Skip to content

Bump @opentelemetry/propagator-jaeger and @pulumi/pulumi in /pulumi - #97

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pulumi/multi-294c4a7647
Closed

Bump @opentelemetry/propagator-jaeger and @pulumi/pulumi in /pulumi#97
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pulumi/multi-294c4a7647

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Removes @opentelemetry/propagator-jaeger. It's no longer used after updating ancestor dependency @pulumi/pulumi. These dependencies need to be updated together.

Removes @opentelemetry/propagator-jaeger

Updates @pulumi/pulumi from 3.229.0 to 3.255.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.255.0

3.255.0 (2026-07-28)

Features

  • [cli] Add an --extension flag to package commands for extension-parameterized packages, reinstalled from Pulumi.yaml on pulumi install
  • [cli] Project files to disk and surface their paths as environment variables for all output formats when opening an ESC environment #23993
  • [engine] Resolve an invoke's provider from the providers option of the parent named on the request, matching the resolution applied to resource registrations #24016
  • [cli/do] Add --resources to refer to existing resources in state in do input expressions #24037

Bug Fixes

  • [programgen/nodejs] Parent an invoke written inside a component to that component, so it resolves the component's providers #24017
  • [pcl] Apply the providers option of a component block to the resources and invokes it declares #24016
  • [cli/import] Fix import file generation when parent resources share names #24069
  • [cli] Fix parallel pulumi install processes sharing a PULUMI_HOME intermittently failing with a missing provider executable error #24080
  • [sdk/python] Allow Construct and Call methods to run concurrently in provider servers #24081

Improvements

  • [engine] Support strings containing non-UTF8 bytes flowing between providers, the engine, state, and languages that opt in (Go and PCL initially) #23856
  • [cli] Add a --summary flag to pulumi stack history events that reduces a past update's events to the same summary shape as a live pulumi up --output json, extended with error diagnostics and failed-resource markers #23960
  • [protobuf] Allow state converters to supply resource inputs and outputs in ConvertState responses #23987
  • [engine] Allow policy packs to point to executable binaries, not just script folders #24052
  • [cli/display] The Neo diagnostics link now suggests pulumi neo --debug-update or pulumi neo --debug-preview to investigate the failed operation #24075
  • [sdk/python] Allow UV_PROJECT_ENVIRONMENT to override the virtualenv path if uv is used #24077
  • [cli] Allow otel traces to be sent over https #24078

v3.254.0

3.254.0 (2026-07-23)

Features

  • [cli] Add pulumi logs share command for sharing logs with Pulumi #22546
  • [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902
  • [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #23562
  • [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886
  • [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #23835
  • [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #23932
  • [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #23813
  • [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #23945
  • [cli/do] Allow expressions for number inputs #23954
  • [cli/do] Allow expressions for boolean inputs #23967
  • [cli/policy] Add --runtime-options to pulumi policy new #23992
  • [cli/do] Add support for stateful create #23996
  • [cli/do] Add support for stateful delete #24000

Bug Fixes

  • [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #22524

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.255.0 (2026-07-28)

Features

  • [cli] Add an --extension flag to package commands for extension-parameterized packages, reinstalled from Pulumi.yaml on pulumi install
  • [cli] Project files to disk and surface their paths as environment variables for all output formats when opening an ESC environment #23993
  • [engine] Resolve an invoke's provider from the providers option of the parent named on the request, matching the resolution applied to resource registrations #24016
  • [cli/do] Add --resources to refer to existing resources in state in do input expressions #24037

Bug Fixes

  • [programgen/nodejs] Parent an invoke written inside a component to that component, so it resolves the component's providers #24017
  • [pcl] Apply the providers option of a component block to the resources and invokes it declares #24016
  • [cli/import] Fix import file generation when parent resources share names #24069
  • [cli] Fix parallel pulumi install processes sharing a PULUMI_HOME intermittently failing with a missing provider executable error #24080
  • [sdk/python] Allow Construct and Call methods to run concurrently in provider servers #24081

Improvements

  • [engine] Support strings containing non-UTF8 bytes flowing between providers, the engine, state, and languages that opt in (Go and PCL initially) #23856
  • [cli] Add a --summary flag to pulumi stack history events that reduces a past update's events to the same summary shape as a live pulumi up --output json, extended with error diagnostics and failed-resource markers #23960
  • [protobuf] Allow state converters to supply resource inputs and outputs in ConvertState responses #23987
  • [engine] Allow policy packs to point to executable binaries, not just script folders #24052
  • [cli/display] The Neo diagnostics link now suggests pulumi neo --debug-update or pulumi neo --debug-preview to investigate the failed operation #24075
  • [sdk/python] Allow UV_PROJECT_ENVIRONMENT to override the virtualenv path if uv is used #24077
  • [cli] Allow otel traces to be sent over https #24078

3.254.0 (2026-07-23)

Features

  • [cli] Add pulumi logs share command for sharing logs with Pulumi #22546
  • [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902
  • [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #23562
  • [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886
  • [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #23835
  • [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #23932
  • [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #23813
  • [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #23945
  • [cli/do] Allow expressions for number inputs #23954
  • [cli/do] Allow expressions for boolean inputs #23967
  • [cli/policy] Add --runtime-options to pulumi policy new #23992
  • [cli/do] Add support for stateful create #23996
  • [cli/do] Add support for stateful delete #24000

Bug Fixes

  • [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #22524
  • [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #23935
  • [engine] Validate snippets before persisting them #23920
  • [backend] Fix dangling ReplaceWith references in the journal replayer #23927

... (truncated)

Commits
  • 7d30b0c Add manual resource references to do (#24037)
  • aa51d8a otel traces: allow traces over https:// (#24078)
  • 0d702ca Parent invokes written inside a component to that component in nodejs (#24017)
  • 3b6e0db Add an l3-component-invoke conformance test, and apply a component's provider...
  • 6c9f7e4 Allow state converters to supply resource inputs and outputs (#23987)
  • 04abe85 Add the l2-raw-string-bytes conformance test (#23856)
  • d146f10 Use ResourceRefernce.Name and Type instead of URN parsing in NodeJS and Pytho...
  • 43b2946 Changelog and go.mod updates for v3.254.0 (#24047)
  • 8a46b20 Freeze v3.254.0 (#24039)
  • d7522ff Update module google.golang.org/grpc to v1.82.1 [SECURITY] (#24035)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026
@dependabot
dependabot Bot requested a review from minniemeierdev as a code owner July 31, 2026 21:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026
@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown

🍹 preview on andymeier/prod

Pulumi report

View in Pulumi Cloud

  Previewing update (prod)

View Live: https://app.pulumi.com/meiermade/andymeier/prod/previews/13cf332c-6d66-43f8-be80-136645ee9e41

pulumi:pulumi:Stack: (same)
  [urn=urn:pulumi:prod::andymeier::pulumi:pulumi:Stack::andymeier-prod]
Resources:
  13 unchanged
  

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/pulumi/multi-294c4a7647 branch from 3059e3c to f15ca1c Compare July 31, 2026 21:23

@minniemeierdev minniemeierdev left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the dependency update for the pulumi project.

Evidence:

  • Diff is limited to pulumi/package.json and pulumi/package-lock.json.
  • @pulumi/pulumi resolves to 3.255.0; @opentelemetry/propagator-jaeger is no longer installed.
  • Local checks on current head f15ca1c: npm ci succeeded and npm run check passed.
  • GitHub checks on current head passed: Test and Preview.
  • Pulumi Preview reported 13 unchanged resources for andymeier/prod.
  • Production npm audit findings improved from 25 advisories on origin/main to 6 on this PR; remaining advisories are not introduced by this update.

Disposition: safe to merge after task reviewer/merge-owner confirmation.

Removes [@opentelemetry/propagator-jaeger](https://github.com/open-telemetry/opentelemetry-js). It's no longer used after updating ancestor dependency [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs). These dependencies need to be updated together.


Removes `@opentelemetry/propagator-jaeger`

Updates `@pulumi/pulumi` from 3.229.0 to 3.255.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.255.0/sdk/nodejs)

---
updated-dependencies:
- dependency-name: "@opentelemetry/propagator-jaeger"
  dependency-version:
  dependency-type: indirect
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.255.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/pulumi/multi-294c4a7647 branch from f15ca1c to 7dcabcc Compare July 31, 2026 21:28
@minniemeierdev

Copy link
Copy Markdown

Follow-up after the review-request/rebase event: revalidated current head 7dcabcc910ffc6b8f6590046ab216b348fce4bbe.

Updated evidence:

  • Diff still limited to pulumi/package.json and pulumi/package-lock.json.
  • @pulumi/pulumi resolves to 3.255.0; @opentelemetry/propagator-jaeger is not installed.
  • Local npm ci succeeded and npm run check passed from /pulumi.
  • GitHub Test and Preview checks passed on the current head.
  • Pulumi Preview still reports 13 unchanged resources for andymeier/prod.
  • Production npm audit findings are now 4 advisories on this PR, down from 25 on origin/main; remaining advisories are not introduced by this update.

Disposition remains: safe from my assignee review; awaiting Andrew’s reviewer/merge-owner confirmation.

@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer a dependency, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/pulumi/multi-294c4a7647 branch August 1, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant