Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates - #14

Merged
diazdesandi merged 1 commit into
mainfrom
dependabot/bun/minor-and-patch-6d8ffa38be
Jul 28, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates#14
diazdesandi merged 1 commit into
mainfrom
dependabot/bun/minor-and-patch-6d8ffa38be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the / directory:

Package From To
@pulumi/github 6.14.0 6.14.1
@pulumi/pulumi 3.244.0 3.254.0
es-toolkit 1.47.0 1.50.0
valibot 1.4.1 1.4.2
@biomejs/biome 2.4.16 2.5.5
@commitlint/cli 21.0.2 21.2.1
@commitlint/config-conventional 21.0.2 21.2.0
@valibot/to-json-schema 1.7.0 1.7.1

Updates @pulumi/github from 6.14.0 to 6.14.1

Release notes

Sourced from @​pulumi/github's releases.

v6.14.1

What's Changed

New Contributors

Full Changelog: pulumi/pulumi-github@v6.14.0...v6.14.1

Commits

Updates @pulumi/pulumi from 3.244.0 to 3.254.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.254.0

3.254.0 (2026-07-23)

Features

  • [cli] Add pulumi logs share command for sharing logs with Pulumi #22546
  • [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902
  • [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #23562
  • [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886
  • [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #23835
  • [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #23932
  • [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #23813
  • [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #23945
  • [cli/do] Allow expressions for number inputs #23954
  • [cli/do] Allow expressions for boolean inputs #23967
  • [cli/policy] Add --runtime-options to pulumi policy new #23992
  • [cli/do] Add support for stateful create #23996
  • [cli/do] Add support for stateful delete #24000

Bug Fixes

  • [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #22524
  • [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #23935
  • [engine] Validate snippets before persisting them #23920
  • [backend] Fix dangling ReplaceWith references in the journal replayer #23927
  • [cli/do] Fix the converter plugin not being called if just attributes needed converting #23948
  • [programgen/go] Generate compilable Go for programs that use discriminated union members as array/list elements #23980

Improvements

  • [cli] Align commands with the CLI naming guidelines, adding ls, rm, delete, mv, update, modify, create and setup aliases to list/remove/move/edit/new commands and making state remove and package remove the canonical names with delete kept as an alias #23903
  • [cli] Suggest closely-matching commands from the whole command tree when an unknown command is entered #23848
  • [cli] Print help but exit with a non-zero code when pulumi is run without a command, matching the behavior of other group commands #23848
  • [programgen] Support onError resource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #23839
  • [protobuf] Add parent and properties fields to ResourceImport so state converters can express resource hierarchy and property filters #23929
  • [protobuf] Allow state converters to declare explicit providers as resources in ConvertState responses and attach imported resources to them via the new provider field #23975
  • [cli] Redact secrets in property values in logs #23931
  • [cli] Make -v<n> --logflow no longer produce separate log files for plugins #23938
  • [protobuf] Pass a schema loader target to state converters in ConvertStateRequest #23944
  • [cli/import] Allow explicit providers to be declared in the resources section of an import file and referenced by name #23972
  • [cli] Remove the template count from pulumi new --help, which required a slow template listing before help could display #23973
  • [cli/import] Support inputs and outputs on resources in import files, importing supplied state directly and skipping the provider read when outputs are given #23984

Miscellaneous

  • [sdk] Move RetrieveGitFolder to the gitutil package #23955
  • [sdk] Move template helpers from workspace to pkg/cmd/pulumi/templates #23963

v3.253.0

3.253.0 (2026-07-14)

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.254.0 (2026-07-23)

Features

  • [cli] Add pulumi logs share command for sharing logs with Pulumi #22546
  • [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902
  • [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #23562
  • [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886
  • [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #23835
  • [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #23932
  • [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #23813
  • [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #23945
  • [cli/do] Allow expressions for number inputs #23954
  • [cli/do] Allow expressions for boolean inputs #23967
  • [cli/policy] Add --runtime-options to pulumi policy new #23992
  • [cli/do] Add support for stateful create #23996
  • [cli/do] Add support for stateful delete #24000

Bug Fixes

  • [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #22524
  • [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #23935
  • [engine] Validate snippets before persisting them #23920
  • [backend] Fix dangling ReplaceWith references in the journal replayer #23927
  • [cli/do] Fix the converter plugin not being called if just attributes needed converting #23948
  • [programgen/go] Generate compilable Go for programs that use discriminated union members as array/list elements #23980

Improvements

  • [cli] Align commands with the CLI naming guidelines, adding ls, rm, delete, mv, update, modify, create and setup aliases to list/remove/move/edit/new commands and making state remove and package remove the canonical names with delete kept as an alias #23903
  • [cli] Suggest closely-matching commands from the whole command tree when an unknown command is entered #23848
  • [cli] Print help but exit with a non-zero code when pulumi is run without a command, matching the behavior of other group commands #23848
  • [programgen] Support onError resource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #23839
  • [protobuf] Add parent and properties fields to ResourceImport so state converters can express resource hierarchy and property filters #23929
  • [protobuf] Allow state converters to declare explicit providers as resources in ConvertState responses and attach imported resources to them via the new provider field #23975
  • [cli] Redact secrets in property values in logs #23931
  • [cli] Make -v<n> --logflow no longer produce separate log files for plugins #23938
  • [protobuf] Pass a schema loader target to state converters in ConvertStateRequest #23944
  • [cli/import] Allow explicit providers to be declared in the resources section of an import file and referenced by name #23972
  • [cli] Remove the template count from pulumi new --help, which required a slow template listing before help could display #23973
  • [cli/import] Support inputs and outputs on resources in import files, importing supplied state directly and skipping the provider read when outputs are given #23984

Miscellaneous

  • [sdk] Move RetrieveGitFolder to the gitutil package #23955
  • [sdk] Move template helpers from workspace to pkg/cmd/pulumi/templates #23963

3.253.0 (2026-07-14)

Features

... (truncated)

Commits
  • d7522ff Update module google.golang.org/grpc to v1.82.1 [SECURITY] (#24035)
  • 29ac4d9 Make test_fast fast (#24005)
  • 68f6673 Remove some outdated dependencies (#23998)
  • aca1862 Add accepts_byte_string capability fields to the protocol (#23873)
  • e14c323 Update dependency js-yaml to v4.3.0 [SECURITY] (#23997)
  • 73ab6ca Add loader_target to ConvertStateRequest (#23944)
  • 69afa57 Add explicit provider support to ConvertState responses (#23975)
  • 53806e2 Remove the simple-enum-schema SDK codegen test, covered by conformance tests ...
  • 0f7e7c4 vendor charmbracelet/bubbles/textinput & atotto/clipboard (#23959)
  • 8a79286 Add a language conformance test for onError resource hooks (#23839)
  • Additional commits viewable in compare view

Updates es-toolkit from 1.47.0 to 1.50.0

Release notes

Sourced from es-toolkit's releases.

v1.50.0

Released on July 24th, 2026.

  • Added the es-toolkit/types entrypoint: a declaration-only module of compile-time type utilities TypeScript lacks natively — ValueOf, Simplify, Writable, NonEmptyArray, DeepPartial, and DeepReadonly. ([#1818])
  • Added flow to es-toolkit/fp, a reusable data-last composition built on pipe. ([#1812])

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

  • Fixed compat/intersectionBy to dedupe a single array (including by the iteratee) and to keep results consistent with Lodash. ([#1935])

  • Fixed compat/findIndex and compat/findLastIndex to coerce a NaN fromIndex to 0 and to convert fromIndex to an integer. ([#1828], [#1834], [#1938])

  • Fixed compat/lastIndexOf to coerce fromIndex like Lodash. ([#1832])

  • Fixed compat/every to treat a falsy, non-nullish doesMatch as a _.property shorthand instead of identity. ([#1940])

  • Fixed compat/nth to support string inputs. ([#1833])

  • Fixed compat/inRange to not throw on a lone negative bound. ([#1835])

  • Fixed compat/toArray to convert Sets to arrays like Lodash. ([#1840])

  • Fixed compat/values to treat sparse array holes as undefined. ([#1894])

  • Fixed compat/maxBy and compat/minBy to restore Lodash-compatible comparison. ([#1893])

  • Fixed compat/includes to exclude the length property when matching array-like values. ([#1886])

  • Fixed the case functions to split ordinal numbers like Lodash, and to count string size and padding by code points for multi-byte characters. ([#1836], [#1852], [#1853])

  • Fixed compat/unset to not treat an own literal dotted key as a deep path. ([#1808])

  • Moved compat/flattenDepth's flattening logic out of flatten. ([#1847])

  • Restored the standalone eq and templateSettings entry points. ([#1895])

  • Fixed deburr to remove all combining diacritical marks, matching Lodash. ([#1807])

  • Fixed partition to accept any predicate return value, like Array.prototype.filter. ([#1937])

  • Fixed has and hasIn to prioritize nullish literal keys over paths. ([#1810])

  • Fixed invokeMap to normalize a string path via toPath for this binding. ([#1814])

  • Fixed isDeepKey to detect deep keys with stricter patterns. ([#1621])

  • Fixed unzipWith to return an empty array instead of throwing on empty input. ([#1816])

  • Improved documentation, JSDoc accuracy, and internal refactoring across compat and fp. ([#1817], [#1820], [#1822], [#1823], [#1825], [#1829], [#1830], [#1842], [#1845], [#1851], [#1858], [#1867], [#1879])

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.50.0

Released on July 24th, 2026.

  • Added the es-toolkit/types entrypoint: a declaration-only module of compile-time type utilities TypeScript lacks natively — ValueOf, Simplify, Writable, NonEmptyArray, DeepPartial, and DeepReadonly. (#1818)
  • Added flow to es-toolkit/fp, a reusable data-last composition built on pipe. (#1812)

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

  • Fixed compat/intersectionBy to dedupe a single array (including by the iteratee) and to keep results consistent with Lodash. (#1935)

  • Fixed compat/findIndex and compat/findLastIndex to coerce a NaN fromIndex to 0 and to convert fromIndex to an integer. (#1828, #1834, #1938)

  • Fixed compat/lastIndexOf to coerce fromIndex like Lodash. (#1832)

  • Fixed compat/every to treat a falsy, non-nullish doesMatch as a _.property shorthand instead of identity. (#1940)

  • Fixed compat/nth to support string inputs. (#1833)

  • Fixed compat/inRange to not throw on a lone negative bound. (#1835)

  • Fixed compat/toArray to convert Sets to arrays like Lodash. (#1840)

  • Fixed compat/values to treat sparse array holes as undefined. (#1894)

  • Fixed compat/maxBy and compat/minBy to restore Lodash-compatible comparison. (#1893)

  • Fixed compat/includes to exclude the length property when matching array-like values. (#1886)

  • Fixed the case functions to split ordinal numbers like Lodash, and to count string size and padding by code points for multi-byte characters. (#1836, #1852, #1853)

  • Fixed compat/unset to not treat an own literal dotted key as a deep path. (#1808)

  • Moved compat/flattenDepth's flattening logic out of flatten. (#1847)

  • Restored the standalone eq and templateSettings entry points. (#1895)

  • Fixed deburr to remove all combining diacritical marks, matching Lodash. (#1807)

  • Fixed partition to accept any predicate return value, like Array.prototype.filter. (#1937)

  • Fixed has and hasIn to prioritize nullish literal keys over paths. (#1810)

  • Fixed invokeMap to normalize a string path via toPath for this binding. (#1814)

  • Fixed isDeepKey to detect deep keys with stricter patterns. (#1621)

  • Fixed unzipWith to return an empty array instead of throwing on empty input. (#1816)

  • Improved documentation, JSDoc accuracy, and internal refactoring across compat and fp. (#1817, #1820, #1822, #1823, #1825, #1829, #1830, #1842, #1845, #1851, #1858, #1867, #1879)

We sincerely thank @​Antoliny0919, @​raon0211, @​dayongkr, @​spokodev, @​sarathfrancis90, @​mayur-shenoy, @​mahirhir, @​kojesung, @​Hprogram, @​BangDori, and everyone else who contributed. We appreciate your great efforts!

Version v1.49.0

Released on June 26th, 2026.

... (truncated)

Commits
  • a443efd v1.50.0
  • 9232c57 test(check-dist): skip declaration-only ./types in CJS/ESM check (#1949)
  • 4bac390 fix(types): register ./types entrypoint in check-dist test (#1948)
  • 8ea1291 feat(types): add es-toolkit/types module with compile-time type utilities (#1...
  • b854e15 fix(partition): accept any predicate return value like Array.prototype.filter...
  • 953920b fix(compat/findIndex): convert fromIndex to an integer like lodash (#1938)
  • 9b92739 fix(compat/every): treat falsy doesMatch as property shorthand, not identity ...
  • 278b4fe build(deps): bump github/codeql-action/upload-sarif (#1942)
  • 9d05639 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#1944)
  • ffea687 fix(compat/intersectionBy): resolve Lodash compatibility issues (#1935)
  • Additional commits viewable in compare view

Updates valibot from 1.4.1 to 1.4.2

Release notes

Sourced from valibot's releases.

v1.4.2

Many thanks to @​Faze-up and @​chatman-media for contributing to this release.

  • Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #1521)
  • Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #1522)
  • Fix intersect schema to merge object keys that collide with Object.prototype members like toString instead of failing to merge them (pull request #1522)
Commits
  • 0dc26ea Bump library version to 1.4.2
  • 1bd01c3 fix: handle keys that collide with Object.prototype in flatten and merge (#1522)
  • 752c636 docs: clarify string length semantics (#1505)
  • a3beff9 fix: cache word-count segmenter for non-primitive locales (#1521)
  • 1f9b183 Update FUNDING.yml in fabvor of Open Collective
  • 2c63b2a Update logos of partners in README
  • 09616b2 Add CodeRabbit as partner and remove Stainless
  • 92bcf55 Add Cloudflare to privacy policy page
  • 9bb6617 Add Cloudflare as a deploy target to our website (#1508)
  • c05bf95 Bump to-json-schema version to 1.7.1
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.4.16 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

Updates @commitlint/cli from 21.0.2 to 21.2.1

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.1

21.2.0 (2026-06-30)

Features

  • resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Chore, doc, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.0...v21.2.1

v21.2.0

21.2.0 (2026-06-30)

Features

Chore

Full Changelog: conventional-changelog/commitlint@v21.1.0...v21.2.0

v21.1.0

21.1.0 (2026-06-23)

Bug Fixes

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.1 (2026-07-08)

Note: Version bump only for package @​commitlint/cli

21.2.0 (2026-06-30)

Features

  • resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

21.1.0 (2026-06-23)

Features

  • cli: add --default-config flag to lint without a config file (#4805) (7af27ba), closes #3662
Commits

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 8…
f1216fe 
… updates

Bumps the minor-and-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.14.0` | `6.14.1` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.244.0` | `3.254.0` |
| [es-toolkit](https://github.com/toss/es-toolkit) | `1.47.0` | `1.50.0` |
| [valibot](https://github.com/open-circle/valibot) | `1.4.1` | `1.4.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.16` | `2.5.5` |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.0.2` | `21.2.1` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.0.2` | `21.2.0` |
| [@valibot/to-json-schema](https://github.com/open-circle/valibot) | `1.7.0` | `1.7.1` |



Updates `@pulumi/github` from 6.14.0 to 6.14.1
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.14.0...v6.14.1)

Updates `@pulumi/pulumi` from 3.244.0 to 3.254.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.254.0/sdk/nodejs)

Updates `es-toolkit` from 1.47.0 to 1.50.0
- [Release notes](https://github.com/toss/es-toolkit/releases)
- [Changelog](https://github.com/toss/es-toolkit/blob/main/CHANGELOG.md)
- [Commits](toss/es-toolkit@v1.47.0...v1.50.0)

Updates `valibot` from 1.4.1 to 1.4.2
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.1...v1.4.2)

Updates `@biomejs/biome` from 2.4.16 to 2.5.5
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome)

Updates `@commitlint/cli` from 21.0.2 to 21.2.1
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.1/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.0.2 to 21.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.0/@commitlint/config-conventional)

Updates `@valibot/to-json-schema` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](https://github.com/open-circle/valibot/commits)

---
updated-dependencies:
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: es-toolkit
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: valibot
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@valibot/to-json-schema"
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@diazdesandi
diazdesandi merged commit b3e480c into main Jul 28, 2026
2 of 3 checks passed
@diazdesandi
diazdesandi deleted the dependabot/bun/minor-and-patch-6d8ffa38be branch July 28, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@diazdesandi