version: 3.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@pulumi/policy"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the static Used to label PRs for which static tests suffice label Jul 20, 2026
@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploy upgrade pipeline triggered for Commit c99df42c2bc1d1f5ecacf9e3899bf8a2fb46abd6 in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/75152

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@martinflorian-da martinflorian-da

@mblaze-da mblaze-da

@krzysztofczyz-da krzysztofczyz-da

Labels

static Used to label PRs for which static tests suffice

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@martinflorian-da @mblaze-da @krzysztofczyz-da