[Snyk] Upgrade @pulumi/pulumi from 3.74.0 to 3.76.1 #5
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @pulumi/pulumi from 3.74.0 to 3.76.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: @pulumi/pulumi
chore: post-release go.mod updates
3.76.0 (2023-07-20)
Features
[cli/state] Adds
pulumi state edit
an experimental developer utility for manually editing state files.#13462
[programgen] Allow binding unsupported range and collection types in non-strict mode for pulumi convert
#13459
[programgen/nodejs] Improve static typing of config variables in main program
#13496
[sdk/{go,nodejs,python}] Add support for reporting resource source positions
#13449
[sdk/{nodejs,python}] Support explicit providers for packaged components
#13282
Bug Fixes
[cli/config] Pulumi no longer falls back on old config when config resolution fails (except for
pulumi destroy --stack <stack-name>
where the config may be unavailable).#13511
[cli/new] Fix the use of uninitalized backend when running
new
with --generate-only. When --generate-only is setnew
will skip all checks that require the backend.#13530
[engine] Fix alias resoloution when parent alieses where also aliased.
#13480
[engine] Validate URNs passed via ResourceOptions are valid.
#13531
[engine] Add a missing lock that could cause a concurrent map read/write panic.
#13532
[programgen/go] Fix panic in GenerateProject when version is not set in schema
#13488
[sdkgen/{go,nodejs}] Fix ReplaceOnChanges being dropped in Go and NodeJS codegen.
#13519
[programgen/nodejs] Fix interpolated strings used as keys of maps
#13514
[cli/plugin] Automatically install pulumiverse provider plugins during convert.
#13486
[cli/plugin] Fix lookup of side-by-side binaries when PULUMI_IGNORE_AMBIENT_PLUGINS is set.
#13521
[sdk/python] Move some global state to context state for parallel updates.
#13458
Miscellaneous
[programgen] Consistently use the same non-strict bind options when applicable
#13479
[programgen] Propagate SkipRangeTypechecking option down to program components
#13493
3.75.0 (2023-07-12)
Features
[programgen/{dotnet,go,nodejs,python}] Allow generating code for unknown invokes (tf data sources) in non-strict mode
#13448
[programgen/go] Adds explicit package versioning to Golang codegen
#13136
Bug Fixes
[sdk/go] Fix downloading of unimported external plugins.
#13455
[cli/new]
pulumi new -s 'org/project/stack'
checks the specified organization for project existence rather than the currentUser.#13234
[cli/new] When providing a
--stack
and--name
topulumi new
, the project names must match before creating Pulumi.yaml.#13250
[cli/plugin] Fix interpolation of vesion into http plugin source URLs.
#13447
[sdk/nodejs] Add dependency on @ opentelemetry/instrumentation
#13278
[sdk/nodejs] Node.js dynamic providers mark serialized functions as secret if they capture any secrets
#13329
[sdk/python] Python dynamic provider serialized code is now saved to state as secret.
#13315
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs