Dependency Dashboard

[pulumi-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Pin dependencies (@types/node, actions/checkout, actions/setup-go, goreleaser/goreleaser-action, jaxxstorm/action-install-gh-release, typescript)
• Update github.com/pgavlin/goldmark digest to 85adcc7
• Update golang.org/x/exp digest to 74f9aab
• Update k8s.io/kube-openapi digest to aa012df
• Update k8s.io/utils digest to ff6756f
• Update module dario.cat/mergo to v1.0.2
• Update module github.com/charmbracelet/x/ansi to v0.11.7
• Update module github.com/fxamacker/cbor/v2 to v2.9.2
• Update module github.com/gosuri/uilive to v0.0.4
• Update module github.com/klauspost/compress to v1.18.6
• Update module github.com/mattn/go-colorable to v0.1.14
• Update module github.com/mattn/go-isatty to v0.0.22
• Update module github.com/mattn/go-runewidth to v0.0.23
• Update module github.com/pgavlin/fx/v2 to v2.0.12
• Update module github.com/segmentio/asm to v1.2.1
• Update module github.com/skeema/knownhosts to v1.3.2
• Update dependency go to 1.26.x
• Update go-openapi packages (github.com/go-openapi/jsonpointer, github.com/go-openapi/swag, github.com/go-openapi/swag/cmdutils, github.com/go-openapi/swag/conv, github.com/go-openapi/swag/fileutils, github.com/go-openapi/swag/jsonname, github.com/go-openapi/swag/jsonutils, github.com/go-openapi/swag/loading, github.com/go-openapi/swag/mangling, github.com/go-openapi/swag/netutils, github.com/go-openapi/swag/stringutils, github.com/go-openapi/swag/typeutils, github.com/go-openapi/swag/yamlutils)
• Update jaxxstorm/action-install-gh-release action to v1.14.0
• Update kubernetes packages to v0.36.1 (k8s.io/api, k8s.io/apimachinery, k8s.io/cli-runtime, k8s.io/client-go, k8s.io/kubectl)
• Update module github.com/cyphar/filepath-securejoin to v0.6.1
• Update module github.com/edsrzf/mmap-go to v1.2.0
• Update module github.com/fatih/color to v1.19.0
• Update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.29.0
• Update module github.com/hashicorp/go-version to v1.9.0
• Update module github.com/hashicorp/hcl/v2 to v2.24.0
• Update module github.com/kevinburke/ssh_config to v1.6.0
• Update module github.com/lucasb-eyer/go-colorful to v1.4.0
• Update module github.com/pjbgf/sha1cd to v0.6.0
• Update module github.com/ProtonMail/go-crypto to v1.4.1
• Update module github.com/segmentio/encoding to v0.5.4
• Update module github.com/zclconf/go-cty to v1.18.1
• Update module go.opentelemetry.io/collector/featuregate to v1.58.0
• Update module go.opentelemetry.io/collector/pdata to v1.58.0
• Update module golang.org/x/crypto to v0.52.0
• Update module golang.org/x/mod to v0.36.0
• Update module golang.org/x/sys to v0.45.0
• Update module golang.org/x/term to v0.43.0
• Update module golang.org/x/text to v0.37.0
• Update module golang.org/x/tools to v0.45.0
• Update module google.golang.org/grpc to v1.81.1
• Update module sigs.k8s.io/kustomize/api to v0.21.1
• Update module sigs.k8s.io/kustomize/kyaml to v0.21.1
• Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.0
• Update opentelemetry-go monorepo to v1.43.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace)
• Update actions/checkout action to v6
• Update actions/setup-go action to v6
• Update dependency @types/node to v24
• Update dependency typescript to v6
• Update goreleaser/goreleaser-action action to v7
• Update jaxxstorm/action-install-gh-release action to v3
• Update module github.com/apparentlymart/go-textseg/v15 to v16
• Update module github.com/charmbracelet/bubbles to v2
• Update module github.com/charmbracelet/bubbletea to v2
• Update module github.com/charmbracelet/lipgloss to v2
• Update module github.com/go-git/gcfg to v2
• Update module github.com/onsi/ginkgo to v2
• Update module github.com/pgavlin/fx to v2
• Update module github.com/santhosh-tekuri/jsonschema/v5 to v6
• Update module go.yaml.in/yaml/v2 to v3
• Update module gopkg.in/evanphx/json-patch.v4 to v5
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update google.golang.org/genproto/googleapis/api digest to 0a33c5d
• Update google.golang.org/genproto/googleapis/rpc digest to 0a33c5d

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update vulnerable dependencies [SECURITY] (github.com/go-git/go-billy/v5, github.com/go-git/go-git/v5, go.opentelemetry.io/otel/sdk, golang.org/x/net)
• Update first-party Pulumi dependencies (@pulumi/pulumi, github.com/pulumi/esc, github.com/pulumi/pulumi-kubernetes/provider/v4, github.com/pulumi/pulumi/pkg/v3, pulumi/esc-action)

Detected dependencies

github-actions

.github/workflows/ci.yml

• actions/checkout v2
• actions/setup-go v2
• go 1.24.x

.github/workflows/release.yml

• pulumi/esc-action v1@6cf9520e68354d86f81c455e8d43eabd58f5c9f5
• actions/checkout v2
• jaxxstorm/action-install-gh-release v1.5.0
• actions/setup-go v2
• goreleaser/goreleaser-action v2
• go 1.19.x

gomod

go.mod

• go 1.25.8
• github.com/fatih/color v1.16.0
• github.com/mbrlabs/uilive v0.0.0-20170420192653-e481c8e66f15@e481c8e66f15
• github.com/pulumi/pulumi-kubernetes/provider/v4 v4.0.0-20260320064447-d4759d6fb0cb@d4759d6fb0cb
• github.com/spf13/cobra v1.10.2
• github.com/yudai/gojsondiff v1.0.0
• k8s.io/apimachinery v0.35.2
• k8s.io/client-go v0.35.2
• dario.cat/mergo v1.0.1
• github.com/Microsoft/go-winio v0.6.2
• github.com/ProtonMail/go-crypto v1.1.6
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/atotto/clipboard v0.1.4
• github.com/aymanbagabas/go-osc52/v2 v2.0.1
• github.com/blang/semver v3.5.1+incompatible
• github.com/blang/semver/v4 v4.0.0
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/charmbracelet/bubbles v1.0.0
• github.com/charmbracelet/bubbletea v1.3.10
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/lipgloss v1.1.0
• github.com/charmbracelet/x/ansi v0.11.6
• github.com/charmbracelet/x/cellbuf v0.0.15
• github.com/charmbracelet/x/term v0.2.2
• github.com/cheggaaa/pb v1.0.29
• github.com/clipperhouse/displaywidth v0.11.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/cloudflare/circl v1.6.3
• github.com/cyphar/filepath-securejoin v0.4.1
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/djherbis/times v1.6.0
• github.com/edsrzf/mmap-go v1.1.0
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/emirpasic/gods v1.18.1
• github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f@1c3628e74d0f
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f@1de76d718b3f
• github.com/fxamacker/cbor/v2 v2.9.0
• github.com/go-errors/errors v1.5.1
• github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376@3a3c6141e376
• github.com/go-git/go-billy/v5 v5.6.2
• github.com/go-git/go-git/v5 v5.16.5
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/go-openapi/jsonpointer v0.22.5
• github.com/go-openapi/jsonreference v0.21.5
• github.com/go-openapi/swag v0.25.5
• github.com/go-openapi/swag/cmdutils v0.25.5
• github.com/go-openapi/swag/conv v0.25.5
• github.com/go-openapi/swag/fileutils v0.25.5
• github.com/go-openapi/swag/jsonname v0.25.5
• github.com/go-openapi/swag/jsonutils v0.25.5
• github.com/go-openapi/swag/loading v0.25.5
• github.com/go-openapi/swag/mangling v0.25.5
• github.com/go-openapi/swag/netutils v0.25.5
• github.com/go-openapi/swag/stringutils v0.25.5
• github.com/go-openapi/swag/typeutils v0.25.5
• github.com/go-openapi/swag/yamlutils v0.25.5
• github.com/gogo/protobuf v1.3.2
• github.com/golang/glog v1.2.5
• github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8
• github.com/google/gnostic-models v0.7.1
• github.com/google/uuid v1.6.0
• github.com/gosuri/uilive v0.0.0-20170323041506-ac356e6e42cd@ac356e6e42cd
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
• github.com/grpc-ecosystem/grpc-opentracing v0.0.0-20180507213350-8e809c8a8645@8e809c8a8645
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-version v1.8.0
• github.com/hashicorp/hcl/v2 v2.22.0
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99@d14ea06fba99
• github.com/json-iterator/go v1.1.12
• github.com/kevinburke/ssh_config v1.2.0
• github.com/klauspost/compress v1.18.0
• github.com/lucasb-eyer/go-colorful v1.3.0
• github.com/mattn/go-colorable v0.1.13
• github.com/mattn/go-isatty v0.0.20
• github.com/mattn/go-localereader v0.0.1
• github.com/mattn/go-runewidth v0.0.21
• github.com/mitchellh/go-ps v1.0.0
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00@205db1a8cc00
• github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6@276c6243b2f6
• github.com/muesli/cancelreader v0.2.2
• github.com/muesli/termenv v0.16.0
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/natefinch/atomic v1.0.1
• github.com/onsi/ginkgo v1.16.5
• github.com/opentracing/basictracer-go v1.1.0
• github.com/opentracing/opentracing-go v1.2.0
• github.com/pgavlin/fx v0.1.6
• github.com/pgavlin/fx/v2 v2.0.10
• github.com/pgavlin/goldmark v1.1.33-0.20200616210433-b5eb04559386@b5eb04559386
• github.com/pjbgf/sha1cd v0.3.2
• github.com/pkg/errors v0.9.1
• github.com/pkg/term v1.1.0
• github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231@75f619a67231
• github.com/pulumi/esc v0.23.0
• github.com/pulumi/pulumi/pkg/v3 v3.228.0
• github.com/rivo/uniseg v0.4.7
• github.com/rogpeppe/go-internal v1.14.1
• github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06@525f6e181f06
• github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
• github.com/segmentio/asm v1.2.0
• github.com/segmentio/encoding v0.3.5
• github.com/sergi/go-diff v1.4.0
• github.com/skeema/knownhosts v1.3.1
• github.com/spf13/pflag v1.0.10
• github.com/texttheater/golang-levenshtein v1.0.1
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/uber/jaeger-lib v2.4.1+incompatible
• github.com/x448/float16 v0.8.4
• github.com/xanzy/ssh-agent v0.3.3
• github.com/xlab/treeprint v1.2.0
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e
• github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82@ecda9a501e82
• github.com/yudai/pp v2.0.1+incompatible
• github.com/zclconf/go-cty v1.14.4
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/collector/featuregate v1.54.0
• go.opentelemetry.io/collector/pdata v1.54.0
• go.opentelemetry.io/otel v1.42.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0
• go.opentelemetry.io/otel/metric v1.42.0
• go.opentelemetry.io/otel/sdk v1.42.0
• go.opentelemetry.io/otel/trace v1.42.0
• go.opentelemetry.io/proto/otlp v1.10.0
• go.uber.org/atomic v1.11.0
• go.uber.org/multierr v1.11.0
• go.yaml.in/yaml/v2 v2.4.4
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.49.0
• golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa@3dfff04db8fa
• golang.org/x/mod v0.33.0
• golang.org/x/net v0.52.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.20.0
• golang.org/x/sys v0.42.0
• golang.org/x/term v0.41.0
• golang.org/x/text v0.35.0
• golang.org/x/time v0.15.0
• golang.org/x/tools v0.42.0
• google.golang.org/genproto/googleapis/api v0.0.0-20260319201613-d00831a3d3e7@d00831a3d3e7
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260319201613-d00831a3d3e7@d00831a3d3e7
• google.golang.org/grpc v1.79.3
• google.golang.org/protobuf v1.36.11
• gopkg.in/evanphx/json-patch.v4 v4.13.0
• gopkg.in/inf.v0 v0.9.1
• gopkg.in/warnings.v0 v0.1.2
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.2
• k8s.io/cli-runtime v0.35.2
• k8s.io/klog/v2 v2.140.0
• k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf@5b3e3fdb0acf
• k8s.io/kubectl v0.35.2
• k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2@b8788abfbbc2
• lukechampine.com/frand v1.5.1
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/kustomize/api v0.20.1
• sigs.k8s.io/kustomize/kyaml v0.20.1
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2
• sigs.k8s.io/yaml v1.6.0

npm

examples/trivial-pulumi-example/package.json

• @pulumi/pulumi 3.228.0
• @types/node ^9.3.0
• typescript ^2.5.3

examples/trivial-service-trace-example/package.json

• @pulumi/pulumi 3.228.0
• @types/node ^9.3.0
• typescript ^2.5.3

---

• Check this box to trigger a request for Renovate to run again on this repository