Dependabot upgrades by rshade · Pull Request #2734 · pulumi/examples

rshade · 2026-05-15T16:51:41Z

Summary

Example(s) affected

Validation

Python formatting: make check_python_formatting (if Python files changed)
TypeScript lint: npx eslint <files> (if TS files changed)
Integration test: make test_example.TestAcc<Name> (if example code changed)
PR preview: make pr_preview (for bulk changes)

Checklist

Example directory follows <cloud>-<lang>-<name> naming convention
Pulumi.yaml has correct runtime: field
README.md follows the example template
No hardcoded credentials or secrets
No Pulumi.*.yaml stack config files included
Integration test added/updated in misc/test/ (for new examples)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/aws-apigateway](https://redirect.github.com/pulumi/pulumi-aws-apigateway) | dependencies | major | [`2.6.3` -> `3.0.0`](https://renovatebot.com/diffs/npm/@pulumi%2faws-apigateway/2.6.3/3.0.0) | | [@pulumi/aws-apigateway](https://redirect.github.com/pulumi/pulumi-aws-apigateway) | dependencies | major | [`2.6.1` -> `3.0.0`](https://renovatebot.com/diffs/npm/@pulumi%2faws-apigateway/2.6.1/3.0.0) | | [@pulumi/aws-apigateway](https://redirect.github.com/pulumi/pulumi-aws-apigateway) | dependencies | major | [`^2.0.0` -> `^3.0.0`](https://renovatebot.com/diffs/npm/@pulumi%2faws-apigateway/2.6.3/3.0.0) | | [@pulumi/awsx](https://pulumi.com) ([source](https://redirect.github.com/pulumi/pulumi-awsx)) | dependencies | major | [`2.22.0` -> `3.5.0`](https://renovatebot.com/diffs/npm/@pulumi%2fawsx/2.22.0/3.5.0) | | [@pulumi/awsx](https://pulumi.com) ([source](https://redirect.github.com/pulumi/pulumi-awsx)) | dependencies | major | [`^2.0.2` -> `^3.0.0`](https://renovatebot.com/diffs/npm/@pulumi%2fawsx/2.22.0/3.5.0) | | [@pulumi/awsx](https://pulumi.com) ([source](https://redirect.github.com/pulumi/pulumi-awsx)) | dependencies | major | [`2.19.0` -> `3.5.0`](https://renovatebot.com/diffs/npm/@pulumi%2fawsx/2.19.0/3.5.0) | | [@pulumi/azure-native](https://pulumi.com) ([source](https://redirect.github.com/pulumi/pulumi-azure-native)) | dependencies | major | [`^2.25.0` -> `^3.0.0`](https://renovatebot.com/diffs/npm/@pulumi%2fazure-native/2.92.2/3.18.0) | | [@pulumi/azure-native](https://pulumi.com) ([source](https://redirect.github.com/pulumi/pulumi-azure-native)) | dependencies | major | [`2.92.0` -> `3.18.0`](https://renovatebot.com/diffs/npm/@pulumi%2fazure-native/2.92.0/3.18.0) | | [github.com/pulumi/pulumi-aws-apigateway/sdk/v2](https://redirect.github.com/pulumi/pulumi-aws-apigateway) | require | major | `v2.6.3` -> `v3.0.0` | | [github.com/pulumi/pulumi-awsx/sdk/v2](https://redirect.github.com/pulumi/pulumi-awsx) | require | major | `v2.22.0` -> `v3.5.0` | | [pulumi-aws-apigateway](https://redirect.github.com/pulumi/pulumi-aws-apigateway) | | major | `>=2.0.0,<3.0.0` -> `>=3.0.0,<3.1.0` | | [pulumi-azure-native](https://redirect.github.com/pulumi/pulumi-azure-native) | | major | `>=2.0.0,<3.0.0` -> `>=3.18.0,<3.19.0` | | [pulumi-azure-native](https://redirect.github.com/pulumi/pulumi-azure-native) | | major | `>=2.92.0,<2.93.0` -> `>=3.18.0,<3.19.0` | | [pulumi-azure-native](https://redirect.github.com/pulumi/pulumi-azure-native) | | major | `>=2.17.0,<3.0.0` -> `>=3.18.0,<3.19.0` | | [pulumi_awsx](https://redirect.github.com/pulumi/pulumi-awsx) | | major | `>=2.0.0,<3.0.0` -> `>=3.5.0,<3.6.0` | --- <details> <summary>pulumi/pulumi-aws-apigateway (@pulumi/aws-apigateway)</summary> [`v3.0.0`](https://redirect.github.com/pulumi/pulumi-aws-apigateway/releases/tag/v3.0.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-aws-apigateway/compare/v2.6.3...v3.0.0) Looking good! No breaking changes found. No new resources/functions. </details> <details> <summary>pulumi/pulumi-awsx (@pulumi/awsx)</summary> [`v3.5.0`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.5.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.4.0...v3.5.0) - Update module github.com/go-jose/go-jose/v3 to v3.0.5 \[SECURITY] by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1923](https://redirect.github.com/pulumi/pulumi-awsx/pull/1923)3 - Update workflows from source by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1924](https://redirect.github.com/pulumi/pulumi-awsx/pull/1924) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1925](https://redirect.github.com/pulumi/pulumi-awsx/pull/1925)5 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1931](https://redirect.github.com/pulumi/pulumi-awsx/pull/1931)1 - Pass region through awsx.ec2.Vpc child resources by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1942](https://redirect.github.com/pulumi/pulumi-awsx/pull/1942) **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.4.0...v3.5.0 [`v3.4.0`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.4.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.3.1...v3.4.0) - Update vulnerable dependencies \[SECURITY] by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1918](https://redirect.github.com/pulumi/pulumi-awsx/pull/1918)8 - Regenerate awsx artifacts for [@pulumi/aws](https://redirect.github.com/pulumi/aws) 7.24.0 by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1919](https://redirect.github.com/pulumi/pulumi-awsx/pull/1919) - Filter generated SDK docs by language by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1920](https://redirect.github.com/pulumi/pulumi-awsx/pull/1920) - Fix classic exactOptionalPropertyTypes typings by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1922](https://redirect.github.com/pulumi/pulumi-awsx/pull/1922) **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.3.1...v3.4.0 [`v3.3.1`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.3.1) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.3.0...v3.3.1) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1901](https://redirect.github.com/pulumi/pulumi-awsx/pull/1901)1 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1903](https://redirect.github.com/pulumi/pulumi-awsx/pull/1903)3 - Update module github.com/cloudflare/circl to v1.6.3 \[SECURITY] by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1879](https://redirect.github.com/pulumi/pulumi-awsx/pull/1879)9 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1904](https://redirect.github.com/pulumi/pulumi-awsx/pull/1904)4 - Testing out new review by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1906](https://redirect.github.com/pulumi/pulumi-awsx/pull/1906) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1911](https://redirect.github.com/pulumi/pulumi-awsx/pull/1911)1 - Add validation for duplicate subnet types without unique names by [@jkodroff](https://redirect.github.com/jkodroff) in [https://github.com/pulumi/pulumi-awsx/pull/1914](https://redirect.github.com/pulumi/pulumi-awsx/pull/1914) - Revert auto subnet default merging by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1916](https://redirect.github.com/pulumi/pulumi-awsx/pull/1916) **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.3.0...v3.3.1 [`v3.3.0`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.3.