github-actions
fd92c10fd9
v0.0.18
2026-05-27 17:05:19 +00:00
Cory Hall
d02195313f
Restore .NET SDK target framework to net6.0 ( #872 )
...
## Summary
- Restore the generated .NET SDK project target framework from `net8.0`
to `net6.0`.
- Keep the change scoped to the framework bump introduced by #857 .
## Testing
- `dotnet build sdk/dotnet/Pulumi.DockerBuild.csproj --source
https://api.nuget.org/v3/index.json `
Note: a plain `dotnet build sdk/dotnet/Pulumi.DockerBuild.csproj` first
failed during restore because user-level NuGet sources point at missing
local worktree paths. The command above restricts restore to nuget.org;
the SDK build also needs the transient `sdk/dotnet/version.txt` that the
repo's `sdk/dotnet` generation target creates before building.
Co-authored-by: Codex <codex@openai.com >
2026-05-27 09:38:27 -04:00
pulumi-provider-automation[bot]
5a648eeac2
Update GitHub Actions workflows. ( #871 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[c608cd5027225fb54de6ba9788c5c8de381af069](c608cd5027 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-27 07:01:18 +00:00
pulumi-provider-automation[bot]
cbc23a6854
Update GitHub Actions workflows. ( #870 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[8d6a40522db47cd4b958d1d61f039f802c8676c1](8d6a40522d ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-26 06:51:40 +00:00
pulumi-provider-automation[bot]
23db6da099
Update GitHub Actions workflows. ( #869 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[b6ab3f6c4b243c533f8bf4b992e3ff8a40c05b79](b6ab3f6c4b ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-25 07:01:22 +00:00
pulumi-provider-automation[bot]
5d1d3734e5
Update GitHub Actions workflows. ( #867 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[afe9da8f781d2b3f817d03e6d092dc676c6b3fa4](afe9da8f78 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-23 06:33:03 +00:00
pulumi-renovate[bot]
5028aaae3d
Update dependency @pulumi/pulumi to v3.243.0 ( #866 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.242.0` ->
`3.243.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.242.0/3.243.0 )
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.243.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.243.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.242.0...v3.243.0 )
#### 3.243.0 (2026-05-22)
##### Features
- \[cli] Make the `pulumi project new -y` command write a minimal
project file with no template
[#​22847](https://redirect.github.com/pulumi/pulumi/pull/22847 )
- \[cli] Allow coding agents to create claimable temporary accounts when
not authenticated
- \[cli] Suggest `pulumi neo` in `pulumi preview` and `pulumi up`
diagnostics output
[#​23326](https://redirect.github.com/pulumi/pulumi/pull/23326 )
- \[sdk] Add `List` to the Go `plugin.Provider` interface, wired to the
streaming `ResourceProvider.List` RPC
[#​23287](https://redirect.github.com/pulumi/pulumi/pull/23287 )
- \[sdkgen] Reserve the package names 'pulumi' and 'input' for internal
use
[#​23321](https://redirect.github.com/pulumi/pulumi/pull/23321 )
- \[cli/cloud] Prefer text/markdown over JSON in `pulumi api` when an
endpoint produces both
[#​22963](https://redirect.github.com/pulumi/pulumi/pull/22963 )
- \[cli/do] Add resource support to `pulumi do`
[#​23215](https://redirect.github.com/pulumi/pulumi/pull/23215 )
- \[cli/neo] Pressing Esc in `pulumi neo` now clears the input box when
it has text; with an empty box, Esc still cancels the agent's current
turn
[#​23299](https://redirect.github.com/pulumi/pulumi/pull/23299 )
- \[cli/new] Alias `pulumi new` to `pulumi project new`
[#​23265](https://redirect.github.com/pulumi/pulumi/pull/23265 )
##### Bug Fixes
- \[cli] Require `--yes` to confirm `pulumi deployment cancel`, `pulumi
stack schedule remove`, `pulumi org webhook remove`, and `pulumi stack
webhook remove` when running non-interactively
[#​23264](https://redirect.github.com/pulumi/pulumi/pull/23264 )
- \[pcl] Don't silently ignore `...` in function arguments
[#​23309](https://redirect.github.com/pulumi/pulumi/pull/23309 )
- \[sdkgen/nodejs] Cache package references per-deployment in generated
SDKs to fix concurrent inline programs
[#​23068](https://redirect.github.com/pulumi/pulumi/pull/23068 )
- \[backend/service] Error out when setting up journaler fails
[#​22671](https://redirect.github.com/pulumi/pulumi/pull/22671 )
##### Miscellaneous
- \[cli/package] Update the `pulumi package add --agent` documentation
hint to use `<type-token>` as the placeholder for the `/docs/...` URL
[#​23294](https://redirect.github.com/pulumi/pulumi/pull/23294 )
- \[cli/plugin] Rename plugin ls to list and rm to remove
[#​23291](https://redirect.github.com/pulumi/pulumi/pull/23291 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-05-23 00:19:58 +00:00
pulumi-provider-automation[bot]
b6760addfc
Update GitHub Actions workflows. ( #865 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[1f1f66a893e6cfe901c30ce05c7d7536a04b624b](1f1f66a893 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-22 06:53:11 +00:00
pulumi-provider-automation[bot]
601ca19a37
Update GitHub Actions workflows. ( #863 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[030f4a40d6b74923fd2a23f84d947fd5ffc232ae](030f4a40d6 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-21 06:53:10 +00:00
pulumi-renovate[bot]
cdcd44eeab
Update first-party Pulumi dependencies ( #861 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.241.0` ->
`3.242.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.241.0/3.242.0 )
|
|
[github.com/pulumi/pulumi-java](https://redirect.github.com/pulumi/pulumi-java )
| require | minor | `v1.27.0` -> `v1.28.0` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.241.0` -> `v3.242.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.242.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32420-2026-05-19 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.241.0...v3.242.0 )
##### Features
- \[cli] Add a `pulumi` package for npx support
- \[cli] Add the `pulumi org member edit` command
[#​23235](https://redirect.github.com/pulumi/pulumi/pull/23235 )
- \[cli] Add the `pulumi org member remove` command
[#​23237](https://redirect.github.com/pulumi/pulumi/pull/23237 )
- \[cli/cloud] Add `pulumi deployment get` to retrieve details for a
specific deployment
[#​23238](https://redirect.github.com/pulumi/pulumi/pull/23238 )
- \[cli/cloud] Add `pulumi insights account scan get <account>
<scan-id>` to show the full workflow run for a single Insights scan
[#​23255](https://redirect.github.com/pulumi/pulumi/pull/23255 )
- \[cli/cloud] Add `pulumi insights account scan list <account>` to
discover recent scan IDs to feed into `pulumi insights account scan log`
[#​23255](https://redirect.github.com/pulumi/pulumi/pull/23255 )
- \[cli/deployment] Add dedicated flags for each deployment setting
[#​23236](https://redirect.github.com/pulumi/pulumi/pull/23236 )
- \[cli/do] Add the start of `pulumi do`
[#​23176](https://redirect.github.com/pulumi/pulumi/pull/23176 )
- \[cli/neo] Add `--print`/`-p` to `pulumi neo` to run a single prompt
non-interactively and print the agent's final response to stdout
[#​23245](https://redirect.github.com/pulumi/pulumi/pull/23245 )
##### Bug Fixes
- \[cli/cloud] Fix `pulumi insights account scan log --all` to follow
the server's pagination cursor through the end of the log, and render
`--job/--step` mode as structured lines instead of an empty raw-string
blob
[#​23256](https://redirect.github.com/pulumi/pulumi/pull/23256 )
- \[sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz
output
[#​23240](https://redirect.github.com/pulumi/pulumi/pull/23240 )
- \[sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
[#​23253](https://redirect.github.com/pulumi/pulumi/pull/23253 )
</details>
<details>
<summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java)</summary>
###
[`v1.28.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1280---2026-05-19 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.27.0...v1.28.0 )
##### Improvements
- \[codegen] Implement logical-not and negation unary operators
correctly
[#​2188](https://redirect.github.com/pulumi/pulumi-java/pull/2188 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.242.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.242.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.241.0...v3.242.0 )
#### 3.242.0 (2026-05-19)
##### Features
- \[cli] Add a `pulumi` package for npx support
- \[cli] Add the `pulumi org member edit` command
[#​23235](https://redirect.github.com/pulumi/pulumi/pull/23235 )
- \[cli] Add the `pulumi org member remove` command
[#​23237](https://redirect.github.com/pulumi/pulumi/pull/23237 )
- \[cli/cloud] Add `pulumi deployment get` to retrieve details for a
specific deployment
[#​23238](https://redirect.github.com/pulumi/pulumi/pull/23238 )
- \[cli/cloud] Add `pulumi insights account scan get <account>
<scan-id>` to show the full workflow run for a single Insights scan
[#​23255](https://redirect.github.com/pulumi/pulumi/pull/23255 )
- \[cli/cloud] Add `pulumi insights account scan list <account>` to
discover recent scan IDs to feed into `pulumi insights account scan log`
[#​23255](https://redirect.github.com/pulumi/pulumi/pull/23255 )
- \[cli/deployment] Add dedicated flags for each deployment setting
[#​23236](https://redirect.github.com/pulumi/pulumi/pull/23236 )
- \[cli/do] Add the start of `pulumi do`
[#​23176](https://redirect.github.com/pulumi/pulumi/pull/23176 )
- \[cli/neo] Add `--print`/`-p` to `pulumi neo` to run a single prompt
non-interactively and print the agent's final response to stdout
[#​23245](https://redirect.github.com/pulumi/pulumi/pull/23245 )
##### Bug Fixes
- \[cli/cloud] Fix `pulumi insights account scan log --all` to follow
the server's pagination cursor through the end of the log, and render
`--job/--step` mode as structured lines instead of an empty raw-string
blob
[#​23256](https://redirect.github.com/pulumi/pulumi/pull/23256 )
- \[sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz
output
[#​23240](https://redirect.github.com/pulumi/pulumi/pull/23240 )
- \[sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
[#​23253](https://redirect.github.com/pulumi/pulumi/pull/23253 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-05-19 21:51:31 +00:00
pulumi-provider-automation[bot]
b90594a58d
Update GitHub Actions workflows. ( #860 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[67f164b40070c76a35f8f2650af615978cb4492d](67f164b400 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-19 06:53:58 +00:00
pulumi-renovate[bot]
7cc2388992
Update first-party Pulumi dependencies to v3.241.0 ( #859 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.239.0` ->
`3.241.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.239.0/3.241.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.239.0` -> `v3.241.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.241.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32410-2026-05-18 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.239.0...v3.241.0 )
##### Features
- \[cli] Add `--output json` to `pulumi preview` for a structured JSON
summary of the operation result
[#​22927](https://redirect.github.com/pulumi/pulumi/pull/22927 )
- \[cli] Add `--output json` to `pulumi refresh` for a structured JSON
summary of the operation result
[#​22928](https://redirect.github.com/pulumi/pulumi/pull/22928 )
- \[cli] Add `--output json` to `pulumi destroy` for a structured JSON
summary of the operation result
[#​22875](https://redirect.github.com/pulumi/pulumi/pull/22875 )
- \[cli] Add `pulumi stack schedule get` to retrieve the configuration
of a scheduled action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule list` to list all scheduled actions
configured for a stack
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule new` to create a raw, drift, or TTL
deployment schedule for a stack
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack webhook delivery list` to list recent
deliveries for a stack webhook
[#​23116](https://redirect.github.com/pulumi/pulumi/pull/23116 )
- \[cli] Add `pulumi stack webhook delivery redeliver` to redeliver a
webhook event
[#​23118](https://redirect.github.com/pulumi/pulumi/pull/23118 )
- \[cli] Add `pulumi stack webhook edit` to update an existing stack
webhook
[#​23139](https://redirect.github.com/pulumi/pulumi/pull/23139 )
- \[cli] Add `pulumi stack webhook new` to create a new stack webhook
[#​23101](https://redirect.github.com/pulumi/pulumi/pull/23101 )
- \[cli] Add `pulumi stack webhook remove` to delete a stack webhook
[#​23102](https://redirect.github.com/pulumi/pulumi/pull/23102 )
- \[cli] Add `pulumi org webhook delivery list` to list recent
deliveries for an organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook edit` to update an organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook list` to list all webhooks configured
for an organization
[#​23174](https://redirect.github.com/pulumi/pulumi/pull/23174 )
- \[cli] Add `pulumi org webhook new` to create a new organization
webhook
[#​23172](https://redirect.github.com/pulumi/pulumi/pull/23172 )
- \[cli] Add `pulumi org webhook ping` to send a test ping to an
organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook remove` to delete an organization
webhook
[#​23177](https://redirect.github.com/pulumi/pulumi/pull/23177 )
- \[cli] Add `pulumi stack drift list` to list drift detection runs for
a stack
[#​23159](https://redirect.github.com/pulumi/pulumi/pull/23159 )
- \[cli] Add `pulumi stack drift status` to show the drift detection
status for a stack
[#​23161](https://redirect.github.com/pulumi/pulumi/pull/23161 )
- \[cli] Add `pulumi stack schedule edit` to update an existing
scheduled deployment action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule remove` to delete a scheduled
deployment action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi audit-log export` command
[#​23212](https://redirect.github.com/pulumi/pulumi/pull/23212 )
- \[cli] Add `pulumi org audit-log list`
[#​23211](https://redirect.github.com/pulumi/pulumi/pull/23211 )
- \[cli] Add `pulumi policy compliance list` to list compliance results
grouped by entity
[#​23209](https://redirect.github.com/pulumi/pulumi/pull/23209 )
- \[cli] Add `pulumi policy group new` command to allow creating new
policy groups
[#​23202](https://redirect.github.com/pulumi/pulumi/pull/23202 )
- \[cli] Add the `pulumi policy issue get` command
[#​23200](https://redirect.github.com/pulumi/pulumi/pull/23200 )
- \[cli/cloud] Add `pulumi insights account list` to list Insights
accounts in an organization
[#​23091](https://redirect.github.com/pulumi/pulumi/pull/23091 )
- \[cli/cloud] Add `pulumi insights account new` to create a Pulumi
Insights account
[#​23093](https://redirect.github.com/pulumi/pulumi/pull/23093 )
- \[cli/cloud] Add `pulumi insights account scan log` to fetch log
output for a Pulumi Insights scan
[#​23092](https://redirect.github.com/pulumi/pulumi/pull/23092 )
- \[cli/cloud] Add `pulumi insights account scan` to trigger a resource
discovery scan for an Insights account
[#​23094](https://redirect.github.com/pulumi/pulumi/pull/23094 )
- \[cli/cloud] Implement `pulumi stack history events` to retrieve
engine events for a Pulumi Cloud update
[#​23109](https://redirect.github.com/pulumi/pulumi/pull/23109 )
- \[cli/cloud] Add `pulumi deployment cancel` to terminate an
in-progress deployment
[#​23164](https://redirect.github.com/pulumi/pulumi/pull/23164 )
- \[cli/cloud] Add `pulumi org member list` to list the members of an
organization
[#​23170](https://redirect.github.com/pulumi/pulumi/pull/23170 )
- \[cli/cloud] Add `pulumi org usage get` to fetch the
resources-under-management summary for an organization
[#​23166](https://redirect.github.com/pulumi/pulumi/pull/23166 )
- \[cli/cloud] Add `pulumi org role assign` to assign a custom role to a
team
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role edit` to update a custom role's
name, description, or permission tree
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role list` to list custom roles for an
organization
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role new` to create a custom role from a
permission descriptor JSON file
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role remove` to delete a custom role from
an organization
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/env] Update esc to v0.24.0
[#​23213](https://redirect.github.com/pulumi/pulumi/pull/23213 )
- \[cli/neo] Show tool call arguments and results in `pulumi neo` via a
`ctrl+o` overlay
[#​23075](https://redirect.github.com/pulumi/pulumi/pull/23075 )
- \[cli/neo] Multi-line input in `pulumi neo` - Enter sends, Shift+Enter
/ Alt+Enter / Ctrl+J / trailing `\` insert a newline
[#​23151](https://redirect.github.com/pulumi/pulumi/pull/23151 )
- \[cli/neo] Make `pulumi neo` visible by default; the
`PULUMI_EXPERIMENTAL` gate has been removed
[#​23228](https://redirect.github.com/pulumi/pulumi/pull/23228 )
- \[cli/policy] Add `pulumi policy group edit` to edit policy groups
[#​23206](https://redirect.github.com/pulumi/pulumi/pull/23206 )
- \[cli/policy] Add `pulumi policy group remove` command to remove
policies
[#​23208](https://redirect.github.com/pulumi/pulumi/pull/23208 )
- \[cli/policy] Add the `pulumi policy group get` command
[#​23203](https://redirect.github.com/pulumi/pulumi/pull/23203 )
##### Bug Fixes
- \[cli] Add `pulumi policy issue list` command
[#​23198](https://redirect.github.com/pulumi/pulumi/pull/23198 )
- \[cli] Fix `pulumi org role list` to send the `uxPurpose` query
parameter the service requires
[#​23231](https://redirect.github.com/pulumi/pulumi/pull/23231 )
- \[engine] Fix `pulumi import` dropping map entries whose value matched
the enum member of a `Union<Input<Enum<T>>, ...>` element type
[#​23190](https://redirect.github.com/pulumi/pulumi/pull/23190 )
- \[cli/cloud] Surface a clear error when `pulumi api --all` is used
against an endpoint whose response is not paginatable, instead of
silently emitting an empty array
[#​23191](https://redirect.github.com/pulumi/pulumi/pull/23191 )
[#​23128](https://redirect.github.com/pulumi/pulumi/pull/23128 )
- \[cli/cloud] `pulumi deployment settings edit` no longer clears fields
that the patch does not mention
[#​23217](https://redirect.github.com/pulumi/pulumi/pull/23217 )
- \[cli/import] Generate PCL for asset and archive inputs when importing
resources, instead of returning a "NYI" error
[#​22938](https://redirect.github.com/pulumi/pulumi/pull/22938 )
- \[cli/import] Preserve asset/archive/resource-reference values inside
map and array inputs, and HCL-escape map keys containing `${` or `%{`
template sequences
[#​23222](https://redirect.github.com/pulumi/pulumi/pull/23222 )
- \[cli/install] Hint at adding a `.git` / `_git` when VCS URL
resolution fails
[#​22831](https://redirect.github.com/pulumi/pulumi/pull/22831 )
- \[cli/neo] Transparently reconnect the Neo event stream after a
transient network drop, resuming from the last seen event ID
[#​23134](https://redirect.github.com/pulumi/pulumi/pull/23134 )
- \[cli/neo] Show `preparing` in the live preview/up block until the
first resource arrives
[#​23155](https://redirect.github.com/pulumi/pulumi/pull/23155 )
- \[cli/new] Support specific versions when using registry-backed
templates with `pulumi new`
[#​22909](https://redirect.github.com/pulumi/pulumi/pull/22909 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.241.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.241.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.239.0...v3.241.0 )
##### 3.241.0 (2026-05-18)
##### Features
- \[cli] Add `--output json` to `pulumi preview` for a structured JSON
summary of the operation result
[#​22927](https://redirect.github.com/pulumi/pulumi/pull/22927 )
- \[cli] Add `--output json` to `pulumi refresh` for a structured JSON
summary of the operation result
[#​22928](https://redirect.github.com/pulumi/pulumi/pull/22928 )
- \[cli] Add `--output json` to `pulumi destroy` for a structured JSON
summary of the operation result
[#​22875](https://redirect.github.com/pulumi/pulumi/pull/22875 )
- \[cli] Add `pulumi stack schedule get` to retrieve the configuration
of a scheduled action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule list` to list all scheduled actions
configured for a stack
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule new` to create a raw, drift, or TTL
deployment schedule for a stack
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack webhook delivery list` to list recent
deliveries for a stack webhook
[#​23116](https://redirect.github.com/pulumi/pulumi/pull/23116 )
- \[cli] Add `pulumi stack webhook delivery redeliver` to redeliver a
webhook event
[#​23118](https://redirect.github.com/pulumi/pulumi/pull/23118 )
- \[cli] Add `pulumi stack webhook edit` to update an existing stack
webhook
[#​23139](https://redirect.github.com/pulumi/pulumi/pull/23139 )
- \[cli] Add `pulumi stack webhook new` to create a new stack webhook
[#​23101](https://redirect.github.com/pulumi/pulumi/pull/23101 )
- \[cli] Add `pulumi stack webhook remove` to delete a stack webhook
[#​23102](https://redirect.github.com/pulumi/pulumi/pull/23102 )
- \[cli] Add `pulumi org webhook delivery list` to list recent
deliveries for an organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook edit` to update an organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook list` to list all webhooks configured
for an organization
[#​23174](https://redirect.github.com/pulumi/pulumi/pull/23174 )
- \[cli] Add `pulumi org webhook new` to create a new organization
webhook
[#​23172](https://redirect.github.com/pulumi/pulumi/pull/23172 )
- \[cli] Add `pulumi org webhook ping` to send a test ping to an
organization webhook
[#​23179](https://redirect.github.com/pulumi/pulumi/pull/23179 )
- \[cli] Add `pulumi org webhook remove` to delete an organization
webhook
[#​23177](https://redirect.github.com/pulumi/pulumi/pull/23177 )
- \[cli] Add `pulumi stack drift list` to list drift detection runs for
a stack
[#​23159](https://redirect.github.com/pulumi/pulumi/pull/23159 )
- \[cli] Add `pulumi stack drift status` to show the drift detection
status for a stack
[#​23161](https://redirect.github.com/pulumi/pulumi/pull/23161 )
- \[cli] Add `pulumi stack schedule edit` to update an existing
scheduled deployment action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi stack schedule remove` to delete a scheduled
deployment action
[#​23153](https://redirect.github.com/pulumi/pulumi/pull/23153 )
- \[cli] Add `pulumi audit-log export` command
[#​23212](https://redirect.github.com/pulumi/pulumi/pull/23212 )
- \[cli] Add `pulumi org audit-log list`
[#​23211](https://redirect.github.com/pulumi/pulumi/pull/23211 )
- \[cli] Add `pulumi policy compliance list` to list compliance results
grouped by entity
[#​23209](https://redirect.github.com/pulumi/pulumi/pull/23209 )
- \[cli] Add `pulumi policy group new` command to allow creating new
policy groups
[#​23202](https://redirect.github.com/pulumi/pulumi/pull/23202 )
- \[cli] Add the `pulumi policy issue get` command
[#​23200](https://redirect.github.com/pulumi/pulumi/pull/23200 )
- \[cli/cloud] Add `pulumi insights account list` to list Insights
accounts in an organization
[#​23091](https://redirect.github.com/pulumi/pulumi/pull/23091 )
- \[cli/cloud] Add `pulumi insights account new` to create a Pulumi
Insights account
[#​23093](https://redirect.github.com/pulumi/pulumi/pull/23093 )
- \[cli/cloud] Add `pulumi insights account scan log` to fetch log
output for a Pulumi Insights scan
[#​23092](https://redirect.github.com/pulumi/pulumi/pull/23092 )
- \[cli/cloud] Add `pulumi insights account scan` to trigger a resource
discovery scan for an Insights account
[#​23094](https://redirect.github.com/pulumi/pulumi/pull/23094 )
- \[cli/cloud] Implement `pulumi stack history events` to retrieve
engine events for a Pulumi Cloud update
[#​23109](https://redirect.github.com/pulumi/pulumi/pull/23109 )
- \[cli/cloud] Add `pulumi deployment cancel` to terminate an
in-progress deployment
[#​23164](https://redirect.github.com/pulumi/pulumi/pull/23164 )
- \[cli/cloud] Add `pulumi org member list` to list the members of an
organization
[#​23170](https://redirect.github.com/pulumi/pulumi/pull/23170 )
- \[cli/cloud] Add `pulumi org usage get` to fetch the
resources-under-management summary for an organization
[#​23166](https://redirect.github.com/pulumi/pulumi/pull/23166 )
- \[cli/cloud] Add `pulumi org role assign` to assign a custom role to a
team
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role edit` to update a custom role's
name, description, or permission tree
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role list` to list custom roles for an
organization
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role new` to create a custom role from a
permission descriptor JSON file
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/cloud] Add `pulumi org role remove` to delete a custom role from
an organization
[#​23117](https://redirect.github.com/pulumi/pulumi/pull/23117 )
- \[cli/env] Update esc to v0.24.0
[#​23213](https://redirect.github.com/pulumi/pulumi/pull/23213 )
- \[cli/neo] Show tool call arguments and results in `pulumi neo` via a
`ctrl+o` overlay
[#​23075](https://redirect.github.com/pulumi/pulumi/pull/23075 )
- \[cli/neo] Multi-line input in `pulumi neo` - Enter sends, Shift+Enter
/ Alt+Enter / Ctrl+J / trailing `\` insert a newline
[#​23151](https://redirect.github.com/pulumi/pulumi/pull/23151 )
- \[cli/neo] Make `pulumi neo` visible by default; the
`PULUMI_EXPERIMENTAL` gate has been removed
[#​23228](https://redirect.github.com/pulumi/pulumi/pull/23228 )
- \[cli/policy] Add `pulumi policy group edit` to edit policy groups
[#​23206](https://redirect.github.com/pulumi/pulumi/pull/23206 )
- \[cli/policy] Add `pulumi policy group remove` command to remove
policies
[#​23208](https://redirect.github.com/pulumi/pulumi/pull/23208 )
- \[cli/policy] Add the `pulumi policy group get` command
[#​23203](https://redirect.github.com/pulumi/pulumi/pull/23203 )
##### Bug Fixes
- \[cli] Add `pulumi policy issue list` command
[#​23198](https://redirect.github.com/pulumi/pulumi/pull/23198 )
- \[cli] Fix `pulumi org role list` to send the `uxPurpose` query
parameter the service requires
[#​23231](https://redirect.github.com/pulumi/pulumi/pull/23231 )
- \[engine] Fix `pulumi import` dropping map entries whose value matched
the enum member of a `Union<Input<Enum<T>>, ...>` element type
[#​23190](https://redirect.github.com/pulumi/pulumi/pull/23190 )
- \[cli/cloud] Surface a clear error when `pulumi api --all` is used
against an endpoint whose response is not paginatable, instead of
silently emitting an empty array
[#​23191](https://redirect.github.com/pulumi/pulumi/pull/23191 )
[#​23128](https://redirect.github.com/pulumi/pulumi/pull/23128 )
- \[cli/cloud] `pulumi deployment settings edit` no longer clears fields
that the patch does not mention
[#​23217](https://redirect.github.com/pulumi/pulumi/pull/23217 )
- \[cli/import] Generate PCL for asset and archive inputs when importing
resources, instead of returning a "NYI" error
[#​22938](https://redirect.github.com/pulumi/pulumi/pull/22938 )
- \[cli/import] Preserve asset/archive/resource-reference values inside
map and array inputs, and HCL-escape map keys containing `${` or `%{`
template sequences
[#​23222](https://redirect.github.com/pulumi/pulumi/pull/23222 )
- \[cli/install] Hint at adding a `.git` / `_git` when VCS URL
resolution fails
[#​22831](https://redirect.github.com/pulumi/pulumi/pull/22831 )
- \[cli/neo] Transparently reconnect the Neo event stream after a
transient network drop, resuming from the last seen event ID
[#​23134](https://redirect.github.com/pulumi/pulumi/pull/23134 )
- \[cli/neo] Show `preparing` in the live preview/up block until the
first resource arrives
[#​23155](https://redirect.github.com/pulumi/pulumi/pull/23155 )
- \[cli/new] Support specific versions when using registry-backed
templates with `pulumi new`
[#​22909](https://redirect.github.com/pulumi/pulumi/pull/22909 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-05-19 02:23:38 +00:00
Ian Wahbe
a748e088ca
Add HCL Examples & Docs ( #852 )
...
