Skip to content

fix(security): mark provider credentials as Pulumi secrets - #171

Merged
kwent merged 3 commits into
masterfrom
dependabot/go_modules/provider/rootly-terraform-provider-fb6ed4f99a
Nov 12, 2026
Merged

kwent merged 3 commits into
masterfrom
dependabot/go_modules/provider/rootly-terraform-provider-fb6ed4f99a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Upgrade the underlying Terraform provider from 5.23.5 to 5.25.2 and regenerate the Pulumi schema, mux metadata, and Node.js/Go SDKs. Credentials for heartbeat ping URLs, secrets, status-page passwords, webhook signing secrets/custom headers, and workflow HTTP/meeting credentials now carry Pulumi secret metadata instead of ordinary plaintext values. The generated SDKs also include the upstream provider's supported field additions.

Add regression tests for top-level and nested credential inputs, heartbeat API read outputs, and unchanged public sibling fields. The runtime tests fail with the old dependency and pass with 5.25.2. Historical checkpoints are not retroactively rewritten.

Validation: SDK generation and TypeScript build; provider, Go SDK, shim, and example compilation/tests; npm audit reports zero vulnerabilities; govulncheck 1.8.0 finds no imported-package or reachable vulnerabilities across all four Go modules (three module-only advisories remain in provider/SDK dependency graphs). Independent security/compatibility review found no actionable issues. GitHub lint CI must pass before merge.

@dependabot
dependabot Bot requested a review from a team November 10, 2026 21:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/provider/rootly-terraform-provider-fb6ed4f99a branch 2 times, most recently from 45dd709 to 95e6ab5 Compare November 12, 2026 03:34
…ith 1 update

Bumps the rootly-terraform-provider group with 1 update in the /provider directory: [github.com/rootlyhq/terraform-provider-rootly/v5](https://github.com/rootlyhq/terraform-provider-rootly).
Bumps the rootly-terraform-provider group with 1 update in the /provider/shim directory: [github.com/rootlyhq/terraform-provider-rootly/v5](https://github.com/rootlyhq/terraform-provider-rootly).


Updates `github.com/rootlyhq/terraform-provider-rootly/v5` from 5.23.5 to 5.25.2
- [Release notes](https://github.com/rootlyhq/terraform-provider-rootly/releases)
- [Commits](rootlyhq/terraform-provider-rootly@v5.23.5...v5.25.2)

Updates `github.com/rootlyhq/terraform-provider-rootly/v5` from 5.23.5 to 5.25.2
- [Release notes](https://github.com/rootlyhq/terraform-provider-rootly/releases)
- [Commits](rootlyhq/terraform-provider-rootly@v5.23.5...v5.25.2)

Updates `github.com/rootlyhq/terraform-provider-rootly/v5` from 5.23.5 to 5.25.2
- [Release notes](https://github.com/rootlyhq/terraform-provider-rootly/releases)
- [Commits](rootlyhq/terraform-provider-rootly@v5.23.5...v5.25.2)

Updates `github.com/rootlyhq/terraform-provider-rootly/v5` from 5.23.5 to 5.25.2
- [Release notes](https://github.com/rootlyhq/terraform-provider-rootly/releases)
- [Commits](rootlyhq/terraform-provider-rootly@v5.23.5...v5.25.2)

---
updated-dependencies:
- dependency-name: github.com/rootlyhq/terraform-provider-rootly/v5
  dependency-version: 5.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rootly-terraform-provider
- dependency-name: github.com/rootlyhq/terraform-provider-rootly/v5
  dependency-version: 5.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rootly-terraform-provider
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/provider/rootly-terraform-provider-fb6ed4f99a branch from 95e6ab5 to b7c71da Compare November 12, 2026 04:04
@kwent kwent changed the title deps: bump the rootly-terraform-provider group across 2 directories with 1 update fix(security): mark provider credentials as Pulumi secrets Nov 12, 2026
@kwent
kwent merged commit f228c7a into master Nov 12, 2026
1 check passed
kwent added a commit that referenced this pull request Nov 12, 2026
🤖 I have created a release *beep* *boop*
---


##
[4.2.2](v4.2.1...v4.2.2)
(2026-11-12)


### Bug Fixes

* **security:** mark provider credentials as Pulumi secrets
([#171](#171))
([f228c7a](f228c7a))
* **security:** patch Node.js and Pulumi SDK dependencies
([#174](#174))
([5f251c1](5f251c1))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Quentin Rousseau <contact@quent.in>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant