chore: update provider (#120)

.devcontainer/Dockerfile

@@ -0,0 +1,11 @@
+FROM  --platform=linux/amd64 pulumi/pulumi:3.74.0
+
+# Install pulumictl and set to PATH
+RUN curl -fsSL https://get.pulumi.com | sh
+ENV PATH="/root/.pulumi/bin:${PATH}"
+
+# create a directory for pulumictl and download the binary to it and set to PATH
+RUN mkdir -p /root/pulumictl && cd /root/pulumictl/
+RUN wget https://github.com/pulumi/pulumictl/releases/download/v0.0.42/pulumictl-v0.0.42-linux-amd64.tar.gz -O /root/pulumictl/pulumictl-v0.0.42-linux-amd64.tar.gz
+RUN tar -xvf /root/pulumictl/pulumictl-v0.0.42-linux-amd64.tar.gz -C /root/pulumictl/
+ENV PATH="//root/pulumictl/:${PATH}"

.devcontainer/devcontainer.json

@@ -0,0 +1,12 @@
+{
+  "build": {
+    "dockerfile": "Dockerfile"
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "golang.go"
+      ]
+    }
+  }
+}

.github/dependabot.yml

@@ -33,3 +33,14 @@ updates:
     commit-message:
       prefix: "chore"
       include: "scope"
+  - package-ecosystem: "docker"
+    directory: ".devcontainer"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "08:00"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "chore"
+      include: "scope"

.github/workflows/release.yaml

@@ -6,7 +6,7 @@ on:
 
 permissions:
   contents: write
-
+  id-token: write
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -40,6 +40,8 @@ jobs:
           repo: pulumi/pulumictl
       - name: Set PreRelease Version
         run: echo "GORELEASER_CURRENT_TAG=v$(pulumictl get version --language generic)" >> $GITHUB_ENV
+      - uses: sigstore/cosign-installer@d13028333d784fcc802b67ec924bcebe75aa0a5f # v3.1.0
+      - uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7 # tag=v4.3.0
         with:
@@ -116,6 +118,7 @@ jobs:
           access: "public"
           token: ${{ env.NPM_TOKEN }}
           package: ${{github.workspace}}/sdk/nodejs/bin/package.json
+          provenance: true
       - if: ${{ matrix.language == 'dotnet' && env.PUBLISH_NUGET == 'true' }}
         name: publish nuget package
         run: |
@@ -134,6 +137,6 @@ jobs:
           - dotnet
           - go
         nodeversion:
-          - 16.x
+          - 18.x
         pythonversion:
           - "3.9"

.goreleaser.yaml

@@ -22,6 +22,28 @@ builds:
       - -X github.com/pulumiverse/pulumi-purrl/provider/pkg/version.Version={{.Tag }}
     main: ./cmd/pulumi-resource-purrl/
 
+signs:
+  - cmd: cosign
+    env:
+      - COSIGN_EXPERIMENTAL=1
+    certificate: '${artifact}.pem'
+    args:
+      - sign-blob
+      - '-y'
+      - '--output-certificate=${certificate}'
+      - '--bundle=${signature}'
+      - '${artifact}'
+    artifacts: all
+    output: true
+
+sboms:
+  - artifacts: archive
+  - id: source
+    artifacts: source
+
+source:
+  enabled: true
+
 release:
   disable: false
   prerelease: auto

Makefile

@@ -84,7 +84,7 @@ java_sdk::
 		gradle --console=plain build
 
 .PHONY: build
-build:: codegen provider go_sdk dotnet_sdk nodejs_sdk python_sdk java_sdk
+build:: codegen provider go_sdk dotnet_sdk nodejs_sdk python_sdk #java_sdk
 
 # Required for the codegen action that runs in pulumi/pulumi
 only_build:: build

provider/go.mod

@@ -48,7 +48,7 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/term v1.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/pulumi/pulumi/pkg/v3 v3.72.0 // indirect
+	github.com/pulumi/pulumi/pkg/v3 v3.74.0 // indirect
 	github.com/rivo/uniseg v0.4.4 // indirect
 	github.com/rogpeppe/go-internal v1.10.0 // indirect
 	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 // indirect

provider/go.sum

@@ -128,8 +128,8 @@ github.com/pulumi/pulumi-go-provider v0.10.0 h1:tgX2QPBLjgO4GSmCXW5ARzq7Mmna51jZ
 github.com/pulumi/pulumi-go-provider v0.10.0/go.mod h1:6yOfJ+g5JkflllURGekK7lncGBaLLbSuwAfHpuTD+E4=
 github.com/pulumi/pulumi-go-provider/integration v0.10.0 h1:GHesnrrvkboSjkZpC+qRwjkXBp5d+fSXqlIO92zQxvc=
 github.com/pulumi/pulumi-go-provider/integration v0.10.0/go.mod h1:qAbKHpPzANFKOyjiQ0CzdgJh4DtM0gtujKhO7+l3/+w=
-github.com/pulumi/pulumi/pkg/v3 v3.72.0 h1:U7g7yAEwlfVIme0e+MmoWxArHYFTRpo8JX83KTQRuRg=
-github.com/pulumi/pulumi/pkg/v3 v3.72.0/go.mod h1:Bug/Xi21nzRtrD7Lx+rTBtQUrzyuiaj6rL6RAKMZLRo=
+github.com/pulumi/pulumi/pkg/v3 v3.74.0 h1:akL3ytYRgytJnlfj3hYyhNq15EiN5GGdlTB0vupxB7I=
+github.com/pulumi/pulumi/pkg/v3 v3.74.0/go.mod h1:HF+q4SozI1SZj8idzw0Kx3MIOH82m7er19PfVLUbDS0=
 github.com/pulumi/pulumi/sdk/v3 v3.74.0 h1:U+7fc/iLFy/aZMyQNOSxrp2voqBk8VKLyodgwkmAt7Q=
 github.com/pulumi/pulumi/sdk/v3 v3.74.0/go.mod h1:BUUBfQZsH0FPuznRfFHkR+b96VlXELnn+DgidFj4XSQ=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=

sdk/dotnet/Pulumiverse.Purrl.csproj

@@ -12,7 +12,6 @@
 
     <TargetFramework>net6.0</TargetFramework>
     <Nullable>enable</Nullable>
-    <UseSharedCompilation>false</UseSharedCompilation>
   </PropertyGroup>
 
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|AnyCPU'">