Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-26 15:40 UTC

pulumi / pulumi-go-provider

A framework for building Go Providers for Pulumi

GoApache-2.0★ 47 Sterne⑂ 15 Forksseit Juni 2022Auf GitHub ansehen ↗

pulumi/pulumi-go-provider erreicht einen Gesundheitsindex von 74 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (90/100) ab, am schwächsten bei Community & Adoption (54/100). Zuletzt vor 2 Tagen aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.

74
gesamt / 100
Gut

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

74
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

PulumiOrganisation
1.312 Follower426 öffentliche Reposseit Sept. 2016

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Gogithub.com/pulumi/pulumi-go-providerv1.4.1-49vor 7 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

90Exzellent · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 2 Tagen
24.9/36Commit-Rhythmus — 36/52 Wochen mit Commits
18/18Commit-Volumen — 117 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year117
human_commit_share0,15
days_since_last_push2
active_weeks_last_year36
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 34 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 7 Tagen
19.8/27Release-Rhythmus — ein Release etwa alle 47,5 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count34
latest_release_tagv1.4.1
releases_from_tagsnein
days_since_latest_release7
mean_days_between_releases47,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

54Mittel · 18 % des Gesamtindex
Wie die Bewertung erfolgt
27/60Stars — 47 Stars
9.6/25Forks — 15 Forks
3.3/15Watcher — 5 Watcher
Verwendete Eingangsdaten
forks15
stars47
watchers5
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

77Gut · 24 % des Gesamtindex
Wie die Bewertung erfolgt
25.2/54Bus-Faktor — 2 Beitragende decken die Hälfte aller Commits ab
12.5/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 44 % der Commits
13.5/13.5Breite der Beitragenden — 22 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor2
contributors_sampled22
top_contributor_share0,445
Wie die Bewertung erfolgt
32.2/46.8Issue-Lösungsquote — 69 % der Issues geschlossen
32.4/38.3PR-Annahme — 353/417 entschiedene PRs gemergt
12/15OpenSSF Scorecard: Code-Review — Found 7/8 approved changesets -- score normalized to 8
Verwendete Eingangsdaten
merged_prs353
open_issues44
closed_issues97
issue_closed_ratio0,688
closed_unmerged_prs64
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
22.4/25Reichweite des Inhabers — 1.312 Follower von pulumi
25/25Kontohistorie — 426 öffentliche Repos, Kontoalter ca. 9 Jahre
Verwendete Eingangsdaten
followers1.312
owner_typeOrganization
is_verified
owner_loginpulumi
public_repos426
account_age_days3.611

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf go
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 7 Tagen
20/20Versionshistorie — 49 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesgithub.com/pulumi/pulumi-go-provider
ecosystemsgo
any_deprecatednein
min_days_since_publish7

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

70Gut · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 8 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration — .golangci.yaml
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_configja
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics
has_wikija
homepage
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

78Gut · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — keine Daten
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
6/7.5Code-Review — Found 7/8 approved changesets -- score normalized to 8
2.5/2.5Contributors — project has 8 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — keine Daten
4.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate7,3
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories1
affected_packages1
assessed_packages221
unassessed_packages3
affected_by_severityunknown 1
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 221 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. 3 konnten nicht bewertet werden — keine aufgelöste Version, ein nicht unterstütztes Ökosystem oder außerhalb der ausgewiesenen Paketliste. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

57Mittel · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
0/40Lesbare Commit-Historie — keine Daten
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share
agent_instruction_files
agent_instruction_max_bytes
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Lesbare Commit-Historie. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — .mise.toml, Makefile, examples/random-login/Makefile
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration — .golangci.yaml
11/11Statische Typprüfung — tests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed, tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed
10/10Reproduzierbare Umgebung — lockfile
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100
8/8Automatisierte Wartung — 2 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
9/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesgo.sum
has_dockerfilenein
typed_languageja
bootstrap_files.mise.toml, Makefile, examples/random-login/Makefile
has_devcontainernein
has_linter_configja
typecheck_configstests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed, tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed
agent_commit_share0
toolchain_manifestsexamples/assets/go.mod, examples/auto-naming/go.mod, examples/component-provider/go.mod, examples/configurable/go.mod, examples/credentials/go.mod, examples/dna-store/go.mod, examples/echo/go.mod, examples/file/go.mod, examples/random-login/go.mod, examples/remember/go.mod, examples/str/go.mod, examples/wrapped/go.mod, go.mod, tests/go.mod
dependency_bot_commit_share0,02
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Go (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/133 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageGo
largest_source_bytes56.807
source_files_sampled133
oversized_source_files0
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files

Eckdaten

47GitHub-Sterne
22Mitwirkende
117Commits, letzte 12 Monate
2Tage seit letztem Push
34Releases
2Bus-Faktor
44offene Issues
GoPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 15 ⇿
0Sterne
15Forks
30Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

03581013151522022-072024-052026-03
Major 0Minor 20Patch 8

Jeder Punkt umfasst 4 Tage.

OpenSSF Scorecard 7.3 / 10
7.3Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-26 15:39 UTC

10Binary-Artifactsno binaries found in the repo
k. A.Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
8Code-ReviewFound 7/8 approved changesets -- score normalized to 8
10Contributorsproject has 8 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
k. A.Packagingpackaging workflow not detected
9Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 9
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
Direkte Abhängigkeiten 11
RegistryPaketVersionsvorgabeManifest
Gogithub.com/blang/semverv3.5.1+incompatiblego.mod
Gogithub.com/pulumi/pulumi/pkg/v3v3.254.0go.mod
Gogithub.com/pulumi/pulumi/sdk/v3v3.254.0go.mod
Gogo.uber.org/mockv0.6.0go.mod
Gogolang.org/x/expv0.0.0-20260410095643-746e56fc9e2fgo.mod
Gogoogle.golang.org/grpcv1.82.1go.mod
Gogoogle.golang.org/protobufv1.36.11go.mod
Gopgregory.net/rapidv1.3.0go.mod
Gogithub.com/golang/protobufv1.5.4go.mod
Gogithub.com/hashicorp/go-multierrorv1.1.1go.mod
Gogithub.com/stretchr/testifyv1.11.1go.mod
Alle Abhängigkeiten 224

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 11 direkte und 213 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Gogithub.com/blang/semverv3.5.1+incompatibledirekt
Gogithub.com/golang/protobufv1.5.4direkt
Gogithub.com/hashicorp/go-multierrorv1.1.1direkt
Gogithub.com/pulumi/pulumi/pkg/v3v3.254.0direkt
Gogithub.com/pulumi/pulumi/sdk/v3v3.254.0direkt
Gogithub.com/stretchr/testifyv1.11.1direkt
Gogo.uber.org/mockv0.6.0direkt
Gogolang.org/x/expv0.0.0-20260410095643-746e56fc9e2fdirekt
Gogoogle.golang.org/grpcv1.82.1direkt
Gogoogle.golang.org/protobufv1.36.11direkt
Gopgregory.net/rapidv1.3.0direkt
Gocel.dev/exprv0.25.1indirekt
Gocloud.google.com/gov0.123.0indirekt
Gocloud.google.com/go/authv0.18.2indirekt
Gocloud.google.com/go/auth/oauth2adaptv0.2.8indirekt
Gocloud.google.com/go/compute/metadatav0.9.0indirekt
Gocloud.google.com/go/iamv1.5.3indirekt
Gocloud.google.com/go/kmsv1.26.0indirekt
Gocloud.google.com/go/loggingv1.13.2indirekt
Gocloud.google.com/go/longrunningv0.8.0indirekt
Gocloud.google.com/go/monitoringv1.24.3indirekt
Gocloud.google.com/go/storagev1.61.3indirekt
Gogithub.com/agext/levenshteinv1.2.3indirekt
Gogithub.com/apparentlymart/go-textseg/v15v15.0.0indirekt
Gogithub.com/aws/aws-sdk-go-v2v1.41.11indirekt
Gogithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamv1.7.12indirekt
Gogithub.com/aws/aws-sdk-go-v2/configv1.32.20indirekt
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.19.19indirekt
Gogithub.com/aws/aws-sdk-go-v2/feature/ec2/imdsv1.18.25indirekt
Gogithub.com/aws/aws-sdk-go-v2/internal/configsourcesv1.4.27indirekt
Gogithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2v2.7.27indirekt
Gogithub.com/aws/aws-sdk-go-v2/internal/v4av1.4.26indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/cloudwatchlogsv1.74.4indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/internal/accept-encodingv1.13.10indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/internal/checksumv1.9.18indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/internal/presigned-urlv1.13.25indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/internal/s3sharedv1.19.25indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/kmsv1.50.3indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/s3v1.102.2indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/signinv1.1.1indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/ssov1.30.19indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/ssooidcv1.36.2indirekt
Gogithub.com/aws/aws-sdk-go-v2/service/stsv1.42.3indirekt
Gogithub.com/aws/smithy-gov1.27.0indirekt
Gogithub.com/aymanbagabas/go-osc52/v2v2.0.1indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/azcorev1.21.0indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/azidentityv1.13.1indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/internalv1.11.2indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeysv1.4.0indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/security/keyvault/internalv1.2.0indirekt
Gogithub.com/azuread/microsoft-authentication-library-for-gov1.7.0indirekt
Gogithub.com/bazelbuild/buildtoolsv0.0.0-20260211083412-859bfffeef82indirekt
Gogithub.com/burntsushi/tomlv1.6.0indirekt
Gogithub.com/cenkalti/backoff/v4v4.3.0indirekt
Gogithub.com/cenkalti/backoff/v5v5.0.3indirekt
Gogithub.com/cespare/xxhash/v2v2.3.0indirekt
Gogithub.com/charmbracelet/bubblesv1.0.0indirekt
Gogithub.com/charmbracelet/bubbleteav1.3.10indirekt
Gogithub.com/charmbracelet/colorprofilev0.4.3indirekt
Gogithub.com/charmbracelet/lipglossv1.1.0indirekt
Gogithub.com/charmbracelet/x/ansiv0.11.7indirekt
Gogithub.com/charmbracelet/x/cellbufv0.0.15indirekt
Gogithub.com/charmbracelet/x/termv0.2.2indirekt
Gogithub.com/cheggaaa/pbv1.0.29indirekt
Gogithub.com/clipperhouse/displaywidthv0.11.0indirekt
Gogithub.com/clipperhouse/uax29/v2v2.7.0indirekt
Gogithub.com/cloudflare/circlv1.6.3indirekt
Gogithub.com/cncf/xds/gov0.0.0-20260202195803-dba9d589def2indirekt
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirekt
Gogithub.com/deckarep/golang-set/v2v2.5.0indirekt
Gogithub.com/djherbis/timesv1.5.0indirekt
Gogithub.com/djherbis/timesv1.6.0indirekt
Gogithub.com/edsrzf/mmap-gov1.1.0indirekt
Gogithub.com/emirpasic/godsv1.18.1indirekt
Gogithub.com/envoyproxy/go-control-plane/envoyv1.37.0indirekt
Gogithub.com/envoyproxy/protoc-gen-validatev1.3.3indirekt
Gogithub.com/erikgeiser/coninputv0.0.0-20211004153227-1c3628e74d0findirekt
Gogithub.com/felixge/httpsnoopv1.0.4indirekt
Gogithub.com/git-pkgs/manifestsv0.4.1indirekt
Gogithub.com/git-pkgs/packageurl-gov0.3.1indirekt
Gogithub.com/git-pkgs/purlv0.1.10indirekt
Gogithub.com/git-pkgs/versv0.2.4indirekt
Gogithub.com/go-git/gcfg/v2v2.0.2indirekt
Gogithub.com/go-git/go-billy/v6v6.0.0-alpha.1indirekt
Gogithub.com/go-git/go-git/v6v6.0.0-alpha.4indirekt
Gogithub.com/go-jose/go-jose/v4v4.1.4indirekt
Gogithub.com/go-logr/logrv1.4.4indirekt
Gogithub.com/go-logr/stdrv1.2.2indirekt
Gogithub.com/go-test/deepv1.1.1indirekt
Gogithub.com/gofrs/uuidv4.4.0+incompatibleindirekt
Gogithub.com/gogo/protobufv1.3.2indirekt
Gogithub.com/golang-jwt/jwt/v5v5.3.1indirekt
Gogithub.com/golang/glogv1.2.5indirekt
Gogithub.com/google/go-querystringv1.1.0indirekt
Gogithub.com/google/s2a-gov0.1.9indirekt
Gogithub.com/google/uuidv1.6.0indirekt
Gogithub.com/google/wirev0.7.0indirekt
Gogithub.com/googleapis/enterprise-certificate-proxyv0.3.14indirekt
Gogithub.com/googleapis/gax-go/v2v2.19.0indirekt
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcpv1.32.0indirekt
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/exporter/metricv0.55.0indirekt
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemappingv0.55.0indirekt
Gogithub.com/gorilla/muxv1.8.0indirekt
Gogithub.com/grpc-ecosystem/grpc-gateway/v2v2.29.0indirekt
Gogithub.com/grpc-ecosystem/grpc-opentracingv0.0.0-20180507213350-8e809c8a8645indirekt
Gogithub.com/hashicorp/errwrapv1.1.0indirekt
Gogithub.com/hashicorp/go-cleanhttpv0.5.2indirekt
Gogithub.com/hashicorp/go-retryablehttpv0.7.8indirekt
Gogithub.com/hashicorp/go-rootcertsv1.0.2indirekt
Gogithub.com/hashicorp/go-secure-stdlib/parseutilv0.2.0indirekt
Gogithub.com/hashicorp/go-secure-stdlib/strutilv0.1.2indirekt
Gogithub.com/hashicorp/go-sockaddrv1.0.7indirekt
Gogithub.com/hashicorp/go-versionv1.9.0indirekt
Gogithub.com/hashicorp/hclv1.0.1-vault-7indirekt
Gogithub.com/hashicorp/hcl/v2v2.24.0indirekt
Gogithub.com/hashicorp/vault/apiv1.22.0indirekt
Gogithub.com/iancoleman/strcasev0.3.0indirekt
Gogithub.com/inconshreveable/mousetrapv1.1.0indirekt
Gogithub.com/json-iterator/gov1.1.12indirekt
Gogithub.com/kevinburke/ssh_configv1.6.0indirekt
Gogithub.com/klauspost/compressv1.18.0indirekt
Gogithub.com/klauspost/cpuid/v2v2.3.0indirekt
Gogithub.com/kylelemons/godebugv1.1.0indirekt
Gogithub.com/lucasb-eyer/go-colorfulv1.4.0indirekt
Gogithub.com/mattn/go-isattyv0.0.23indirekt
Gogithub.com/mattn/go-localereaderv0.0.1indirekt
Gogithub.com/mattn/go-runewidthv0.0.24indirekt
Gogithub.com/microsoft/go-winiov0.6.2indirekt
Gogithub.com/mitchellh/copystructurev1.2.0indirekt
Gogithub.com/mitchellh/go-homedirv1.1.0indirekt
Gogithub.com/mitchellh/go-psv1.0.0indirekt
Gogithub.com/mitchellh/go-wordwrapv1.0.1indirekt
Gogithub.com/mitchellh/mapstructurev1.5.0indirekt
Gogithub.com/mitchellh/reflectwalkv1.0.2indirekt
Gogithub.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1ddindirekt
Gogithub.com/modern-go/reflect2v1.0.3-0.20250322232337-35a7c28c31eeindirekt
Gogithub.com/muesli/ansiv0.0.0-20230316100256-276c6243b2f6indirekt
Gogithub.com/muesli/cancelreaderv0.2.2indirekt
Gogithub.com/muesli/termenvv0.16.0indirekt
Gogithub.com/natefinch/atomicv1.0.1indirekt
Gogithub.com/opentracing/basictracer-gov1.1.0indirekt
Gogithub.com/opentracing/opentracing-gov1.2.0indirekt
Gogithub.com/pgavlin/fxv0.1.6indirekt
Gogithub.com/pgavlin/fx/v2v2.0.12indirekt
Gogithub.com/pgavlin/goldmarkv1.1.33-0.20200616210433-b5eb04559386indirekt
Gogithub.com/pjbgf/sha1cdv0.6.0indirekt
Gogithub.com/pkg/browserv0.0.0-20240102092130-5ac0b6a4141cindirekt
Gogithub.com/pkg/errorsv0.9.1indirekt
Gogithub.com/pkg/termv1.1.0indirekt
Gogithub.com/planetscale/vtprotobufv0.6.1-0.20240319094008-0393e58bdf10indirekt
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2indirekt
Gogithub.com/protonmail/go-cryptov1.4.1indirekt
Gogithub.com/pulumi/appdashv0.0.0-20231130102222-75f619a67231indirekt
Gogithub.com/pulumi/inflectorv0.2.1indirekt
Gogithub.com/pulumi/providertestv0.7.0indirekt
Gogithub.com/pulumi/pulumi-random/sdk/v4v4.21.1indirekt
Gogithub.com/rivo/unisegv0.4.7indirekt
Gogithub.com/rogpeppe/go-internalv1.14.1indirekt
Gogithub.com/ryanuber/go-globv1.0.0indirekt
Gogithub.com/sabhiram/go-gitignorev0.0.0-20210923224102-525f6e181f06indirekt
Gogithub.com/santhosh-tekuri/jsonschema/v5v5.0.0indirekt
Gogithub.com/santhosh-tekuri/jsonschema/v5v5.3.1indirekt
Gogithub.com/segmentio/asmv1.1.3indirekt
Gogithub.com/segmentio/asmv1.2.0indirekt
Gogithub.com/segmentio/encodingv0.3.5indirekt
Gogithub.com/segmentio/encodingv0.4.0indirekt
Gogithub.com/sergi/go-diffv1.4.0indirekt
Gogithub.com/spf13/aferov1.15.0indirekt
Gogithub.com/spf13/castv1.4.1indirekt
Gogithub.com/spf13/cobrav1.10.2indirekt
Gogithub.com/spf13/pflagv1.0.10indirekt
Gogithub.com/spiffe/go-spiffe/v2v2.6.0indirekt
Gogithub.com/stretchr/objxv0.4.0indirekt
Gogithub.com/texttheater/golang-levenshteinv1.0.1indirekt
Gogithub.com/uber/jaeger-client-gov2.30.0+incompatibleindirekt
Gogithub.com/uber/jaeger-libv2.4.1+incompatibleindirekt
Gogithub.com/xeipuuv/gojsonpointerv0.0.0-20180127040702-4e3ac2762d5findirekt
Gogithub.com/xeipuuv/gojsonreferencev0.0.0-20180127040603-bd5ef7bd5415indirekt
Gogithub.com/xeipuuv/gojsonschemav1.2.0indirekt
Gogithub.com/xo/terminfov0.0.0-20220910002029-abceb7e1c41eindirekt
Gogithub.com/zclconf/go-ctyv1.16.3indirekt
Gogo.opentelemetry.io/auto/sdkv1.2.1indirekt
Gogo.opentelemetry.io/collector/featuregatev1.63.0indirekt
Gogo.opentelemetry.io/collector/pdatav1.63.0indirekt
Gogo.opentelemetry.io/contrib/bridges/otelslogv0.19.0indirekt
Gogo.opentelemetry.io/contrib/detectors/gcpv1.43.0indirekt
Gogo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpcv0.67.0indirekt
Gogo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpv0.67.0indirekt
Gogo.opentelemetry.io/otelv1.44.0indirekt
Gogo.opentelemetry.io/otel/bridge/opentracingv1.33.0indirekt
Gogo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcv0.20.0indirekt
Gogo.opentelemetry.io/otel/exporters/otlp/otlptracev1.44.0indirekt
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.44.0indirekt
Gogo.opentelemetry.io/otel/logv0.20.0indirekt
Gogo.opentelemetry.io/otel/metricv1.44.0indirekt
Gogo.opentelemetry.io/otel/sdkv1.44.0indirekt
Gogo.opentelemetry.io/otel/sdk/logv0.20.0indirekt
Gogo.opentelemetry.io/otel/sdk/metricv1.44.0indirekt
Gogo.opentelemetry.io/otel/tracev1.44.0indirekt
Gogo.opentelemetry.io/proto/otlpv1.11.0indirekt
Gogo.uber.org/atomicv1.11.0indirekt
Gogo.uber.org/multierrv1.11.0indirekt
Gogocloud.devv0.46.0indirekt
Gogocloud.dev/secrets/hashivaultv0.46.0indirekt
Gogolang.org/x/cryptov0.54.0indirekt
Gogolang.org/x/modv0.37.0indirekt
Gogolang.org/x/netv0.57.0indirekt
Gogolang.org/x/oauth2v0.36.0indirekt
Gogolang.org/x/syncv0.22.0indirekt
Gogolang.org/x/sysv0.47.0indirekt
Gogolang.org/x/termv0.45.0indirekt
Gogolang.org/x/textv0.40.0indirekt
Gogolang.org/x/timev0.15.0indirekt
Gogolang.org/x/toolsv0.47.0indirekt
Gogolang.org/x/xerrorsv0.0.0-20240903120638-7835f813f4daindirekt
Gogoogle.golang.org/apiv0.272.0indirekt
Gogoogle.golang.org/genprotov0.0.0-20260316180232-0b37fe3546d5indirekt
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20260720211330-0afa2a65878aindirekt
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20260720211330-0afa2a65878aindirekt
Gogopkg.in/yaml.v3v3.0.1indirekt
Golukechampine.com/frandv1.5.1indirekt
PyPIparverindirekt
PyPIpulumiindirekt
PyPIsemverindirekt
Abhängigkeits-Advisories 1

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 221 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 1 tragen bekannte Advisories, davon 0 direkte. 3 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
golang.org/x/cryptov0.54.0indirektunbekannt1

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 37139,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 658460,
        "Shell": 853,
        "Python": 37826,
        "Makefile": 3395
      },
      "pushed_at": "2026-07-24T08:58:01Z",
      "created_at": "2022-06-27T17:03:35Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T08:59:37Z",
      "description": "A framework for building Go Providers for Pulumi",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://pulumi.com/",
      "name": "Pulumi",
      "type": "Organization",
      "login": "pulumi",
      "company": null,
      "location": "United States of America",
      "followers": 1312,
      "avatar_url": "https://avatars.githubusercontent.com/u/21992475?v=4",
      "created_at": "2016-09-05T00:08:26Z",
      "is_verified": null,
      "public_repos": 426,
      "account_age_days": 3611
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.4.1",
          "kind": "patch",
          "published_at": "2026-07-18T20:41:41Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-07-06T08:51:19Z"
        },
        {
          "tag": "v1.3.2",
          "kind": "patch",
          "published_at": "2026-04-27T14:50:23Z"
        },
        {
          "tag": "v1.3.1",
          "kind": "patch",
          "published_at": "2026-03-17T14:09:01Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-01-27T15:49:46Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2025-11-15T13:13:42Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2025-08-27T17:41:56Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2025-06-09T22:21:58Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2025-06-09T20:25:21Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2025-05-16T22:03:55Z"
        },
        {
          "tag": "v1.0.0-rc.2",
          "kind": "prerelease",
          "published_at": "2025-05-15T18:22:35Z"
        },
        {
          "tag": "v1.0.0-rc.1",
          "kind": "prerelease",
          "published_at": "2025-05-08T17:30:35Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2025-04-17T17:21:09Z"
        },
        {
          "tag": "v0.25.0",
          "kind": "minor",
          "published_at": "2025-03-27T11:22:23Z"
        },
        {
          "tag": "v0.24.1",
          "kind": "patch",
          "published_at": "2025-01-14T12:55:14Z"
        },
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2024-12-13T09:43:04Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2024-09-26T13:12:08Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2024-09-10T10:51:50Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2024-07-27T00:39:58Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2024-06-21T10:20:53Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2024-06-14T07:05:54Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2024-06-01T04:48:09Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2024-05-01T01:58:09Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2024-04-18T15:05:41Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2024-04-01T10:05:24Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2023-12-12T19:02:56Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2023-10-26T00:51:27Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2023-09-21T17:24:39Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2023-09-12T00:03:47Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2023-09-01T18:55:24Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2023-08-24T23:56:44Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2023-08-22T17:48:32Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2023-07-25T15:28:29Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2023-06-20T15:40:12Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "8fa58a354d232f6e6b986f6f3f0f1ea7f843cb33",
          "body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| `v3.253.0` → `v3.254\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.254.0 (#562)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-24T08:58:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b739c2c1844945009e1621b06aa23c2634430d2",
          "body": null,
          "is_bot": false,
          "headline": "Update google.golang.org/grpc to 1.82.1 (#560)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-07-23T11:00:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ef640e4ce6b368ce4d8757b9704aa5e822f768f",
          "body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-random/sdk/v4](https://redirect.github.com/pulumi/pulumi-random)\n| `v4.21\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-random/sdk/v4 to v4.21.1 (#559)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-23T03:57:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cd50316ecfb79300b98f9cb2534b855dc6d2e8cb",
          "body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| `v1\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-go-provider to v1.4.1 (#558)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-19T01:03:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19292cbf41f3e9b305757ac7a7e4b121a1c8d62c",
          "body": "Removes all `SkipNulls: true` settings from `plugin.MarshalOptions`, so\nnulls are preserved when marshaling and unmarshaling properties. This\nmatches the other marshal call sites in the repository, which already\nset `SkipNulls: false`.",
          "is_bot": false,
          "headline": "Remove SkipNulls: true from marshal options (#557)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-07-18T20:38:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09a9d6107702193255b6d7ddb0515664f2a9dddb",
          "body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [pgregory.net/rapid](https://redirect.github.com/flyingmutant/rapid) |\n`v1.2.0` → `v1.3.0` |\n![age]\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module pgregory.net/rapid to v1.3.0 (#556)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-16T11:37:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f96604c33c2b41b8de5ab8d83db3d5e496903445",
          "body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |\nUpdate |\n|---|---|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#552)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-16T11:31:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "478c690da63d872c64c8f54bc454001678845bcd",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[jaxxstorm/action-install-gh-release](https://redirect.github.com/jaxxstorm/action-install-gh-release)\n| action | major | `v2.1.0` → `v3.0.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>jaxxstorm/acti\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update jaxxstorm/action-install-gh-release action to v3 (#555)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-16T09:17:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff06fc1a095a7cdc4df08df31c64ad996d4ffbd1",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)\n| action | major | `v5` → `v7` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>codecov/codecov-action (codecov/codecov-action)<\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update codecov/codecov-action action to v7 (#554)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-16T09:16:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9b6cfdf1b5e67fe1e20366ae8e491a345e335f8",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | major | `v5` → `v7` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>actions/checkout (actions/checkout)</summary>\n\n###\n[`v7.0.0`\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout action to v7 (#553)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-16T09:16:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23b717be4781d8a9127d7aac9c0f877283e6bcd3",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.251.0` -> `v3.252.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.252.0 (#550)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-14T00:46:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2450a1eefce05f054db5e5725400cae57ab944c",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.25.0` -> `v0.26.0` |\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provid\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#549)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-10T09:53:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf55f7db3f460831c4fb1393784dc2c320957e97",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.248.0` -> `v3.250.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.250.0 (#548)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-07-06T08:40:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c1bc4536dfa9a0ecf83a815edb83cbaf5eb42be",
          "body": null,
          "is_bot": false,
          "headline": "Expose `Handshake` services (#542)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-25T21:12:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d5f6e1cc4ac6e67736b5188bde547bc445ee188",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| require | major | `v0.26.0` -> `v1.3.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi-go-pro\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-go-provider to v1 (#547)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-25T20:35:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3c369315b3771cad70bb11e60d74e130e3de8d2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| require | minor | `v0.0.0-00010101000000-000000000000` -> `v0.26.0` |\n\n---\n\n### Release Notes\n\n<details>\n<\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-go-provider to v0.26.0 (#546)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-25T16:09:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff26c281fe98a5d081fbd370f16529359cf6e229",
          "body": "An example of writing a parameterized provider:\n\n`remember` is parameterized by a file path. It remembers the contents of\nthe file and produces a provider that can recall that value without the\nunderlying file needing to be there.",
          "is_bot": false,
          "headline": "Add an example of a parameterized provider (#543)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-25T15:05:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54a3a6032334c85db61a66b77a7d85c1e296d07c",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/inflector](https://redirect.github.com/pulumi/inflector)\n| indirect | minor | `v0.1.1` -> `v0.2.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/inflector (github.com/pulumi/in\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/inflector to v0.2.1 (#545)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-25T08:53:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d829f2fe37ac858a20c3648a68978c738f65e9eb",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.246.0` -> `v3.247.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.248.0 (#541)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-25T08:42:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3602bd34d2cb8b1c757e111a1c7185f43a8dc67",
          "body": "We now treat `infer.Function` the same way as `infer.Resource` when\napplying `infer.ExplicitDependencies`.\n\nFixes https://github.com/pulumi/pulumi-go-provider/issues/323",
          "is_bot": false,
          "headline": "Respect `infer.ExplicitDependencies` for `infer.Function` (#531)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-24T11:42:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d7d3fe8241486a39e3879161cd84d910d0d7ff3",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) |\naction | major | `v2` -> `v3` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc-action (pulumi/esc-action)</summary>\n\n###\n[`v3\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update pulumi/esc-action action to v3 (#540)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-17T07:47:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0374310e12fc9eddef1a18c6469cc72cbb72d032",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.245.0` -> `v3.246.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.246.0 (#539)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-13T19:33:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "502cc09e3036a420e2c78e45884f95605ea1e413",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| golang.org/x/crypto | indirect | minor | `v0.51.0` -> `v0.52.0` |\n\n---\n\n### Invoking pathological RSA/DSA parameters may cause DoS in\ngolang.org/x/crypto/ssh\n[CVE-2026-39829](https://nvd.nist.gov/vuln/d\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module golang.org/x/crypto to v0.52.0 [SECURITY] (#538)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-11T05:18:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1500a8afe3d0a4d51dab913dc5ac99a17de9907d",
          "body": "This is another useful lint that LLMs tend to struggle to get right on\ntheir own.",
          "is_bot": false,
          "headline": "Apply the `modernize` lint (#536)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-09T13:36:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b547df77cfcdb202242e35ccd44013f490979457",
          "body": "We use this in pulumi/pulumi, and it helps LLMs avoid bad test\npractices.",
          "is_bot": false,
          "headline": "Apply the `usetesting` lint (#535)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-09T13:30:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66d82eec86a2fb4b585b36441d4a965a8a909c54",
          "body": "Add top level support for `Handshake`.",
          "is_bot": false,
          "headline": "Add Handshake support to provider.go (#534)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-06-09T13:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bec48e4a6d2938f0ee8889b1e7992ef5eb3d540",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.243.0` -> `v3.245.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.245.0 (#533)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-08T09:19:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9d21cb31b1eafa9cd2ca1634b7a26c1be776667",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.24.0` -> `v0.25.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc (github.com/pulumi/esc)</summary>\n\n##\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/esc to v0.25.0 (#532)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-06-02T14:51:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b7ce22469a39d3256365c6733d3196d333806ee",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) |\naction | major | `v1` -> `v2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc-action (pulumi/esc-action)</summary>\n\n###\n[`v2\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update pulumi/esc-action action to v2 (#530)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-29T16:31:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "02affded5d81f6d5ef420fba18a5df7a0b233e91",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.242.0` -> `v3.243.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.243.0 (#529)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-23T08:37:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44f9f0097fb6717481be37ad22c963ff68ca41c8",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-random/sdk/v4](https://redirect.github.com/pulumi/pulumi-random)\n| require | minor | `v4.20.0` -> `v4.21.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi-random\n(\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-random/sdk/v4 to v4.21.0 (#528)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-22T19:13:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "854ffc79f742b3d79ca2e7bfbe2f6f6dd2355530",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.241.0` -> `v3.242.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.242.0 (#526)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-19T19:32:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "02c7587db9b2641cdce3d8394ac3548b93d91552",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)\n| indirect | patch | `v5.19.0` -> `v5.19.1` |\n\n### GitHub Vulnerability Alerts\n\n####\n[CVE-2026-45570](https://redirect.github.com\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.19.1 [SECURITY] (#525)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-19T19:31:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "068dd25dedfbc33445747f9625e29187bc03d7c5",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.239.0` -> `v3.241.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.241.0 (#524)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-18T21:32:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f7fc49eecbb919e384c3365d091766f26f9af59",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.23.0` -> `v0.24.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc (github.com/pulumi/esc)</summary>\n\n##\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/esc to v0.24.0 (#523)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-15T19:40:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "43eb2a59edf31b37c3037c1a3162f8c82757f3a2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-random/sdk/v4](https://redirect.github.com/pulumi/pulumi-random)\n| require | minor | `v4.19.2` -> `v4.20.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pu\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#522)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-15T01:25:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "149342bde36c3082fcd2ae5afb329853c68570e7",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)\n| indirect | minor | `v5.18.0` -> `v5.19.0` |\n\n### GitHub Vulnerability Alerts\n\n####\n[CVE-2026-45022](https://redirect.github.com\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (#521)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-12T14:45:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8ce55117433a66d6ad9968b5e2511b258760584",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.236.0` -> `v3.237.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.237.0 (#520)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-09T09:01:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "609ad86aff0daecfde17f85fc3140bd6fcfd03e0",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.234.0` -> `v3.235.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.236.0 (#519)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-07T18:16:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "501a29c7bde0f2d5c808b03c172c8db7a0379660",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) |\naction | pinDigest | -> `6cf9520` |\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - At any time (no schedule defined),\nAut\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Pin pulumi/esc-action action to 6cf9520 (#518)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-06T18:35:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cdef3cc273fac4fba39a60cc3030131242dc3973",
          "body": "These changes migrate this repo's GitHub Actions Workflows to use ESC\nsecrets instead of GitHub Secrets.\n\nThe changes are largely mechanical:\n\n- Common configuration for all ESC actions within a workflow is added to\nthe workflow's environment variables\n- Permissions are expanded as necessary for wor\n[…]\nactions are configured to fetch secrets from a shared ESC\nenvironment that contains secrets migrated from GitHub Actions. The ESC\naction performs its own OIDC exchange to obtain a Pulumi Access Token.",
          "is_bot": false,
          "headline": "Use ESC secrets (#405)",
          "author_name": "Pat Gavlin",
          "author_login": "pgavlin",
          "committed_at": "2026-05-06T18:08:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "34793134c120c1bf989f47f3dffdcb63c1a974dc",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.233.0` -> `v3.234.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.234.0 (#517)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-01T21:18:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee63ece03dde1ab40147e8b5a8387688119903a4",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.232.0` -> `v3.233.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.233.0 (#516)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-05-01T02:20:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "129ce9534dbd599d152d5a7e169a32a0b6c0f080",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| require | patch | `v1.3.1` -> `v1.3.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi-go-prov\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-go-provider to v1.3.2 (#515)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-27T17:42:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c954c152e83b55c9c4b7264b4b2be59a07e6a9a",
          "body": "## Summary\n\n- Replace the embedded `.version` file with a `Version()` function that\nresolves the framework's version at runtime from the consuming binary's\nGo build info (`runtime/debug.ReadBuildInfo`). Tagged releases report\n`v1.2.3`; untagged commits report a pseudo-version; framework\nself-builds \n[…]\n/...` in `tests/`, including the gRPC replay tests that\nexercise `__pulumi-go-provider-version`\n- [ ] Confirm on a tagged build that `Version()` returns the tag (will\nbe exercised by the next release)",
          "is_bot": false,
          "headline": "Resolve framework version via runtime/debug.ReadBuildInfo (#514)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-04-27T14:40:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "98acb002138c9e8447c4480215b81290bc7eb420",
          "body": "Previously, `infer`'s `ende` package wasn't decoding the assets &\narchives wrapped in a `(archive.Archive).Assets` map (an\n`AssetArchive`). This caused providers that used `types.AssetOrArchive`\nto fail to correctly access the inner value.\n\nThis behavior was first observed in\nhttps://github.com/pulu\n[…]\nack into\n`archive.Archive` & `asset.Asset` instead of a raw property map. This\nbug is less important since both representations have the same wire\nformat, and are thus indistinguishable to the engine.",
          "is_bot": false,
          "headline": "Correctly encode & decode `types.AssetOrArchive` (#512)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-04-27T13:21:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "04fe46afd729774ba2c6e66fa062eb9bc8a4efe2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)\n| require | minor | `v0.6.0` -> `v0.7.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#510)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-23T12:22:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45a465269f62b97a4b9c2c1cccac3aeadcfc7800",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)\n| indirect | minor | `v5.17.2` -> `v5.18.0` |\n\n### GitHub Vulnerability Alerts\n\n####\n[GHSA-3xc5-wrhm-f963](https://redirect.githu\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (#511)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-18T06:05:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "39379d9674c4e63454899f8cc05f5cb2f1b9d8ef",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.229.0` -> `v3.230.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.230.0 (#509)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-09T11:11:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7ccd00607a2744dd33d0856162b781ff738900c0",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.228.0` -> `v3.229.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.229.0 (#504)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-03T10:01:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6cad5508f827338d3616101690d5a580ca7b659b",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-jose/go-jose/v3](https://redirect.github.com/go-jose/go-jose)\n| indirect | patch | `v3.0.4` -> `v3.0.5` |\n\n### GitHub Vulnerability Alerts\n\n####\n[CVE-2026-34986](https://redirect.github.c\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-jose/go-jose/v3 to v3.0.5 [SECURITY] (#506)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-03T09:50:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f522f4be3f2b287ce76b37074a4fe8fdf1f34da9",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)\n| indirect | minor | `v5.16.5` -> `v5.17.1` |\n\n### GitHub Vulnerability Alerts\n\n####\n[CVE-2026-33762](https://redirect.github.com\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (#502)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-02T14:25:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4ad4396a7f7945ea54fc19183d0d2c81ebd4eed6",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-random/sdk/v4](https://redirect.github.com/pulumi/pulumi-random)\n| require | patch | `v4.19.1` -> `v4.19.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi-random\n(\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-random/sdk/v4 to v4.19.2 (#503)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-04-02T14:25:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56b101a474b404a678f8b6f24e7698f1be438e45",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.227.0` -> `v3.228.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.228.0 (#497)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-30T11:11:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a07fc1b8b7df1ff67042b891888d58d46f46042",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.226.0` -> `v3.227.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.227.0 (#496)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-19T22:13:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc5e28f8833a2a09b6428de6b42f5862ff05198b",
          "body": "Bumps the go_modules group with 1 update in the / directory:\n[google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /examples/assets\ndirectory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in t\n[…]\nthub.com/pulumi/pulumi-go-provider/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump the go_modules group across 13 directories with 1 update (#493)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-19T10:15:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f71ddfd3862f38704414742d4ad8b92258cb6869",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| require | patch | `v1.3.0` -> `v1.3.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi-go-prov\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi-go-provider to v1.3.1 (#490)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-17T15:51:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "366f35fb5096690e023308bd584ed9c729e88104",
          "body": "This PR allows enums to call `Describe`, `Deprecate` & `SetToken`, just\nlike resources & other types.\n\nFixes https://github.com/pulumi/pulumi-go-provider/issues/485",
          "is_bot": false,
          "headline": "Allow annotating enums (#489)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-03-17T14:07:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "498e4e481a3b4214ed61f3ee6592660d808a8dd1",
          "body": "This was always an option for the user to provide, but we apparently\ndidn't hook it up correctly.\n\nFixes https://github.com/pulumi/pulumi-go-provider/issues/484",
          "is_bot": false,
          "headline": "Serialize Enum Names (#488)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-03-16T12:53:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e45484a0055acf9a64ffe268c6adce8b8151039c",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.225.1` -> `v3.226.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.226.0 (#487)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-16T11:35:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "add94872f47e1fb710c163267563a8fde6a0956b",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.22.0` -> `v0.23.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc (github.com/pulumi/esc)</summary>\n\n##\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/esc to v0.23.0 (#486)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-13T10:12:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b74dec3a0e733829c72ef3f1f89b1e002b6dc138",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | patch | `v3.225.0` -> `v3.225.1` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.225.1 (#483)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-06T12:04:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c29a7604fe2e8ca9852de7baa6114d3a0310ba2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.224.0` -> `v3.225.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.225.0 (#482)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-03-05T14:36:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b6b042cc5c2c6a1e3e3dc81267155e21b9e016a",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.223.0` -> `v3.224.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.224.0 (#481)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-27T16:44:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bdf05cefcab98d1c6ceddd40b833bb4db0a1933c",
          "body": "Bumps the go_modules group with 1 update in the / directory:\n[github.com/cloudflare/circl](https://github.com/cloudflare/circl).\nBumps the go_modules group with 1 update in the /examples/assets\ndirectory:\n[github.com/cloudflare/circl](https://github.com/cloudflare/circl).\nBumps the go_modules group \n[…]\nnctions.\nby <a href=\"https://github.com/armfazh\"><code>@​armfazh</code></a> in <a\nhref=\"https://redirect.github.com/cloudflare/circl/pull/555\">cloudflare/circl#555</a></li>\n<li>group: Removes use of …",
          "is_bot": true,
          "headline": "Bump the go_modules group across 13 directories with 1 update (#479)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-26T14:27:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a7901efb26a7e5eac0877a391ec8c639350e5e9",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)\n| require | minor | `v1.2.0` -> `v1.3.0` |\n|\n[github.com/pulumi/pulumi-random/sdk/v4](https://redirect.githu\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#477)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-23T10:02:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e11645dad3bef0bd3241e9e61744a95c3d258fda",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.220.0` -> `v3.222.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.222.0 (#476)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-20T10:00:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "08b5cdd0e94ab1f67d5e8c8824efd377a5468f98",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.21.0` -> `v0.22.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | m\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#475)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-11T09:53:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67f866187195d5ed416af76c9c6ff4c98be8fe1e",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)\n| indirect | minor | `v5.13.1` -> `v5.16.5` |\n\n### GitHub Vulnerability Alerts\n\n####\n[CVE-2026-25934](https://redirect.github.com\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (#474)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-10T08:49:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31d27fd84108fd8e712dc7a3720c49e84801b920",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.218.0` -> `v3.219.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.219.0 (#468)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-02-06T22:49:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ff04aec1c36bd6081f09ea6e7c75697a1fdc220",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.217.1` -> `v3.218.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.218.0 (#467)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-30T10:11:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d658dc9ca3bbdcf126f3d52487e4ce33a028efa",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | patch | `v3.217.0` -> `v3.217.1` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.217.1 (#466)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-29T10:26:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3bfb720d763cca9c53a2af4016e224f7259f6345",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.216.0` -> `v3.217.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.217.0 (#464)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-26T09:31:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d72244a890b0e79616e2764a2d7e9be15f9dfd20",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.215.0` -> `v3.216.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.216.0 (#463)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-20T15:20:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4aa924c5b4248ef8b8f94f3dce7461839eb1938",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.214.1` -> `v3.215.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.215.0 (#462)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-09T00:02:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5b35a4a4eb3bf6fb609b23a0ad42fbc6a1eaa1f",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | patch | `v3.214.0` -> `v3.214.1` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.214.1 (#461)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2026-01-05T14:07:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "139ba6fe690a450d0371a60dfb64d946256a1716",
          "body": "Currently, we set a default value for both \"displayName\" and\n\"namespace\". Neither field needs a default value, and it is **highly**\nunlikely that the default values that we set (`\"yourdisplayname\"`,\n`\"yournamespace\"`) are useful to users.\n\nThe new logic for setting `\"importBasePath\"` (now divorced f\n[…]\n that.\n2. If the user set the repository, infer\n`\"<repository>/sdk/go/<package-name>\"`.\n3. Otherwise, construct an import path only usable for local generation\n`\"local-package/sdk/go/<package-name>\"`.",
          "is_bot": false,
          "headline": "Don't set a default value for `\"displayName\"` or `\"namespace`\" (#452)",
          "author_name": "Ian Wahbe",
          "author_login": "iwahbe",
          "committed_at": "2026-01-02T21:53:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce312a2f320a1ade0d86e171a334d625e8a06f1c",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.213.0` -> `v3.214.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.214.0 (#460)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-30T21:13:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e061fbc3267ecb9189003cf2da1b973440f8bde",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.20.0` -> `v0.21.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/esc (github.com/pulumi/esc)</summary>\n\n##\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/esc to v0.21.0 (#459)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-29T16:55:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "12285bec71a3ba9b1d8b15f2ca800a6bf4b0cb6c",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.212.0` -> `v3.213.0` |\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.213.0 (#458)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-18T20:47:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c439258d77e607ea0ab6c0a7bdd752f1ef9f6f66",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| require | minor | `v3.207.0` -> `v3.212.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi (github.com/pulumi/p\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.212.0 (#456)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-18T09:12:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "434ecea5e264bb656257ac6853afc3137708d8ca",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)\n| require | minor | `v0.4.1` -> `v0.6.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/providertest (github.com/p\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/providertest to v0.6.0 (#457)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-18T09:11:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aed1decb6b31547a0effa1ab067e0a03f8cee9fc",
          "body": "Part of fixing https://github.com/pulumi/pulumi/issues/21086\n\nAdds a pulumi-plugin.json to the root module to mark that this is _NOT_\na resource provider module. This is to work around some CLI logic that\nassumes every repo of the form \"github.com/pulumi/pulumi-\" is a provider\nof some kind.\n\nThat CLI logic may change, but adding this file also means any current\nCLIs will ignore this repo if pulled in.",
          "is_bot": false,
          "headline": "Add pulumi-plugin.json (#455)",
          "author_name": "Fraser Ashyggton",
          "author_login": "Frassle",
          "committed_at": "2025-12-17T06:30:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5062a18b6a9bd3826849837fcce9419e4cd66ea",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| indirect | minor | `v3.211.0` -> `v3.212.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi (github.com/pulumi/\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.212.0 (#454)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-15T18:47:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b728b7c1a69bb806cc8f4ad78a72dbc54dfb7c5",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| indirect | minor | `v3.210.0` -> `v3.211.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi (github.com/pulumi/\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.211.0 (#453)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-12T15:45:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b72b01b4d79ec530f1c45f76f451e2adf701dd2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| indirect | minor | `v3.209.0` -> `v3.210.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi (github.com/pulumi/\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.210.0 (#451)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-04T12:41:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0e9f52aaa243390a0e832b101730813b734d97f",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)\n| indirect | minor | `v3.208.0` -> `v3.209.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/pulumi (github.com/pulumi/\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/pulumi/pkg/v3 to v3.209.0 (#449)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-12-01T22:22:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "85459c05111a994e1e35f48ae595f9d2fe9e5438",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| golang.org/x/crypto | indirect | minor | `v0.41.0` -> `v0.45.0` |\n\n### GitHub Vulnerability Alerts\n\n#### [CVE-2025-58181](https://nvd.nist.gov/vuln/detail/CVE-2025-58181)\n\nSSH servers parsing GSSAPI aut\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module golang.org/x/crypto to v0.45.0 [SECURITY] (#447)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-21T13:51:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7aa9b027abe19dd5ae4669c2cdc63299f4febb7a",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |\nindirect | minor | `v0.17.0` -> `v0.20.0` |\n|\n[github.com/pulumi/inflector](https://redirect.github.com/pulumi/inflector)\n| indirect | m\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update first-party Pulumi dependencies (#448)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-21T13:44:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8de00d2527abaa8b65ec29e8021c01ead25f9506",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)\n| require | patch | `v0.4.0` -> `v0.4.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/providertest (github.com/p\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/providertest to v0.4.1 (#445)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-20T12:25:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b21bedf374d7f9b3238f6d7d9ea59a971bf42d15",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)\n| require | minor | `v0.3.1` -> `v0.4.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>pulumi/providertest (github.com/p\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update module github.com/pulumi/providertest to v0.4.0 (#443)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-19T10:36:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a401deadf187718da288b0d34c9337d8432b438",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | major | `v2` -> `v5` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>actions/checkout (actions/checkout)</summary>\n\n### [`v5`](h\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout action to v5 (#437)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:22:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "70db19d8c0c2ee638dc16e06ab66c3a362b7f499",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[cirrus-actions/rebase](https://redirect.github.com/cirrus-actions/rebase)\n| action | minor | `1.2` -> `1.8` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cirrus-actions/rebase (cirrus-actions/rebase)</\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update cirrus-actions/rebase action to v1.8 (#434)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:20:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c6a7c2b230a1d81eda847d5c5b8fabea2a56152f",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[jaxxstorm/action-install-gh-release](https://redirect.github.com/jaxxstorm/action-install-gh-release)\n| action | major | `v1.5.0` -> `v2.1.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>jaxxstorm/act\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update jaxxstorm/action-install-gh-release action to v2 (#438)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:17:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "016b5b3396ed184d85a0d4ea44e84170cc5b9790",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[peter-evans/slash-command-dispatch](https://redirect.github.com/peter-evans/slash-command-dispatch)\n| action | major | `v2` -> `v4` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>peter-evans/slash-comma\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update peter-evans/slash-command-dispatch action to v4 (#441)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:16:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "afc82b228339d3207953b908a158d7fbe9bdca5d",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[peter-evans/create-or-update-comment](https://redirect.github.com/peter-evans/create-or-update-comment)\n| action | major | `v1` -> `v5` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>peter-evans/create-\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update peter-evans/create-or-update-comment action to v5 (#440)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:15:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd96dd38f1b66912db42d4d1ca9b7fa552a61ae0",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[thollander/actions-comment-pull-request](https://redirect.github.com/thollander/actions-comment-pull-request)\n| action | major | `1.0.1` -> `v3.0.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>tholla\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update thollander/actions-comment-pull-request action to v3 (#442)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-18T12:15:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1471e6a3f04bcb0800ce3a8acbb3151f8fbe499",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [go.uber.org/mock](https://redirect.github.com/uber/mock) | require |\nminor | `v0.5.2` -> `v0.6.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>uber/mock (go.uber.org/mock)</summary>\n\n###\n[`v0.6.0`](ht\n[…]\nZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\n---------\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>\nCo-authored-by: Ian Wahbe <me@iwahbe.com>",
          "is_bot": true,
          "headline": "Update module go.uber.org/mock to v0.6.0 (#430)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-15T16:42:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28d8f93aff3cfd20ab1a7df406fa57a28636f1ce",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)\n| action | major | `v4` -> `v5` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>codecov/codecov-action (codecov/codecov-action)\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update codecov/codecov-action action to v5 (#433)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-15T16:24:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bffeaeaf2b2df7e934374dd0425a5db4323895fc",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [actions/setup-go](https://redirect.github.com/actions/setup-go) |\naction | major | `v2` -> `v6` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>actions/setup-go (actions/setup-go)</summary>\n\n### [`v6`](h\n[…]\nyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->\n\nCo-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/setup-go action to v6 (#432)",
          "author_name": "pulumi-renovate[bot]",
          "author_login": "pulumi-renovate[bot]",
          "committed_at": "2025-11-15T16:24:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 34,
      "commits_last_year": 117,
      "latest_release_at": "2026-07-18T20:41:41Z",
      "latest_release_tag": "v1.4.1",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 36,
      "days_since_latest_release": 7,
      "mean_days_between_releases": 47.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/pulumi/pulumi-go-provider",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/pulumi/pulumi-go-provider",
          "is_deprecated": false,
          "latest_version": "v1.4.1",
          "repository_url": "https://github.com/pulumi/pulumi-go-provider",
          "versions_count": 49,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-18T20:38:57Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 15,
      "stars": 47,
      "watchers": 5,
      "fork_history": {
        "days": [
          {
            "date": "2022-07-07",
            "count": 1
          },
          {
            "date": "2023-02-08",
            "count": 1
          },
          {
            "date": "2023-02-14",
            "count": 1
          },
          {
            "date": "2023-02-15",
            "count": 1
          },
          {
            "date": "2023-04-07",
            "count": 1
          },
          {
            "date": "2023-09-02",
            "count": 1
          },
          {
            "date": "2023-10-26",
            "count": 1
          },
          {
            "date": "2023-11-07",
            "count": 1
          },
          {
            "date": "2024-07-22",
            "count": 1
          },
          {
            "date": "2024-11-27",
            "count": 1
          },
          {
            "date": "2024-12-11",
            "count": 1
          },
          {
            "date": "2025-05-29",
            "count": 1
          },
          {
            "date": "2025-07-07",
            "count": 1
          },
          {
            "date": "2025-10-31",
            "count": 1
          },
          {
            "date": "2026-03-09",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 15,
        "total_forks": 15
      },
      "star_history": null,
      "open_issues_and_prs": 45
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        ".mise.toml",
        "Makefile",
        "examples/random-login/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed",
        "tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed"
      ],
      "toolchain_manifests": [
        "examples/assets/go.mod",
        "examples/auto-naming/go.mod",
        "examples/component-provider/go.mod",
        "examples/configurable/go.mod",
        "examples/credentials/go.mod",
        "examples/dna-store/go.mod",
        "examples/echo/go.mod",
        "examples/file/go.mod",
        "examples/random-login/go.mod",
        "examples/remember/go.mod",
        "examples/str/go.mod",
        "examples/wrapped/go.mod",
        "go.mod",
        "tests/go.mod"
      ],
      "largest_source_bytes": 56807,
      "source_files_sampled": 133,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "tests/go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 18
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 221,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 3,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/blang/semver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.1+incompatible"
        },
        {
          "name": "github.com/pulumi/pulumi/pkg/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.254.0"
        },
        {
          "name": "github.com/pulumi/pulumi/sdk/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.254.0"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "golang.org/x/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260410095643-746e56fc9e2f"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.82.1"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "pgregory.net/rapid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/golang/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.4"
        },
        {
          "name": "github.com/hashicorp/go-multierror",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/blang/semver",
            "direct": true,
            "version": "v3.5.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": true,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/pulumi/pkg/v3",
            "direct": true,
            "version": "v3.254.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/pulumi/sdk/v3",
            "direct": true,
            "version": "v3.254.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": true,
            "version": "v0.0.0-20260410095643-746e56fc9e2f",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "pgregory.net/rapid",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.18.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/kms",
            "direct": false,
            "version": "v1.26.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/logging",
            "direct": false,
            "version": "v1.13.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/longrunning",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.24.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": false,
            "version": "v1.61.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": false,
            "version": "v1.41.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": false,
            "version": "v1.32.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.26",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs",
            "direct": false,
            "version": "v1.74.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/kms",
            "direct": false,
            "version": "v1.50.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.102.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.36.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.42.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": false,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "v1.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bazelbuild/buildtools",
            "direct": false,
            "version": "v0.0.0-20260211083412-859bfffeef82",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": false,
            "version": "v1.3.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.11.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cheggaaa/pb",
            "direct": false,
            "version": "v1.0.29",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20260202195803-dba9d589def2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/deckarep/golang-set/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/djherbis/times",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/djherbis/times",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/edsrzf/mmap-go",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/git-pkgs/manifests",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/git-pkgs/packageurl-go",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/git-pkgs/purl",
            "direct": false,
            "version": "v0.1.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/git-pkgs/vers",
            "direct": false,
            "version": "v0.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v6",
            "direct": false,
            "version": "v6.0.0-alpha.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v6",
            "direct": false,
            "version": "v6.0.0-alpha.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-test/deep",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/uuid",
            "direct": false,
            "version": "v4.4.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": false,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/glog",
            "direct": false,
            "version": "v1.2.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/wire",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": false,
            "version": "v1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-opentracing",
            "direct": false,
            "version": "v0.0.0-20180507213350-8e809c8a8645",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": false,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-rootcerts",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-secure-stdlib/strutil",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-sockaddr",
            "direct": false,
            "version": "v1.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl",
            "direct": false,
            "version": "v1.0.1-vault-7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl/v2",
            "direct": false,
            "version": "v2.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/vault/api",
            "direct": false,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/iancoleman/strcase",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-ps",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/natefinch/atomic",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opentracing/basictracer-go",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opentracing/opentracing-go",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pgavlin/fx",
            "direct": false,
            "version": "v0.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pgavlin/fx/v2",
            "direct": false,
            "version": "v2.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pgavlin/goldmark",
            "direct": false,
            "version": "v1.1.33-0.20200616210433-b5eb04559386",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": false,
            "version": "v0.0.0-20240102092130-5ac0b6a4141c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/term",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/appdash",
            "direct": false,
            "version": "v0.0.0-20231130102222-75f619a67231",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/inflector",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/providertest",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pulumi/pulumi-random/sdk/v4",
            "direct": false,
            "version": "v4.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rogpeppe/go-internal",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryanuber/go-glob",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sabhiram/go-gitignore",
            "direct": false,
            "version": "v0.0.0-20210923224102-525f6e181f06",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v5",
            "direct": false,
            "version": "v5.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v5",
