Update first-party Pulumi dependencies (#1684)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.144.1` -> `v3.150.0` |
|
[github.com/pulumi/pulumi/sdk/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.144.1` -> `v3.150.0` |
|
[pulumi/action-install-pulumi-cli](https://redirect.github.com/pulumi/action-install-pulumi-cli)
| action | pinDigest | -> `b374ceb` |
| [pulumi/actions](https://redirect.github.com/pulumi/actions) | action
| pinDigest | -> `13b8b71` |

---

### Release Notes

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.150.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.150.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.149.0...v3.150.0)

#### 3.150.0 (2025-02-11)

##### Features

-   \[cli/state] Add `--all` to `state delete`
[#&#8203;18502](https://redirect.github.com/pulumi/pulumi/pull/18502)

-   \[sdk/python] \[Experimental/Components] Check for required inputs
[#&#8203;18487](https://redirect.github.com/pulumi/pulumi/pull/18487)

-   \[sdk/python] \[Experimental/Components] Infer plain types
[#&#8203;18483](https://redirect.github.com/pulumi/pulumi/pull/18483)

##### Bug Fixes

-   \[engine] Fix a potential panic for corrupted secret values
[#&#8203;18501](https://redirect.github.com/pulumi/pulumi/pull/18501)

- \[engine] Apply autonaming strategy only to custom resources, not
components
[#&#8203;18523](https://redirect.github.com/pulumi/pulumi/pull/18523)

- \[sdk/python] \[Experimental/Components] Throw an error when
encountring resource references
[#&#8203;18485](https://redirect.github.com/pulumi/pulumi/pull/18485)

##### Miscellaneous

-   \[pkg] Change BulkDecrypt to return list instead of map
[#&#8203;18486](https://redirect.github.com/pulumi/pulumi/pull/18486)

###
[`v3.149.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.149.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.148.0...v3.149.0)

##### 3.149.0 (2025-02-07)

##### Features

-   \[cli] Update `pulumi-java` to 1.2.0

- \[cli/display] Always print resource summaries in preview, even after
errors
[#&#8203;18465](https://redirect.github.com/pulumi/pulumi/pull/18465)

-   \[cli/plugin] Improve the warning when using plugins from PATH
[#&#8203;18476](https://redirect.github.com/pulumi/pulumi/pull/18476)

-   \[engine] Deployments continue past delete errors due to protect
[#&#8203;18396](https://redirect.github.com/pulumi/pulumi/pull/18396)

- \[sdk/python] \[Experimental/Components] Add infrastructure to
bootstrap providers from component resources
[#&#8203;18403](https://redirect.github.com/pulumi/pulumi/pull/18403)
[#&#8203;18401](https://redirect.github.com/pulumi/pulumi/pull/18401)

- \[sdk/python] \[Experimental/Components] Analyze ComponentResource
properties
[#&#8203;18403](https://redirect.github.com/pulumi/pulumi/pull/18403)

- \[sdk/python] \[Experimental/Components] Infer ComplexTypes for
ComponentResources
[#&#8203;18405](https://redirect.github.com/pulumi/pulumi/pull/18405)

- \[sdk/python] \[Experimental/Components] Handle complex types in
inputs and outputs
[#&#8203;18419](https://redirect.github.com/pulumi/pulumi/pull/18419)

- \[sdk/python] \[Experimental/Components] Support array types in
component schema inference
[#&#8203;18469](https://redirect.github.com/pulumi/pulumi/pull/18469)

- \[sdk/python] \[Experimental/Components] Support dict types in
component schema inference
[#&#8203;18472](https://redirect.github.com/pulumi/pulumi/pull/18472)

##### Bug Fixes

-   \[engine] Filter \__internal keys when calling providers DiffConfig
[#&#8203;18440](https://redirect.github.com/pulumi/pulumi/pull/18440)

- \[engine] The engine will correctly use old state for provider config
with no reported differences
[#&#8203;18411](https://redirect.github.com/pulumi/pulumi/pull/18411)

-   \[cli/config] Fix setting indexed top-level config keys
[#&#8203;18444](https://redirect.github.com/pulumi/pulumi/pull/18444)

- \[cli/import] Fix the declaration of parameterized providers in import
JSON files
[#&#8203;18450](https://redirect.github.com/pulumi/pulumi/pull/18450)

- \[sdk/go] Provide a better error message when a Go program can't be
run
[#&#8203;18383](https://redirect.github.com/pulumi/pulumi/pull/18383)

-   \[cli/package] Allow https:// prefixes for Git repository URLs
[#&#8203;18380](https://redirect.github.com/pulumi/pulumi/pull/18380)

- \[cli/package] Fix package add and code generation when package name
contains dashes in Go
[#&#8203;18457](https://redirect.github.com/pulumi/pulumi/pull/18457)

-   \[sdk/python] \[Experimental/Components] Handle inputs and outputs
[#&#8203;18408](https://redirect.github.com/pulumi/pulumi/pull/18408)

###
[`v3.148.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.148.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.147.0...v3.148.0)

##### 3.148.0 (2025-01-31)

##### Features

-   \[cli/config] Introduce `--type` flag for `config set`
[#&#8203;18287](https://redirect.github.com/pulumi/pulumi/pull/18287)

- \[cli/new] Improve docs for disambiguating repositories on hosts where
the URL is ambiguous
[#&#8203;18379](https://redirect.github.com/pulumi/pulumi/pull/18379)

- \[cli/package] Automatically get latest version for git based plugins
if none is specified
[#&#8203;18215](https://redirect.github.com/pulumi/pulumi/pull/18215)

- \[cli/package] Allow plugins from git sources to live in
subdirectories in the repository
[#&#8203;18322](https://redirect.github.com/pulumi/pulumi/pull/18322)

- \[sdk/python] Support commits in prerelease versions of generated
Python SDKs
[#&#8203;18289](https://redirect.github.com/pulumi/pulumi/pull/18289)

##### Bug Fixes

- \[cli/config] Fix parsing of config keys with paths and colons in path
segments
[#&#8203;18378](https://redirect.github.com/pulumi/pulumi/pull/18378)

- \[engine] Fix some plugin context leaks, which could leave plugin
processes running on exit
[#&#8203;18373](https://redirect.github.com/pulumi/pulumi/pull/18373)

-   \[cli/package] Respect virtualenv option in package add/link
[#&#8203;18319](https://redirect.github.com/pulumi/pulumi/pull/18319)

- \[programgen/nodejs] Handle keyword overlap of "this" keyword for
local variables
[#&#8203;18177](https://redirect.github.com/pulumi/pulumi/pull/18177)

-   \[sdk/nodejs] Fix debug strings triggering the Output toString error
[#&#8203;18016](https://redirect.github.com/pulumi/pulumi/pull/18016)

-   \[sdk/nodejs] Use the corepack executable from dev dependencies
[#&#8203;18393](https://redirect.github.com/pulumi/pulumi/pull/18393)

-   \[sdk/python] Allow Pip 25
[#&#8203;18343](https://redirect.github.com/pulumi/pulumi/pull/18343)

-   \[sdk/python] Make RunPlugin default to using a virtualenv
[#&#8203;18371](https://redirect.github.com/pulumi/pulumi/pull/18371)

##### Miscellaneous

-   \[sdk/{dotnet,java}] Update Java to 1.1.0 and Dotnet to 3.72.0
[#&#8203;18394](https://redirect.github.com/pulumi/pulumi/pull/18394)

-   \[sdkgen] Align pulumi.json and schema.go
[#&#8203;18334](https://redirect.github.com/pulumi/pulumi/pull/18334)

###
[`v3.147.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.147.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.146.0...v3.147.0)

##### 3.147.0 (2025-01-21)

##### Features

-   \[cli] Update go.mod to require go1.22
[#&#8203;18274](https://redirect.github.com/pulumi/pulumi/pull/18274)

-   \[cli/config] Improve documentation for pulumi config set
[#&#8203;18285](https://redirect.github.com/pulumi/pulumi/pull/18285)

-   \[cli/package] Allow short hashes as versions in package add
[#&#8203;18277](https://redirect.github.com/pulumi/pulumi/pull/18277)

- \[cli/{package,plugin}] Support getting plugins from remote git
sources
[#&#8203;17827](https://redirect.github.com/pulumi/pulumi/pull/17827)

##### Bug Fixes

- \[engine] Skip acquiring program packages during refresh when running
inline automation programs
[#&#8203;18283](https://redirect.github.com/pulumi/pulumi/pull/18283)

-   \[sdk/nodejs] Avoid unnecessary Node.js installations
[#&#8203;18293](https://redirect.github.com/pulumi/pulumi/pull/18293)

- \[sdk/{nodejs,python}] Fix handling of DependencyResource when
checking invoke deps
[#&#8203;18275](https://redirect.github.com/pulumi/pulumi/pull/18275)

- \[sdk/{nodejs,python}] Permit output arguments in plain invokes for
backwards compatibility
[#&#8203;18304](https://redirect.github.com/pulumi/pulumi/pull/18304)

##### Miscellaneous

-   \[sdk/python] Manage the publish dependencies in pyproject.toml
[#&#8203;18261](https://redirect.github.com/pulumi/pulumi/pull/18261)

###
[`v3.146.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.146.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.145.0...v3.146.0)

##### 3.146.0 (2025-01-15)

##### Features

- \[cli] Allow specifying a version with `pulumi convert
--from=<plugin>@&#8203;<version>`
[#&#8203;18220](https://redirect.github.com/pulumi/pulumi/pull/18220)

-   \[cli] Enable Autonaming Configuration in non-experimental mode
[#&#8203;18228](https://redirect.github.com/pulumi/pulumi/pull/18228)

- \[cli] Retrieve Git metadata from the environment if not running in a
repository
[#&#8203;12871](https://redirect.github.com/pulumi/pulumi/pull/12871)

-   \[pkg] Add a `call` intrinsic to PCL
[#&#8203;18206](https://redirect.github.com/pulumi/pulumi/pull/18206)

- \[auto/go] Add `Color` option to `optdestroy`, `optpreview`,
`optrefresh`, and `optup` packages to allow explicit configuration of
output color.
[#&#8203;18184](https://redirect.github.com/pulumi/pulumi/pull/18184)

- \[cli/import] Add support for parameterized packages to `pulumi
import`
[#&#8203;18038](https://redirect.github.com/pulumi/pulumi/pull/18038)

- \[cli/import] Import can now import resources from parameterized
providers
[#&#8203;18039](https://redirect.github.com/pulumi/pulumi/pull/18039)

-   \[cli/new] Add support for Copilot templates
[#&#8203;16825](https://redirect.github.com/pulumi/pulumi/pull/16825)

##### Bug Fixes

- \[auto/go] Fix rejection of `nil` inline programs in the Go automation
API
[#&#8203;18214](https://redirect.github.com/pulumi/pulumi/pull/18214)

-   \[sdk/go] Improve error messages for wrong stack output types
[#&#8203;18245](https://redirect.github.com/pulumi/pulumi/pull/18245)

- \[sdk/{nodejs,python}] Wait for resource in the input property
dependencies
[#&#8203;18204](https://redirect.github.com/pulumi/pulumi/pull/18204)

- \[cli/plugin] Show plugin kind in plugin rm correctly. Also show the
usage string if the plugin type is incorrect
[#&#8203;18179](https://redirect.github.com/pulumi/pulumi/pull/18179)

-   \[cli/plugin] Passthrough unstructured logs from dynamic providers
[#&#8203;18253](https://redirect.github.com/pulumi/pulumi/pull/18253)

-   \[sdk/python] Fix callbackserver shutdown
[#&#8203;18190](https://redirect.github.com/pulumi/pulumi/pull/18190)

###
[`v3.145.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.145.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.144.1...v3.145.0)

##### 3.145.0 (2025-01-07)

##### Features

- \[auto/go] Support --clear-pending-creates for refresh command in Go
Automation API for preview refresh and refresh operations.
[#&#8203;18101](https://redirect.github.com/pulumi/pulumi/pull/18101)

- \[programgen/{java,sdkgen/java}] Only use gRPC to communicate with the
Java host
[#&#8203;18138](https://redirect.github.com/pulumi/pulumi/pull/18138)

- \[cli/package] Support bridging to terraform providers automatically
in pulumi convert
[#&#8203;17992](https://redirect.github.com/pulumi/pulumi/pull/17992)

-   \[sdk/go] Implement deferred output for the Go SDK and program-gen
[#&#8203;17885](https://redirect.github.com/pulumi/pulumi/pull/17885)

##### Bug Fixes

-   \[cli] Fix TestPackageAddGoParameterized to utilize version path
[#&#8203;18150](https://redirect.github.com/pulumi/pulumi/pull/18150)

- \[cli/engine] Clarify the usage string for the --expect-no-changes
flag
[#&#8203;18105](https://redirect.github.com/pulumi/pulumi/pull/18105)

-   \[auto/go] Return error if no inline program specified
[#&#8203;18086](https://redirect.github.com/pulumi/pulumi/pull/18086)

- \[auto/go] Interrupt programs gracefully when the context is canceled
[#&#8203;18124](https://redirect.github.com/pulumi/pulumi/pull/18124)

- \[cli/new] Provide a better error message when pulumi new --ai
generates a program with errors
[#&#8203;18091](https://redirect.github.com/pulumi/pulumi/pull/18091)

-   \[cli/new] Provide a more meaningful message for the --language flag
[#&#8203;18092](https://redirect.github.com/pulumi/pulumi/pull/18092)

- \[engine] Enable `pulumi:pulumi:getResource` to hydrate `Read`
resources
[#&#8203;18070](https://redirect.github.com/pulumi/pulumi/pull/18070)

-   \[programgen] Allow for case-insensitive terraform convert source
[#&#8203;18111](https://redirect.github.com/pulumi/pulumi/pull/18111)

- \[programgen/go] Fix importing module names in Go programs that aren't
lower-case
[#&#8203;18113](https://redirect.github.com/pulumi/pulumi/pull/18113)

-   \[sdk/go] Fix panic when diffing computed property values
[#&#8203;18104](https://redirect.github.com/pulumi/pulumi/pull/18104)

- \[sdk/go] Avoid calling invokes with dependencies on unknown resources
[#&#8203;18133](https://redirect.github.com/pulumi/pulumi/pull/18133)

-   \[sdk/nodejs] Fix source maps when using jest
[#&#8203;18108](https://redirect.github.com/pulumi/pulumi/pull/18108)

- \[sdk/nodejs] Avoid calling invokes with dependencies on unknown
resources
[#&#8203;18152](https://redirect.github.com/pulumi/pulumi/pull/18152)

- \[sdk/python] Fix reading pulumi-plugin.json when using the uv
toolchain
[#&#8203;18107](https://redirect.github.com/pulumi/pulumi/pull/18107)

-   \[sdk/python] Fix ListPackages when using uv
[#&#8203;18121](https://redirect.github.com/pulumi/pulumi/pull/18121)

-   \[sdk/python] Fix dynamic providers when using Poetry or uv
[#&#8203;18126](https://redirect.github.com/pulumi/pulumi/pull/18126)

-   \[sdk/python] Fix prerelease version
[#&#8203;18125](https://redirect.github.com/pulumi/pulumi/pull/18125)

- \[sdk/python] Avoid calling invokes with dependencies on unknown
resources
[#&#8203;18141](https://redirect.github.com/pulumi/pulumi/pull/18141)

##### Miscellaneous

- \[programgen/java] Bump Java SDK dependency version so that `package
gen-sdk` emits buildable code
[#&#8203;18130](https://redirect.github.com/pulumi/pulumi/pull/18130)

-   \[sdk/python] Switch to pyproject.toml + uv
[#&#8203;18081](https://redirect.github.com/pulumi/pulumi/pull/18081)

-   \[sdk/python] Move mypy configuration into pyproject.toml
[#&#8203;18118](https://redirect.github.com/pulumi/pulumi/pull/18118)

-   \[sdk/python] Move pyright configuration into pyproject.toml
[#&#8203;18116](https://redirect.github.com/pulumi/pulumi/pull/18116)

-   \[sdk/python] Move ruff configuration into pyproject.toml
[#&#8203;18117](https://redirect.github.com/pulumi/pulumi/pull/18117)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - "every weekday" (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

.github/workflows/pr.yml

@@ -42,7 +42,7 @@ jobs:
       - name: Fetch Tags
         run: git fetch --quiet --prune --unshallow --tags
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
         with:
           pulumi-version: latest
       - name: Install pulumictl
@@ -127,7 +127,7 @@ jobs:
         with:
           submodules: recursive
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
         with:
           pulumi-version: latest
       - name: Set up JDK 11
@@ -213,7 +213,7 @@ jobs:
         with:
           submodules: recursive
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
         with:
           pulumi-version: latest
       - run: make clone_examples
@@ -243,7 +243,7 @@ jobs:
               ${{ steps.go-cache-paths.outputs.go-mod }}
           key: go-cache-examples-${{ hashFiles('**/go.sum') }}
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
       - name: Download versions.txt
         uses: actions/download-artifact@v4
         with:
@@ -332,7 +332,7 @@ jobs:
         with:
           submodules: recursive
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
         with:
           pulumi-version: latest
       - name: Set up JDK 11
@@ -361,7 +361,7 @@ jobs:
             ${{ steps.go-cache-paths.outputs.go-mod }}
           key: go-cache-integrations-${{ hashFiles('**/go.sum') }}
       - name: Install Pulumi CLI
-        uses: pulumi/action-install-pulumi-cli@v2
+        uses: pulumi/action-install-pulumi-cli@b374ceb6168550de27c6eba92e01c1a774040e11 # v2
       - name: Download versions.txt
         uses: actions/download-artifact@v4
         with:
@@ -392,7 +392,7 @@ jobs:
         with:
           submodules: recursive
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v6
+        uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
         with:
           pulumi-version: latest
       - run: make clone_templates

pkg/go.mod

@@ -1,8 +1,8 @@
 module github.com/pulumi/pulumi-java/pkg
 
-go 1.21
+go 1.22
 
-toolchain go1.22.1
+toolchain go1.24.0
 
 replace github.com/Sirupsen/logrus => github.com/sirupsen/logrus v1.5.0
 
@@ -14,12 +14,12 @@ require (
 	github.com/hashicorp/hcl/v2 v2.23.0
 	github.com/hexops/autogold/v2 v2.2.1
 	github.com/pkg/errors v0.9.1
-	github.com/pulumi/pulumi/pkg/v3 v3.144.1
-	github.com/pulumi/pulumi/sdk/v3 v3.144.1
+	github.com/pulumi/pulumi/pkg/v3 v3.150.0
+	github.com/pulumi/pulumi/sdk/v3 v3.150.0
 	github.com/spf13/cobra v1.8.1
 	github.com/stretchr/testify v1.10.0
 	github.com/zclconf/go-cty v1.15.1
-	golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
 	google.golang.org/grpc v1.67.1
 	google.golang.org/protobuf v1.36.1
 	gopkg.in/yaml.v3 v3.0.1
@@ -42,7 +42,7 @@ require (
 	github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2 // indirect
 	github.com/BurntSushi/toml v1.2.1 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v1.0.0 // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
 	github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
@@ -70,7 +70,7 @@ require (
 	github.com/cheggaaa/pb v1.0.29 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/containerd/console v1.0.4-0.20230313162750-1ae8d489ac81 // indirect
-	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/deckarep/golang-set/v2 v2.5.0 // indirect
 	github.com/djherbis/times v1.5.0 // indirect
@@ -79,8 +79,8 @@ require (
 	github.com/fatih/color v1.16.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
-	github.com/go-git/go-billy/v5 v5.5.0 // indirect
-	github.com/go-git/go-git/v5 v5.12.0 // indirect
+	github.com/go-git/go-billy/v5 v5.6.1 // indirect
+	github.com/go-git/go-git/v5 v5.13.1 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.3 // indirect
 	github.com/go-logr/logr v1.4.1 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
@@ -154,7 +154,7 @@ require (
 	github.com/segmentio/asm v1.1.3 // indirect
 	github.com/segmentio/encoding v0.3.5 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
-	github.com/skeema/knownhosts v1.2.2 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/spf13/afero v1.9.5 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/texttheater/golang-levenshtein v1.0.1 // indirect
@@ -174,15 +174,15 @@ require (
 	gocloud.dev v0.37.0 // indirect
 	gocloud.dev/secrets/hashivault v0.37.0 // indirect
 	golang.org/x/crypto v0.31.0 // indirect
-	golang.org/x/mod v0.18.0 // indirect
+	golang.org/x/mod v0.19.0 // indirect
 	golang.org/x/net v0.33.0 // indirect
 	golang.org/x/oauth2 v0.22.0 // indirect
 	golang.org/x/sync v0.10.0 // indirect
 	golang.org/x/sys v0.28.0 // indirect
 	golang.org/x/term v0.27.0 // indirect
 	golang.org/x/text v0.21.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
-	golang.org/x/tools v0.22.0 // indirect
+	golang.org/x/tools v0.23.0 // indirect
 	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
 	google.golang.org/api v0.169.0 // indirect
 	google.golang.org/genproto v0.0.0-20240311173647-c811ad7063a7 // indirect