Skip to content
This repository was archived by the owner on Aug 25, 2025. It is now read-only.

gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.148.0 #18

Closed
dependabot wants to merge 1 commit into from
Closed

gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.148.0 #18

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 1, 2025

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.148.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.148.0

3.148.0 (2025-01-31)

Features

  • [cli/config] Introduce --type flag for config set #18287

  • [cli/new] Improve docs for disambiguating repositories on hosts where the URL is ambiguous #18379

  • [cli/package] Automatically get latest version for git based plugins if none is specified #18215

  • [cli/package] Allow plugins from git sources to live in subdirectories in the repository #18322

  • [sdk/python] Support commits in prerelease versions of generated Python SDKs #18289

Bug Fixes

  • [cli/config] Fix parsing of config keys with paths and colons in path segments #18378

  • [engine] Fix some plugin context leaks, which could leave plugin processes running on exit #18373

  • [cli/package] Respect virtualenv option in package add/link #18319

  • [programgen/nodejs] Handle keyword overlap of "this" keyword for local variables #18177

  • [sdk/nodejs] Fix debug strings triggering the Output toString error #18016

  • [sdk/nodejs] Use the corepack executable from dev dependencies #18393

  • [sdk/python] Allow Pip 25 #18343

  • [sdk/python] Make RunPlugin default to using a virtualenv #18371

Miscellaneous

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.148.0 (2025-01-31)

Features

  • [cli/config] Introduce --type flag for config set #18287

  • [cli/new] Improve docs for disambiguating repositories on hosts where the URL is ambiguous #18379

  • [cli/package] Automatically get latest version for git based plugins if none is specified #18215

  • [cli/package] Allow plugins from git sources to live in subdirectories in the repository #18322

  • [sdk/python] Support commits in prerelease versions of generated Python SDKs #18289

Bug Fixes

  • [cli/config] Fix parsing of config keys with paths and colons in path segments #18378

  • [engine] Fix some plugin context leaks, which could leave plugin processes running on exit #18373

  • [cli/package] Respect virtualenv option in package add/link #18319

  • [programgen/nodejs] Handle keyword overlap of "this" keyword for local variables #18177

  • [sdk/nodejs] Fix debug strings triggering the Output toString error #18016

  • [sdk/nodejs] Use the corepack executable from dev dependencies #18393

  • [sdk/python] Allow Pip 25 #18343

  • [sdk/python] Make RunPlugin default to using a virtualenv #18371

Miscellaneous

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
gomodules: bump github.com/pulumi/pulumi/sdk/v3 from 3.142.0 to 3.148.0
3b1c37d 
Bumps [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from 3.142.0 to 3.148.0.
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.142.0...v3.148.0)

---
updated-dependencies:
- dependency-name: github.com/pulumi/pulumi/sdk/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from MAHDTech February 1, 2025 13:05
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 1, 2025

The following labels could not be found: dependencies, dependabot, gomod.

@dependabot dependabot bot mentioned this pull request Feb 1, 2025
Closed
github-advanced-security[bot]
github-advanced-security bot found potential problems Feb 1, 2025
View reviewed changes
vendor/github.com/djherbis/times/js.cover.dockerfile
@@ -0,0 +1,9 @@
FROM golang:1.17

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/djherbis/times/js.cover.dockerfile
@@ -0,0 +1,9 @@
FROM golang:1.17

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/djherbis/times/js.cover.dockerfile
FROM golang:1.17

RUN curl -sL https://deb.nodesource.com/setup_17.x | bash
RUN apt-get install --yes nodejs

Check failure

Code scanning / Trivy

&#39;apt-get&#39; missing &#39;--no-install-recommends&#39; High library

Artifact: vendor/github.com/djherbis/times/js.cover.dockerfile
Type: dockerfile
Vulnerability DS029
Severity: HIGH
Message: '--no-install-recommends' flag is missed: 'apt-get install --yes nodejs'
Link: DS029
vendor/github.com/djherbis/times/linux.cover.dockerfile
@@ -0,0 +1,6 @@
FROM golang:1.17

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/djherbis/times/linux.cover.dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/djherbis/times/linux.cover.dockerfile
@@ -0,0 +1,6 @@
FROM golang:1.17

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/djherbis/times/linux.cover.dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check failure

Code scanning / Trivy

Image user should not be &#39;root&#39; High library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
@@ -0,0 +1,23 @@
FROM golang:1.20@sha256:2edf6aab2d57644f3fe7407132a0d1770846867465a39c2083770cf62734b05d

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low library

Artifact: vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 8, 2025

Superseded by #19.

@dependabot dependabot bot closed this Feb 8, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/trunk/github.com/pulumi/pulumi/sdk/v3-3.148.0 branch February 8, 2025 13:55
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@MAHDTech MAHDTech Awaiting requested review from MAHDTech

Assignees

@MAHDTech MAHDTech

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MAHDTech