Skip to content

Update all dependencies#25

Open
missingcharacter wants to merge 1 commit into
mainfrom
renovate/all
Open

Update all dependencies#25
missingcharacter wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@missingcharacter

@missingcharacter missingcharacter commented Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6 → v7
gradle minor 9.5.1 → 9.6.0
helm patch 4.2.1 → 4.2.2
node (source) minor 24.16.0 → 24.17.0
pulumi minor 3.246.0 → 3.247.0
python minor 3.13.14 → 3.14.6
terraform minor 1.3.9 → 1.15.6
uv patch 0.11.21 → 0.11.22

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

v7

Compare Source

gradle/gradle (gradle)

v9.6.0

Compare Source

helm/helm (helm)

v4.2.2: Helm v4.2.2

Compare Source

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32214

Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881c (George Jenkins)

Full Changelog: helm/helm@v4.2.1...v4.2.2

nodejs/node (node)

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits
pulumi/pulumi (pulumi)

v3.247.0

Compare Source

Bug Fixes
  • [cli] Ensure pulumi logout clears the current tokenless backend in coding agent environments #​23540
  • [cli] Read Git metadata correctly in repositories that enable the worktreeConfig extension, such as those hosted on Azure DevOps #​23535
Improvements
  • [cli] Respect PULUMI_SKIP_CONFIRMATIONS whenever we ask for confirmation #​23607
  • [cli] Use list and remove as the canonical names for list/remove commands, with ls and rm as aliases #​23608
Features
  • [cli/config] Add --raw flag to pulumi config set to avoid stripping newlines when input is piped through stdin #​23593
Bug Fixes
  • [cli/display] Show interrupted steps as interrupted instead of as finished #​23510
Features
  • [cli/do] Add --provider flag to pull provider config to use from existing provider state #​23560
  • [cli/engine] Resource providers now receive the active login's API address and access token through PULUMI_API and PULUMI_ACCESS_TOKEN #​23589
  • [cli/neo] Add a --disable-integrations flag to pulumi neo that runs the task with no integration credentials #​23531
Bug Fixes
  • [cli/plugin] Allow plugin tarballs containing symlinks #​23587
Miscellaneous
  • [cli/plugin] Document the pulumi plugin run command by including it in the generated CLI docs #​23559
Improvements
  • [docs] Generate redirects for command aliases #​23610
Features
  • [engine] Send the address of a mapper service to resource providers as part of the provider handshake
Improvements
  • [engine] Serve raw schema bytes from the engine's schema loader service instead of binding and re-marshaling the full schema on every request #​23551
Features
  • [programgen/go] Support functions with multiArgumentInputs #​23554
  • [programgen/python] Support functions with multiArgumentInputs #​23574
Improvements
  • [sdk/go] The plugin.Host interface is now stateless with respect to workspaces; host methods that boot or resolve plugins take a plugin.Context carrying the workspace state, and closing a plugin.Context no longer closes a host that was passed in to its constructor #​23508
Features
  • [sdk/nodejs] Registered resources can now be retrieved from the mock monitor for test assertions #​20539
Bug Fixes
  • [sdk/nodejs] Fix pulumi package add failing with pnpm when the generated SDK has a scoped package name (@-prefix), caused by pnpm's pkg set rejecting @ in dot-notation property paths #​23365
Improvements
  • [sdk/nodejs] Allow running the postinstall script for local SDKs under npm 12 #​23568
Features
  • [sdk/python] Add Output.recover to catch and recover from exceptions in outputs #​23591
Improvements
  • [sdk/python] Add register_package helper to cache package references per deployment #​22459
Features
  • [sdkgen] Adds support for language agnostic cross references in schemas. Use the form {{% ref <target> %}} to reference other schema components in markdown descriptions. Such as `{{% ref #​21369
  • [sdkgen] Add extension parameterization to the package schema model #​23536
Miscellaneous
  • [sdkgen] Modules can no longer be nested under the index module, this was never well supported and is now a strict bind error #​23436
Features
  • [sdkgen/go] Support functions with multiArgumentInputs #​23554
  • [sdkgen/python] Support functions with multiArgumentInputs #​23574
  • [cli/auth] When credentials.json carries an OAuth refresh token, the CLI now auto-refreshes the access token on 401 and retries the request once, instead of returning a "login required" error #​23430
Bug Fixes
python/cpython (python)

v3.14.6

Compare Source

v3.14.5

Compare Source

v3.14.4

Compare Source

v3.14.3

Compare Source

v3.14.2

Compare Source

v3.14.1

Compare Source

v3.14.0

Compare Source

hashicorp/terraform (terraform)

v1.15.6

Compare Source

1.15.6 (June 10, 2026)

BUG FIXES:

  • Fixed an issue where resources being removed from state via removed block were incorrectly listed under planned_values in json representations of the plan file. (#​38665)

  • console: Fixed a panic caused by evaluating an expression involving deprecated values (#​38676)

  • Fix exit code for plan, query, and refresh commands for variable-related errors (#​38685)

  • Fix two module installation edge cases with null and sensitive/ephemeral module sources (#​38704)

v1.15.5

Compare Source

1.15.5 (May 27, 2026)

ENHANCEMENTS:

  • Support for module version evaluating to null (in the context of dynamic module sources) (#​38632)

BUG FIXES:

  • Fix crash on init for modules with empty source (#​38628)

v1.15.4

Compare Source

1.15.4 (May 20, 2026)

NEW FEATURES:

  • We now produce builds for Linux s390x (zLinux) (#​38615)

BUG FIXES:

  • init: Prevent provider binaries from being installed into symlinked directories (#​38611)

v1.15.3

Compare Source

1.15.3 (May 13, 2026)

BUG FIXES:

  • stacks: Fixed a bug that prevented migrating resources under multiple layers of module nesting with implicit provider configuration. (#​38528)

  • cloud backend will now forward -generate-config-out flag usage to query create request (#​38539)

  • Fix crash during provider installation when there is no config (#​38560)

v1.15.2

Compare Source

1.15.2 (May 6, 2026)

ENHANCEMENTS:

  • stacks: add ouput values to plan component instance change description (#​38360)

BUG FIXES:

  • Avoid printing warnings from 'terraform output -json' (#​38530)

v1.15.1

Compare Source

1.15.1 (May 1, 2026)

BUG FIXES:

  • Fixed crash when configuration has an invalid action_trigger nested block in data or ephemeral lifecycle blocks (#​38402)

  • validate: Removed validation of attributes inside backend blocks due to incompatibility with workflows using the -backend-config flag. (#​38466)

  • Fix non-const variable checks on init (#​38470)

  • Avoid warnings in 'terraform output -raw' (#​38487)

  • Ignore undeclared variable values from the cloud backend (#​38490)

  • Fix panic for types modules with no expanded instances (#​38491)

  • Fixed "unknown provider function" errors occurring during init (#​38472)

  • init: Fixed a bug that impacted use of provider pre-releases during init (#​38496)

v1.15.0

Compare Source

1.15.0 (April 29, 2026)

NEW FEATURES:

  • We now produce builds for Windows ARM64 (#​32719)

  • You can set a deprecated attribute on variable and output blocks to indicate that they are deprecated. This will produce warnings when passing in a value for a deprecated variable or when referencing a deprecated output. (#​38001)

  • backend/s3: Support authentication via aws login (#​37976)

  • validate: The validate command now checks the backend block. This ensures the backend type exists, that all required attributes are present, and that the backend's own validation logic passes. (#​38021)

  • convert function, which allows for precise inline type conversions (#​38160)

  • Terraform now supports variables and locals in module source and version attributes (#​38217)

ENHANCEMENTS:

  • config: output blocks now can have an explicit type constraints (#​36411)

  • ssh-based provisioner (file + remote-exec): Re-enable support for PowerShell (#​37794)

  • terraform init log timestamps include millisecond precision (#​37818)

  • init: skip dependencies declared in development override. This allows you to use terraform init with developer overrides and install dependencies that are not declared in the override file. (#​37884)

  • Terraform Test: Allow functions within mock blocks (#​34672)

  • improve detection of deprecated resource attributes / blocks (#​38077)

  • Deprecation messages providers set on resources / blocks / attributes are now part of the deprecation warning (#​38135)

  • Include which attribute paths are marked as sensitive in list_start JSON logs (#​38197)

  • Add input variable validation for Stacks (#​38240)

  • When comparing a container value to null, only top level marks are now considered for the result. (#​38270)

  • As part of supporting variables in module sources, most commands now accept variable values (#​38276)

BUG FIXES:

  • testing: File-level error diagnostics are now included in JUnit XML skipped test elements, ensuring CI/CD pipelines can detect validation failures (#​37801)

  • A refresh-only plan could result in a non-zero exit code with no changes (#​37406)

  • cli: Fixed crash in terraform show -json when plan contains ephemeral resources with preconditions or postconditions (#​37834)

  • cli: Fixed terraform init -json to properly format all backend configuration messages as JSON instead of plain text (#​37911)

  • state show: The state show command will now explicitly fail and return code 1 when it fails to render the named resources state (#​37933)

  • apply: Terraform will raise an explicit error if a plan file intended for one workspace is applied against another workspace (#​37954)

  • lifecycle: replace_triggered_by now reports an error when given an invalid attribute reference that does not exist in the target resource (#​36740)

  • backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#​38027)

  • stacks: send progress events if the plan fails for better UI integration (#​38039)

  • stacks: component instances should report no-op plan/apply. This solves a UI inconsistency with convergence destroy plans (#​38049)

  • backend/http: Return conflicting lock info from HTTP backend instead of the lock that failed to be taken (#​38144)

  • states: fixed a bug that caused Terraform to be unable to identify when two states had different output values. This may have caused issues in specific circumstances like backend migrations. (#​38181)

  • cloud: terraform cloud and registry discovery network requests are now more resilient, making temporary network or service related errors less common (#​38064)

  • Enable formatting of .tfquery.hcl files by terraform fmt (#​38398)

  • Fix validate not returning JSON for some early diagnostics (#​38400)

  • Fix Terraform Stacks plugin installation error (#​38406)

NOTES:

  • command/init: Provider installation was refactored to enable future enhancements in the area. This results in different order of operations during init and 2 new log messages replacing one (initializing_provider_plugin_message). The change should not have any end-user impact aside from the init command output. (#​38227)

UPGRADE NOTES:

  • backend/s3: The AWS_USE_FIPS_ENDPOINT and AWS_USE_DUALSTACK_ENDPOINT environment variables now only respect true or false values, aligning with the AWS SDK for Go. This replaces the previous behavior which treated any non-empty value as true. (#​37601)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

v1.14.9

Compare Source

1.14.9 (April 20, 2026)

BUG FIXES:

  • Fix Terraform Stacks plugin installation error (#​38406)

v1.14.8

Compare Source

1.14.8 (March 25, 2026)

BUG FIXES:

  • Prevent crash in the display of relevant attributes after provider upgrades (#​38264)

v1.14.7

Compare Source

1.14.7 (March 11, 2026)

NOTES:

  • Bump Go version to 1.25.8 to suppress security scanner false positives (#​38249)

v1.14.6

Compare Source

1.14.6 (February 25, 2026)

BUG FIXES:

  • terraform test: return error when provider config is invalid (#​38084)

v1.14.5

Compare Source

1.14.5 (February 11, 2026)

BUG FIXES:

  • Fixed an issue where terraform stacks validate was failing to resolve relative paths for modules (#​38025)

v1.14.4

Compare Source

1.14.4 (January 28, 2026)

BUG FIXES:

  • backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#​38027)

  • Fixes an issue where any warning diagnostics generated during terraform query execution failed to render in the cloud backend session (#​38040)

  • actions in modules without instances failed the plan graph (#​38089)

v1.14.3

Compare Source

1.14.3 (December 17, 2025)

BUG FIXES:

  • stacks: change absolute paths in path.module/path.root to be relative, as documented (#​37982)

v1.14.2

Compare Source

1.14.2 (December 11, 2025)

ENHANCEMENTS:

  • Add component registry source resolution support to Terraform Stacks (#​37888)

BUG FIXES:

  • stacks: surface runtime issues with local values to user during plan (#​37980)

  • resource instance apply failures should not cause the resource instance state to be empty. (#​37981)

v1.14.1

Compare Source

1.14.1 (December 3, 2025)

BUG FIXES:

  • test: allow ephemeral outputs in root modules (#​37813)

  • Combinations of replace_triggered_by and -replace could result in some instances not being replaced (#​37833)

  • providers lock: include providers required by terraform test (#​37851)

  • Set state information in the proto request for the GenerateResourceConfig RPC (#​37896)

  • actions: make after_create & after_update actions run after the resource has applied (#​37936)

v1.14.0

Compare Source

1.14.0 (November 19, 2025)

NEW FEATURES:

  • List Resources: List resources can be defined in *.tfquery.hcl files and allow querying and filterting existing infrastructure.

  • A new Terraform command terraform query: Executes list operations against existing infrastructure and displays the results. The command can optionally generate configuration for importing results into Terraform.

  • A new GenerateResourceConfiguration RPC allows providers to create more precise configuration values during import. (#​37515)

  • New top-level Actions block: Actions are provider defined and meant to codify use cases outside the normal CRUD model in your Terraform configuration. Providers can define Actions like aws_lambda_invoke or aws_cloudfront_create_invalidation that do something imparative outside of Terraforms normal CRUD model. You can configure such a side-effect with an action block and have actions triggered through the lifecycle of a resource or through passing the -invoke CLI flag. (#​37553)

ENHANCEMENTS:

  • terraform test: expected diagnostics will be included in test output when running in verbose mode" (#​37362)

  • terraform test: ignore prevent_destroy attribute during when cleaning up tests" (#​37364)

  • terraform stacks command support for -help flag (#​37645)

  • query: support offline validation of query files via -query flag in the validate command (#​37671)

  • Updates to support the AWS European Sovereign Cloud (#​37721)

BUG FIXES:

  • Retrieve all workspace variables while doing a terraform import, include variables inherited from variable sets but not overwritten by the workspace. (#​37241)

  • Fix OSS backend proxy support by adding a proxy layer for OSS backend operations. Resolves #​36897. (#​36897)

  • console and test: return explicit diagnostics when referencing resources that were not included in the most recent operation. (#​37663)

  • query: generate unique resource identifiers for results of expanded list resources (#​37681)

  • The CLI now summarizes the number of actions invoked during terraform apply, matching the plan output. (#​37689)

  • Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

  • query: improve error handling for missing identity schemas (#​37863)

UPGRADE NOTES:

  • The parallelism of Terraform operations within container runtimes may be reduced depending on the CPU bandwidth limit setting. (#​37436)

  • Building Terraform 1.14 requires macOS Monterey or later (due to being built on Go 1.25 which imposes these requirements) (#​37436)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

v1.13.5

Compare Source

1.13.5 (November 5, 2025)

BUG FIXES:

  • impure functions could cause templatefile to incorrectly fail consistency checks (#​37807)

  • Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

v1.13.4

Compare Source

1.13.4 (October 15, 2025)

BUG FIXES:

  • Fix crash when showing a cloud plan without having a cloud backend (#​37751)

v1.13.3

Compare Source

1.13.3 (September 17, 2025)

BUG FIXES:

  • variable validation: keep sensitive and ephemeral metadata when evaluating variable conditions. (#​37595)

v1.13.2

Compare Source

1.13.2 (September 10, 2025)

BUG FIXES:

  • test: Fix the order of execution of cleanup nodes (#​37546)

  • apply: hide sensitive inputs when values have changed between plan and apply (#​37582)

v1.13.1

Compare Source

1.13.1 (August 27, 2025)

BUG FIXES:

  • Fix regression that caused terraform test with zero tests to return a non-zero exit code. (#​37477)

  • terraform test: prevent panic when resolving incomplete references (#​37484)

v1.13.0

Compare Source

1.13.0 (August 20, 2025)

NEW FEATURES:

  • The new command terraform stacks exposes some stack operations through the cli. Use terraform stacks -usage to see available commands. (#​36931)

ENHANCEMENTS:

  • Filesystem functions are now checked for consistent results to catch invalid data during apply (#​37001)

  • Allow successful init when provider constraint matches at least one valid version (#​37137)

  • Performance fix for evaluating high cardinality resources (#​37154)

  • TF Test: Allow parallel execution of teardown operations (#​37169)

  • terraform test: Test authors can now specify definitions for external variables that are referenced within test files directly within the test file itself. (#​37195)

  • terraform test: File-level variable blocks can now reference run outputs and other variables." (#​37205)

  • skip redundant comparisons when comparing planned set changes (#​37280)

  • type checking: improve error message on type mismatches. (#​37298)

BUG FIXES:

  • Added a missing warning diagnostic that alerts users when child module contains an ignored cloud block. (#​37180)

  • Nested module outputs could lose sensitivity, even when marked as such in the configuration (#​37212)

  • workspace: Updated validation to reject workspaces named "" (#​37267)

  • workspace: Updated the workspace delete command to reject "" as an invalid workspace name (#​37275)

  • plan: truncate invalid or dynamic references in the relevant attributes (#​37290)

  • Test run Parallelism of 1 should not result in deadlock (#​37292)

  • static validation: detect invalid static references via indexes on objects. (#​37298)

  • Fixes resource identity being dropped from state in certain cases (#​37396)

NOTES:

  • The command terraform rpcapi is now generally available. It is not intended for public consumption, but exposes certain Terraform operations through an RPC interface compatible with go-plugin. (#​37067)

UPGRADE NOTES:

  • terraform test: External variables referenced within test files should now be accompanied by a variable definition block within the test file. This is optional, but users with complex external variables may see error diagnostics without the additional variable definition. (#​37195)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

v1.12.2

Compare Source

1.12.2 (June 11, 2025)

BUG FIXES:

  • partial ephemeral values were rejected in ephemeral outputs (#​37210)

v1.12.1

Compare Source

1.12.1 (May 21, 2025)

BUG FIXES:

  • Include resource identity in import apply UI output (#​37044)

  • Fix regression during provider installation by reverting back to not sending HEAD requests. (#​36998)

  • Avoid crash on test failure in comparison in function call (#​37071)

v1.12.0

Compare Source

1.12.0 (May 14, 2025)

NEW FEATURES:

  • Added Terraform backend implementation for OCI Object Storage (#​34465)

ENHANCEMENTS:

  • Terraform Test command now accepts a -parallelism=n option, which sets the number of parallel operations in a test run's plan/apply operation. (#​34237)

  • Logical binary operators can now short-circuit (#​36224)

  • Terraform Test: Runs can now be annotated for possible parallel execution. (#​34180)

  • Allow terraform init when tests are present but no configuration files are directly inside the current directory (#​35040)

  • Terraform Test: Continue subsequent test execution when an expected failure is not encountered. (#​34969)

  • Produce detailed diagnostic objects when test run assertions fail ([#​34428](https://redirect.github.com/hashicorp/ter

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@missingcharacter @renovate-bot