Update first-party Pulumi dependencies

[pulumi-renovate]

This PR contains the following updates:

Package	Type	Update	Change
@pulumi/kubernetes (source)	dependencies	minor	4.23.0 -> 4.24.0
github.com/pulumi/pulumi-kubernetes/sdk/v4	require	minor	v4.23.0 -> v4.24.0
github.com/pulumi/pulumi/pkg/v3	require	minor	v3.205.0 -> v3.206.0
pulumi/actions	action	patch	v6.6.0 -> v6.6.1

---

Release Notes

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.24.0

Compare Source

Added

• Added a plainHttp option to the v4.Chart resource. (https://github.com/pulumi/pulumi-kubernetes/issues/3250)

Changed

• The pulumi.com/waitFor annotation now uses an
  RFC9535-compliant JSONPath
  parser. This makes it possible to wait for more complex scenarios.

  For example:

  • To wait for a Pod's status.phase to be "Running" or "Succeeded":

    pulumi.com/waitFor: "jsonpath={.status[?@​ == 'Running' || @​ == 'Succeeded' ]}"

  • To wait for for an object to have a "Failed" or "Complete" condition with
    a "True" value:

    pulumi.com/waitFor: "jsonpath={.conditions[?(@​.type=='Failed'||@​.type=='Complete')].status}=True

  (Tools like jsonpath.com are very helpful for
  ensuring your JSONPath expression works as expected.)

  Importantly, please note that kubectl wait --for=jsonpath=... supports only
  a subset of RFC9535. This means some complex waitFor annotations will not
  be reproducible with kubectl.

  Existing expressions should continue to work normally with one notable
  exception: a selector like .items[] now requires an explicit wildcard, i.e.
  .items[*].

  As a reminder, the pulumi.com/waitFor annotation is experimental and
  subject to change. Similarly, RFC9535 is still only proposed and may also
  change in the future.

• enableConfigMapMutable and enableSecretMutable are now stable.
  https://github.com/pulumi/pulumi-kubernetes/pull/38863886)

Fixed

• Helm resources all now use the correct registry/config.json file for
  credentials. For backward-compatibility registry.json is preferred if
  it existhttps://github.com/pulumi/pulumi-kubernetes/issues/36063606)

• Fixed an issue where deletions could take longer than necessary. (https://github.com/pulumi/pulumi-kubernetes/issues/3317)

• Significantly reduced memory usage. (https://github.com/pulumi/pulumi-kubernetes/issues/3713)

• Fixed incorrect deprecation warnings for VolumeAttributesClass. (https://github.com/pulumi/pulumi-kubernetes/issues/3772)

• SecretPatch inputs are now automatically marked as secret.

pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)

v3.206.0

Compare Source

3.206.0 (2025-11-05)

Features

• [protobuf] Pass a preview flag to invokes so they can tell if they're being called during a preview
  #​20827

• [cli/about] Include PULUMI_* environment variables in the pulumi about output
  #​20855

• [auto/go] Get event log over gRPC instead of trying to read it from a text file
  #​20822

• [auto/nodejs] Get event log over gRPC instead of trying to read it from a text file
  #​20824

• [auto/python] Get event log over gRPC instead of trying to read it from a text file
  #​20833

• [cli/engine] Add environment variable to add --refresh to preview,update,destroy
  #​20797

• [sdk/nodejs] Add PULUMI_NODEJS_SKIP_COMPONENT_INPUTS environment variable to skip the new feature of sending component inputs to the engine for diffing and state storage
  #​20842

Bug Fixes

• [engine] Fix duplicate resource snapshot integrity issue, when running pulumi up --refresh --run-program and when a resource PendingReplacement exists in the snapshot
  #​20812

• [engine] Support floating point NaN and Inf values in resource state
  #​20843

Miscellaneous

• [sdk/go] Use Language.Link to link Go packages
  #​20811

pulumi/actions (pulumi/actions)

v6.6.1

Compare Source

What's Changed

• upgrade pulumi/pulumi to latest by @​tgummerer in https://github.com/pulumi/actions/pull/1394
• Prepare changelog for 6.6.1 by @​tgummerer in https://github.com/pulumi/actions/pull/1395

Full Changelog: pulumi/actions@v6...v6.6.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pulumi-renovate]

ℹ Artifact update notice

File name: provider/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/pulumi/pulumi/sdk/v3	v3.205.0 -> v3.206.0

File name: tests/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/pulumi/pulumi/sdk/v3	v3.205.0 -> v3.206.0
github.com/go-test/deep	v1.0.3 -> v1.1.1

[pulumi-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[github-actions]

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 43.77%. Comparing base (915d1ea) to head (5029995).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #3927   +/-   ##
=======================================
  Coverage   43.77%   43.77%           
=======================================
  Files          86       86           
  Lines        9899     9899           
=======================================
  Hits         4333     4333           
  Misses       5170     5170           
  Partials      396      396           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[tgummerer]

Hrm I just noticed one more issue in examples_test.go, fixed that up as well now.