build(deps): bump tmp and @pulumi/kubernetes in /.infra

[dependabot]

Bumps tmp to 0.2.6 and updates ancestor dependency @pulumi/kubernetes. These dependencies need to be updated together.

Updates tmp from 0.2.3 to 0.2.6

Commits

• 41f7159 Bump up the version
• efa4a06 Merge commit from fork
• 7ef2728 Check for relative values
• 3d2fe38 Bump up the version
• e162828 Merge pull request #309 from fflorent/fix-tmp-dir-with-dir
• b847d2f Fix use of tmp.dir() with dir option
• 08fa3ab Update version
• 1cf4ec5 Merge commit from fork
• 188b25e Fix GHSA-52f5-9888-hmc6
• 73b9fe4 Add test case for GHSA-52f5-9888-hmc6
• Additional commits viewable in compare view

Updates @pulumi/kubernetes from 4.18.3 to 4.31.1

Release notes

Sourced from @​pulumi/kubernetes's releases.

v4.31.1

Changed

• pulumi/pulumi-kubernetes#4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
• Update first-party Pulumi dependencies to v3.242.0. which fixes pulumi/pulumi-kubernetes#4354

v4.31.0

Added

• #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
• #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/HEAD/docs/list-rpc-semantics.md for design notes.

Fixed

• #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

4.30.0 (April 24, 2026)

Fixed

• #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
• #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

• Upgrade Kubernetes schema and libraries to v1.35.4.
• Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Fixed

pulumi/pulumi-kubernetes#2926 Use client-side create for new resources instead of server-side apply.

Users may observe stricter errors on some Create operations. Please read carefully.

When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

pulumi/pulumi-kubernetes#2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.

Changed

Upgrade Kubernetes schema and libraries to v1.35.3.

v4.28.0

No release notes provided.

... (truncated)

Changelog

Sourced from @​pulumi/kubernetes's changelog.

4.31.1 (May 19, 2026)

Changed

• #4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
• Update first-party Pulumi dependencies to v3.242.0.

4.31.0 (May 14, 2026)

Added

• #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
• #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/master/docs/list-rpc-semantics.md for design notes.

Fixed

• #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.1.

4.30.0 (April 24, 2026)

Fixed

• #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
• #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

• Upgrade Kubernetes schema and libraries to v1.35.4.
• Upgrade Kubernetes schema and libraries to v1.36.0.

4.29.0 (April 15, 2026)

Fixed

• #2926 Use client-side create for new resources instead of server-side apply.

  Users may observe stricter errors on some Create operations. Please read carefully.

  When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

... (truncated)

Commits

• 7bc3a67 Prepare for v4.31.1 release (#4366)
• 1f5b4d2 Update first-party Pulumi dependencies to v3.242.0 (#4365)
• e8f0d87 Update module github.com/go-git/go-git/v5 to v5.19.1 [SECURITY] (#4364)
• 51e8420 Update GitHub Actions workflows. (#4361)
• ccadf55 Update first-party Pulumi dependencies to v3.241.0 (#4360)
• e0ac4d3 Bump kind 0.29.0 → 0.31.0 (#4358)
• 6b10bbe Update GitHub Actions workflows. (#4353)
• ee00284 Update module github.com/pulumi/esc to v0.24.0 (#4351)
• ed357fb Fix duplicate ### Changed heading in k8s auto-bump workflow (#4345)
• 52169e8 Update first-party Pulumi dependencies to v4.31.0 (#4349)
• Additional commits viewable in compare view

Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.