chore(deps): bump the prod group across 1 directory with 2 updates

[dependabot]

Bumps the prod group with 2 updates in the / directory: pulumi and pulumi-kubernetes.

Updates pulumi from 3.130.0 to 3.135.0

Release notes

Sourced from pulumi's releases.

v3.135.0

3.135.0 (2024-10-01)

Features

• [backend/{diy,service}] Send secrets managers as initial state when creating stacks #17387

• [sdk/python] Search upwards for pyproject.toml when using Poetry #17388

Bug Fixes

• [cli/config] Improve usage string for config env add/rm commands #17407

• [cli/new] Check zipped templates for Pulumi.yaml files #17437

• [engine] Disable the enviromental GITHUB_TOKEN on 401 responses #17351

• [engine] Fix a panic when multiple component provider construct calls fail #17439

• [sdkgen/go] Fix nested string map map map properties #17417

• [sdk/nodejs] Fix dependency installation for nodejs projects with a main property #17391

• [sdk/python] Add missing package_ref paramater to ProviderResource #17432

Miscellaneous

• [sdkgen] Validate schema version is provided when package supports packing #17420

• [sdk/python] Replace asyncio.ensure_future with create_task #17406

• [sdkgen/{nodejs,python}] Bump minimum valid SDK version to v3.134.1 so that output-invokes work and maintain secrets #17390

v3.134.1

3.134.1 (2024-09-25)

... (truncated)

Changelog

Sourced from pulumi's changelog.

3.135.0 (2024-10-01)

Features

• [backend/{diy,service}] Send secrets managers as initial state when creating stacks #17387

• [sdk/python] Search upwards for pyproject.toml when using Poetry #17388

Bug Fixes

• [cli/config] Improve usage string for config env add/rm commands #17407

• [cli/new] Check zipped templates for Pulumi.yaml files #17437

• [engine] Disable the enviromental GITHUB_TOKEN on 401 responses #17351

• [engine] Fix a panic when multiple component provider construct calls fail #17439

• [sdkgen/go] Fix nested string map map map properties #17417

• [sdk/nodejs] Fix dependency installation for nodejs projects with a main property #17391

• [sdk/python] Add missing package_ref paramater to ProviderResource #17432

Miscellaneous

• [sdkgen] Validate schema version is provided when package supports packing #17420

• [sdk/python] Replace asyncio.ensure_future with create_task #17406

• [sdkgen/{nodejs,python}] Bump minimum valid SDK version to v3.134.1 so that output-invokes work and maintain secrets #17390

3.134.1 (2024-09-25)

... (truncated)

Commits

• 98181d7 prepare 3.135.0 release (#17441)
• 0bec028 Support pruning snapshots (#17408)
• 5792409 Check zipped templates for Pulumi.yaml files (#17437)
• 4079d85 send a value to the abortchan instead of closing it (#17439)
• 07322d6 Support topologically sorting snapshots (#17403)
• 4898124 Test pyright and mypy in python conformance tests (#17354)
• 006a7fc Add plain properties conformance test (#17411)
• a1a53d9 Introduce snapshot metadata (#17430)
• 510111f Add package_ref to ProviderResource (#17432)
• de17d1a Replace asyncio.ensure_future with create_task (#17406)
• Additional commits viewable in compare view

Updates pulumi-kubernetes from 4.17.1 to 4.18.1

Release notes

Sourced from pulumi-kubernetes's releases.

v4.18.1

Added

• Schemagen is now a library that can be consumed by other packages. (pulumi/pulumi-kubernetes#3187)

Changed

• Updated beta Kubernetes client libraries to stable v1.31 release. (pulumi/pulumi-kubernetes#3196)

v4.18.0

[!IMPORTANT] The enableSecretMutable and enableConfigMapMutable options may become the default behavior in a future v5 release of the provider.

Programs that depend on the replacement of Secrets and ConfigMaps (e.g. to trigger updates for downstream dependencies like Deployments) are recommended to explicitly specify immutable: true.

Added

• The new enableSecretMutable provider configuration option treats changes to Secrets as updates instead of replacements (similar to the enableConfigMapMutable option).

  The default replacement behavior can be preserved for a particular Secret by setting its immutable field to true. (pulumi/pulumi-kubernetes#2291)

• A warning is now emitted if an object has finalizers which might be blocking deletion. (pulumi/pulumi-kubernetes#1418)

• EXPERIMENTAL: Generic await logic is now available as an opt-in feature. Running a program with PULUMI_K8S_AWAIT_ALL=true will now cause Pulumi to await readiness for all resources, including custom resources.

  Generic readiness is determined according to some well-known conventions (like the "Ready" condition) as determined by cli-utils.

  Pulumi's current behavior, without this feature enabled, is to assume some resources are immediately available, which can cause downstream resources to fail.

  Existing readiness logic is unaffected by this setting. (pulumi/pulumi-kubernetes#2996)

• EXPERIMENTAL: The pulumi.com/waitFor annotation was introduced to allow for custom readiness checks. This override Pulumi's own await logic for the resource (however the pulumi.com/skipAwait annotation still takes precedence).

  The value of this annotation can take 3 forms:

  1. A string prefixed with jsonpath= followed by a JSONPath expression and an optional value.

     The JSONPath expression accepts the same syntax as kubectl get -o jsonpath={...}.

     If a value is provided, the resource is considered ready when the JSONPath expression evaluates to the same value. For example this resource expects its "phase" field to have a value of "Running":

     `pulumi.com/waitFor: "jsonpath={.status.phase}=Running"`
     

     If a value is not provided, the resource will be considered ready when any value exists at the given path, similar to kubectl wait --for jsonpath=.... This resource will wait until it has a webhook configured with a CA bundle:

     `pulumi.com/waitFor: "jsonpath={.webhooks[*].clientConfig.caBundle}"`
     

  2. A string prefixed with condition= followed by the type of the condition and an optional status. This matches the behavior of kubectl wait --for=condition=... and will wait until the resource has a matching condition. The expected status defaults to "True" if not specified.

     `pulumi.com/waitFor: "condition=Synced"`
     

... (truncated)

Changelog

Sourced from pulumi-kubernetes's changelog.

4.18.1 (September 13, 2024)

Added

• Schemagen is now a library that can be consumed by other packages. (pulumi/pulumi-kubernetes#3187)

Changed

• Updated beta Kubernetes client libraries to stable v1.31 release. (pulumi/pulumi-kubernetes#3196)

4.18.0 (September 3, 2024)

Added

• The new enableSecretMutable provider configuration option treats changes to Secrets as updates instead of replacements (similar to the enableConfigMapMutable option).

  The default replacement behavior can be preserved for a particular Secret by setting its immutable field to true. (pulumi/pulumi-kubernetes#2291)

  Note: These options (enableSecretMutable and enableConfigMapMutable) may become the default behavior in a future v5 release of the provider. Programs that depend on the replacement of Secrets and ConfigMaps (e.g. to trigger updates for downstream dependencies like Deployments) are recommended to explicitly specify immutable: true.

• A warning is now emitted if an object has finalizers which might be blocking deletion. (pulumi/pulumi-kubernetes#1418)

• EXPERIMENTAL: Generic await logic is now available as an opt-in feature. Running a program with PULUMI_K8S_AWAIT_ALL=true will now cause Pulumi to await readiness for all resources, including custom resources.

  Generic readiness is determined according to some well-known conventions (like the "Ready" condition) as determined by cli-utils.

  Pulumi's current behavior, without this feature enabled, is to assume some resources are immediately available, which can cause downstream resources to fail.

  Existing readiness logic is unaffected by this setting. (pulumi/pulumi-kubernetes#2996)

• EXPERIMENTAL: The pulumi.com/waitFor annotation was introduced to allow for custom readiness checks. This override Pulumi's own await logic for the resource (however the pulumi.com/skipAwait annotation still takes precedence).

... (truncated)

Commits

• 7155e2e Prepare for v4.18.1 release (#3203)
• 0e6294e typegen: add ability to add p-k provider as a dependency in schemagen
• fd87b8b typegen: also sanitize group name to be used as a package
• ace60fd Enable parameterization RPC calls to generate Pulumi schemas (#3187)
• 730d9d8 Update k8s dependency to stable version (#3196)
• f5f368d Automated upgrade: bump pulumi/pulumi to 3.130.0 (#3190)
• 01ab6ed Prepare for v4.18.0 release (#3191)
• 0f834c8 Docs: add a comment re: ConfigFile vs. ConfigGroup (#3182)
• 4b148fb Automated upgrade: bump pulumi/pulumi to 3.129.0 (#3184)
• d8f85ae Emit event logs during await (#3135)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions