Hi! We're being terrorized by dependabot security warnings related to the kubernetes pulumi package's

glob

dependency. I see that there's an open PR from october last year that hasn't been merged. Could you look into this? It generates 5+ warnings per repository and we have over 500 repositories that use it. I really want SecOps off my back 👀 https://github.com/pulumi/pulumi-kubernetes/pull/3961

Hi @kind-motherboard-59197 let me talk to our engineers here - there are some packages that we use, that because it's a command line tool rather than in a server it's not actually affected in the way that the security warning suggests

Thanks a lot!

We release when we need to. It looks like there is a release planned because of updates to the kubernetes api that we track - we'll either release this fix as part of that or do a patch release and release it by itself... I would hope either way in the next couple of days

Sounds good 👍

Looks like v4.28.0 is going to contain the package updates and is in the process of being released now