96 Commits

Author	SHA1	Message	Date
pulumi-renovate[bot]	8dff8f0e21	Update first-party Pulumi dependencies (#846) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.236.0` -> `3.237.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.236.0/3.237.0) | | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | minor | `v3.105.0` -> `v3.106.1` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.236.0` -> `v3.237.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.237.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.237.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.236.0...v3.237.0) ##### 3.237.0 (2026-05-08) ##### Features - \[cli] Include the running command name and detected AI agent (when present) in the User-Agent header on Pulumi Cloud API requests [#&#8203;22908](https://redirect.github.com/pulumi/pulumi/pull/22908) - \[engine] Include `result` on the summary engine event [#&#8203;22883](https://redirect.github.com/pulumi/pulumi/pull/22883) - \[sdkgen] Eagerly error on schemas with unconstructable types [#&#8203;22890](https://redirect.github.com/pulumi/pulumi/pull/22890) - \[cli/cloud] Auto-fill `lang` and `os` query parameters on `pulumi cloud api` GET/HEAD requests when the matched OpenAPI operation declares them and the caller hasn't supplied them [#&#8203;22726](https://redirect.github.com/pulumi/pulumi/pull/22726) - \[cli/package] Add `pulumi package new` to bootstrap a Pulumi package from a template [#&#8203;22837](https://redirect.github.com/pulumi/pulumi/pull/22837) ##### Bug Fixes - \[cli] Add blank-line gaps between `pulumi neo` TUI conversation blocks [#&#8203;22846](https://redirect.github.com/pulumi/pulumi/pull/22846) - \[cli/import] Preserve `__`-prefixed keys when generating PCL for imported resource state, so provider-defined payloads round-trip correctly [#&#8203;22856](https://redirect.github.com/pulumi/pulumi/pull/22856) - \[cli/neo] Render `ux__ask_user` clarifying questions as questions instead of approval prompts [#&#8203;22862](https://redirect.github.com/pulumi/pulumi/pull/22862) - \[cli/neo] Fix a panic when cancelling a `pulumi neo` session [#&#8203;22898](https://redirect.github.com/pulumi/pulumi/pull/22898) - \[cli/neo] Render every assistant message in the TUI scrollback so multi-turn commentary no longer disappears between tool calls - \[cli/neo] Return the bare stack name and canonical project name from `pulumi_preview` and `pulumi_up` tool results instead of echoing the raw input [#&#8203;22891](https://redirect.github.com/pulumi/pulumi/pull/22891) - \[codegen/pcl] Stop reporting spurious circular references when an `ignoreChanges`, `hideDiffs`, `replaceOnChanges`, or `additionalSecretOutputs` entry shares a name with a top-level node [#&#8203;22916](https://redirect.github.com/pulumi/pulumi/pull/22916) - \[programgen/pcl] Fix PCL binder panic when a conditional mixes a Promise-typed branch with a try() branch [#&#8203;22907](https://redirect.github.com/pulumi/pulumi/pull/22907) - \[sdk/python] Support `NotRequired`, `Required` and `total=False` in TypedDicts for component resource arg types [#&#8203;22858](https://redirect.github.com/pulumi/pulumi/pull/22858) ##### Miscellaneous - \[cli/cloud] Auto-fit `pulumi cloud api list` table to terminal width and replace the `tabular` table renderer with `go-pretty` [#&#8203;22874](https://redirect.github.com/pulumi/pulumi/pull/22874) - \[sdk/nodejs] Test on Node.js 26 and drop 20 [#&#8203;22872](https://redirect.github.com/pulumi/pulumi/pull/22872) </details> <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.106.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31061---2026-05-08) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.106.0...v3.106.1) ##### Bug Fixes - \[sdk] Revert [#&#8203;983](https://redirect.github.com/pulumi/pulumi-dotnet/issues/983), restoring the framework version to v6 [#&#8203;997](https://redirect.github.com/pulumi/pulumi-dotnet/pull/997) ### [`v3.106.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31060---2026-05-07) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.105.0...v3.106.0) ##### Bug Fixes - \[sdk] Bump minimum .NET version to 8.0, to help fix a security vulnerability [#&#8203;983](https://redirect.github.com/pulumi/pulumi-dotnet/pull/983) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-05-09 00:40:47 +00:00
pulumi-renovate[bot]	b73395a7fa	Update module github.com/pulumi/pulumi-java to v1.26.1 (#845) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-java](https://redirect.github.com/pulumi/pulumi-java) | require | patch | `v1.26.0` -> `v1.26.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java)</summary> ### [`v1.26.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1261---2026-05-07) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.26.0...v1.26.1) ##### Bug Fixes - \[sdk] Fix inherited input properties missing from component schema when args class inherits from a base class [#&#8203;2129](https://redirect.github.com/pulumi/pulumi-java/pull/2129) - \[runtime] Wait for debugger attach only when it is requested [#&#8203;2161](https://redirect.github.com/pulumi/pulumi-java/pull/2161) - \[codegen] Generate `unsecret(...)` as `.asPlaintext()` and emit `config.requireSecret` for secret config variables in PCL programs [#&#8203;2155](https://redirect.github.com/pulumi/pulumi-java/pull/2155) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-05-08 08:01:45 +00:00
pulumi-renovate[bot]	05962fcc01	Update first-party Pulumi dependencies to v3.236.0 (#842) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.235.0` -> `3.236.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.235.0/3.236.0) | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.234.0` -> `v3.236.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.236.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32360-2026-05-06) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0) </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.236.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.236.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0) #### 3.236.0 (2026-05-06) ### [`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0) #### 3.235.0 (2026-05-05) ##### Features - \[cli] Add `pulumi logs decrypt` command for viewing logs [#&#8203;22523](https://redirect.github.com/pulumi/pulumi/pull/22523) - \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl) [#&#8203;22807](https://redirect.github.com/pulumi/pulumi/pull/22807) - \[cli] Automatically install the `hcl` converter from pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl` [#&#8203;22816](https://redirect.github.com/pulumi/pulumi/pull/22816) - \[pcl] Add `read` blocks to PCL to read resources via ID and query instead of registering them [#&#8203;22641](https://redirect.github.com/pulumi/pulumi/pull/22641) - \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any Pulumi Cloud API endpoint, with `--field`/`--header`/`--input`/`--body` flag handling, path template binding, content negotiation via `--format`, and `--dry-run` [#&#8203;22771](https://redirect.github.com/pulumi/pulumi/pull/22771) - \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow continuation cursors, accumulate items into a single JSON envelope, and surface progress events to stderr with `--emit-events` (page, complete, truncated, partial_failure, cancelled). [#&#8203;22772](https://redirect.github.com/pulumi/pulumi/pull/22772) ##### Bug Fixes - \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied `timeout` and to terminate the whole process tree (and unblock cmd.Wait) when the deadline fires, so commands like `kubectl logs -f` no longer hang Neo indefinitely. [#&#8203;22820](https://redirect.github.com/pulumi/pulumi/pull/22820) - \[cli] Surface the error and exit when `pulumi neo` fails to create the underlying task, instead of leaving the TUI stuck in `Thinking…` [#&#8203;22825](https://redirect.github.com/pulumi/pulumi/pull/22825) - \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive` [#&#8203;22827](https://redirect.github.com/pulumi/pulumi/pull/22827) - \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi neo` instead of hanging until a third press [#&#8203;22821](https://redirect.github.com/pulumi/pulumi/pull/22821) - \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and will cache for parameterised packages as well [#&#8203;22812](https://redirect.github.com/pulumi/pulumi/pull/22812) - \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type` discriminators) across RPC deserialization, matching the behavior of the other language SDKs [#&#8203;22834](https://redirect.github.com/pulumi/pulumi/pull/22834) - \[programgen/{nodejs,python}] Fix programgen to emit the right `length` check for string length [#&#8203;22802](https://redirect.github.com/pulumi/pulumi/pull/22802) ##### Miscellaneous - \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner with new Neo-branded ASCII art. [#&#8203;22817](https://redirect.github.com/pulumi/pulumi/pull/22817) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-05-07 21:40:04 +00:00
pulumi-renovate[bot]	0110626c42	Update first-party Pulumi dependencies (#819) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.231.0` -> `3.235.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.231.0/3.235.0) | | [github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest) | require | minor | `v0.6.0` -> `v0.7.0` | | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | minor | `v3.103.0` -> `v3.105.0` | | [github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider) | require | patch | `v1.3.1` -> `v1.3.2` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.230.0` -> `v3.234.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0) ##### 3.235.0 (2026-05-05) ##### Features - \[cli] Add `pulumi logs decrypt` command for viewing logs [#&#8203;22523](https://redirect.github.com/pulumi/pulumi/pull/22523) - \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl) [#&#8203;22807](https://redirect.github.com/pulumi/pulumi/pull/22807) - \[cli] Automatically install the `hcl` converter from pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl` [#&#8203;22816](https://redirect.github.com/pulumi/pulumi/pull/22816) - \[pcl] Add `read` blocks to PCL to read resources via ID and query instead of registering them [#&#8203;22641](https://redirect.github.com/pulumi/pulumi/pull/22641) - \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any Pulumi Cloud API endpoint, with `--field`/`--header`/`--input`/`--body` flag handling, path template binding, content negotiation via `--format`, and `--dry-run` [#&#8203;22771](https://redirect.github.com/pulumi/pulumi/pull/22771) - \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow continuation cursors, accumulate items into a single JSON envelope, and surface progress events to stderr with `--emit-events` (page, complete, truncated, partial_failure, cancelled). [#&#8203;22772](https://redirect.github.com/pulumi/pulumi/pull/22772) ##### Bug Fixes - \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied `timeout` and to terminate the whole process tree (and unblock cmd.Wait) when the deadline fires, so commands like `kubectl logs -f` no longer hang Neo indefinitely. [#&#8203;22820](https://redirect.github.com/pulumi/pulumi/pull/22820) - \[cli] Surface the error and exit when `pulumi neo` fails to create the underlying task, instead of leaving the TUI stuck in `Thinking…` [#&#8203;22825](https://redirect.github.com/pulumi/pulumi/pull/22825) - \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive` [#&#8203;22827](https://redirect.github.com/pulumi/pulumi/pull/22827) - \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi neo` instead of hanging until a third press [#&#8203;22821](https://redirect.github.com/pulumi/pulumi/pull/22821) - \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and will cache for parameterised packages as well [#&#8203;22812](https://redirect.github.com/pulumi/pulumi/pull/22812) - \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type` discriminators) across RPC deserialization, matching the behavior of the other language SDKs [#&#8203;22834](https://redirect.github.com/pulumi/pulumi/pull/22834) - \[programgen/{nodejs,python}] Fix programgen to emit the right `length` check for string length [#&#8203;22802](https://redirect.github.com/pulumi/pulumi/pull/22802) ##### Miscellaneous - \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner with new Neo-branded ASCII art. [#&#8203;22817](https://redirect.github.com/pulumi/pulumi/pull/22817) ### [`v3.234.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32340-2026-05-01) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.233.0...v3.234.0) ##### Features - \[cli/cloud] Add `pulumi cloud api describe` for inspecting the parameters, request body, and response schema of any Pulumi Cloud API operation, with text, markdown, and JSON output [#&#8203;22770](https://redirect.github.com/pulumi/pulumi/pull/22770) - \[cli/cloud] Add `pulumi cloud api list` for browsing every endpoint exposed by the Pulumi Cloud OpenAPI spec, with table and JSON output [#&#8203;22769](https://redirect.github.com/pulumi/pulumi/pull/22769) ##### Bug Fixes - \[engine] Revert changes to property path parsing that resulted in errors for currently valid paths ### [`v3.233.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32330-2026-04-30) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.232.0...v3.233.0) ##### Features - \[auto/python] Expose the auto-generated Pulumi CLI interface as `workspace.cli_api` [#&#8203;22638](https://redirect.github.com/pulumi/pulumi/pull/22638) - \[cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on [#&#8203;22494](https://redirect.github.com/pulumi/pulumi/pull/22494) - \[cli] Implement the `filesystem__grep` and `filesystem__content_replace` local tools for `pulumi neo`. `grep` runs a regex search across files in the project root with an optional `include` glob filter and returns results in `path:lineno: line` form. `content_replace` performs a literal multi-file search-and-replace with a `file_pattern` glob and `dry_run` preview mode. Both tools skip binary files, hidden directories, and `node_modules`, and reject paths outside the project root. Their input schemas match the cloud-side tool definitions. [#&#8203;22655](https://redirect.github.com/pulumi/pulumi/pull/22655) - \[cli] Add `pulumi_preview` and `pulumi_up` as local tools for the experimental `pulumi neo` agent. The Neo TUI renders a persistent bordered block for each operation that streams changed resources and diagnostics as the engine runs and finalizes with a summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL. [#&#8203;22697](https://redirect.github.com/pulumi/pulumi/pull/22697) - \[engine] Add `List` to the provider protocol and schema [#&#8203;22693](https://redirect.github.com/pulumi/pulumi/pull/22693) ##### Bug Fixes - \[engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native `scaleway` provider alongside a `terraform-provider` bridge parameterized as `scaleway`) instead of panicking with "Should not have seen an older plugin if sorting is correct!" [#&#8203;22679](https://redirect.github.com/pulumi/pulumi/pull/22679) - \[programgen] Do not wrap a `call(...)` on a method whose return type is marked plain in an Output. Previously PCL bound every method call's return type as `Output<T>`, which caused downstream program-gen to emit broken `.apply(...)`/`.ApplyT(...)` traversals against plain struct returns (e.g. methods with `liftSingleValueMethodReturns=true` or `ReturnTypePlain=true`). [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages [#&#8203;22701](https://redirect.github.com/pulumi/pulumi/pull/22701) - \[codegen/go] Generate unqualified `Provider` references for the package's own provider resource. Previously the Go codegen always emitted `<pkg>.Provider` even when the reference appeared inside `<pkg>` itself, producing identifiers that would not compile. Affects generated code for method return types (and other schema positions) that reference `pulumi:providers:<pkg>`. [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[codegen/nodejs] Generate unqualified `Provider` references for the package's own provider resource when emitting TypeScript code inside that package. Previously the generator always qualified the name as `<pkg>.Provider`, which does not resolve when no `<pkg>` namespace import is in scope. [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[codegen/nodejs] Import the correct class name for a provider resource. Imports for `pulumi:providers:<pkg>` used the title-cased package name instead of `Provider`, producing a phantom identifier that clashed with the containing package's component/resource classes. [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[programgen/nodejs] Emit `await` for `call(...)` invocations of methods whose return type is marked plain, and force the generated program into an async `export = async () => ...` wrapper whenever such a call is present. The Node SDK returns `Promise<T>` for plain methods; previously program-gen used the result directly, which did not match its runtime type. [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[codegen/python] Avoid a self-import (`import pulumi_<pkg>` inside `pulumi_<pkg>/<module>.py`) when referencing the package's own provider resource. Python referenced the Provider as `pulumi_<pkg>.Provider` even inside that package, which caused a circular import at runtime. [#&#8203;22696](https://redirect.github.com/pulumi/pulumi/pull/22696) - \[sdk/python] Reduce internal `Output[T]` data to a single `asyncio.Future` [#&#8203;22661](https://redirect.github.com/pulumi/pulumi/pull/22661) - \[sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values [#&#8203;22552](https://redirect.github.com/pulumi/pulumi/pull/22552) ##### Miscellaneous - \[auto/go] Drop the "With" prefix from generated option helpers so they match the naming of the existing optXxx packages [#&#8203;22682](https://redirect.github.com/pulumi/pulumi/pull/22682) ### [`v3.232.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32320-2026-04-22) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.231.0...v3.232.0) ##### Features - \[cli] Add an experimental `pulumi neo` command that creates a Pulumi Neo agent task in CLI tool-execution mode and runs the local tool loop. Filesystem and shell tool calls issued by the agent run on the user's machine in their working directory; the interactive chat continues to happen in the Pulumi Console at the URL the command prints. Hidden behind PULUMI_EXPERIMENTAL. [#&#8203;22473](https://redirect.github.com/pulumi/pulumi/pull/22473) - \[cli] Add support for handling user approval requests in the `pulumi neo` terminal UI. When the agent requests confirmation for a sensitive action, the TUI prompts the user and forwards their response back to the Pulumi Console. Hidden behind PULUMI_EXPERIMENTAL. [#&#8203;22589](https://redirect.github.com/pulumi/pulumi/pull/22589) - \[cli] Add an interactive terminal UI for `pulumi neo` built with bubbletea, rendering agent messages, tool calls, and streaming output in the terminal alongside the Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL. [#&#8203;22570](https://redirect.github.com/pulumi/pulumi/pull/22570) - \[cli] Switch logging library from glog to slog. BREAKING: any `if logging.V(x) {` need to be changed to `if logging.V(x).Enabled()` [#&#8203;22548](https://redirect.github.com/pulumi/pulumi/pull/22548) - \[cli] Add a plan-mode toggle to the `pulumi neo` TUI, bound to Shift+Tab. When plan mode is on, Neo explores and asks questions without writing files, running `pulumi up`, or opening PRs, and surfaces an approved plan via a dedicated approval gate. The toggle must be set before the first message (plan mode is task-level on the wire); approving the proposed plan exits plan mode automatically. [#&#8203;22634](https://redirect.github.com/pulumi/pulumi/pull/22634) - \[cli] The `pulumi neo` TUI now drives its "thinking" spinner off a single declarative rule (the spinner stays on until a final event — final assistant message, approval request, cancellation, or error — lands), so the indicator no longer flickers off when the agent hands off tool calls to the CLI or when streaming text arrives between tools. Press `Esc` during a turn to ask the agent to cancel; the label switches to "Cancelling..." until the backend acknowledges. [#&#8203;22637](https://redirect.github.com/pulumi/pulumi/pull/22637) - \[cli] `pulumi neo` now executes the `edit` filesystem tool locally, matching the schema and response wording of the upstream mcp-claude-code tool so the agent sees identical output whether the call ran on Cloud or CLI. `edit` performs exact-string replacement with occurrence-count validation, and creates a new file when the target is missing and `old_string` is empty. [#&#8203;22654](https://redirect.github.com/pulumi/pulumi/pull/22654) ##### Bug Fixes - \[cli] Render user messages in the `pulumi neo` TUI as soon as they're submitted instead of waiting for the Pulumi Cloud event stream to echo them back. The initial prompt passed on the command line also appears in the transcript at startup. Self-echoes from the server are de-duplicated; user input that originated from another client (e.g. the web UI on the same task) still renders. [#&#8203;22629](https://redirect.github.com/pulumi/pulumi/pull/22629) - \[cli] Wrap warnings, errors, and user-message bubbles to the terminal width in the `pulumi neo` TUI. Previously these blocks rendered as single long lines that were clipped at the right edge of the viewport. On resize, all width-dependent transcript blocks (user messages, warnings, errors, assistant messages) now reflow to the new terminal width. [#&#8203;22635](https://redirect.github.com/pulumi/pulumi/pull/22635) - \[cli/policy] Fix `policy ls` to use the default org name, not username [#&#8203;22656](https://redirect.github.com/pulumi/pulumi/pull/22656) - \[engine] Fix provider registry race condition in parallel delete-before-replace [#&#8203;21487](https://redirect.github.com/pulumi/pulumi/pull/21487) - \[engine] Signal providers to cancel before closing them during replacement - \[sdkgen] Error on 'id' in state inputs [#&#8203;22636](https://redirect.github.com/pulumi/pulumi/pull/22636) - \[programgen/python] Add necessary casts between types in generated programs [#&#8203;22567](https://redirect.github.com/pulumi/pulumi/pull/22567) - \[sdkgen/go] Fix caching of package references to be per-deployment not per-process [#&#8203;22170](https://redirect.github.com/pulumi/pulumi/pull/22170) ##### Miscellaneous - \[java] Upgrade java to v1.25.0 [#&#8203;22673](https://redirect.github.com/pulumi/pulumi/pull/22673) - \[auto/go] Generate command methods for the Go Automation API codegen [#&#8203;22612](https://redirect.github.com/pulumi/pulumi/pull/22612) - \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` / `Resource` in the Node and Python SDKs [#&#8203;22603](https://redirect.github.com/pulumi/pulumi/pull/22603) - \[sdk/dotnet] Upgrade dotnet to v3.103.1 [#&#8203;22676](https://redirect.github.com/pulumi/pulumi/pull/22676) - \[yaml] Upgrade yaml to v1.32.0 [#&#8203;22674](https://redirect.github.com/pulumi/pulumi/pull/22674) </details> <details> <summary>pulumi/providertest (github.com/pulumi/providertest)</summary> ### [`v0.7.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.7.0) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.6.0...v0.7.0) ##### What's Changed - Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/pulumi/providertest/pull/159](https://redirect.github.com/pulumi/providertest/pull/159)9 - Fix python_gcp test by adding setuptools dependency by [@&#8203;pose](https://redirect.github.com/pose) in [https://github.com/pulumi/providertest/pull/167](https://redirect.github.com/pulumi/providertest/pull/167) - Rename project to python_gcp and update description by [@&#8203;pose](https://redirect.github.com/pose) in [https://github.com/pulumi/providertest/pull/166](https://redirect.github.com/pulumi/providertest/pull/166) - fix(pulumitest): start fresh providers per engine operation by [@&#8203;rshade](https://redirect.github.com/rshade) in [https://github.com/pulumi/providertest/pull/170](https://redirect.github.com/pulumi/providertest/pull/170) - feat(pulumitest): log pulumi version and plugins on stack creation by [@&#8203;rshade](https://redirect.github.com/rshade) in [https://github.com/pulumi/providertest/pull/171](https://redirect.github.com/pulumi/providertest/pull/171) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.6.0...v0.7.0 </details> <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.105.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31050---2026-05-04) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.104.0...v3.105.0) ### [`v3.104.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31040---2026-04-29) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.1...v3.104.0) ##### Improvements - \[runtime] Support the `getOutput` pcl intrinsic in codegen [#&#8203;977](https://redirect.github.com/pulumi/pulumi-dotnet/pull/977) ### [`v3.103.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31031---2026-04-21) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.0...v3.103.1) ##### Bug Fixes - \[runtime] Ensure that 'main' is always respected for selecting projects to run [#&#8203;55](https://redirect.github.com/pulumi/pulumi-dotnet/pull/55) - \[runtime] Generate compilable C# for resources whose range is an Output-typed expression such as `length(someInvoke.result)`. The loop is now wrapped in `.Apply(rangeBody => { ... })` so the loop bound sees a plain `int`, and `length` on an `Output<ImmutableArray<T>>` is emitted as the extension method `.Length()` (with parentheses) rather than as a property. [#&#8203;969](https://redirect.github.com/pulumi/pulumi-dotnet/pull/969) - \[runtime] Fix codegen for nested `InputMap` literals so the produced C# compiles ([#&#8203;833](https://redirect.github.com/pulumi/pulumi-dotnet/issues/833)) [#&#8203;970](https://redirect.github.com/pulumi/pulumi-dotnet/pull/970) </details> <details> <summary>pulumi/pulumi-go-provider (github.com/pulumi/pulumi-go-provider)</summary> ### [`v1.3.2`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.2) [Compare Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2) #### What's Changed - Update module github.com/pulumi/pulumi/pkg/v3 to v3.230.0 by [@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-go-provider/pull/509](https://redirect.github.com/pulumi/pulumi-go-provider/pull/509)9 - Correctly encode & decode `types.AssetOrArchive` by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/512](https://redirect.github.com/pulumi/pulumi-go-provider/pull/512) - Resolve framework version via runtime/debug.ReadBuildInfo by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/514](https://redirect.github.com/pulumi/pulumi-go-provider/pull/514) **Full Changelog**: https://github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: Ian Wahbe <me@iwahbe.com>	2026-05-06 16:57:43 +00:00
pulumi-renovate[bot]	a3072f6aa3	Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.103.0 (#815) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | minor | `v3.102.1` -> `v3.103.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.103.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31030---2026-04-15) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.1...v3.103.0) ##### Improvements - \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` / `Resource` [#&#8203;963](https://redirect.github.com/pulumi/pulumi-dotnet/pull/963) ##### Bug Fixes - \[sdk] Fix `ResourceTransforms` being silently dropped when `CustomResourceOptions.Merge` is called (affects all generated SDK resources using the `MakeResourceOptions` pattern) [#&#8203;958](https://redirect.github.com/pulumi/pulumi-dotnet/pull/958) - \[sdk] Add missing `[Input]` attribute to `StashArgs.Input`, fixing serialization of the Stash resource [#&#8203;960](https://redirect.github.com/pulumi/pulumi-dotnet/pull/960) - \[sdk/auto] Fix running inline programs with refresh/destroy and --run-program [#&#8203;725](https://redirect.github.com/pulumi/pulumi-dotnet/pull/725) ##### Improvements - \[runtime] Add codegen support for AdditionalSecretOutputs, Version, and PluginDownloadURL resource options [#&#8203;953](https://redirect.github.com/pulumi/pulumi-dotnet/pull/953) ##### Bug Fixes - \[runtime] Fix property paths in resource options (IgnoreChanges, ReplaceOnChanges, HideDiffs) being incorrectly prefixed with @&#8203; for C# reserved words [#&#8203;934](https://redirect.github.com/pulumi/pulumi-dotnet/pull/934) - \[runtime] Fix NuGet package name and version extraction for packages with prerelease versions (e.g. `3.0.0-alpha.1.internal`) [#&#8203;947](https://redirect.github.com/pulumi/pulumi-dotnet/pull/947) - \[runtime] Support call methods in program generation [#&#8203;946](https://redirect.github.com/pulumi/pulumi-dotnet/pull/946) - \[runtime] Add missing `System` namespace import for `sha1` builtin, fixing `BitConverter` not found error [#&#8203;961](https://redirect.github.com/pulumi/pulumi-dotnet/pull/961) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-04-15 17:55:53 +00:00
pulumi-renovate[bot]	2079e52a5f	Update first-party Pulumi dependencies to v3.230.0 (#809) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.229.0` -> `3.230.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.229.0/3.230.0) | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.229.0` -> `v3.230.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.230.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32300-2026-04-08) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0) ##### Features - \[cli] Detect AI agents and send in update metadata [#&#8203;22497](https://redirect.github.com/pulumi/pulumi/pull/22497) - \[auto/nodejs] Add "org" commands (get-default, set-default, search, search ai) to the auto-generated interface [#&#8203;22395](https://redirect.github.com/pulumi/pulumi/pull/22395) - \[auto/nodejs] Add "new" command to the auto-generated interface [#&#8203;22421](https://redirect.github.com/pulumi/pulumi/pull/22421) - \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js providers [#&#8203;22516](https://redirect.github.com/pulumi/pulumi/pull/22516) - \[cli/policy] Add ESC environment resolution for policy packs [#&#8203;22425](https://redirect.github.com/pulumi/pulumi/pull/22425) ##### Bug Fixes - \[auto/go] Insert --non-interactive flag before "--" positional separator to avoid misinterpretation as a positional argument [#&#8203;22462](https://redirect.github.com/pulumi/pulumi/pull/22462) - \[ci] Add code coverage collection for Node.js automation tools tests [#&#8203;22412](https://redirect.github.com/pulumi/pulumi/pull/22412) - \[pcl] Allow key indexing into a map of resources created by range [#&#8203;22498](https://redirect.github.com/pulumi/pulumi/pull/22498) - \[programgen/go] Fix an issue with formatted index modules not importing correctly - \[cli/state] Check for Pulumi.yaml projects and `backend` option in `state upgrade` [#&#8203;22483](https://redirect.github.com/pulumi/pulumi/pull/22483) - \[sdk/go] Fix Go program generation for ternary expressions inside apply callbacks, add Go predeclared identifiers to reserved words, handle optional list types in union type codegen, and fix unmarshalOutput for known outputs with null elements. [#&#8203;22460](https://redirect.github.com/pulumi/pulumi/pull/22460) - \[sdk/nodejs] Fix inherited input properties missing from component schema when args interface extends another interface [#&#8203;22446](https://redirect.github.com/pulumi/pulumi/pull/22446) - \[sdk/python] Fix inherited input properties missing from component schema when args class inherits from a base class [#&#8203;22484](https://redirect.github.com/pulumi/pulumi/pull/22484) ##### Miscellaneous - \[java] Upgrade java to v1.23.0 - \[sdk/dotnet] Upgrade dotnet to v3.102.1 - \[yaml] Upgrade to v1.31.0 [#&#8203;22501](https://redirect.github.com/pulumi/pulumi/pull/22501) - \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove `mimeType` & `readDir` from PCL [#&#8203;22449](https://redirect.github.com/pulumi/pulumi/pull/22449) </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.230.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.230.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0) #### 3.230.0 (2026-04-08) ##### Features - \[cli] Detect AI agents and send in update metadata [#&#8203;22497](https://redirect.github.com/pulumi/pulumi/pull/22497) - \[auto/nodejs] Add "org" commands (get-default, set-default, search, search ai) to the auto-generated interface [#&#8203;22395](https://redirect.github.com/pulumi/pulumi/pull/22395) - \[auto/nodejs] Add "new" command to the auto-generated interface [#&#8203;22421](https://redirect.github.com/pulumi/pulumi/pull/22421) - \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js providers [#&#8203;22516](https://redirect.github.com/pulumi/pulumi/pull/22516) - \[cli/policy] Add ESC environment resolution for policy packs [#&#8203;22425](https://redirect.github.com/pulumi/pulumi/pull/22425) ##### Bug Fixes - \[auto/go] Insert --non-interactive flag before "--" positional separator to avoid misinterpretation as a positional argument [#&#8203;22462](https://redirect.github.com/pulumi/pulumi/pull/22462) - \[ci] Add code coverage collection for Node.js automation tools tests [#&#8203;22412](https://redirect.github.com/pulumi/pulumi/pull/22412) - \[pcl] Allow key indexing into a map of resources created by range [#&#8203;22498](https://redirect.github.com/pulumi/pulumi/pull/22498) - \[programgen/go] Fix an issue with formatted index modules not importing correctly - \[cli/state] Check for Pulumi.yaml projects and `backend` option in `state upgrade` [#&#8203;22483](https://redirect.github.com/pulumi/pulumi/pull/22483) - \[sdk/go] Fix Go program generation for ternary expressions inside apply callbacks, add Go predeclared identifiers to reserved words, handle optional list types in union type codegen, and fix unmarshalOutput for known outputs with null elements. [#&#8203;22460](https://redirect.github.com/pulumi/pulumi/pull/22460) - \[sdk/nodejs] Fix inherited input properties missing from component schema when args interface extends another interface [#&#8203;22446](https://redirect.github.com/pulumi/pulumi/pull/22446) - \[sdk/python] Fix inherited input properties missing from component schema when args class inherits from a base class [#&#8203;22484](https://redirect.github.com/pulumi/pulumi/pull/22484) ##### Miscellaneous - \[java] Upgrade java to v1.23.0 - \[sdk/dotnet] Upgrade dotnet to v3.102.1 - \[yaml] Upgrade to v1.31.0 [#&#8203;22501](https://redirect.github.com/pulumi/pulumi/pull/22501) - \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove `mimeType` & `readDir` from PCL [#&#8203;22449](https://redirect.github.com/pulumi/pulumi/pull/22449) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-04-09 01:05:50 +00:00
pulumi-renovate[bot]	fd5b2ee95b	Update first-party Pulumi dependencies (#807) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | patch | `v3.102.0` -> `v3.102.1` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.228.0` -> `v3.229.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.102.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31021---2026-04-08) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.0...v3.102.1) ##### Bug Fixes - \[sdk] Fix inherited \[Input] properties missing from component schema when using base class inheritance on args types [#&#8203;930](https://redirect.github.com/pulumi/pulumi-dotnet/pull/930) - \[sdk] Fix GetResourceType() returning empty string for DependencyProviderResource [#&#8203;922](https://redirect.github.com/pulumi/pulumi-dotnet/pull/922) </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0) #### 3.229.0 (2026-04-02) ##### Features - \[auto/python] Add org get-default and set-default commands to Automation API - \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve performance [#&#8203;22373](https://redirect.github.com/pulumi/pulumi/pull/22373) - \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the pulumi spans under an existing parent span [#&#8203;22369](https://redirect.github.com/pulumi/pulumi/pull/22369) - \[cli/display] Add `--urns` flag to display full resource URNs instead of short names in preview, up, destroy, refresh, import, and watch commands [#&#8203;22007](https://redirect.github.com/pulumi/pulumi/pull/22007) - \[pcl] Type integer literals as integers rather than numbers in PCL [#&#8203;22268](https://redirect.github.com/pulumi/pulumi/pull/22268) - \[pcl] Support parameterized providers in PCL [#&#8203;22251](https://redirect.github.com/pulumi/pulumi/pull/22251) - \[protobuf] Add RunPlugin2 bidirectional streaming RPC to LanguageRuntime proto [#&#8203;22389](https://redirect.github.com/pulumi/pulumi/pull/22389) - \[yaml] Update YAML runtime to 1.30.2 [#&#8203;22426](https://redirect.github.com/pulumi/pulumi/pull/22426) - \[sdk/go] Add org get-default and set-default commands to Automation API - \[sdk/nodejs] Modernize generated tsconfig.json to align with TypeScript defaults [#&#8203;22370](https://redirect.github.com/pulumi/pulumi/pull/22370) - \[cli/policy] Add a new `policy analyze` command to run a policy pack against existing state [#&#8203;22250](https://redirect.github.com/pulumi/pulumi/pull/22250) ##### Bug Fixes - \[backend/diy] Remove state lock for refresh --preview-only for diy backend [#&#8203;22385](https://redirect.github.com/pulumi/pulumi/pull/22385) - \[cli] Fix OTEL flushing on provider shutdown [#&#8203;22358](https://redirect.github.com/pulumi/pulumi/pull/22358) - \[cli/display] Fix deadlock in message renderer when cancelling an operation [#&#8203;22433](https://redirect.github.com/pulumi/pulumi/pull/22433) - \[engine] Fix `--include` and `--exclude` not working for program-based refresh (RefreshV2) [#&#8203;22404](https://redirect.github.com/pulumi/pulumi/pull/22404) - \[engine] Parallelize plugin cancellation in SignalCancellation [#&#8203;22431](https://redirect.github.com/pulumi/pulumi/pull/22431) - \[pcl] Fix looking up variables in parent scopes [#&#8203;22379](https://redirect.github.com/pulumi/pulumi/pull/22379) - \[pcl] Apply default values from resource schemas [#&#8203;22393](https://redirect.github.com/pulumi/pulumi/pull/22393) - \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run [#&#8203;22397](https://redirect.github.com/pulumi/pulumi/pull/22397) - \[sdk/nodejs] Allow TypeScript 6 as a peer dependency [#&#8203;22340](https://redirect.github.com/pulumi/pulumi/pull/22340) - \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped modules [#&#8203;22388](https://redirect.github.com/pulumi/pulumi/pull/22388) - \[sdk/python] Cache type metadata and class references in Python SDK to reduce CPU overhead during serialization [#&#8203;22422](https://redirect.github.com/pulumi/pulumi/pull/22422) - \[sdk/python] Replace busy-wait polling in wait_for_rpcs with asyncio.wait [#&#8203;22411](https://redirect.github.com/pulumi/pulumi/pull/22411) ##### Miscellaneous - \[cli] Add update metadata to the otel root span [#&#8203;22357](https://redirect.github.com/pulumi/pulumi/pull/22357) - \[java] Update to v1.22.0 [#&#8203;22437](https://redirect.github.com/pulumi/pulumi/pull/22437) - \[sdk/nodejs] Use nodenext for moduleResolution and module [#&#8203;22363](https://redirect.github.com/pulumi/pulumi/pull/22363) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-04-08 13:51:13 +00:00
pulumi-renovate[bot]	8ef055d5e7	Update first-party Pulumi dependencies (#803) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.227.0` -> `3.229.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.227.0/3.229.0) | | [github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java) | require | minor | `v1.21.3` -> `v1.22.0` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.227.0` -> `v3.228.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0) #### 3.229.0 (2026-04-02) ##### Features - \[auto/python] Add org get-default and set-default commands to Automation API - \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve performance [#&#8203;22373](https://redirect.github.com/pulumi/pulumi/pull/22373) - \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the pulumi spans under an existing parent span [#&#8203;22369](https://redirect.github.com/pulumi/pulumi/pull/22369) - \[cli/display] Add `--urns` flag to display full resource URNs instead of short names in preview, up, destroy, refresh, import, and watch commands [#&#8203;22007](https://redirect.github.com/pulumi/pulumi/pull/22007) - \[pcl] Type integer literals as integers rather than numbers in PCL [#&#8203;22268](https://redirect.github.com/pulumi/pulumi/pull/22268) - \[pcl] Support parameterized providers in PCL [#&#8203;22251](https://redirect.github.com/pulumi/pulumi/pull/22251) - \[protobuf] Add RunPlugin2 bidirectional streaming RPC to LanguageRuntime proto [#&#8203;22389](https://redirect.github.com/pulumi/pulumi/pull/22389) - \[yaml] Update YAML runtime to 1.30.2 [#&#8203;22426](https://redirect.github.com/pulumi/pulumi/pull/22426) - \[sdk/go] Add org get-default and set-default commands to Automation API - \[sdk/nodejs] Modernize generated tsconfig.json to align with TypeScript defaults [#&#8203;22370](https://redirect.github.com/pulumi/pulumi/pull/22370) - \[cli/policy] Add a new `policy analyze` command to run a policy pack against existing state [#&#8203;22250](https://redirect.github.com/pulumi/pulumi/pull/22250) ##### Bug Fixes - \[backend/diy] Remove state lock for refresh --preview-only for diy backend [#&#8203;22385](https://redirect.github.com/pulumi/pulumi/pull/22385) - \[cli] Fix OTEL flushing on provider shutdown [#&#8203;22358](https://redirect.github.com/pulumi/pulumi/pull/22358) - \[cli/display] Fix deadlock in message renderer when cancelling an operation [#&#8203;22433](https://redirect.github.com/pulumi/pulumi/pull/22433) - \[engine] Fix `--include` and `--exclude` not working for program-based refresh (RefreshV2) [#&#8203;22404](https://redirect.github.com/pulumi/pulumi/pull/22404) - \[engine] Parallelize plugin cancellation in SignalCancellation [#&#8203;22431](https://redirect.github.com/pulumi/pulumi/pull/22431) - \[pcl] Fix looking up variables in parent scopes [#&#8203;22379](https://redirect.github.com/pulumi/pulumi/pull/22379) - \[pcl] Apply default values from resource schemas [#&#8203;22393](https://redirect.github.com/pulumi/pulumi/pull/22393) - \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run [#&#8203;22397](https://redirect.github.com/pulumi/pulumi/pull/22397) - \[sdk/nodejs] Allow TypeScript 6 as a peer dependency [#&#8203;22340](https://redirect.github.com/pulumi/pulumi/pull/22340) - \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped modules [#&#8203;22388](https://redirect.github.com/pulumi/pulumi/pull/22388) - \[sdk/python] Cache type metadata and class references in Python SDK to reduce CPU overhead during serialization [#&#8203;22422](https://redirect.github.com/pulumi/pulumi/pull/22422) - \[sdk/python] Replace busy-wait polling in wait_for_rpcs with asyncio.wait [#&#8203;22411](https://redirect.github.com/pulumi/pulumi/pull/22411) ##### Miscellaneous - \[cli] Add update metadata to the otel root span [#&#8203;22357](https://redirect.github.com/pulumi/pulumi/pull/22357) - \[java] Update to v1.22.0 [#&#8203;22437](https://redirect.github.com/pulumi/pulumi/pull/22437) - \[sdk/nodejs] Use nodenext for moduleResolution and module [#&#8203;22363](https://redirect.github.com/pulumi/pulumi/pull/22363) ### [`v3.228.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32280-2026-03-25) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.227.0...v3.228.0) ##### Features - \[cli] Don't apply the secrets filter to `true` and `false` (case-insensitive) [#&#8203;22269](https://redirect.github.com/pulumi/pulumi/pull/22269) - \[cli] Add grpcs:// support and header authentication to OTLP exporter [#&#8203;22320](https://redirect.github.com/pulumi/pulumi/pull/22320) - \[cli] Read OTEL_RESOURCE_ATTRIBUTES [#&#8203;22329](https://redirect.github.com/pulumi/pulumi/pull/22329) - \[auto/nodejs] Add low-level "cancel" command to the auto-generated interface [#&#8203;22156](https://redirect.github.com/pulumi/pulumi/pull/22156) - \[cli/state] Allow `pulumi state delete` to accept multiple resource URNs and delete them in a dependency-safe order ##### Bug Fixes - \[cli] Allow relative file paths for --otel-traces [#&#8203;22300](https://redirect.github.com/pulumi/pulumi/pull/22300) - \[cli] Bridge opentracing spans from providers into OTel [#&#8203;22313](https://redirect.github.com/pulumi/pulumi/pull/22313) - \[cli] Correctly end spans for GRPC streams [#&#8203;22304](https://redirect.github.com/pulumi/pulumi/pull/22304) - \[cli/about] Do not include the access token in plain text [#&#8203;22347](https://redirect.github.com/pulumi/pulumi/pull/22347) - \[display] Fix detailed diff indentation so changed resources are not visually nested under unrelated visible resources when unchanged parents are hidden. [#&#8203;22317](https://redirect.github.com/pulumi/pulumi/pull/22317) - \[cli/import] Fix import codegen when generating references to non-standard names [#&#8203;22319](https://redirect.github.com/pulumi/pulumi/pull/22319) - \[engine] Update golang version [#&#8203;22277](https://redirect.github.com/pulumi/pulumi/pull/22277) - \[pcl] Typecheck component inputs in PCL programs [#&#8203;22292](https://redirect.github.com/pulumi/pulumi/pull/22292) - \[programgen/{nodejs,python}] Fix literal conversion when calling into local components [#&#8203;22306](https://redirect.github.com/pulumi/pulumi/pull/22306) ##### Miscellaneous - \[cli] Add CLI metadata to the root span [#&#8203;22305](https://redirect.github.com/pulumi/pulumi/pull/22305) - \[cli] Add more OTel interceptors for GRPC clients [#&#8203;22309](https://redirect.github.com/pulumi/pulumi/pull/22309) - \[cli] Add spans for plugin installation and add more attributes for dependency installation [#&#8203;22303](https://redirect.github.com/pulumi/pulumi/pull/22303) - \[cli] Allow setting a GRPC endpoint for performance tests [#&#8203;22330](https://redirect.github.com/pulumi/pulumi/pull/22330) - \[backend/diy] Start deprecation of non-project mode for DIY backends [#&#8203;19625](https://redirect.github.com/pulumi/pulumi/pull/19625) </details> <details> <summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java/pkg)</summary> ### [`v1.22.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1220---2026-04-01) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.3...v1.22.0) ##### Bug Fixes - \[runtime] Do not leak java processes on failed resource creates [#&#8203;2103](https://redirect.github.com/pulumi/pulumi-java/pull/2103) ##### Improvements - \[codegen] Support `cwd()` builtin in program generation [#&#8203;2092](https://redirect.github.com/pulumi/pulumi-java/pull/2092) - \[codegen] Support `additionalSecretOutputs` resource option in program generation [#&#8203;2098](https://redirect.github.com/pulumi/pulumi-java/pull/2098) - \[codegen] Support `deleteBeforeReplace` and `replaceOnChanges` resource options in program and SDK generation [#&#8203;2101](https://redirect.github.com/pulumi/pulumi-java/pull/2101) ##### Bug Fixes - \[codegen] Emit integer numbers as floats so generated code compiles [#&#8203;2102](https://redirect.github.com/pulumi/pulumi-java/pull/2102) - \[codegen] Generate `pom.xml` in the program directory when `main` is set in `Pulumi.yaml` [#&#8203;2093](https://redirect.github.com/pulumi/pulumi-java/pull/2093) - \[codegen] Fix generated SDK `settings.gradle` to work with Gradle 9 [#&#8203;2097](https://redirect.github.com/pulumi/pulumi-java/pull/2097) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-04-02 17:58:57 +00:00
pulumi-renovate[bot]	f98315e8ee	Update first-party Pulumi dependencies to v3.227.0 (#802) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.226.0` -> `3.227.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.226.0/3.227.0) | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.226.0` -> `v3.227.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.227.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32270-2026-03-19) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0) ##### Features - \[engine] The engine will fill in Name and Type for ResourceReference values on the wire protocol [#&#8203;22208](https://redirect.github.com/pulumi/pulumi/pull/22208) - \[sdk/bun] Add support for running policy packs with bun [#&#8203;22206](https://redirect.github.com/pulumi/pulumi/pull/22206) - \[cli/policy] Auto-install missing policy analyzer plugins [#&#8203;22196](https://redirect.github.com/pulumi/pulumi/pull/22196) - \[sdk/python] Add lock file detection for picking the Python toolchain [#&#8203;22234](https://redirect.github.com/pulumi/pulumi/pull/22234) ##### Bug Fixes - \[cli] Use distinct exit codes for different types of error [#&#8203;22205](https://redirect.github.com/pulumi/pulumi/pull/22205) - \[cli] Improve SAML SSO reauthorization error message - \[engine] Fix snapshot integrity error in refresh v2 with changed parents [#&#8203;22190](https://redirect.github.com/pulumi/pulumi/pull/22190) - \[pcl] Continue running after errors when running with --continue-on-error [#&#8203;22171](https://redirect.github.com/pulumi/pulumi/pull/22171) - \[pcl] Deprecate labels on package blocks [#&#8203;22253](https://redirect.github.com/pulumi/pulumi/pull/22253) - \[programgen] Preserve traversal parts in rewriteRelativeTraversalExpression [#&#8203;22249](https://redirect.github.com/pulumi/pulumi/pull/22249) - \[sdk/bun] Check for an SDK version compatible with bun [#&#8203;22262](https://redirect.github.com/pulumi/pulumi/pull/22262) - \[programgen/nodejs] Correctly generate `for` expressions [#&#8203;22219](https://redirect.github.com/pulumi/pulumi/pull/22219) - \[sdk/go] Add support for Azure DevOps git URLs in pulumi package publish code paths [#&#8203;22217](https://redirect.github.com/pulumi/pulumi/pull/22217) - \[programgen/python] Correctly generate list & dictionary comprehension in Python code [#&#8203;22182](https://redirect.github.com/pulumi/pulumi/pull/22182) ##### Miscellaneous - \[backend] Move CloudConsoleURL from httpstate to httpstate/client [#&#8203;22258](https://redirect.github.com/pulumi/pulumi/pull/22258) - \[docs] Move remaining content from /developer-docs to /docs [#&#8203;22225](https://redirect.github.com/pulumi/pulumi/pull/22225) - \[sdk/bun] Add a test for the function serialization error message when using bun [#&#8203;22207](https://redirect.github.com/pulumi/pulumi/pull/22207) - \[sdk/bun] Run policy language tests for bun [#&#8203;22209](https://redirect.github.com/pulumi/pulumi/pull/22209) - \[sdk/bun] Mark pulumi-language-bun as a bundled plugin [#&#8203;22265](https://redirect.github.com/pulumi/pulumi/pull/22265) - \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and run-policy-pack [#&#8203;22210](https://redirect.github.com/pulumi/pulumi/pull/22210) </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.227.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.227.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0) ##### 3.227.0 (2026-03-19) ##### Features - \[engine] The engine will fill in Name and Type for ResourceReference values on the wire protocol [#&#8203;22208](https://redirect.github.com/pulumi/pulumi/pull/22208) - \[sdk/bun] Add support for running policy packs with bun [#&#8203;22206](https://redirect.github.com/pulumi/pulumi/pull/22206) - \[cli/policy] Auto-install missing policy analyzer plugins [#&#8203;22196](https://redirect.github.com/pulumi/pulumi/pull/22196) - \[sdk/python] Add lock file detection for picking the Python toolchain [#&#8203;22234](https://redirect.github.com/pulumi/pulumi/pull/22234) ##### Bug Fixes - \[cli] Use distinct exit codes for different types of error [#&#8203;22205](https://redirect.github.com/pulumi/pulumi/pull/22205) - \[cli] Improve SAML SSO reauthorization error message - \[engine] Fix snapshot integrity error in refresh v2 with changed parents [#&#8203;22190](https://redirect.github.com/pulumi/pulumi/pull/22190) - \[pcl] Continue running after errors when running with --continue-on-error [#&#8203;22171](https://redirect.github.com/pulumi/pulumi/pull/22171) - \[pcl] Deprecate labels on package blocks [#&#8203;22253](https://redirect.github.com/pulumi/pulumi/pull/22253) - \[programgen] Preserve traversal parts in rewriteRelativeTraversalExpression [#&#8203;22249](https://redirect.github.com/pulumi/pulumi/pull/22249) - \[sdk/bun] Check for an SDK version compatible with bun [#&#8203;22262](https://redirect.github.com/pulumi/pulumi/pull/22262) - \[programgen/nodejs] Correctly generate `for` expressions [#&#8203;22219](https://redirect.github.com/pulumi/pulumi/pull/22219) - \[sdk/go] Add support for Azure DevOps git URLs in pulumi package publish code paths [#&#8203;22217](https://redirect.github.com/pulumi/pulumi/pull/22217) - \[programgen/python] Correctly generate list & dictionary comprehension in Python code [#&#8203;22182](https://redirect.github.com/pulumi/pulumi/pull/22182) ##### Miscellaneous - \[backend] Move CloudConsoleURL from httpstate to httpstate/client [#&#8203;22258](https://redirect.github.com/pulumi/pulumi/pull/22258) - \[docs] Move remaining content from /developer-docs to /docs [#&#8203;22225](https://redirect.github.com/pulumi/pulumi/pull/22225) - \[sdk/bun] Add a test for the function serialization error message when using bun [#&#8203;22207](https://redirect.github.com/pulumi/pulumi/pull/22207) - \[sdk/bun] Run policy language tests for bun [#&#8203;22209](https://redirect.github.com/pulumi/pulumi/pull/22209) - \[sdk/bun] Mark pulumi-language-bun as a bundled plugin [#&#8203;22265](https://redirect.github.com/pulumi/pulumi/pull/22265) - \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and run-policy-pack [#&#8203;22210](https://redirect.github.com/pulumi/pulumi/pull/22210) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-19 22:21:40 +00:00
pulumi-renovate[bot]	a479383c41	Update module google.golang.org/grpc to v1.79.3 [SECURITY] (#800) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | indirect | patch | `v1.79.2` -> `v1.79.3` | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | indirect | minor | `v1.72.1` -> `v1.79.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3) ### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. **Who is impacted?** This affects gRPC-Go servers that meet both of the following criteria: 1. They use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`. 2. Their security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. ### Patches _Has the problem been patched? What versions should users upgrade to?_ Yes, the issue has been patched. The fix ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. Users should upgrade to the following versions (or newer): * **v1.79.3** * The latest **master** branch. It is recommended that all users employing path-based authorization (especially `grpc/authz`) upgrade as soon as the patch is available in a tagged release. ### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: #### 1. Use a Validating Interceptor (Recommended Mitigation) Add an "outermost" interceptor to your server that validates the path before any other authorization logic runs: ```go func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) { if info.FullMethod == "" || info.FullMethod[0] != '/' { return nil, status.Errorf(codes.Unimplemented, "malformed method name") } return handler(ctx, req) } // Ensure this is the FIRST interceptor in your chain s := grpc.NewServer( grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor), ) ``` #### 2. Infrastructure-Level Normalization If your gRPC server is behind a reverse proxy or load balancer (such as Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to enforce strict HTTP/2 compliance for pseudo-headers and reject or normalize requests where the `:path` header does not start with a leading slash. #### 3. Policy Hardening Switch to a "default deny" posture in your authorization policies (explicitly listing all allowed paths and denying everything else) to reduce the risk of bypasses via malformed inputs. --- ### Release Notes <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3): Release 1.79.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3) ### Security - server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like `grpc/authz`. Any request with a non-canonical path is now immediately rejected with an `Unimplemented` error. ([#&#8203;8981](https://redirect.github.com/grpc/grpc-go/issues/8981)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-19 05:12:33 +00:00
pulumi-renovate[bot]	23583bfdc8	Update module github.com/pulumi/pulumi-go-provider to v1.3.1 (#798) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider) | require | patch | `v1.3.0` -> `v1.3.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi-go-provider (github.com/pulumi/pulumi-go-provider)</summary> ### [`v1.3.1`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.1) [Compare Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1) #### What's Changed - Update module github.com/pulumi/pulumi/pkg/v3 to v3.226.0 by [@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-go-provider/pull/487](https://redirect.github.com/pulumi/pulumi-go-provider/pull/487)7 - Serialize Enum Names by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/488](https://redirect.github.com/pulumi/pulumi-go-provider/pull/488) - Allow annotating enums by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/489](https://redirect.github.com/pulumi/pulumi-go-provider/pull/489) **Full Changelog**: https://github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-03-17 15:59:50 +00:00
pulumi-renovate[bot]	c1ec48af0a	Update first-party Pulumi dependencies to v3.226.0 (#796) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.225.1` -> `3.226.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.225.1/3.226.0) | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.225.1` -> `v3.226.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.226.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32260-2026-03-11) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0) ##### Features - \[backend/service] Automatically repair snapshot integrity issues, while sending an error event to the backend for further diagnosis [#&#8203;22179](https://redirect.github.com/pulumi/pulumi/pull/22179) - \[cli] Add a --otel-traces flag, that allows writing otel traces to a file, or directly to a grpc interface [#&#8203;22129](https://redirect.github.com/pulumi/pulumi/pull/22129) - \[engine] Engine will use provider references from `__self__` arguments to calls [#&#8203;22114](https://redirect.github.com/pulumi/pulumi/pull/22114) - \[sdk/bun] Support bun as a runtime [#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177) [#&#8203;22049](https://redirect.github.com/pulumi/pulumi/pull/22049) - \[sdk/bun] Add debugger support for the bun runtime [#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177) - \[sdk/bun] Add support for Bun as a plugin runtime [#&#8203;22189](https://redirect.github.com/pulumi/pulumi/pull/22189) ##### Bug Fixes - \[engine] Fix ReplacementTrigger firing due to dependency changes [#&#8203;22119](https://redirect.github.com/pulumi/pulumi/pull/22119) - \[engine] Correctly serialize output values to the snapshot rather than always recording them as computed even when known [#&#8203;22120](https://redirect.github.com/pulumi/pulumi/pull/22120) - \[pcl] Support resource ranges in PCL [#&#8203;22144](https://redirect.github.com/pulumi/pulumi/pull/22144) - \[cli/config] Include environments used when refreshing a stack's config [#&#8203;22103](https://redirect.github.com/pulumi/pulumi/pull/22103) - \[cli/display] Fix `pulumi destroy` not showing parent resource hierarchy [#&#8203;22148](https://redirect.github.com/pulumi/pulumi/pull/22148) - \[cli/package] Correctly parse package URLs with .git in them [#&#8203;22174](https://redirect.github.com/pulumi/pulumi/pull/22174) - \[cli/plugin] Fix package get-schema for binary providers at relative paths [#&#8203;22107](https://redirect.github.com/pulumi/pulumi/pull/22107) - \[sdk/python] Handle null detailedDiff in automation StepEventMetadata JSON parsing [#&#8203;22140](https://redirect.github.com/pulumi/pulumi/pull/22140) - \[cli/state] Fix state move integrity errors when copied providers depend on resources left in source stack [#&#8203;22141](https://redirect.github.com/pulumi/pulumi/pull/22141) ##### Miscellaneous - \[cli/about] Show bun information in `pulumi about` [#&#8203;22121](https://redirect.github.com/pulumi/pulumi/pull/22121) - \[programgen/go] Target go 1.25 for generated go.mod files (instead of go 1.23) [#&#8203;22070](https://redirect.github.com/pulumi/pulumi/pull/22070) - \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs (instead of go 1.20) [#&#8203;22131](https://redirect.github.com/pulumi/pulumi/pull/22131) - \[sdk/python] Read Poetry and uv lockfiles to determine program dependencies [#&#8203;22072](https://redirect.github.com/pulumi/pulumi/pull/22072) - \[sdk/python] Use importlib to find pulumi-plugin.json for installed packages [#&#8203;22127](https://redirect.github.com/pulumi/pulumi/pull/22127) </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.226.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.226.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0) #### 3.226.0 (2026-03-11) ##### Features - \[backend/service] Automatically repair snapshot integrity issues, while sending an error event to the backend for further diagnosis [#&#8203;22179](https://redirect.github.com/pulumi/pulumi/pull/22179) - \[cli] Add a --otel-traces flag, that allows writing otel traces to a file, or directly to a grpc interface [#&#8203;22129](https://redirect.github.com/pulumi/pulumi/pull/22129) - \[engine] Engine will use provider references from `__self__` arguments to calls [#&#8203;22114](https://redirect.github.com/pulumi/pulumi/pull/22114) - \[sdk/bun] Support bun as a runtime [#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177) [#&#8203;22049](https://redirect.github.com/pulumi/pulumi/pull/22049) - \[sdk/bun] Add debugger support for the bun runtime [#&#8203;22177](https://redirect.github.com/pulumi/pulumi/pull/22177) - \[sdk/bun] Add support for Bun as a plugin runtime [#&#8203;22189](https://redirect.github.com/pulumi/pulumi/pull/22189) ##### Bug Fixes - \[engine] Fix ReplacementTrigger firing due to dependency changes [#&#8203;22119](https://redirect.github.com/pulumi/pulumi/pull/22119) - \[engine] Correctly serialize output values to the snapshot rather than always recording them as computed even when known [#&#8203;22120](https://redirect.github.com/pulumi/pulumi/pull/22120) - \[pcl] Support resource ranges in PCL [#&#8203;22144](https://redirect.github.com/pulumi/pulumi/pull/22144) - \[cli/config] Include environments used when refreshing a stack's config [#&#8203;22103](https://redirect.github.com/pulumi/pulumi/pull/22103) - \[cli/display] Fix `pulumi destroy` not showing parent resource hierarchy [#&#8203;22148](https://redirect.github.com/pulumi/pulumi/pull/22148) - \[cli/package] Correctly parse package URLs with .git in them [#&#8203;22174](https://redirect.github.com/pulumi/pulumi/pull/22174) - \[cli/plugin] Fix package get-schema for binary providers at relative paths [#&#8203;22107](https://redirect.github.com/pulumi/pulumi/pull/22107) - \[sdk/python] Handle null detailedDiff in automation StepEventMetadata JSON parsing [#&#8203;22140](https://redirect.github.com/pulumi/pulumi/pull/22140) - \[cli/state] Fix state move integrity errors when copied providers depend on resources left in source stack [#&#8203;22141](https://redirect.github.com/pulumi/pulumi/pull/22141) ##### Miscellaneous - \[cli/about] Show bun information in `pulumi about` [#&#8203;22121](https://redirect.github.com/pulumi/pulumi/pull/22121) - \[programgen/go] Target go 1.25 for generated go.mod files (instead of go 1.23) [#&#8203;22070](https://redirect.github.com/pulumi/pulumi/pull/22070) - \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs (instead of go 1.20) [#&#8203;22131](https://redirect.github.com/pulumi/pulumi/pull/22131) - \[sdk/python] Read Poetry and uv lockfiles to determine program dependencies [#&#8203;22072](https://redirect.github.com/pulumi/pulumi/pull/22072) - \[sdk/python] Use importlib to find pulumi-plugin.json for installed packages [#&#8203;22127](https://redirect.github.com/pulumi/pulumi/pull/22127) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-13 16:28:43 +00:00
pulumi-renovate[bot]	20b453c00b	Update module github.com/pulumi/esc to v0.23.0 (#795) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) | indirect | minor | `v0.22.0` -> `v0.23.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pulumi/esc (github.com/pulumi/esc)</summary> ### [`v0.23.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.23.0) [Compare Source](https://redirect.github.com/pulumi/esc/compare/v0.22.0...v0.23.0) ##### Improvements - Add warning in CLI when using an ambiguous 2-part environment ref [#&#8203;622](https://redirect.github.com/pulumi/esc/pull/622) - Add support for `fn::final` built-in function that marks values as final and unable to be overwritten. [#&#8203;621](https://redirect.github.com/pulumi/esc/pull/621) ##### Bug Fixes ##### Breaking changes </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-12 20:38:53 +00:00
pulumi-renovate[bot]	a8af1bfb5d	Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.102.0 (#792) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | minor | `v3.101.2` -> `v3.102.0` | --- ### Release Notes <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.102.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31020---2026-03-11) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.101.2...v3.102.0) ##### Improvements - \[runtime] Support 'secret' in pcl config blocks [#&#8203;897](https://redirect.github.com/pulumi/pulumi-dotnet/pull/897) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-03-12 04:43:00 +00:00
pulumi-renovate[bot]	158160e33c	Update module github.com/pulumi/pulumi-java/pkg to v1.21.3 (#791) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java) | require | patch | `v1.21.2` -> `v1.21.3` | --- ### Release Notes <details> <summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java/pkg)</summary> ### [`v1.21.3`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1213---2026-03-11) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.2...v1.21.3) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-03-11 22:59:16 +00:00
pulumi-renovate[bot]	76a990fcb2	Update module github.com/pulumi/pulumi/pkg/v3 to v3.225.1 (#788) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.225.0` -> `v3.225.1` | --- ### Release Notes <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.225.1`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.1) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.0...v3.225.1) #### 3.225.1 (2026-03-05) ##### Bug Fixes - \[engine] Fix inheritence of default providers across resources of different packages [#&#8203;22101](https://redirect.github.com/pulumi/pulumi/pull/22101) - \[programgen/go] Fix panic on digit-prefixed schema properties in Go code generation [#&#8203;21917](https://redirect.github.com/pulumi/pulumi/pull/21917) - \[programgen/go] Fix plain values not always being lifted to input/output values when needed [#&#8203;22084](https://redirect.github.com/pulumi/pulumi/pull/22084) - \[programgen/python] Fix generation of `entries` and `lookup` calls [#&#8203;22086](https://redirect.github.com/pulumi/pulumi/pull/22086) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-06 08:17:59 +00:00
pulumi-renovate[bot]	38664fbc57	Update first-party Pulumi dependencies to v3.225.0 (#784) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.224.0` -> `3.225.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.224.0/3.225.0) | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.224.0` -> `v3.225.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.225.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.224.0...v3.225.0) ##### 3.225.0 (2026-03-04) ##### Features - \[engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets [#&#8203;21959](https://redirect.github.com/pulumi/pulumi/pull/21959) - \[engine] The engine now handles the inheritance of the `provider` option in resource registrations [#&#8203;21999](https://redirect.github.com/pulumi/pulumi/pull/21999) - \[engine] Enable journaling by default. It can still be turned off using the PULUMI_DISABLE_JOURNALING env variable [#&#8203;22041](https://redirect.github.com/pulumi/pulumi/pull/22041) - \[programgen] PCL can now express config values should be read as secrets [#&#8203;22066](https://redirect.github.com/pulumi/pulumi/pull/22066) - \[yaml] Update yaml to v1.30.0 - \[cli/engine] Add a flag for automatically opening a Neo task on preview/up failure [#&#8203;21960](https://redirect.github.com/pulumi/pulumi/pull/21960) - \[cli/package] Support source-based packages in `pulumi schema check`, not just schema files [#&#8203;21897](https://redirect.github.com/pulumi/pulumi/pull/21897) ##### Bug Fixes - \[cli] Fix `stack import` panicking when importing a service stack into a DIY backend [#&#8203;22076](https://redirect.github.com/pulumi/pulumi/pull/22076) - \[engine] Fix panic when a new component resource in the program is not targeted [#&#8203;21957](https://redirect.github.com/pulumi/pulumi/pull/21957) - \[sdk/nodejs] Implement GetProgramDependencies for bun and pnpm [#&#8203;22065](https://redirect.github.com/pulumi/pulumi/pull/22065) ##### Miscellaneous - \[cli] Build language plugins with the grpcnotrace tag to reduce the binary size [#&#8203;22012](https://redirect.github.com/pulumi/pulumi/pull/22012) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-03-05 12:51:45 +00:00
pulumi-renovate[bot]	8befdfed62	Update module github.com/pulumi/pulumi/pkg/v3 to v3.224.0 (#780) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.223.0` -> `v3.224.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.224.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.224.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.223.0...v3.224.0) ##### 3.224.0 (2026-02-26) ##### Features - \[backend/diy] Add zstd compression option for DIY backend state files [#&#8203;21877](https://redirect.github.com/pulumi/pulumi/pull/21877) - \[engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets - \[cli/package] Support source-based packages in `pulumi schema check`, not just schema files [#&#8203;21897](https://redirect.github.com/pulumi/pulumi/pull/21897) ##### Bug Fixes - \[pkg] Correct the schema for "pulumi:pulumi:StackReference" [#&#8203;21895](https://redirect.github.com/pulumi/pulumi/pull/21895) - \[programgen/nodejs] Correct the semantics of singleOrNone in generated files [#&#8203;21947](https://redirect.github.com/pulumi/pulumi/pull/21947) - \[sdk/python] Fix `StepEventMetadata.from_json` reading `detailed_diff` (snake_case) instead of `detailedDiff` (camelCase), and `PolicyEvent.from_json` reading `resource_urn` instead of `resourceUrn`, causing both fields to always be `None` [#&#8203;21714](https://redirect.github.com/pulumi/pulumi/pull/21714) - \[sdk/python] Convert integer component inputs to `int` [#&#8203;21944](https://redirect.github.com/pulumi/pulumi/pull/21944) - \[sdk/python] Fix crash in forked processes using automation API [#&#8203;21937](https://redirect.github.com/pulumi/pulumi/pull/21937) - \[engine] Fix panic when a new component resource in the program is not targeted [#&#8203;21957](https://redirect.github.com/pulumi/pulumi/pull/21957) ##### Miscellaneous - \[sdk] Update java, dotnet & yaml [#&#8203;21961](https://redirect.github.com/pulumi/pulumi/pull/21961) - \[sdk/python] Improve the performance of `contains_unknowns` for large objects [#&#8203;21893](https://redirect.github.com/pulumi/pulumi/pull/21893) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-02-27 12:43:28 +00:00
pulumi-renovate[bot]	1e0f067064	Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (#776) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/cloudflare/circl](https://redirect.github.com/cloudflare/circl) | indirect | patch | `v1.6.1` -> `v1.6.3` | ### GitHub Vulnerability Alerts #### [CVE-2026-1229](https://redirect.github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x) The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in **[v1.6.3](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3)**. --- ### Release Notes <details> <summary>cloudflare/circl (github.com/cloudflare/circl)</summary> ### [`v1.6.3`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3): CIRCL v1.6.3 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.2...v1.6.3) ##### CIRCL v1.6.3 Fix a bug on ecc/p384 scalar multiplication. ##### What's Changed - sign/mldsa: Check opts for nil value by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/582](https://redirect.github.com/cloudflare/circl/pull/582) - ecc/p384: Point addition must handle point doubling case. by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/583](https://redirect.github.com/cloudflare/circl/pull/583) - Release CIRCL v1.6.3 by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/584](https://redirect.github.com/cloudflare/circl/pull/584) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3 ### [`v1.6.2`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.2): CIRCL v1.6.2 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.1...v1.6.2) ##### CIRCL v1.6.2 - New SLH-DSA, improvements in ML-DSA for arm64. - Tested compilation on WASM. ##### What's Changed - Optimize pairing product computation by moving exponentiations to G1. by [@&#8203;dfaranha](https://redirect.github.com/dfaranha) in [https://github.com/cloudflare/circl/pull/547](https://redirect.github.com/cloudflare/circl/pull/547) - sign: Adding SLH-DSA signature by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/512](https://redirect.github.com/cloudflare/circl/pull/512) - Update code generators to CIRCL v1.6.1. by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/548](https://redirect.github.com/cloudflare/circl/pull/548) - ML-DSA: Add preliminary Wycheproof test vectors by [@&#8203;bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/552](https://redirect.github.com/cloudflare/circl/pull/552) - go fmt by [@&#8203;bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/554](https://redirect.github.com/cloudflare/circl/pull/554) - gz-compressing test vectors, use of HexBytes and ReadGzip functions. by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/555](https://redirect.github.com/cloudflare/circl/pull/555) - group: Removes use of elliptic Marshal and Unmarshal functions. by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/556](https://redirect.github.com/cloudflare/circl/pull/556) - Support encoding/decoding ML-DSA private keys (as long as they contain seeds) by [@&#8203;bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/559](https://redirect.github.com/cloudflare/circl/pull/559) - Update to golangci-lint v2 by [@&#8203;bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/560](https://redirect.github.com/cloudflare/circl/pull/560) - Preparation for ARM64 Implementation of poly operations for dilithium package. by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/562](https://redirect.github.com/cloudflare/circl/pull/562) - prepare power2Round for custom implementations in assembly by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/564](https://redirect.github.com/cloudflare/circl/pull/564) - ARM64 implementation for poly.PackLe16 by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/563](https://redirect.github.com/cloudflare/circl/pull/563) - add arm64 version of polyMulBy2toD by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/565](https://redirect.github.com/cloudflare/circl/pull/565) - add arm64 version of polySub by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/566](https://redirect.github.com/cloudflare/circl/pull/566) - group: add byteLen method for short groups and RandomScalar uses rand.Int by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/568](https://redirect.github.com/cloudflare/circl/pull/568) - add arm64 version of poly.Add/Sub by [@&#8203;elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/572](https://redirect.github.com/cloudflare/circl/pull/572) - group: Adding cryptobyte marshaling to scalars by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/569](https://redirect.github.com/cloudflare/circl/pull/569) - Bumping up to Go1.25 by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/574](https://redirect.github.com/cloudflare/circl/pull/574) - ci: Including WASM compilation. by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/577](https://redirect.github.com/cloudflare/circl/pull/577) - Revert to using package-declared HPKE errors for shortkem instead of standard library errors by [@&#8203;harshiniwho](https://redirect.github.com/harshiniwho) in [https://github.com/cloudflare/circl/pull/578](https://redirect.github.com/cloudflare/circl/pull/578) - Release v1.6.2 by [@&#8203;armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/579](https://redirect.github.com/cloudflare/circl/pull/579) ##### New Contributors - [@&#8203;dfaranha](https://redirect.github.com/dfaranha) made their first contribution in [https://github.com/cloudflare/circl/pull/547](https://redirect.github.com/cloudflare/circl/pull/547) - [@&#8203;elementrics](https://redirect.github.com/elementrics) made their first contribution in [https://github.com/cloudflare/circl/pull/562](https://redirect.github.com/cloudflare/circl/pull/562) - [@&#8203;harshiniwho](https://redirect.github.com/harshiniwho) made their first contribution in [https://github.com/cloudflare/circl/pull/578](https://redirect.github.com/cloudflare/circl/pull/578) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-02-26 21:42:18 +00:00
pulumi-renovate[bot]	52f09191a7	Update first-party Pulumi dependencies (#769) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.221.0` -> `3.224.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.221.0/3.224.0) | | [github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build) | require | patch | `v0.0.12` -> `v0.0.15` | | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | patch | `v3.101.0` -> `v3.101.2` | | [github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java) | require | minor | `v1.16.0` -> `v1.21.2` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.220.0` -> `v3.223.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.224.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.224.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.223.0...v3.224.0) ##### 3.224.0 (2026-02-26) ##### Features - \[backend/diy] Add zstd compression option for DIY backend state files [#&#8203;21877](https://redirect.github.com/pulumi/pulumi/pull/21877) - \[engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets - \[cli/package] Support source-based packages in `pulumi schema check`, not just schema files [#&#8203;21897](https://redirect.github.com/pulumi/pulumi/pull/21897) ##### Bug Fixes - \[pkg] Correct the schema for "pulumi:pulumi:StackReference" [#&#8203;21895](https://redirect.github.com/pulumi/pulumi/pull/21895) - \[programgen/nodejs] Correct the semantics of singleOrNone in generated files [#&#8203;21947](https://redirect.github.com/pulumi/pulumi/pull/21947) - \[sdk/python] Fix `StepEventMetadata.from_json` reading `detailed_diff` (snake_case) instead of `detailedDiff` (camelCase), and `PolicyEvent.from_json` reading `resource_urn` instead of `resourceUrn`, causing both fields to always be `None` [#&#8203;21714](https://redirect.github.com/pulumi/pulumi/pull/21714) - \[sdk/python] Convert integer component inputs to `int` [#&#8203;21944](https://redirect.github.com/pulumi/pulumi/pull/21944) - \[sdk/python] Fix crash in forked processes using automation API [#&#8203;21937](https://redirect.github.com/pulumi/pulumi/pull/21937) - \[engine] Fix panic when a new component resource in the program is not targeted [#&#8203;21957](https://redirect.github.com/pulumi/pulumi/pull/21957) ##### Miscellaneous - \[sdk] Update java, dotnet & yaml [#&#8203;21961](https://redirect.github.com/pulumi/pulumi/pull/21961) - \[sdk/python] Improve the performance of `contains_unknowns` for large objects [#&#8203;21893](https://redirect.github.com/pulumi/pulumi/pull/21893) ### [`v3.223.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32230-2026-02-19) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.222.0...v3.223.0) ##### Bug Fixes - \[engine] Report policy pack installation errors [#&#8203;21882](https://redirect.github.com/pulumi/pulumi/pull/21882) ### [`v3.222.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32220-2026-02-18) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.221.0...v3.222.0) ##### Features - \[programgen/go] Generate Call requests [#&#8203;21836](https://redirect.github.com/pulumi/pulumi/pull/21836) ##### Bug Fixes - \[sdk/{nodejs,python}] Fix hang when loading policy packs that use v1.18.1 or older of the policy SDK [#&#8203;21866](https://redirect.github.com/pulumi/pulumi/pull/21866) </details> <details> <summary>pulumi/pulumi-docker-build (github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary> ### [`v0.0.15`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.14...v0.0.15) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.14...v0.0.15) ### [`v0.0.14`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.13...v0.0.14) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.13...v0.0.14) ### [`v0.0.13`](https://redirect.github.com/pulumi/pulumi-docker-build/releases/tag/v0.0.13) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.12...v0.0.13) #### What's Changed - Improve exec error messages by [@&#8203;blampe](https://redirect.github.com/blampe) in [https://github.com/pulumi/pulumi-docker-build/pull/553](https://redirect.github.com/pulumi/pulumi-docker-build/pull/553) - Update p-go-provider to fix version replacement behavior by [@&#8203;blampe](https://redirect.github.com/blampe) in [https://github.com/pulumi/pulumi-docker-build/pull/584](https://redirect.github.com/pulumi/pulumi-docker-build/pull/584) **Full Changelog**: https://github.com/pulumi/pulumi-docker-build/compare/v0.0.12...v0.0.13 </details> <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.101.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31012---2026-02-25) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.101.0...v3.101.2) </details> <details> <summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java/pkg)</summary> ### [`v1.21.2`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1212---2026-02-25) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.1...v1.21.2) ### [`v1.21.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1211---2026-02-25) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.0...v1.21.1) ##### Bug Fixes - \[runtime] Fix `unknown provider package` error in automation API and correctly propagate errors from inline programs. [#&#8203;2029](https://redirect.github.com/pulumi/pulumi-java/pull/2029) ### [`v1.21.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1210---2026-01-28) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.20.0...v1.21.0) ##### Improvements - \[sdk] Add Deployment.requirePulumiVersion [#&#8203;1979](https://redirect.github.com/pulumi/pulumi-java/pull/1979) - \[codegen] Implement alias resource options generation [#&#8203;1982](https://redirect.github.com/pulumi/pulumi-java/pull/1982) ##### Bug Fixes - \[codegen] Use config.require in codegen when there is no default value [#&#8203;1983](https://redirect.github.com/pulumi/pulumi-java/pull/1983) ### [`v1.20.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1200---2025-12-29) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.19.0...v1.20.0) ##### Improvements - \[sdk] Add support for the `replacementTrigger` resource option [#&#8203;1958](https://redirect.github.com/pulumi/pulumi-java/pull/1958) ### [`v1.19.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1190---2025-12-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.18.0...v1.19.0) ##### Improvements - \[codegen] Add .gitattributes file to generated SDKs [#&#8203;1949](https://redirect.github.com/pulumi/pulumi-java/pull/1949) ##### Bug Fixes - \[language] Stop parsing runtime options at startup [#&#8203;1947](https://redirect.github.com/pulumi/pulumi-java/pull/1947) ### [`v1.18.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1180---2025-12-03) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.17.1...v1.18.0) ##### Improvements - \[sdk] Add `ReplaceWith` as a resource option ### [`v1.17.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1171---2025-11-26) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.17.0...v1.17.1) ##### Improvements - \[sdk] Dependency bumps ### [`v1.17.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1170---2025-11-12) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.3...v1.17.0) ##### Improvements - \[sdk] Get the event log in the automation API over gRPC, instead of through a text file ### [`v1.16.3`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1163---2025-11-05) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.2...v1.16.3) ##### Improvements - \[sdk] Update pulumi pkg & sdk to 3.205.0 - \[runtime] Implement `Language.Link` ### [`v1.16.2`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1162---2025-10-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.1...v1.16.2) ##### Bug Fixes - \[sdk] Add `hideDiffs` as a new resource option. See details ### [`v1.16.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1161---2025-07-31) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.0...v1.16.1) ##### Bug Fixes - \[codegen] Fix generated 'plan' argument of 'preview' command </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-02-26 21:24:50 +00:00
pulumi-renovate[bot]	13acd934b6	Update first-party Pulumi dependencies (#760) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) | indirect | minor | `v0.21.0` -> `v0.22.0` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.219.0` -> `v3.220.0` | --- ### Release Notes <details> <summary>pulumi/esc (github.com/pulumi/esc)</summary> ### [`v0.22.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.22.0) [Compare Source](https://redirect.github.com/pulumi/esc/compare/v0.21.0...v0.22.0) ##### Improvements ##### Bug Fixes ##### Breaking changes </details> <details> <summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary> ### [`v3.220.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.220.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0) ##### 3.220.0 (2026-02-10) ##### Features - \[cli] Show environment variables that were set if a snapshot integrity error happens [#&#8203;21709](https://redirect.github.com/pulumi/pulumi/pull/21709) - \[cli/{install,package}] Use the Pulumi Cloud Registry by default to resolve package names - \[engine] Pass replacement trigger through to Construct [#&#8203;21408](https://redirect.github.com/pulumi/pulumi/pull/21408) - \[engine] Add EnvVarMappings resource option for provider resources, allowing environment variables to be remapped before being passed to the provider [#&#8203;21572](https://redirect.github.com/pulumi/pulumi/pull/21572) - \[pkg] BREAKING: Deprecate github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This package will be removed from pulumi/pulumi soon! [#&#8203;21720](https://redirect.github.com/pulumi/pulumi/pull/21720) ##### Bug Fixes - \[cli] Retry `yarn install` when it fails (e.g. during `pulumi install`) [#&#8203;21707](https://redirect.github.com/pulumi/pulumi/pull/21707) - \[engine] Deal with errors in elided journal entries correctly [#&#8203;21576](https://redirect.github.com/pulumi/pulumi/pull/21576) - \[sdk/nodejs] Fix remote components with PULUMI_NODEJS_SKIP_COMPONENT_INPUTS - \[sdk/python] Fix `_LazyModule` to not trigger full module load for introspection attributes [#&#8203;21620](https://redirect.github.com/pulumi/pulumi/pull/21620) - \[sdkgen/python] Remove workaround for slow typechecking with MyPy and PyCharm [#&#8203;21722](https://redirect.github.com/pulumi/pulumi/pull/21722) ##### Miscellaneous - \[cli] Write logfile location if verbosity is >= 1 to stderr instead of stdout [#&#8203;21663](https://redirect.github.com/pulumi/pulumi/pull/21663) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com> Co-authored-by: Ian Wahbe <me@iwahbe.com>	2026-02-11 10:27:46 +00:00
pulumi-renovate[bot]	ca8a59a077	Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (#758) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | indirect | patch | `v5.16.0` -> `v5.16.5` | ### GitHub Vulnerability Alerts #### [CVE-2026-25934](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3) ### Impact A vulnerability was discovered in `go-git` whereby data integrity values for `.pack` and `.idx` files were not properly verified. This resulted in `go-git` potentially consuming corrupted files, which would likely result in unexpected errors such as `object not found`. For context, clients fetch [`packfiles`](https://git-scm.com/docs/pack-protocol#_packfile_data) from upstream Git servers. Those files contain a checksum of their contents, so that clients can perform integrity checks before consuming it. The pack indexes (`.idx`) are [generated](https://git-scm.com/docs/pack-format) locally by `go-git`, or the `git` cli, when new `.pack` files are received and processed. The integrity checks for both files were not being verified correctly. Note that the lack of verification of the packfile checksum has no impact on the trust relationship between the client and server, which is enforced based on the protocol being used (e.g. TLS in the case of `https://` or known hosts for `ssh://`). In other words, the packfile checksum verification does not provide any security benefits when connecting to a malicious or compromised Git server. ### Patches Users should upgrade to `v5.16.5`, or the latest `v6` [pseudo-version](https://go.dev/ref/mod#pseudo-versions), in order to mitigate this vulnerability. ### Workarounds In case updating to a fixed version of `go-git` is not possible, users can run [git fsck](https://git-scm.com/docs/git-fsck) from the `git` cli to check for data corruption on a given repository. ### Credit Thanks @&#8203;N0zoM1z0 for finding and reporting this issue privately to the `go-git` project. --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.16.5`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.5) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.16.4...v5.16.5) ##### What's Changed - build: Update module golang.org/x/crypto to v0.45.0 \[SECURITY] (releases/v5.x) by [@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in[https://github.com/go-git/go-git/pull/1744](https://redirect.github.com/go-git/go-git/pull/1744)4 - build: Bump Go test versions to 1.23-1.25 (v5) by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1746](https://redirect.github.com/go-git/go-git/pull/1746) - \[v5] git: worktree, Don't delete local untracked files when resetting worktree by [@&#8203;Ch00k](https://redirect.github.com/Ch00k) in [https://github.com/go-git/go-git/pull/1800](https://redirect.github.com/go-git/go-git/pull/1800) - Expand packfile checks by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1836](https://redirect.github.com/go-git/go-git/pull/1836) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5 ### [`v5.16.4`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.4) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.16.3...v5.16.4) ##### What's Changed - backport plumbing: format/idxfile, prevent panic by [@&#8203;swills](https://redirect.github.com/swills) in [https://github.com/go-git/go-git/pull/1732](https://redirect.github.com/go-git/go-git/pull/1732) - \[backport] build: test, Fix build on Windows. by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1734](https://redirect.github.com/go-git/go-git/pull/1734) - build: Update module golang.org/x/net to v0.38.0 \[SECURITY] (releases/v5.x) by [@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in[https://github.com/go-git/go-git/pull/1742](https://redirect.github.com/go-git/go-git/pull/1742)2 - build: Update module github.com/cloudflare/circl to v1.6.1 \[SECURITY] (releases/v5.x) by [@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in[https://github.com/go-git/go-git/pull/1741](https://redirect.github.com/go-git/go-git/pull/1741)1 - build: Update module github.com/go-git/go-git/v5 to v5.13.0 \[SECURITY] (releases/v5.x) by [@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in[https://github.com/go-git/go-git/pull/1743](https://redirect.github.com/go-git/go-git/pull/1743)3 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 ### [`v5.16.3`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.3) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.16.2...v5.16.3) ##### What's Changed - internal: Expand regex to fix build \[5.x] by [@&#8203;baloo](https://redirect.github.com/baloo) in [https://github.com/go-git/go-git/pull/1644](https://redirect.github.com/go-git/go-git/pull/1644) - build: raise timeouts for windows CI tests and disable CIFuzz \[5.x] by [@&#8203;baloo](https://redirect.github.com/baloo) in [https://github.com/go-git/go-git/pull/1646](https://redirect.github.com/go-git/go-git/pull/1646) - plumbing: support commits extra headers, support jujutsu signed commit \[5.x] by [@&#8203;baloo](https://redirect.github.com/baloo) in [https://github.com/go-git/go-git/pull/1633](https://redirect.github.com/go-git/go-git/pull/1633) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3 ### [`v5.16.2`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.2) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.16.1...v5.16.2) ##### What's Changed - utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by [@&#8203;kane8n](https://redirect.github.com/kane8n) in [https://github.com/go-git/go-git/pull/1567](https://redirect.github.com/go-git/go-git/pull/1567) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2 ### [`v5.16.1`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.1) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.16.0...v5.16.1) ##### What's Changed - utils: merkletrie, Fix diff on sparse-checkout index. Fixes [#&#8203;1406](https://redirect.github.com/go-git/go-git/issues/1406) to releases/v5.x by [@&#8203;kane8n](https://redirect.github.com/kane8n) in [https://github.com/go-git/go-git/pull/1561](https://redirect.github.com/go-git/go-git/pull/1561) ##### New Contributors - [@&#8203;kane8n](https://redirect.github.com/kane8n) made their first contribution in [https://github.com/go-git/go-git/pull/1561](https://redirect.github.com/go-git/go-git/pull/1561) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2026-02-10 00:50:46 +00:00
pulumi-renovate[bot]	491f7de7d5	Update module github.com/pulumi/pulumi-go-provider to v1.3.0 (#748) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider) | require | minor | `v1.1.2` -> `v1.3.0` | --- ### Release Notes <details> <summary>pulumi/pulumi-go-provider (github.com/pulumi/pulumi-go-provider)</summary> ### [`v1.3.0`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.2.0...v1.3.0) #### What's Changed - Don't set a default value for `"displayName"` or `"namespace`" by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/452](https://redirect.github.com/pulumi/pulumi-go-provider/pull/452) - Update module github.com/pulumi/pulumi/pkg/v3 to v3.217.0 by [@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] in[https://github.com/pulumi/pulumi-go-provider/pull/464](https://redirect.github.com/pulumi/pulumi-go-provider/pull/464)4 #### New Contributors - [@&#8203;pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot] made their first contribution in[https://github.com/pulumi/pulumi-go-provider/pull/427](https://redirect.github.com/pulumi/pulumi-go-provider/pull/427)7 - [@&#8203;Frassle](https://redirect.github.com/Frassle) made their first contribution in [https://github.com/pulumi/pulumi-go-provider/pull/455](https://redirect.github.com/pulumi/pulumi-go-provider/pull/455) **Full Changelog**: https://github.com/pulumi/pulumi-go-provider/compare/v1.2.0...v1.3.0 ### [`v1.2.0`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.2.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.1.2...v1.2.0) #### What's Changed - Add old inputs to the rpc passthrough (and the provider in general) by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/414](https://redirect.github.com/pulumi/pulumi-go-provider/pull/414) - Debug middleware/rpc by printing what the wrapped provider sees by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/415](https://redirect.github.com/pulumi/pulumi-go-provider/pull/415) - `rpc.Provider` correctly handles wrapping providers without preview support by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/416](https://redirect.github.com/pulumi/pulumi-go-provider/pull/416) - Add an example of property comments for component resources by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/411](https://redirect.github.com/pulumi/pulumi-go-provider/pull/411) - Use old inputs when calculating Diff for default infer by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/419](https://redirect.github.com/pulumi/pulumi-go-provider/pull/419) - \[infer] Prevent deserialization errors with CustomDiff for Config by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/420](https://redirect.github.com/pulumi/pulumi-go-provider/pull/420) - Fix `CustomDiff[*Config, *Config]` by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/421](https://redirect.github.com/pulumi/pulumi-go-provider/pull/421) - Fix `GetSchema` by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/422](https://redirect.github.com/pulumi/pulumi-go-provider/pull/422) - Correctly keep `DiffResponse`'s non-detailed diffs keys top-level by [@&#8203;iwahbe](https://redirect.github.com/iwahbe) in [https://github.com/pulumi/pulumi-go-provider/pull/417](https://redirect.github.com/pulumi/pulumi-go-provider/pull/417) #### New Contributors - [@&#8203;andrzejressel](https://redirect.github.com/andrzejressel) made their first contribution in [https://github.com/pulumi/pulumi-go-provider/pull/418](https://redirect.github.com/pulumi/pulumi-go-provider/pull/418) **Full Changelog**: https://github.com/pulumi/pulumi-go-provider/compare/v1.1.2...v1.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: Bryce Lampe <bryce@pulumi.com>	2026-02-06 20:48:41 +00:00
pulumi-renovate[bot]	d0bb326600	Update module github.com/pulumi/providertest to v0.6.0 (#749) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest) | require | minor | `v0.5.1-0.20251217173405-3861778549dd` -> `v0.6.0` | --- ### Release Notes <details> <summary>pulumi/providertest (github.com/pulumi/providertest)</summary> ### [`v0.6.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.6.0) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.5.1...v0.6.0) ##### What's Changed - feat: Add local python SDK replacement option via pip by [@&#8203;rshade](https://redirect.github.com/rshade) in [https://github.com/pulumi/providertest/pull/150](https://redirect.github.com/pulumi/providertest/pull/150) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.5.1...v0.6.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2026-01-29 19:33:01 +00:00
pulumi-provider-automation[bot]	c64d5baba6	Update GitHub Actions workflows. (#716) ... This PR was automatically generated by the update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt repo, from commit 02f02bb0bfe879d167ed8f335b4950208454bafb. --------- Co-authored-by: Pulumi Bot <bot@pulumi.com> Co-authored-by: Bryce Lampe <bryce@pulumi.com>	2025-12-17 18:20:54 +00:00
pulumi-renovate[bot]	d5d676f8ec	Update first-party Pulumi dependencies (#558) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.184.0` -> `3.208.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.184.0/3.208.0) | | [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) | indirect | minor | `v0.17.0` -> `v0.20.0` | | [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) | action | minor | `v1.4.0` -> `v1.5.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.208.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.208.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.207.0...v3.208.0) #### 3.208.0 (2025-11-20) ##### Features - \[cli] Expose all command flags as env vars (e.g. --refresh can now be set with PULUMI_OPTION_REFRESH) [#&#8203;20868](https://redirect.github.com/pulumi/pulumi/pull/20868) - \[cli/install] Make `pulumi install` recurse into local packages [#&#8203;20945](https://redirect.github.com/pulumi/pulumi/pull/20945) - \[engine] Add a `replacement_trigger` resource option. Any change to this value between program runs will trigger a replace of the resource [#&#8203;20936](https://redirect.github.com/pulumi/pulumi/pull/20936) - \[engine] Add a new builtin `Stash` resource which can be used to save a value to state [#&#8203;20819](https://redirect.github.com/pulumi/pulumi/pull/20819) - \[protobuf] Add `Language.Template` RPC to protos [#&#8203;20948](https://redirect.github.com/pulumi/pulumi/pull/20948) - \[sdk/go] Add support for `replacement_trigger` in the Go SDK [#&#8203;20937](https://redirect.github.com/pulumi/pulumi/pull/20937) ##### Bug Fixes - \[engine] Fix duplicate resource snapshot integrity issue with aliases [#&#8203;20926](https://redirect.github.com/pulumi/pulumi/pull/20926) - \[engine] Allow resources marked as `Delete` to be targeted, and take them into account for dependency calculation [#&#8203;20962](https://redirect.github.com/pulumi/pulumi/pull/20962) - \[engine] Fix a panic when previewing and import of a resource that wants to delete and then replace due to diffs [#&#8203;20997](https://redirect.github.com/pulumi/pulumi/pull/20997) - \[pkg] Include invalid property names in bind errors [#&#8203;20989](https://redirect.github.com/pulumi/pulumi/pull/20989) - \[sdk/python] Don’t raise when looking up a stack reference output that does not exist [#&#8203;20938](https://redirect.github.com/pulumi/pulumi/pull/20938) - \[sdkgen/python] Ensure resource args accept typeddicts when no language info is specified [#&#8203;20982](https://redirect.github.com/pulumi/pulumi/pull/20982) ##### Miscellaneous - \[cli] Document the \[template|url] argument in `pulumi up` command help text [#&#8203;20996](https://redirect.github.com/pulumi/pulumi/pull/20996) ### [`v3.207.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32070-2025-11-12) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.206.0...v3.207.0) ##### Features - \[cli] Log gRPC requests before invoking them in gRPC debug interceptor [#&#8203;20817](https://redirect.github.com/pulumi/pulumi/pull/20817) - \[engine] Add `ReplaceWith` resource option to allow one resource's replace operations to trigger another's [#&#8203;20693](https://redirect.github.com/pulumi/pulumi/pull/20693) - \[sdkgen/python] Allow all PEP440 version specifiers to be used ##### Bug Fixes - \[cli/import] Return errors when an import fails [#&#8203;20904](https://redirect.github.com/pulumi/pulumi/pull/20904) - \[engine] Fix parenting of resources in some cases in `refresh --run-program` [#&#8203;20894](https://redirect.github.com/pulumi/pulumi/pull/20894) - \[engine] Fix StackReference secrets performance [#&#8203;20908](https://redirect.github.com/pulumi/pulumi/pull/20908) - \[programgen] Do not panic when re-writing type-invalid PCL [#&#8203;20770](https://redirect.github.com/pulumi/pulumi/pull/20770) - \[sdk/go] Fix import path in instructions when linking a package in Go [#&#8203;20888](https://redirect.github.com/pulumi/pulumi/pull/20888) - \[sdk/nodejs] Fix closure serialization on Node.js v25.2.0 [#&#8203;20913](https://redirect.github.com/pulumi/pulumi/pull/20913) - \[sdk/{nodejs,python}] Avoid cancellations due to do slow processing of requests - \[sdk/python] Avoid cancellations due to do slow processing of requests in the callbacks server [#&#8203;20917](https://redirect.github.com/pulumi/pulumi/pull/20917) ##### Miscellaneous - \[engine] Stop sending ConfigPropertyMap as part of RunRequest [#&#8203;20887](https://redirect.github.com/pulumi/pulumi/pull/20887) ### [`v3.206.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32060-2025-11-05) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.205.0...v3.206.0) ##### Features - \[protobuf] Pass a `preview` flag to invokes so they can tell if they're being called during a preview [#&#8203;20827](https://redirect.github.com/pulumi/pulumi/pull/20827) - \[cli/about] Include PULUMI_\* environment variables in the `pulumi about` output [#&#8203;20855](https://redirect.github.com/pulumi/pulumi/pull/20855) - \[auto/go] Get event log over gRPC instead of trying to read it from a text file [#&#8203;20822](https://redirect.github.com/pulumi/pulumi/pull/20822) - \[auto/nodejs] Get event log over gRPC instead of trying to read it from a text file [#&#8203;20824](https://redirect.github.com/pulumi/pulumi/pull/20824) - \[auto/python] Get event log over gRPC instead of trying to read it from a text file [#&#8203;20833](https://redirect.github.com/pulumi/pulumi/pull/20833) - \[cli/engine] Add environment variable to add --refresh to preview,update,destroy [#&#8203;20797](https://redirect.github.com/pulumi/pulumi/pull/20797) - \[sdk/nodejs] Add PULUMI_NODEJS_SKIP_COMPONENT_INPUTS environment variable to skip the new feature of sending component inputs to the engine for diffing and state storage [#&#8203;20842](https://redirect.github.com/pulumi/pulumi/pull/20842) ##### Bug Fixes - \[engine] Fix duplicate resource snapshot integrity issue, when running `pulumi up --refresh --run-program` and when a resource `PendingReplacement` exists in the snapshot [#&#8203;20812](https://redirect.github.com/pulumi/pulumi/pull/20812) - \[engine] Support floating point NaN and Inf values in resource state [#&#8203;20843](https://redirect.github.com/pulumi/pulumi/pull/20843) ##### Miscellaneous - \[sdk/go] Use Language.Link to link Go packages [#&#8203;20811](https://redirect.github.com/pulumi/pulumi/pull/20811) ### [`v3.205.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32050-2025-10-28) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.204.0...v3.205.0) ##### Bug Fixes - \[cli/display] Improve how the severity is displayed for policy violations [#&#8203;20805](https://redirect.github.com/pulumi/pulumi/pull/20805) - \[engine] Fix an issue where `refresh --run-program` could potentially run forever [#&#8203;20781](https://redirect.github.com/pulumi/pulumi/pull/20781) ### [`v3.204.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32040-2025-10-23) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.203.0...v3.204.0) ##### Features - \[cli] Print replace diffs when a resource tries to replace but is blocked by still having an import id set [#&#8203;20762](https://redirect.github.com/pulumi/pulumi/pull/20762) - \[engine] Support overriding policy severity on violations [#&#8203;20767](https://redirect.github.com/pulumi/pulumi/pull/20767) - \[backend/service] Send journal entries to the backend if it's supported [#&#8203;20343](https://redirect.github.com/pulumi/pulumi/pull/20343) ##### Bug Fixes - \[engine] Fix a potential snapshot integrity error when a resources dependency fails to be destroyed using `destroy --run-program` [#&#8203;20692](https://redirect.github.com/pulumi/pulumi/pull/20692) - \[engine] Fix import error to contain the import ID of non-existent resources [#&#8203;20753](https://redirect.github.com/pulumi/pulumi/pull/20753) - \[sdk/nodejs] Pass secret values as Output objects to resource hooks to properly maintain their secretness. Previously hooks received an internal representation for secret values. [#&#8203;20774](https://redirect.github.com/pulumi/pulumi/pull/20774) - \[sdk/python] Pass secret values as Output objects to resource hooks to properly maintain their secretness. Previously hooks received an internal representation for secret values. [#&#8203;20769](https://redirect.github.com/pulumi/pulumi/pull/20769) - \[sdkgen/go] Fix codegen of scalar return SDK functions [#&#8203;20754](https://redirect.github.com/pulumi/pulumi/pull/20754) - \[sdkgen/{nodejs,python}] Fix scalar return protocol to allow returning secret maps [#&#8203;20747](https://redirect.github.com/pulumi/pulumi/pull/20747) ##### Miscellaneous - \[sdk/nodejs] Use Language.Link to link Node.js packages [#&#8203;20715](https://redirect.github.com/pulumi/pulumi/pull/20715) ### [`v3.203.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32030-2025-10-15) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.202.0...v3.203.0) ##### Features - \[cli/display] Display policy severity for violations [#&#8203;20746](https://redirect.github.com/pulumi/pulumi/pull/20746) - \[cli/package] Show functions in `package info` [#&#8203;20733](https://redirect.github.com/pulumi/pulumi/pull/20733) ##### Bug Fixes - \[engine] Make sure errors from the journaler are not shown to the user [#&#8203;20740](https://redirect.github.com/pulumi/pulumi/pull/20740) - \[backend/diy] Fix casing of stack/latest when importing stacks [#&#8203;20727](https://redirect.github.com/pulumi/pulumi/pull/20727) - \[cli/package] Fix 'required' flag for resource inputs in `package info` [#&#8203;20731](https://redirect.github.com/pulumi/pulumi/pull/20731) - \[programgen] Revert [#&#8203;20345](https://redirect.github.com/pulumi/pulumi/issues/20345) [#&#8203;20714](https://redirect.github.com/pulumi/pulumi/pull/20714) - \[programgen/{dotnet,nodejs}] Propagate local dependencies for parameterized packages during convert down to GenerateProject [#&#8203;20706](https://redirect.github.com/pulumi/pulumi/pull/20706) - \[sdkgen/python] Fix python invokes for functions returning map types [#&#8203;20719](https://redirect.github.com/pulumi/pulumi/pull/20719) ##### Miscellaneous - \[sdk/python] Use Language.Link to link python packages [#&#8203;20612](https://redirect.github.com/pulumi/pulumi/pull/20612) ### [`v3.202.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32020-2025-10-10) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.201.0...v3.202.0) ##### Features - \[auto] Add SetAllConfigJson method to automation APIs [#&#8203;20709](https://redirect.github.com/pulumi/pulumi/pull/20709) - \[cli/config] Add `--json` input support to `pulumi config set-all` [#&#8203;19427](https://redirect.github.com/pulumi/pulumi/pull/19427) - \[cli/display] Add error summary at the end of Resource changes [#&#8203;20658](https://redirect.github.com/pulumi/pulumi/pull/20658) - \[components/{go,nodejs}] Send component inputs to be saved in state. This brings NodeJS and Go inline with Python behaviour [#&#8203;20357](https://redirect.github.com/pulumi/pulumi/pull/20357) - \[sdk/python] Add support for Python 3.14 [#&#8203;20433](https://redirect.github.com/pulumi/pulumi/pull/20433) - \[sdk/python] Add the `hide_diffs` resource option [#&#8203;20655](https://redirect.github.com/pulumi/pulumi/pull/20655) ##### Bug Fixes - \[engine] Fix assert when a resource that's not targeted on a destroy is marked as Delete [#&#8203;20684](https://redirect.github.com/pulumi/pulumi/pull/20684) - \[sdk/nodejs] Allow compiled local SDKs to be parameterized [#&#8203;20685](https://redirect.github.com/pulumi/pulumi/pull/20685) - \[sdk/nodejs] Handle RangeErrors from util.inspect stringifying error objects [#&#8203;20705](https://redirect.github.com/pulumi/pulumi/pull/20705) ### [`v3.201.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32010-2025-10-06) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.200.0...v3.201.0) ##### Features - \[sdkgen/go] Support non-object return types in functions [#&#8203;20646](https://redirect.github.com/pulumi/pulumi/pull/20646) ##### Bug Fixes - \[backend/service] Fix the --insecure flag in `pulumi login` ### [`v3.200.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32000-2025-10-03) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.199.0...v3.200.0) ##### Features - \[cli] Look for .cmd and .ps1 extensions as well on Windows when looking for executables [#&#8203;20637](https://redirect.github.com/pulumi/pulumi/pull/20637) - \[sdk/go] Add a new resource option: `HideDiffs` [#&#8203;20631](https://redirect.github.com/pulumi/pulumi/pull/20631) - \[sdk/nodejs] Add a new resource option: `hideDiffs` [#&#8203;20631](https://redirect.github.com/pulumi/pulumi/pull/20631) - \[sdkgen/python] Support non-object return types in functions [#&#8203;20624](https://redirect.github.com/pulumi/pulumi/pull/20624) ##### Bug Fixes - \[build] Use ruff to auto fix lints in python [#&#8203;20644](https://redirect.github.com/pulumi/pulumi/pull/20644) - \[sdk/nodejs] Make new arguments to `initialize` optional [#&#8203;20650](https://redirect.github.com/pulumi/pulumi/pull/20650) - \[sdkgen/nodejs] Generate a .gitignore file inside local SDKs [#&#8203;20643](https://redirect.github.com/pulumi/pulumi/pull/20643) - \[cli/state] Treat providers that are marked as parents in a move as providers still instead of as regular resources [#&#8203;20639](https://redirect.github.com/pulumi/pulumi/pull/20639) - \[cli/state] Exclude root stack correctly when moving resources and when --include-parents is passed ### [`v3.199.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31990-2025-10-01) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.198.0...v3.199.0) ##### Features - \[cli/about] Add `pulumi about env` to help [#&#8203;20633](https://redirect.github.com/pulumi/pulumi/pull/20633) - \[cli/{about,new}] Add environment variables to override template repository settings. The new PULUMI_TEMPLATE_GIT_REPOSITORY, PULUMI_TEMPLATE_BRANCH, PULUMI_POLICY_TEMPLATE_GIT_REPOSITORY, and PULUMI_POLICY_TEMPLATE_BRANCH environment variables allow runtime customization of template sources [#&#8203;20615](https://redirect.github.com/pulumi/pulumi/pull/20615) - \[cli/{install,package}] Add support for package references in plugins [#&#8203;20524](https://redirect.github.com/pulumi/pulumi/pull/20524) - \[sdk/nodejs] Pass options, name, and type to ComponentResources initialize methods [#&#8203;20618](https://redirect.github.com/pulumi/pulumi/pull/20618) - \[cli/policy] Send vcs metadata when publishing policy packs [#&#8203;20528](https://redirect.github.com/pulumi/pulumi/pull/20528) ##### Bug Fixes - \[cli/display] Always send diag events to stderr in the diff display [#&#8203;20632](https://redirect.github.com/pulumi/pulumi/pull/20632) - \[components] Stop including auth info in plugin name [#&#8203;20620](https://redirect.github.com/pulumi/pulumi/pull/20620) - \[engine] Support the import option in resource transforms [#&#8203;20586](https://redirect.github.com/pulumi/pulumi/pull/20586) - \[programgen] Fix panic in parseProxyApply when encoutering warning diagnostics [#&#8203;20583](https://redirect.github.com/pulumi/pulumi/pull/20583) - \[sdk/nodejs] Don't attempt to serialise function values for resource inputs/outputs [#&#8203;20621](https://redirect.github.com/pulumi/pulumi/pull/20621) ### [`v3.198.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31980-2025-09-26) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.197.0...v3.198.0) ##### Features - \[engine] Expand snapshot integrity check for resources [#&#8203;20519](https://redirect.github.com/pulumi/pulumi/pull/20519) - \[sdk/go] Refactor Go policy SDK to have access to a pulumi Context object [#&#8203;20570](https://redirect.github.com/pulumi/pulumi/pull/20570) - \[sdk/python] Allow registered resources to be retrieved from the mock monitor for test assertions [#&#8203;20540](https://redirect.github.com/pulumi/pulumi/pull/20540) ##### Bug Fixes - \[engine] Fix snapshot integrity error with `run-program --refresh`, when a provider has a dependency that isn't being created [#&#8203;20541](https://redirect.github.com/pulumi/pulumi/pull/20541) - \[engine] Remove unneeded data from policy summary events [#&#8203;20589](https://redirect.github.com/pulumi/pulumi/pull/20589) - \[sdk] Fix plugin killing during cancellation [#&#8203;20543](https://redirect.github.com/pulumi/pulumi/pull/20543) - \[sdk/go] Fix \[Unm/M]arshalProperties to return nil when given nil [#&#8203;20544](https://redirect.github.com/pulumi/pulumi/pull/20544) ##### Miscellaneous - \[protobuf] Add loader_target to LanguageRuntime.LinkRequest [#&#8203;20552](https://redirect.github.com/pulumi/pulumi/pull/20552) - \[cli/package] Move InstallPackage from cmd/packagecmd to cmd/packages [#&#8203;20550](https://redirect.github.com/pulumi/pulumi/pull/20550) - \[cli/package] Move stdout/stderr IO out of GenSDK and LinkPackage [#&#8203;20546](https://redirect.github.com/pulumi/pulumi/pull/20546) - \[sdk] Move PluginSpec.Install to pkg/workspace.InstallPluginContent [#&#8203;20537](https://redirect.github.com/pulumi/pulumi/pull/20537) - \[sdk/yaml] Bump pulumi-yaml to 1.23.2 [#&#8203;20588](https://redirect.github.com/pulumi/pulumi/pull/20588) ### [`v3.197.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31970-2025-09-17) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.196.0...v3.197.0) ##### Features - \[cli] Send new policy fields when publishing a policy pack - \[sdk/dotnet] Update dotnet to v3.88 [#&#8203;20512](https://redirect.github.com/pulumi/pulumi/pull/20512) ##### Bug Fixes - \[engine] Fix a panic in preview, that could happen in some cases when default providers get updated [#&#8203;20511](https://redirect.github.com/pulumi/pulumi/pull/20511) - \[components/python] Fix parenting of python components [#&#8203;20508](https://redirect.github.com/pulumi/pulumi/pull/20508) - \[sdk/python] Fix hang when shutting down in certain error conditions [#&#8203;20484](https://redirect.github.com/pulumi/pulumi/pull/20484) - \[sdk/python] Fix license-files entry for python package [#&#8203;20506](https://redirect.github.com/pulumi/pulumi/pull/20506) ### [`v3.196.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31960-2025-09-12) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.195.0...v3.196.0) ##### Miscellaneous - \[sdk] Add policy summary events apitypes [#&#8203;20443](https://redirect.github.com/pulumi/pulumi/pull/20443) - \[sdk] Add new policy fields apitypes [#&#8203;20491](https://redirect.github.com/pulumi/pulumi/pull/20491) - \[protobuf] Add support for indicating "not applicable" policies [#&#8203;20492](https://redirect.github.com/pulumi/pulumi/pull/20492) - \[protobuf] Add new analyzer policy fields [#&#8203;20494](https://redirect.github.com/pulumi/pulumi/pull/20494) ### [`v3.195.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31950-2025-09-10) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.194.0...v3.195.0) ##### Features - \[engine] Add support for capturing program stack traces as part of resource registration [#&#8203;20430](https://redirect.github.com/pulumi/pulumi/pull/20430) - \[sdk/go] Registered resources can now be retrieved from the mock monitor for test assertions [#&#8203;20472](https://redirect.github.com/pulumi/pulumi/pull/20472) - \[sdk/go] The current exports map is now available for unit testing through `GetCurrentExportMap` [#&#8203;20471](https://redirect.github.com/pulumi/pulumi/pull/20471) ##### Bug Fixes - \[pkg/go] Fix an issue where v3.194.0 of the `github.com/pulumi/pulumi/pkg/v3` module depends on APIs from `github.com/pulumi/pulumi/sdk/v3` that haven't been released [#&#8203;20487](https://redirect.github.com/pulumi/pulumi/issues/20487) ### [`v3.194.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31940-2025-09-08) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.193.0...v3.194.0) ##### Features - \[cli] Log diagnostics to stderr instead of stdout [#&#8203;20461](https://redirect.github.com/pulumi/pulumi/pull/20461) - \[cli/display] Change the default for --show-full-output from true to false [#&#8203;20467](https://redirect.github.com/pulumi/pulumi/pull/20467) - \[cli/display] Fix the --show-full-output the flag [#&#8203;20464](https://redirect.github.com/pulumi/pulumi/pull/20464) - \[sdk/go] Show a message that the Go program is being compiled [#&#8203;20460](https://redirect.github.com/pulumi/pulumi/pull/20460) ##### Bug Fixes - \[engine] Make ignoreChanges work better for arrays [#&#8203;20465](https://redirect.github.com/pulumi/pulumi/pull/20465) - \[programgen] Fix panic in RewriteApplies when encountering warning diagnostics [#&#8203;20453](https://redirect.github.com/pulumi/pulumi/pull/20453) ##### Miscellaneous - \[cli] No longer require the `PULUMI_EXPERIMENTAL` flag for Private Registry template operations (`pulumi template publish`, registry-based template resolution in `pulumi new`), while registry-backed template resolution in `pulumi new` may still be disabled using `PULUMI_DISABLE_REGISTRY_RESOLVE=true pulumi new` [#&#8203;20458](https://redirect.github.com/pulumi/pulumi/pull/20458) - \[sdk/yaml] Bump pulumi-yaml to 1.23.1 ### [`v3.193.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31930-2025-09-04) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.192.0...v3.193.0) ##### Bug Fixes - \[cli] Use "Private Registry", not cloud or Pulumi registry, in CLI output [#&#8203;20436](https://redirect.github.com/pulumi/pulumi/pull/20436) - \[cli/display] Avoid printing a double new line when showing secrets in the outputs [#&#8203;20435](https://redirect.github.com/pulumi/pulumi/pull/20435) - \[cli/display] Fix coloring of cobra error messages on windows - \[cli/{install,package}] Fix local package resolution when PULUMI_EXPERIMENTAL=true by including local packages in registry fallback logic [#&#8203;20413](https://redirect.github.com/pulumi/pulumi/pull/20413) - \[cli/new] Fail when running with --language without --ai in non-interactive mode [#&#8203;20415](https://redirect.github.com/pulumi/pulumi/pull/20415) - \[cli/package] Fix not using already-installed package in 'pulumi package add' when PULUMI_EXPERIMENTAL=1 ##### Miscellaneous - \[cli] Start the pprof server when receving SIGUSR1 [#&#8203;20392](https://redirect.github.com/pulumi/pulumi/pull/20392) - \[cli/display] Replace ijc/Gotty terminfo package with xo/terminfo [#&#8203;20446](https://redirect.github.com/pulumi/pulumi/pull/20446) - \[cli/display] Use the passed through writer in ShowProgressOutput instead of loading a new terminfo ### [`v3.192.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31920-2025-08-29) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.191.0...v3.192.0) ##### Features - \[cli/state] Add pulumi state taint/untaint commands to force replacement of resources upon next update [#&#8203;20380](https://redirect.github.com/pulumi/pulumi/pull/20380) - \[sdk/nodejs] Add `previewDestroy` to allow dry-runs of `destroy` commands [#&#8203;20371](https://redirect.github.com/pulumi/pulumi/pull/20371) ##### Bug Fixes - \[engine] Fix a bug causing hooks to never pass correctly to remote Go components [#&#8203;20390](https://redirect.github.com/pulumi/pulumi/pull/20390) - \[sdk/go] Fix source position information [#&#8203;20351](https://redirect.github.com/pulumi/pulumi/pull/20351) - \[sdk/nodejs] Fix function serialisation that contains minified classes [#&#8203;19345](https://redirect.github.com/pulumi/pulumi/pull/19345) - \[sdkgen/nodejs] Limit [@&#8203;types](https://redirect.github.com/types) packages used during local SDK generation [#&#8203;20387](https://redirect.github.com/pulumi/pulumi/pull/20387) - \[sdk/python] Set ThreadPoolExecutor max_workers to parallelism \* 4 [#&#8203;20362](https://redirect.github.com/pulumi/pulumi/pull/20362) - \[sdk/python] Handle `-v` flag passed to policy packs [#&#8203;20373](https://redirect.github.com/pulumi/pulumi/pull/20373) - \[sdk/python] Forward errors raised in callbacks to the caller [#&#8203;20381](https://redirect.github.com/pulumi/pulumi/pull/20381) ##### Miscellaneous - \[cli] Log stack trace when interrupted when using verbose logging [#&#8203;20364](https://redirect.github.com/pulumi/pulumi/pull/20364) - \[cli] Print the location of the log file when running with the verbose flag [#&#8203;20365](https://redirect.github.com/pulumi/pulumi/pull/20365) - \[sdk/python] Remove custom typing stubs [#&#8203;20384](https://redirect.github.com/pulumi/pulumi/pull/20384) ### [`v3.191.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31910-2025-08-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.190.0...v3.191.0) ##### Features - \[cli] Document the `PULUMI_ENABLE_STREAMING_JSON_PREVIEW` envvar. [#&#8203;20328](https://redirect.github.com/pulumi/pulumi/pull/20328) ##### Bug Fixes - \[engine] Check providers returning 'version' or '\__internal' in their inputs [#&#8203;20313](https://redirect.github.com/pulumi/pulumi/pull/20313) - \[engine] Fix a panic with `refresh --run-program` [#&#8203;20337](https://redirect.github.com/pulumi/pulumi/pull/20337) - \[engine] Fix an infinite loop from passing unordered resources to the dependency system when using --refresh - \[programgen] Emit warnings instead of errors in non-strict mode when binding resource blocks [#&#8203;20347](https://redirect.github.com/pulumi/pulumi/pull/20347) - \[programgen] Simplify range value types when it is derived from object of objects and warn on unknown properties [#&#8203;20345](https://redirect.github.com/pulumi/pulumi/pull/20345) - \[programgen] Warn instead of erroring out when traversing a NoneType in PCL [#&#8203;20342](https://redirect.github.com/pulumi/pulumi/pull/20342) - \[cli/display] Escape non-graphic characters in URNs [#&#8203;20295](https://redirect.github.com/pulumi/pulumi/pull/20295) - \[cli/import] Disambiguate duplicate resource names by their types when importing [#&#8203;20348](https://redirect.github.com/pulumi/pulumi/pull/20348) - \[cli/new] Don't prompt for ai or template when passing --yes [#&#8203;20256](https://redirect.github.com/pulumi/pulumi/pull/20256) ##### Miscellaneous - \[cli] Log version and CLI metadata [#&#8203;20334](https://redirect.github.com/pulumi/pulumi/pull/20334) - \[cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource [#&#8203;20324](https://redirect.github.com/pulumi/pulumi/pull/20324) ### [`v3.190.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31900-2025-08-15) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.189.0...v3.190.0) ##### Features - \[engine] Don't error on `ignoreChanges` paths that are missing old data, there is nothing to ignore in those cases and we just use the new data [#&#8203;20278](https://redirect.github.com/pulumi/pulumi/pull/20278) ##### Bug Fixes - \[cli] Fix `destroy --exclude-protected --remove` returning an error for empty stacks that could safely be removed [#&#8203;20283](https://redirect.github.com/pulumi/pulumi/pull/20283) - \[cli] Fix `pulumi template publish` failing with relative paths by normalizing to absolute paths before archive creation [#&#8203;20301](https://redirect.github.com/pulumi/pulumi/pull/20301) - \[cli/import] Use mapped name instead of logical name for resource references during import code generation [#&#8203;20300](https://redirect.github.com/pulumi/pulumi/pull/20300) - \[pkg] Make TypeScript code generation use 'declare' keyword instead of definite assertion operator, to avoid setting all fields to undefined when targeting environments new enough [#&#8203;20261](https://redirect.github.com/pulumi/pulumi/pull/20261) - \[sdkgen/nodejs] Make TypeScript a full dependency of local SDKs [#&#8203;20272](https://redirect.github.com/pulumi/pulumi/pull/20272) ##### Miscellaneous - \[build] Updates protobuf and grpc to v5, bumping dependencies in the Go, Node.js, and Python SDKs [#&#8203;19588](https://redirect.github.com/pulumi/pulumi/pull/19588) - \[build] Update latest Go version to 1.25 [#&#8203;20284](https://redirect.github.com/pulumi/pulumi/pull/20284) - \[sdkgen/nodejs] Target ES2020 for generated SDKs [#&#8203;20276](https://redirect.github.com/pulumi/pulumi/pull/20276) ### [`v3.189.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31890-2025-08-12) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.188.0...v3.189.0) ##### Features - \[sdk] Remove CacheMS from CLIVersionResponse [#&#8203;20264](https://redirect.github.com/pulumi/pulumi/pull/20264) - \[sdk/go] Calculate PluginInfo.Size on demand [#&#8203;20241](https://redirect.github.com/pulumi/pulumi/pull/20241) - \[auto/python] Surface `json` option to `pulumi preview` calls in Python when using the `pulumi.automation` package. [#&#8203;20233](https://redirect.github.com/pulumi/pulumi/pull/20233) ##### Bug Fixes - \[cli/package] Fix incorrect console URLs being displayed after publishing a policy [#&#8203;20255](https://redirect.github.com/pulumi/pulumi/pull/20255) - \[engine] Fix race when reading plugin stdout [#&#8203;20242](https://redirect.github.com/pulumi/pulumi/pull/20242) - \[sdk/nodejs] Fix component providers when using pnpm [#&#8203;20253](https://redirect.github.com/pulumi/pulumi/pull/20253) ##### Miscellaneous - \[pkg] Make TypeScript code generation use nullish coalesce operator for required property checks, as well as state and args accessing whenever sensible - \[sdk/nodejs] Fix swapped stderr/stdout callback comments in PreviewOptions interface [#&#8203;20250](https://redirect.github.com/pulumi/pulumi/pull/20250) - \[sdkgen] Don’t create empty maps for language specific overrides [#&#8203;20237](https://redirect.github.com/pulumi/pulumi/pull/20237) ### [`v3.188.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31880-2025-08-07) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.187.0...v3.188.0) ##### Features - \[cli] Add `--remove-backups` flag to `pulumi stack rm` for DIY backends [#&#8203;20203](https://redirect.github.com/pulumi/pulumi/pull/20203) ##### Bug Fixes - \[cli] Fix cancellation when running via some CLI wrapper tools [#&#8203;20195](https://redirect.github.com/pulumi/pulumi/pull/20195) - \[cli] Fix concurrent read/write during plugin downloads [#&#8203;20223](https://redirect.github.com/pulumi/pulumi/pull/20223) - \[cli] Restore terminal mode on panic [#&#8203;20224](https://redirect.github.com/pulumi/pulumi/pull/20224) - \[engine] Fix panic in refreshes due to concurrent map writes [#&#8203;20206](https://redirect.github.com/pulumi/pulumi/pull/20206) - \[sdkgen] Warn about refs of the form "#/resources/pulumi:providers:<pkg>" [#&#8203;20192](https://redirect.github.com/pulumi/pulumi/pull/20192) - \[cli/display] Show changed outputs in preview [#&#8203;20161](https://redirect.github.com/pulumi/pulumi/pull/20161) - \[cli/engine] Make `--exclude` correctly handle wildcards in all cases [#&#8203;20158](https://redirect.github.com/pulumi/pulumi/pull/20158) - \[sdk/go] Fix running against old CLI versions without SignalAndWaitForShutdown [#&#8203;20212](https://redirect.github.com/pulumi/pulumi/pull/20212) - \[sdk/python] Fix dependency installation in uv workspaces [#&#8203;20218](https://redirect.github.com/pulumi/pulumi/pull/20218) ##### Miscellaneous - \[cli] Update pulumi-dotnet to 3.87.0 [#&#8203;20222](https://redirect.github.com/pulumi/pulumi/pull/20222) - \[cli/env] Bump esc to v0.17.0 [#&#8203;20197](https://redirect.github.com/pulumi/pulumi/pull/20197) ### [`v3.187.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31870-2025-07-31) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.186.0...v3.187.0) ##### Features - \[cli] Support for writing v4 checkpoints/deployments [#&#8203;20159](https://redirect.github.com/pulumi/pulumi/pull/20159) - \[cli] Add support for qualified registry template names in `pulumi new` [#&#8203;20138](https://redirect.github.com/pulumi/pulumi/pull/20138) - \[cli/import] Enable `pulumi import` to always `--generate-resources` when converting `--from` state files [#&#8203;20178](https://redirect.github.com/pulumi/pulumi/pull/20178) - \[yaml] Allow config values to be parsed with type `object` [#&#8203;20132](https://redirect.github.com/pulumi/pulumi/pull/20132) - \[auto/python] Allow for `on_error` callbacks in commands to capture stderr incrementally [#&#8203;20019](https://redirect.github.com/pulumi/pulumi/pull/20019) - \[sdk/nodejs] Add option of Bun as a package manager [#&#8203;18412](https://redirect.github.com/pulumi/pulumi/pull/18412) - \[sdk/nodejs] Copy `getRootDirectory` to the pulumi module [#&#8203;20173](https://redirect.github.com/pulumi/pulumi/pull/20173) - \[sdk/python] Copy `get_root_directory` to the pulumi module [#&#8203;20172](https://redirect.github.com/pulumi/pulumi/pull/20172) ##### Bug Fixes - \[cli] Fix un-taring registry-backed templates which come in .tar.gz format [#&#8203;20135](https://redirect.github.com/pulumi/pulumi/pull/20135) - \[cli] Stop passing Accept: application/x-tar to registry template download URLs to avoid signature mismatch [#&#8203;20133](https://redirect.github.com/pulumi/pulumi/pull/20133) - \[engine] Fix a panic with `up --refresh --run-program` and resource replacements [#&#8203;20147](https://redirect.github.com/pulumi/pulumi/pull/20147) - \[engine] Untargeted resources in `destroy` now correctly register as same steps [#&#8203;20061](https://redirect.github.com/pulumi/pulumi/pull/20061) - \[cli/engine] Fix hang when waiting for program that would never complete [#&#8203;20153](https://redirect.github.com/pulumi/pulumi/pull/20153) - \[sdk/nodejs] Fix delete hooks in inline automation API programs [#&#8203;20143](https://redirect.github.com/pulumi/pulumi/pull/20143) - \[sdk/python] Set features inside construct [#&#8203;20141](https://redirect.github.com/pulumi/pulumi/pull/20141) ##### Miscellaneous - \[sdk/nodejs] Bump TypeScript target to ES2020 for plugins and policy packs [#&#8203;20148](https://redirect.github.com/pulumi/pulumi/pull/20148) ### [`v3.186.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31860-2025-07-25) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.185.0...v3.186.0) ##### Features - \[engine] Send `Cancel` message to language runtime plugins on engine shutdown [#&#8203;20007](https://redirect.github.com/pulumi/pulumi/pull/20007) - \[engine] Pass stack tags to policy plugins on startup [#&#8203;20084](https://redirect.github.com/pulumi/pulumi/pull/20084) - \[yaml] Expose `object` as a possible config type in preparation for `pulumi-yaml` support [#&#8203;20129](https://redirect.github.com/pulumi/pulumi/pull/20129) ##### Bug Fixes - \[cli/engine] --exclude and --exclude-protected flags now work together correctly for `destroy` commands [#&#8203;20120](https://redirect.github.com/pulumi/pulumi/pull/20120) - \[engine] Fix a datarace in the engine event system [#&#8203;20105](https://redirect.github.com/pulumi/pulumi/pull/20105) - \[engine] Fix a panic in the engine when running `up --refresh --run-program` and finding a deleted resource - \[sdk/nodejs] Avoid "Cannot convert object to primitive value" error when running into type errors [#&#8203;20092](https://redirect.github.com/pulumi/pulumi/pull/20092) - \[sdk/nodejs] Don’t use automatic ESM mode when `—import` or `—require` is set [#&#8203;20091](https://redirect.github.com/pulumi/pulumi/pull/20091) - \[sdk/nodejs] Fix callback server hang & delete hooks in Node.js [#&#8203;20109](https://redirect.github.com/pulumi/pulumi/pull/20109) - \[sdk/nodejs] Don’t report leaked promises when we exit abnormally [#&#8203;20128](https://redirect.github.com/pulumi/pulumi/pull/20128) - \[cli/package] Force new style Go modules to be written out when using `package add` [#&#8203;20011](https://redirect.github.com/pulumi/pulumi/pull/20011) - \[sdk/python] Run uv sync on uv command [#&#8203;20117](https://redirect.github.com/pulumi/pulumi/pull/20117) ##### Miscellaneous - \[yaml] Update yaml to 1.21.3 [#&#8203;20118](https://redirect.github.com/pulumi/pulumi/pull/20118) ### [`v3.185.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31850-2025-07-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.184.0...v3.185.0) ##### Features - \[cli/{install,package}] Allow using `pulumi package add` with registry identifiers [#&#8203;19928](https://redirect.github.com/pulumi/pulumi/pull/19928) ##### Bug Fixes - \[engine] Fix a snapshot integrity issue with `destroy --run-program` and resource reads [#&#8203;20078](https://redirect.github.com/pulumi/pulumi/pull/20078) - \[sdkgen/python] Remove unnecessary `import copy` [#&#8203;20089](https://redirect.github.com/pulumi/pulumi/pull/20089) - \[sdkgen/python] Support properties named "builtins" [#&#8203;20085](https://redirect.github.com/pulumi/pulumi/pull/20085) </details> <details> <summary>pulumi/esc (github.com/pulumi/esc)</summary> ### [`v0.20.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.20.0) [Compare Source](https://redirect.github.com/pulumi/esc/compare/v0.19.0...v0.20.0) ##### Improvements - Added deletion protection for environments: - Use `esc env settings set [<org-name>/][<project-name>/]<environment-name> deletion-protected true` to enable deletion protection - Use `esc env settings get [<org-name>/][<project-name>/]<environment-name> [deletion-protected]` to check the current status - When enabled, environments cannot be deleted until protection is disabled - Deletion protection is disabled by default for new environments ##### Bug Fixes - Environment declarations are now returned even in the face of syntax errors. ##### Breaking changes ### [`v0.19.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.19.0) [Compare Source](https://redirect.github.com/pulumi/esc/compare/v0.18.0...v0.19.0) ##### Improvements - Added support for Open Approvals [#&#8203;592](https://redirect.github.com/pulumi/esc/pull/592) ##### Bug Fixes ##### Breaking changes ### [`v0.18.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.18.0) [Compare Source](https://redirect.github.com/pulumi/esc/compare/v0.17.0...v0.18.0) ##### Improvements - Added support for `fn::concat` built-in function to concatenate arrays. [#&#8203;582](https://redirect.github.com/pulumi/esc/pull/582) ##### Bug Fixes ##### Breaking changes </details> <details> <summary>pulumi/esc-action (pulumi/esc-action)</summary> ### [`v1.5.0`](https://redirect.github.com/pulumi/esc-action/releases/tag/v1.5.0) [Compare Source](https://redirect.github.com/pulumi/esc-action/compare/v1.4.0...v1.5.0) - Fix line parsing when "=" is present [https://github.com/pulumi/esc-action/pull/30](https://redirect.github.com/pulumi/esc-action/pull/30) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMjY0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImltcGFjdC9uby1jaGFuZ2Vsb2ctcmVxdWlyZWQiXX0=--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2025-11-20 21:38:09 +00:00
pulumi-renovate[bot]	f1ff9e765f	Update vulnerable dependencies [SECURITY] (#671) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/containerd/containerd/v2](https://redirect.github.com/containerd/containerd) | indirect | patch | `v2.0.3` -> `v2.0.7` | | [github.com/go-viper/mapstructure/v2](https://redirect.github.com/go-viper/mapstructure) | indirect | minor | `v2.0.0` -> `v2.4.0` | | [github.com/ulikunitz/xz](https://redirect.github.com/ulikunitz/xz) | indirect | patch | `v0.5.12` -> `v0.5.15` | | golang.org/x/crypto | indirect | minor | `v0.39.0` -> `v0.45.0` | ### GitHub Vulnerability Alerts #### [CVE-2024-40635](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg) ### Impact A bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. ### Patches This bug has been fixed in the following containerd versions: * 2.0.4 (Fixed in 1a43cb6a10) * 1.7.27 (Fixed in 05044ec0a9) * 1.6.38 (Fixed in cf158e884c) Users should update to these versions to resolve the issue. ### Workarounds Ensure that only trusted images are used and that only trusted users have permissions to import images. ### Credits The containerd project would like to thank [Benjamin Koltermann](https://redirect.github.com/p4ck3t0) and [emxll](https://redirect.github.com/emxll) for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ### References * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635 ### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) * Email us at [security@containerd.io](mailto:security@containerd.io) #### [CVE-2025-47291](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff) # Impact A bug was found in the containerd's CRI implementation where containerd doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. # Patches This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. # Workarounds Disable usernamespaced pods in Kubernetes temporarily. # Credits The containerd project would like to thank Rodrigo Campos Catelin and Piotr Rogowski for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). # For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at security@containerd.io To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) * Email us at [security@containerd.io](mailto:security@containerd.io) #### [CVE-2024-25621](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w) ### Impact An overly broad default permission vulnerability was found in containerd. - `/var/lib/containerd` was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store - `/run/containerd/io.containerd.grpc.v1.cri` was created with 0o755, while it should be created with 0o700 - Allowed local users on the host to potentially access the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host. - `/run/containerd/io.containerd.sandbox.controller.v1.shim` was created with 0o711, while it should be created with 0o700 The directory paths may differ depending on the daemon configuration. When the `temp` directory path is specified in the daemon configuration, that directory was also created with 0o711, while it should be created with 0o700. ### Patches This bug has been fixed in the following containerd versions: * 2.2.0 * 2.1.5 * 2.0.7 * 1.7.29 Users should update to these versions to resolve the issue. These updates automatically change the permissions of the existing directories. > [!NOTE] > > `/run/containerd` and `/run/containerd/io.containerd.runtime.v2.task` are still created with 0o711. > This is an expected behavior for supporting userns-remapped containers. ### Workarounds The system administrator on the host can manually chmod the directories to not have group or world accessible permisisons: ``` chmod 700 /var/lib/containerd chmod 700 /run/containerd/io.containerd.grpc.v1.cri chmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim ``` An alternative mitigation would be to run containerd in [rootless mode](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md). ### Credits The containerd project would like to thank David Leadbeater for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) #### [CVE-2025-64329](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2) ### Impact A bug was found in containerd's CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. Repetitive calls of CRI Attach (e.g., [`kubectl attach`](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_attach/)) could increase the memory usage of containerd. ### Patches This bug has been fixed in the following containerd versions: * 2.2.0 * 2.1.5 * 2.0.7 * 1.7.29 Users should update to these versions to resolve the issue. ### Workarounds Set up an admission controller to control accesses to `pods/attach` resources. e.g., [Validating Admission Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/). ### Credits The containerd project would like to thank @&#8203;Wheat2018 for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ### References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329 ### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) --- ### containerd has an integer overflow in User ID handling in github.com/containerd/containerd [CVE-2024-40635](https://nvd.nist.gov/vuln/detail/CVE-2024-40635) / [GHSA-265r-hfxg-fhmg](https://redirect.github.com/advisories/GHSA-265r-hfxg-fhmg) / [GO-2025-3528](https://pkg.go.dev/vuln/GO-2025-3528) <details> <summary>More information</summary> #### Details containerd has an integer overflow in User ID handling in github.com/containerd/containerd #### Severity Unknown #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg) - [05044ec0a9) - [1a43cb6a10) - [cf158e884c) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3528) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)). </details> --- ### containerd has an integer overflow in User ID handling [CVE-2024-40635](https://nvd.nist.gov/vuln/detail/CVE-2024-40635) / [GHSA-265r-hfxg-fhmg](https://redirect.github.com/advisories/GHSA-265r-hfxg-fhmg) / [GO-2025-3528](https://pkg.go.dev/vuln/GO-2025-3528) <details> <summary>More information</summary> #### Details ##### Impact A bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. ##### Patches This bug has been fixed in the following containerd versions: * 2.0.4 (Fixed in 1a43cb6a10) * 1.7.27 (Fixed in 05044ec0a9) * 1.6.38 (Fixed in cf158e884c) Users should update to these versions to resolve the issue. ##### Workarounds Ensure that only trusted images are used and that only trusted users have permissions to import images. ##### Credits The containerd project would like to thank [Benjamin Koltermann](https://redirect.github.com/p4ck3t0) and [emxll](https://redirect.github.com/emxll) for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ##### References * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635 ##### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) * Email us at [security@containerd.io](mailto:security@containerd.io) #### Severity - CVSS Score: 4.6 / 10 (Medium) - Vector String: `CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N` #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg) - [https://nvd.nist.gov/vuln/detail/CVE-2024-40635](https://nvd.nist.gov/vuln/detail/CVE-2024-40635) - [05044ec0a9) - [1a43cb6a10) - [cf158e884c) - [https://github.com/containerd/containerd](https://redirect.github.com/containerd/containerd) - [https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-265r-hfxg-fhmg) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. [CVE-2025-47291](https://nvd.nist.gov/vuln/detail/CVE-2025-47291) / [GHSA-cxfp-7pvr-95ff](https://redirect.github.com/advisories/GHSA-cxfp-7pvr-95ff) / [GO-2025-3701](https://pkg.go.dev/vuln/GO-2025-3701) <details> <summary>More information</summary> #### Details ##### Impact A bug was found in the containerd's CRI implementation where containerd doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. ##### Patches This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. ##### Workarounds Disable usernamespaced pods in Kubernetes temporarily. ##### Credits The containerd project would like to thank Rodrigo Campos Catelin and Piotr Rogowski for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ##### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at security@containerd.io To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) * Email us at [security@containerd.io](mailto:security@containerd.io) #### Severity - CVSS Score: Unknown - Vector String: `CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U` #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff) - [https://nvd.nist.gov/vuln/detail/CVE-2025-47291](https://nvd.nist.gov/vuln/detail/CVE-2025-47291) - [https://github.com/containerd/containerd](https://redirect.github.com/containerd/containerd) - [https://pkg.go.dev/vuln/GO-2025-3701](https://pkg.go.dev/vuln/GO-2025-3701) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cxfp-7pvr-95ff) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Incorrect cgroup assignment for containers running in usernamespaced Kubernetes pods in github.com/containerd/containerd [CVE-2025-47291](https://nvd.nist.gov/vuln/detail/CVE-2025-47291) / [GHSA-cxfp-7pvr-95ff](https://redirect.github.com/advisories/GHSA-cxfp-7pvr-95ff) / [GO-2025-3701](https://pkg.go.dev/vuln/GO-2025-3701) <details> <summary>More information</summary> #### Details Incorrect cgroup assignment for containers running in usernamespaced Kubernetes pods in github.com/containerd/containerd #### Severity Unknown #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3701) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)). </details> --- ### containerd affected by a local privilege escalation via wide permissions on CRI directory [CVE-2024-25621](https://nvd.nist.gov/vuln/detail/CVE-2024-25621) / [GHSA-pwhc-rpq9-4c8w](https://redirect.github.com/advisories/GHSA-pwhc-rpq9-4c8w) <details> <summary>More information</summary> #### Details ##### Impact An overly broad default permission vulnerability was found in containerd. - `/var/lib/containerd` was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store - `/run/containerd/io.containerd.grpc.v1.cri` was created with 0o755, while it should be created with 0o700 - Allowed local users on the host to potentially access the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host. - `/run/containerd/io.containerd.sandbox.controller.v1.shim` was created with 0o711, while it should be created with 0o700 The directory paths may differ depending on the daemon configuration. When the `temp` directory path is specified in the daemon configuration, that directory was also created with 0o711, while it should be created with 0o700. ##### Patches This bug has been fixed in the following containerd versions: * 2.2.0 * 2.1.5 * 2.0.7 * 1.7.29 Users should update to these versions to resolve the issue. These updates automatically change the permissions of the existing directories. > [!NOTE] > > `/run/containerd` and `/run/containerd/io.containerd.runtime.v2.task` are still created with 0o711. > This is an expected behavior for supporting userns-remapped containers. ##### Workarounds The system administrator on the host can manually chmod the directories to not have group or world accessible permisisons: ``` chmod 700 /var/lib/containerd chmod 700 /run/containerd/io.containerd.grpc.v1.cri chmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim ``` An alternative mitigation would be to run containerd in [rootless mode](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md). ##### Credits The containerd project would like to thank David Leadbeater for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ##### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) #### Severity - CVSS Score: 7.3 / 10 (High) - Vector String: `CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H` #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w) - [https://nvd.nist.gov/vuln/detail/CVE-2024-25621](https://nvd.nist.gov/vuln/detail/CVE-2024-25621) - [7c59e8e9e9) - [https://github.com/containerd/containerd](https://redirect.github.com/containerd/containerd) - [https://github.com/containerd/containerd/blob/main/docs/rootless.md](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-pwhc-rpq9-4c8w) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### containerd CRI server: Host memory exhaustion through Attach goroutine leak [CVE-2025-64329](https://nvd.nist.gov/vuln/detail/CVE-2025-64329) / [GHSA-m6hq-p25p-ffr2](https://redirect.github.com/advisories/GHSA-m6hq-p25p-ffr2) <details> <summary>More information</summary> #### Details ##### Impact A bug was found in containerd's CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. Repetitive calls of CRI Attach (e.g., [`kubectl attach`](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_attach/)) could increase the memory usage of containerd. ##### Patches This bug has been fixed in the following containerd versions: * 2.2.0 * 2.1.5 * 2.0.7 * 1.7.29 Users should update to these versions to resolve the issue. ##### Workarounds Set up an admission controller to control accesses to `pods/attach` resources. e.g., [Validating Admission Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/). ##### Credits The containerd project would like to thank @&#8203;Wheat2018 for responsibly disclosing this issue in accordance with the [containerd security policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md). ##### References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329 ##### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://redirect.github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io) To report a security issue in containerd: * [Report a new vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new) #### Severity - CVSS Score: Unknown - Vector String: `CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2) - [https://nvd.nist.gov/vuln/detail/CVE-2025-64329](https://nvd.nist.gov/vuln/detail/CVE-2025-64329) - [083b53cd6f) - [https://github.com/containerd/containerd](https://redirect.github.com/containerd/containerd) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-m6hq-p25p-ffr2) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> #### [GHSA-fv92-fjc5-jj9h](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h) ### Summary Use of this library in a security-critical context may result in leaking sensitive information, if used to process sensitive fields. ### Details OpenBao (and presumably HashiCorp Vault) have surfaced error messages from `mapstructure` as follows: 98c3a59c04/sdk/framework/field_data.go (L43-L50) ```go _, _, err := d.getPrimitive(field, schema) if err != nil { return fmt.Errorf("error converting input for field %q: %w", field, err) } ``` where this calls `mapstructure.WeakDecode(...)`: 98c3a59c04/sdk/framework/field_data.go (L181-L193) ```go func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) { raw, ok := d.Raw[k] if !ok { return nil, false, nil } switch t := schema.Type; t { case TypeBool: var result bool if err := mapstructure.WeakDecode(raw, &result); err != nil { return nil, false, err } return result, true, nil ``` Notably, `WeakDecode(...)` eventually calls one of the decode helpers, which surfaces the original value: 1a66224d5e/mapstructure.go (L679-L686) 1a66224d5e/mapstructure.go (L726-L730) 1a66224d5e/mapstructure.go (L783-L787) & more. ### PoC To reproduce with OpenBao: ``` $ podman run -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300 ``` and in a new tab: ``` $ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass Success! Enabled userpass auth method at: userpass/ $ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"password":{"asdf":"my-sensitive-value"}}' "http://localhost:8300/v1/auth/userpass/users/adsf" {"errors":["error converting input for field \"password\": '' expected type 'string', got unconvertible type 'map[string]interface {}', value: 'map[asdf:my-sensitive-value]'"]} ``` ### Impact This is an information disclosure bug with little mitigation. See https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717 for a previous version. That version was fixed, but this is in the second part of that error message (starting at `'' expected a map, got 'string'` -- when the field type is `string` and a `map` is provided, we see the above information leak -- the previous example had a `map` type field with a `string` value provided). This was rated 4.5 Medium by HashiCorp in the past iteration. #### [GHSA-2464-8j7c-4cjm](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm) ### Summary Use of this library in a security-critical context may result in leaking sensitive information, if used to process sensitive fields. ### Details OpenBao (and presumably HashiCorp Vault) have surfaced error messages from `mapstructure` as follows: 98c3a59c04/sdk/framework/field_data.go (L43-L50) ```go _, _, err := d.getPrimitive(field, schema) if err != nil { return fmt.Errorf("error converting input for field %q: %w", field, err) } ``` where this calls `mapstructure.WeakDecode(...)`: 98c3a59c04/sdk/framework/field_data.go (L181-L193) ```go func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) { raw, ok := d.Raw[k] if !ok { return nil, false, nil } switch t := schema.Type; t { case TypeBool: var result bool if err := mapstructure.WeakDecode(raw, &result); err != nil { return nil, false, err } return result, true, nil ``` Notably, `WeakDecode(...)` eventually calls one of the decode helpers, which surfaces the original value via `strconv` helpers: 8c61ec1924/mapstructure.go (L720-L727) 8c61ec1924/mapstructure.go (L791-L798) 8c61ec1924/decode_hooks.go (L180) & more. These are different code paths than are fixed in the previous iteration at https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h. ### PoC To reproduce with OpenBao: ``` $ podman run --pull=always -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300 ``` and in a new tab: ``` $ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass Success! Enabled userpass auth method at: userpass/ $ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"ttl":"asdf"}' "http://localhost:8200/v1/auth/userpass/users/asdf" --> server logs: 2025-06-25T21:32:25.101-0500 [ERROR] core: failed to run existence check: error="error converting input for field \"ttl\": time: invalid duration \"asdf\"" ``` ### Impact This is an information disclosure bug with little mitigation. See https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717 for a previous version. That version was fixed, but this is in the second part of that error message (starting at `'' expected a map, got 'string'` -- when the field type is `string` and a `map` is provided, we see the above information leak -- the previous example had a `map` type field with a `string` value provided). This was rated 4.5 Medium by HashiCorp in the past iteration. --- ### mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data [GHSA-fv92-fjc5-jj9h](https://redirect.github.com/advisories/GHSA-fv92-fjc5-jj9h) / [GO-2025-3787](https://pkg.go.dev/vuln/GO-2025-3787) <details> <summary>More information</summary> #### Details ##### Summary Use of this library in a security-critical context may result in leaking sensitive information, if used to process sensitive fields. ##### Details OpenBao (and presumably HashiCorp Vault) have surfaced error messages from `mapstructure` as follows: 98c3a59c04/sdk/framework/field_data.go (L43-L50) ```go _, _, err := d.getPrimitive(field, schema) if err != nil { return fmt.Errorf("error converting input for field %q: %w", field, err) } ``` where this calls `mapstructure.WeakDecode(...)`: 98c3a59c04/sdk/framework/field_data.go (L181-L193) ```go func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) { raw, ok := d.Raw[k] if !ok { return nil, false, nil } switch t := schema.Type; t { case TypeBool: var result bool if err := mapstructure.WeakDecode(raw, &result); err != nil { return nil, false, err } return result, true, nil ``` Notably, `WeakDecode(...)` eventually calls one of the decode helpers, which surfaces the original value: 1a66224d5e/mapstructure.go (L679-L686) 1a66224d5e/mapstructure.go (L726-L730) 1a66224d5e/mapstructure.go (L783-L787) & more. ##### PoC To reproduce with OpenBao: ``` $ podman run -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300 ``` and in a new tab: ``` $ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass Success! Enabled userpass auth method at: userpass/ $ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"password":{"asdf":"my-sensitive-value"}}' "http://localhost:8300/v1/auth/userpass/users/adsf" {"errors":["error converting input for field \"password\": '' expected type 'string', got unconvertible type 'map[string]interface {}', value: 'map[asdf:my-sensitive-value]'"]} ``` ##### Impact This is an information disclosure bug with little mitigation. See https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717 for a previous version. That version was fixed, but this is in the second part of that error message (starting at `'' expected a map, got 'string'` -- when the field type is `string` and a `map` is provided, we see the above information leak -- the previous example had a `map` type field with a `string` value provided). This was rated 4.5 Medium by HashiCorp in the past iteration. #### Severity - CVSS Score: 5.3 / 10 (Medium) - Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N` #### References - [https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h) - [https://github.com/go-viper/mapstructure](https://redirect.github.com/go-viper/mapstructure) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-fv92-fjc5-jj9h) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### May leak sensitive information in logs when processing malformed data in github.com/go-viper/mapstructure [GHSA-fv92-fjc5-jj9h](https://redirect.github.com/advisories/GHSA-fv92-fjc5-jj9h) / [GO-2025-3787](https://pkg.go.dev/vuln/GO-2025-3787) <details> <summary>More information</summary> #### Details May leak sensitive information in logs when processing malformed data in github.com/go-viper/mapstructure #### Severity Unknown #### References - [https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3787) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)). </details> --- ### Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure [GHSA-2464-8j7c-4cjm](https://redirect.github.com/advisories/GHSA-2464-8j7c-4cjm) / [GO-2025-3900](https://pkg.go.dev/vuln/GO-2025-3900) <details> <summary>More information</summary> #### Details Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure #### Severity Unknown #### References - [https://github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm) - [742921c9ba) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3900) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)). </details> --- ### go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data [GHSA-2464-8j7c-4cjm](https://redirect.github.com/advisories/GHSA-2464-8j7c-4cjm) / [GO-2025-3900](https://pkg.go.dev/vuln/GO-2025-3900) <details> <summary>More information</summary> #### Details ##### Summary Use of this library in a security-critical context may result in leaking sensitive information, if used to process sensitive fields. ##### Details OpenBao (and presumably HashiCorp Vault) have surfaced error messages from `mapstructure` as follows: 98c3a59c04/sdk/framework/field_data.go (L43-L50) ```go _, _, err := d.getPrimitive(field, schema) if err != nil { return fmt.Errorf("error converting input for field %q: %w", field, err) } ``` where this calls `mapstructure.WeakDecode(...)`: 98c3a59c04/sdk/framework/field_data.go (L181-L193) ```go func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) { raw, ok := d.Raw[k] if !ok { return nil, false, nil } switch t := schema.Type; t { case TypeBool: var result bool if err := mapstructure.WeakDecode(raw, &result); err != nil { return nil, false, err } return result, true, nil ``` Notably, `WeakDecode(...)` eventually calls one of the decode helpers, which surfaces the original value via `strconv` helpers: 8c61ec1924/mapstructure.go (L720-L727) 8c61ec1924/mapstructure.go (L791-L798) 8c61ec1924/decode_hooks.go (L180) & more. These are different code paths than are fixed in the previous iteration at https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h. ##### PoC To reproduce with OpenBao: ``` $ podman run --pull=always -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300 ``` and in a new tab: ``` $ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass Success! Enabled userpass auth method at: userpass/ $ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"ttl":"asdf"}' "http://localhost:8200/v1/auth/userpass/users/asdf" --> server logs: 2025-06-25T21:32:25.101-0500 [ERROR] core: failed to run existence check: error="error converting input for field \"ttl\": time: invalid duration \"asdf\"" ``` ##### Impact This is an information disclosure bug with little mitigation. See https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717 for a previous version. That version was fixed, but this is in the second part of that error message (starting at `'' expected a map, got 'string'` -- when the field type is `string` and a `map` is provided, we see the above information leak -- the previous example had a `map` type field with a `string` value provided). This was rated 4.5 Medium by HashiCorp in the past iteration. #### Severity - CVSS Score: 5.3 / 10 (Medium) - Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N` #### References - [https://github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm) - [742921c9ba) - [https://github.com/go-viper/mapstructure](https://redirect.github.com/go-viper/mapstructure) - [https://pkg.go.dev/vuln/GO-2025-3900](https://pkg.go.dev/vuln/GO-2025-3900) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-2464-8j7c-4cjm) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> #### [CVE-2025-58058](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9) ### Summary It is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the [specification](https://redirect.github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt). Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. ### Mitigations The release v0.5.15 includes following mitigations: - The ReaderConfig DictCap field is now interpreted as a limit for the dictionary size. - The default is 2 Gigabytes - 1 byte (2^31-1 bytes). - Users can check with the [Reader.Header] method what the actual values are in their LZMA files and set a smaller limit using ReaderConfig. - The dictionary size will not exceed the larger of the file size and the minimum dictionary size. This is another measure to prevent huge memory allocations for the dictionary. - The code supports stream sizes only up to a pebibyte (1024^5). Note that the original v0.5.14 version had a compiler error for 32 bit platforms, which has been fixed by v0.5.15. ### Methods affected Only software that uses [lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader) or [lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader) is affected. There is no issue for software using the xz functionality. I thank @&#8203;GregoryBuligin for his report, which is provided below. ### Summary When unpacking a large number of LZMA archives, even in a single goroutine, if the first byte of the archive file is 0 (a zero byte added to the beginning), an error __writeMatch: distance out of range__ occurs. Memory consumption spikes sharply, and the GC clearly cannot handle this situation. ### Details Judging by the error __writeMatch: distance out of range__, the problems occur in the code around this function. c8314b8f21/lzma/decoderdict.go (L81) ### PoC Run a function similar to this one in 1 or several goroutines on a multitude of LZMA archives that have a 0 (a zero byte) added to the beginning. ``` const ProjectLocalPath = "some/path" const TmpDir = "tmp" func UnpackLZMA(lzmaFile string) error { file, err := os.Open(lzmaFile) if err != nil { return err } defer file.Close() reader, err := lzma.NewReader(bufio.NewReader(file)) if err != nil { return err } tmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix) if err != nil { return err } defer func() { tmpFile.Close() _ = os.Remove(tmpFile.Name()) }() sha256Hasher := sha256.New() multiWriter := io.MultiWriter(tmpFile, sha256Hasher) if _, err = io.Copy(multiWriter, reader); err != nil { return err } unpackHash := hex.EncodeToString(sha256Hasher.Sum(nil)) unpackDir := filepath.Join( ProjectLocalPath, unpackHash[:2], ) _ = os.MkdirAll(unpackDir, DirPerm) unpackPath := filepath.Join(unpackDir, unpackHash) return os.Rename(tmpFile.Name(), unpackPath) } ``` ### Impact Servers with a small amount of RAM that download and unpack a large number of unverified LZMA archives --- ### github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives [CVE-2025-58058](https://nvd.nist.gov/vuln/detail/CVE-2025-58058) / [GHSA-jc7w-c686-c4v9](https://redirect.github.com/advisories/GHSA-jc7w-c686-c4v9) / [GO-2025-3922](https://pkg.go.dev/vuln/GO-2025-3922) <details> <summary>More information</summary> #### Details ##### Summary It is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the [specification](https://redirect.github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt). Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. ##### Mitigations The release v0.5.15 includes following mitigations: - The ReaderConfig DictCap field is now interpreted as a limit for the dictionary size. - The default is 2 Gigabytes - 1 byte (2^31-1 bytes). - Users can check with the [Reader.Header] method what the actual values are in their LZMA files and set a smaller limit using ReaderConfig. - The dictionary size will not exceed the larger of the file size and the minimum dictionary size. This is another measure to prevent huge memory allocations for the dictionary. - The code supports stream sizes only up to a pebibyte (1024^5). Note that the original v0.5.14 version had a compiler error for 32 bit platforms, which has been fixed by v0.5.15. ##### Methods affected Only software that uses [lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader) or [lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader) is affected. There is no issue for software using the xz functionality. I thank @&#8203;GregoryBuligin for his report, which is provided below. ##### Summary When unpacking a large number of LZMA archives, even in a single goroutine, if the first byte of the archive file is 0 (a zero byte added to the beginning), an error __writeMatch: distance out of range__ occurs. Memory consumption spikes sharply, and the GC clearly cannot handle this situation. ##### Details Judging by the error __writeMatch: distance out of range__, the problems occur in the code around this function. c8314b8f21/lzma/decoderdict.go (L81) ##### PoC Run a function similar to this one in 1 or several goroutines on a multitude of LZMA archives that have a 0 (a zero byte) added to the beginning. ``` const ProjectLocalPath = "some/path" const TmpDir = "tmp" func UnpackLZMA(lzmaFile string) error { file, err := os.Open(lzmaFile) if err != nil { return err } defer file.Close() reader, err := lzma.NewReader(bufio.NewReader(file)) if err != nil { return err } tmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix) if err != nil { return err } defer func() { tmpFile.Close() _ = os.Remove(tmpFile.Name()) }() sha256Hasher := sha256.New() multiWriter := io.MultiWriter(tmpFile, sha256Hasher) if _, err = io.Copy(multiWriter, reader); err != nil { return err } unpackHash := hex.EncodeToString(sha256Hasher.Sum(nil)) unpackDir := filepath.Join( ProjectLocalPath, unpackHash[:2], ) _ = os.MkdirAll(unpackDir, DirPerm) unpackPath := filepath.Join(unpackDir, unpackHash) return os.Rename(tmpFile.Name(), unpackPath) } ``` ##### Impact Servers with a small amount of RAM that download and unpack a large number of unverified LZMA archives #### Severity - CVSS Score: 5.3 / 10 (Medium) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L` #### References - [https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9) - [https://nvd.nist.gov/vuln/detail/CVE-2025-58058](https://nvd.nist.gov/vuln/detail/CVE-2025-58058) - [88ddf1d0d9) - [https://github.com/ulikunitz/xz](https://redirect.github.com/ulikunitz/xz) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-jc7w-c686-c4v9) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz [CVE-2025-58058](https://nvd.nist.gov/vuln/detail/CVE-2025-58058) / [GHSA-jc7w-c686-c4v9](https://redirect.github.com/advisories/GHSA-jc7w-c686-c4v9) / [GO-2025-3922](https://pkg.go.dev/vuln/GO-2025-3922) <details> <summary>More information</summary> #### Details Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz #### Severity Unknown #### References - [https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9) - [88ddf1d0d9) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3922) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)). </details> #### [CVE-2025-58181](https://nvd.nist.gov/vuln/detail/CVE-2025-58181) SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. #### [CVE-2025-47914](https://nvd.nist.gov/vuln/detail/CVE-2025-47914) SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. --- ### Release Notes <details> <summary>containerd/containerd (github.com/containerd/containerd/v2)</summary> ### [`v2.0.7`](https://redirect.github.com/containerd/containerd/releases/tag/v2.0.7): containerd 2.0.7 [Compare Source](https://redirect.github.com/containerd/containerd/compare/v2.0.6...v2.0.7) Welcome to the v2.0.7 release of containerd! The seventh patch release for containerd 2.0 includes various bug fixes and updates. ##### Security Updates - **containerd** - [**GHSA-pwhc-rpq9-4c8w**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w) - [**GHSA-m6hq-p25p-ffr2**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2) - **runc** - [**GHSA-qw9x-cqr3-wc7r**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r) - [**GHSA-cgrx-mc8f-2prm**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm) - [**GHSA-9493-h29p-rfm2**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2) ##### Highlights ##### Container Runtime Interface (CRI) - **Disable event subscriber during task cleanup** ([#&#8203;12406](https://redirect.github.com/containerd/containerd/pull/12406)) - **Add SystemdCgroup to default runtime options** ([#&#8203;12254](https://redirect.github.com/containerd/containerd/pull/12254)) - **Fix userns with container image VOLUME mounts that need copy** ([#&#8203;12241](https://redirect.github.com/containerd/containerd/pull/12241)) ##### Image Distribution - **Add dial timeout field to hosts toml configuration** ([#&#8203;12136](https://redirect.github.com/containerd/containerd/pull/12136)) ##### Runtime - **Update runc binary to v1.3.3** ([#&#8203;12479](https://redirect.github.com/containerd/containerd/pull/12479)) - **Fix lost container logs from quickly closing io** ([#&#8203;12376](https://redirect.github.com/containerd/containerd/pull/12376)) - **Create bootstrap.json with 0644 permission** ([#&#8203;12184](https://redirect.github.com/containerd/containerd/pull/12184)) - **Fix pidfd leak in UnshareAfterEnterUserns** ([#&#8203;12178](https://redirect.github.com/containerd/containerd/pull/12178)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Austin Vazquez - Phil Estes - Rodrigo Campos - Wei Fu - Akihiro Suda - Derek McGowan - Maksym Pavlenko - ningmingxiao - Kirtana Ashok - Akhil Mohan - Andrew Halaney - Jin Dong - Jose Fernandez - Mike Baynton - Philip Laine - Swagat Bora - wheat2018 ##### Changes <details><summary>56 commits</summary> <p> - Prepare release notes for v2.0.7 ([#&#8203;12482](https://redirect.github.com/containerd/containerd/pull/12482)) - [`4931e24f1`](4931e24f16) Prepare release notes for v2.0.7 - [`205bc4f2d`](205bc4f2db) Update mailmap - [`5f708b76a`](5f708b76a4) Merge commit from fork - [`8cd112d82`](8cd112d829) Fix directory permissions - [`05290b5bc`](05290b5bc8) Merge commit from fork - [`4d1edf4ad`](4d1edf4add) fix goroutine leak of container Attach - Update runc binary to v1.3.3 ([#&#8203;12479](https://redirect.github.com/containerd/containerd/pull/12479)) - [`b46dc6a67`](b46dc6a67c) runc: Update runc binary to v1.3.3 - ci: bump Go 1.24.9; 1.25.3 ([#&#8203;12361](https://redirect.github.com/containerd/containerd/pull/12361)) - [`5e9c82178`](5e9c821780) Update GHA runners to use latest images for basic binaries build - [`7f59248dc`](7f59248dcd) Update GHA runners to use latest image for most jobs - [`e1373e8a8`](e1373e8a8a) ci: bump Go 1.24.9, 1.25.3 - [`e1a910a6a`](e1a910a6a9) ci: bump Go 1.24.8; 1.25.2 - [`fd04b7f17`](fd04b7f176) move exclude-dirs to issues.exclude-dirs - [`b49377975`](b493779751) update golangci-lint to v1.64.2 - [`6e45022a1`](6e45022a1e) build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0 - [`09ce0f2a1`](09ce0f2a1e) build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2 - [`de63a740b`](de63a740b8) build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 - Fix lost container logs from quickly closing io ([#&#8203;12376](https://redirect.github.com/containerd/containerd/pull/12376)) - [`f953ee8a3`](f953ee8a3c) bugfix:fix container logs lost because io close too quickly - CI: update Fedora to 43 ([#&#8203;12448](https://redirect.github.com/containerd/containerd/pull/12448)) - [`f6f15f513`](f6f15f5135) CI: update Fedora to 43 - Disable event subscriber during task cleanup ([#&#8203;12406](https://redirect.github.com/containerd/containerd/pull/12406)) - [`2a2329cbd`](2a2329cbd0) cri/server/podsandbox: disable event subscriber - CI: skip ubuntu-24.04-arm on private repos ([#&#8203;12428](https://redirect.github.com/containerd/containerd/pull/12428)) - [`dfb954743`](dfb9547437) CI: skip ubuntu-24.04-arm on private repos - Remove additional fuzzers from instrumentation repo ([#&#8203;12420](https://redirect.github.com/containerd/containerd/pull/12420)) - [`f6b02f6bb`](f6b02f6bb8) Remove additional fuzzers from CI - runc:Update runc binary to v1.3.1 ([#&#8203;12275](https://redirect.github.com/containerd/containerd/pull/12275)) - [`75c13ee3f`](75c13ee3fc) runc:Update runc binary to v1.3.1 - Add SystemdCgroup to default runtime options ([#&#8203;12254](https://redirect.github.com/containerd/containerd/pull/12254)) - [`427cdd06c`](427cdd06c9) add SystemdCgroup to default runtime options - install-runhcs-shim: fetch target commit instead of tags ([#&#8203;12255](https://redirect.github.com/containerd/containerd/pull/12255)) - [`0b35e19fb`](0b35e19fb1) install-runhcs-shim: fetch target commit instead of tags - Fix userns with container image VOLUME mounts that need copy ([#&#8203;12241](https://redirect.github.com/containerd/containerd/pull/12241)) - [`3212afc2f`](3212afc2f2) integration: Add test for directives with userns - [`b855c6e10`](b855c6e103) cri: Fix userns with Dockerfile VOLUME mounts that need copy - Fix overlayfs issues related to user namespace ([#&#8203;12223](https://redirect.github.com/containerd/containerd/pull/12223)) - [`05c0c99f4`](05c0c99f43) core/mount: Retry unmounting idmapped directories - [`afdede4ce`](afdede4ced) core/mount: Test cleanup of DoPrepareIDMappedOverlay() - [`47205f814`](47205f814d) core/mount: Properly cleanup on doPrepareIDMappedOverlay errors - [`6f4abd970`](6f4abd970a) core/mount: Don't call nil function on errors - [`a2f0d65d7`](a2f0d65d78) core/mount: Only idmap once per overlayfs, not per layer - [`1c32accd7`](1c32accd71) Make ovl idmap mounts read-only - ci: bump Go 1.23.12, 1.24.6 ([#&#8203;12187](https://redirect.github.com/containerd/containerd/pull/12187)) - [`9e72e91e6`](9e72e91e63) ci: bump Go 1.23.12, 1.24.6 - Create bootstrap.json with 0644 permission ([#&#8203;12184](https://redirect.github.com/containerd/containerd/pull/12184)) - [`009622e04`](009622e042) fix: create bootstrap.json with 0644 permission - Fix pidfd leak in UnshareAfterEnterUserns ([#&#8203;12178](https://redirect.github.com/containerd/containerd/pull/12178)) - [`5bec0a332`](https://redirec </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2025-11-20 20:33:06 +00:00
pulumi-renovate[bot]	b1e526630c	Update module golang.org/x/crypto to v0.45.0 [SECURITY] (#668) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | golang.org/x/crypto | require | minor | `v0.39.0` -> `v0.45.0` | ### GitHub Vulnerability Alerts #### [CVE-2025-58181](https://nvd.nist.gov/vuln/detail/CVE-2025-58181) SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>	2025-11-20 02:14:14 +00:00
Bryce Lampe	5e589f61ec	Upgrade go-provider to 1.1.2 (#615) ... Fixes https://github.com/pulumi/pulumi-docker-build/issues/579.	2025-09-30 16:40:35 -07:00
Pulumi Bot	3b7e31b388	Automated upgrade: bump pulumi/pulumi to 3.192.0 (#592) ... Automated upgrade: bump pulumi/pulumi to 3.192.0 --------- Co-authored-by: Bryce Lampe <bryce@pulumi.com>	2025-09-05 14:36:43 -07:00
Bryce Lampe	4e934974ee	Update p-go-provider to fix version replacement behavior (#584) ... Updates p-go-provider to pull in https://github.com/pulumi/pulumi-go-provider/pull/410. In particular this fixes an issue where the provider would get replaced on version changes. Fixes https://github.com/pulumi/pulumi-docker-build/issues/581	2025-08-27 11:14:21 -07:00
Matthew (Matt) Jeffryes	b7d239127c	Update pulumi/pulumi dependency to 3.187.0 (#568) ... Fixes https://github.com/pulumi/pulumi-docker-build/issues/551 (sort of - the underlying problem that this repo pins SDK dependencies that don't get automatically update by the workflow still exists, but it should at least work until the codegen APIs change again.)	2025-08-12 14:47:58 -07:00
pulumi-renovate[bot]	41be3ce857	Update first-party Pulumi dependencies (#530) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.165.0` -> `3.184.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.165.0/3.184.0) | | [github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build) | require | patch | `v0.0.11` -> `v0.0.12` | | [github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet) | require | minor | `v3.0.0-20250515194217-855e3e4c894c` -> `v3.85.1` | | [github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider) | require | minor | `v1.0.0-rc.2` -> `v1.1.0` | | [github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java) | require | minor | `v1.11.0` -> `v1.16.0` | | [github.com/pulumi/pulumi-yaml](https://redirect.github.com/pulumi/pulumi-yaml) | require | minor | `v1.17.0` -> `v1.21.2` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.169.0` -> `v3.184.0` | | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250508095305-a4bdc94d01aa` -> `v3.184.0` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250508095305-a4bdc94d01aa` -> `v3.184.0` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250508095305-a4bdc94d01aa` -> `v3.184.0` | | [pulumi/actions](https://redirect.github.com/pulumi/actions) | action | minor | `v6.3.0` -> `v6.5.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.184.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.184.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.183.0...v3.184.0) ##### 3.184.0 (2025-07-18) ##### Features - \[sdk/go] Allow setting resource hooks in transforms [#&#8203;20058](https://redirect.github.com/pulumi/pulumi/pull/20058) - \[sdk/nodejs] Allow setting resource hooks in transforms [#&#8203;20057](https://redirect.github.com/pulumi/pulumi/pull/20057) ##### Bug Fixes - \[auto/go] Fix refresh/destroy with inline programs and --run-program flag - \[cli/package] Fix `package add` command when using uv 0.8.0 or later [#&#8203;20075](https://redirect.github.com/pulumi/pulumi/pull/20075) - \[sdk/nodejs] Fix before exit handler - \[programgen/python] Fix imports of packages and modules with multiple name parts, such as "devOps" [#&#8203;20053](https://redirect.github.com/pulumi/pulumi/pull/20053) ##### Miscellaneous - \[sdk/nodejs] Simplify determining the Node.js entrypoint and respect package.exports [#&#8203;19985](https://redirect.github.com/pulumi/pulumi/pull/19985) ### [`v3.183.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.183.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.182.0...v3.183.0) ##### 3.183.0 (2025-07-16) ##### Features - \[cli] Support reading v4 checkpoints/deployments [#&#8203;20046](https://redirect.github.com/pulumi/pulumi/pull/20046) - \[cli] Allow transforms to set resource hooks [#&#8203;20051](https://redirect.github.com/pulumi/pulumi/pull/20051) - \[protobuf] Add hooks to TransformResourceOptions [#&#8203;20050](https://redirect.github.com/pulumi/pulumi/pull/20050) - \[auto/{go,nodejs,python}] Support --run-program for inline programs in refresh and destroy operations [#&#8203;19912](https://redirect.github.com/pulumi/pulumi/pull/19912) - \[cli/new] Reflect templates published with `pulumi template publish` in the results of `pulumi new` [#&#8203;19940](https://redirect.github.com/pulumi/pulumi/pull/19940) - \[sdk/nodejs] Automatic ESM configuration [#&#8203;19980](https://redirect.github.com/pulumi/pulumi/pull/19980) - \[sdk/python] Allow setting resource hooks in transforms [#&#8203;20052](https://redirect.github.com/pulumi/pulumi/pull/20052) ##### Bug Fixes - \[cli] Fix a panic in the `console` command when a non-existant stack was passed as a --stack argument [#&#8203;20043](https://redirect.github.com/pulumi/pulumi/pull/20043) - \[sdk/nodejs] Try to normalize component names when auto-inferring them [#&#8203;20048](https://redirect.github.com/pulumi/pulumi/pull/20048) - \[sdk/python/automation] Fix wrong name after stack rename [#&#8203;20028](https://redirect.github.com/pulumi/pulumi/pull/20028) ##### Miscellaneous - \[pkg] Update pulumi-java to v1.16.0 [#&#8203;20063](https://redirect.github.com/pulumi/pulumi/pull/20063) ### [`v3.182.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.182.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.181.0...v3.182.0) ##### 3.182.0 (2025-07-14) ##### Features - \[engine] Implement ResourceHooks in the engine [#&#8203;19874](https://redirect.github.com/pulumi/pulumi/pull/19874) - \[engine] Prevent destroy without running the program if any resource have delete hooks [#&#8203;19933](https://redirect.github.com/pulumi/pulumi/pull/19933) - \[engine] Send `Cancel` message to analyzer plugins on engine shutdown [#&#8203;20015](https://redirect.github.com/pulumi/pulumi/pull/20015) - \[sdk/go] Implement ResourceHooks in the Go SDK [#&#8203;20002](https://redirect.github.com/pulumi/pulumi/pull/20002) - \[sdk/nodejs] Implement ResourceHooks in the Node.js SDK [#&#8203;19946](https://redirect.github.com/pulumi/pulumi/pull/19946) - \[sdk/python] Implement ResourceHooks in the Python SDK [#&#8203;19876](https://redirect.github.com/pulumi/pulumi/pull/19876) ##### Bug Fixes - \[cli] Fix `stack select` when local default-org differs from the service setting for default-org [#&#8203;20010](https://redirect.github.com/pulumi/pulumi/pull/20010) - \[cli/new] Fix the AI prompt flow of pulumi new command [#&#8203;19998](https://redirect.github.com/pulumi/pulumi/pull/19998) - \[engine] Fix an issue where the engine would not issue creates and deletes in the correct order for delete before create replacements where dependencies had changed [#&#8203;19945](https://redirect.github.com/pulumi/pulumi/pull/19945) - \[engine] Handle cancellation during construct [#&#8203;19976](https://redirect.github.com/pulumi/pulumi/pull/19976) - \[engine] Run after delete hooks for component resources [#&#8203;20025](https://redirect.github.com/pulumi/pulumi/pull/20025) - \[sdk/{go,nodejs,python}] Pass resource hooks through to construct [#&#8203;20016](https://redirect.github.com/pulumi/pulumi/pull/20016) - \[sdkgen/go] Fix panic in SDK go generator for a map\[string]map\[string]union type [#&#8203;19731](https://redirect.github.com/pulumi/pulumi/pull/19731) - \[sdk/python] Log safely in Python in the presence of `PULUMI_ERROR_OUTPUT_STRING` [#&#8203;18903](https://redirect.github.com/pulumi/pulumi/pull/18903) ##### Miscellaneous - \[sdk/{go,nodejs,python}] Add PULUMI_AUTOMATION_API [#&#8203;19974](https://redirect.github.com/pulumi/pulumi/pull/19974) - \[sdk/{go,nodejs,python}] Add type and name to ResourceHookArgs [#&#8203;20017](https://redirect.github.com/pulumi/pulumi/pull/20017) ### [`v3.181.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31810-2025-06-27) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.180.0...v3.181.0) ##### Features - \[auto/nodejs] Add `previewRefresh` to allow dry-runs of `refresh` commands [#&#8203;19948](https://redirect.github.com/pulumi/pulumi/pull/19948) - \[auto] Support providing runProgram to `preview` and `up` in auto sdk [#&#8203;19729](https://redirect.github.com/pulumi/pulumi/pull/19729) - \[cli] Warn more aggressively for very old CLI versions [#&#8203;19894](https://redirect.github.com/pulumi/pulumi/pull/19894) - \[cli] Add `pulumi template publish` experimental command to publish templates to the Pulumi Registry [#&#8203;19864](https://redirect.github.com/pulumi/pulumi/pull/19864) - \[cli/plugin] Allow `plugin run` to run local binary plugins [#&#8203;19903](https://redirect.github.com/pulumi/pulumi/pull/19903) - \[auto/python] Add `preview_refresh` to allow dry-runs of `refresh` commands [#&#8203;19900](https://redirect.github.com/pulumi/pulumi/pull/19900) - \[auto/python] Add `preview_destroy` to allow dry-runs of `destroy` commands [#&#8203;19947](https://redirect.github.com/pulumi/pulumi/pull/19947) - \[engine] Add `SignalAndWaitForShutdown` RPC call [#&#8203;19837](https://redirect.github.com/pulumi/pulumi/pull/19837) - \[engine] Add lifecycle protobuf definitions [#&#8203;19746](https://redirect.github.com/pulumi/pulumi/pull/19746) ##### Bug Fixes - \[engine] Restore asset and archive hash values after transforms [#&#8203;19960](https://redirect.github.com/pulumi/pulumi/pull/19960) - \[cli] Make it possible for inline automation programs to be used with refresh/destroy [#&#8203;19916](https://redirect.github.com/pulumi/pulumi/pull/19916) - \[cli] Do not assume that package sources without file path prefixes (`./`, `../`) are file paths [#&#8203;19930](https://redirect.github.com/pulumi/pulumi/pull/19930) - \[engine] Fix untargeted resources not always being sent to stack analysis [#&#8203;19943](https://redirect.github.com/pulumi/pulumi/pull/19943) [#&#8203;19926](https://redirect.github.com/pulumi/pulumi/pull/19926) - \[engine] Fix a panic when mixing --target, --refresh, and provider upgrades [#&#8203;19935](https://redirect.github.com/pulumi/pulumi/pull/19935) - \[engine] Fix transforms holding onto engine locks during execution, instead of just during collection [#&#8203;19950](https://redirect.github.com/pulumi/pulumi/pull/19950) - \[engine] Synthesize delete steps for views during preview [#&#8203;19952](https://redirect.github.com/pulumi/pulumi/pull/19952) - \[sdk/nodejs] Fix the use of parameterised packages and mocks [#&#8203;19917](https://redirect.github.com/pulumi/pulumi/pull/19917) ### [`v3.180.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31800-2025-06-26) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.178.0...v3.180.0) ##### Features - \[auto] Support providing runProgram to `preview` and `up` in auto sdk [#&#8203;19729](https://redirect.github.com/pulumi/pulumi/pull/19729) - \[cli] Warn more aggressively for very old CLI versions [#&#8203;19894](https://redirect.github.com/pulumi/pulumi/pull/19894) - \[cli] Add `pulumi template publish` experimental command to publish templates to the Pulumi Registry [#&#8203;19864](https://redirect.github.com/pulumi/pulumi/pull/19864) - \[cli/plugin] Allow `plugin run` to run local binary plugins [#&#8203;19903](https://redirect.github.com/pulumi/pulumi/pull/19903) - \[auto/python] Add `preview_refresh` to allow dry-runs of `refresh` commands [#&#8203;19900](https://redirect.github.com/pulumi/pulumi/pull/19900) - \[auto/python] Add `preview_destroy` to allow dry-runs of `destroy` commands [#&#8203;19947](https://redirect.github.com/pulumi/pulumi/pull/19947) - \[engine] Add `SignalAndWaitForShutdown` RPC call [#&#8203;19837](https://redirect.github.com/pulumi/pulumi/pull/19837) - \[engine] Add lifecycle protobuf definitions [#&#8203;19746](https://redirect.github.com/pulumi/pulumi/pull/19746) ##### Bug Fixes - \[cli] Make it possible for inline automation programs to be used with refresh/destroy [#&#8203;19916](https://redirect.github.com/pulumi/pulumi/pull/19916) - \[cli] Do not assume that package sources without file path prefixes (`./`, `../`) are file paths [#&#8203;19930](https://redirect.github.com/pulumi/pulumi/pull/19930) - \[engine] Fix untargeted resources not always being sent to stack analysis [#&#8203;19943](https://redirect.github.com/pulumi/pulumi/pull/19943) [#&#8203;19926](https://redirect.github.com/pulumi/pulumi/pull/19926) - \[engine] Fix a panic when mixing --target, --refresh, and provider upgrades [#&#8203;19935](https://redirect.github.com/pulumi/pulumi/pull/19935) - \[engine] Fix transforms holding onto engine locks during execution, instead of just during collection [#&#8203;19950](https://redirect.github.com/pulumi/pulumi/pull/19950) - \[engine] Synthesize delete steps for views during preview [#&#8203;19952](https://redirect.github.com/pulumi/pulumi/pull/19952) - \[sdk/nodejs] Fix the use of parameterised packages and mocks [#&#8203;19917](https://redirect.github.com/pulumi/pulumi/pull/19917) ### [`v3.178.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31780-2025-06-20) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.177.0...v3.178.0) ##### Features - \[protobuf] Allow providers to request to --refresh by default from partial failures ##### Bug Fixes - \[auto/go] Fix destroy with debug option results in `unknown flag --debug` error [#&#8203;19885](https://redirect.github.com/pulumi/pulumi/pull/19885) - \[backend/diy] Allow DIY backend to remove stacks that are empty except for their root stack resource, inline with the behaviour of the cloud backend [#&#8203;19883](https://redirect.github.com/pulumi/pulumi/pull/19883) - \[auto/python] Fix parallelism issue when running inline programs with the automation API [#&#8203;19855](https://redirect.github.com/pulumi/pulumi/pull/19855) - \[cli] Fix `pulumi stack select` unnecessarily fetching stack metadata. The `pulumi stack select` command now only fetches stack names instead of complete metadata, since the selection UI only displays stack names. This significantly improves performance, especially for DIY backends where metadata fetching can be slow. Previously, the command was fetching the same metadata as `pulumi stack ls` (last update time, resource count, etc.) but never displaying this information to the user, causing unnecessary delays during stack selection. [#&#8203;19760](https://redirect.github.com/pulumi/pulumi/pull/19760) - \[cli/install] Don't consult the registry when `--file` is specified [#&#8203;19859](https://redirect.github.com/pulumi/pulumi/pull/19859) - \[engine] Fix policy pack versions for remediations from python policy packs [#&#8203;19856](https://redirect.github.com/pulumi/pulumi/pull/19856) - \[engine] Fix views with --refresh --run-program [#&#8203;19877](https://redirect.github.com/pulumi/pulumi/pull/19877) ##### Miscellaneous - \[ci] Make `make install` install all subprojects [#&#8203;19892](https://redirect.github.com/pulumi/pulumi/pull/19892) - \[cli] Update dotnet, java and yaml language runtimes [#&#8203;19896](https://redirect.github.com/pulumi/pulumi/pull/19896) - \[cli/env] Bump esc to 0.14.3 [#&#8203;19886](https://redirect.github.com/pulumi/pulumi/pull/19886) ### [`v3.177.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31770-2025-06-13) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.176.0...v3.177.0) ##### Features - \[sdk/yaml] Enable support for views by default [#&#8203;19847](https://redirect.github.com/pulumi/pulumi/pull/19847) ##### Bug Fixes - \[auto/nodejs] Fix stack name in object after rename operations [#&#8203;19836](https://redirect.github.com/pulumi/pulumi/pull/19836) - \[cli] Respect `--generate-only` when `convert`ing local SDKs ### [`v3.176.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31760-2025-06-12) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.175.0...v3.176.0) ##### Features - \[engine] Enable support for views by default [#&#8203;19813](https://redirect.github.com/pulumi/pulumi/pull/19813) - \[cli/install] Resolve plugin download URLs by referencing the Pulumi Registry [#&#8203;19762](https://redirect.github.com/pulumi/pulumi/pull/19762) - \[cli/plugin] Improve the error message when installing unknown resource plugins [#&#8203;19773](https://redirect.github.com/pulumi/pulumi/pull/19773) - \[sdk/go] Add experimental policy as code SDK [#&#8203;19670](https://redirect.github.com/pulumi/pulumi/pull/19670) ##### Bug Fixes - \[cli] Fix `package add` always reporting providers as crashing [#&#8203;19769](https://redirect.github.com/pulumi/pulumi/pull/19769) - \[programgen] Fix panic in programgen - \[cli/display] Send output about installing policy packs to stderr instead of stdout [#&#8203;19816](https://redirect.github.com/pulumi/pulumi/pull/19816) - \[sdk/{go,nodejs,python}] Fix use of parameterized packages in mocks [#&#8203;19722](https://redirect.github.com/pulumi/pulumi/pull/19722) ##### Miscellaneous - \[engine] Close SourceIterator [#&#8203;19740](https://redirect.github.com/pulumi/pulumi/pull/19740) - \[pkg] Update go.opentelemetry.io/otel to v1.36.0 [#&#8203;19822](https://redirect.github.com/pulumi/pulumi/pull/19822) ### [`v3.175.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31750-2025-06-05) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.174.0...v3.175.0) ##### Bug Fixes - \[engine] Use the new resource goal in `refresh --run-program` with aliases instead of the old one [#&#8203;19578](https://redirect.github.com/pulumi/pulumi/pull/19578) - \[engine] Fix panic when importing resources. [#&#8203;19750](https://redirect.github.com/pulumi/pulumi/pull/19750) ### [`v3.174.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31740-2025-06-04) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.173.0...v3.174.0) ##### Features - \[auto/go] Add PolicyPacks to preview/up options [#&#8203;19702](https://redirect.github.com/pulumi/pulumi/pull/19702) - \[engine] Overhaul of how the import option works, the engine can now import and then update a resource in a single deployment [#&#8203;19339](https://redirect.github.com/pulumi/pulumi/pull/19339) - \[yaml] Update YAML to 1.19.2 [#&#8203;19727](https://redirect.github.com/pulumi/pulumi/pull/19727) - \[sdkgen/python] Add sdkgen for non object method invoke return values [#&#8203;19660](https://redirect.github.com/pulumi/pulumi/pull/19660) ##### Bug Fixes - \[engine] Fix loading of non-client language runtimes when running inline programs [#&#8203;19713](https://redirect.github.com/pulumi/pulumi/pull/19713) - \[engine] Revert recent changes to the config system [#&#8203;19721](https://redirect.github.com/pulumi/pulumi/pull/19721) - \[sdk] Fix of breaking change to WithMocks which splits interface for MethodCall [#&#8203;19687](https://redirect.github.com/pulumi/pulumi/pull/19687) ##### Miscellaneous - \[cli] Ensure logs and tracing are fully written out before exiting [#&#8203;19714](https://redirect.github.com/pulumi/pulumi/pull/19714) - \[engine] Log callbacks requests [#&#8203;19691](https://redirect.github.com/pulumi/pulumi/pull/19691) - \[sdk/nodejs] Require Node.js >= 20 [#&#8203;19697](https://redirect.github.com/pulumi/pulumi/pull/19697) ### [`v3.173.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31730-2025-05-29) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.172.0...v3.173.0) ##### Bug Fixes - \[sdk/go] Revert breaking change to WithMocks [#&#8203;19683](https://redirect.github.com/pulumi/pulumi/pull/19683) ### [`v3.172.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31720-2025-05-29) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.171.0...v3.172.0) ##### Features - \[protobuf] Extend provider protocol to allow providers to request to --refresh resources by default [#&#8203;19487](https://redirect.github.com/pulumi/pulumi/pull/19487) - \[sdk/go] Add sdk support for scalar call returns from providers [#&#8203;19589](https://redirect.github.com/pulumi/pulumi/pull/19589) ##### Bug Fixes - \[auto/python] Revert: Add `on_error` callback for capturing incremental stderr output, which used a library not compatible with Windows [#&#8203;19649](https://redirect.github.com/pulumi/pulumi/pull/19649) - \[cli] Improve error message when stack select is run in non-interactive mode [#&#8203;19628](https://redirect.github.com/pulumi/pulumi/pull/19628) - \[cli] Fix `up --refresh --run-program` to use the new program based refresh logic [#&#8203;19667](https://redirect.github.com/pulumi/pulumi/pull/19667) - \[sdkgen] Fix data race in codegen type conversions [#&#8203;19604](https://redirect.github.com/pulumi/pulumi/pull/19604) - \[cli/config] Warn about YAML null being read as empty string [#&#8203;19483](https://redirect.github.com/pulumi/pulumi/pull/19483) - \[cli/display] Fix color of Copilot summarize-error so its more readable on light terminals [#&#8203;19644](https://redirect.github.com/pulumi/pulumi/pull/19644) - \[cli/engine] Shut down plugins more gracefully when the CLI is shutting down [#&#8203;19603](https://redirect.github.com/pulumi/pulumi/pull/19603) - \[programgen/python] Add pulumi as reserved keyword in binder to fix python codegen issues [#&#8203;19277](https://redirect.github.com/pulumi/pulumi/pull/19277) ##### Miscellaneous - \[sdk/python] Remove workaround for UWP reparse point issue [#&#8203;19627](https://redirect.github.com/pulumi/pulumi/pull/19627) ### [`v3.171.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31710-2025-05-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.170.0...v3.171.0) ##### Features - \[cli] Add `pulumi esc` as an alias for `pulumi env` [#&#8203;19610](https://redirect.github.com/pulumi/pulumi/pull/19610) - \[engine] Elide `StackReference` outputs that fail to decrypt [#&#8203;19533](https://redirect.github.com/pulumi/pulumi/pull/19533) - \[programgen] Ensure convert uses the output project directory as the working directory [#&#8203;19582](https://redirect.github.com/pulumi/pulumi/pull/19582) - \[cli/display] Release explain-preview and summarize-error Copilot features [#&#8203;19544](https://redirect.github.com/pulumi/pulumi/pull/19544) - \[cli/engine] Enable debugging of source based plugins, using `--attach-debugger plugin=<name>` [#&#8203;19553](https://redirect.github.com/pulumi/pulumi/pull/19553) - \[cli/install] Allow `pulumi install` to install dependencies inside plugin project folders [#&#8203;19580](https://redirect.github.com/pulumi/pulumi/pull/19580) - \[auto/python] Add `on_error` callback for capturing incremental stderr output [#&#8203;19541](https://redirect.github.com/pulumi/pulumi/pull/19541) - \[programgen/nodejs] Add `callSingle` to the NodeJS SDK to support non-object method return values [#&#8203;19387](https://redirect.github.com/pulumi/pulumi/pull/19387) - \[programgen/python] Add sdk support for scalar call returns from providers [#&#8203;19419](https://redirect.github.com/pulumi/pulumi/pull/19419) - \[sdk/python] Add new provider interface to `pulumi.provider.experimental.provider` [#&#8203;19080](https://redirect.github.com/pulumi/pulumi/pull/19080) - \[sdk/python] Support enum references in component providers [#&#8203;19471](https://redirect.github.com/pulumi/pulumi/pull/19471) ##### Bug Fixes - \[cli] Enumerate supported CI systems deterministically [#&#8203;19593](https://redirect.github.com/pulumi/pulumi/pull/19593) - \[engine] Make the engine respect errors from plugin Handshake methods [#&#8203;19595](https://redirect.github.com/pulumi/pulumi/pull/19595) - \[cli/install] Fix installation of python policies to default to virtualenv rather than site-packages [#&#8203;19570](https://redirect.github.com/pulumi/pulumi/pull/19570) ### [`v3.170.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31700-2025-05-15) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.169.0...v3.170.0) ##### Features - \[engine] The engine now defers policy pack installation to the language hosts [#&#8203;19477](https://redirect.github.com/pulumi/pulumi/pull/19477) - \[programgen] Copy assets emitted from converter plugins to target directory of the generated projects [#&#8203;19500](https://redirect.github.com/pulumi/pulumi/pull/19500) - \[programgen] Add GeneratedProjectDirectory to ConvertProgramRequest for converter plugins [#&#8203;19513](https://redirect.github.com/pulumi/pulumi/pull/19513) - \[sdk/nodejs] Pass `ignoreChanges`, `replaceOnChanges`, `customTimeouts`, `retainOnDelete`, and `deletedWith` to the provider constructor [#&#8203;19496](https://redirect.github.com/pulumi/pulumi/pull/19496) - \[sdk/nodejs] Pass `ignoreChanges`, `replaceOnChanges`, `customTimeouts`, `retainOnDelete`, and `deletedWith` to the provider constructor [#&#8203;19494](https://redirect.github.com/pulumi/pulumi/pull/19494) ##### Bug Fixes - \[auto/python] Fix hang in automation API operations [#&#8203;19539](https://redirect.github.com/pulumi/pulumi/pull/19539) - \[cli/config] Config system now maintains types based on the YAML type from the config file [#&#8203;19503](https://redirect.github.com/pulumi/pulumi/pull/19503) - \[cli/install] Don't overwrite versions embedded in the plugin spec ##### Miscellaneous - \[engine] Split analyzer handshake into handshake and stackconfigure [#&#8203;19506](https://redirect.github.com/pulumi/pulumi/pull/19506) - \[sdk] Add optional cache duration to CLIVersionResponse apitype [#&#8203;19523](https://redirect.github.com/pulumi/pulumi/pull/19523) - \[sdk/go] Accept `context.Context` in `workspace.GetPluginInfo` and `workspace.GetPluginPath`. [#&#8203;19527](https://redirect.github.com/pulumi/pulumi/pull/19527) - \[sdk/go] Accept `context.Context` wherever new `plugin.Context`s are created. [#&#8203;19526](https://redirect.github.com/pulumi/pulumi/pull/19526) ### [`v3.169.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31690-2025-05-08) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.168.0...v3.169.0) ##### Features - \[cli] Add `--run-program` to `preview` and `up` for use with `--refresh` [#&#8203;19449](https://redirect.github.com/pulumi/pulumi/pull/19449) - \[engine] Use language runtimes `RunPlugin` method for booting policy packs - \[pkg] Add MainContext to allow for provider cancelation [#&#8203;19445](https://redirect.github.com/pulumi/pulumi/pull/19445) - \[auto/{nodejs,python}] Add --config-file option to Automation API operations (Preview, Up, Refresh, Destroy) for NodeJS, and Python ##### Bug Fixes - \[engine] Fix `refresh --run-program` hanging on non-trivial programs [#&#8203;19448](https://redirect.github.com/pulumi/pulumi/pull/19448) - \[programgen/nodejs] Fix generating imports for functions in 3-rd party packages such as [@&#8203;pulumiverse/scaleway](https://redirect.github.com/pulumiverse/scaleway) [#&#8203;19410](https://redirect.github.com/pulumi/pulumi/pull/19410) ### [`v3.168.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31680-2025-05-07) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.167.0...v3.168.0) ##### Features - \[cli] Consider unresolved references a validation error; add the `--allow-dangling-references` flag to opt out of this behaviour [#&#8203;19216](https://redirect.github.com/pulumi/pulumi/pull/19216) - \[sdk] Support Node.js 24 [#&#8203;19420](https://redirect.github.com/pulumi/pulumi/pull/19420) - \[cli/state] Add pulumi state protect [#&#8203;19355](https://redirect.github.com/pulumi/pulumi/pull/19355) - \[sdk/go] Update to Go 1.23 [#&#8203;19118](https://redirect.github.com/pulumi/pulumi/pull/19118) - \[sdk/go] Add a Delete method to property.Map [#&#8203;19384](https://redirect.github.com/pulumi/pulumi/pull/19384) - \[sdk/go] Support private GitHub and GitLab instances, when installing plugins directly from a repository [#&#8203;19377](https://redirect.github.com/pulumi/pulumi/pull/19377) - \[sdk/python] Support Resource References [#&#8203;19226](https://redirect.github.com/pulumi/pulumi/pull/19226) ##### Bug Fixes - \[engine] Adjust analyzer handshake request that stack configuration is optional [#&#8203;19435](https://redirect.github.com/pulumi/pulumi/pull/19435) - \[cli/display] Fix race condition when rendering progress events [#&#8203;19434](https://redirect.github.com/pulumi/pulumi/pull/19434) - \[cli/package] Make sure namespaces from Git Plugins are always lowercase [#&#8203;19441](https://redirect.github.com/pulumi/pulumi/pull/19441) - \[cli/plugin] Allow creating analyzer plugins without config [#&#8203;19393](https://redirect.github.com/pulumi/pulumi/pull/19393) [#&#8203;19395](https://redirect.github.com/pulumi/pulumi/pull/19395) ##### Miscellaneous - \[cli] Update yaml, java & dotnet ### [`v3.167.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31670-2025-05-01) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.166.0...v3.167.0) ##### Features - \[auto/nodejs] Add `onError` callback for capturing incremental stderr output [#&#8203;19372](https://redirect.github.com/pulumi/pulumi/pull/19372) - \[pkg] Allow for hyphens in function names [#&#8203;19352](https://redirect.github.com/pulumi/pulumi/pull/19352) - \[auto/python] Add the ability to configure a remote executor image [#&#8203;19304](https://redirect.github.com/pulumi/pulumi/pull/19304) - \[sdk/yaml] Update pulumi-yaml to v1.18.0 [#&#8203;19381](https://redirect.github.com/pulumi/pulumi/pull/19381) ##### Bug Fixes - \[auto/nodejs] Fix flag mismatch with preview-only refresh operations [#&#8203;19370](https://redirect.github.com/pulumi/pulumi/pull/19370) - \[cli/plugin] Allow creating analyzer plugins without config [#&#8203;19392](https://redirect.github.com/pulumi/pulumi/pull/19392) - \[auto/python] Fix flag mismatch with preview-only refresh operations [#&#8203;19373](https://redirect.github.com/pulumi/pulumi/pull/19373) ### [`v3.166.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31660-2025-04-29) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.165.0...v3.166.0) ##### Features - \[engine] Add Handshake to analyzer plugins [#&#8203;19328](https://redirect.github.com/pulumi/pulumi/pull/19328) - \[auto/go] Add `--exclude` and `--exclude-dependents` to the Automation API [#&#8203;19333](https://redirect.github.com/pulumi/pulumi/pull/19333) - \[auto/python] Add `--exclude` and `--exclude-dependents` to the Automation API [#&#8203;19310](https://redirect.github.com/pulumi/pulumi/pull/19310) - \[cli/package] Introduce `pulumi package info` to show information about a package - \[sdk/python] Decorate resources and enums with their type token [#&#8203;19357](https://redirect.github.com/pulumi/pulumi/pull/19357) ##### Bug Fixes - \[cli] Always save fully qualified stack names to the settings file [#&#8203;19336](https://redirect.github.com/pulumi/pulumi/pull/19336) - \[engine] Fix error message when trying to load plugins in private repositories with no authentication [#&#8203;19331](https://redirect.github.com/pulumi/pulumi/pull/19331) - \[sdk/nodejs] Return complete package descriptors for dependencies [#&#8203;19346](https://redirect.github.com/pulumi/pulumi/pull/19346) ##### Miscellaneous - \[cli/package] Mark package publish command as non-experimental [#&#8203;19356](https://redirect.github.com/pulumi/pulumi/pull/19356) - \[sdk/python] Move pulumi.provider.experimental.provider to pulumi.provider.experimental.component </details> <details> <summary>pulumi/pulumi-docker-build (github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary> ### [`v0.0.12`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.11...v0.0.12) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.11...v0.0.12) </details> <details> <summary>pulumi/pulumi-dotnet (github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary> ### [`v3.85.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3851---2025-07-11) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.85.0...v3.85.1) ##### Bug Fixes - \[sdk] Pick versioned artifacts when publishing [#&#8203;667](https://redirect.github.com/pulumi/pulumi-dotnet/pull/667) ### [`v3.85.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3850---2025-07-11) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.84.0...v3.85.0) ##### Improvements - \[sdk] Implement resource hooks in the .Net SDK [#&#8203;663](https://redirect.github.com/pulumi/pulumi-dotnet/pull/663) ##### Bug Fixes - \[sdk] Disable stack auto parenting for resources that are read from the engine [#&#8203;615](https://redirect.github.com/pulumi/pulumi-dotnet/pull/615) ##### Improvements - \[sdk/provider] Send old inputs to diff and update and delete [#&#8203;650](https://redirect.github.com/pulumi/pulumi-dotnet/pull/650) ### [`v3.84.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3840---2025-06-18) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.83.2...v3.84.0) ##### Improvements - \[sdk] Add support for invoke transforms [#&#8203;606](https://redirect.github.com/pulumi/pulumi-dotnet/pull/606) ### [`v3.83.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3832---2025-06-12) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.82.1...v3.83.2) ##### Bug Fixes - \[build] Fix release process [#&#8203;643](https://redirect.github.com/pulumi/pulumi-dotnet/pull/643) - \[runtime] Respect grpc cancellation to stop running subcommands when the engine has requested it [#&#8203;642](https://redirect.github.com/pulumi/pulumi-dotnet/pull/642) ### [`v3.82.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3821---2025-05-28) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.82.0...v3.82.1) ##### Bug Fixes - \[runtime] Fix gen-sdk fails if there are dangling references [#&#8203;614](https://redirect.github.com/pulumi/pulumi-dotnet/pull/614) ### [`v3.82.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3820---2025-05-21) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.81.0...v3.82.0) ##### Improvements - \[runtime] Enable debugging providers using --attach-debugger=plugins [#&#8203;600](https://redirect.github.com/pulumi/pulumi-dotnet/pull/600) ### [`v3.81.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3810---2025-05-15) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.80.0...v3.81.0) ##### Improvements - \[sdk] Update PropertyValue to track secretness and dependencies directly on PropertyValue [#&#8203;591](https://redirect.github.com/pulumi/pulumi-dotnet/pull/591) ##### Bug Fixes - \[sdk] Component output properties are no longer overwritten with `unknown` [#&#8203;595](https://redirect.github.com/pulumi/pulumi-dotnet/pull/595) ##### Improvements - \[sdk/auto] Expose `--remote-executor-*` flags in the Automation API [#&#8203;587](https://redirect.github.com/pulumi/pulumi-dotnet/pull/587) ### [`v3.80.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3800---2025-05-07) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.79.0...v3.80.0) ##### Improvements - \[sdk/auto] Add --run-program to destory and refresh operations [#&#8203;580](https://redirect.github.com/pulumi/pulumi-dotnet/pull/580) - \[sdk/auto] Add `--exclude` and `--exclude-dependents` to the Automation API [#&#8203;582](https://redirect.github.com/pulumi/pulumi-dotnet/pull/582) ### [`v3.79.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3790---2025-04-24) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.78.0...v3.79.0) ##### Bug Fixes - \[sdk] Fix deserialising InputMap<T> with unknown values [#&#8203;570](https://redirect.github.com/pulumi/pulumi-dotnet/pull/570) ##### Improvements - \[sdk/auto] Adds the `ConfigFile` option to all operation options in the Automation API (UpOptions, PreviewOptions, RefreshOptions, DestroyOptions) to support specifyin [#&#8203;573](https://redirect.github.com/pulumi/pulumi-dotnet/pull/573) ### [`v3.78.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3780---2025-04-08) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.77.0...v3.78.0) ##### Bug Fixes - \[sdk] Async context is now captured from the main program and restored in transform functions [#&#8203;561](https://redirect.github.com/pulumi/pulumi-dotnet/pull/561) - \[sdk] Use the invariant culture when converting strings/numbers, replace some readonly fields with readonly properties in `Pulumi.Experimental`, and rename some generic type parameters to follow the standard naming convention of being prefixed by `T`, e.g. `InputMap<V>` => `InputMap<TValue>` [#&#8203;564](https://redirect.github.com/pulumi/pulumi-dotnet/pull/564) ##### Improvements - \[sdk/auto] Add the `--preview-only` flag to the `destroy` command in the Automation API [#&#8203;554](https://redirect.github.com/pulumi/pulumi-dotnet/pull/554) - \[sdk/provider] Replaced `PropertyValue.TryUnwrap` with `Unwrap` [#&#8203;562](https://redirect.github.com/pulumi/pulumi-dotnet/pull/562) ##### Bug Fixes - \[sdk/provider] Add missing support for EnumType to PropertyValueSerializer [#&#8203;557](https://redirect.github.com/pulumi/pulumi-dotnet/pull/557) ### [`v3.77.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3770---2025-03-27) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.76.1...v3.77.0) ##### Bug Fixes - \[sdk] Exclude resource references from property dependencies for packaged components [#&#8203;488](https://redirect.github.com/pulumi/pulumi-dotnet/pull/488) ##### Improvements - \[sdk/auto] Add --show-reads Support for Pulumi Up & Preview [#&#8203;542](https://redirect.github.com/pulumi/pulumi-dotnet/pull/542) - \[sdk/provider] Infer package name and namespace in ComponentProviderHost [#&#8203;555](https://redirect.github.com/pulumi/pulumi-dotnet/pull/555) - \[sdk/provider] Default the version of ComponentProviderHost to 0.0.0 [#&#8203;556](https://redirect.github.com/pulumi/pulumi-dotnet/pull/556) ##### Bug Fixes - \[sdk/provider] Handle logging arguments in provider's getEngineAddress [#&#8203;536](https://redirect.github.com/pulumi/pulumi-dotnet/pull/536) ### [`v3.76.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3761---2025-03-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.76.0...v3.76.1) ### [`v3.76.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3760---2025-03-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.75.2...v3.76.0) ##### Improvements - \[sdk] Make OutputConstructorAttribute optional [#&#8203;438](https://redirect.github.com/pulumi/pulumi-dotnet/pull/438) - \[sdk] Log a warning when trying to convert outputs to strings [#&#8203;525](https://redirect.github.com/pulumi/pulumi-dotnet/pull/525) - \[sdk/auto] Add `pulumi install` to Automation Api [#&#8203;426](https://redirect.github.com/pulumi/pulumi-dotnet/pull/426) - \[sdk/auto] Add `--refresh` to preview, up and destroy commands [#&#8203;431](https://redirect.github.com/pulumi/pulumi-dotnet/pull/431) ##### Bug Fixes - \[sdk/converter] Fix conversion for nested Output<T> [#&#8203;527](https://redirect.github.com/pulumi/pulumi-dotnet/pull/527) ### [`v3.75.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3752---2025-02-26) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.75.1...v3.75.2) ##### Bug Fixes - \[runtime] Revert changes to target net8 in provider SDKs [#&#8203;515](https://redirect.github.com/pulumi/pulumi-dotnet/pull/515) ### [`v3.75.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3751---2025-02-26) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.75.0...v3.75.1) Follow up release after v3.75, this reverts the updates to targeting net8. ### [`v3.75.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3750---2025-02-26) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.74.0...v3.75.0) ##### Improvements - \[sdk] updated pulumi submodule and go.mod sdk/pkg and excluded failing conformance tests [#&#8203;482](https://redirect.github.com/pulumi/pulumi-dotnet/pull/482) - \[sdk] Support parameterization for remote component resources [#&#8203;502](https://redirect.github.com/pulumi/pulumi-dotnet/pull/502) ##### bug-fixes - \[sdk] Fix inconsistent behavior of inheritance for InputAttribute and OutputAttribute [#&#8203;506](https://redirect.github.com/pulumi/pulumi-dotnet/pull/506) ##### Improvements - \[sdk/auto] Add the `--preview-only` flag for the `refresh` command [#&#8203;496](https://redirect.github.com/pulumi/pulumi-dotnet/pull/496) - \[sdk/provider] Schema Analyzer to infer component schemas from classes [#&#8203;468](https://redirect.github.com/pulumi/pulumi-dotnet/pull/468) - \[sdk/provider] Implement component provider host for auto-inferred components [#&#8203;507](https://redirect.github.com/pulumi/pulumi-dotnet/pull/507) ### [`v3.74.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3740---2025-02-19) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.73.0...v3.74.0) ##### Improvements - \[sdk] Add ability to disable ToString on Output<T> [#&#8203;461](https://redirect.github.com/pulumi/pulumi-dotnet/pull/461) ##### bug-fixes - \[sdk] Handle null in InputMap/List implicit conversions [#&#8203;459](https://redirect.github.com/pulumi/pulumi-dotnet/pull/459) - \[sdk] Fix the Provider and Providers option when used in resource transforms [#&#8203;460](https://redirect.github.com/pulumi/pulumi-dotnet/pull/460) - \[sdk] Fix adding the same value to InputMap multiple times [#&#8203;462](https://redirect.github.com/pulumi/pulumi-dotnet/pull/462) ### [`v3.73.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3730---2025-02-06) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.72.0...v3.73.0) ##### Improvements - \[sdk] InputMap and InputList no longer flatten nested unknowns/secrets to apply to the whole object. [#&#8203;449](https://redirect.github.com/pulumi/pulumi-dotnet/pull/449) ##### Bug Fixes - \[runtime] Don't parse runtime options at startup, defer to the options sent for specific methods [#&#8203;451](https://redirect.github.com/pulumi/pulumi-dotnet/pull/451) ### [`v3.72.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3720---2025-01-30) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.71.1...v3.72.0) ##### Bug Fixes - \[sdk] Avoid calling invokes with dependencies on unknown resources [#&#8203;441](https://redirect.github.com/pulumi/pulumi-dotnet/pull/441) - \[sdk] Wait for resources in the input property dependencies [#&#8203;444](https://redirect.github.com/pulumi/pulumi-dotnet/pull/444) ##### Improvements - \[runtime] Plugins with msbuild warnings can still be run [#&#8203;437](https://redirect.github.com/pulumi/pulumi-dotnet/pull/437) - \[runtime] Implement GetRequiredPackages to replace GetRequiredPlugins [#&#8203;440](https://redirect.github.com/pulumi/pulumi-dotnet/pull/440) ### [`v3.71.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3711---2024-12-19) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.71.0...v3.71.1) ##### Bug Fixes - \[sdk] Await background tasks during inline deployment [#&#8203;420](https://redirect.github.com/pulumi/pulumi-dotnet/pull/420) - \[sdk] Fix parameterized explicit providers [#&#8203;435](https://redirect.github.com/pulumi/pulumi-dotnet/pull/435) - \[runtime] Fix the language plugin to return a version [#&#8203;390](https://redirect.github.com/pulumi/pulumi-dotnet/pull/390) ### [`v3.71.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3710---2024-12-05) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.70.0...v3.71.0) ##### Improvements - \[sdk] Allow specifying dependencies for output invokes [#&#8203;412](https://redirect.github.com/pulumi/pulumi-dotnet/pull/412) - \[sdk/provider] Add Parameterize to the provider interface [#&#8203;404](https://redirect.github.com/pulumi/pulumi-dotnet/pull/404) ### [`v3.70.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3700---2024-11-27) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.69.0...v3.70.0) ##### Bug Fixes - \[sdk/auto] Fix warning for inline programs [#&#8203;388](https://redirect.github.com/pulumi/pulumi-dotnet/pull/388) ##### Improvements - \[runtime] Reduce binary size by stripping debug information [#&#8203;411](https://redirect.github.com/pulumi/pulumi-dotnet/pull/411) ### [`v3.69.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3690---2024-11-21) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.68.0...v3.69.0) ##### Improvements - \[sdk] Make Pulumi.RunException public [#&#8203;364](https://redirect.github.com/pulumi/pulumi-dotnet/pull/364) - \[sdk] Add `DeferredOutput` for resolving some output/input cycles [#&#8203;385](https://redirect.github.com/pulumi/pulumi-dotnet/pull/385) ##### bug-fixes - \[sdk] Support input lists and maps in JsonSerializer.SerializeAsync and JsonSerializer.DeserializeAsync [#&#8203;372](https://redirect.github.com/pulumi/pulumi-dotnet/pull/372) - \[sdk] Fix publishing to set a required property used by the Automation Api to Install Pulumi cli [#&#8203;393](https://redirect.github.com/pulumi/pulumi-dotnet/pull/393) ##### Improvements - \[sdk/auto] Lessen the strictness of `OperationTypeConverter` to allow unknown operations [#&#8203;350](https://redirect.github.com/pulumi/pulumi-dotnet/pull/350) - \[sdk/auto] Update YamlDotNet to v16.1.2 [#&#8203;354](https://redirect.github.com/pulumi/pulumi-dotnet/pull/354) - \[sdk/auto] Add pulumi stack change-secrets-provider to automation api [#&#8203;383](https://redirect.github.com/pulumi/pulumi-dotnet/pull/383) - \[sdk/provider] OutputReference.Value will normalize to null for Computed values [#&#8203;381](https://redirect.github.com/pulumi/pulumi-dotnet/pull/381) ##### Bug Fixes - \[sdk/provider] Fix a bug deserialising unknown secrets [#&#8203;378](https://redirect.github.com/pulumi/pulumi-dotnet/pull/378) - \[runtime] Improve the detections of project files when attaching a debugger [#&#8203;255](https://redirect.github.com/pulumi/pulumi-dotnet/pull/255) - \[runtime] Fix RunPlugin with new versions of the pulumi cli [#&#8203;395](https://redirect.github.com/pulumi/pulumi-dotnet/pull/395) ### [`v3.68.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3680---2024-09-17) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.67.1...v3.68.0) ##### Improvements - \[sdk] Parameterized providers are now considered stable [#&#8203;347](https://redirect.github.com/pulumi/pulumi-dotnet/pull/347) - \[sdk/provider] Support authoring multi-language components in .NET [#&#8203;275](https://redirect.github.com/pulumi/pulumi-dotnet/pull/275) ### [`v3.67.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3671---2024-09-13) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.67.0...v3.67.1) ##### Bug Fixes - \[runtime] Fix debugger support [#&#8203;343](https://redirect.github.com/pulumi/pulumi-dotnet/pull/343) ### [`v3.67.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3670---2024-09-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.66.2...v3.67.0) ##### Improvements - \[sdk] Add support for attaching debuggers [#&#8203;332](https://redirect.github.com/pulumi/pulumi-dotnet/pull/332) ##### Bug Fixes - \[sdk/provider] Fix serialization of ComponentResources (no id required) [#&#8203;331](https://redirect.github.com/pulumi/pulumi-dotnet/pull/331) - \[sdk/provider] Fix output value serialization. [#&#8203;337](https://redirect.github.com/pulumi/pulumi-dotnet/pull/337) ### [`v3.66.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3662---2024-08-20) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.66.1...v3.66.2) ##### Bug Fixes - \[sdk] Update Pulumi.Protobuf to v3.27.3 (fork) [#&#8203;324](https://redirect.github.com/pulumi/pulumi-dotnet/pull/324) ### [`v3.66.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3661---2024-08-09) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.66.0...v3.66.1) ##### Bug Fixes - \[sdk] Fix binary compatibility with provider SDKs built using older version of the core SDK [#&#8203;318](https://redirect.github.com/pulumi/pulumi-dotnet/pull/318) ### [`v3.66.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3660---2024-08-09) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.65.0...v3.66.0) ##### Improvements - \[sdk] Support package parameterization for Read/RegisterResource/Call/Invoke [#&#8203;311](https://redirect.github.com/pulumi/pulumi-dotnet/pull/311) ##### Bug Fixes - \[sdk] Fix type annotations for inputListFromT0/1 [#&#8203;301](https://redirect.github.com/pulumi/pulumi-dotnet/pull/301) - \[sdk] Fix race condition in GrpcMonitor's GrpcChannel management [#&#8203;304](https://redirect.github.com/pulumi/pulumi-dotnet/pull/304) - \[sdk] Fix unknown inputs deserialization [#&#8203;306](https://redirect.github.com/pulumi/pulumi-dotnet/pull/306) - \[sdk] Fix program hanging when a resource transformation throws an exception [#&#8203;307](https://redirect.github.com/pulumi/pulumi-dotnet/pull/307) - \[sdk] Fix handling of input properties with backing fields [#&#8203;308](https://redirect.github.com/pulumi/pulumi-dotnet/pull/308) ##### Improvements - \[sdk/auto] Implement Stack.ImportAsync() for batch importing resources into a stack [#&#8203;296](https://redirect.github.com/pulumi/pulumi-dotnet/pull/296) ### [`v3.65.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3650---2024-07-18) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.64.0...v3.65.0) ##### Improvements - \[sdk] Update Grpc dependency. [#&#8203;256](https://redirect.github.com/pulumi/pulumi-dotnet/pull/256) - \[sdk] Strongly type URN values in Provider [#&#8203;293](https://redirect.github.com/pulumi/pulumi-dotnet/pull/293) ##### Bug Fixes - \[sdk] Enable .net analyzers and fix warnings. [#&#8203;278](https://redirect.github.com/pulumi/pulumi-dotnet/pull/278) - \[sdk] Bufix Parsing of CustomTimeouts [#&#8203;290](https://redirect.github.com/pulumi/pulumi-dotnet/pull/290) - \[sdk] Add support for deserializing output values and use them from transforms [#&#8203;298](https://redirect.github.com/pulumi/pulumi-dotnet/pull/298) ##### Improvements - \[runtime] Update pulumi/pulumi to 3.121 [#&#8203;288](https://redirect.github.com/pulumi/pulumi-dotnet/pull/288) ### [`v3.64.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3640---2024-06-10) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.63.1...v3.64.0) ##### Improvements - \[sdk] Make transforms a stable feature, not experimental [#&#8203;270](https://redirect.github.com/pulumi/pulumi-dotnet/pull/270) - \[sdk/provider] Refactor Provider tests in order to prepare integration testing [#&#8203;277](https://redirect.github.com/pulumi/pulumi-dotnet/pull/277) ##### Bug Fixes - \[runtime] Upgrade dependencies [#&#8203;279](https://redirect.github.com/pulumi/pulumi-dotnet/pull/279) ### [`v3.63.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3631---2024-04-25) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.63.0...v3.63.1) ##### Bug Fixes - \[sdk] Remove Google.Protobuf pinned dependency. [#&#8203;268](https://redirect.github.com/pulumi/pulumi-dotnet/pull/268) ### [`v3.63.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3630---2024-04-25) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.62.0...v3.63.0) ##### Improvements - \[sdk] Support the Result field for better support of up --continue-on-error [#&#8203;259](https://redirect.github.com/pulumi/pulumi-dotnet/pull/259) ##### Bug Fixes - \[sdk] Revert gRPC update that broke large messages. [#&#8203;266](https://redirect.github.com/pulumi/pulumi-dotnet/pull/266) ##### Improvements - \[sdk/auto] Add ContinueOnError option to the automation API [#&#8203;265](https://redirect.github.com/pulumi/pulumi-dotnet/pull/265) ### [`v3.62.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3620---2024-04-22) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.61.0...v3.62.0) ##### Improvements - \[sdk] Allow apply to have unknown values during updates [#&#8203;258](https://redirect.github.com/pulumi/pulumi-dotnet/pull/258) ##### Bug Fixes - \[sdk] Use InvariantCulture when parsing numbers from config [#&#8203;262](https://redirect.github.com/pulumi/pulumi-dotnet/pull/262) - \[sdk] Pin Google.Protobuf to 3.24. [#&#8203;263](https://redirect.github.com/pulumi/pulumi-dotnet/pull/263) ### [`v3.61.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3610---2024-04-16) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.60.0...v3.61.0) ##### Improvements - \[sdk] Add attribute to handle deserialization of constructor parameters with name overrides [#&#8203;231](https://redirect.github.com/pulumi/pulumi-dotnet/pull/231) - \[sdk] Add experimental support for the new transforms system [#&#8203;234](https://redirect.github.com/pulumi/pulumi-dotnet/pull/234) - \[sdk] Add FSharp Ops helpers [#&#8203;250](https://redirect.github.com/pulumi/pulumi-dotnet/pull/250) - \[sdk] Handle Outputs in derived Stacks [#&#8203;251](https://redirect.github.com/pulumi/pulumi-dotnet/pull/251) ### [`v3.60.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3600---2024-03-05) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.59.0...v3.60.0) ##### Improvements - \[sdk] Add environment add and remove commands to automation api [#&#8203;210](https://redirect.github.com/pulumi/pulumi-dotnet/pull/210) - \[sdk] Update Grpc dependency. [#&#8203;219](https://redirect.github.com/pulumi/pulumi-dotnet/pull/219) - \[sdk] Drop support for netcoreapp3.1 [#&#8203;235](https://redirect.github.com/pulumi/pulumi-dotnet/pull/235) - \[sdk/auto] Add new API to install the Pulumi CLI from the Automation API [#&#8203;226](https://redirect.github.com/pulumi/pulumi-dotnet/pull/226) - \[sdk/provider] Initial implementation of a reflection-based PropertyValue deserializer [#&#8203;201](https://redirect.github.com/pulumi/pulumi-dotnet/pull/201) ### [`v3.59.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3590---2023-11-15) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.58.0...v3.59.0) ##### Improvements - \[sdk] Implement reflection-based RegisterOutputs() for component resources [#&#8203;200](https://redirect.github.com/pulumi/pulumi-dotnet/pull/200) - \[sdk] Support .NET 8. [#&#8203;205](https://redirect.github.com/pulumi/pulumi-dotnet/pull/205) ##### Bug Fixes - \[sdk/auto] Fix issue with specifying a git username for remote workspaces. [#&#8203;186](https://redirect.github.com/pulumi/pulumi-dotnet/pull/186) ### [`v3.58.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v3580---2023-10-27) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.57.0...v3.58.0) ##### Bug Fixes - \[sdk] Register and await tasks created from `Apply` that don't return anything. [#&#8203;183](https://redirect.github.com/pulumi/pulumi-dotnet/pull/183) ##### Improvements - \[sdk/auto] Add support for the path option for config operations. [#&#8203;191](https://redirect.github.com/pulumi/pulumi-dotnet/pull/191) ### [`v3.57.0`](https://redirect.github.com/pulumi/pulumi-dotnet/releases/tag/v3.57.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.56.2...v3.57.0) ##### Improvements - Converter SDK: add `Args: string[]` to the `ConvertProgramRequest` fields which allows converter plugins to access args provided to `pulumi convert` ### [`v3.56.2`](https://redirect.github.com/pulumi/pulumi-dotnet/releases/tag/v3.56.2) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.56.1...v3.56.2) ##### Improvements - Plugin: clean up resources and exit cleanly on receiving SIGINT or CTRL_BREAK. ##### Bug Fixes ### [`v3.56.1`](https://redirect.github.com/pulumi/pulumi-dotnet/releases/tag/v3.56.1) [Compare Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.56.0...v3.56.1) ##### Bug Fixes - \[sdk/automation-api] Adds guards in a non-destructive way against invalid JSON engine event data. [#&#8203;167](https://redirect.github.com/pulumi/pulumi-dotnet/pull/167) ### [`v3.56.0`](https://redirect.github.com/pulumi/pulumi-dotnet/releases/tag/v3.56.0) [Compare Source](https: </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: Bryce Lampe <bryce@pulumi.com>	2025-07-18 23:53:59 +00:00
Bryce Lampe	4436ab5e76	Changes for upcoming go-provider v1.0 (#525) ... Fixes #535	2025-05-15 16:38:58 -07:00
Bryce Lampe	30a01b6893	Handle context cancellation during builds (#539) ... `buildx.Build` doesn't terminate if context is canceled, so this PR rearranges things such that we can wait for the build or context to finish. Fixes #533.	2025-05-05 16:12:48 -07:00
Bryce Lampe	52d8cfcd96	Fix bad dependencies (#536) ... I had to relax branch protections in order to merge #527 and during that time Renovate was able to sneak some bad PRs in. This rolls those changes back.	2025-05-01 15:47:53 -07:00
pulumi-renovate[bot]	8987df0a8e	Update first-party Pulumi dependencies (#390) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.144.1` -> `3.165.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.144.1/3.165.0) | | [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi) ([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs)) | dependencies | minor | [`3.128.0` -> `3.165.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.128.0/3.165.0) | | [github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest) | require | minor | `v0.1.3` -> `v0.3.1` | | [github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build) | require | patch | `v0.0.8` -> `v0.0.11` | | [github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java) | require | minor | `v1.9.0` -> `v1.10.0` | | [github.com/pulumi/pulumi-yaml](https://redirect.github.com/pulumi/pulumi-yaml) | require | minor | `v1.15.1` -> `v1.17.0` | | [github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.163.0` -> `v3.165.0` | | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250417154401-0ff190607702` -> `v3.165.0` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250417154401-0ff190607702` -> `v3.165.0` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.0.0-20250417154401-0ff190607702` -> `v3.165.0` | | [github.com/pulumi/pulumi/sdk/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.163.0` -> `v3.165.0` | | [github.com/pulumi/pulumi/sdk/v3](https://redirect.github.com/pulumi/pulumi) | require | minor | `v3.153.1` -> `v3.165.0` | | [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) | action | minor | `v1.3.0` -> `v1.4.0` | --- ### Release Notes <details> <summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary> ### [`v3.165.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.165.0) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.163.0...v3.165.0) ##### 3.165.0 (2025-04-25) ##### Features - \[cli] Add PULUMI_RUN_PROGRAM environment variable to globally set --run-program [#&#8203;19293](https://redirect.github.com/pulumi/pulumi/pull/19293) - \[auto/{go,nodejs,python}] Add --run-program to automation api for destroy and refresh [#&#8203;19218](https://redirect.github.com/pulumi/pulumi/pull/19218) - \[auto/nodejs] Add the ability to configure a remote executor image [#&#8203;19286](https://redirect.github.com/pulumi/pulumi/pull/19286) - \[programgen] Support provider resources in generatehcl2definition [#&#8203;19192](https://redirect.github.com/pulumi/pulumi/pull/19192) - \[sdk/dotnet] Update dotnet to v3.79.0 [#&#8203;19302](https://redirect.github.com/pulumi/pulumi/pull/19302) - \[cli/package] Change default registry source to private - \[sdk/nodejs] Add resourceName and resourceType to get the runtime name and type token for resources [#&#8203;18842](https://redirect.github.com/pulumi/pulumi/pull/18842) - \[sdk/nodejs] Add `--exclude` and `--exclude-dependents` to the NodeJS Automation API [#&#8203;19270](https://redirect.github.com/pulumi/pulumi/pull/19270) - \[sdk/python] Add bootstrap-less mode for Python component providers [#&#8203;19198](https://redirect.github.com/pulumi/pulumi/pull/19198) - \[sdk/python] Add pulumi.type_token decorator [#&#8203;19309](https://redirect.github.com/pulumi/pulumi/pull/19309) ##### Bug Fixes - \[engine] Fix ImportID being lost from state during update operations [#&#8203;19314](https://redirect.github.com/pulumi/pulumi/pull/19314) - \[pkg] Update Dependencies in the JSON schema [#&#8203;19282](https://redirect.github.com/pulumi/pulumi/pull/19282) - \[cli/import] Fix an error when importing a resource that already exists with the matching ID [#&#8203;19290](https://redirect.github.com/pulumi/pulumi/pull/19290) - \[cli/install] Handle local plugin paths with a version number [#&#8203;19254](https://redirect.github.com/pulumi/pulumi/pull/19254) - \[cli/package] Detect readme in subdir for package publishing [#&#8203;19298](https://redirect.github.com/pulumi/pulumi/pull/19298) - \[programgen] Fix generation of ImportID when building programs from state [#&#8203;19237](https://redirect.github.com/pulumi/pulumi/pull/19237) - \[sdk/go] Make log message for "Hiding logs" less visible [#&#8203;19261](https://redirect.github.com/pulumi/pulumi/pull/19261) - \[sdk/go] Improve output when plugin crashes [#&#8203;19305](https://redirect.github.com/pulumi/pulumi/pull/19305) - \[components/nodejs] Fix component construct when the there's a namespace in the `name` field in \`package.json [#&#8203;19242](https://redirect.github.com/pulumi/pulumi/pull/19242) - \[sdk/nodejs] Don't discard non-outputty component outputs [#&#8203;19228](https://redirect.github.com/pulumi/pulumi/pull/19228) - \[sdk/nodejs] Use PackageSpec.Dependencies for component provider dependencies [#&#8203;19236](https://redirect.github.com/pulumi/pulumi/pull/19236) ##### Miscellaneous - \[sdk/{nodejs,python}] Don’t install python/nodejs runtimes during make build [#&#8203;19250](https://redirect.github.com/pulumi/pulumi/pull/19250) ### [`v3.163.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31630-2025-04-16) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.162.0...v3.163.0) ##### Features - \[cli/display] Display \[unknown] rather than output<T> in diffs [#&#8203;19204](https://redirect.github.com/pulumi/pulumi/pull/19204) - \[programgen] Add import to HCL2 serialization as well as other missing functions [#&#8203;19163](https://redirect.github.com/pulumi/pulumi/pull/19163) - \[programgen/{dotnet,go,nodejs,python}] Utilize resource option import in codegen for go, nodejs, python, dotnet [#&#8203;19177](https://redirect.github.com/pulumi/pulumi/pull/19177) - \[cli/package] Save package source to `packages` in Pulumi.yaml on `package add` [#&#8203;19157](https://redirect.github.com/pulumi/pulumi/pull/19157) - \[sdk/python] Add static pulumi_type property to resource classes [#&#8203;19221](https://redirect.github.com/pulumi/pulumi/pull/19221) ##### Bug Fixes - \[cli/new] Don't require to be logged in to retrieve templates [#&#8203;19196](https://redirect.github.com/pulumi/pulumi/pull/19196) - \[engine] Fix ReplaceOnChanges being respected during deleteBeforeReplace checks [#&#8203;19188](https://redirect.github.com/pulumi/pulumi/pull/19188) - \[programgen/go] Fix handling of build metadata in provider versions [#&#8203;19149](https://redirect.github.com/pulumi/pulumi/pull/19149) - \[sdk/python] Support optional types using 3.10 union syntax [#&#8203;19207](https://redirect.github.com/pulumi/pulumi/pull/19207) ##### Miscellaneous - \[sdk/nodejs] Target ES2020 instead of ES2016 [#&#8203;19191](https://redirect.github.com/pulumi/pulumi/pull/19191) ### [`v3.162.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31620-2025-04-09) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.161.0...v3.162.0) ##### Bug Fixes - \[sdk/nodejs] Add back the @&#8203;pulumi/pulumi/queryable module used by [@&#8203;pulumi/policy](https://redirect.github.com/pulumi/policy) [#&#8203;19172](https://redirect.github.com/pulumi/pulumi/pull/19172) ### [`v3.161.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31610-2025-04-09) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.160.0...v3.161.0) ##### Features - \[yaml] Upgrade yaml to 1.16.0 [#&#8203;19148](https://redirect.github.com/pulumi/pulumi/pull/19148) [#&#8203;19143](https://redirect.github.com/pulumi/pulumi/pull/19143) - \[sdk/dotnet] Upgrade dotnet to v3.78.0 [#&#8203;19148](https://redirect.github.com/pulumi/pulumi/pull/19148) - \[sdk/go] Add `property.Path` and associated functions. [#&#8203;17500](https://redirect.github.com/pulumi/pulumi/pull/17500) - \[sdk/go] Make `property.Value` immutable [#&#8203;17500](https://redirect.github.com/pulumi/pulumi/pull/17500) - \[sdk/java] Upgrade Java to 1.9.0 [#&#8203;19148](https://redirect.github.com/pulumi/pulumi/pull/19148) - \[sdk/python] Add enum support for Python component schema inference [#&#8203;19072](https://redirect.github.com/pulumi/pulumi/pull/19072) ##### Bug Fixes - \[cli/new] Avoid creating a main.py file when chosing the uv toolchain [#&#8203;19154](https://redirect.github.com/pulumi/pulumi/pull/19154) - \[cli/package] Fix schema versioning when explicit package version is given - \[components/nodejs] Fix schema inference for optional boolean properties [#&#8203;19133](https://redirect.github.com/pulumi/pulumi/pull/19133) - \[cli/plugin] Fix slowness of workspace.DetectProjectFromPath affecting pulumi convert timings [#&#8203;19082](https://redirect.github.com/pulumi/pulumi/pull/19082) - \[sdk/python] Serialize component description to the JSON schema [#&#8203;19093](https://redirect.github.com/pulumi/pulumi/pull/19093) - \[sdk/python] Return an InputPropertyError for invalid enum values [#&#8203;19116](https://redirect.github.com/pulumi/pulumi/pull/19116) - \[sdk/python] Properties used in component outputs are never plain [#&#8203;19135](https://redirect.github.com/pulumi/pulumi/pull/19135) ##### Miscellaneous - \[protobuf] Remove StreamInvoke from the Provider service [#&#8203;19129](https://redirect.github.com/pulumi/pulumi/pull/19129) ### [`v3.160.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31600-2025-04-01) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.159.0...v3.160.0) ##### Features - \[cli] Add `--run-program` support to `pulumi destroy` [#&#8203;19044](https://redirect.github.com/pulumi/pulumi/pull/19044) - \[cli] Improve the usability and expressiveness of the pulumi watch command. [#&#8203;19083](https://redirect.github.com/pulumi/pulumi/pull/19083) - \[programgen/go] Generated Go programs now target Go 1.23 [#&#8203;19026](https://redirect.github.com/pulumi/pulumi/pull/19026) ##### Bug Fixes - \[sdk/nodejs] Fix names in type references in components [#&#8203;19066](https://redirect.github.com/pulumi/pulumi/pull/19066) - \[sdk/nodejs] Fix SDK generation for components that use resource references and are namespaced ##### Miscellaneous - \[cli] Update pulumi-language-dotnet to 3.77.0 [#&#8203;19053](https://redirect.github.com/pulumi/pulumi/pull/19053) - \[cli] Update moby/moby to 26.1.5 [#&#8203;19081](https://redirect.github.com/pulumi/pulumi/pull/19081) - \[cli/package] Update `package add` command format string to show that file paths to packages can also be used [#&#8203;19003](https://redirect.github.com/pulumi/pulumi/pull/19003) ### [`v3.159.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31590-2025-03-27) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.158.0...v3.159.0) ##### Features - \[auto/nodejs] Add the `--preview-only` option for `destroy` in the NodeJS Automation API [#&#8203;19030](https://redirect.github.com/pulumi/pulumi/pull/19030) - \[auto/python] Add `--preview-only` option for `destroy` in the Python Automation API [#&#8203;19028](https://redirect.github.com/pulumi/pulumi/pull/19028) - \[cli/new] Allow `pulumi new` to use templates defined in the Pulumi Cloud [#&#8203;18627](https://redirect.github.com/pulumi/pulumi/pull/18627) - \[components/nodejs] Construct components based on explicit component classes [#&#8203;18996](https://redirect.github.com/pulumi/pulumi/pull/18996) - \[cli/package] Support GITHUB_TOKEN and GITLAB_TOKEN in `pulumi package add` for Git packages [#&#8203;18991](https://redirect.github.com/pulumi/pulumi/pull/18991) - \[cli/package] Stop allowing overriding namespace in PulumiPlugin.yaml, start inferring it for Git plugins [#&#8203;19016](https://redirect.github.com/pulumi/pulumi/pull/19016) - \[programgen/nodejs] Add canOutput code generation and conformance tests [#&#8203;18897](https://redirect.github.com/pulumi/pulumi/pull/18897) - \[sdk/nodejs] Allow namespace for components to be set in PulumiPlugin.yaml [#&#8203;18982](https://redirect.github.com/pulumi/pulumi/pull/18982) - \[sdk/nodejs] Run componentProviderHost automatically in RunPlugin if any Components are exported [#&#8203;18984](https://redirect.github.com/pulumi/pulumi/pull/18984) - \[sdk/python] Avoid error messages due to missing a missing implementation of `GetRequiredPackages` in the Python Automation API server [#&#8203;19020](https://redirect.github.com/pulumi/pulumi/pull/19020) - \[sdk/python] Pass list of components to component_provider_host [#&#8203;19021](https://redirect.github.com/pulumi/pulumi/pull/19021) ##### Bug Fixes - \[programgen] Fix plugin resolution in convert [#&#8203;19040](https://redirect.github.com/pulumi/pulumi/pull/19040) - \[programgen/nodejs] Fix references to variables that were renamed due to keyword overlap etc in resource attributes [#&#8203;19041](https://redirect.github.com/pulumi/pulumi/pull/19041) - \[cli/package] Use correct local path for Git based components with a version tag [#&#8203;19023](https://redirect.github.com/pulumi/pulumi/pull/19023) - \[sdk/python] Set name and namespace via component_provider_host [#&#8203;18985](https://redirect.github.com/pulumi/pulumi/pull/18985) ##### Miscellaneous - \[cli] Update language plugins to java@1.8.0 and yaml@1.15.1 ### [`v3.158.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31580-2025-03-24) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.157.0...v3.158.0) ##### Features - \[sdkgen] Aliases in provider schemas can now be set with just an array of strings for the aliased types [#&#8203;18925](https://redirect.github.com/pulumi/pulumi/pull/18925) - \[cli/engine] Allow targets to be excluded with the `--exclude` flag. `--exclude-dependents` can also be used to exclude all children of an excluded target as well [#&#8203;18828](https://redirect.github.com/pulumi/pulumi/pull/18828) - \[sdk/{go,python}] Add pulumiResourceName and pulumiResourceType to get the runtime name and type token for resources [#&#8203;18959](https://redirect.github.com/pulumi/pulumi/pull/18959) - \[cli/{install,package}] Install package SDKs on `pulumi install` [#&#8203;18940](https://redirect.github.com/pulumi/pulumi/pull/18940) - \[programgen/nodejs] Add tryOutput generation to nodejs [#&#8203;18852](https://redirect.github.com/pulumi/pulumi/pull/18852) - \[sdk/{nodejs,python}] Report an error when no components are found [#&#8203;18988](https://redirect.github.com/pulumi/pulumi/pull/18988) - \[cli/package] Add experimental package publishing command [#&#8203;18818](https://redirect.github.com/pulumi/pulumi/pull/18818) - \[cli/package] Allow overriding name and namespace of plugins in PulumiPlugin.yaml [#&#8203;18990](https://redirect.github.com/pulumi/pulumi/pull/18990) - \[sdk/yaml] Upgrade pulumi-yaml to 1.15.0 [#&#8203;19002](https://redirect.github.com/pulumi/pulumi/pull/19002) ##### Bug Fixes - \[cli/display] Don't print "same" outputs in `--refresh` [#&#8203;18943](https://redirect.github.com/pulumi/pulumi/pull/18943) - \[engine sdk/go] Allow retain on delete to be overridden back to false by child resources that inherit it [#&#8203;18956](https://redirect.github.com/pulumi/pulumi/pull/18956) - \[cli/{install,package}] Avoid duplicate packages in requirements.txt [#&#8203;18972](https://redirect.github.com/pulumi/pulumi/pull/18972) - \[cli/state] State rename no longer overly strictly validates resources names [#&#8203;18938](https://redirect.github.com/pulumi/pulumi/pull/18938) - \[pkg] The `refresh` command now respects `TargetDependents` [#&#8203;18905](https://redirect.github.com/pulumi/pulumi/pull/18905) - \[sdk/python] Report better error messages for various error cases [#&#8203;18983](https://redirect.github.com/pulumi/pulumi/pull/18983) - \[sdk/python] Remove the dev dependency on `pytest-watch` [#&#8203;19008](https://redirect.github.com/pulumi/pulumi/pull/19008) ### [`v3.157.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31570-2025-03-18) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.156.0...v3.157.0) ##### Features - \[engine] Allow protect to be overridden back to false by child resources that inherit it - \[engine] Add an envvar PULUMI_PARALLEL_DIFF to run diff calculations in parallel [#&#8203;18872](https://redirect.github.com/pulumi/pulumi/pull/18872) - \[yaml] Introduce the packages section in Pulumi.yaml [#&#8203;18917](https://redirect.github.com/pulumi/pulumi/pull/18917) - \[sdk/go] Add a Parent option to AnalyzerResourceOptions [#&#8203;18927](https://redirect.github.com/pulumi/pulumi/pull/18927) - \[sdk/nodejs] Add support for resource referenced in component provider [#&#8203;18885](https://redirect.github.com/pulumi/pulumi/pull/18885) - \[sdkgen/nodejs] Change Node.js code generation to use [@&#8203;types/node](https://redirect.github.com/types/node) of version 18 instead of 14 [#&#8203;18922](https://redirect.github.com/pulumi/pulumi/pull/18922) - \[cli/package] Disambiguate packages with a different namespace than "pulumi" [#&#8203;18418](https://redirect.github.com/pulumi/pulumi/pull/18418) - \[cli] Add parallel stack fetching for DIY backends (AWS S3, Azure Blob, GCP Storage) to improve performance when selecting stacks. Configure with PULUMI_DIY_BACKEND_PARALLEL environment variable. [#&#8203;18909](https://redirect.github.com/pulumi/pulumi/pull/18909) ##### Bug Fixes - \[cli/package] Fix explicitly named package names in NodeJS [#&#8203;18933](https://redirect.github.com/pulumi/pulumi/pull/18933) - \[sdkgen/dotnet] Support parameterization in generated remote component resources for .NET [#&#8203;18699](https://redirect.github.com/pulumi/pulumi/pull/18699) ##### Miscellaneous - \[cli] Remove `query` command [#&#8203;18891](https://redirect.github.com/pulumi/pulumi/pull/18891) ### [`v3.156.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31560-2025-03-13) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.155.0...v3.156.0) ##### Bug Fixes - \[sdk/go] Fix overriding protect in child resources - \[sdk/python] Fix mapping input names in Construct recursively in component providers [#&#8203;18864](https://redirect.github.com/pulumi/pulumi/pull/18864) ### [`v3.155.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31550-2025-03-12) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.154.0...v3.155.0) ##### Features - \[engine] Add batch encryption for snapshot serialization to increase performance working with many secrets [#&#8203;18743](https://redirect.github.com/pulumi/pulumi/pull/18743) - \[sdk/dotnet] Upgrade pulumi dotnet to 3.76.1 [#&#8203;18853](https://redirect.github.com/pulumi/pulumi/pull/18853) ##### Bug Fixes - \[cli/display] Fix a timestamp inconsistency between the JSON display and the engine event log [#&#8203;18838](https://redirect.github.com/pulumi/pulumi/pull/18838) - \[engine] Engine will respect cgroup limits for --parallel [#&#8203;18815](https://redirect.github.com/pulumi/pulumi/pull/18815) - \[engine] Return an error on malformed provider references rather than ignoring them [#&#8203;18854](https://redirect.github.com/pulumi/pulumi/pull/18854) ##### Miscellaneous - \[ci] Run CI with Go 1.23 and 1.24 [#&#8203;18841](https://redirect.github.com/pulumi/pulumi/pull/18841) ### [`v3.154.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31540-2025-03-07) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.153.1...v3.154.0) ##### Features - \[cli] Set the --parallel flag with PULUMI_PARALLEL environment variable [#&#8203;18782](https://redirect.github.com/pulumi/pulumi/pull/18782) - \[engine] Pass URN and ID to providers Configure method [#&#8203;18807](https://redirect.github.com/pulumi/pulumi/pull/18807) - \[yaml] Upgrade pulumi-yaml to 1.14.1 [#&#8203;18819](https://redirect.github.com/pulumi/pulumi/pull/18819) - \[cli/{config,state}] Support a PULUMI_STACK environment variable for selecting your stack [#&#8203;18717](https://redirect.github.com/pulumi/pulumi/pull/18717) - \[auto/go] Add the ability to rename the given stack to the Go Automation API [#&#8203;18723](https://redirect.github.com/pulumi/pulumi/pull/18723) - \[auto/go] Automation API for Go now permits setting --diff flag on refresh [#&#8203;18792](https://redirect.github.com/pulumi/pulumi/pull/18792) - \[cli/install] Correctly marshal PluginSpec in GetRequiredPackages, so pulumi install can install git plugins [#&#8203;18786](https://redirect.github.com/pulumi/pulumi/pull/18786) - \[auto/nodejs] Add `stack rename` to the NodeJS Automation API [#&#8203;18696](https://redirect.github.com/pulumi/pulumi/pull/18696) - \[auto/python] Add the ability to rename the given stack to the Python Automation API [#&#8203;18712](https://redirect.github.com/pulumi/pulumi/pull/18712) - \[sdk/python] Log a warning when trying to convert outputs to strings now logs a warning [#&#8203;18790](https://redirect.github.com/pulumi/pulumi/pull/18790) ##### Bug Fixes - \[cli] Stack selections will now always be saved as if `stack select` had been used [#&#8203;14519](https://redirect.github.com/pulumi/pulumi/pull/14519) - \[cli/plugin] Fix plugin "exited prematurely" false positives [#&#8203;18793](https://redirect.github.com/pulumi/pulumi/pull/18793) ### [`v3.153.1`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31531-2025-02-28) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.153.0...v3.153.1) ##### Bug Fixes - \[programgen] Fix concurrent map write panics in the caching mapper [#&#8203;18746](https://redirect.github.com/pulumi/pulumi/pull/18746) - \[sdk/python] Fix `get_organization` returning `None` from older SDKs [#&#8203;18769](https://redirect.github.com/pulumi/pulumi/pull/18769) ### [`v3.153.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31530-2025-02-27) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.152.0...v3.153.0) ##### Features - \[sdkgen/dotnet] Update pulumi-dotnet to v3.75.2 - \[auto/python] Add `--preview-only` to the `refresh` command in the Python Automation API [#&#8203;18674](https://redirect.github.com/pulumi/pulumi/pull/18674) - \[sdk/{dotnet,go,java,nodejs,python,yaml}] Add the ability to lookup project root from sdks, equivalent to path.root in Terraform [#&#8203;18595](https://redirect.github.com/pulumi/pulumi/pull/18595) ##### Bug Fixes - \[cli] Make policy rm and stack rm non-interactive when requested [#&#8203;18708](https://redirect.github.com/pulumi/pulumi/pull/18708) - \[engine] Fix a panic when importing a stack reference [#&#8203;18704](https://redirect.github.com/pulumi/pulumi/pull/18704) - \[cli/new] Report all errors from git clone for multiple refs. [#&#8203;18702](https://redirect.github.com/pulumi/pulumi/pull/18702) - \[cli/package] Correctly deal with subdirs in package add when no version number is specified [#&#8203;18605](https://redirect.github.com/pulumi/pulumi/pull/18605) - \[cli/package] Improve disambiguation for package loading when a name is passed in [#&#8203;18709](https://redirect.github.com/pulumi/pulumi/pull/18709) - \[programgen/dotnet] Fix generating SDKs for .NET projects when using pulumi convert [#&#8203;18510](https://redirect.github.com/pulumi/pulumi/pull/18510) - \[sdkgen/dotnet] Revert provider SDKs to target net6 [#&#8203;18729](https://redirect.github.com/pulumi/pulumi/pull/18729) - \[sdk/{go,nodejs,python}] Exclude resource references from property dependencies for packaged components [#&#8203;18620](https://redirect.github.com/pulumi/pulumi/pull/18620) - \[sdk/nodejs] Fix incorrect dependencies due to missing await [#&#8203;17629](https://redirect.github.com/pulumi/pulumi/pull/17629) - \[sdk/nodejs] Fix searching for pulumi packages past junction points on Windows [#&#8203;18715](https://redirect.github.com/pulumi/pulumi/pull/18715) ##### Miscellaneous - \[sdk/python] Fix merge method typing for ResourceOptions and Invoke\*Options [#&#8203;18061](https://redirect.github.com/pulumi/pulumi/pull/18061) ### [`v3.152.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31520-2025-02-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.151.0...v3.152.0) ##### Bug Fixes - \[auto] Fix `up` with nested secret in config file [#&#8203;18676](https://redirect.github.com/pulumi/pulumi/pull/18676) - \[cli] Fix mapping in the presence of hardcoded entries [#&#8203;18680](https://redirect.github.com/pulumi/pulumi/pull/18680) ### [`v3.151.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31510-2025-02-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.150.0...v3.151.0) ##### Features - \[engine] Changes to source position metadata will be batched in the snapshot system [#&#8203;18579](https://redirect.github.com/pulumi/pulumi/pull/18579) - \[cli/display] Add --show-secrets args to pulumi up and pulumi preview, showing secrets in the CLI output. Fixing [#&#8203;9830](https://redirect.github.com/pulumi/pulumi/issues/9830) [#&#8203;18503](https://redirect.github.com/pulumi/pulumi/pull/18503) - \[auto/go] Include stderr when InstallPulumiCommand fails [#&#8203;18549](https://redirect.github.com/pulumi/pulumi/pull/18549) - \[auto/nodejs] Add the `--preview-only` flag to the `refresh` command in the NodeJS Automation API [#&#8203;18662](https://redirect.github.com/pulumi/pulumi/pull/18662) - \[auto/nodejs] Support `--clear-pending-creates` for the `refresh` command in the NodeJS automation API [#&#8203;18653](https://redirect.github.com/pulumi/pulumi/pull/18653) - \[cli/package] Support parameterizing providers when calling `get-mapping` - \[auto/python] Add `--clear-pending-creates` to the `refresh` command in the Python Automation API [#&#8203;18658](https://redirect.github.com/pulumi/pulumi/pull/18658) - \[backend/service] Don't send "gitHub:owner" and "gitHub:repo" tags to the service. [#&#8203;18489](https://redirect.github.com/pulumi/pulumi/pull/18489) - \[backend/service] Add bulk encrypte service types [#&#8203;18588](https://redirect.github.com/pulumi/pulumi/pull/18588) - \[programgen] Add conformance test for dynamic lists and returns [#&#8203;18424](https://redirect.github.com/pulumi/pulumi/pull/18424) - \[programgen] Implement a first version of `try` in PCL [#&#8203;18454](https://redirect.github.com/pulumi/pulumi/pull/18454) - \[programgen] Implement a version of can in PCL [#&#8203;18571](https://redirect.github.com/pulumi/pulumi/pull/18571) - \[programgen] Support parameterized mapping from source ecosystems (e.g. Terraform) to Pulumi when converting programs - \[sdk/nodejs] \[Experimental/Components] Add infrastructure for component discovery and schema inference [#&#8203;18580](https://redirect.github.com/pulumi/pulumi/pull/18580) - \[sdk/nodejs] \[Experimental/Components] Infer simple inputs/outputs and optionality [#&#8203;18590](https://redirect.github.com/pulumi/pulumi/pull/18590) - \[sdk/nodejs] \[Experimental/Components] Instantiate components [#&#8203;18583](https://redirect.github.com/pulumi/pulumi/pull/18583) - \[sdk/nodejs] \[Experimental/Components]: Handle ComplexType [#&#8203;18602](https://redirect.github.com/pulumi/pulumi/pull/18602) - \[sdk/nodejs] \[Experimental/Components] Hook up inputs & outputs in the provider [#&#8203;18600](https://redirect.github.com/pulumi/pulumi/pull/18600) - \[sdk/nodejs] \[Experimental/Components] Infer input types [#&#8203;18597](https://redirect.github.com/pulumi/pulumi/pull/18597) - \[sdk/python] \[Experimental/Components] Handle Assets and Archives [#&#8203;18513](https://redirect.github.com/pulumi/pulumi/pull/18513) - \[sdk/python] \[Experimental/Components]: Infer type and property descriptions [#&#8203;18540](https://redirect.github.com/pulumi/pulumi/pull/18540) ##### Bug Fixes - \[cli] Fix nesting directories when generating multiple sdks [#&#8203;18332](https://redirect.github.com/pulumi/pulumi/pull/18332) - \[cli] Fix a panic in `help new` when local templates weren't present [#&#8203;18661](https://redirect.github.com/pulumi/pulumi/pull/18661) - \[engine] Send parent URN to resource transforms [#&#8203;18642](https://redirect.github.com/pulumi/pulumi/pull/18642) - \[engine] The engine will now call DiffConfig on explict providers to decide replace semantics, this matches the behaviour for default providers [#&#8203;18509](https://redirect.github.com/pulumi/pulumi/pull/18509) - \[engine] Don't overwrite schema versions if they exist [#&#8203;18672](https://redirect.github.com/pulumi/pulumi/pull/18672) - \[pkg] Do not cache schema if we never read it back [#&#8203;18618](https://redirect.github.com/pulumi/pulumi/pull/18618) - \[cli/config] Fix reading YAML config with uint64 sized numbers [#&#8203;18582](https://redirect.github.com/pulumi/pulumi/pull/18582) - \[sdk/nodejs] Improve type inference for `output` and `Unwrap` when used on tuples [#&#8203;18652](https://redirect.github.com/pulumi/pulumi/pull/18652) - \[cli/package] Avoid panic'ing when the project file is invalid [#&#8203;18537](https://redirect.github.com/pulumi/pulumi/pull/18537) - \[sdk/python] \[Experimental/Components] Detect more map and array types [#&#8203;18546](https://redirect.github.com/pulumi/pulumi/pull/18546) - \[sdk/python] \[Experimental/Components] Return Python stack trace on error [#&#8203;18558](https://redirect.github.com/pulumi/pulumi/pull/18558) - \[sdk/python] Fix source position information to point to user code, not provider SDKs [#&#8203;18575](https://redirect.github.com/pulumi/pulumi/pull/18575) ##### Miscellaneous - \[sdk/dotnet] Update dotnet to 8.0 LTS [#&#8203;18619](https://redirect.github.com/pulumi/pulumi/pull/18619) ### [`v3.150.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31500-2025-02-11) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.149.0...v3.150.0) ##### Features - \[cli/state] Add `--all` to `state delete` [#&#8203;18502](https://redirect.github.com/pulumi/pulumi/pull/18502) - \[sdk/python] \[Experimental/Components] Check for required inputs [#&#8203;18487](https://redirect.github.com/pulumi/pulumi/pull/18487) - \[sdk/python] \[Experimental/Components] Infer plain types [#&#8203;18483](https://redirect.github.com/pulumi/pulumi/pull/18483) ##### Bug Fixes - \[engine] Fix a potential panic for corrupted secret values [#&#8203;18501](https://redirect.github.com/pulumi/pulumi/pull/18501) - \[engine] Apply autonaming strategy only to custom resources, not components [#&#8203;18523](https://redirect.github.com/pulumi/pulumi/pull/18523) - \[sdk/python] \[Experimental/Components] Throw an error when encountring resource references [#&#8203;18485](https://redirect.github.com/pulumi/pulumi/pull/18485) ##### Miscellaneous - \[pkg] Change BulkDecrypt to return list instead of map [#&#8203;18486](https://redirect.github.com/pulumi/pulumi/pull/18486) ### [`v3.149.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31490-2025-02-07) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.148.0...v3.149.0) ##### Features - \[cli] Update `pulumi-java` to 1.2.0 - \[cli/display] Always print resource summaries in preview, even after errors [#&#8203;18465](https://redirect.github.com/pulumi/pulumi/pull/18465) - \[cli/plugin] Improve the warning when using plugins from PATH [#&#8203;18476](https://redirect.github.com/pulumi/pulumi/pull/18476) - \[engine] Deployments continue past delete errors due to protect [#&#8203;18396](https://redirect.github.com/pulumi/pulumi/pull/18396) - \[sdk/python] \[Experimental/Components] Add infrastructure to bootstrap providers from component resources [#&#8203;18403](https://redirect.github.com/pulumi/pulumi/pull/18403) [#&#8203;18401](https://redirect.github.com/pulumi/pulumi/pull/18401) - \[sdk/python] \[Experimental/Components] Analyze ComponentResource properties [#&#8203;18403](https://redirect.github.com/pulumi/pulumi/pull/18403) - \[sdk/python] \[Experimental/Components] Infer ComplexTypes for ComponentResources [#&#8203;18405](https://redirect.github.com/pulumi/pulumi/pull/18405) - \[sdk/python] \[Experimental/Components] Handle complex types in inputs and outputs [#&#8203;18419](https://redirect.github.com/pulumi/pulumi/pull/18419) - \[sdk/python] \[Experimental/Components] Support array types in component schema inference [#&#8203;18469](https://redirect.github.com/pulumi/pulumi/pull/18469) - \[sdk/python] \[Experimental/Components] Support dict types in component schema inference [#&#8203;18472](https://redirect.github.com/pulumi/pulumi/pull/18472) ##### Bug Fixes - \[engine] Filter \__internal keys when calling providers DiffConfig [#&#8203;18440](https://redirect.github.com/pulumi/pulumi/pull/18440) - \[engine] The engine will correctly use old state for provider config with no reported differences [#&#8203;18411](https://redirect.github.com/pulumi/pulumi/pull/18411) - \[cli/config] Fix setting indexed top-level config keys [#&#8203;18444](https://redirect.github.com/pulumi/pulumi/pull/18444) - \[cli/import] Fix the declaration of parameterized providers in import JSON files [#&#8203;18450](https://redirect.github.com/pulumi/pulumi/pull/18450) - \[sdk/go] Provide a better error message when a Go program can't be run [#&#8203;18383](https://redirect.github.com/pulumi/pulumi/pull/18383) - \[cli/package] Allow https:// prefixes for Git repository URLs [#&#8203;18380](https://redirect.github.com/pulumi/pulumi/pull/18380) - \[cli/package] Fix package add and code generation when package name contains dashes in Go [#&#8203;18457](https://redirect.github.com/pulumi/pulumi/pull/18457) - \[sdk/python] \[Experimental/Components] Handle inputs and outputs [#&#8203;18408](https://redirect.github.com/pulumi/pulumi/pull/18408) ### [`v3.148.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31480-2025-01-31) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.147.0...v3.148.0) ##### Features - \[cli/config] Introduce `--type` flag for `config set` [#&#8203;18287](https://redirect.github.com/pulumi/pulumi/pull/18287) - \[cli/new] Improve docs for disambiguating repositories on hosts where the URL is ambiguous [#&#8203;18379](https://redirect.github.com/pulumi/pulumi/pull/18379) - \[cli/package] Automatically get latest version for git based plugins if none is specified [#&#8203;18215](https://redirect.github.com/pulumi/pulumi/pull/18215) - \[cli/package] Allow plugins from git sources to live in subdirectories in the repository [#&#8203;18322](https://redirect.github.com/pulumi/pulumi/pull/18322) - \[sdk/python] Support commits in prerelease versions of generated Python SDKs [#&#8203;18289](https://redirect.github.com/pulumi/pulumi/pull/18289) ##### Bug Fixes - \[cli/config] Fix parsing of config keys with paths and colons in path segments [#&#8203;18378](https://redirect.github.com/pulumi/pulumi/pull/18378) - \[engine] Fix some plugin context leaks, which could leave plugin processes running on exit [#&#8203;18373](https://redirect.github.com/pulumi/pulumi/pull/18373) - \[cli/package] Respect virtualenv option in package add/link [#&#8203;18319](https://redirect.github.com/pulumi/pulumi/pull/18319) - \[programgen/nodejs] Handle keyword overlap of "this" keyword for local variables [#&#8203;18177](https://redirect.github.com/pulumi/pulumi/pull/18177) - \[sdk/nodejs] Fix debug strings triggering the Output toString error [#&#8203;18016](https://redirect.github.com/pulumi/pulumi/pull/18016) - \[sdk/nodejs] Use the corepack executable from dev dependencies [#&#8203;18393](https://redirect.github.com/pulumi/pulumi/pull/18393) - \[sdk/python] Allow Pip 25 [#&#8203;18343](https://redirect.github.com/pulumi/pulumi/pull/18343) - \[sdk/python] Make RunPlugin default to using a virtualenv [#&#8203;18371](https://redirect.github.com/pulumi/pulumi/pull/18371) ##### Miscellaneous - \[sdk/{dotnet,java}] Update Java to 1.1.0 and Dotnet to 3.72.0 [#&#8203;18394](https://redirect.github.com/pulumi/pulumi/pull/18394) - \[sdkgen] Align pulumi.json and schema.go [#&#8203;18334](https://redirect.github.com/pulumi/pulumi/pull/18334) ### [`v3.147.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31470-2025-01-21) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.146.0...v3.147.0) ##### Features - \[cli] Update go.mod to require go1.22 [#&#8203;18274](https://redirect.github.com/pulumi/pulumi/pull/18274) - \[cli/config] Improve documentation for pulumi config set [#&#8203;18285](https://redirect.github.com/pulumi/pulumi/pull/18285) - \[cli/package] Allow short hashes as versions in package add [#&#8203;18277](https://redirect.github.com/pulumi/pulumi/pull/18277) - \[cli/{package,plugin}] Support getting plugins from remote git sources [#&#8203;17827](https://redirect.github.com/pulumi/pulumi/pull/17827) ##### Bug Fixes - \[engine] Skip acquiring program packages during refresh when running inline automation programs [#&#8203;18283](https://redirect.github.com/pulumi/pulumi/pull/18283) - \[sdk/nodejs] Avoid unnecessary Node.js installations [#&#8203;18293](https://redirect.github.com/pulumi/pulumi/pull/18293) - \[sdk/{nodejs,python}] Fix handling of DependencyResource when checking invoke deps [#&#8203;18275](https://redirect.github.com/pulumi/pulumi/pull/18275) - \[sdk/{nodejs,python}] Permit output arguments in plain invokes for backwards compatibility [#&#8203;18304](https://redirect.github.com/pulumi/pulumi/pull/18304) ##### Miscellaneous - \[sdk/python] Manage the publish dependencies in pyproject.toml [#&#8203;18261](https://redirect.github.com/pulumi/pulumi/pull/18261) ### [`v3.146.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31460-2025-01-15) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.145.0...v3.146.0) ##### Features - \[cli] Allow specifying a version with `pulumi convert --from=<plugin>@&#8203;<version>` [#&#8203;18220](https://redirect.github.com/pulumi/pulumi/pull/18220) - \[cli] Enable Autonaming Configuration in non-experimental mode [#&#8203;18228](https://redirect.github.com/pulumi/pulumi/pull/18228) - \[cli] Retrieve Git metadata from the environment if not running in a repository [#&#8203;12871](https://redirect.github.com/pulumi/pulumi/pull/12871) - \[pkg] Add a `call` intrinsic to PCL [#&#8203;18206](https://redirect.github.com/pulumi/pulumi/pull/18206) - \[auto/go] Add `Color` option to `optdestroy`, `optpreview`, `optrefresh`, and `optup` packages to allow explicit configuration of output color. [#&#8203;18184](https://redirect.github.com/pulumi/pulumi/pull/18184) - \[cli/import] Add support for parameterized packages to `pulumi import` [#&#8203;18038](https://redirect.github.com/pulumi/pulumi/pull/18038) - \[cli/import] Import can now import resources from parameterized providers [#&#8203;18039](https://redirect.github.com/pulumi/pulumi/pull/18039) - \[cli/new] Add support for Copilot templates [#&#8203;16825](https://redirect.github.com/pulumi/pulumi/pull/16825) ##### Bug Fixes - \[auto/go] Fix rejection of `nil` inline programs in the Go automation API [#&#8203;18214](https://redirect.github.com/pulumi/pulumi/pull/18214) - \[sdk/go] Improve error messages for wrong stack output types [#&#8203;18245](https://redirect.github.com/pulumi/pulumi/pull/18245) - \[sdk/{nodejs,python}] Wait for resource in the input property dependencies [#&#8203;18204](https://redirect.github.com/pulumi/pulumi/pull/18204) - \[cli/plugin] Show plugin kind in plugin rm correctly. Also show the usage string if the plugin type is incorrect [#&#8203;18179](https://redirect.github.com/pulumi/pulumi/pull/18179) - \[cli/plugin] Passthrough unstructured logs from dynamic providers [#&#8203;18253](https://redirect.github.com/pulumi/pulumi/pull/18253) - \[sdk/python] Fix callbackserver shutdown [#&#8203;18190](https://redirect.github.com/pulumi/pulumi/pull/18190) ### [`v3.145.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31450-2025-01-07) [Compare Source](https://redirect.github.com/pulumi/pulumi/compare/v3.144.1...v3.145.0) ##### Features - \[auto/go] Support --clear-pending-creates for refresh command in Go Automation API for preview refresh and refresh operations. [#&#8203;18101](https://redirect.github.com/pulumi/pulumi/pull/18101) - \[programgen/{java,sdkgen/java}] Only use gRPC to communicate with the Java host [#&#8203;18138](https://redirect.github.com/pulumi/pulumi/pull/18138) - \[cli/package] Support bridging to terraform providers automatically in pulumi convert [#&#8203;17992](https://redirect.github.com/pulumi/pulumi/pull/17992) - \[sdk/go] Implement deferred output for the Go SDK and program-gen [#&#8203;17885](https://redirect.github.com/pulumi/pulumi/pull/17885) ##### Bug Fixes - \[cli] Fix TestPackageAddGoParameterized to utilize version path [#&#8203;18150](https://redirect.github.com/pulumi/pulumi/pull/18150) - \[cli/engine] Clarify the usage string for the --expect-no-changes flag [#&#8203;18105](https://redirect.github.com/pulumi/pulumi/pull/18105) - \[auto/go] Return error if no inline program specified [#&#8203;18086](https://redirect.github.com/pulumi/pulumi/pull/18086) - \[auto/go] Interrupt programs gracefully when the context is canceled [#&#8203;18124](https://redirect.github.com/pulumi/pulumi/pull/18124) - \[cli/new] Provide a better error message when pulumi new --ai generates a program with errors [#&#8203;18091](https://redirect.github.com/pulumi/pulumi/pull/18091) - \[cli/new] Provide a more meaningful message for the --language flag [#&#8203;18092](https://redirect.github.com/pulumi/pulumi/pull/18092) - \[engine] Enable `pulumi:pulumi:getResource` to hydrate `Read` resources [#&#8203;18070](https://redirect.github.com/pulumi/pulumi/pull/18070) - \[programgen] Allow for case-insensitive terraform convert source [#&#8203;18111](https://redirect.github.com/pulumi/pulumi/pull/18111) - \[programgen/go] Fix importing module names in Go programs that aren't lower-case [#&#8203;18113](https://redirect.github.com/pulumi/pulumi/pull/18113) - \[sdk/go] Fix panic when diffing computed property values [#&#8203;18104](https://redirect.github.com/pulumi/pulumi/pull/18104) - \[sdk/go] Avoid calling invokes with dependencies on unknown resources [#&#8203;18133](https://redirect.github.com/pulumi/pulumi/pull/18133) - \[sdk/nodejs] Fix source maps when using jest [#&#8203;18108](https://redirect.github.com/pulumi/pulumi/pull/18108) - \[sdk/nodejs] Avoid calling invokes with dependencies on unknown resources [#&#8203;18152](https://redirect.github.com/pulumi/pulumi/pull/18152) - \[sdk/python] Fix reading pulumi-plugin.json when using the uv toolchain [#&#8203;18107](https://redirect.github.com/pulumi/pulumi/pull/18107) - \[sdk/python] Fix ListPackages when using uv [#&#8203;18121](https://redirect.github.com/pulumi/pulumi/pull/18121) - \[sdk/python] Fix dynamic providers when using Poetry or uv [#&#8203;18126](https://redirect.github.com/pulumi/pulumi/pull/18126) - \[sdk/python] Fix prerelease version [#&#8203;18125](https://redirect.github.com/pulumi/pulumi/pull/18125) - \[sdk/python] Avoid calling invokes with dependencies on unknown resources [#&#8203;18141](https://redirect.github.com/pulumi/pulumi/pull/18141) ##### Miscellaneous - \[programgen/java] Bump Java SDK dependency version so that `package gen-sdk` emits buildable code [#&#8203;18130](https://redirect.github.com/pulumi/pulumi/pull/18130) - \[sdk/python] Switch to pyproject.toml + uv [#&#8203;18081](https://redirect.github.com/pulumi/pulumi/pull/18081) - \[sdk/python] Move mypy configuration into pyproject.toml [#&#8203;18118](https://redirect.github.com/pulumi/pulumi/pull/18118) - \[sdk/python] Move pyright configuration into pyproject.toml [#&#8203;18116](https://redirect.github.com/pulumi/pulumi/pull/18116) - \[sdk/python] Move ruff configuration into pyproject.toml [#&#8203;18117](https://redirect.github.com/pulumi/pulumi/pull/18117) </details> <details> <summary>pulumi/providertest (github.com/pulumi/providertest)</summary> ### [`v0.3.1`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.3.1) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.3.0...v0.3.1) #### What's Changed - feat: fixing login support on windows by [@&#8203;rshade](https://redirect.github.com/rshade) in [https://github.com/pulumi/providertest/pull/137](https://redirect.github.com/pulumi/providertest/pull/137) #### New Contributors - [@&#8203;rshade](https://redirect.github.com/rshade) made their first contribution in [https://github.com/pulumi/providertest/pull/137](https://redirect.github.com/pulumi/providertest/pull/137) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.3.0...v0.3.1 ### [`v0.3.0`](https://redirect.github.com/pulumi/providertest/compare/v0.2.0...v0.3.0) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.2.0...v0.3.0) ### [`v0.2.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.2.0) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.1.7...v0.2.0) ##### What's Changed - BREAKING CHANGE: Remove ProviderTest abstraction by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/133](https://redirect.github.com/pulumi/providertest/pull/133) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.1.7...v0.2.0 ### [`v0.1.7`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.1.7) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.1.6...v0.1.7) ##### What's Changed - Improve convert by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/130](https://redirect.github.com/pulumi/providertest/pull/130) - Docs & variable tidy up by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/131](https://redirect.github.com/pulumi/providertest/pull/131) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.1.6...v0.1.7 ### [`v0.1.6`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.1.6) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.1.5...v0.1.6) ##### What's Changed - Update README.md to steer toward pulumitest by [@&#8203;mjeffryes](https://redirect.github.com/mjeffryes) in [https://github.com/pulumi/providertest/pull/123](https://redirect.github.com/pulumi/providertest/pull/123) - Add support for custom temp directory by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/125](https://redirect.github.com/pulumi/providertest/pull/125) - Fix retention & location of temp dir via env vars by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/126](https://redirect.github.com/pulumi/providertest/pull/126) - Deprecate ProviderTest by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/128](https://redirect.github.com/pulumi/providertest/pull/128) - Further docs updates from feedback by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/129](https://redirect.github.com/pulumi/providertest/pull/129) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.1.5...v0.1.6 ### [`v0.1.5`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.1.5) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.1.4...v0.1.5) ##### What's Changed - Add handshake GRPC method replay by [@&#8203;VenelinMartinov](https://redirect.github.com/VenelinMartinov) in [https://github.com/pulumi/providertest/pull/118](https://redirect.github.com/pulumi/providertest/pull/118) - Fix secret identification by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/121](https://redirect.github.com/pulumi/providertest/pull/121) - Show diffs for all previews by [@&#8203;thomas11](https://redirect.github.com/thomas11) in [https://github.com/pulumi/providertest/pull/120](https://redirect.github.com/pulumi/providertest/pull/120) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.1.4...v0.1.5 ### [`v0.1.4`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.1.4) [Compare Source](https://redirect.github.com/pulumi/providertest/compare/v0.1.3...v0.1.4) ##### What's Changed - Clean up failed tests by default by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/112](https://redirect.github.com/pulumi/providertest/pull/112) - Fix tool install by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/115](https://redirect.github.com/pulumi/providertest/pull/115) - Failed test cleanup usability improvements by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/114](https://redirect.github.com/pulumi/providertest/pull/114) - Fix secret sanitizing for non string values by [@&#8203;danielrbradley](https://redirect.github.com/danielrbradley) in [https://github.com/pulumi/providertest/pull/113](https://redirect.github.com/pulumi/providertest/pull/113) - Bump minimum pulumi requirement by [@&#8203;blampe](https://redirect.github.com/blampe) in [https://github.com/pulumi/providertest/pull/119](https://redirect.github.com/pulumi/providertest/pull/119) **Full Changelog**: https://github.com/pulumi/providertest/compare/v0.1.3...v0.1.4 </details> <details> <summary>pulumi/pulumi-docker-build (github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary> ### [`v0.0.11`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.10...v0.0.11) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.10...v0.0.11) ### [`v0.0.10`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.9...v0.0.10) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.9...v0.0.10) ### [`v0.0.9`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.8...v0.0.9) [Compare Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.8...v0.0.9) </details> <details> <summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java/pkg)</summary> ### [`v1.10.0`](https://redirect.github.com/pulumi/pulumi-java/releases/tag/v1.10.0) [Compare Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.9.0...v1.10.0) ##### Improvements - Support generating programs using the `import` resource option ##### Bug Fixes </details> <details> <summary>pulumi/pulumi-yaml (github.com/pulumi/pulumi-yaml)</summary> ### [`v1.17.0`](https://redirect.github.com/pulumi/pulumi-yaml/blob/HEAD/CHANGELOG.md#v1170---2025-04-24) [Compare Source](https://redirect.github.com/pulumi/pulumi-yaml/compare/v1.16.0...v1.17.0) ##### Improvements - \[runtime] Make setting resource properties using an object variables possible [#&#8203;779](https://redirect.github.com/pulumi/pulumi-yaml/pull/779) ##### Bug Fixes - \[runtime] Use PluginDownloadURL resource option correctly when loading plugins [#&#8203;776](https://redirect.github.com/pulumi/pulumi-yaml/pull/776) ### [`v1.16.0`](https://redirect.github.com/pulumi/pulumi-yaml/blob/HEAD/CHANGELOG.md#v1160---2025-04-08) [Compare Source](https://redirect.github.com/pulumi/pulumi-yaml/compare/v1.15.2...v1.16.0) ##### Improvements - \[runtime] Update pulumi/pulumi to 3.160.0 [#&#8203;773](https://redirect.github.com/pulumi/pulumi-yaml/pull/773) ### [`v1.15.2`](https://redirect.github.com/pulumi/pulumi-yaml/blob/HEAD/CHANGELOG.md#v1152---2025-04-08) [Compare Source](https://redirect.github.com/pulumi/pulumi-yaml/compare/v1.15.1...v1.15.2) ##### Bug Fixes - \[runtime] Allow default values for integer config [#&#8203;771](https://redirect.github.com/pulumi/pulumi-yaml/pull/771) </details> <details> <summary>pulumi/esc-action (pulumi/esc-action)</summary> ### [`v1.4.0`](https://redirect.github.com/pulumi/esc-action/compare/v1.3.0...v1.4.0) [Compare Source](https://redirect.github.com/pulumi/esc-action/compare/v1.3.0...v1.4.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: Bryce Lampe <bryce@pulumi.com>	2025-04-28 20:23:17 +00:00
Ramon Quitales	8c5a9ac033	Fix weekly pulumi/pulumi update (#501) ... Fixes: #497 This PR follows the `weekly-pulumi-update` CI workflow steps to update our `pulumi/pulumi` dependency, with manual intervention to resolve tooling update conflicts. Before generating the SDKs, it's necessary to update the language tools and otel packages to ensure compatibility with the latest changes. Additional command executed for the manual updates: ```sh TOOLS=( "github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3" "github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3" "github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3" "go.opentelemetry.io/otel/exporters/otlp/otlptrace" ) for TOOL in "${TOOLS[@]}"; do go get -u $TOOL go mod tidy done ``` --- Note: the Go directive is upgraded to v1.24 as `github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3` requires Go v1.24 ([ref](5c96e4e6aa/sdk/go/pulumi-language-go/go.mod (L3))).	2025-04-21 11:26:37 -07:00
Ramon Quitales	f83b7a0a44	chore: update moby/buildkit to v0.20.1 (#519) ... **Description:** This PR updates the `moby/buildkit` dependency to `v0.20.1` in order to remain compatible with recent changes required by GitHub Actions (GHA) caching. During the upgrade, several upstream behavioral changes required forking and restoring legacy logic to maintain compatibility: - Introduced `containsGithubToken` to replicate logic that was previously in `buildflags.ParseCacheEntry`, which is now removed. This check ensures we return `nil` instead of a zero-value object. - Forked the previous implementation of `ParseExports`, as its upstream logic changed significantly. This ensures short-term compatibility for release before the GHA deprecation deadline. - A follow-up issue will be created to improve this forked logic and align more closely with upstream behavior. 🚨 **Fixes critical issue:** This change addresses a high-priority issue where GitHub Actions cache will stop working due to the upcoming deprecation of the legacy caching service (effective **April 15, 2025**). Recent build failures showed errors like: > *"This legacy service is shutting down, effective April 15, 2025. Migrate to the new service ASAP. For more information: https://gh.io/gha-cache-sunset"* Root cause was identified in #515, where using `buildx >= 0.21.0` is required. This repo was previously using `buildx 0.18.0`. Closes: #515	2025-04-11 13:42:47 -07:00
Ramon Quitales	2c4b4260dc	Fix weekly-pulumi-update (#491) ... Fixes: #485 This PR follows the `weekly-pulumi-update` CI workflow steps to update our `pulumi/pulumi` dependency, with manual intervention to resolve tooling update conflicts. Before generating the SDKs, it's necessary to update the language tools and otel packages to ensure compatibility with the latest changes. Additional command executed for the manual updates: ```sh TOOLS=( "github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3" "github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3" "github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3" "go.opentelemetry.io/otel/exporters/otlp/otlptrace" ) for TOOL in "${TOOLS[@]}"; do go get -u $TOOL go mod tidy	2025-03-18 10:15:07 -07:00
Pulumi Bot	8ff1017270	Automated upgrade: bump pulumi/pulumi to 3.153.1 (#472) ... Automated upgrade: bump pulumi/pulumi to 3.153.1	2025-03-03 16:49:18 +01:00
Ian Wahbe	dad72f7d65	Upgrade pulumi-go-provider to v0.24.1 (#413) ... Fixes #403	2025-01-15 09:29:23 -05:00
pulumi-renovate[bot]	8425d58820	Update first-party Pulumi dependencies to v3.0.0-20241224122059-455089c460a2 (#384) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224113601-c355c2133397` -> `v3.0.0-20241224122059-455089c460a2` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224113601-c355c2133397` -> `v3.0.0-20241224122059-455089c460a2` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224113601-c355c2133397` -> `v3.0.0-20241224122059-455089c460a2` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-24 13:55:14 +00:00
pulumi-renovate[bot]	ae24ee020d	Update first-party Pulumi dependencies to v3.0.0-20241224113601-c355c2133397 (#383) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224102528-502c283491fd` -> `v3.0.0-20241224113601-c355c2133397` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224102528-502c283491fd` -> `v3.0.0-20241224113601-c355c2133397` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241224102528-502c283491fd` -> `v3.0.0-20241224113601-c355c2133397` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-24 12:56:35 +00:00
pulumi-renovate[bot]	019331c4ed	Update first-party Pulumi dependencies to v3.0.0-20241224102528-502c283491fd (#382) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223182450-17ed96e129a9` -> `v3.0.0-20241224102528-502c283491fd` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223182450-17ed96e129a9` -> `v3.0.0-20241224102528-502c283491fd` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223182450-17ed96e129a9` -> `v3.0.0-20241224102528-502c283491fd` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-24 11:56:12 +00:00
pulumi-renovate[bot]	fd570c3cb9	Update first-party Pulumi dependencies to v3.0.0-20241223182450-17ed96e129a9 (#379) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223154335-b96f19e7166e` -> `v3.0.0-20241223182450-17ed96e129a9` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223154335-b96f19e7166e` -> `v3.0.0-20241223182450-17ed96e129a9` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223154335-b96f19e7166e` -> `v3.0.0-20241223182450-17ed96e129a9` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-23 19:57:01 +00:00
pulumi-renovate[bot]	131a26f052	Update first-party Pulumi dependencies to v3.0.0-20241223154335-b96f19e7166e (#377) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223133555-6ab78cb35a42` -> `v3.0.0-20241223154335-b96f19e7166e` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223133555-6ab78cb35a42` -> `v3.0.0-20241223154335-b96f19e7166e` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223133555-6ab78cb35a42` -> `v3.0.0-20241223154335-b96f19e7166e` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-23 16:53:05 +00:00
pulumi-renovate[bot]	a04ed06f14	Update first-party Pulumi dependencies to v3.0.0-20241223133555-6ab78cb35a42 (#376) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223120504-b5c85a670505` -> `v3.0.0-20241223133555-6ab78cb35a42` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223120504-b5c85a670505` -> `v3.0.0-20241223133555-6ab78cb35a42` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223120504-b5c85a670505` -> `v3.0.0-20241223133555-6ab78cb35a42` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-23 15:08:09 +00:00
pulumi-renovate[bot]	5965661cc2	Update first-party Pulumi dependencies to v3.0.0-20241223120504-b5c85a670505 (#375) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223091829-5e0d8a840c95` -> `v3.0.0-20241223120504-b5c85a670505` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223091829-5e0d8a840c95` -> `v3.0.0-20241223120504-b5c85a670505` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223091829-5e0d8a840c95` -> `v3.0.0-20241223120504-b5c85a670505` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-23 13:52:58 +00:00
pulumi-renovate[bot]	a1ab7c8a0f	Update first-party Pulumi dependencies to v3.0.0-20241223091829-5e0d8a840c95 (#374) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pulumi/pulumi/sdk/go/pulumi-language-go/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223042026-60b6da565491` -> `v3.0.0-20241223091829-5e0d8a840c95` | | [github.com/pulumi/pulumi/sdk/nodejs/cmd/pulumi-language-nodejs/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223042026-60b6da565491` -> `v3.0.0-20241223091829-5e0d8a840c95` | | [github.com/pulumi/pulumi/sdk/python/cmd/pulumi-language-python/v3](https://redirect.github.com/pulumi/pulumi) | require | patch | `v3.0.0-20241223042026-60b6da565491` -> `v3.0.0-20241223091829-5e0d8a840c95` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "every weekday" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiaW1wYWN0L25vLWNoYW5nZWxvZy1yZXF1aXJlZCJdfQ==--> Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>	2024-12-23 10:53:46 +00:00