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.2.1...v3.3.0) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1870](https://redirect.github.com/pulumi/pulumi-awsx/pull/1870)0 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1872](https://redirect.github.com/pulumi/pulumi-awsx/pull/1872)2 - Upgrade golangci-lint to v2 by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1875](https://redirect.github.com/pulumi/pulumi-awsx/pull/1875) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1880](https://redirect.github.com/pulumi/pulumi-awsx/pull/1880)0 - ec2/vpc: restore IPv6 subnet assignment defaults by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1882](https://redirect.github.com/pulumi/pulumi-awsx/pull/1882) - docs: add AI contribution guardrails and refresh contributor docs by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1885](https://redirect.github.com/pulumi/pulumi-awsx/pull/1885) - ci: add gh-aw PR review + slash-command re-review workflows by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1886](https://redirect.github.com/pulumi/pulumi-awsx/pull/1886) - ci: fix gh-aw reviewer activation secret validation by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1889](https://redirect.github.com/pulumi/pulumi-awsx/pull/1889) - Fix gh-aw rereview target resolution for review outputs by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1893](https://redirect.github.com/pulumi/pulumi-awsx/pull/1893) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1896](https://redirect.github.com/pulumi/pulumi-awsx/pull/1896)6 - Combined dependencies PR by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1895](https://redirect.github.com/pulumi/pulumi-awsx/pull/1895) - Bump the npm_and_yarn group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1871](https://redirect.github.com/pulumi/pulumi-awsx/pull/1871)1 - Bump the go_modules group across 4 directories with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1877](https://redirect.github.com/pulumi/pulumi-awsx/pull/1877)7 - Setting up agentic workflow reviews again by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1898](https://redirect.github.com/pulumi/pulumi-awsx/pull/1898) - Fix awsx-classic API Gateway Lambda permission sourceArn formatting by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1888](https://redirect.github.com/pulumi/pulumi-awsx/pull/1888) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1899](https://redirect.github.com/pulumi/pulumi-awsx/pull/1899)9 **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.2.1...v3.3.0 [`v3.2.1`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.2.1) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.2.0...v3.2.1) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1865](https://redirect.github.com/pulumi/pulumi-awsx/pull/1865)5 **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.2.0...v3.2.1 [`v3.2.0`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.2.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.1.0...v3.2.0) - Update first-party Pulumi dependencies to v3 (major) by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1659](https://redirect.github.com/pulumi/pulumi-awsx/pull/1659)9 - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1768](https://redirect.github.com/pulumi/pulumi-awsx/pull/1768) - Add 'gen-sdk'-generated sdk/java files by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1777](https://redirect.github.com/pulumi/pulumi-awsx/pull/1777) - Remove no longer used .pulumi-java-gen.version file by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1780](https://redirect.github.com/pulumi/pulumi-awsx/pull/1780) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1781](https://redirect.github.com/pulumi/pulumi-awsx/pull/1781) - Update vulnerable dependencies \[SECURITY] by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1782](https://redirect.github.com/pulumi/pulumi-awsx/pull/1782)2 - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1783](https://redirect.github.com/pulumi/pulumi-awsx/pull/1783) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1784](https://redirect.github.com/pulumi/pulumi-awsx/pull/1784) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1787](https://redirect.github.com/pulumi/pulumi-awsx/pull/1787) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1788](https://redirect.github.com/pulumi/pulumi-awsx/pull/1788) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1789](https://redirect.github.com/pulumi/pulumi-awsx/pull/1789) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1791](https://redirect.github.com/pulumi/pulumi-awsx/pull/1791) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1792](https://redirect.github.com/pulumi/pulumi-awsx/pull/1792) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1794](https://redirect.github.com/pulumi/pulumi-awsx/pull/1794) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1795](https://redirect.github.com/pulumi/pulumi-awsx/pull/1795) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1796](https://redirect.github.com/pulumi/pulumi-awsx/pull/1796) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1798](https://redirect.github.com/pulumi/pulumi-awsx/pull/1798) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1799](https://redirect.github.com/pulumi/pulumi-awsx/pull/1799) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1800](https://redirect.github.com/pulumi/pulumi-awsx/pull/1800) - Update module github.com/pulumi/pulumi/pkg/v3 to v3.210.0 by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1797](https://redirect.github.com/pulumi/pulumi-awsx/pull/1797)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1807](https://redirect.github.com/pulumi/pulumi-awsx/pull/1807)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1809](https://redirect.github.com/pulumi/pulumi-awsx/pull/1809)9 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1812](https://redirect.github.com/pulumi/pulumi-awsx/pull/1812)2 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1814](https://redirect.github.com/pulumi/pulumi-awsx/pull/1814)4 - Update module github.com/pulumi/providertest to v0.5.1 by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1815](https://redirect.github.com/pulumi/pulumi-awsx/pull/1815)5 