            "direct": false,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/encoding",
            "direct": false,
            "version": "v0.3.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/encoding",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/texttheater/golang-levenshtein",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/uber/jaeger-client-go",
            "direct": false,
            "version": "v2.30.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/uber/jaeger-lib",
            "direct": false,
            "version": "v2.4.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20180127040702-4e3ac2762d5f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.16.3",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/featuregate",
            "direct": false,
            "version": "v1.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/pdata",
            "direct": false,
            "version": "v1.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/otelslog",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.67.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.67.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/bridge/opentracing",
            "direct": false,
            "version": "v1.33.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "gocloud.dev",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "gocloud.dev/secrets/hashivault",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.272.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20260316180232-0b37fe3546d5",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260720211330-0afa2a65878a",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260720211330-0afa2a65878a",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/frand",
            "direct": false,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "parver",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pulumi",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "semver",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 224,
        "direct_count": 11,
        "indirect_count": 213
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 353,
        "open_issues": 44,
        "closed_ratio": 0.688,
        "closed_issues": 97,
        "closed_unmerged_prs": 64
      },
      "bus_factor": 2,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "iwahbe",
          "commits": 147,
          "avatar_url": "https://avatars.githubusercontent.com/u/22222529?v=4"
        },
        {
          "type": "User",
          "login": "EronWright",
          "commits": 80,
          "avatar_url": "https://avatars.githubusercontent.com/u/1775518?v=4"
        },
        {
          "type": "User",
          "login": "rquitales",
          "commits": 25,
          "avatar_url": "https://avatars.githubusercontent.com/u/26103281?v=4"
        },
        {
          "type": "User",
          "login": "blampe",
          "commits": 21,
          "avatar_url": "https://avatars.githubusercontent.com/u/848843?v=4"
        },
        {
          "type": "User",
          "login": "mjeffryes",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/1189194?v=4"
        },
        {
          "type": "User",
          "login": "mikhailshilkov",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/1454008?v=4"
        },
        {
          "type": "User",
          "login": "thomas11",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/12074?v=4"
        },
        {
          "type": "User",
          "login": "hliuson",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/35820037?v=4"
        },
        {
          "type": "User",
          "login": "AaronFriel",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/788800?v=4"
        },
        {
          "type": "User",
          "login": "MMartyn",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/1448102?v=4"
        }
      ],
      "contributors_sampled": 22,
      "top_contributor_share": 0.445
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-rebase.yml",
        "command-dispatch.yml",
        "main.yaml",
        "pr-comment.yaml",
        "pr-tests-command.yaml",
        "pr-tests.yaml",
        "stage-lint.yml",
        "stage-test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 8,
            "reason": "Found 7/8 approved changesets -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "8fa58a354d232f6e6b986f6f3f0f1ea7f843cb33",
        "ran_at": "2026-07-26T15:39:49Z",
        "aggregate_score": 7.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T08:58:51Z",
      "oldest_open_prs": [
        {
          "number": 389,
          "created_at": "2025-05-23T19:40:04Z",
          "last_comment_at": "2025-05-23T19:45:30Z",
          "last_comment_author": "codecov"
        }
      ],
      "last_merged_pr_at": "2026-07-24T08:58:00Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 399,
          "created_at": "2022-06-02T21:15:36Z",
          "last_comment_at": "2025-06-04T22:43:06Z",
          "last_comment_author": "mjeffryes"
        },
        {
          "number": 18,
          "created_at": "2022-07-07T19:01:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 19,
          "created_at": "2022-07-07T19:06:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 20,
          "created_at": "2022-07-07T20:25:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 67,
          "created_at": "2022-11-17T02:15:42Z",
          "last_comment_at": "2023-04-08T20:52:45Z",
          "last_comment_author": "haneef95"
        },
        {
          "number": 94,
          "created_at": "2023-06-13T00:14:26Z",
          "last_comment_at": "2023-06-13T01:20:51Z",
          "last_comment_author": "AaronFriel"
        },
        {
          "number": 99,
          "created_at": "2023-07-17T15:45:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2023-07-25T08:27:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 102,
          "created_at": "2023-07-25T08:30:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 103,
          "created_at": "2023-07-25T08:34:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 113,
          "created_at": "2023-08-29T06:50:16Z",
          "last_comment_at": "2023-09-01T23:40:34Z",
          "last_comment_author": "iwahbe"
        },
        {
          "number": 199,
          "created_at": "2024-03-20T08:31:05Z",
          "last_comment_at": "2024-03-25T14:07:49Z",
          "last_comment_author": "iwahbe"
        },
        {
          "number": 202,
          "created_at": "2024-03-20T23:06:51Z",
          "last_comment_at": "2025-05-27T17:29:04Z",
          "last_comment_author": "EronWright"
        },
        {
          "number": 212,
          "created_at": "2024-04-07T15:47:03Z",
          "last_comment_at": "2024-09-23T14:20:40Z",
          "last_comment_author": "iwahbe"
        },
        {
          "number": 223,
          "created_at": "2024-04-16T12:00:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 256,
          "created_at": "2024-07-30T16:55:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 257,
          "created_at": "2024-07-31T14:25:21Z",
          "last_comment_at": "2025-05-05T18:06:59Z",
          "last_comment_author": "EronWright"
        },
        {
          "number": 260,
          "created_at": "2024-08-02T16:09:44Z",
          "last_comment_at": "2026-02-04T01:19:31Z",
          "last_comment_author": "pgavlin"
        },
        {
          "number": 261,
          "created_at": "2024-08-05T18:37:52Z",
          "last_comment_at": "2025-08-05T08:37:18Z",
          "last_comment_author": "iwahbe"
        },
        {
          "number": 264,
          "created_at": "2024-08-20T15:12:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/pulumi/pulumi-go-provider",
    "host": "github.com",
    "name": "pulumi-go-provider",
    "owner": "pulumi"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 74,
      "inputs": {
        "security": 78,
        "vitality": 90,
        "community": 54,
        "governance": 77,
        "engineering": 70
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 90,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "commits_last_year": 117,
              "human_commit_share": 0.15,
              "days_since_last_push": 2,
              "active_weeks_last_year": 36
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "36/52 weeks with commits",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 36
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "117 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 117
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 34,
              "latest_release_tag": "v1.4.1",
              "releases_from_tags": false,
              "days_since_latest_release": 7,
              "mean_days_between_releases": 47.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "34 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 34
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~47.5 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 47.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 3 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 54,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "forks": 15,
              "stars": 47,
              "watchers": 5,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "47 stars",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "15 forks",
                "points": 9.6,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "5 watchers",
                "points": 3.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 77,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 22,
              "top_contributor_share": 0.445
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 44% of commits",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 44
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "22 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "merged_prs": 353,
              "open_issues": 44,
              "closed_issues": 97,
              "issue_closed_ratio": 0.688,
              "closed_unmerged_prs": 64
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "69% of issues closed",
                "points": 32.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 69
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "353/417 decided PRs merged",
                "points": 32.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 353,
                      "decided": 417
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/8 approved changesets -- score normalized to 8",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "followers": 1312,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "pulumi",
              "public_repos": 426,
              "account_age_days": 3611
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,312 followers of pulumi",
                "points": 22.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1312,
                      "login": "pulumi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "426 public repos, account ~9 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 426
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/pulumi/pulumi-go-provider"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "49 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 49
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 70,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 78,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 73,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 7.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/8 approved changesets -- score normalized to 8",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 221 resolved dependencies against OSV; 3 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 221
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 3
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 221,
              "unassessed_packages": 3,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 221,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 11
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 57,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "legible_commit_history"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": null,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                ".mise.toml",
                "Makefile",
                "examples/random-login/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed",
                "tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "examples/assets/go.mod",
                "examples/auto-naming/go.mod",
                "examples/component-provider/go.mod",
                "examples/configurable/go.mod",
                "examples/credentials/go.mod",
                "examples/dna-store/go.mod",
                "examples/echo/go.mod",
                "examples/file/go.mod",
                "examples/random-login/go.mod",
                "examples/remember/go.mod",
                "examples/str/go.mod",
                "examples/wrapped/go.mod",
                "go.mod",
                "tests/go.mod"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": ".mise.toml, Makefile, examples/random-login/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".mise.toml, Makefile, examples/random-login/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed, tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tests/grpc/call_consumer/sdks/test/build/lib/pulumi_test/py.typed, tests/grpc/call_consumer/sdks/test/pulumi_test/py.typed"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 56807,
              "source_files_sampled": 133,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/133 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 133,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T15:40:14.749399Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pulumi/pulumi-go-provider.svg",
  "full_name": "pulumi/pulumi-go-provider",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenGo.