diff --git a/cluster/pulumi/package-lock.json b/cluster/pulumi/package-lock.json
index d1408dad52..9293d0008a 100644
--- a/cluster/pulumi/package-lock.json
+++ b/cluster/pulumi/package-lock.json
@@ -146,12 +146,6 @@
                 "auth0": "^5.6.0"
             }
         },
-        "gcp-project": {
-            "name": "@lfdecentralizedtrust/splice-pulumi-gcp-project",
-            "version": "1.0.0",
-            "extraneous": true,
-            "devDependencies": {}
-        },
         "gha": {
             "name": "@lfdecentralizedtrust/splice-pulumi-gha",
             "version": "1.0.0",
@@ -1024,6 +1018,15 @@
                 "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
             }
         },
+        "node_modules/@gar/promise-retry": {
+            "version": "1.0.3",
+            "resolved": "https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz",
+            "integrity": "sha512-GmzA9ckNokPypTg10pgpeHNQe7ph+iIKKmhKu3Ob9ANkswreCx7R3cKmY781K8QK3AqVL3xVh9A42JvIAbkkSA==",
+            "license": "MIT",
+            "engines": {
+                "node": "^20.17.0 || >=22.9.0"
+            }
+        },
         "node_modules/@google-cloud/paginator": {
             "version": "5.0.2",
             "resolved": "https://registry.npmjs.org/@google-cloud/paginator/-/paginator-5.0.2.tgz",
@@ -3202,44 +3205,44 @@
             }
         },
         "node_modules/@sigstore/core": {
-            "version": "3.1.0",
-            "resolved": "https://registry.npmjs.org/@sigstore/core/-/core-3.1.0.tgz",
-            "integrity": "sha512-o5cw1QYhNQ9IroioJxpzexmPjfCe7gzafd2RY3qnMpxr4ZEja+Jad/U8sgFpaue6bOaF+z7RVkyKVV44FN+N8A==",
+            "version": "3.2.1",
+            "resolved": "https://registry.npmjs.org/@sigstore/core/-/core-3.2.1.tgz",
+            "integrity": "sha512-qRsxPnCrbC/puegGxKuynfnxgLiHqWStrSjxkoB4YKqq3Z3s4cyZyj42ZdWFAEblNP65C+rBH8EuREHIXoi83g==",
             "license": "Apache-2.0",
             "engines": {
                 "node": "^20.17.0 || >=22.9.0"
             }
         },
         "node_modules/@sigstore/protobuf-specs": {
-            "version": "0.5.0",
-            "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.5.0.tgz",
-            "integrity": "sha512-MM8XIwUjN2bwvCg1QvrMtbBmpcSHrkhFSCu1D11NyPvDQ25HEc4oG5/OcQfd/Tlf/OxmKWERDj0zGE23jQaMwA==",
+            "version": "0.5.1",
+            "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.5.1.tgz",
+            "integrity": "sha512-/ScWUhhoFasJsSRGTVBwId1loQjjnjAfE4djL6ZhrXRpNCmPTnUKF5Jokd58ILseOMjzET3UrMOtJPS9sYeI0g==",
             "license": "Apache-2.0",
             "engines": {
                 "node": "^18.17.0 || >=20.5.0"
             }
         },
         "node_modules/@sigstore/sign": {
-            "version": "4.1.0",
-            "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.0.tgz",
-            "integrity": "sha512-Vx1RmLxLGnSUqx/o5/VsCjkuN5L7y+vxEEwawvc7u+6WtX2W4GNa7b9HEjmcRWohw/d6BpATXmvOwc78m+Swdg==",
+            "version": "4.1.1",
+            "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.1.tgz",
+            "integrity": "sha512-Hf4xglukg0XXQ2RiD5vSoLjdPe8OBUPA8XeVjUObheuDcWdYWrnH/BNmxZCzkAy68MzmNCxXLeurJvs6hcP2OQ==",
             "license": "Apache-2.0",
             "dependencies": {
+                "@gar/promise-retry": "^1.0.2",
                 "@sigstore/bundle": "^4.0.0",
-                "@sigstore/core": "^3.1.0",
+                "@sigstore/core": "^3.2.0",
                 "@sigstore/protobuf-specs": "^0.5.0",
-                "make-fetch-happen": "^15.0.3",
-                "proc-log": "^6.1.0",
-                "promise-retry": "^2.0.1"
+                "make-fetch-happen": "^15.0.4",
+                "proc-log": "^6.1.0"
             },
             "engines": {
                 "node": "^20.17.0 || >=22.9.0"
             }
         },
         "node_modules/@sigstore/tuf": {
-            "version": "4.0.1",
-            "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.1.tgz",
-            "integrity": "sha512-OPZBg8y5Vc9yZjmWCHrlWPMBqW5yd8+wFNl+thMdtcWz3vjVSoJQutF8YkrzI0SLGnkuFof4HSsWUhXrf219Lw==",
+            "version": "4.0.2",
+            "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.2.tgz",
+            "integrity": "sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==",
             "license": "Apache-2.0",
             "dependencies": {
                 "@sigstore/protobuf-specs": "^0.5.0",
@@ -3250,13 +3253,13 @@
             }
         },
         "node_modules/@sigstore/verify": {
-            "version": "3.1.0",
-            "resolved": "https://registry.npmjs.org/@sigstore/verify/-/verify-3.1.0.tgz",
-            "integrity": "sha512-mNe0Iigql08YupSOGv197YdHpPPr+EzDZmfCgMc7RPNaZTw5aLN01nBl6CHJOh3BGtnMIj83EeN4butBchc8Ag==",
+            "version": "3.1.1",
+            "resolved": "https://registry.npmjs.org/@sigstore/verify/-/verify-3.1.1.tgz",
+            "integrity": "sha512-qv7+G3J2cc6wwFj3yKvXOamzqhMwSk1ogPGmhpS8iXllcPrJaIIBA+4HbttlHVu1pqWTdmaCH/WE7UOC51kdoA==",
             "license": "Apache-2.0",
             "dependencies": {
                 "@sigstore/bundle": "^4.0.0",
-                "@sigstore/core": "^3.1.0",
+                "@sigstore/core": "^3.2.1",
                 "@sigstore/protobuf-specs": "^0.5.0"
             },
             "engines": {
@@ -9298,12 +9301,14 @@
             "integrity": "sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw=="
         },
         "node_modules/make-fetch-happen": {
-            "version": "15.0.3",
-            "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.3.tgz",
-            "integrity": "sha512-iyyEpDty1mwW3dGlYXAJqC/azFn5PPvgKVwXayOGBSmKLxhKZ9fg4qIan2ePpp1vJIwfFiO34LAPZgq9SZW9Aw==",
+            "version": "15.0.6",
+            "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.6.tgz",
+            "integrity": "sha512-Je0fLJ0F5atA7F+eIlLzk+Wkcl57JDf4kf+EW8xiP5E31xOQxkIxTbgf1Oi1Lw9tRI9UEMRdI5Vz2xTzoNU1Jw==",
             "license": "ISC",
             "dependencies": {
+                "@gar/promise-retry": "^1.0.0",
                 "@npmcli/agent": "^4.0.0",
+                "@npmcli/redact": "^4.0.0",
                 "cacache": "^20.0.1",
                 "http-cache-semantics": "^4.1.1",
                 "minipass": "^7.0.2",
@@ -9312,7 +9317,6 @@
                 "minipass-pipeline": "^1.2.4",
                 "negotiator": "^1.0.0",
                 "proc-log": "^6.0.0",
-                "promise-retry": "^2.0.1",
                 "ssri": "^13.0.0"
             },
             "engines": {
@@ -11061,17 +11065,17 @@
             "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="
         },
         "node_modules/sigstore": {
-            "version": "4.1.0",
-            "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-4.1.0.tgz",
-            "integrity": "sha512-/fUgUhYghuLzVT/gaJoeVehLCgZiUxPCPMcyVNY0lIf/cTCz58K/WTI7PefDarXxp9nUKpEwg1yyz3eSBMTtgA==",
+            "version": "4.1.1",
+            "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-4.1.1.tgz",
+            "integrity": "sha512-endqECJkfhozrXMK5ngu/UAA0xVcVEFdnHJCElGaExypjW+HK5i6zu3NteLoaX/iFbRUbC3+DjttQs0GARr+5w==",
             "license": "Apache-2.0",
             "dependencies": {
                 "@sigstore/bundle": "^4.0.0",
-                "@sigstore/core": "^3.1.0",
+                "@sigstore/core": "^3.2.1",
                 "@sigstore/protobuf-specs": "^0.5.0",
-                "@sigstore/sign": "^4.1.0",
-                "@sigstore/tuf": "^4.0.1",
-                "@sigstore/verify": "^3.1.0"
+                "@sigstore/sign": "^4.1.1",
+                "@sigstore/tuf": "^4.0.2",
+                "@sigstore/verify": "^3.1.1"
             },
             "engines": {
                 "node": "^20.17.0 || >=22.9.0"