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1817](https://redirect.github.com/pulumi/pulumi-awsx/pull/1817)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1818](https://redirect.github.com/pulumi/pulumi-awsx/pull/1818)8 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1821](https://redirect.github.com/pulumi/pulumi-awsx/pull/1821)1 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1823](https://redirect.github.com/pulumi/pulumi-awsx/pull/1823)3 - Fetch dependencies only through mise by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1802](https://redirect.github.com/pulumi/pulumi-awsx/pull/1802) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1827](https://redirect.github.com/pulumi/pulumi-awsx/pull/1827)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1830](https://redirect.github.com/pulumi/pulumi-awsx/pull/1830)0 - Update pulumi/pulumi-aws version to 7.15.0 by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1828](https://redirect.github.com/pulumi/pulumi-awsx/pull/1828) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1836](https://redirect.github.com/pulumi/pulumi-awsx/pull/1836)6 - Introduce Renovate for aws and pulumi version updates by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1829](https://redirect.github.com/pulumi/pulumi-awsx/pull/1829) - \[renovate] Add group name to Pulumi updates by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1838](https://redirect.github.com/pulumi/pulumi-awsx/pull/1838) - Pin dependency [@pulumi/aws](https://redirect.github.com/pulumi/aws) to 7.15.0 by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1837](https://redirect.github.com/pulumi/pulumi-awsx/pull/1837)7 - Update Go get command for pulumi-awsx to v3 by [@jay-babu](https://redirect.github.com/jay-babu) in [https://github.com/pulumi/pulumi-awsx/pull/1820](https://redirect.github.com/pulumi/pulumi-awsx/pull/1820) - Remove aws and pulumi update GHA workflows by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1841](https://redirect.github.com/pulumi/pulumi-awsx/pull/1841) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1843](https://redirect.github.com/pulumi/pulumi-awsx/pull/1843)3 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1844](https://redirect.github.com/pulumi/pulumi-awsx/pull/1844)4 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1845](https://redirect.github.com/pulumi/pulumi-awsx/pull/1845)5 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1846](https://redirect.github.com/pulumi/pulumi-awsx/pull/1846)6 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1847](https://redirect.github.com/pulumi/pulumi-awsx/pull/1847)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1850](https://redirect.github.com/pulumi/pulumi-awsx/pull/1850)0 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1852](https://redirect.github.com/pulumi/pulumi-awsx/pull/1852)2 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1853](https://redirect.github.com/pulumi/pulumi-awsx/pull/1853)3 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1854](https://redirect.github.com/pulumi/pulumi-awsx/pull/1854)4 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1855](https://redirect.github.com/pulumi/pulumi-awsx/pull/1855)5 - Update module github.com/go-git/go-git/v5 to v5.16.5 \[SECURITY] by [@pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1857](https://redirect.github.com/pulumi/pulumi-awsx/pull/1857)7 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1858](https://redirect.github.com/pulumi/pulumi-awsx/pull/1858)8 - Enable Java package generation by [@pose](https://redirect.github.com/pose) in [https://github.com/pulumi/pulumi-awsx/pull/1859](https://redirect.github.com/pulumi/pulumi-awsx/pull/1859) - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1861](https://redirect.github.com/pulumi/pulumi-awsx/pull/1861)1 - Update GitHub Actions workflows. by [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] in[https://github.com/pulumi/pulumi-awsx/pull/1863](https://redirect.github.com/pulumi/pulumi-awsx/pull/1863)3 - Auto subnet strategy merges partial specs with defaults by [@joeduffy](https://redirect.github.com/joeduffy) in [https://github.com/pulumi/pulumi-awsx/pull/1862](https://redirect.github.com/pulumi/pulumi-awsx/pull/1862) - [@pose](https://redirect.github.com/pose) made their first contribution in [https://github.com/pulumi/pulumi-awsx/pull/1777](https://redirect.github.com/pulumi/pulumi-awsx/pull/1777) - [@pulumi-provider-automation](https://redirect.github.com/pulumi-provider-automation)\[bot] made their first contribution in[https://github.com/pulumi/pulumi-awsx/pull/1807](https://redirect.github.com/pulumi/pulumi-awsx/pull/1807)7 - [@jay-babu](https://redirect.github.com/jay-babu) made their first contribution in [https://github.com/pulumi/pulumi-awsx/pull/1820](https://redirect.github.com/pulumi/pulumi-awsx/pull/1820) **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.1.0...v3.2.0 [`v3.1.0`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.1.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.0.1...v3.1.0) Found 124 breaking changes: - "awsx:cloudtrail:Trail": - inputs: - `🟡` "advancedEventSelectors": items type changed from "/aws/v7.7.0/schema.json#/types/aws:cloudtrail/TrailAdvancedEventSelector:TrailAdvancedEventSelector" to "/aws/v7.11.0/schema.json#/types/aws:cloudtrail/TrailAdvancedEventSelector:TrailAdvancedEventSelector" - `🟡` "eventSelectors": items type changed from "/aws/v7.7.0/schema.json#/types/aws:cloudtrail/TrailEventSelector:TrailEventSelector" to "/aws/v7.11.0/schema.json#/types/aws:cloudtrail/TrailEventSelector:TrailEventSelector" - `🟡` "insightSelectors": items type changed from "/aws/v7.7.0/schema.json#/types/aws:cloudtrail/TrailInsightSelector:TrailInsightSelector" to "/aws/v7.11.0/schema.json#/types/aws:cloudtrail/TrailInsightSelector:TrailInsightSelector" - properties: - `🟡` "bucket" type changed from "/aws/v7.7.0/schema.json#/resources/aws:s3%2Fbucket:Bucket" to "/aws/v7.11.0/schema.json#/resources/aws:s3%2Fbucket:Bucket" - `🟡` "logGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" to "/aws/v7.11.