Fixes https://github.com/pulumi/pulumi-docker-build/issues/844
2026-05-18 12:11:41 +02:00
pulumi-renovate[bot]
55d6f8f216
Update first-party Pulumi dependencies ( #855 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.237.0` ->
`3.239.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.237.0/3.239.0 )
|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc ) |
indirect | minor | `v0.23.0` -> `v0.24.0` |
|
[github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build )
| require | patch | `v0.0.16` -> `v0.0.17` |
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | patch | `v3.106.1` -> `v3.106.2` |
|
[github.com/pulumi/pulumi-java](https://redirect.github.com/pulumi/pulumi-java )
| require | minor | `v1.26.1` -> `v1.27.0` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.237.0` -> `v3.239.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.239.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32390-2026-05-14 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.238.0...v3.239.0 )
##### Features
- \[cli] Add `--output json` to `pulumi import` for a structured JSON
summary of the operation result
[#​22929](https://redirect.github.com/pulumi/pulumi/pull/22929 )
- \[cli] Add `pulumi stack get` to retrieve detailed information about a
stack
[#​23106](https://redirect.github.com/pulumi/pulumi/pull/23106 )
- \[cli] Add `pulumi stack webhook get` to inspect a single stack
webhook
[#​23088](https://redirect.github.com/pulumi/pulumi/pull/23088 )
- \[cli] Add `pulumi stack webhook ping` to send a test ping to a stack
webhook
- \[cli/cloud] Add `pulumi deployment list` to list deployment
executions for a stack
[#​23114](https://redirect.github.com/pulumi/pulumi/pull/23114 )
- \[sdkgen] Validate that schema names can't conflict with module paths
[#​22956](https://redirect.github.com/pulumi/pulumi/pull/22956 )
##### Bug Fixes
- \[engine] Fix batch encrypt/decrypt errors being silently dropped
[#​23149](https://redirect.github.com/pulumi/pulumi/pull/23149 )
- \[cli/cloud] Fix `pulumi api` help examples that referenced
non-existent operation IDs and response fields
[#​23125](https://redirect.github.com/pulumi/pulumi/pull/23125 )
###
[`v3.238.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32380-2026-05-13 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.237.0...v3.238.0 )
##### Features
- \[cli] Add a `--language` flag to `pulumi package add` to run outside
a Pulumi project or plugin
[#​22791](https://redirect.github.com/pulumi/pulumi/pull/22791 )
- \[cli] Add `--output json` to `pulumi up` for a structured JSON
summary of the operation result
[#​22870](https://redirect.github.com/pulumi/pulumi/pull/22870 )
- \[cli] Recommend `pulumi cloud api describe` in `pulumi cloud api
--help` to verify operation parameters before calling
[#​22881](https://redirect.github.com/pulumi/pulumi/pull/22881 )
- \[cli] Add `pulumi stack webhook list` to list all webhooks configured
for a stack
[#​23082](https://redirect.github.com/pulumi/pulumi/pull/23082 )
- \[cli/cloud] Rename `pulumi cloud api` to `pulumi api`
[#​22970](https://redirect.github.com/pulumi/pulumi/pull/22970 )
- \[cli/cloud] Add `pulumi insights resource get` to look up a single
resource discovered by Pulumi Insights
[#​23077](https://redirect.github.com/pulumi/pulumi/pull/23077 )
- \[cli/cloud] Add `pulumi template list` to list registry-backed
templates
[#​23074](https://redirect.github.com/pulumi/pulumi/pull/23074 )
- \[cli/cloud] Rename the `--format` flag to `--output` on `pulumi api`
and its subcommands
[#​23072](https://redirect.github.com/pulumi/pulumi/pull/23072 )
- \[cli/cloud] Add `pulumi insights resource search` to search for
resources discovered by Pulumi Insights
[#​23087](https://redirect.github.com/pulumi/pulumi/pull/23087 )
- \[cli/engine] Add `--skip-plugin-pre-install` to skip up-front plugin
installation
- \[engine] Fail the deployment when an after hook fails
[#​22935](https://redirect.github.com/pulumi/pulumi/pull/22935 )
- \[cli/neo] Render the agent's TODO list in the `pulumi neo` TUI
[#​22864](https://redirect.github.com/pulumi/pulumi/pull/22864 )
- \[cli/neo] Add `--approval-mode` and `--permission-mode` flags to
`pulumi neo`, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
[#​22950](https://redirect.github.com/pulumi/pulumi/pull/22950 )
- \[cli/package] When invoked by an AI coding agent, print `pulumi api`
pointers after `pulumi package add` and `pulumi package gen-sdk`
[#​22904](https://redirect.github.com/pulumi/pulumi/pull/22904 )
- \[pkg/testing] Recognize the `hcl` and `pcl` runtimes in
`integration.ProgramTest`
[#​23018](https://redirect.github.com/pulumi/pulumi/pull/23018 )
- \[pkg/testing] Add `l1-config-types-optional` conformance test for
PCL's `optional` type constructor
[#​23108](https://redirect.github.com/pulumi/pulumi/pull/23108 )
##### Bug Fixes
- \[backend/diy] Minify JSON persisted by the DIY backend for
checkpoints, history, and stack tags
[#​22245](https://redirect.github.com/pulumi/pulumi/pull/22245 )
- \[cli/import] Ignore property values that do not conform to the schema
in maps
[#​23076](https://redirect.github.com/pulumi/pulumi/pull/23076 )
- \[cli/import] Stop dropping map values whose element type is a union
of Input-wrapped types during HCL2 import
- \[cli/neo] Use the selected stack's organization when starting a
`pulumi neo` task instead of the user's default organization
[#​22951](https://redirect.github.com/pulumi/pulumi/pull/22951 )
- \[cli/neo] Include the failure reason in `pulumi_preview` and
`pulumi_up` tool results when they fail, so the agent can react instead
of seeing a blank error
[#​22948](https://redirect.github.com/pulumi/pulumi/pull/22948 )
- \[cli/neo] Retry `pulumi neo` task creation without the attached stack
when the backend rejects it with an "invalid entities" error
[#​22945](https://redirect.github.com/pulumi/pulumi/pull/22945 )
- \[cli/neo] Surface the failure reason when a `filesystem` tool call
fails, instead of returning an empty result to the agent
[#​23019](https://redirect.github.com/pulumi/pulumi/pull/23019 )
- \[cli/package] Use `--output=markdown` (not the renamed-away
`--format=markdown`) in the `pulumi api` pointers printed by `pulumi
package add` and `pulumi package gen-sdk`
[#​23098](https://redirect.github.com/pulumi/pulumi/pull/23098 )
- \[programgen/pcl] Stop reporting spurious circular references when an
`ignoreChanges`, `hideDiffs`, `replaceOnChanges`, or
`additionalSecretOutputs` entry shares a name with a top-level node
[#​22931](https://redirect.github.com/pulumi/pulumi/pull/22931 )
- \[sdk/python] Speed up python program resolution by using a set
instead of deque to track outputs
[#​22946](https://redirect.github.com/pulumi/pulumi/pull/22946 )
##### Miscellaneous
- \[cli/neo] Tag Neo tasks created from the CLI with a `cli` source so
the service can attribute their origin
[#​23099](https://redirect.github.com/pulumi/pulumi/pull/23099 )
- \[sdk/nodejs] Add registerPackage helper to cache package references
per deployment
[#​23014](https://redirect.github.com/pulumi/pulumi/pull/23014 )
</details>
<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>
###
[`v0.24.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.24.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.23.0...v0.24.0 )
##### Improvements
##### Bug Fixes
##### Breaking changes
</details>
<details>
<summary>pulumi/pulumi-docker-build
(github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary>
###
[`v0.0.17`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.16...v0.0.17 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.16...v0.0.17 )
</details>
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.106.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31062---2026-05-13 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.106.1...v3.106.2 )
##### Bug Fixes
- \[sdk] Fix programgen for arrays containing only null literals by
generating explicit `new object?[]` type annotation
[#​948](https://redirect.github.com/pulumi/pulumi-dotnet/pull/948 )
- \[runtime] Translate PCL `length()` on strings to
`StringInfo.LengthInTextElements` so it returns Unicode grapheme
clusters rather than UTF-16 code units
[#​1000](https://redirect.github.com/pulumi/pulumi-dotnet/pull/1000 )
- \[runtime] Translate PCL `singleOrNone()` to
`Enumerable.SingleOrDefault` so it returns null on an empty list instead
of throwing
[#​1001](https://redirect.github.com/pulumi/pulumi-dotnet/pull/1001 )
- \[runtime] Generate correct .NET property names when the schema
version contains a hyphen
[#​1005](https://redirect.github.com/pulumi/pulumi-dotnet/pull/1005 )
</details>
<details>
<summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java)</summary>
###
[`v1.27.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1270---2026-05-13 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.26.1...v1.27.0 )
##### Bug Fixes
- \[sdk] Fix child resources unable to override protect, retainOnDelete,
and deleteBeforeReplace from parent
[#​2156](https://redirect.github.com/pulumi/pulumi-java/pull/2156 )
##### Improvements
- \[codegen] Implement the PCL `fromBase64` and `toBase64` builtins in
the Java program codegen
[#​2171](https://redirect.github.com/pulumi/pulumi-java/pull/2171 )
- \[codegen] Fix l1-builtin-string by emitting a grapheme-cluster
counter for PCL length() on strings, and wrapping split() results as
List<String> so they serialize correctly through ctx.export
[#​2170](https://redirect.github.com/pulumi/pulumi-java/pull/2170 )
- \[codegen] Fix l2-map-keys by fully qualifying generated Args types
when their simple names collide across imported packages
[#​2178](https://redirect.github.com/pulumi/pulumi-java/pull/2178 )
- \[sdk/java] Implement the PCL `rootDirectory` builtin and surface the
project root directory on `Deployment`
[#​2176](https://redirect.github.com/pulumi/pulumi-java/pull/2176 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.239.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.239.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.238.0...v3.239.0 )
#### 3.239.0 (2026-05-14)
##### Features
- \[cli] Add `--output json` to `pulumi import` for a structured JSON
summary of the operation result
[#​22929](https://redirect.github.com/pulumi/pulumi/pull/22929 )
- \[cli] Add `pulumi stack get` to retrieve detailed information about a
stack
[#​23106](https://redirect.github.com/pulumi/pulumi/pull/23106 )
- \[cli] Add `pulumi stack webhook get` to inspect a single stack
webhook
[#​23088](https://redirect.github.com/pulumi/pulumi/pull/23088 )
- \[cli] Add `pulumi stack webhook ping` to send a test ping to a stack
webhook
- \[cli/cloud] Add `pulumi deployment list` to list deployment
executions for a stack
[#​23114](https://redirect.github.com/pulumi/pulumi/pull/23114 )
- \[sdkgen] Validate that schema names can't conflict with module paths
[#​22956](https://redirect.github.com/pulumi/pulumi/pull/22956 )
##### Bug Fixes
- \[engine] Fix batch encrypt/decrypt errors being silently dropped
[#​23149](https://redirect.github.com/pulumi/pulumi/pull/23149 )
- \[cli/cloud] Fix `pulumi api` help examples that referenced
non-existent operation IDs and response fields
[#​23125](https://redirect.github.com/pulumi/pulumi/pull/23125 )
###
[`v3.238.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.238.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.237.0...v3.238.0 )
#### 3.238.0 (2026-05-13)
##### Features
- \[cli] Add a `--language` flag to `pulumi package add` to run outside
a Pulumi project or plugin
[#​22791](https://redirect.github.com/pulumi/pulumi/pull/22791 )
- \[cli] Add `--output json` to `pulumi up` for a structured JSON
summary of the operation result
[#​22870](https://redirect.github.com/pulumi/pulumi/pull/22870 )
- \[cli] Recommend `pulumi cloud api describe` in `pulumi cloud api
--help` to verify operation parameters before calling
[#​22881](https://redirect.github.com/pulumi/pulumi/pull/22881 )
- \[cli] Add `pulumi stack webhook list` to list all webhooks configured
for a stack
[#​23082](https://redirect.github.com/pulumi/pulumi/pull/23082 )
- \[cli/cloud] Rename `pulumi cloud api` to `pulumi api`
[#​22970](https://redirect.github.com/pulumi/pulumi/pull/22970 )
- \[cli/cloud] Add `pulumi insights resource get` to look up a single
resource discovered by Pulumi Insights
[#​23077](https://redirect.github.com/pulumi/pulumi/pull/23077 )
- \[cli/cloud] Add `pulumi template list` to list registry-backed
templates
[#​23074](https://redirect.github.com/pulumi/pulumi/pull/23074 )
- \[cli/cloud] Rename the `--format` flag to `--output` on `pulumi api`
and its subcommands
[#​23072](https://redirect.github.com/pulumi/pulumi/pull/23072 )
- \[cli/cloud] Add `pulumi insights resource search` to search for
resources discovered by Pulumi Insights
[#​23087](https://redirect.github.com/pulumi/pulumi/pull/23087 )
- \[cli/engine] Add `--skip-plugin-pre-install` to skip up-front plugin
installation
- \[engine] Fail the deployment when an after hook fails
[#​22935](https://redirect.github.com/pulumi/pulumi/pull/22935 )
- \[cli/neo] Render the agent's TODO list in the `pulumi neo` TUI
[#​22864](https://redirect.github.com/pulumi/pulumi/pull/22864 )
- \[cli/neo] Add `--approval-mode` and `--permission-mode` flags to
`pulumi neo`, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
[#​22950](https://redirect.github.com/pulumi/pulumi/pull/22950 )
- \[cli/package] When invoked by an AI coding agent, print `pulumi api`
pointers after `pulumi package add` and `pulumi package gen-sdk`
[#​22904](https://redirect.github.com/pulumi/pulumi/pull/22904 )
- \[pkg/testing] Recognize the `hcl` and `pcl` runtimes in
`integration.ProgramTest`
[#​23018](https://redirect.github.com/pulumi/pulumi/pull/23018 )
- \[pkg/testing] Add `l1-config-types-optional` conformance test for
PCL's `optional` type constructor
[#​23108](https://redirect.github.com/pulumi/pulumi/pull/23108 )
##### Bug Fixes
- \[backend/diy] Minify JSON persisted by the DIY backend for
checkpoints, history, and stack tags
[#​22245](https://redirect.github.com/pulumi/pulumi/pull/22245 )
- \[cli/import] Ignore property values that do not conform to the schema
in maps
[#​23076](https://redirect.github.com/pulumi/pulumi/pull/23076 )
- \[cli/import] Stop dropping map values whose element type is a union
of Input-wrapped types during HCL2 import
- \[cli/neo] Use the selected stack's organization when starting a
`pulumi neo` task instead of the user's default organization
[#​22951](https://redirect.github.com/pulumi/pulumi/pull/22951 )
- \[cli/neo] Include the failure reason in `pulumi_preview` and
`pulumi_up` tool results when they fail, so the agent can react instead
of seeing a blank error
[#​22948](https://redirect.github.com/pulumi/pulumi/pull/22948 )
- \[cli/neo] Retry `pulumi neo` task creation without the attached stack
when the backend rejects it with an "invalid entities" error
[#​22945](https://redirect.github.com/pulumi/pulumi/pull/22945 )
- \[cli/neo] Surface the failure reason when a `filesystem` tool call
fails, instead of returning an empty result to the agent
[#​23019](https://redirect.github.com/pulumi/pulumi/pull/23019 )
- \[cli/package] Use `--output=markdown` (not the renamed-away
`--format=markdown`) in the `pulumi api` pointers printed by `pulumi
package add` and `pulumi package gen-sdk`
[#​23098](https://redirect.github.com/pulumi/pulumi/pull/23098 )
- \[programgen/pcl] Stop reporting spurious circular references when an
`ignoreChanges`, `hideDiffs`, `replaceOnChanges`, or
`additionalSecretOutputs` entry shares a name with a top-level node
[#​22931](https://redirect.github.com/pulumi/pulumi/pull/22931 )
- \[sdk/python] Speed up python program resolution by using a set
instead of deque to track outputs
[#​22946](https://redirect.github.com/pulumi/pulumi/pull/22946 )
##### Miscellaneous
- \[cli/neo] Tag Neo tasks created from the CLI with a `cli` source so
the service can attribute their origin
[#​23099](https://redirect.github.com/pulumi/pulumi/pull/23099 )
- \[sdk/nodejs] Add registerPackage helper to cache package references
per deployment
[#​23014](https://redirect.github.com/pulumi/pulumi/pull/23014 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-05-16 06:27:17 +00:00
pulumi-provider-automation[bot]
cfadb02782
Update GitHub Actions workflows. ( #858 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[17a365754b545672c6b27aad2cd4a0cab814afa4](17a365754b ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-15 06:45:19 +00:00
Pulumi Bot
278187a0c2
Automated upgrade: bump pulumi/pulumi to 3.239.0 ( #857 )
...
Automated upgrade: bump pulumi/pulumi to 3.239.0
2026-05-14 16:57:39 +01:00
pulumi-provider-automation[bot]
e4130f8f2e
Update GitHub Actions workflows. ( #856 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[c883c8df6276d935ea2aa3ca8a8a7cf8ffd5e8ed](c883c8df62 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-14 06:40:09 +00:00
pulumi-provider-automation[bot]
6082a91390
Update GitHub Actions workflows. ( #854 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[cae837f93d8b6f38e281e84e045127160dd98d9c](cae837f93d ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-13 06:39:13 +00:00
pulumi-renovate[bot]
8cecb2fb4b
Update module github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild to v0.0.16 ( #853 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build )
| require | patch | `v0.0.15` -> `v0.0.16` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi-docker-build
(github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary>
###
[`v0.0.16`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.15...v0.0.16 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.15...v0.0.16 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-05-13 04:07:44 +00:00
Bryce Lampe
df2dcca9a8
Fix 404 handling when deleting a manifest ( #850 )
...
Upstream was previously using an internal notFound error, and we were
relying on fragile string matching to detect it. This broke when we
upgraded to Docker v28.
d25e260d2e (diff-a5e122cd2318f2dc156f373804a59d30355b0c308b9e64f48e0713344fcdba33L164)
Nowadays containerd exposes a public ErrNotFound which we can use
instead.
Fixes #849 .
2026-05-12 10:46:54 -07:00
pulumi-provider-automation[bot]
9048892848
Update GitHub Actions workflows. ( #851 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[daf8aba035d6ed8919db6089c780f56cb7fefc69](daf8aba035 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-12 06:35:37 +00:00
pulumi-provider-automation[bot]
d8c7696758
Update GitHub Actions workflows. ( #848 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4cbd027aa555ac5a576d57358400a2e24e329c2c](4cbd027aa5 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-10 06:31:10 +00:00
pulumi-provider-automation[bot]
0d1a1b4fd3
Update GitHub Actions workflows. ( #847 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[97b5e096a3ec277f7b970353d7b048d4800cdb61](97b5e096a3 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-09 06:28:31 +00:00
pulumi-renovate[bot]
8dff8f0e21
Update first-party Pulumi dependencies ( #846 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.236.0` ->
`3.237.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.236.0/3.237.0 )
|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | minor | `v3.105.0` -> `v3.106.1` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.236.0` -> `v3.237.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.237.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.237.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.236.0...v3.237.0 )
##### 3.237.0 (2026-05-08)
##### Features
- \[cli] Include the running command name and detected AI agent (when
present) in the User-Agent header on Pulumi Cloud API requests
[#​22908](https://redirect.github.com/pulumi/pulumi/pull/22908 )
- \[engine] Include `result` on the summary engine event
[#​22883](https://redirect.github.com/pulumi/pulumi/pull/22883 )
- \[sdkgen] Eagerly error on schemas with unconstructable types
[#​22890](https://redirect.github.com/pulumi/pulumi/pull/22890 )
- \[cli/cloud] Auto-fill `lang` and `os` query parameters on `pulumi
cloud api` GET/HEAD requests when the matched OpenAPI operation declares
them and the caller hasn't supplied them
[#​22726](https://redirect.github.com/pulumi/pulumi/pull/22726 )
- \[cli/package] Add `pulumi package new` to bootstrap a Pulumi package
from a template
[#​22837](https://redirect.github.com/pulumi/pulumi/pull/22837 )
##### Bug Fixes
- \[cli] Add blank-line gaps between `pulumi neo` TUI conversation
blocks
[#​22846](https://redirect.github.com/pulumi/pulumi/pull/22846 )
- \[cli/import] Preserve `__`-prefixed keys when generating PCL for
imported resource state, so provider-defined payloads round-trip
correctly
[#​22856](https://redirect.github.com/pulumi/pulumi/pull/22856 )
- \[cli/neo] Render `ux__ask_user` clarifying questions as questions
instead of approval prompts
[#​22862](https://redirect.github.com/pulumi/pulumi/pull/22862 )
- \[cli/neo] Fix a panic when cancelling a `pulumi neo` session
[#​22898](https://redirect.github.com/pulumi/pulumi/pull/22898 )
- \[cli/neo] Render every assistant message in the TUI scrollback so
multi-turn commentary no longer disappears between tool calls
- \[cli/neo] Return the bare stack name and canonical project name from
`pulumi_preview` and `pulumi_up` tool results instead of echoing the raw
input
[#​22891](https://redirect.github.com/pulumi/pulumi/pull/22891 )
- \[codegen/pcl] Stop reporting spurious circular references when an
`ignoreChanges`, `hideDiffs`, `replaceOnChanges`, or
`additionalSecretOutputs` entry shares a name with a top-level node
[#​22916](https://redirect.github.com/pulumi/pulumi/pull/22916 )
- \[programgen/pcl] Fix PCL binder panic when a conditional mixes a
Promise-typed branch with a try() branch
[#​22907](https://redirect.github.com/pulumi/pulumi/pull/22907 )
- \[sdk/python] Support `NotRequired`, `Required` and `total=False` in
TypedDicts for component resource arg types
[#​22858](https://redirect.github.com/pulumi/pulumi/pull/22858 )
##### Miscellaneous
- \[cli/cloud] Auto-fit `pulumi cloud api list` table to terminal width
and replace the
`tabular` table renderer with `go-pretty`
[#​22874](https://redirect.github.com/pulumi/pulumi/pull/22874 )
- \[sdk/nodejs] Test on Node.js 26 and drop 20
[#​22872](https://redirect.github.com/pulumi/pulumi/pull/22872 )
</details>
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.106.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31061---2026-05-08 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.106.0...v3.106.1 )
##### Bug Fixes
- \[sdk] Revert
[#​983](https://redirect.github.com/pulumi/pulumi-dotnet/issues/983 ),
restoring the framework version to v6
[#​997](https://redirect.github.com/pulumi/pulumi-dotnet/pull/997 )
###
[`v3.106.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31060---2026-05-07 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.105.0...v3.106.0 )
##### Bug Fixes
- \[sdk] Bump minimum .NET version to 8.0, to help fix a security
vulnerability
[#​983](https://redirect.github.com/pulumi/pulumi-dotnet/pull/983 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-05-09 00:40:47 +00:00
pulumi-renovate[bot]
b73395a7fa
Update module github.com/pulumi/pulumi-java to v1.26.1 ( #845 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-java](https://redirect.github.com/pulumi/pulumi-java )
| require | patch | `v1.26.0` -> `v1.26.1` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi-java (github.com/pulumi/pulumi-java)</summary>
###
[`v1.26.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1261---2026-05-07 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.26.0...v1.26.1 )
##### Bug Fixes
- \[sdk] Fix inherited input properties missing from component schema
when args class inherits from a base class
[#​2129](https://redirect.github.com/pulumi/pulumi-java/pull/2129 )
- \[runtime] Wait for debugger attach only when it is requested
[#​2161](https://redirect.github.com/pulumi/pulumi-java/pull/2161 )
- \[codegen] Generate `unsecret(...)` as `.asPlaintext()` and emit
`config.requireSecret` for secret config variables in PCL programs
[#​2155](https://redirect.github.com/pulumi/pulumi-java/pull/2155 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-05-08 08:01:45 +00:00
pulumi-renovate[bot]
05962fcc01
Update first-party Pulumi dependencies to v3.236.0 ( #842 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.235.0` ->
`3.236.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.235.0/3.236.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.234.0` -> `v3.236.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.236.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32360-2026-05-06 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.236.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.236.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.235.0...v3.236.0 )
#### 3.236.0 (2026-05-06)
###
[`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0 )
#### 3.235.0 (2026-05-05)
##### Features
- \[cli] Add `pulumi logs decrypt` command for viewing logs
[#​22523](https://redirect.github.com/pulumi/pulumi/pull/22523 )
- \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl)
[#​22807](https://redirect.github.com/pulumi/pulumi/pull/22807 )
- \[cli] Automatically install the `hcl` converter from
pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl`
[#​22816](https://redirect.github.com/pulumi/pulumi/pull/22816 )
- \[pcl] Add `read` blocks to PCL to read resources via ID and query
instead of registering them
[#​22641](https://redirect.github.com/pulumi/pulumi/pull/22641 )
- \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any
Pulumi Cloud API
endpoint, with `--field`/`--header`/`--input`/`--body` flag handling,
path
template binding, content negotiation via `--format`, and `--dry-run`
[#​22771](https://redirect.github.com/pulumi/pulumi/pull/22771 )
- \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow
continuation cursors,
accumulate items into a single JSON envelope, and surface progress
events to stderr with `--emit-events` (page, complete, truncated,
partial_failure, cancelled).
[#​22772](https://redirect.github.com/pulumi/pulumi/pull/22772 )
##### Bug Fixes
- \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied
`timeout` and to terminate the whole process tree (and unblock cmd.Wait)
when the deadline fires, so commands like `kubectl logs -f` no longer
hang Neo indefinitely.
[#​22820](https://redirect.github.com/pulumi/pulumi/pull/22820 )
- \[cli] Surface the error and exit when `pulumi neo` fails to create
the underlying task, instead of leaving the TUI stuck in `Thinking…`
[#​22825](https://redirect.github.com/pulumi/pulumi/pull/22825 )
- \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive`
[#​22827](https://redirect.github.com/pulumi/pulumi/pull/22827 )
- \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi
neo` instead of hanging until a third press
[#​22821](https://redirect.github.com/pulumi/pulumi/pull/22821 )
- \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and
will cache for parameterised packages as well
[#​22812](https://redirect.github.com/pulumi/pulumi/pull/22812 )
- \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type`
discriminators) across RPC deserialization, matching the behavior of the
other language SDKs
[#​22834](https://redirect.github.com/pulumi/pulumi/pull/22834 )
- \[programgen/{nodejs,python}] Fix programgen to emit the right
`length` check for string length
[#​22802](https://redirect.github.com/pulumi/pulumi/pull/22802 )
##### Miscellaneous
- \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner
with new Neo-branded ASCII art.
[#​22817](https://redirect.github.com/pulumi/pulumi/pull/22817 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-05-07 21:40:04 +00:00
pulumi-provider-automation[bot]
766009ab42
Update GitHub Actions workflows. ( #841 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[59779d0eefa4d7d6810a40f8190ef01a101acfe1](59779d0eef ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-07 06:32:50 +00:00
pulumi-renovate[bot]
0110626c42
Update first-party Pulumi dependencies ( #819 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.231.0` ->
`3.235.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.231.0/3.235.0 )
|
|
[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest )
| require | minor | `v0.6.0` -> `v0.7.0` |
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | minor | `v3.103.0` -> `v3.105.0` |
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider )
| require | patch | `v1.3.1` -> `v1.3.2` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.230.0` -> `v3.234.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0 )
##### 3.235.0 (2026-05-05)
##### Features
- \[cli] Add `pulumi logs decrypt` command for viewing logs
[#​22523](https://redirect.github.com/pulumi/pulumi/pull/22523 )
- \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl)
[#​22807](https://redirect.github.com/pulumi/pulumi/pull/22807 )
- \[cli] Automatically install the `hcl` converter from
pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl`
[#​22816](https://redirect.github.com/pulumi/pulumi/pull/22816 )
- \[pcl] Add `read` blocks to PCL to read resources via ID and query
instead of registering them
[#​22641](https://redirect.github.com/pulumi/pulumi/pull/22641 )
- \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any
Pulumi Cloud API
endpoint, with `--field`/`--header`/`--input`/`--body` flag handling,
path
template binding, content negotiation via `--format`, and `--dry-run`
[#​22771](https://redirect.github.com/pulumi/pulumi/pull/22771 )
- \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow
continuation cursors,
accumulate items into a single JSON envelope, and surface progress
events to stderr with `--emit-events` (page, complete, truncated,
partial_failure, cancelled).
[#​22772](https://redirect.github.com/pulumi/pulumi/pull/22772 )
##### Bug Fixes
- \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied
`timeout` and to terminate the whole process tree (and unblock cmd.Wait)
when the deadline fires, so commands like `kubectl logs -f` no longer
hang Neo indefinitely.
[#​22820](https://redirect.github.com/pulumi/pulumi/pull/22820 )
- \[cli] Surface the error and exit when `pulumi neo` fails to create
the underlying task, instead of leaving the TUI stuck in `Thinking…`
[#​22825](https://redirect.github.com/pulumi/pulumi/pull/22825 )
- \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive`
[#​22827](https://redirect.github.com/pulumi/pulumi/pull/22827 )
- \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi
neo` instead of hanging until a third press
[#​22821](https://redirect.github.com/pulumi/pulumi/pull/22821 )
- \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and
will cache for parameterised packages as well
[#​22812](https://redirect.github.com/pulumi/pulumi/pull/22812 )
- \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type`
discriminators) across RPC deserialization, matching the behavior of the
other language SDKs
[#​22834](https://redirect.github.com/pulumi/pulumi/pull/22834 )
- \[programgen/{nodejs,python}] Fix programgen to emit the right
`length` check for string length
[#​22802](https://redirect.github.com/pulumi/pulumi/pull/22802 )
##### Miscellaneous
- \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner
with new Neo-branded ASCII art.
[#​22817](https://redirect.github.com/pulumi/pulumi/pull/22817 )
###
[`v3.234.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32340-2026-05-01 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.233.0...v3.234.0 )
##### Features
- \[cli/cloud] Add `pulumi cloud api describe` for inspecting the
parameters, request
body, and response schema of any Pulumi Cloud API operation, with
text, markdown, and JSON output
[#​22770](https://redirect.github.com/pulumi/pulumi/pull/22770 )
- \[cli/cloud] Add `pulumi cloud api list` for browsing every endpoint
exposed by the Pulumi
Cloud OpenAPI spec, with table and JSON output
[#​22769](https://redirect.github.com/pulumi/pulumi/pull/22769 )
##### Bug Fixes
- \[engine] Revert changes to property path parsing that resulted in
errors for currently valid paths
###
[`v3.233.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32330-2026-04-30 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.232.0...v3.233.0 )
##### Features
- \[auto/python] Expose the auto-generated Pulumi CLI interface as
`workspace.cli_api`
[#​22638](https://redirect.github.com/pulumi/pulumi/pull/22638 )
- \[cli] Add encrypted logging to ~/.pulumi/logs; use the
PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
[#​22494](https://redirect.github.com/pulumi/pulumi/pull/22494 )
- \[cli] Implement the `filesystem__grep` and
`filesystem__content_replace` local tools
for `pulumi neo`. `grep` runs a regex search across files in the project
root
with an optional `include` glob filter and returns results in
`path:lineno: line`
form. `content_replace` performs a literal multi-file search-and-replace
with a
`file_pattern` glob and `dry_run` preview mode. Both tools skip binary
files,
hidden directories, and `node_modules`, and reject paths outside the
project
root. Their input schemas match the cloud-side tool definitions.
[#​22655](https://redirect.github.com/pulumi/pulumi/pull/22655 )
- \[cli] Add `pulumi_preview` and `pulumi_up` as local tools for the
experimental `pulumi neo`
agent. The Neo TUI renders a persistent bordered block for each
operation that
streams changed resources and diagnostics as the engine runs and
finalizes with a
summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.
[#​22697](https://redirect.github.com/pulumi/pulumi/pull/22697 )
- \[engine] Add `List` to the provider protocol and schema
[#​22693](https://redirect.github.com/pulumi/pulumi/pull/22693 )
##### Bug Fixes
- \[engine] Return a clear error when two installed plugins claim the
same default provider package name (for example, a native `scaleway`
provider alongside a `terraform-provider` bridge parameterized as
`scaleway`) instead of panicking with "Should not have seen an older
plugin if sorting is correct!"
[#​22679](https://redirect.github.com/pulumi/pulumi/pull/22679 )
- \[programgen] Do not wrap a `call(...)` on a method whose return type
is marked plain in an Output. Previously
PCL bound every method call's return type as `Output<T>`, which caused
downstream program-gen
to emit broken `.apply(...)`/`.ApplyT(...)` traversals against plain
struct returns (e.g.
methods with `liftSingleValueMethodReturns=true` or
`ReturnTypePlain=true`).
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[backend/diy] When using a backend url containing creds (e.g.
PostgreSQL conn string), mask user:pass as in lock-related error
messages
[#​22701](https://redirect.github.com/pulumi/pulumi/pull/22701 )
- \[codegen/go] Generate unqualified `Provider` references for the
package's own provider resource. Previously
the Go codegen always emitted `<pkg>.Provider` even when the reference
appeared inside `<pkg>`
itself, producing identifiers that would not compile. Affects generated
code for method return
types (and other schema positions) that reference
`pulumi:providers:<pkg>`.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[codegen/nodejs] Generate unqualified `Provider` references for the
package's own provider resource when emitting
TypeScript code inside that package. Previously the generator always
qualified the name as
`<pkg>.Provider`, which does not resolve when no `<pkg>` namespace
import is in scope.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[codegen/nodejs] Import the correct class name for a provider
resource. Imports for `pulumi:providers:<pkg>` used
the title-cased package name instead of `Provider`, producing a phantom
identifier that clashed
with the containing package's component/resource classes.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[programgen/nodejs] Emit `await` for `call(...)` invocations of
methods whose return type is marked plain, and
force the generated program into an async `export = async () => ...`
wrapper whenever such a
call is present. The Node SDK returns `Promise<T>` for plain methods;
previously program-gen
used the result directly, which did not match its runtime type.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[codegen/python] Avoid a self-import (`import pulumi_<pkg>` inside
`pulumi_<pkg>/<module>.py`) when referencing
the package's own provider resource. Python referenced the Provider as
`pulumi_<pkg>.Provider`
even inside that package, which caused a circular import at runtime.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696 )
- \[sdk/python] Reduce internal `Output[T]` data to a single
`asyncio.Future`
[#​22661](https://redirect.github.com/pulumi/pulumi/pull/22661 )
- \[sdkgen/{nodejs,python}] Generate optional input types that accept
undefined/None values
[#​22552](https://redirect.github.com/pulumi/pulumi/pull/22552 )
##### Miscellaneous
- \[auto/go] Drop the "With" prefix from generated option helpers so
they match the naming of the existing optXxx packages
[#​22682](https://redirect.github.com/pulumi/pulumi/pull/22682 )
###
[`v3.232.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32320-2026-04-22 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.231.0...v3.232.0 )
##### Features
- \[cli] Add an experimental `pulumi neo` command that creates a Pulumi
Neo agent task in CLI
tool-execution mode and runs the local tool loop. Filesystem and shell
tool calls
issued by the agent run on the user's machine in their working
directory; the
interactive chat continues to happen in the Pulumi Console at the URL
the command
prints. Hidden behind PULUMI_EXPERIMENTAL.
[#​22473](https://redirect.github.com/pulumi/pulumi/pull/22473 )
- \[cli] Add support for handling user approval requests in the `pulumi
neo` terminal UI.
When the agent requests confirmation for a sensitive action, the TUI
prompts the
user and forwards their response back to the Pulumi Console. Hidden
behind
PULUMI_EXPERIMENTAL.
[#​22589](https://redirect.github.com/pulumi/pulumi/pull/22589 )
- \[cli] Add an interactive terminal UI for `pulumi neo` built with
bubbletea, rendering
agent messages, tool calls, and streaming output in the terminal
alongside the
Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.
[#​22570](https://redirect.github.com/pulumi/pulumi/pull/22570 )
- \[cli] Switch logging library from glog to slog.
BREAKING: any `if logging.V(x) {` need to be changed to `if
logging.V(x).Enabled()`
[#​22548](https://redirect.github.com/pulumi/pulumi/pull/22548 )
- \[cli] Add a plan-mode toggle to the `pulumi neo` TUI, bound to
Shift+Tab. When
plan mode is on, Neo explores and asks questions without writing files,
running `pulumi up`, or opening PRs, and surfaces an approved plan via a
dedicated approval gate. The toggle must be set before the first message
(plan mode is task-level on the wire); approving the proposed plan exits
plan mode automatically.
[#​22634](https://redirect.github.com/pulumi/pulumi/pull/22634 )
- \[cli] The `pulumi neo` TUI now drives its "thinking" spinner off a
single declarative
rule (the spinner stays on until a final event — final assistant
message, approval
request, cancellation, or error — lands), so the indicator no longer
flickers off
when the agent hands off tool calls to the CLI or when streaming text
arrives
between tools. Press `Esc` during a turn to ask the agent to cancel; the
label
switches to "Cancelling..." until the backend acknowledges.
[#​22637](https://redirect.github.com/pulumi/pulumi/pull/22637 )
- \[cli] `pulumi neo` now executes the `edit` filesystem tool locally,
matching the schema
and response wording of the upstream mcp-claude-code tool so the agent
sees
identical output whether the call ran on Cloud or CLI. `edit` performs
exact-string
replacement with occurrence-count validation, and creates a new file
when the
target is missing and `old_string` is empty.
[#​22654](https://redirect.github.com/pulumi/pulumi/pull/22654 )
##### Bug Fixes
- \[cli] Render user messages in the `pulumi neo` TUI as soon as they're
submitted
instead of waiting for the Pulumi Cloud event stream to echo them back.
The initial prompt passed on the command line also appears in the
transcript at startup. Self-echoes from the server are de-duplicated;
user input that originated from another client (e.g. the web UI on the
same task) still renders.
[#​22629](https://redirect.github.com/pulumi/pulumi/pull/22629 )
- \[cli] Wrap warnings, errors, and user-message bubbles to the terminal
width in the
`pulumi neo` TUI. Previously these blocks rendered as single long lines
that
were clipped at the right edge of the viewport. On resize, all
width-dependent
transcript blocks (user messages, warnings, errors, assistant messages)
now
reflow to the new terminal width.
[#​22635](https://redirect.github.com/pulumi/pulumi/pull/22635 )
- \[cli/policy] Fix `policy ls` to use the default org name, not
username
[#​22656](https://redirect.github.com/pulumi/pulumi/pull/22656 )
- \[engine] Fix provider registry race condition in parallel
delete-before-replace
[#​21487](https://redirect.github.com/pulumi/pulumi/pull/21487 )
- \[engine] Signal providers to cancel before closing them during
replacement
- \[sdkgen] Error on 'id' in state inputs
[#​22636](https://redirect.github.com/pulumi/pulumi/pull/22636 )
- \[programgen/python] Add necessary casts between types in generated
programs
[#​22567](https://redirect.github.com/pulumi/pulumi/pull/22567 )
- \[sdkgen/go] Fix caching of package references to be per-deployment
not per-process
[#​22170](https://redirect.github.com/pulumi/pulumi/pull/22170 )
##### Miscellaneous
- \[java] Upgrade java to v1.25.0
[#​22673](https://redirect.github.com/pulumi/pulumi/pull/22673 )
- \[auto/go] Generate command methods for the Go Automation API codegen
[#​22612](https://redirect.github.com/pulumi/pulumi/pull/22612 )
- \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` /
`Resource` in the Node and Python SDKs
[#​22603](https://redirect.github.com/pulumi/pulumi/pull/22603 )
- \[sdk/dotnet] Upgrade dotnet to v3.103.1
[#​22676](https://redirect.github.com/pulumi/pulumi/pull/22676 )
- \[yaml] Upgrade yaml to v1.32.0
[#​22674](https://redirect.github.com/pulumi/pulumi/pull/22674 )
</details>
<details>
<summary>pulumi/providertest (github.com/pulumi/providertest)</summary>
###
[`v0.7.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.7.0 )
[Compare
Source](https://redirect.github.com/pulumi/providertest/compare/v0.6.0...v0.7.0 )
##### What's Changed
- Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group
across 1 directory by
[@​dependabot](https://redirect.github.com/dependabot )\[bot]
in[https://github.com/pulumi/providertest/pull/159 ](https://redirect.github.com/pulumi/providertest/pull/159 )9
- Fix python_gcp test by adding setuptools dependency by
[@​pose](https://redirect.github.com/pose ) in
[https://github.com/pulumi/providertest/pull/167 ](https://redirect.github.com/pulumi/providertest/pull/167 )
- Rename project to python_gcp and update description by
[@​pose](https://redirect.github.com/pose ) in
[https://github.com/pulumi/providertest/pull/166 ](https://redirect.github.com/pulumi/providertest/pull/166 )
- fix(pulumitest): start fresh providers per engine operation by
[@​rshade](https://redirect.github.com/rshade ) in
[https://github.com/pulumi/providertest/pull/170 ](https://redirect.github.com/pulumi/providertest/pull/170 )
- feat(pulumitest): log pulumi version and plugins on stack creation by
[@​rshade](https://redirect.github.com/rshade ) in
[https://github.com/pulumi/providertest/pull/171 ](https://redirect.github.com/pulumi/providertest/pull/171 )
**Full Changelog**:
https://github.com/pulumi/providertest/compare/v0.6.0...v0.7.0
</details>
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.105.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31050---2026-05-04 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.104.0...v3.105.0 )
###
[`v3.104.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31040---2026-04-29 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.1...v3.104.0 )
##### Improvements
- \[runtime] Support the `getOutput` pcl intrinsic in codegen
[#​977](https://redirect.github.com/pulumi/pulumi-dotnet/pull/977 )
###
[`v3.103.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31031---2026-04-21 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.0...v3.103.1 )
##### Bug Fixes
- \[runtime] Ensure that 'main' is always respected for selecting
projects to run
[#​55](https://redirect.github.com/pulumi/pulumi-dotnet/pull/55 )
- \[runtime] Generate compilable C# for resources whose range is an
Output-typed expression such as `length(someInvoke.result)`. The loop is
now wrapped in `.Apply(rangeBody => { ... })` so the loop bound sees a
plain `int`, and `length` on an `Output<ImmutableArray<T>>` is emitted
as the extension method `.Length()` (with parentheses) rather than as a
property.
[#​969](https://redirect.github.com/pulumi/pulumi-dotnet/pull/969 )
- \[runtime] Fix codegen for nested `InputMap` literals so the produced
C# compiles
([#​833](https://redirect.github.com/pulumi/pulumi-dotnet/issues/833 ))
[#​970](https://redirect.github.com/pulumi/pulumi-dotnet/pull/970 )
</details>
<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>
###
[`v1.3.2`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.2 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2 )
#### What's Changed
- Update module github.com/pulumi/pulumi/pkg/v3 to v3.230.0 by
[@​pulumi-renovate](https://redirect.github.com/pulumi-renovate )\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/509 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/509 )9
- Correctly encode & decode `types.AssetOrArchive` by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/512 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/512 )
- Resolve framework version via runtime/debug.ReadBuildInfo by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/514 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/514 )
**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: Ian Wahbe <me@iwahbe.com >
2026-05-06 16:57:43 +00:00
pulumi-provider-automation[bot]
27b5636c61
Update GitHub Actions workflows. ( #840 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[27c21ceadaafd5a7de6e5158a02338d7c19730a1](27c21ceada ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-06 06:33:07 +00:00
pulumi-provider-automation[bot]
ed5396c425
Update GitHub Actions workflows. ( #839 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4a9e45cebb804597b1a77dd1d1ba390731ba0d82](4a9e45cebb ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-05 06:23:28 +00:00
pulumi-provider-automation[bot]
4ba5f703d4
Update GitHub Actions workflows. ( #838 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[f19d25e099c54e3ca45528e9e2348cf6873c5534](f19d25e099 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-04 06:32:46 +00:00
pulumi-provider-automation[bot]
72c3e93b42
Update GitHub Actions workflows. ( #837 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[46ca3056938b5f6ddaec3f8eb550dcc34a2e3782](46ca305693 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-05-02 06:21:15 +00:00
pulumi-provider-automation[bot]
f864eda3e0
Update GitHub Actions workflows. ( #834 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[3b016890d44c5e5e2e184c4b10b07484d9708cc3](3b016890d4 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-30 06:32:36 +00:00
pulumi-provider-automation[bot]
4e01c39bf9
Update GitHub Actions workflows. ( #833 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[f99b830821cb45c5b332123be59c6a755cd4fadc](f99b830821 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-29 06:35:12 +00:00
pulumi-provider-automation[bot]
bab57d912d
Update GitHub Actions workflows. ( #832 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[dbc8a4c59b47e1406420ea87372068fb3780dce8](dbc8a4c59b ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-28 06:32:00 +00:00
pulumi-provider-automation[bot]
96b9de72a5
Update GitHub Actions workflows. ( #831 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[fbb025ea2dd9c071a4b0a626d092c4104fc57644](fbb025ea2d ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-27 06:29:59 +00:00
pulumi-provider-automation[bot]
bae0f1379a
Update GitHub Actions workflows. ( #829 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4a821ea4d38895a0aa6b855593ea108774165ff6](4a821ea4d3 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-25 06:06:14 +00:00
pulumi-provider-automation[bot]
30e1a98140
Update GitHub Actions workflows. ( #828 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[88db566266daeb5f581215c84cd3e8c5f389a18d](88db566266 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-24 06:17:53 +00:00
pulumi-provider-automation[bot]
0b291cf120
Update GitHub Actions workflows. ( #826 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[a4ba5d1c3db54f4aa8e7674e03c3032eabd24aaa](a4ba5d1c3d ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-23 06:14:45 +00:00
pulumi-provider-automation[bot]
2e27061ccc
Update GitHub Actions workflows. ( #825 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[e46e1ac50228764e2a7fa7a76403fca94224df68](e46e1ac502 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-22 06:12:50 +00:00
pulumi-provider-automation[bot]
740410488f
Update GitHub Actions workflows. ( #824 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4065ed8e56aa6623046a204c35d57c0376c7cf6c](4065ed8e56 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-21 06:12:31 +00:00
pulumi-provider-automation[bot]
f24d1e662a
Update GitHub Actions workflows. ( #823 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[7f0c56e9f79bc22f3b4cc6379312d705a56411c6](7f0c56e9f7 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-20 06:21:00 +00:00
pulumi-provider-automation[bot]
703dd21dc8
Update GitHub Actions workflows. ( #822 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[144a8c45ec5f8a164b55365078d914dd6955b209](144a8c45ec ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-19 06:12:17 +00:00
pulumi-provider-automation[bot]
8328de32ef
Update GitHub Actions workflows. ( #821 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[2bc9cb47c63304319f6a34a84c861bedc53274ae](2bc9cb47c6 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-18 06:01:53 +00:00
pulumi-provider-automation[bot]
c9ec41986b
Update GitHub Actions workflows. ( #820 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[5aad94d008deea2e7db42fa2579fe93fb88256b8](5aad94d008 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-17 06:14:06 +00:00
pulumi-renovate[bot]
ef554c455f
Update dependency @pulumi/pulumi to v3.231.0 ( #818 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.230.0` ->
`3.231.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.230.0/3.231.0 )
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.231.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.231.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.230.0...v3.231.0 )
