Commit Graph

309 Commits

Author SHA1 Message Date
pulumi-renovate[bot]
8cecb2fb4b Update module github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild to v0.0.16 (#853)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build)
| require | patch | `v0.0.15` -> `v0.0.16` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi-docker-build
(github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary>

###
[`v0.0.16`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.15...v0.0.16)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.15...v0.0.16)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-05-13 04:07:44 +00:00
Bryce Lampe
df2dcca9a8 Fix 404 handling when deleting a manifest (#850)
Upstream was previously using an internal notFound error, and we were
relying on fragile string matching to detect it. This broke when we
upgraded to Docker v28.

d25e260d2e (diff-a5e122cd2318f2dc156f373804a59d30355b0c308b9e64f48e0713344fcdba33L164)

Nowadays containerd exposes a public ErrNotFound which we can use
instead.

Fixes #849.
v0.0.16
2026-05-12 10:46:54 -07:00
pulumi-provider-automation[bot]
9048892848 Update GitHub Actions workflows. (#851)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[daf8aba035d6ed8919db6089c780f56cb7fefc69](daf8aba035).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-12 06:35:37 +00:00
pulumi-provider-automation[bot]
d8c7696758 Update GitHub Actions workflows. (#848)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4cbd027aa555ac5a576d57358400a2e24e329c2c](4cbd027aa5).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-10 06:31:10 +00:00
pulumi-provider-automation[bot]
0d1a1b4fd3 Update GitHub Actions workflows. (#847)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[97b5e096a3ec277f7b970353d7b048d4800cdb61](97b5e096a3).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-09 06:28:31 +00:00
pulumi-renovate[bot]
8dff8f0e21 Update first-party Pulumi dependencies (#846)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.236.0` ->
`3.237.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.236.0/3.237.0)
|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | minor | `v3.105.0` -> `v3.106.1` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.236.0` -> `v3.237.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.237.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.237.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.236.0...v3.237.0)

##### 3.237.0 (2026-05-08)

##### Features

- \[cli] Include the running command name and detected AI agent (when
present) in the User-Agent header on Pulumi Cloud API requests
[#&#8203;22908](https://redirect.github.com/pulumi/pulumi/pull/22908)

-   \[engine] Include `result` on the summary engine event
[#&#8203;22883](https://redirect.github.com/pulumi/pulumi/pull/22883)

-   \[sdkgen] Eagerly error on schemas with unconstructable types
[#&#8203;22890](https://redirect.github.com/pulumi/pulumi/pull/22890)

- \[cli/cloud] Auto-fill `lang` and `os` query parameters on `pulumi
cloud api` GET/HEAD requests when the matched OpenAPI operation declares
them and the caller hasn't supplied them
[#&#8203;22726](https://redirect.github.com/pulumi/pulumi/pull/22726)

- \[cli/package] Add `pulumi package new` to bootstrap a Pulumi package
from a template
[#&#8203;22837](https://redirect.github.com/pulumi/pulumi/pull/22837)

##### Bug Fixes

- \[cli] Add blank-line gaps between `pulumi neo` TUI conversation
blocks
[#&#8203;22846](https://redirect.github.com/pulumi/pulumi/pull/22846)

- \[cli/import] Preserve `__`-prefixed keys when generating PCL for
imported resource state, so provider-defined payloads round-trip
correctly
[#&#8203;22856](https://redirect.github.com/pulumi/pulumi/pull/22856)

- \[cli/neo] Render `ux__ask_user` clarifying questions as questions
instead of approval prompts
[#&#8203;22862](https://redirect.github.com/pulumi/pulumi/pull/22862)

-   \[cli/neo] Fix a panic when cancelling a `pulumi neo` session
[#&#8203;22898](https://redirect.github.com/pulumi/pulumi/pull/22898)

- \[cli/neo] Render every assistant message in the TUI scrollback so
multi-turn commentary no longer disappears between tool calls

- \[cli/neo] Return the bare stack name and canonical project name from
`pulumi_preview` and `pulumi_up` tool results instead of echoing the raw
input
[#&#8203;22891](https://redirect.github.com/pulumi/pulumi/pull/22891)

- \[codegen/pcl] Stop reporting spurious circular references when an
`ignoreChanges`, `hideDiffs`, `replaceOnChanges`, or
`additionalSecretOutputs` entry shares a name with a top-level node
[#&#8203;22916](https://redirect.github.com/pulumi/pulumi/pull/22916)

- \[programgen/pcl] Fix PCL binder panic when a conditional mixes a
Promise-typed branch with a try() branch
[#&#8203;22907](https://redirect.github.com/pulumi/pulumi/pull/22907)

- \[sdk/python] Support `NotRequired`, `Required` and `total=False` in
TypedDicts for component resource arg types
[#&#8203;22858](https://redirect.github.com/pulumi/pulumi/pull/22858)

##### Miscellaneous

- \[cli/cloud] Auto-fit `pulumi cloud api list` table to terminal width
and replace the
    `tabular` table renderer with `go-pretty`

[#&#8203;22874](https://redirect.github.com/pulumi/pulumi/pull/22874)

-   \[sdk/nodejs] Test on Node.js 26 and drop 20
[#&#8203;22872](https://redirect.github.com/pulumi/pulumi/pull/22872)

</details>

<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>

###
[`v3.106.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31061---2026-05-08)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.106.0...v3.106.1)

##### Bug Fixes

- \[sdk] Revert
[#&#8203;983](https://redirect.github.com/pulumi/pulumi-dotnet/issues/983),
restoring the framework version to v6
[#&#8203;997](https://redirect.github.com/pulumi/pulumi-dotnet/pull/997)

###
[`v3.106.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31060---2026-05-07)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.105.0...v3.106.0)

##### Bug Fixes

- \[sdk] Bump minimum .NET version to 8.0, to help fix a security
vulnerability
[#&#8203;983](https://redirect.github.com/pulumi/pulumi-dotnet/pull/983)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-05-09 00:40:47 +00:00
pulumi-renovate[bot]
b73395a7fa Update module github.com/pulumi/pulumi-java to v1.26.1 (#845)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-java](https://redirect.github.com/pulumi/pulumi-java)
| require | patch | `v1.26.0` -> `v1.26.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java)</summary>

###
[`v1.26.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1261---2026-05-07)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.26.0...v1.26.1)

##### Bug Fixes

- \[sdk] Fix inherited input properties missing from component schema
when args class inherits from a base class
[#&#8203;2129](https://redirect.github.com/pulumi/pulumi-java/pull/2129)

- \[runtime] Wait for debugger attach only when it is requested
[#&#8203;2161](https://redirect.github.com/pulumi/pulumi-java/pull/2161)

- \[codegen] Generate `unsecret(...)` as `.asPlaintext()` and emit
`config.requireSecret` for secret config variables in PCL programs
[#&#8203;2155](https://redirect.github.com/pulumi/pulumi-java/pull/2155)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-05-08 08:01:45 +00:00
pulumi-renovate[bot]
05962fcc01 Update first-party Pulumi dependencies to v3.236.0 (#842)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.235.0` ->
`3.236.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.235.0/3.236.0)
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.234.0` -> `v3.236.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.236.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32360-2026-05-06)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.236.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.236.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0)

#### 3.236.0 (2026-05-06)

###
[`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0)

#### 3.235.0 (2026-05-05)

##### Features

-   \[cli] Add `pulumi logs decrypt` command for viewing logs
[#&#8203;22523](https://redirect.github.com/pulumi/pulumi/pull/22523)

-   \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl)
[#&#8203;22807](https://redirect.github.com/pulumi/pulumi/pull/22807)

- \[cli] Automatically install the `hcl` converter from
pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl`
[#&#8203;22816](https://redirect.github.com/pulumi/pulumi/pull/22816)

- \[pcl] Add `read` blocks to PCL to read resources via ID and query
instead of registering them
[#&#8203;22641](https://redirect.github.com/pulumi/pulumi/pull/22641)

- \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any
Pulumi Cloud API
endpoint, with `--field`/`--header`/`--input`/`--body` flag handling,
path
template binding, content negotiation via `--format`, and `--dry-run`

[#&#8203;22771](https://redirect.github.com/pulumi/pulumi/pull/22771)

- \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow
continuation cursors,
    accumulate items into a single JSON envelope, and surface progress
    events to stderr with `--emit-events` (page, complete, truncated,
    partial_failure, cancelled).

[#&#8203;22772](https://redirect.github.com/pulumi/pulumi/pull/22772)

##### Bug Fixes

- \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied
`timeout` and to terminate the whole process tree (and unblock cmd.Wait)
when the deadline fires, so commands like `kubectl logs -f` no longer
hang Neo indefinitely.
[#&#8203;22820](https://redirect.github.com/pulumi/pulumi/pull/22820)

- \[cli] Surface the error and exit when `pulumi neo` fails to create
the underlying task, instead of leaving the TUI stuck in `Thinking…`
[#&#8203;22825](https://redirect.github.com/pulumi/pulumi/pull/22825)

- \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive`
[#&#8203;22827](https://redirect.github.com/pulumi/pulumi/pull/22827)

- \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi
neo` instead of hanging until a third press
[#&#8203;22821](https://redirect.github.com/pulumi/pulumi/pull/22821)

- \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and
will cache for parameterised packages as well
[#&#8203;22812](https://redirect.github.com/pulumi/pulumi/pull/22812)

- \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type`
discriminators) across RPC deserialization, matching the behavior of the
other language SDKs
[#&#8203;22834](https://redirect.github.com/pulumi/pulumi/pull/22834)

- \[programgen/{nodejs,python}] Fix programgen to emit the right
`length` check for string length
[#&#8203;22802](https://redirect.github.com/pulumi/pulumi/pull/22802)

##### Miscellaneous

- \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner
with new Neo-branded ASCII art.
[#&#8203;22817](https://redirect.github.com/pulumi/pulumi/pull/22817)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-05-07 21:40:04 +00:00
pulumi-provider-automation[bot]
766009ab42 Update GitHub Actions workflows. (#841)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[59779d0eefa4d7d6810a40f8190ef01a101acfe1](59779d0eef).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-07 06:32:50 +00:00
pulumi-renovate[bot]
0110626c42 Update first-party Pulumi dependencies (#819)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.231.0` ->
`3.235.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.231.0/3.235.0)
|
|
[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)
| require | minor | `v0.6.0` -> `v0.7.0` |
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | minor | `v3.103.0` -> `v3.105.0` |
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)
| require | patch | `v1.3.1` -> `v1.3.2` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.230.0` -> `v3.234.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0)

##### 3.235.0 (2026-05-05)

##### Features

-   \[cli] Add `pulumi logs decrypt` command for viewing logs
[#&#8203;22523](https://redirect.github.com/pulumi/pulumi/pull/22523)

-   \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl)
[#&#8203;22807](https://redirect.github.com/pulumi/pulumi/pull/22807)

- \[cli] Automatically install the `hcl` converter from
pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl`
[#&#8203;22816](https://redirect.github.com/pulumi/pulumi/pull/22816)

- \[pcl] Add `read` blocks to PCL to read resources via ID and query
instead of registering them
[#&#8203;22641](https://redirect.github.com/pulumi/pulumi/pull/22641)

- \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any
Pulumi Cloud API
endpoint, with `--field`/`--header`/`--input`/`--body` flag handling,
path
template binding, content negotiation via `--format`, and `--dry-run`

[#&#8203;22771](https://redirect.github.com/pulumi/pulumi/pull/22771)

- \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow
continuation cursors,
    accumulate items into a single JSON envelope, and surface progress
    events to stderr with `--emit-events` (page, complete, truncated,
    partial_failure, cancelled).

[#&#8203;22772](https://redirect.github.com/pulumi/pulumi/pull/22772)

##### Bug Fixes

- \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied
`timeout` and to terminate the whole process tree (and unblock cmd.Wait)
when the deadline fires, so commands like `kubectl logs -f` no longer
hang Neo indefinitely.
[#&#8203;22820](https://redirect.github.com/pulumi/pulumi/pull/22820)

- \[cli] Surface the error and exit when `pulumi neo` fails to create
the underlying task, instead of leaving the TUI stuck in `Thinking…`
[#&#8203;22825](https://redirect.github.com/pulumi/pulumi/pull/22825)

- \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive`
[#&#8203;22827](https://redirect.github.com/pulumi/pulumi/pull/22827)

- \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi
neo` instead of hanging until a third press
[#&#8203;22821](https://redirect.github.com/pulumi/pulumi/pull/22821)

- \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and
will cache for parameterised packages as well
[#&#8203;22812](https://redirect.github.com/pulumi/pulumi/pull/22812)

- \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type`
discriminators) across RPC deserialization, matching the behavior of the
other language SDKs
[#&#8203;22834](https://redirect.github.com/pulumi/pulumi/pull/22834)

- \[programgen/{nodejs,python}] Fix programgen to emit the right
`length` check for string length
[#&#8203;22802](https://redirect.github.com/pulumi/pulumi/pull/22802)

##### Miscellaneous

- \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner
with new Neo-branded ASCII art.
[#&#8203;22817](https://redirect.github.com/pulumi/pulumi/pull/22817)

###
[`v3.234.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32340-2026-05-01)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.233.0...v3.234.0)

##### Features

- \[cli/cloud] Add `pulumi cloud api describe` for inspecting the
parameters, request
    body, and response schema of any Pulumi Cloud API operation, with
    text, markdown, and JSON output

[#&#8203;22770](https://redirect.github.com/pulumi/pulumi/pull/22770)

- \[cli/cloud] Add `pulumi cloud api list` for browsing every endpoint
exposed by the Pulumi
    Cloud OpenAPI spec, with table and JSON output

[#&#8203;22769](https://redirect.github.com/pulumi/pulumi/pull/22769)

##### Bug Fixes

- \[engine] Revert changes to property path parsing that resulted in
errors for currently valid paths

###
[`v3.233.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32330-2026-04-30)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.232.0...v3.233.0)

##### Features

- \[auto/python] Expose the auto-generated Pulumi CLI interface as
`workspace.cli_api`
[#&#8203;22638](https://redirect.github.com/pulumi/pulumi/pull/22638)

- \[cli] Add encrypted logging to ~/.pulumi/logs; use the
PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
[#&#8203;22494](https://redirect.github.com/pulumi/pulumi/pull/22494)

- \[cli] Implement the `filesystem__grep` and
`filesystem__content_replace` local tools
for `pulumi neo`. `grep` runs a regex search across files in the project
root
with an optional `include` glob filter and returns results in
`path:lineno: line`
form. `content_replace` performs a literal multi-file search-and-replace
with a
`file_pattern` glob and `dry_run` preview mode. Both tools skip binary
files,
hidden directories, and `node_modules`, and reject paths outside the
project
    root. Their input schemas match the cloud-side tool definitions.

[#&#8203;22655](https://redirect.github.com/pulumi/pulumi/pull/22655)

- \[cli] Add `pulumi_preview` and `pulumi_up` as local tools for the
experimental `pulumi neo`
agent. The Neo TUI renders a persistent bordered block for each
operation that
streams changed resources and diagnostics as the engine runs and
finalizes with a
    summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

[#&#8203;22697](https://redirect.github.com/pulumi/pulumi/pull/22697)

-   \[engine] Add `List` to the provider protocol and schema
[#&#8203;22693](https://redirect.github.com/pulumi/pulumi/pull/22693)

##### Bug Fixes

- \[engine] Return a clear error when two installed plugins claim the
same default provider package name (for example, a native `scaleway`
provider alongside a `terraform-provider` bridge parameterized as
`scaleway`) instead of panicking with "Should not have seen an older
plugin if sorting is correct!"
[#&#8203;22679](https://redirect.github.com/pulumi/pulumi/pull/22679)

- \[programgen] Do not wrap a `call(...)` on a method whose return type
is marked plain in an Output. Previously
PCL bound every method call's return type as `Output<T>`, which caused
downstream program-gen
to emit broken `.apply(...)`/`.ApplyT(...)` traversals against plain
struct returns (e.g.
methods with `liftSingleValueMethodReturns=true` or
`ReturnTypePlain=true`).

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[backend/diy] When using a backend url containing creds (e.g.
PostgreSQL conn string), mask user:pass as in lock-related error
messages
[#&#8203;22701](https://redirect.github.com/pulumi/pulumi/pull/22701)

- \[codegen/go] Generate unqualified `Provider` references for the
package's own provider resource. Previously
the Go codegen always emitted `<pkg>.Provider` even when the reference
appeared inside `<pkg>`
itself, producing identifiers that would not compile. Affects generated
code for method return
types (and other schema positions) that reference
`pulumi:providers:<pkg>`.

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[codegen/nodejs] Generate unqualified `Provider` references for the
package's own provider resource when emitting
TypeScript code inside that package. Previously the generator always
qualified the name as
`<pkg>.Provider`, which does not resolve when no `<pkg>` namespace
import is in scope.

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[codegen/nodejs] Import the correct class name for a provider
resource. Imports for `pulumi:providers:<pkg>` used
the title-cased package name instead of `Provider`, producing a phantom
identifier that clashed
    with the containing package's component/resource classes.

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[programgen/nodejs] Emit `await` for `call(...)` invocations of
methods whose return type is marked plain, and
force the generated program into an async `export = async () => ...`
wrapper whenever such a
call is present. The Node SDK returns `Promise<T>` for plain methods;
previously program-gen
    used the result directly, which did not match its runtime type.

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[codegen/python] Avoid a self-import (`import pulumi_<pkg>` inside
`pulumi_<pkg>/<module>.py`) when referencing
the package's own provider resource. Python referenced the Provider as
`pulumi_<pkg>.Provider`
    even inside that package, which caused a circular import at runtime.

[#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696)

- \[sdk/python] Reduce internal `Output[T]` data to a single
`asyncio.Future`
[#&#8203;22661](https://redirect.github.com/pulumi/pulumi/pull/22661)

- \[sdkgen/{nodejs,python}] Generate optional input types that accept
undefined/None values
[#&#8203;22552](https://redirect.github.com/pulumi/pulumi/pull/22552)

##### Miscellaneous

- \[auto/go] Drop the "With" prefix from generated option helpers so
they match the naming of the existing optXxx packages
[#&#8203;22682](https://redirect.github.com/pulumi/pulumi/pull/22682)

###
[`v3.232.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32320-2026-04-22)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.231.0...v3.232.0)

##### Features

- \[cli] Add an experimental `pulumi neo` command that creates a Pulumi
Neo agent task in CLI
tool-execution mode and runs the local tool loop. Filesystem and shell
tool calls
issued by the agent run on the user's machine in their working
directory; the
interactive chat continues to happen in the Pulumi Console at the URL
the command
    prints. Hidden behind PULUMI_EXPERIMENTAL.

[#&#8203;22473](https://redirect.github.com/pulumi/pulumi/pull/22473)

- \[cli] Add support for handling user approval requests in the `pulumi
neo` terminal UI.
When the agent requests confirmation for a sensitive action, the TUI
prompts the
user and forwards their response back to the Pulumi Console. Hidden
behind
    PULUMI_EXPERIMENTAL.

[#&#8203;22589](https://redirect.github.com/pulumi/pulumi/pull/22589)

- \[cli] Add an interactive terminal UI for `pulumi neo` built with
bubbletea, rendering
agent messages, tool calls, and streaming output in the terminal
alongside the
    Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.

[#&#8203;22570](https://redirect.github.com/pulumi/pulumi/pull/22570)

-   \[cli] Switch logging library from glog to slog.

BREAKING: any `if logging.V(x) {` need to be changed to `if
logging.V(x).Enabled()`

[#&#8203;22548](https://redirect.github.com/pulumi/pulumi/pull/22548)

- \[cli] Add a plan-mode toggle to the `pulumi neo` TUI, bound to
Shift+Tab. When
plan mode is on, Neo explores and asks questions without writing files,
running `pulumi up`, or opening PRs, and surfaces an approved plan via a
dedicated approval gate. The toggle must be set before the first message
(plan mode is task-level on the wire); approving the proposed plan exits
    plan mode automatically.

[#&#8203;22634](https://redirect.github.com/pulumi/pulumi/pull/22634)

- \[cli] The `pulumi neo` TUI now drives its "thinking" spinner off a
single declarative
rule (the spinner stays on until a final event — final assistant
message, approval
request, cancellation, or error — lands), so the indicator no longer
flickers off
when the agent hands off tool calls to the CLI or when streaming text
arrives
between tools. Press `Esc` during a turn to ask the agent to cancel; the
label
    switches to "Cancelling..." until the backend acknowledges.

[#&#8203;22637](https://redirect.github.com/pulumi/pulumi/pull/22637)

- \[cli] `pulumi neo` now executes the `edit` filesystem tool locally,
matching the schema
and response wording of the upstream mcp-claude-code tool so the agent
sees
identical output whether the call ran on Cloud or CLI. `edit` performs
exact-string
replacement with occurrence-count validation, and creates a new file
when the
    target is missing and `old_string` is empty.

[#&#8203;22654](https://redirect.github.com/pulumi/pulumi/pull/22654)

##### Bug Fixes

- \[cli] Render user messages in the `pulumi neo` TUI as soon as they're
submitted
instead of waiting for the Pulumi Cloud event stream to echo them back.
    The initial prompt passed on the command line also appears in the
transcript at startup. Self-echoes from the server are de-duplicated;
user input that originated from another client (e.g. the web UI on the
    same task) still renders.

[#&#8203;22629](https://redirect.github.com/pulumi/pulumi/pull/22629)

- \[cli] Wrap warnings, errors, and user-message bubbles to the terminal
width in the
`pulumi neo` TUI. Previously these blocks rendered as single long lines
that
were clipped at the right edge of the viewport. On resize, all
width-dependent
transcript blocks (user messages, warnings, errors, assistant messages)
now
    reflow to the new terminal width.

[#&#8203;22635](https://redirect.github.com/pulumi/pulumi/pull/22635)

- \[cli/policy] Fix `policy ls` to use the default org name, not
username
[#&#8203;22656](https://redirect.github.com/pulumi/pulumi/pull/22656)

- \[engine] Fix provider registry race condition in parallel
delete-before-replace
[#&#8203;21487](https://redirect.github.com/pulumi/pulumi/pull/21487)

- \[engine] Signal providers to cancel before closing them during
replacement

-   \[sdkgen] Error on 'id' in state inputs
[#&#8203;22636](https://redirect.github.com/pulumi/pulumi/pull/22636)

- \[programgen/python] Add necessary casts between types in generated
programs
[#&#8203;22567](https://redirect.github.com/pulumi/pulumi/pull/22567)

- \[sdkgen/go] Fix caching of package references to be per-deployment
not per-process
[#&#8203;22170](https://redirect.github.com/pulumi/pulumi/pull/22170)

##### Miscellaneous

-   \[java] Upgrade java to v1.25.0
[#&#8203;22673](https://redirect.github.com/pulumi/pulumi/pull/22673)

- \[auto/go] Generate command methods for the Go Automation API codegen
[#&#8203;22612](https://redirect.github.com/pulumi/pulumi/pull/22612)

- \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` /
`Resource` in the Node and Python SDKs
[#&#8203;22603](https://redirect.github.com/pulumi/pulumi/pull/22603)

-   \[sdk/dotnet] Upgrade dotnet to v3.103.1
[#&#8203;22676](https://redirect.github.com/pulumi/pulumi/pull/22676)

-   \[yaml] Upgrade yaml to v1.32.0
[#&#8203;22674](https://redirect.github.com/pulumi/pulumi/pull/22674)

</details>

<details>
<summary>pulumi/providertest (github.com/pulumi/providertest)</summary>

###
[`v0.7.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.7.0)

[Compare
Source](https://redirect.github.com/pulumi/providertest/compare/v0.6.0...v0.7.0)

##### What's Changed

- Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group
across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
in[https://github.com/pulumi/providertest/pull/159](https://redirect.github.com/pulumi/providertest/pull/159)9
- Fix python_gcp test by adding setuptools dependency by
[@&#8203;pose](https://redirect.github.com/pose) in
[https://github.com/pulumi/providertest/pull/167](https://redirect.github.com/pulumi/providertest/pull/167)
- Rename project to python_gcp and update description by
[@&#8203;pose](https://redirect.github.com/pose) in
[https://github.com/pulumi/providertest/pull/166](https://redirect.github.com/pulumi/providertest/pull/166)
- fix(pulumitest): start fresh providers per engine operation by
[@&#8203;rshade](https://redirect.github.com/rshade) in
[https://github.com/pulumi/providertest/pull/170](https://redirect.github.com/pulumi/providertest/pull/170)
- feat(pulumitest): log pulumi version and plugins on stack creation by
[@&#8203;rshade](https://redirect.github.com/rshade) in
[https://github.com/pulumi/providertest/pull/171](https://redirect.github.com/pulumi/providertest/pull/171)

**Full Changelog**:
https://github.com/pulumi/providertest/compare/v0.6.0...v0.7.0

</details>

<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>

###
[`v3.105.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31050---2026-05-04)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.104.0...v3.105.0)

###
[`v3.104.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31040---2026-04-29)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.1...v3.104.0)

##### Improvements

- \[runtime] Support the `getOutput` pcl intrinsic in codegen
[#&#8203;977](https://redirect.github.com/pulumi/pulumi-dotnet/pull/977)

###
[`v3.103.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31031---2026-04-21)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.0...v3.103.1)

##### Bug Fixes

- \[runtime] Ensure that 'main' is always respected for selecting
projects to run
[#&#8203;55](https://redirect.github.com/pulumi/pulumi-dotnet/pull/55)

- \[runtime] Generate compilable C# for resources whose range is an
Output-typed expression such as `length(someInvoke.result)`. The loop is
now wrapped in `.Apply(rangeBody => { ... })` so the loop bound sees a
plain `int`, and `length` on an `Output<ImmutableArray<T>>` is emitted
as the extension method `.Length()` (with parentheses) rather than as a
property.
[#&#8203;969](https://redirect.github.com/pulumi/pulumi-dotnet/pull/969)

- \[runtime] Fix codegen for nested `InputMap` literals so the produced
C# compiles
([#&#8203;833](https://redirect.github.com/pulumi/pulumi-dotnet/issues/833))
[#&#8203;970](https://redirect.github.com/pulumi/pulumi-dotnet/pull/970)

</details>

<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>

###
[`v1.3.2`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.2)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2)

#### What's Changed

- Update module github.com/pulumi/pulumi/pkg/v3 to v3.230.0 by
[@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/509](https://redirect.github.com/pulumi/pulumi-go-provider/pull/509)9
- Correctly encode & decode `types.AssetOrArchive` by
[@&#8203;iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/512](https://redirect.github.com/pulumi/pulumi-go-provider/pull/512)
- Resolve framework version via runtime/debug.ReadBuildInfo by
[@&#8203;iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/514](https://redirect.github.com/pulumi/pulumi-go-provider/pull/514)

**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: Ian Wahbe <me@iwahbe.com>
2026-05-06 16:57:43 +00:00
pulumi-provider-automation[bot]
27b5636c61 Update GitHub Actions workflows. (#840)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[27c21ceadaafd5a7de6e5158a02338d7c19730a1](27c21ceada).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-06 06:33:07 +00:00
pulumi-provider-automation[bot]
ed5396c425 Update GitHub Actions workflows. (#839)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4a9e45cebb804597b1a77dd1d1ba390731ba0d82](4a9e45cebb).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-05 06:23:28 +00:00
pulumi-provider-automation[bot]
4ba5f703d4 Update GitHub Actions workflows. (#838)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[f19d25e099c54e3ca45528e9e2348cf6873c5534](f19d25e099).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-04 06:32:46 +00:00
pulumi-provider-automation[bot]
72c3e93b42 Update GitHub Actions workflows. (#837)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[46ca3056938b5f6ddaec3f8eb550dcc34a2e3782](46ca305693).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-05-02 06:21:15 +00:00
pulumi-provider-automation[bot]
f864eda3e0 Update GitHub Actions workflows. (#834)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[3b016890d44c5e5e2e184c4b10b07484d9708cc3](3b016890d4).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-30 06:32:36 +00:00
pulumi-provider-automation[bot]
4e01c39bf9 Update GitHub Actions workflows. (#833)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[f99b830821cb45c5b332123be59c6a755cd4fadc](f99b830821).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-29 06:35:12 +00:00
pulumi-provider-automation[bot]
bab57d912d Update GitHub Actions workflows. (#832)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[dbc8a4c59b47e1406420ea87372068fb3780dce8](dbc8a4c59b).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-28 06:32:00 +00:00
pulumi-provider-automation[bot]
96b9de72a5 Update GitHub Actions workflows. (#831)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[fbb025ea2dd9c071a4b0a626d092c4104fc57644](fbb025ea2d).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-27 06:29:59 +00:00
pulumi-provider-automation[bot]
bae0f1379a Update GitHub Actions workflows. (#829)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4a821ea4d38895a0aa6b855593ea108774165ff6](4a821ea4d3).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-25 06:06:14 +00:00
pulumi-provider-automation[bot]
30e1a98140 Update GitHub Actions workflows. (#828)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[88db566266daeb5f581215c84cd3e8c5f389a18d](88db566266).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-24 06:17:53 +00:00
pulumi-provider-automation[bot]
0b291cf120 Update GitHub Actions workflows. (#826)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[a4ba5d1c3db54f4aa8e7674e03c3032eabd24aaa](a4ba5d1c3d).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-23 06:14:45 +00:00
pulumi-provider-automation[bot]
2e27061ccc Update GitHub Actions workflows. (#825)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[e46e1ac50228764e2a7fa7a76403fca94224df68](e46e1ac502).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-22 06:12:50 +00:00
pulumi-provider-automation[bot]
740410488f Update GitHub Actions workflows. (#824)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4065ed8e56aa6623046a204c35d57c0376c7cf6c](4065ed8e56).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-21 06:12:31 +00:00
pulumi-provider-automation[bot]
f24d1e662a Update GitHub Actions workflows. (#823)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[7f0c56e9f79bc22f3b4cc6379312d705a56411c6](7f0c56e9f7).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-20 06:21:00 +00:00
pulumi-provider-automation[bot]
703dd21dc8 Update GitHub Actions workflows. (#822)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[144a8c45ec5f8a164b55365078d914dd6955b209](144a8c45ec).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-19 06:12:17 +00:00
pulumi-provider-automation[bot]
8328de32ef Update GitHub Actions workflows. (#821)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[2bc9cb47c63304319f6a34a84c861bedc53274ae](2bc9cb47c6).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-18 06:01:53 +00:00
pulumi-provider-automation[bot]
c9ec41986b Update GitHub Actions workflows. (#820)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[5aad94d008deea2e7db42fa2579fe93fb88256b8](5aad94d008).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-17 06:14:06 +00:00
pulumi-renovate[bot]
ef554c455f Update dependency @pulumi/pulumi to v3.231.0 (#818)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.230.0` ->
`3.231.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.230.0/3.231.0)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.231.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.231.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.230.0...v3.231.0)

##### 3.231.0 (2026-04-16)

##### Features

- \[cli] Auto-detect Mercurial repository metadata for `pulumi up` /
`pulumi preview` updates, mirroring existing Git support
[#&#8203;22618](https://redirect.github.com/pulumi/pulumi/pull/22618)

- \[engine] Send Cancel RPC to plugins on host close for graceful
shutdown
[#&#8203;22569](https://redirect.github.com/pulumi/pulumi/pull/22569)

-   \[engine] Pass resource options to hooks through the engine
[#&#8203;22582](https://redirect.github.com/pulumi/pulumi/pull/22582)

-   \[engine] Add GetDeploymentInfo to the resource monitor service

-   \[auto/go] Add `New` command to Automation API
[#&#8203;22439](https://redirect.github.com/pulumi/pulumi/pull/22439)

-   \[auto/{go,nodejs,python}] Add --diff to automation api for destroy
[#&#8203;22563](https://redirect.github.com/pulumi/pulumi/pull/22563)

-   \[auto/python] Add `new` command to Automation API
[#&#8203;22439](https://redirect.github.com/pulumi/pulumi/pull/22439)

-   \[pcl] Support for resource hooks in PCL
[#&#8203;22365](https://redirect.github.com/pulumi/pulumi/pull/22365)

- \[sdk-nodejs] Warn when a non-ComponentResource class is passed in the
explicit `components` list to `componentProviderHost`
[#&#8203;22619](https://redirect.github.com/pulumi/pulumi/pull/22619)

- \[sdk-python] Warn when a non-ComponentResource class is passed in the
explicit `components` list to `component_provider_host`
[#&#8203;22619](https://redirect.github.com/pulumi/pulumi/pull/22619)

- \[cli/import] Add support for providers to be defined in the same
import file as their users
[#&#8203;21671](https://redirect.github.com/pulumi/pulumi/pull/21671)

-   \[cli/policy] ESC environment support for local policy packs
[#&#8203;22495](https://redirect.github.com/pulumi/pulumi/pull/22495)

-   \[sdk/nodejs] Support package.yaml when using pnpm
[#&#8203;22491](https://redirect.github.com/pulumi/pulumi/pull/22491)

- \[sdk/python] Add function decorator variants for resource and error
hooks
[#&#8203;22519](https://redirect.github.com/pulumi/pulumi/pull/22519)

##### Bug Fixes

- \[auto/{nodejs,python}] Support --run-program for inline programs with
preview_refresh/destroy

- \[backend/diy] Remove state lock for destroy and import with preview
only for diy backend
[#&#8203;22561](https://redirect.github.com/pulumi/pulumi/pull/22561)

- \[engine] Fix snapshot integrity error with component/provider
resources in refresh --run-program
[#&#8203;21817](https://redirect.github.com/pulumi/pulumi/pull/21817)

-   \[pcl] Type list and tuple indices as integers not numbers
[#&#8203;22592](https://redirect.github.com/pulumi/pulumi/pull/22592)

- \[pcl] Builtin functions element and range take int parameters not
numbers
[#&#8203;22597](https://redirect.github.com/pulumi/pulumi/pull/22597)

- \[programgen/{go,nodejs,python}] Fix some cases of name conflicts in
program gen not being handled correctly
[#&#8203;22556](https://redirect.github.com/pulumi/pulumi/pull/22556)

- \[programgen/nodejs] Add necessary casts between types in generated
programs
[#&#8203;22557](https://redirect.github.com/pulumi/pulumi/pull/22557)

-   \[programgen/{nodejs,python}] Fix imports of camelCase modules
[#&#8203;22536](https://redirect.github.com/pulumi/pulumi/pull/22536)

- \[sdk/python] Support Input\[Optional\[T]] in Python runtime type
unwrapping
[#&#8203;22553](https://redirect.github.com/pulumi/pulumi/pull/22553)

- \[sdkgen] Warn about modules nested under the index module which are
not supported
[#&#8203;22531](https://redirect.github.com/pulumi/pulumi/pull/22531)

##### Miscellaneous

-   \[java] Upgrade java to v1.24.0
[#&#8203;22615](https://redirect.github.com/pulumi/pulumi/pull/22615)

-   \[yaml] Upgrade yaml to v1.31.1
[#&#8203;22610](https://redirect.github.com/pulumi/pulumi/pull/22610)

-   \[sdk/dotnet] Upgrade dotnet to v3.103.0
[#&#8203;22614](https://redirect.github.com/pulumi/pulumi/pull/22614)

-   \[sdk/nodejs] Replace `got` by `fetch`
[#&#8203;22533](https://redirect.github.com/pulumi/pulumi/pull/22533)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-04-16 20:16:47 +00:00
pulumi-provider-automation[bot]
0b52de6543 Update GitHub Actions workflows. (#816)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[b05dbe61dbea8fb6ea0c4cde662bde1101961819](b05dbe61db).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-16 06:16:23 +00:00
pulumi-renovate[bot]
a3072f6aa3 Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.103.0 (#815)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | minor | `v3.102.1` -> `v3.103.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>

###
[`v3.103.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31030---2026-04-15)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.1...v3.103.0)

##### Improvements

- \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` /
`Resource`
[#&#8203;963](https://redirect.github.com/pulumi/pulumi-dotnet/pull/963)

##### Bug Fixes

- \[sdk] Fix `ResourceTransforms` being silently dropped when
`CustomResourceOptions.Merge` is called (affects all generated SDK
resources using the `MakeResourceOptions` pattern)
[#&#8203;958](https://redirect.github.com/pulumi/pulumi-dotnet/pull/958)

- \[sdk] Add missing `[Input]` attribute to `StashArgs.Input`, fixing
serialization of the Stash resource
[#&#8203;960](https://redirect.github.com/pulumi/pulumi-dotnet/pull/960)

- \[sdk/auto] Fix running inline programs with refresh/destroy and
--run-program
[#&#8203;725](https://redirect.github.com/pulumi/pulumi-dotnet/pull/725)

##### Improvements

- \[runtime] Add codegen support for AdditionalSecretOutputs, Version,
and PluginDownloadURL resource options
[#&#8203;953](https://redirect.github.com/pulumi/pulumi-dotnet/pull/953)

##### Bug Fixes

- \[runtime] Fix property paths in resource options (IgnoreChanges,
ReplaceOnChanges, HideDiffs) being incorrectly prefixed with @&#8203;
for C# reserved words
[#&#8203;934](https://redirect.github.com/pulumi/pulumi-dotnet/pull/934)

- \[runtime] Fix NuGet package name and version extraction for packages
with prerelease versions (e.g. `3.0.0-alpha.1.internal`)
[#&#8203;947](https://redirect.github.com/pulumi/pulumi-dotnet/pull/947)

- \[runtime] Support call methods in program generation
[#&#8203;946](https://redirect.github.com/pulumi/pulumi-dotnet/pull/946)

- \[runtime] Add missing `System` namespace import for `sha1` builtin,
fixing `BitConverter` not found error
[#&#8203;961](https://redirect.github.com/pulumi/pulumi-dotnet/pull/961)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-04-15 17:55:53 +00:00
pulumi-provider-automation[bot]
afe301cb52 Update GitHub Actions workflows. (#814)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[bf992a9000f6297ee7e288347f354ed2ca8d6bbf](bf992a9000).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-15 06:13:32 +00:00
Keith Mosher
b0c5918c7c Migrate Windows code signing to Azure Trusted Signing (#811)
## Summary

Migrates Windows binary signing from Azure Key Vault (`jsign --storetype
AZUREKEYVAULT`) to [Azure Trusted
Signing](https://learn.microsoft.com/en-us/azure/trusted-signing/). The
previous AKV code-signing cert expired, breaking the release pipeline.
Trusted Signing issues short-lived Microsoft-managed certs so there's
nothing to rotate.

- `Makefile` / `scripts/crossbuild.mk`: bump `jsign` 6.0 → 7.4, switch
`--storetype` to `TRUSTEDSIGNING`, use the
`https://codesigning.azure.net` token audience, derive the keystore host
from `AZURE_SIGNING_ACCOUNT_ENDPOINT`, pass account/profile via
`--alias`, update the `SKIP_SIGNING` guard and error message.
- `.github/workflows/{build,release,prerelease,build_provider}.yml`:
replace the `AZURE_SIGNING_KEY_VAULT_URI` env passthrough with the three
new `AZURE_SIGNING_ACCOUNT_*` outputs and update the `SKIP_SIGNING`
expression.

Companion to pulumi/ci-mgmt#2126, pulumi/pulumi-command#1200, and
pulumi/pulumi-provider-boilerplate#1236. The ESC environment already
exposes the new variables and the signing SP has the `Artifact Signing
Certificate Profile Signer` role on the
`pulumi-code-signing/pulumi-code-signing` profile. Verified end-to-end
against pulumi-command, pulumi-random, and pulumi-provider-boilerplate.

## Test plan

- [ ] CI release build produces a Windows binary with a valid Trusted
Signing certificate chain
2026-04-09 16:52:15 -07:00
pulumi-provider-automation[bot]
00ec8e3ebe Update GitHub Actions workflows. (#812)
This PR was triggered by @kmosher generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[9753531fe8d3f70139c072186a6ddcaa32d27b63](9753531fe8).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-04-09 23:49:54 +00:00
pulumi-renovate[bot]
2079e52a5f Update first-party Pulumi dependencies to v3.230.0 (#809)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.229.0` ->
`3.230.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.229.0/3.230.0)
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.229.0` -> `v3.230.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.230.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32300-2026-04-08)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0)

##### Features

-   \[cli] Detect AI agents and send in update metadata
[#&#8203;22497](https://redirect.github.com/pulumi/pulumi/pull/22497)

- \[auto/nodejs] Add "org" commands (get-default, set-default, search,
search ai) to the auto-generated interface
[#&#8203;22395](https://redirect.github.com/pulumi/pulumi/pull/22395)

-   \[auto/nodejs] Add "new" command to the auto-generated interface
[#&#8203;22421](https://redirect.github.com/pulumi/pulumi/pull/22421)

- \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js
providers
[#&#8203;22516](https://redirect.github.com/pulumi/pulumi/pull/22516)

-   \[cli/policy] Add ESC environment resolution for policy packs
[#&#8203;22425](https://redirect.github.com/pulumi/pulumi/pull/22425)

##### Bug Fixes

- \[auto/go] Insert --non-interactive flag before "--" positional
separator to avoid misinterpretation as a positional argument
[#&#8203;22462](https://redirect.github.com/pulumi/pulumi/pull/22462)

- \[ci] Add code coverage collection for Node.js automation tools tests
[#&#8203;22412](https://redirect.github.com/pulumi/pulumi/pull/22412)

-   \[pcl] Allow key indexing into a map of resources created by range
[#&#8203;22498](https://redirect.github.com/pulumi/pulumi/pull/22498)

- \[programgen/go] Fix an issue with formatted index modules not
importing correctly

- \[cli/state] Check for Pulumi.yaml projects and `backend` option in
`state upgrade`
[#&#8203;22483](https://redirect.github.com/pulumi/pulumi/pull/22483)

- \[sdk/go] Fix Go program generation for ternary expressions inside
apply callbacks, add Go predeclared identifiers to reserved words,
handle optional list types in union type codegen, and fix
unmarshalOutput for known outputs with null elements.
[#&#8203;22460](https://redirect.github.com/pulumi/pulumi/pull/22460)

- \[sdk/nodejs] Fix inherited input properties missing from component
schema when args interface extends another interface
[#&#8203;22446](https://redirect.github.com/pulumi/pulumi/pull/22446)

- \[sdk/python] Fix inherited input properties missing from component
schema when args class inherits from a base class
[#&#8203;22484](https://redirect.github.com/pulumi/pulumi/pull/22484)

##### Miscellaneous

-   \[java] Upgrade java to v1.23.0

-   \[sdk/dotnet] Upgrade dotnet to v3.102.1

-   \[yaml] Upgrade to v1.31.0
[#&#8203;22501](https://redirect.github.com/pulumi/pulumi/pull/22501)

- \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove
`mimeType` & `readDir` from PCL
[#&#8203;22449](https://redirect.github.com/pulumi/pulumi/pull/22449)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.230.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.230.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0)

#### 3.230.0 (2026-04-08)

##### Features

-   \[cli] Detect AI agents and send in update metadata
[#&#8203;22497](https://redirect.github.com/pulumi/pulumi/pull/22497)

- \[auto/nodejs] Add "org" commands (get-default, set-default, search,
search ai) to the auto-generated interface
[#&#8203;22395](https://redirect.github.com/pulumi/pulumi/pull/22395)

-   \[auto/nodejs] Add "new" command to the auto-generated interface
[#&#8203;22421](https://redirect.github.com/pulumi/pulumi/pull/22421)

- \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js
providers
[#&#8203;22516](https://redirect.github.com/pulumi/pulumi/pull/22516)

-   \[cli/policy] Add ESC environment resolution for policy packs
[#&#8203;22425](https://redirect.github.com/pulumi/pulumi/pull/22425)

##### Bug Fixes

- \[auto/go] Insert --non-interactive flag before "--" positional
separator to avoid misinterpretation as a positional argument
[#&#8203;22462](https://redirect.github.com/pulumi/pulumi/pull/22462)

- \[ci] Add code coverage collection for Node.js automation tools tests
[#&#8203;22412](https://redirect.github.com/pulumi/pulumi/pull/22412)

-   \[pcl] Allow key indexing into a map of resources created by range
[#&#8203;22498](https://redirect.github.com/pulumi/pulumi/pull/22498)

- \[programgen/go] Fix an issue with formatted index modules not
importing correctly

- \[cli/state] Check for Pulumi.yaml projects and `backend` option in
`state upgrade`
[#&#8203;22483](https://redirect.github.com/pulumi/pulumi/pull/22483)

- \[sdk/go] Fix Go program generation for ternary expressions inside
apply callbacks, add Go predeclared identifiers to reserved words,
handle optional list types in union type codegen, and fix
unmarshalOutput for known outputs with null elements.
[#&#8203;22460](https://redirect.github.com/pulumi/pulumi/pull/22460)

- \[sdk/nodejs] Fix inherited input properties missing from component
schema when args interface extends another interface
[#&#8203;22446](https://redirect.github.com/pulumi/pulumi/pull/22446)

- \[sdk/python] Fix inherited input properties missing from component
schema when args class inherits from a base class
[#&#8203;22484](https://redirect.github.com/pulumi/pulumi/pull/22484)

##### Miscellaneous

-   \[java] Upgrade java to v1.23.0

-   \[sdk/dotnet] Upgrade dotnet to v3.102.1

-   \[yaml] Upgrade to v1.31.0
[#&#8203;22501](https://redirect.github.com/pulumi/pulumi/pull/22501)

- \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove
`mimeType` & `readDir` from PCL
[#&#8203;22449](https://redirect.github.com/pulumi/pulumi/pull/22449)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-04-09 01:05:50 +00:00
pulumi-renovate[bot]
fd5b2ee95b Update first-party Pulumi dependencies (#807)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | patch | `v3.102.0` -> `v3.102.1` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.228.0` -> `v3.229.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>

###
[`v3.102.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31021---2026-04-08)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.0...v3.102.1)

##### Bug Fixes

- \[sdk] Fix inherited \[Input] properties missing from component schema
when using base class inheritance on args types
[#&#8203;930](https://redirect.github.com/pulumi/pulumi-dotnet/pull/930)

- \[sdk] Fix GetResourceType() returning empty string for
DependencyProviderResource
[#&#8203;922](https://redirect.github.com/pulumi/pulumi-dotnet/pull/922)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0)

#### 3.229.0 (2026-04-02)

##### Features

- \[auto/python] Add org get-default and set-default commands to
Automation API

- \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
[#&#8203;22373](https://redirect.github.com/pulumi/pulumi/pull/22373)

- \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
[#&#8203;22369](https://redirect.github.com/pulumi/pulumi/pull/22369)

- \[cli/display] Add `--urns` flag to display full resource URNs instead
of short names in preview, up, destroy, refresh, import, and watch
commands
[#&#8203;22007](https://redirect.github.com/pulumi/pulumi/pull/22007)

-   \[pcl] Type integer literals as integers rather than numbers in PCL
[#&#8203;22268](https://redirect.github.com/pulumi/pulumi/pull/22268)

-   \[pcl] Support parameterized providers in PCL
[#&#8203;22251](https://redirect.github.com/pulumi/pulumi/pull/22251)

- \[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
[#&#8203;22389](https://redirect.github.com/pulumi/pulumi/pull/22389)

-   \[yaml] Update YAML runtime to 1.30.2
[#&#8203;22426](https://redirect.github.com/pulumi/pulumi/pull/22426)

- \[sdk/go] Add org get-default and set-default commands to Automation
API

- \[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
[#&#8203;22370](https://redirect.github.com/pulumi/pulumi/pull/22370)

- \[cli/policy] Add a new `policy analyze` command to run a policy pack
against existing state
[#&#8203;22250](https://redirect.github.com/pulumi/pulumi/pull/22250)

##### Bug Fixes

- \[backend/diy] Remove state lock for refresh --preview-only for diy
backend
[#&#8203;22385](https://redirect.github.com/pulumi/pulumi/pull/22385)

-   \[cli] Fix OTEL flushing on provider shutdown
[#&#8203;22358](https://redirect.github.com/pulumi/pulumi/pull/22358)

- \[cli/display] Fix deadlock in message renderer when cancelling an
operation
[#&#8203;22433](https://redirect.github.com/pulumi/pulumi/pull/22433)

- \[engine] Fix `--include` and `--exclude` not working for
program-based refresh (RefreshV2)
[#&#8203;22404](https://redirect.github.com/pulumi/pulumi/pull/22404)

-   \[engine] Parallelize plugin cancellation in SignalCancellation
[#&#8203;22431](https://redirect.github.com/pulumi/pulumi/pull/22431)

-   \[pcl] Fix looking up variables in parent scopes
[#&#8203;22379](https://redirect.github.com/pulumi/pulumi/pull/22379)

-   \[pcl] Apply default values from resource schemas
[#&#8203;22393](https://redirect.github.com/pulumi/pulumi/pull/22393)

-   \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
[#&#8203;22397](https://redirect.github.com/pulumi/pulumi/pull/22397)

-   \[sdk/nodejs] Allow TypeScript 6 as a peer dependency
[#&#8203;22340](https://redirect.github.com/pulumi/pulumi/pull/22340)

- \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped
modules
[#&#8203;22388](https://redirect.github.com/pulumi/pulumi/pull/22388)

- \[sdk/python] Cache type metadata and class references in Python SDK
to reduce CPU overhead during serialization
[#&#8203;22422](https://redirect.github.com/pulumi/pulumi/pull/22422)

- \[sdk/python] Replace busy-wait polling in wait_for_rpcs with
asyncio.wait
[#&#8203;22411](https://redirect.github.com/pulumi/pulumi/pull/22411)

##### Miscellaneous

-   \[cli] Add update metadata to the otel root span
[#&#8203;22357](https://redirect.github.com/pulumi/pulumi/pull/22357)

-   \[java] Update to v1.22.0
[#&#8203;22437](https://redirect.github.com/pulumi/pulumi/pull/22437)

-   \[sdk/nodejs] Use nodenext for moduleResolution and module
[#&#8203;22363](https://redirect.github.com/pulumi/pulumi/pull/22363)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-04-08 13:51:13 +00:00
pulumi-renovate[bot]
8ef055d5e7 Update first-party Pulumi dependencies (#803)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.227.0` ->
`3.229.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.227.0/3.229.0)
|
|
[github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java)
| require | minor | `v1.21.3` -> `v1.22.0` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.227.0` -> `v3.228.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0)

#### 3.229.0 (2026-04-02)

##### Features

- \[auto/python] Add org get-default and set-default commands to
Automation API

- \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
[#&#8203;22373](https://redirect.github.com/pulumi/pulumi/pull/22373)

- \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
[#&#8203;22369](https://redirect.github.com/pulumi/pulumi/pull/22369)

- \[cli/display] Add `--urns` flag to display full resource URNs instead
of short names in preview, up, destroy, refresh, import, and watch
commands
[#&#8203;22007](https://redirect.github.com/pulumi/pulumi/pull/22007)

-   \[pcl] Type integer literals as integers rather than numbers in PCL
[#&#8203;22268](https://redirect.github.com/pulumi/pulumi/pull/22268)

-   \[pcl] Support parameterized providers in PCL
[#&#8203;22251](https://redirect.github.com/pulumi/pulumi/pull/22251)

- \[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
[#&#8203;22389](https://redirect.github.com/pulumi/pulumi/pull/22389)

-   \[yaml] Update YAML runtime to 1.30.2
[#&#8203;22426](https://redirect.github.com/pulumi/pulumi/pull/22426)

- \[sdk/go] Add org get-default and set-default commands to Automation
API

- \[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
[#&#8203;22370](https://redirect.github.com/pulumi/pulumi/pull/22370)

- \[cli/policy] Add a new `policy analyze` command to run a policy pack
against existing state
[#&#8203;22250](https://redirect.github.com/pulumi/pulumi/pull/22250)

##### Bug Fixes

- \[backend/diy] Remove state lock for refresh --preview-only for diy
backend
[#&#8203;22385](https://redirect.github.com/pulumi/pulumi/pull/22385)

-   \[cli] Fix OTEL flushing on provider shutdown
[#&#8203;22358](https://redirect.github.com/pulumi/pulumi/pull/22358)

- \[cli/display] Fix deadlock in message renderer when cancelling an
operation
[#&#8203;22433](https://redirect.github.com/pulumi/pulumi/pull/22433)

- \[engine] Fix `--include` and `--exclude` not working for
program-based refresh (RefreshV2)
[#&#8203;22404](https://redirect.github.com/pulumi/pulumi/pull/22404)

-   \[engine] Parallelize plugin cancellation in SignalCancellation
[#&#8203;22431](https://redirect.github.com/pulumi/pulumi/pull/22431)

-   \[pcl] Fix looking up variables in parent scopes
[#&#8203;22379](https://redirect.github.com/pulumi/pulumi/pull/22379)

-   \[pcl] Apply default values from resource schemas
[#&#8203;22393](https://redirect.github.com/pulumi/pulumi/pull/22393)

-   \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
[#&#8203;22397](https://redirect.github.com/pulumi/pulumi/pull/22397)

-   \[sdk/nodejs] Allow TypeScript 6 as a peer dependency
[#&#8203;22340](https://redirect.github.com/pulumi/pulumi/pull/22340)

- \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped
modules
[#&#8203;22388](https://redirect.github.com/pulumi/pulumi/pull/22388)

- \[sdk/python] Cache type metadata and class references in Python SDK
to reduce CPU overhead during serialization
[#&#8203;22422](https://redirect.github.com/pulumi/pulumi/pull/22422)

- \[sdk/python] Replace busy-wait polling in wait_for_rpcs with
asyncio.wait
[#&#8203;22411](https://redirect.github.com/pulumi/pulumi/pull/22411)

##### Miscellaneous

-   \[cli] Add update metadata to the otel root span
[#&#8203;22357](https://redirect.github.com/pulumi/pulumi/pull/22357)

-   \[java] Update to v1.22.0
[#&#8203;22437](https://redirect.github.com/pulumi/pulumi/pull/22437)

-   \[sdk/nodejs] Use nodenext for moduleResolution and module
[#&#8203;22363](https://redirect.github.com/pulumi/pulumi/pull/22363)

###
[`v3.228.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32280-2026-03-25)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.227.0...v3.228.0)

##### Features

- \[cli] Don't apply the secrets filter to `true` and `false`
(case-insensitive)
[#&#8203;22269](https://redirect.github.com/pulumi/pulumi/pull/22269)

- \[cli] Add grpcs:// support and header authentication to OTLP exporter
[#&#8203;22320](https://redirect.github.com/pulumi/pulumi/pull/22320)

-   \[cli] Read OTEL_RESOURCE_ATTRIBUTES
[#&#8203;22329](https://redirect.github.com/pulumi/pulumi/pull/22329)

- \[auto/nodejs] Add low-level "cancel" command to the auto-generated
interface
[#&#8203;22156](https://redirect.github.com/pulumi/pulumi/pull/22156)

- \[cli/state] Allow `pulumi state delete` to accept multiple resource
URNs and delete them in a dependency-safe order

##### Bug Fixes

-   \[cli] Allow relative file paths for --otel-traces
[#&#8203;22300](https://redirect.github.com/pulumi/pulumi/pull/22300)

-   \[cli] Bridge opentracing spans from providers into OTel
[#&#8203;22313](https://redirect.github.com/pulumi/pulumi/pull/22313)

-   \[cli] Correctly end spans for GRPC streams
[#&#8203;22304](https://redirect.github.com/pulumi/pulumi/pull/22304)

-   \[cli/about] Do not include the access token in plain text
[#&#8203;22347](https://redirect.github.com/pulumi/pulumi/pull/22347)

- \[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
[#&#8203;22317](https://redirect.github.com/pulumi/pulumi/pull/22317)

- \[cli/import] Fix import codegen when generating references to
non-standard names
[#&#8203;22319](https://redirect.github.com/pulumi/pulumi/pull/22319)

-   \[engine] Update golang version
[#&#8203;22277](https://redirect.github.com/pulumi/pulumi/pull/22277)

-   \[pcl] Typecheck component inputs in PCL programs
[#&#8203;22292](https://redirect.github.com/pulumi/pulumi/pull/22292)

- \[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
[#&#8203;22306](https://redirect.github.com/pulumi/pulumi/pull/22306)

##### Miscellaneous

-   \[cli] Add CLI metadata to the root span
[#&#8203;22305](https://redirect.github.com/pulumi/pulumi/pull/22305)

-   \[cli] Add more OTel interceptors for GRPC clients
[#&#8203;22309](https://redirect.github.com/pulumi/pulumi/pull/22309)

- \[cli] Add spans for plugin installation and add more attributes for
dependency installation
[#&#8203;22303](https://redirect.github.com/pulumi/pulumi/pull/22303)

-   \[cli] Allow setting a GRPC endpoint for performance tests
[#&#8203;22330](https://redirect.github.com/pulumi/pulumi/pull/22330)

- \[backend/diy] Start deprecation of non-project mode for DIY backends
[#&#8203;19625](https://redirect.github.com/pulumi/pulumi/pull/19625)

</details>

<details>
<summary>pulumi/pulumi-java
(github.com/pulumi/pulumi-java/pkg)</summary>

###
[`v1.22.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1220---2026-04-01)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.3...v1.22.0)

##### Bug Fixes

- \[runtime] Do not leak java processes on failed resource creates
[#&#8203;2103](https://redirect.github.com/pulumi/pulumi-java/pull/2103)

##### Improvements

- \[codegen] Support `cwd()` builtin in program generation
[#&#8203;2092](https://redirect.github.com/pulumi/pulumi-java/pull/2092)

- \[codegen] Support `additionalSecretOutputs` resource option in
program generation
[#&#8203;2098](https://redirect.github.com/pulumi/pulumi-java/pull/2098)

- \[codegen] Support `deleteBeforeReplace` and `replaceOnChanges`
resource options in program and SDK generation
[#&#8203;2101](https://redirect.github.com/pulumi/pulumi-java/pull/2101)

##### Bug Fixes

- \[codegen] Emit integer numbers as floats so generated code compiles
[#&#8203;2102](https://redirect.github.com/pulumi/pulumi-java/pull/2102)

- \[codegen] Generate `pom.xml` in the program directory when `main` is
set in `Pulumi.yaml`
[#&#8203;2093](https://redirect.github.com/pulumi/pulumi-java/pull/2093)

- \[codegen] Fix generated SDK `settings.gradle` to work with Gradle 9
[#&#8203;2097](https://redirect.github.com/pulumi/pulumi-java/pull/2097)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-04-02 17:58:57 +00:00
pulumi-renovate[bot]
f98315e8ee Update first-party Pulumi dependencies to v3.227.0 (#802)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.226.0` ->
`3.227.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.226.0/3.227.0)
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.226.0` -> `v3.227.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.227.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32270-2026-03-19)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0)

##### Features

- \[engine] The engine will fill in Name and Type for ResourceReference
values on the wire protocol
[#&#8203;22208](https://redirect.github.com/pulumi/pulumi/pull/22208)

-   \[sdk/bun] Add support for running policy packs with bun
[#&#8203;22206](https://redirect.github.com/pulumi/pulumi/pull/22206)

-   \[cli/policy] Auto-install missing policy analyzer plugins
[#&#8203;22196](https://redirect.github.com/pulumi/pulumi/pull/22196)

- \[sdk/python] Add lock file detection for picking the Python toolchain
[#&#8203;22234](https://redirect.github.com/pulumi/pulumi/pull/22234)

##### Bug Fixes

-   \[cli] Use distinct exit codes for different types of error
[#&#8203;22205](https://redirect.github.com/pulumi/pulumi/pull/22205)

-   \[cli] Improve SAML SSO reauthorization error message

- \[engine] Fix snapshot integrity error in refresh v2 with changed
parents
[#&#8203;22190](https://redirect.github.com/pulumi/pulumi/pull/22190)

- \[pcl] Continue running after errors when running with
--continue-on-error
[#&#8203;22171](https://redirect.github.com/pulumi/pulumi/pull/22171)

-   \[pcl] Deprecate labels on package blocks
[#&#8203;22253](https://redirect.github.com/pulumi/pulumi/pull/22253)

- \[programgen] Preserve traversal parts in
rewriteRelativeTraversalExpression
[#&#8203;22249](https://redirect.github.com/pulumi/pulumi/pull/22249)

-   \[sdk/bun] Check for an SDK version compatible with bun
[#&#8203;22262](https://redirect.github.com/pulumi/pulumi/pull/22262)

-   \[programgen/nodejs] Correctly generate `for` expressions
[#&#8203;22219](https://redirect.github.com/pulumi/pulumi/pull/22219)

- \[sdk/go] Add support for Azure DevOps git URLs in pulumi package
publish code paths
[#&#8203;22217](https://redirect.github.com/pulumi/pulumi/pull/22217)

- \[programgen/python] Correctly generate list & dictionary
comprehension in Python code
[#&#8203;22182](https://redirect.github.com/pulumi/pulumi/pull/22182)

##### Miscellaneous

-   \[backend] Move CloudConsoleURL from httpstate to httpstate/client
[#&#8203;22258](https://redirect.github.com/pulumi/pulumi/pull/22258)

-   \[docs] Move remaining content from /developer-docs to /docs
[#&#8203;22225](https://redirect.github.com/pulumi/pulumi/pull/22225)

- \[sdk/bun] Add a test for the function serialization error message
when using bun
[#&#8203;22207](https://redirect.github.com/pulumi/pulumi/pull/22207)

-   \[sdk/bun] Run policy language tests for bun
[#&#8203;22209](https://redirect.github.com/pulumi/pulumi/pull/22209)

-   \[sdk/bun] Mark pulumi-language-bun as a bundled plugin
[#&#8203;22265](https://redirect.github.com/pulumi/pulumi/pull/22265)

- \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and
run-policy-pack
[#&#8203;22210](https://redirect.github.com/pulumi/pulumi/pull/22210)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.227.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.227.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0)

##### 3.227.0 (2026-03-19)

##### Features

- \[engine] The engine will fill in Name and Type for ResourceReference
values on the wire protocol
[#&#8203;22208](https://redirect.github.com/pulumi/pulumi/pull/22208)

-   \[sdk/bun] Add support for running policy packs with bun
[#&#8203;22206](https://redirect.github.com/pulumi/pulumi/pull/22206)

-   \[cli/policy] Auto-install missing policy analyzer plugins
[#&#8203;22196](https://redirect.github.com/pulumi/pulumi/pull/22196)

- \[sdk/python] Add lock file detection for picking the Python toolchain
[#&#8203;22234](https://redirect.github.com/pulumi/pulumi/pull/22234)

##### Bug Fixes

-   \[cli] Use distinct exit codes for different types of error
[#&#8203;22205](https://redirect.github.com/pulumi/pulumi/pull/22205)

-   \[cli] Improve SAML SSO reauthorization error message

- \[engine] Fix snapshot integrity error in refresh v2 with changed
parents
[#&#8203;22190](https://redirect.github.com/pulumi/pulumi/pull/22190)

- \[pcl] Continue running after errors when running with
--continue-on-error
[#&#8203;22171](https://redirect.github.com/pulumi/pulumi/pull/22171)

-   \[pcl] Deprecate labels on package blocks
[#&#8203;22253](https://redirect.github.com/pulumi/pulumi/pull/22253)

- \[programgen] Preserve traversal parts in
rewriteRelativeTraversalExpression
[#&#8203;22249](https://redirect.github.com/pulumi/pulumi/pull/22249)

-   \[sdk/bun] Check for an SDK version compatible with bun
[#&#8203;22262](https://redirect.github.com/pulumi/pulumi/pull/22262)

-   \[programgen/nodejs] Correctly generate `for` expressions
[#&#8203;22219](https://redirect.github.com/pulumi/pulumi/pull/22219)

- \[sdk/go] Add support for Azure DevOps git URLs in pulumi package
publish code paths
[#&#8203;22217](https://redirect.github.com/pulumi/pulumi/pull/22217)

- \[programgen/python] Correctly generate list & dictionary
comprehension in Python code
[#&#8203;22182](https://redirect.github.com/pulumi/pulumi/pull/22182)

##### Miscellaneous

-   \[backend] Move CloudConsoleURL from httpstate to httpstate/client
[#&#8203;22258](https://redirect.github.com/pulumi/pulumi/pull/22258)

-   \[docs] Move remaining content from /developer-docs to /docs
[#&#8203;22225](https://redirect.github.com/pulumi/pulumi/pull/22225)

- \[sdk/bun] Add a test for the function serialization error message
when using bun
[#&#8203;22207](https://redirect.github.com/pulumi/pulumi/pull/22207)

-   \[sdk/bun] Run policy language tests for bun
[#&#8203;22209](https://redirect.github.com/pulumi/pulumi/pull/22209)

-   \[sdk/bun] Mark pulumi-language-bun as a bundled plugin
[#&#8203;22265](https://redirect.github.com/pulumi/pulumi/pull/22265)

- \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and
run-policy-pack
[#&#8203;22210](https://redirect.github.com/pulumi/pulumi/pull/22210)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-03-19 22:21:40 +00:00
pulumi-renovate[bot]
a479383c41 Update module google.golang.org/grpc to v1.79.3 [SECURITY] (#800)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
indirect | patch | `v1.79.2` -> `v1.79.3` |
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
indirect | minor | `v1.72.1` -> `v1.79.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

### GitHub Vulnerability Alerts

####
[CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3)

### Impact
_What kind of vulnerability is it? Who is impacted?_

It is an **Authorization Bypass** resulting from **Improper Input
Validation** of the HTTP/2 `:path` pseudo-header.

The gRPC-Go server was too lenient in its routing logic, accepting
requests where the `:path` omitted the mandatory leading slash (e.g.,
`Service/Method` instead of `/Service/Method`). While the server
successfully routed these requests to the correct handler, authorization
interceptors (including the official `grpc/authz` package) evaluated the
raw, non-canonical path string. Consequently, "deny" rules defined using
canonical paths (starting with `/`) failed to match the incoming
request, allowing it to bypass the policy if a fallback "allow" rule was
present.

**Who is impacted?**
This affects gRPC-Go servers that meet both of the following criteria:
1. They use path-based authorization interceptors, such as the official
RBAC implementation in `google.golang.org/grpc/authz` or custom
interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`.
2. Their security policy contains specific "deny" rules for canonical
paths but allows other requests by default (a fallback "allow" rule).

The vulnerability is exploitable by an attacker who can send raw HTTP/2
frames with malformed `:path` headers directly to the gRPC server.

### Patches
_Has the problem been patched? What versions should users upgrade to?_

Yes, the issue has been patched. The fix ensures that any request with a
`:path` that does not start with a leading slash is immediately rejected
with a `codes.Unimplemented` error, preventing it from reaching
authorization interceptors or handlers with a non-canonical path string.

Users should upgrade to the following versions (or newer):
* **v1.79.3**
* The latest **master** branch.

It is recommended that all users employing path-based authorization
(especially `grpc/authz`) upgrade as soon as the patch is available in a
tagged release.

### Workarounds
_Is there a way for users to fix or remediate the vulnerability without
upgrading?_

While upgrading is the most secure and recommended path, users can
mitigate the vulnerability using one of the following methods:

#### 1. Use a Validating Interceptor (Recommended Mitigation)
Add an "outermost" interceptor to your server that validates the path
before any other authorization logic runs:

```go
func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) {
    if info.FullMethod == "" || info.FullMethod[0] != '/' {
        return nil, status.Errorf(codes.Unimplemented, "malformed method name")
    }   
    return handler(ctx, req)
}

// Ensure this is the FIRST interceptor in your chain
s := grpc.NewServer(
    grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor),
)
```

#### 2. Infrastructure-Level Normalization
If your gRPC server is behind a reverse proxy or load balancer (such as
Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to
enforce strict HTTP/2 compliance for pseudo-headers and reject or
normalize requests where the `:path` header does not start with a
leading slash.

#### 3. Policy Hardening
Switch to a "default deny" posture in your authorization policies
(explicitly listing all allowed paths and denying everything else) to
reduce the risk of bypasses via malformed inputs.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3):
Release 1.79.3

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3)

### Security

- server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted "deny"
rules in interceptors like `grpc/authz`. Any request with a
non-canonical path is now immediately rejected with an `Unimplemented`
error.
([#&#8203;8981](https://redirect.github.com/grpc/grpc-go/issues/8981))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-03-19 05:12:33 +00:00
pulumi-provider-automation[bot]
474e757992 Update GitHub Actions workflows. (#799)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4eeb9c0311bcea38a166c43eb897cf2a2f88ea4c](4eeb9c0311).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-03-18 06:01:10 +00:00
pulumi-renovate[bot]
23583bfdc8 Update module github.com/pulumi/pulumi-go-provider to v1.3.1 (#798)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)
| require | patch | `v1.3.0` -> `v1.3.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>

###
[`v1.3.1`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.1)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1)

#### What's Changed

- Update module github.com/pulumi/pulumi/pkg/v3 to v3.226.0 by
[@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/487](https://redirect.github.com/pulumi/pulumi-go-provider/pull/487)7
- Serialize Enum Names by
[@&#8203;iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/488](https://redirect.github.com/pulumi/pulumi-go-provider/pull/488)
- Allow annotating enums by
[@&#8203;iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/489](https://redirect.github.com/pulumi/pulumi-go-provider/pull/489)

**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-17 15:59:50 +00:00
pulumi-renovate[bot]
c1ec48af0a Update first-party Pulumi dependencies to v3.226.0 (#796)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.225.1` ->
`3.226.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.225.1/3.226.0)
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.225.1` -> `v3.226.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.226.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32260-2026-03-11)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0)

##### Features

- \[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
[#&#8203;22179](https://redirect.github.com/pulumi/pulumi/pull/22179)

- \[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
[#&#8203;22129](https://redirect.github.com/pulumi/pulumi/pull/22129)

- \[engine] Engine will use provider references from `__self__`
arguments to calls
[#&#8203;22114](https://redirect.github.com/pulumi/pulumi/pull/22114)

-   \[sdk/bun] Support bun as a runtime
[#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177)
[#&#8203;22049](https://redirect.github.com/pulumi/pulumi/pull/22049)

-   \[sdk/bun] Add debugger support for the bun runtime
[#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177)

-   \[sdk/bun] Add support for Bun as a plugin runtime
[#&#8203;22189](https://redirect.github.com/pulumi/pulumi/pull/22189)

##### Bug Fixes

-   \[engine] Fix ReplacementTrigger firing due to dependency changes
[#&#8203;22119](https://redirect.github.com/pulumi/pulumi/pull/22119)

- \[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
[#&#8203;22120](https://redirect.github.com/pulumi/pulumi/pull/22120)

-   \[pcl] Support resource ranges in PCL
[#&#8203;22144](https://redirect.github.com/pulumi/pulumi/pull/22144)

- \[cli/config] Include environments used when refreshing a stack's
config
[#&#8203;22103](https://redirect.github.com/pulumi/pulumi/pull/22103)

- \[cli/display] Fix `pulumi destroy` not showing parent resource
hierarchy
[#&#8203;22148](https://redirect.github.com/pulumi/pulumi/pull/22148)

-   \[cli/package] Correctly parse package URLs with .git in them
[#&#8203;22174](https://redirect.github.com/pulumi/pulumi/pull/22174)

- \[cli/plugin] Fix package get-schema for binary providers at relative
paths
[#&#8203;22107](https://redirect.github.com/pulumi/pulumi/pull/22107)

- \[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing
[#&#8203;22140](https://redirect.github.com/pulumi/pulumi/pull/22140)

- \[cli/state] Fix state move integrity errors when copied providers
depend on resources left in source stack
[#&#8203;22141](https://redirect.github.com/pulumi/pulumi/pull/22141)

##### Miscellaneous

-   \[cli/about] Show bun information in `pulumi about`
[#&#8203;22121](https://redirect.github.com/pulumi/pulumi/pull/22121)

- \[programgen/go] Target go 1.25 for generated go.mod files (instead of
go 1.23)
[#&#8203;22070](https://redirect.github.com/pulumi/pulumi/pull/22070)

- \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs
(instead of go 1.20)
[#&#8203;22131](https://redirect.github.com/pulumi/pulumi/pull/22131)

- \[sdk/python] Read Poetry and uv lockfiles to determine program
dependencies
[#&#8203;22072](https://redirect.github.com/pulumi/pulumi/pull/22072)

- \[sdk/python] Use importlib to find pulumi-plugin.json for installed
packages
[#&#8203;22127](https://redirect.github.com/pulumi/pulumi/pull/22127)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.226.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.226.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0)

#### 3.226.0 (2026-03-11)

##### Features

- \[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
[#&#8203;22179](https://redirect.github.com/pulumi/pulumi/pull/22179)

- \[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
[#&#8203;22129](https://redirect.github.com/pulumi/pulumi/pull/22129)

- \[engine] Engine will use provider references from `__self__`
arguments to calls
[#&#8203;22114](https://redirect.github.com/pulumi/pulumi/pull/22114)

-   \[sdk/bun] Support bun as a runtime
[#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177)
[#&#8203;22049](https://redirect.github.com/pulumi/pulumi/pull/22049)

-   \[sdk/bun] Add debugger support for the bun runtime
[#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177)

-   \[sdk/bun] Add support for Bun as a plugin runtime
[#&#8203;22189](https://redirect.github.com/pulumi/pulumi/pull/22189)

##### Bug Fixes

-   \[engine] Fix ReplacementTrigger firing due to dependency changes
[#&#8203;22119](https://redirect.github.com/pulumi/pulumi/pull/22119)

- \[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
[#&#8203;22120](https://redirect.github.com/pulumi/pulumi/pull/22120)

-   \[pcl] Support resource ranges in PCL
[#&#8203;22144](https://redirect.github.com/pulumi/pulumi/pull/22144)

- \[cli/config] Include environments used when refreshing a stack's
config
[#&#8203;22103](https://redirect.github.com/pulumi/pulumi/pull/22103)

- \[cli/display] Fix `pulumi destroy` not showing parent resource
hierarchy
[#&#8203;22148](https://redirect.github.com/pulumi/pulumi/pull/22148)

-   \[cli/package] Correctly parse package URLs with .git in them
[#&#8203;22174](https://redirect.github.com/pulumi/pulumi/pull/22174)

- \[cli/plugin] Fix package get-schema for binary providers at relative
paths
[#&#8203;22107](https://redirect.github.com/pulumi/pulumi/pull/22107)

- \[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing
[#&#8203;22140](https://redirect.github.com/pulumi/pulumi/pull/22140)

- \[cli/state] Fix state move integrity errors when copied providers
depend on resources left in source stack
[#&#8203;22141](https://redirect.github.com/pulumi/pulumi/pull/22141)

##### Miscellaneous

-   \[cli/about] Show bun information in `pulumi about`
[#&#8203;22121](https://redirect.github.com/pulumi/pulumi/pull/22121)

- \[programgen/go] Target go 1.25 for generated go.mod files (instead of
go 1.23)
[#&#8203;22070](https://redirect.github.com/pulumi/pulumi/pull/22070)

- \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs
(instead of go 1.20)
[#&#8203;22131](https://redirect.github.com/pulumi/pulumi/pull/22131)

- \[sdk/python] Read Poetry and uv lockfiles to determine program
dependencies
[#&#8203;22072](https://redirect.github.com/pulumi/pulumi/pull/22072)

- \[sdk/python] Use importlib to find pulumi-plugin.json for installed
packages
[#&#8203;22127](https://redirect.github.com/pulumi/pulumi/pull/22127)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-03-13 16:28:43 +00:00
pulumi-renovate[bot]
20b453c00b Update module github.com/pulumi/esc to v0.23.0 (#795)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |
indirect | minor | `v0.22.0` -> `v0.23.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>

###
[`v0.23.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.23.0)

[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.22.0...v0.23.0)

##### Improvements

-   Add warning in CLI when using an ambiguous 2-part environment ref
    [#&#8203;622](https://redirect.github.com/pulumi/esc/pull/622)

- Add support for `fn::final` built-in function that marks values as
final and unable to be overwritten.
    [#&#8203;621](https://redirect.github.com/pulumi/esc/pull/621)

##### Bug Fixes

##### Breaking changes

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-03-12 20:38:53 +00:00
Pulumi Bot
f6b499a9d4 [rollout] Set up GH-AW and install shared PR review workflows (#794)
## Summary

This PR sets up GitHub Agentic Workflows (GH-AW) and installs shared PR
review workflows in `pulumi/pulumi-docker-build`.

### Commands Executed

- `gh-aw version` → `v0.56.2` (used as entrypoint)
- `gh-aw init` → ran (`.github/aw/` was not present)
- `gh-aw add
pulumi-labs/gh-aw-internal/.github/workflows/gh-aw-pr-review.md@main
--name docker-build-pr-review --force`
- `gh-aw add
pulumi-labs/gh-aw-internal/.github/workflows/gh-aw-pr-rereview.md@main
--name docker-build-pr-rereview --force`
- `gh-aw compile`
- `gh-aw validate`

### Configuration

| Property | Value |
|---|---|
| AW entrypoint | `gh-aw` (v0.56.2) |
| Target base branch | `main` |
| `prefix_stem` | `docker-build` |
| `gh-aw init` | Ran (was not previously initialized) |

### Changed Files

- `.gitattributes` — added `merge=ours` strategy for
`.github/workflows/*.lock.yml`
- `.github/agents/agentic-workflows.agent.md` — created by `gh-aw init`
- `.github/workflows/copilot-setup-steps.yml` — generated dependency
workflow
- `.github/workflows/docker-build-pr-review.md` — shared PR review
workflow source
- `.github/workflows/docker-build-pr-review.lock.yml` — compiled lock
file
- `.github/workflows/docker-build-pr-rereview.md` — shared PR re-review
workflow source
- `.github/workflows/docker-build-pr-rereview.lock.yml` — compiled lock
file
- `.github/workflows/shared/review.md` — imported shared workflow
- `.github/workflows/shared/plugins/code-review/code-review.md` —
imported shared plugin

### Validation Output

**compile:**
````
⚠ Compiled 2 workflow(s): 0 error(s), 2 warning(s)
```

**validate:**
```
⚠ Compiled 2 workflow(s): 0 error(s), 2 warning(s)
```

### Validation Warnings

Both workflows produced the same non-blocking warning:
```
warning: This workflow grants id-token: write permission
OIDC tokens can authenticate to cloud providers (AWS, Azure, GCP).
Ensure proper audience validation and trust policies are configured.
````

These warnings are expected for the shared review workflows which use
OIDC for cloud authentication and are non-blocking.

---
Rollout triggered by
[provider-ops#41](https://github.com/pulumi/provider-ops/issues/41).




> Generated by [Generic Rollout
Worker](https://github.com/pulumi/provider-ops/actions/runs/23014445857)
·
[◷](https://github.com/search?q=repo%3Apulumi%2Fpulumi-docker-build+%22gh-aw-workflow-id%3A+gh-aw-workflow-rollout-worker%22&type=pullrequests)

<!-- gh-aw-agentic-workflow: Generic Rollout Worker, engine: claude, id:
23014445857, workflow_id: gh-aw-workflow-rollout-worker, run:
https://github.com/pulumi/provider-ops/actions/runs/23014445857 -->

<!-- gh-aw-workflow-id: gh-aw-workflow-rollout-worker -->

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-12 15:25:04 -04:00
pulumi-renovate[bot]
a8af1bfb5d Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.102.0 (#792)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | minor | `v3.101.2` -> `v3.102.0` |

---

### Release Notes

<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>

###
[`v3.102.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31020---2026-03-11)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.101.2...v3.102.0)

##### Improvements

- \[runtime] Support 'secret' in pcl config blocks
[#&#8203;897](https://redirect.github.com/pulumi/pulumi-dotnet/pull/897)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-12 04:43:00 +00:00
pulumi-renovate[bot]
158160e33c Update module github.com/pulumi/pulumi-java/pkg to v1.21.3 (#791)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java)
| require | patch | `v1.21.2` -> `v1.21.3` |

---

### Release Notes

<details>
<summary>pulumi/pulumi-java
(github.com/pulumi/pulumi-java/pkg)</summary>

###
[`v1.21.3`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1213---2026-03-11)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.2...v1.21.3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-11 22:59:16 +00:00
pulumi-provider-automation[bot]
c7b308d64b Update GitHub Actions workflows. (#789)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[7dff4f888cb6e5bfa153146d3658d3e86ba74c6f](7dff4f888c).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-03-11 05:55:42 +00:00
Cam Soper
ac9653175b Fix syntax for language chooser in documentation (#771)
@pose Fixes a bug in the doc that prevents completion of the build in
`pulumi/registry`.
2026-03-06 09:42:06 -08:00
pulumi-renovate[bot]
76a990fcb2 Update module github.com/pulumi/pulumi/pkg/v3 to v3.225.1 (#788)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | patch | `v3.225.0` -> `v3.225.1` |

---

### Release Notes

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.225.1`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.1)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.0...v3.225.1)

#### 3.225.1 (2026-03-05)

##### Bug Fixes

- \[engine] Fix inheritence of default providers across resources of
different packages
[#&#8203;22101](https://redirect.github.com/pulumi/pulumi/pull/22101)

- \[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
[#&#8203;21917](https://redirect.github.com/pulumi/pulumi/pull/21917)

- \[programgen/go] Fix plain values not always being lifted to
input/output values when needed
[#&#8203;22084](https://redirect.github.com/pulumi/pulumi/pull/22084)

-   \[programgen/python] Fix generation of `entries` and `lookup` calls
[#&#8203;22086](https://redirect.github.com/pulumi/pulumi/pull/22086)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2026-03-06 08:17:59 +00:00
pulumi-provider-automation[bot]
aeb64dc959 Update GitHub Actions workflows. (#787)
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[46f89691d9162d78e8ac301d8b8746b1469b2338](46f89691d9).

Co-authored-by: Pulumi Bot <bot@pulumi.com>
2026-03-06 05:53:08 +00:00
pulumi-renovate[bot]
14fafe1ba2 Update dependency @pulumi/pulumi to v3.225.1 (#786)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | patch | [`3.225.0` ->
`3.225.1`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.225.0/3.225.1)
|

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.225.1`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.1)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.0...v3.225.1)

#### 3.225.1 (2026-03-05)

##### Bug Fixes

- \[engine] Fix inheritence of default providers across resources of
different packages
[#&#8203;22101](https://redirect.github.com/pulumi/pulumi/pull/22101)

- \[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
[#&#8203;21917](https://redirect.github.com/pulumi/pulumi/pull/21917)

- \[programgen/go] Fix plain values not always being lifted to
input/output values when needed
[#&#8203;22084](https://redirect.github.com/pulumi/pulumi/pull/22084)

-   \[programgen/python] Fix generation of `entries` and `lookup` calls
[#&#8203;22086](https://redirect.github.com/pulumi/pulumi/pull/22086)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-05 23:39:57 +00:00