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" - `🟡` "trail" type changed from "/aws/v7.7.0/schema.json#/resources/aws:cloudtrail%2Ftrail:Trail" to "/aws/v7.11.0/schema.json#/resources/aws:cloudtrail%2Ftrail:Trail" - "awsx:ec2:Vpc": properties: - `🟡` "eips": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2feip:Eip" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2feip:Eip" - `🟡` "internetGateway" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2finternetGateway:InternetGateway" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2finternetGateway:InternetGateway" - `🟡` "natGateways": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fnatGateway:NatGateway" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fnatGateway:NatGateway" - `🟡` "routeTableAssociations": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2frouteTableAssociation:RouteTableAssociation" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2frouteTableAssociation:RouteTableAssociation" - `🟡` "routeTables": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2frouteTable:RouteTable" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2frouteTable:RouteTable" - `🟡` "routes": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2froute:Route" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2froute:Route" - `🟡` "subnets": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" - `🟡` "vpc" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fvpc:Vpc" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fvpc:Vpc" - `🟡` "vpcEndpoints": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fvpcEndpoint:VpcEndpoint" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fvpcEndpoint:VpcEndpoint" - "awsx:ecr:Repository": - inputs: - `🟡` "encryptionConfigurations": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecr/RepositoryEncryptionConfiguration:RepositoryEncryptionConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecr/RepositoryEncryptionConfiguration:RepositoryEncryptionConfiguration" - `🟡` "imageScanningConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecr/RepositoryImageScanningConfiguration:RepositoryImageScanningConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecr/RepositoryImageScanningConfiguration:RepositoryImageScanningConfiguration" - `🟡` "imageTagMutabilityExclusionFilters": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecr/RepositoryImageTagMutabilityExclusionFilter:RepositoryImageTagMutabilityExclusionFilter" to "/aws/v7.11.0/schema.json#/types/aws:ecr/RepositoryImageTagMutabilityExclusionFilter:RepositoryImageTagMutabilityExclusionFilter" - properties: - `🟡` "lifecyclePolicy" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecr%2flifecyclePolicy:LifecyclePolicy" to "/aws/v7.11.0/schema.json#/resources/aws:ecr%2flifecyclePolicy:LifecyclePolicy" - `🟡` "repository" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecr%2frepository:Repository" to "/aws/v7.11.0/schema.json#/resources/aws:ecr%2frepository:Repository" - "awsx:ecs:EC2Service": - inputs: - `🟡` "alarms" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceAlarms:ServiceAlarms" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceAlarms:ServiceAlarms" - `🟡` "capacityProviderStrategies": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceCapacityProviderStrategy:ServiceCapacityProviderStrategy" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceCapacityProviderStrategy:ServiceCapacityProviderStrategy" - `🟡` "deploymentCircuitBreaker" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentCircuitBreaker:ServiceDeploymentCircuitBreaker" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentCircuitBreaker:ServiceDeploymentCircuitBreaker" - `🟡` "deploymentConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentConfiguration:ServiceDeploymentConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentConfiguration:ServiceDeploymentConfiguration" - `🟡` "deploymentController" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentController:ServiceDeploymentController" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentController:ServiceDeploymentController" - `🟡` "loadBalancers": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceLoadBalancer:ServiceLoadBalancer" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceLoadBalancer:ServiceLoadBalancer" - `🟡` "networkConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceNetworkConfiguration:ServiceNetworkConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceNetworkConfiguration:ServiceNetworkConfiguration" - `🟡` "orderedPlacementStrategies": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceOrderedPlacementStrategy:ServiceOrderedPlacementStrategy" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceOrderedPlacementStrategy:ServiceOrderedPlacementStrategy" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServicePlacementConstraint:ServicePlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServicePlacementConstraint:ServicePlacementConstraint" - `🟡` "serviceConnectConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceServiceConnectConfiguration:ServiceServiceConnectConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceServiceConnectConfiguration:ServiceServiceConnectConfiguration" - `🟡` "serviceRegistries" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceServiceRegistries:ServiceServiceRegistries" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceServiceRegistries:ServiceServiceRegistries" - `🟡` "volumeConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceVolumeConfiguration:ServiceVolumeConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceVolumeConfiguration:ServiceVolumeConfiguration" - `🟡` "vpcLatticeConfigurations": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceVpcLatticeConfiguration:ServiceVpcLatticeConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceVpcLatticeConfiguration:ServiceVpcLatticeConfiguration" - properties: - `🟡` "service" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2fservice:Service" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2fservice:Service" - `🟡` "taskDefinition" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" - "awsx:ecs:EC2TaskDefinition": - inputs: - `🟡` "ephemeralStorage" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" - `🟡` "proxyConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" - `🟡` "runtimePlatform" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" - `🟡` "volumes": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" - properties: - `🟡` "executionRole" type changed from "/aws/v7.7.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v7.11.0/schema.json#/resources/aws:iam%2Frole:Role" - `🟡` "loadBalancers": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs%2FServiceLoadBalancer:ServiceLoadBalancer" to "/aws/v7.11.0/schema.json#/types/aws:ecs%2FServiceLoadBalancer:ServiceLoadBalancer" - `🟡` "logGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" to "/aws/v7.11.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" - `🟡` "taskDefinition" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" - `🟡` "taskRole" type changed from "/aws/v7.7.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v7.11.0/schema.json#/resources/aws:iam%2Frole:Role" - "awsx:ecs:FargateService": - inputs: - `🟡` "alarms" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceAlarms:ServiceAlarms" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceAlarms:ServiceAlarms" - `🟡` "deploymentCircuitBreaker" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentCircuitBreaker:ServiceDeploymentCircuitBreaker" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentCircuitBreaker:ServiceDeploymentCircuitBreaker" - `🟡` "deploymentConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentConfiguration:ServiceDeploymentConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentConfiguration:ServiceDeploymentConfiguration" - `🟡` "deploymentController" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceDeploymentController:ServiceDeploymentController" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceDeploymentController:ServiceDeploymentController" - `🟡` "loadBalancers": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceLoadBalancer:ServiceLoadBalancer" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceLoadBalancer:ServiceLoadBalancer" - `🟡` "networkConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceNetworkConfiguration:ServiceNetworkConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceNetworkConfiguration:ServiceNetworkConfiguration" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServicePlacementConstraint:ServicePlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServicePlacementConstraint:ServicePlacementConstraint" - `🟡` "serviceConnectConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceServiceConnectConfiguration:ServiceServiceConnectConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceServiceConnectConfiguration:ServiceServiceConnectConfiguration" - `🟡` "serviceRegistries" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceServiceRegistries:ServiceServiceRegistries" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceServiceRegistries:ServiceServiceRegistries" - `🟡` "volumeConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceVolumeConfiguration:ServiceVolumeConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceVolumeConfiguration:ServiceVolumeConfiguration" - `🟡` "vpcLatticeConfigurations": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/ServiceVpcLatticeConfiguration:ServiceVpcLatticeConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/ServiceVpcLatticeConfiguration:ServiceVpcLatticeConfiguration" - properties: - `🟡` "service" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2fservice:Service" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2fservice:Service" - `🟡` "taskDefinition" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" - "awsx:ecs:FargateTaskDefinition": - inputs: - `🟡` "ephemeralStorage" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" - `🟡` "proxyConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" - `🟡` "runtimePlatform" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" - `🟡` "volumes": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" - properties: - `🟡` "executionRole" type changed from "/aws/v7.7.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v7.11.0/schema.json#/resources/aws:iam%2Frole:Role" - `🟡` "loadBalancers": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs%2FServiceLoadBalancer:ServiceLoadBalancer" to "/aws/v7.11.0/schema.json#/types/aws:ecs%2FServiceLoadBalancer:ServiceLoadBalancer" - `🟡` "logGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" to "/aws/v7.11.0/schema.json#/resources/aws:cloudwatch%2FlogGroup:LogGroup" - `🟡` "taskDefinition" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" to "/aws/v7.11.0/schema.json#/resources/aws:ecs%2FtaskDefinition:TaskDefinition" - `🟡` "taskRole" type changed from "/aws/v7.7.0/schema.json#/resources/aws:iam%2Frole:Role" to "/aws/v7.11.0/schema.json#/resources/aws:iam%2Frole:Role" - "awsx:lb:ApplicationLoadBalancer": - inputs: - `🟡` "accessLogs" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerAccessLogs:LoadBalancerAccessLogs" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerAccessLogs:LoadBalancerAccessLogs" - `🟡` "connectionLogs" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerConnectionLogs:LoadBalancerConnectionLogs" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerConnectionLogs:LoadBalancerConnectionLogs" - `🟡` "ipamPools" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerIpamPools:LoadBalancerIpamPools" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerIpamPools:LoadBalancerIpamPools" - `🟡` "minimumLoadBalancerCapacity" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerMinimumLoadBalancerCapacity:LoadBalancerMinimumLoadBalancerCapacity" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerMinimumLoadBalancerCapacity:LoadBalancerMinimumLoadBalancerCapacity" - `🟡` "subnetMappings": items type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerSubnetMapping:LoadBalancerSubnetMapping" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerSubnetMapping:LoadBalancerSubnetMapping" - `🟡` "subnets": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" - properties: - `🟡` "defaultSecurityGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fsecurityGroup:SecurityGroup" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fsecurityGroup:SecurityGroup" - `🟡` "defaultTargetGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" - `🟡` "listeners": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2flistener:Listener" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2flistener:Listener" - `🟡` "loadBalancer" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2floadBalancer:LoadBalancer" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2floadBalancer:LoadBalancer" - "awsx:lb:NetworkLoadBalancer": - inputs: - `🟡` "accessLogs" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerAccessLogs:LoadBalancerAccessLogs" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerAccessLogs:LoadBalancerAccessLogs" - `🟡` "connectionLogs" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerConnectionLogs:LoadBalancerConnectionLogs" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerConnectionLogs:LoadBalancerConnectionLogs" - `🟡` "ipamPools" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerIpamPools:LoadBalancerIpamPools" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerIpamPools:LoadBalancerIpamPools" - `🟡` "minimumLoadBalancerCapacity" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerMinimumLoadBalancerCapacity:LoadBalancerMinimumLoadBalancerCapacity" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerMinimumLoadBalancerCapacity:LoadBalancerMinimumLoadBalancerCapacity" - `🟡` "subnetMappings": items type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/LoadBalancerSubnetMapping:LoadBalancerSubnetMapping" to "/aws/v7.11.0/schema.json#/types/aws:lb/LoadBalancerSubnetMapping:LoadBalancerSubnetMapping" - `🟡` "subnets": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2fsubnet:Subnet" - properties: - `🟡` "defaultTargetGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" - `🟡` "listeners": items type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2flistener:Listener" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2flistener:Listener" - `🟡` "loadBalancer" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2floadBalancer:LoadBalancer" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2floadBalancer:LoadBalancer" - "awsx:lb:TargetGroupAttachment": - inputs: - `🟡` "instance" type changed from "/aws/v7.7.0/schema.json#/resources/aws:ec2%2finstance:Instance" to "/aws/v7.11.0/schema.json#/resources/aws:ec2%2finstance:Instance" - `🟡` "lambda" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lambda%2ffunction:Function" to "/aws/v7.11.0/schema.json#/resources/aws:lambda%2ffunction:Function" - `🟡` "targetGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2ftargetGroup:TargetGroup" - properties: - `🟡` "lambdaPermission" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lambda%2fpermission:Permission" to "/aws/v7.11.0/schema.json#/resources/aws:lambda%2fpermission:Permission" - `🟡` "targetGroupAttachment" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2ftargetGroupAttachment:TargetGroupAttachment" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2ftargetGroupAttachment:TargetGroupAttachment" - "awsx:awsx:Bucket": properties: - `🟡` "corsRules": items type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketCorsRule:BucketCorsRule" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketCorsRule:BucketCorsRule" - `🟡` "grants": items type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketGrant:BucketGrant" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketGrant:BucketGrant" - `🟡` "lifecycleRules": items type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketLifecycleRule:BucketLifecycleRule" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketLifecycleRule:BucketLifecycleRule" - `🟡` "logging" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketLogging:BucketLogging" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketLogging:BucketLogging" - `🟡` "objectLockConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketObjectLockConfiguration:BucketObjectLockConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketObjectLockConfiguration:BucketObjectLockConfiguration" - `🟡` "replicationConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketReplicationConfiguration:BucketReplicationConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketReplicationConfiguration:BucketReplicationConfiguration" - `🟡` "serverSideEncryptionConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration" - `🟡` "versioning" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketVersioning:BucketVersioning" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketVersioning:BucketVersioning" - `🟡` "website" type changed from "/aws/v7.7.0/schema.json#/types/aws:s3/BucketWebsite:BucketWebsite" to "/aws/v7.11.0/schema.json#/types/aws:s3/BucketWebsite:BucketWebsite" - `🟡` "awsx:awsx:RoleWithPolicy": properties: "inlinePolicies": items type changed from "/aws/v7.7.0/schema.json#/types/aws:iam/RoleInlinePolicy:RoleInlinePolicy" to "/aws/v7.11.0/schema.json#/types/aws:iam/RoleInlinePolicy:RoleInlinePolicy" - "awsx:awsx:SecurityGroup": properties: - `🟡` "egress": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ec2/SecurityGroupEgress:SecurityGroupEgress" to "/aws/v7.11.0/schema.json#/types/aws:ec2/SecurityGroupEgress:SecurityGroupEgress" - `🟡` "ingress": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ec2/SecurityGroupIngress:SecurityGroupIngress" to "/aws/v7.11.0/schema.json#/types/aws:ec2/SecurityGroupIngress:SecurityGroupIngress" - "awsx:ec2:VpcEndpointSpec": properties: - `🟡` "dnsOptions" type changed from "/aws/v7.7.0/schema.json#/types/aws:ec2/VpcEndpointDnsOptions:VpcEndpointDnsOptions" to "/aws/v7.11.0/schema.json#/types/aws:ec2/VpcEndpointDnsOptions:VpcEndpointDnsOptions" - `🟡` "subnetConfigurations": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ec2/VpcEndpointSubnetConfiguration:VpcEndpointSubnetConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ec2/VpcEndpointSubnetConfiguration:VpcEndpointSubnetConfiguration" - "awsx:ecs:EC2ServiceTaskDefinition": properties: - `🟡` "ephemeralStorage" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" - `🟡` "proxyConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" - `🟡` "runtimePlatform" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" - `🟡` "volumes": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" - "awsx:ecs:FargateServiceTaskDefinition": properties: - `🟡` "ephemeralStorage" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionEphemeralStorage:TaskDefinitionEphemeralStorage" - `🟡` "placementConstraints": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionPlacementConstraint:TaskDefinitionPlacementConstraint" - `🟡` "proxyConfiguration" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionProxyConfiguration:TaskDefinitionProxyConfiguration" - `🟡` "runtimePlatform" type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionRuntimePlatform:TaskDefinitionRuntimePlatform" - `🟡` "volumes": items type changed from "/aws/v7.7.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" to "/aws/v7.11.0/schema.json#/types/aws:ecs/TaskDefinitionVolume:TaskDefinitionVolume" - `🟡` "awsx:ecs:TaskDefinitionPortMapping": properties: "targetGroup" type changed from "/aws/v7.7.0/schema.json#/resources/aws:lb%2FtargetGroup:TargetGroup" to "/aws/v7.11.0/schema.json#/resources/aws:lb%2FtargetGroup:TargetGroup" - "awsx:lb:Listener": properties: - `🟡` "defaultActions": items type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/ListenerDefaultAction:ListenerDefaultAction" to "/aws/v7.11.0/schema.json#/types/aws:lb/ListenerDefaultAction:ListenerDefaultAction" - `🟡` "mutualAuthentication" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/ListenerMutualAuthentication:ListenerMutualAuthentication" to "/aws/v7.11.0/schema.json#/types/aws:lb/ListenerMutualAuthentication:ListenerMutualAuthentication" - "awsx:lb:TargetGroup": properties: - `🟡` "healthCheck" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/TargetGroupHealthCheck:TargetGroupHealthCheck" to "/aws/v7.11.0/schema.json#/types/aws:lb/TargetGroupHealthCheck:TargetGroupHealthCheck" - `🟡` "stickiness" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/TargetGroupStickiness:TargetGroupStickiness" to "/aws/v7.11.0/schema.json#/types/aws:lb/TargetGroupStickiness:TargetGroupStickiness" - `🟡` "targetFailovers": items type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/TargetGroupTargetFailover:TargetGroupTargetFailover" to "/aws/v7.11.0/schema.json#/types/aws:lb/TargetGroupTargetFailover:TargetGroupTargetFailover" - `🟡` "targetGroupHealth" type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/TargetGroupTargetGroupHealth:TargetGroupTargetGroupHealth" to "/aws/v7.11.0/schema.json#/types/aws:lb/TargetGroupTargetGroupHealth:TargetGroupTargetGroupHealth" - `🟡` "targetHealthStates": items type changed from "/aws/v7.7.0/schema.json#/types/aws:lb/TargetGroupTargetHealthState:TargetGroupTargetHealthState" to "/aws/v7.11.0/schema.json#/types/aws:lb/TargetGroupTargetHealthState:TargetGroupTargetHealthState" No new resources/functions. - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1752](https://redirect.github.com/pulumi/pulumi-awsx/pull/1752) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1753](https://redirect.github.com/pulumi/pulumi-awsx/pull/1753) - Fix awsx-upgrade-aws workflow failures by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1755](https://redirect.github.com/pulumi/pulumi-awsx/pull/1755) - Update pulumi/pulumi-aws version to 7.10.0 by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1758](https://redirect.github.com/pulumi/pulumi-awsx/pull/1758) - Fix weekly pulumi update by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1759](https://redirect.github.com/pulumi/pulumi-awsx/pull/1759) - Update GitHub Actions workflows. by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1762](https://redirect.github.com/pulumi/pulumi-awsx/pull/1762) - Update pulumi/pulumi-aws version to 7.11.0 by [@pulumi-bot](https://redirect.github.com/pulumi-bot) in [https://github.com/pulumi/pulumi-awsx/pull/1765](https://redirect.github.com/pulumi/pulumi-awsx/pull/1765) - Fix cloudtrail to cloudwatch logs access by [@corymhall](https://redirect.github.com/corymhall) in [https://github.com/pulumi/pulumi-awsx/pull/1763](https://redirect.github.com/pulumi/pulumi-awsx/pull/1763) **Full Changelog**: https://github.com/pulumi/pulumi-awsx/compare/v3.0.1...v3.1.0 [`v3.0.1`](https://redirect.github.com/pulumi/pulumi-awsx/releases/tag/v3.0.1) [Compare Source](https://redirect.github.com/pulumi/pulumi-awsx/compare/v3.0.0...v3.0.1) Found 121 breaking changes: - "awsx:cloudtrail:Trail": - inputs: - `🟡` "advancedEventSelectors": items type changed from "/aws/v7.0.0/schema.json#/types/aws:cloudtrail/TrailAdvancedEventSelector:TrailAdvancedEventSelector" to "/aws/v7.7.0/schema.json#/types/aws:cloudtrail/TrailAdvancedEventSelector:TrailAdvancedEventSelector" - `🟡` "eventSelectors": items type changed from "/aws/v7.0.0/schema.json#/types/aws:cloudtrail/TrailEventSelector:TrailEventSelector" to "/aws/v7.7.0/schema.json#/types/aws:cloudtrail/TrailEventSelector:TrailEventSelector" - `🟡` "insightSelectors": items type changed from "/aws/v7.0.0/schema.json#/t </details> --- 📅 **Schedule**: Branch creation - "before 10am every weekday" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Disabled because a matching PR was automerged previously. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Richard Shade <131337+rshade@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | indirect | minor | `v5.18.0` -> `v5.19.0` | [CVE-2026-25934](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3) A vulnerability was discovered in `go-git` whereby data integrity values for `.pack` and `.idx` files were not properly verified. This resulted in `go-git` potentially consuming corrupted files, which would likely result in unexpected errors such as `object not found`. For context, clients fetch [`packfiles`](https://git-scm.com/docs/pack-protocol#_packfile_data) from upstream Git servers. Those files contain a checksum of their contents, so that clients can perform integrity checks before consuming it. The pack indexes (`.idx`) are [generated](https://git-scm.com/docs/pack-format) locally by `go-git`, or the `git` cli, when new `.pack` files are received and processed. The integrity checks for both files were not being verified correctly. Note that the lack of verification of the packfile checksum has no impact on the trust relationship between the client and server, which is enforced based on the protocol being used (e.g. TLS in the case of `https://` or known hosts for `ssh://`). In other words, the packfile checksum verification does not provide any security benefits when connecting to a malicious or compromised Git server. Users should upgrade to `v5.16.5`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability. In case updating to a fixed version of `go-git` is not possible, users can run [git fsck](https://git-scm.com/docs/git-fsck) from the `git` cli to check for data corruption on a given repository. Thanks @N0zoM1z0 for finding and reporting this issue privately to the `go-git` project. [CVE-2026-33762](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-gm2x-2g9h-ccm8) `go-git`’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path name. A maliciously crafted index file can trigger an out-of-bounds slice operation, resulting in a runtime panic during normal index parsing. This issue only affects Git index format version 4. Earlier formats (`go-git` supports only `v2` and `v3`) are not vulnerable to this issue. An attacker able to supply a crafted `.git/index` file can cause applications using go-git to panic while reading the index. If the application does not recover from panics, this results in process termination, leading to a denial-of-service (DoS) condition. Exploitation requires the ability to modify or inject a Git index file within the local repository in disk. This typically implies write access to the `.git` directory. Users should upgrade to `v5.17.1`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability. go-git maintainers thank @kq5y for finding and reporting this issue privately to the `go-git` project. [CVE-2026-34165](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-jhf3-xxhw-2wpp) A vulnerability has been identified in which a maliciously crafted `.idx` file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a Denial of Service (DoS) condition. Exploitation requires write access to the local repository's `.git` directory, it order to create or alter existing `.idx` files. Users should upgrade to `v5.17.1`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability. The go-git maintainers thank @kq5y for finding and reporting this issue privately to the `go-git` project. [CVE-2026-41506](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-3xc5-wrhm-f963) `go-git` may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. If a remote repository responds to the initial `/info/refs` request with a redirect to a different host, go-git updates the session endpoint to the redirected location and reuses the original authentication for subsequent requests. This can result in the credentials (e.g. Authorization headers) being sent to an unintended host. An attacker controlling or influencing the redirect target can capture these credentials and potentially reuse them to access the victim’s repositories or other resources, depending on the scope of the credential. **Clients using `go-git` exclusively with trusted remotes (for example, GitHub or GitLab), and over a secure HTTPS connection, are not affected by this issue.** The risk arises when interacting with untrusted or misconfigured Git servers, or when using unsecured HTTP connections, which is not recommended. Such configurations also expose clients to a broader class of security risks beyond this issue, including credential interception and tampering of repository data. Users should upgrade to `v5.18.0`, or `v6.0.0-alpha.2`, in order to mitigate this vulnerability. Versions prior to v5 are likely to be affected, users are recommended to upgrade to a supported `go-git` version. The patched versions add support for configuring [followRedirects](https://git-scm.com/docs/git-config#Documentation/git-config.txt-httpfollowRedirects). In line with upstream behaviour, the default is now `initial`, while users can opt into `FollowRedirects` or `NoFollowRedirects` programmatically. Thanks to the 3 separate reports from @celinke97, @N0zoM1z0 and @AyushParkara. Thanks for finding and reporting this issue privately to the `go-git` project. 🙇 [CVE-2026-45022](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-389r-gv7p-r3rp) `go-git` may parse malformed Git objects in a way that differs from upstream Git. When `commit` or `tag` objects contain ambiguous or malformed headers, `go-git`’s decoded representation may expose values differently from how Git itself would interpret or reject the same object. Additionally, `go-git`’s commit signing and verification logic operates over commit data reconstructed from `go-git`’s parsed representation rather than the original raw object bytes. As a result, `go-git` may sign or verify a commit payload that is not byte-for-byte equivalent to the object stored in the repository. This can cause a signature to appear valid for a commit whose displayed or effective metadata differs from the object that was intended to be signed. Users should upgrade to a patched version in order to mitigate this vulnerability. Versions prior to v5 are likely to be affected, users are recommended to upgrade to a supported `go-git` version. Thanks to @bugbunny-research (https://bugbunny.ai/) for reporting this to `sigstore/gitsign`, and to @wlynch, @patzielinski and @adityasaky for coordinating the disclosure with the `go-git` project. 🙇 🥇 Thanks to @wayphinder for reporting this to the `go-git` project. :bow: --- <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> [`v5.19.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.19.0) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.18.0...v5.19.0) - build: Update module github.com/go-git/go-git/v5 to v5.18.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in[https://github.com/go-git/go-git/pull/2010](https://redirect.github.com/go-git/go-git/pull/2010)0 - v5: Bump sha1cd and go-billy by [@pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/2060](https://redirect.github.com/go-git/go-git/pull/2060) - v5: Align object encoding with upstream by [@pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/2065](https://redirect.github.com/go-git/go-git/pull/2065) **Full Changelog**: go-git/go-git@v5.18.0...v5.19.0 </details> --- 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Disabled because a matching PR was automerged previously. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Richard Shade <131337+rshade@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Bumps the pip group with 3 updates in the /aws-cs-langserve directory: [langchain-core](https://github.com/langchain-ai/langchain), [langsmith](https://github.com/langchain-ai/langsmith-sdk) and [urllib3](https://github.com/urllib3/urllib3). Bumps the pip group with 3 updates in the /aws-go-langserve directory: [langchain-core](https://github.com/langchain-ai/langchain), [langsmith](https://github.com/langchain-ai/langsmith-sdk) and [urllib3](https://github.com/urllib3/urllib3). Bumps the pip group with 3 updates in the /aws-py-langserve directory: [langchain-core](https://github.com/langchain-ai/langchain), [langsmith](https://github.com/langchain-ai/langsmith-sdk) and [urllib3](https://github.com/urllib3/urllib3). Bumps the pip group with 3 updates in the /aws-ts-langserve directory: [langchain-core](https://github.com/langchain-ai/langchain), [langsmith](https://github.com/langchain-ai/langsmith-sdk) and [urllib3](https://github.com/urllib3/urllib3). Bumps the pip group with 3 updates in the /aws-yaml-langserve directory: [langchain-core](https://github.com/langchain-ai/langchain), [langsmith](https://github.com/langchain-ai/langsmith-sdk) and [urllib3](https://github.com/urllib3/urllib3). Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `langchain-core` from 1.2.31 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.31...langchain-core==1.3.3) Updates `langsmith` from 0.7.32 to 0.8.0 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.7.32...v0.8.0) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: indirect dependency-group: pip - dependency-name: langsmith dependency-version: 0.8.0 dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

rshade force-pushed the dependabot-upgrades branch 2 times, most recently from 7b6c3c6 to 240d433 Compare May 19, 2026 16:18

pulumi-renovate Bot and others added 8 commits May 19, 2026 16:45

Update dependency @pulumi/alicloud to v3.101.0

8c271ad

Update dependency @pulumi/alicloud to v3.102.0

90ef08c

Update dependency @pulumi/aws to v7.4.0

1a472a7

Update dependency @pulumi/aws to v7.5.0

902b67c

Update dependency @pulumi/aws to v7.6.0

198fb1b

rshade force-pushed the dependabot-upgrades branch from b32ba10 to 198fb1b Compare May 20, 2026 19:31

Merge branch 'master' into dependabot-upgrades

9881be2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dependabot upgrades#2734

Dependabot upgrades#2734
rshade wants to merge 9 commits into
masterfrom
dependabot-upgrades

rshade commented May 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

rshade commented May 15, 2026

Summary

Example(s) affected

Validation

Checklist

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant