build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.33.0 to 4.34.0 in /deploy

[dependabot]

Bumps github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.33.0 to 4.34.0.

Release notes

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's releases.

v4.34.0

What's Changed

• Generate extension-parameterized SDKs from Kubernetes CRDs by @​guineveresaenger in pulumi/pulumi-kubernetes#4437
• Fix waitFor JSONPath filters using !=, >= and <= by @​matanbaruch in pulumi/pulumi-kubernetes#4524
• Alias base-provider tokens on extension-served resources by @​guineveresaenger in pulumi/pulumi-kubernetes#4559
• Upgrade to Kubernetes v1.37 by @​guineveresaenger in pulumi/pulumi-kubernetes#4570

New Contributors

• @​matanbaruch made their first contribution in pulumi/pulumi-kubernetes#4524

Full Changelog: pulumi/pulumi-kubernetes@v4.33.0...v4.34.0

Changelog

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's changelog.

4.34.0 (August 27, 2026)

Added

• Support adding CustomResourceDefinitions as an extension of the base kubernetes provider via pulumi package add <provider> --extension. Extension-served resources alias their kubernetes:-namespaced token, so state written by a crd2pulumi-generated SDK is adopted rather than replaced.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.3.
• Upgrade Kubernetes schema and libraries to v1.36.4.
• Upgrade Kubernetes schema and libraries to v1.37.0. See the Kubernetes 1.37 release notes for upstream API changes.

Fixed

• Restore scheduling.k8s.io/v1alpha1 Workload, which the Kubernetes 1.36 upgrade dropped from the SDKs, and retain scheduling.k8s.io/v1alpha2 PodGroup and Workload, which Kubernetes 1.37 removes from its OpenAPI specification. Both remain available to clusters that still serve them, and scheduling.k8s.io/v1beta1 now aliases the older versions so that existing resources migrate in place rather than being replaced.

• #4524 Fix pulumi.com/waitFor rejecting JSONPath filters that use !=, >= or <=. The expression was split on every = that was not part of ==, so jsonpath={.status.conditions[?(@.type!="Failed")].status}=True failed to parse. The path and value are now separated structurally, which also allows braces inside string literals. Comparing one path against another (jsonpath={.status.readyReplicas}={.spec.replicas}) is still unsupported, but now reports an error instead of silently never matching.

Commits

• 62281b8 Prepare for v4.34.0 release (#4568)
• 06bda92 Automated upgrade: bump pulumi/pulumi to 3.259.0 (#4575)
• 738945f Upgrade PR test cluster to Kubernetes v1.36.4 (#4577)
• 98a128c Upgrade to Kubernetes v1.37 (#4570)
• 2104fc5 Update vulnerable dependencies [SECURITY] (#4573)
• 7acc3a5 Update GitHub Actions workflows. (#4571)
• cbfcc91 tests: upgrade GKE test cluster to v1.36 (#4566)
• a2d6c72 Update GitHub Actions workflows. (#4567)
• d0b118b Update GitHub Actions workflows. (#4564)
• 9a02c9e Alias base-provider tokens on extension-served resources (#4559)
• Additional commits viewable in compare view

[rdimitrov]

@dependabot rebase