Skip to content

chore(deps): bump @pulumi/aws from 6.83.3 to 7.25.0 in /deploy/pulumi#727

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/deploy/pulumi/pulumi/aws-7.25.0
Open

chore(deps): bump @pulumi/aws from 6.83.3 to 7.25.0 in /deploy/pulumi#727
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/deploy/pulumi/pulumi/aws-7.25.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Bumps @pulumi/aws from 6.83.3 to 7.25.0.

Release notes

Sourced from @​pulumi/aws's releases.

v7.25.0

What's Changed

New Contributors

Full Changelog: pulumi/pulumi-aws@v7.24.0...v7.25.0

v7.24.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.23.0...v7.24.0

v7.23.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.22.0...v7.23.0

v7.22.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.21.0...v7.22.0

v7.21.0

What's Changed

... (truncated)

Commits


Note

Medium Risk
Dependency upgrade of the AWS Pulumi provider can change resource schemas/defaults and may cause unexpected diffs or replacements during pulumi up, even though code changes are minimal.

Overview
Bumps @pulumi/aws in deploy/pulumi/package.json from ^6.0.0 to ^7.25.0, upgrading the Pulumi AWS provider major version used by the deployment stack.

Reviewed by Cursor Bugbot for commit 5db68a4. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 22, 2026
Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 73bdf29. Configure here.

"main": "index.ts",
"dependencies": {
"@pulumi/aws": "^6.0.0",
"@pulumi/aws": "^7.25.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Incompatible @pulumi/eks v3 with @pulumi/aws v7

High Severity

Bumping @pulumi/aws to ^7.25.0 without also bumping @pulumi/eks from ^3.0.0 to ^4.0.0 introduces an incompatibility. @pulumi/eks v3 depends on @pulumi/aws v6 and has type-level conflicts with v7 (notably around ec2.SecurityGroup output types used in EKS node group inputs). The eks.ts file actively imports and uses @pulumi/eks, so this will cause TypeScript compilation errors or runtime failures.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 73bdf29. Configure here.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 22, 2026

PR Metrics

Metric Value
Lines changed (prod code) +1 / -1
JS bundle size (gzipped) 🟢 1.02 MB → 1.02 MB (-5.1 KB, -0.5%)
Test coverage 🟢 70.31% → 70.50% (+0.2%)
Load time (preview) Preview not ready — Render deploy may have timed out

Updated Wed, 22 Apr 2026 20:03:36 GMT · run #1127

Bumps [@pulumi/aws](https://github.com/pulumi/pulumi-aws) from 6.83.3 to 7.25.0.
- [Release notes](https://github.com/pulumi/pulumi-aws/releases)
- [Changelog](https://github.com/pulumi/pulumi-aws/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-aws@v6.83.3...v7.25.0)

---
updated-dependencies:
- dependency-name: "@pulumi/aws"
  dependency-version: 7.25.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/deploy/pulumi/pulumi/aws-7.25.0 branch from 73bdf29 to 5db68a4 Compare April 22, 2026 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants