chore(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.32.0 to 4.33.0 in /deploy

[dependabot]

Bumps github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.32.0 to 4.33.0.

Release notes

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's releases.

v4.33.0

4.33.0 (July 7, 2026)

Added

• #3595 Add takeOwnership to kubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent to helm upgrade/helm install --take-ownership).
• #3284 Add includeHooks to kubernetes.helm.sh/v4:Chart. When set together with the provider's renderYamlToDirectory, Helm hook resources (annotated helm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.2.
• #4454 Document that skipAwait defaults to false on yaml/v2.ConfigFile, yaml/v2.ConfigGroup, and kustomize/v2.Directory.

Changelog

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's changelog.

4.33.0 (July 7, 2026)

Added

• #3595 Add takeOwnership to kubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent to helm upgrade/helm install --take-ownership).
• #3284 Add includeHooks to kubernetes.helm.sh/v4:Chart. When set together with the provider's renderYamlToDirectory, Helm hook resources (annotated helm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them. Test hooks (helm.sh/hook: test) are excluded, and the flag has no effect outside of render mode. This only brings render mode up to par with helm template; it does not implement full Helm hook lifecycle support (ordering, weights, delete policies, execution), so #3284 remains open.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.2.
• #4454 Document that skipAwait defaults to false on yaml/v2.ConfigFile, yaml/v2.ConfigGroup, and kustomize/v2.Directory.

Commits

• 9699fd9 Prepare for v4.33.0 release (#4481)
• c080144 Add support for the takeOwnership flag on helm Release resources (#4476)
• c2515e9 Update GitHub Actions workflows. (#4479)
• 26e377d Update GitHub Actions workflows. (#4478)
• def280d Update module oras.land/oras-go/v2 to v2.6.1 [SECURITY] (#4474)
• 4161eb9 Update GitHub Actions workflows. (#4472)
• a051e61 Update first-party Pulumi dependencies (#4448)
• cb9d28a Isolate Azure CLI config dir when signing Windows binaries (#4471)
• 9497796 Update GitHub Actions workflows. (#4470)
• 1dffb56 Update GitHub Actions workflows. (#4469)
• Additional commits viewable in compare view

[coveralls]

Coverage Report for CI Build 31160983945

Warning

No base build found for commit 5841148 on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 60.693%

Details

• Patch coverage: No coverable lines changed in this PR.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →

---

Coverage Stats

Relevant Lines:	9670
Covered Lines:	5869
Line Coverage:	60.69%
Coverage Strength:	0.66 hits per line

---

💛 - Coveralls

[github-actions]

The latest Buf updates on your PR. Results from workflow CI / buf-lint (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Aug 7, 2026, 8:16 AM