##### 3.231.0 (2026-04-16)
##### Features
- \[cli] Auto-detect Mercurial repository metadata for `pulumi up` /
`pulumi preview` updates, mirroring existing Git support
[#​22618](https://redirect.github.com/pulumi/pulumi/pull/22618 )
- \[engine] Send Cancel RPC to plugins on host close for graceful
shutdown
[#​22569](https://redirect.github.com/pulumi/pulumi/pull/22569 )
- \[engine] Pass resource options to hooks through the engine
[#​22582](https://redirect.github.com/pulumi/pulumi/pull/22582 )
- \[engine] Add GetDeploymentInfo to the resource monitor service
- \[auto/go] Add `New` command to Automation API
[#​22439](https://redirect.github.com/pulumi/pulumi/pull/22439 )
- \[auto/{go,nodejs,python}] Add --diff to automation api for destroy
[#​22563](https://redirect.github.com/pulumi/pulumi/pull/22563 )
- \[auto/python] Add `new` command to Automation API
[#​22439](https://redirect.github.com/pulumi/pulumi/pull/22439 )
- \[pcl] Support for resource hooks in PCL
[#​22365](https://redirect.github.com/pulumi/pulumi/pull/22365 )
- \[sdk-nodejs] Warn when a non-ComponentResource class is passed in the
explicit `components` list to `componentProviderHost`
[#​22619](https://redirect.github.com/pulumi/pulumi/pull/22619 )
- \[sdk-python] Warn when a non-ComponentResource class is passed in the
explicit `components` list to `component_provider_host`
[#​22619](https://redirect.github.com/pulumi/pulumi/pull/22619 )
- \[cli/import] Add support for providers to be defined in the same
import file as their users
[#​21671](https://redirect.github.com/pulumi/pulumi/pull/21671 )
- \[cli/policy] ESC environment support for local policy packs
[#​22495](https://redirect.github.com/pulumi/pulumi/pull/22495 )
- \[sdk/nodejs] Support package.yaml when using pnpm
[#​22491](https://redirect.github.com/pulumi/pulumi/pull/22491 )
- \[sdk/python] Add function decorator variants for resource and error
hooks
[#​22519](https://redirect.github.com/pulumi/pulumi/pull/22519 )
##### Bug Fixes
- \[auto/{nodejs,python}] Support --run-program for inline programs with
preview_refresh/destroy
- \[backend/diy] Remove state lock for destroy and import with preview
only for diy backend
[#​22561](https://redirect.github.com/pulumi/pulumi/pull/22561 )
- \[engine] Fix snapshot integrity error with component/provider
resources in refresh --run-program
[#​21817](https://redirect.github.com/pulumi/pulumi/pull/21817 )
- \[pcl] Type list and tuple indices as integers not numbers
[#​22592](https://redirect.github.com/pulumi/pulumi/pull/22592 )
- \[pcl] Builtin functions element and range take int parameters not
numbers
[#​22597](https://redirect.github.com/pulumi/pulumi/pull/22597 )
- \[programgen/{go,nodejs,python}] Fix some cases of name conflicts in
program gen not being handled correctly
[#​22556](https://redirect.github.com/pulumi/pulumi/pull/22556 )
- \[programgen/nodejs] Add necessary casts between types in generated
programs
[#​22557](https://redirect.github.com/pulumi/pulumi/pull/22557 )
- \[programgen/{nodejs,python}] Fix imports of camelCase modules
[#​22536](https://redirect.github.com/pulumi/pulumi/pull/22536 )
- \[sdk/python] Support Input\[Optional\[T]] in Python runtime type
unwrapping
[#​22553](https://redirect.github.com/pulumi/pulumi/pull/22553 )
- \[sdkgen] Warn about modules nested under the index module which are
not supported
[#​22531](https://redirect.github.com/pulumi/pulumi/pull/22531 )
##### Miscellaneous
- \[java] Upgrade java to v1.24.0
[#​22615](https://redirect.github.com/pulumi/pulumi/pull/22615 )
- \[yaml] Upgrade yaml to v1.31.1
[#​22610](https://redirect.github.com/pulumi/pulumi/pull/22610 )
- \[sdk/dotnet] Upgrade dotnet to v3.103.0
[#​22614](https://redirect.github.com/pulumi/pulumi/pull/22614 )
- \[sdk/nodejs] Replace `got` by `fetch`
[#​22533](https://redirect.github.com/pulumi/pulumi/pull/22533 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-04-16 20:16:47 +00:00
pulumi-provider-automation[bot]
0b52de6543
Update GitHub Actions workflows. ( #816 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[b05dbe61dbea8fb6ea0c4cde662bde1101961819](b05dbe61db ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-16 06:16:23 +00:00
pulumi-renovate[bot]
a3072f6aa3
Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.103.0 ( #815 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | minor | `v3.102.1` -> `v3.103.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.103.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31030---2026-04-15 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.1...v3.103.0 )
##### Improvements
- \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` /
`Resource`
[#​963](https://redirect.github.com/pulumi/pulumi-dotnet/pull/963 )
##### Bug Fixes
- \[sdk] Fix `ResourceTransforms` being silently dropped when
`CustomResourceOptions.Merge` is called (affects all generated SDK
resources using the `MakeResourceOptions` pattern)
[#​958](https://redirect.github.com/pulumi/pulumi-dotnet/pull/958 )
- \[sdk] Add missing `[Input]` attribute to `StashArgs.Input`, fixing
serialization of the Stash resource
[#​960](https://redirect.github.com/pulumi/pulumi-dotnet/pull/960 )
- \[sdk/auto] Fix running inline programs with refresh/destroy and
--run-program
[#​725](https://redirect.github.com/pulumi/pulumi-dotnet/pull/725 )
##### Improvements
- \[runtime] Add codegen support for AdditionalSecretOutputs, Version,
and PluginDownloadURL resource options
[#​953](https://redirect.github.com/pulumi/pulumi-dotnet/pull/953 )
##### Bug Fixes
- \[runtime] Fix property paths in resource options (IgnoreChanges,
ReplaceOnChanges, HideDiffs) being incorrectly prefixed with @​
for C# reserved words
[#​934](https://redirect.github.com/pulumi/pulumi-dotnet/pull/934 )
- \[runtime] Fix NuGet package name and version extraction for packages
with prerelease versions (e.g. `3.0.0-alpha.1.internal`)
[#​947](https://redirect.github.com/pulumi/pulumi-dotnet/pull/947 )
- \[runtime] Support call methods in program generation
[#​946](https://redirect.github.com/pulumi/pulumi-dotnet/pull/946 )
- \[runtime] Add missing `System` namespace import for `sha1` builtin,
fixing `BitConverter` not found error
[#​961](https://redirect.github.com/pulumi/pulumi-dotnet/pull/961 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-04-15 17:55:53 +00:00
pulumi-provider-automation[bot]
afe301cb52
Update GitHub Actions workflows. ( #814 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[bf992a9000f6297ee7e288347f354ed2ca8d6bbf](bf992a9000 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-15 06:13:32 +00:00
Keith Mosher
b0c5918c7c
Migrate Windows code signing to Azure Trusted Signing ( #811 )
...
## Summary
Migrates Windows binary signing from Azure Key Vault (`jsign --storetype
AZUREKEYVAULT`) to [Azure Trusted
Signing](https://learn.microsoft.com/en-us/azure/trusted-signing/ ). The
previous AKV code-signing cert expired, breaking the release pipeline.
Trusted Signing issues short-lived Microsoft-managed certs so there's
nothing to rotate.
- `Makefile` / `scripts/crossbuild.mk`: bump `jsign` 6.0 → 7.4, switch
`--storetype` to `TRUSTEDSIGNING`, use the
`https://codesigning.azure.net ` token audience, derive the keystore host
from `AZURE_SIGNING_ACCOUNT_ENDPOINT`, pass account/profile via
`--alias`, update the `SKIP_SIGNING` guard and error message.
- `.github/workflows/{build,release,prerelease,build_provider}.yml`:
replace the `AZURE_SIGNING_KEY_VAULT_URI` env passthrough with the three
new `AZURE_SIGNING_ACCOUNT_*` outputs and update the `SKIP_SIGNING`
expression.
Companion to pulumi/ci-mgmt#2126 , pulumi/pulumi-command#1200 , and
pulumi/pulumi-provider-boilerplate#1236 . The ESC environment already
exposes the new variables and the signing SP has the `Artifact Signing
Certificate Profile Signer` role on the
`pulumi-code-signing/pulumi-code-signing` profile. Verified end-to-end
against pulumi-command, pulumi-random, and pulumi-provider-boilerplate.
## Test plan
- [ ] CI release build produces a Windows binary with a valid Trusted
Signing certificate chain
2026-04-09 16:52:15 -07:00
pulumi-provider-automation[bot]
00ec8e3ebe
Update GitHub Actions workflows. ( #812 )
...
This PR was triggered by @kmosher generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[9753531fe8d3f70139c072186a6ddcaa32d27b63](9753531fe8 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-04-09 23:49:54 +00:00
pulumi-renovate[bot]
2079e52a5f
Update first-party Pulumi dependencies to v3.230.0 ( #809 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.229.0` ->
`3.230.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.229.0/3.230.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.229.0` -> `v3.230.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.230.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32300-2026-04-08 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0 )
##### Features
- \[cli] Detect AI agents and send in update metadata
[#​22497](https://redirect.github.com/pulumi/pulumi/pull/22497 )
- \[auto/nodejs] Add "org" commands (get-default, set-default, search,
search ai) to the auto-generated interface
[#​22395](https://redirect.github.com/pulumi/pulumi/pull/22395 )
- \[auto/nodejs] Add "new" command to the auto-generated interface
[#​22421](https://redirect.github.com/pulumi/pulumi/pull/22421 )
- \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js
providers
[#​22516](https://redirect.github.com/pulumi/pulumi/pull/22516 )
- \[cli/policy] Add ESC environment resolution for policy packs
[#​22425](https://redirect.github.com/pulumi/pulumi/pull/22425 )
##### Bug Fixes
- \[auto/go] Insert --non-interactive flag before "--" positional
separator to avoid misinterpretation as a positional argument
[#​22462](https://redirect.github.com/pulumi/pulumi/pull/22462 )
- \[ci] Add code coverage collection for Node.js automation tools tests
[#​22412](https://redirect.github.com/pulumi/pulumi/pull/22412 )
- \[pcl] Allow key indexing into a map of resources created by range
[#​22498](https://redirect.github.com/pulumi/pulumi/pull/22498 )
- \[programgen/go] Fix an issue with formatted index modules not
importing correctly
- \[cli/state] Check for Pulumi.yaml projects and `backend` option in
`state upgrade`
[#​22483](https://redirect.github.com/pulumi/pulumi/pull/22483 )
- \[sdk/go] Fix Go program generation for ternary expressions inside
apply callbacks, add Go predeclared identifiers to reserved words,
handle optional list types in union type codegen, and fix
unmarshalOutput for known outputs with null elements.
[#​22460](https://redirect.github.com/pulumi/pulumi/pull/22460 )
- \[sdk/nodejs] Fix inherited input properties missing from component
schema when args interface extends another interface
[#​22446](https://redirect.github.com/pulumi/pulumi/pull/22446 )
- \[sdk/python] Fix inherited input properties missing from component
schema when args class inherits from a base class
[#​22484](https://redirect.github.com/pulumi/pulumi/pull/22484 )
##### Miscellaneous
- \[java] Upgrade java to v1.23.0
- \[sdk/dotnet] Upgrade dotnet to v3.102.1
- \[yaml] Upgrade to v1.31.0
[#​22501](https://redirect.github.com/pulumi/pulumi/pull/22501 )
- \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove
`mimeType` & `readDir` from PCL
[#​22449](https://redirect.github.com/pulumi/pulumi/pull/22449 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.230.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.230.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0 )
#### 3.230.0 (2026-04-08)
##### Features
- \[cli] Detect AI agents and send in update metadata
[#​22497](https://redirect.github.com/pulumi/pulumi/pull/22497 )
- \[auto/nodejs] Add "org" commands (get-default, set-default, search,
search ai) to the auto-generated interface
[#​22395](https://redirect.github.com/pulumi/pulumi/pull/22395 )
- \[auto/nodejs] Add "new" command to the auto-generated interface
[#​22421](https://redirect.github.com/pulumi/pulumi/pull/22421 )
- \[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js
providers
[#​22516](https://redirect.github.com/pulumi/pulumi/pull/22516 )
- \[cli/policy] Add ESC environment resolution for policy packs
[#​22425](https://redirect.github.com/pulumi/pulumi/pull/22425 )
##### Bug Fixes
- \[auto/go] Insert --non-interactive flag before "--" positional
separator to avoid misinterpretation as a positional argument
[#​22462](https://redirect.github.com/pulumi/pulumi/pull/22462 )
- \[ci] Add code coverage collection for Node.js automation tools tests
[#​22412](https://redirect.github.com/pulumi/pulumi/pull/22412 )
- \[pcl] Allow key indexing into a map of resources created by range
[#​22498](https://redirect.github.com/pulumi/pulumi/pull/22498 )
- \[programgen/go] Fix an issue with formatted index modules not
importing correctly
- \[cli/state] Check for Pulumi.yaml projects and `backend` option in
`state upgrade`
[#​22483](https://redirect.github.com/pulumi/pulumi/pull/22483 )
- \[sdk/go] Fix Go program generation for ternary expressions inside
apply callbacks, add Go predeclared identifiers to reserved words,
handle optional list types in union type codegen, and fix
unmarshalOutput for known outputs with null elements.
[#​22460](https://redirect.github.com/pulumi/pulumi/pull/22460 )
- \[sdk/nodejs] Fix inherited input properties missing from component
schema when args interface extends another interface
[#​22446](https://redirect.github.com/pulumi/pulumi/pull/22446 )
- \[sdk/python] Fix inherited input properties missing from component
schema when args class inherits from a base class
[#​22484](https://redirect.github.com/pulumi/pulumi/pull/22484 )
##### Miscellaneous
- \[java] Upgrade java to v1.23.0
- \[sdk/dotnet] Upgrade dotnet to v3.102.1
- \[yaml] Upgrade to v1.31.0
[#​22501](https://redirect.github.com/pulumi/pulumi/pull/22501 )
- \[programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove
`mimeType` & `readDir` from PCL
[#​22449](https://redirect.github.com/pulumi/pulumi/pull/22449 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-04-09 01:05:50 +00:00
pulumi-renovate[bot]
fd5b2ee95b
Update first-party Pulumi dependencies ( #807 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | patch | `v3.102.0` -> `v3.102.1` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.228.0` -> `v3.229.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.102.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31021---2026-04-08 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.102.0...v3.102.1 )
##### Bug Fixes
- \[sdk] Fix inherited \[Input] properties missing from component schema
when using base class inheritance on args types
[#​930](https://redirect.github.com/pulumi/pulumi-dotnet/pull/930 )
- \[sdk] Fix GetResourceType() returning empty string for
DependencyProviderResource
[#​922](https://redirect.github.com/pulumi/pulumi-dotnet/pull/922 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0 )
#### 3.229.0 (2026-04-02)
##### Features
- \[auto/python] Add org get-default and set-default commands to
Automation API
- \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
[#​22373](https://redirect.github.com/pulumi/pulumi/pull/22373 )
- \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
[#​22369](https://redirect.github.com/pulumi/pulumi/pull/22369 )
- \[cli/display] Add `--urns` flag to display full resource URNs instead
of short names in preview, up, destroy, refresh, import, and watch
commands
[#​22007](https://redirect.github.com/pulumi/pulumi/pull/22007 )
- \[pcl] Type integer literals as integers rather than numbers in PCL
[#​22268](https://redirect.github.com/pulumi/pulumi/pull/22268 )
- \[pcl] Support parameterized providers in PCL
[#​22251](https://redirect.github.com/pulumi/pulumi/pull/22251 )
- \[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
[#​22389](https://redirect.github.com/pulumi/pulumi/pull/22389 )
- \[yaml] Update YAML runtime to 1.30.2
[#​22426](https://redirect.github.com/pulumi/pulumi/pull/22426 )
- \[sdk/go] Add org get-default and set-default commands to Automation
API
- \[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
[#​22370](https://redirect.github.com/pulumi/pulumi/pull/22370 )
- \[cli/policy] Add a new `policy analyze` command to run a policy pack
against existing state
[#​22250](https://redirect.github.com/pulumi/pulumi/pull/22250 )
##### Bug Fixes
- \[backend/diy] Remove state lock for refresh --preview-only for diy
backend
[#​22385](https://redirect.github.com/pulumi/pulumi/pull/22385 )
- \[cli] Fix OTEL flushing on provider shutdown
[#​22358](https://redirect.github.com/pulumi/pulumi/pull/22358 )
- \[cli/display] Fix deadlock in message renderer when cancelling an
operation
[#​22433](https://redirect.github.com/pulumi/pulumi/pull/22433 )
- \[engine] Fix `--include` and `--exclude` not working for
program-based refresh (RefreshV2)
[#​22404](https://redirect.github.com/pulumi/pulumi/pull/22404 )
- \[engine] Parallelize plugin cancellation in SignalCancellation
[#​22431](https://redirect.github.com/pulumi/pulumi/pull/22431 )
- \[pcl] Fix looking up variables in parent scopes
[#​22379](https://redirect.github.com/pulumi/pulumi/pull/22379 )
- \[pcl] Apply default values from resource schemas
[#​22393](https://redirect.github.com/pulumi/pulumi/pull/22393 )
- \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
[#​22397](https://redirect.github.com/pulumi/pulumi/pull/22397 )
- \[sdk/nodejs] Allow TypeScript 6 as a peer dependency
[#​22340](https://redirect.github.com/pulumi/pulumi/pull/22340 )
- \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped
modules
[#​22388](https://redirect.github.com/pulumi/pulumi/pull/22388 )
- \[sdk/python] Cache type metadata and class references in Python SDK
to reduce CPU overhead during serialization
[#​22422](https://redirect.github.com/pulumi/pulumi/pull/22422 )
- \[sdk/python] Replace busy-wait polling in wait_for_rpcs with
asyncio.wait
[#​22411](https://redirect.github.com/pulumi/pulumi/pull/22411 )
##### Miscellaneous
- \[cli] Add update metadata to the otel root span
[#​22357](https://redirect.github.com/pulumi/pulumi/pull/22357 )
- \[java] Update to v1.22.0
[#​22437](https://redirect.github.com/pulumi/pulumi/pull/22437 )
- \[sdk/nodejs] Use nodenext for moduleResolution and module
[#​22363](https://redirect.github.com/pulumi/pulumi/pull/22363 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-04-08 13:51:13 +00:00
pulumi-renovate[bot]
8ef055d5e7
Update first-party Pulumi dependencies ( #803 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.227.0` ->
`3.229.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.227.0/3.229.0 )
|
|
[github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java )
| require | minor | `v1.21.3` -> `v1.22.0` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.227.0` -> `v3.228.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.229.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.229.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0 )
#### 3.229.0 (2026-04-02)
##### Features
- \[auto/python] Add org get-default and set-default commands to
Automation API
- \[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
[#​22373](https://redirect.github.com/pulumi/pulumi/pull/22373 )
- \[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
[#​22369](https://redirect.github.com/pulumi/pulumi/pull/22369 )
- \[cli/display] Add `--urns` flag to display full resource URNs instead
of short names in preview, up, destroy, refresh, import, and watch
commands
[#​22007](https://redirect.github.com/pulumi/pulumi/pull/22007 )
- \[pcl] Type integer literals as integers rather than numbers in PCL
[#​22268](https://redirect.github.com/pulumi/pulumi/pull/22268 )
- \[pcl] Support parameterized providers in PCL
[#​22251](https://redirect.github.com/pulumi/pulumi/pull/22251 )
- \[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
[#​22389](https://redirect.github.com/pulumi/pulumi/pull/22389 )
- \[yaml] Update YAML runtime to 1.30.2
[#​22426](https://redirect.github.com/pulumi/pulumi/pull/22426 )
- \[sdk/go] Add org get-default and set-default commands to Automation
API
- \[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
[#​22370](https://redirect.github.com/pulumi/pulumi/pull/22370 )
- \[cli/policy] Add a new `policy analyze` command to run a policy pack
against existing state
[#​22250](https://redirect.github.com/pulumi/pulumi/pull/22250 )
##### Bug Fixes
- \[backend/diy] Remove state lock for refresh --preview-only for diy
backend
[#​22385](https://redirect.github.com/pulumi/pulumi/pull/22385 )
- \[cli] Fix OTEL flushing on provider shutdown
[#​22358](https://redirect.github.com/pulumi/pulumi/pull/22358 )
- \[cli/display] Fix deadlock in message renderer when cancelling an
operation
[#​22433](https://redirect.github.com/pulumi/pulumi/pull/22433 )
- \[engine] Fix `--include` and `--exclude` not working for
program-based refresh (RefreshV2)
[#​22404](https://redirect.github.com/pulumi/pulumi/pull/22404 )
- \[engine] Parallelize plugin cancellation in SignalCancellation
[#​22431](https://redirect.github.com/pulumi/pulumi/pull/22431 )
- \[pcl] Fix looking up variables in parent scopes
[#​22379](https://redirect.github.com/pulumi/pulumi/pull/22379 )
- \[pcl] Apply default values from resource schemas
[#​22393](https://redirect.github.com/pulumi/pulumi/pull/22393 )
- \[sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
[#​22397](https://redirect.github.com/pulumi/pulumi/pull/22397 )
- \[sdk/nodejs] Allow TypeScript 6 as a peer dependency
[#​22340](https://redirect.github.com/pulumi/pulumi/pull/22340 )
- \[sdk/nodejs] Fix closure serialization for \__importStar-wrapped
modules
[#​22388](https://redirect.github.com/pulumi/pulumi/pull/22388 )
- \[sdk/python] Cache type metadata and class references in Python SDK
to reduce CPU overhead during serialization
[#​22422](https://redirect.github.com/pulumi/pulumi/pull/22422 )
- \[sdk/python] Replace busy-wait polling in wait_for_rpcs with
asyncio.wait
[#​22411](https://redirect.github.com/pulumi/pulumi/pull/22411 )
##### Miscellaneous
- \[cli] Add update metadata to the otel root span
[#​22357](https://redirect.github.com/pulumi/pulumi/pull/22357 )
- \[java] Update to v1.22.0
[#​22437](https://redirect.github.com/pulumi/pulumi/pull/22437 )
- \[sdk/nodejs] Use nodenext for moduleResolution and module
[#​22363](https://redirect.github.com/pulumi/pulumi/pull/22363 )
###
[`v3.228.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32280-2026-03-25 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.227.0...v3.228.0 )
##### Features
- \[cli] Don't apply the secrets filter to `true` and `false`
(case-insensitive)
[#​22269](https://redirect.github.com/pulumi/pulumi/pull/22269 )
- \[cli] Add grpcs:// support and header authentication to OTLP exporter
[#​22320](https://redirect.github.com/pulumi/pulumi/pull/22320 )
- \[cli] Read OTEL_RESOURCE_ATTRIBUTES
[#​22329](https://redirect.github.com/pulumi/pulumi/pull/22329 )
- \[auto/nodejs] Add low-level "cancel" command to the auto-generated
interface
[#​22156](https://redirect.github.com/pulumi/pulumi/pull/22156 )
- \[cli/state] Allow `pulumi state delete` to accept multiple resource
URNs and delete them in a dependency-safe order
##### Bug Fixes
- \[cli] Allow relative file paths for --otel-traces
[#​22300](https://redirect.github.com/pulumi/pulumi/pull/22300 )
- \[cli] Bridge opentracing spans from providers into OTel
[#​22313](https://redirect.github.com/pulumi/pulumi/pull/22313 )
- \[cli] Correctly end spans for GRPC streams
[#​22304](https://redirect.github.com/pulumi/pulumi/pull/22304 )
- \[cli/about] Do not include the access token in plain text
[#​22347](https://redirect.github.com/pulumi/pulumi/pull/22347 )
- \[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
[#​22317](https://redirect.github.com/pulumi/pulumi/pull/22317 )
- \[cli/import] Fix import codegen when generating references to
non-standard names
[#​22319](https://redirect.github.com/pulumi/pulumi/pull/22319 )
- \[engine] Update golang version
[#​22277](https://redirect.github.com/pulumi/pulumi/pull/22277 )
- \[pcl] Typecheck component inputs in PCL programs
[#​22292](https://redirect.github.com/pulumi/pulumi/pull/22292 )
- \[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
[#​22306](https://redirect.github.com/pulumi/pulumi/pull/22306 )
##### Miscellaneous
- \[cli] Add CLI metadata to the root span
[#​22305](https://redirect.github.com/pulumi/pulumi/pull/22305 )
- \[cli] Add more OTel interceptors for GRPC clients
[#​22309](https://redirect.github.com/pulumi/pulumi/pull/22309 )
- \[cli] Add spans for plugin installation and add more attributes for
dependency installation
[#​22303](https://redirect.github.com/pulumi/pulumi/pull/22303 )
- \[cli] Allow setting a GRPC endpoint for performance tests
[#​22330](https://redirect.github.com/pulumi/pulumi/pull/22330 )
- \[backend/diy] Start deprecation of non-project mode for DIY backends
[#​19625](https://redirect.github.com/pulumi/pulumi/pull/19625 )
</details>
<details>
<summary>pulumi/pulumi-java
(github.com/pulumi/pulumi-java/pkg)</summary>
###
[`v1.22.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1220---2026-04-01 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.3...v1.22.0 )
##### Bug Fixes
- \[runtime] Do not leak java processes on failed resource creates
[#​2103](https://redirect.github.com/pulumi/pulumi-java/pull/2103 )
##### Improvements
- \[codegen] Support `cwd()` builtin in program generation
[#​2092](https://redirect.github.com/pulumi/pulumi-java/pull/2092 )
- \[codegen] Support `additionalSecretOutputs` resource option in
program generation
[#​2098](https://redirect.github.com/pulumi/pulumi-java/pull/2098 )
- \[codegen] Support `deleteBeforeReplace` and `replaceOnChanges`
resource options in program and SDK generation
[#​2101](https://redirect.github.com/pulumi/pulumi-java/pull/2101 )
##### Bug Fixes
- \[codegen] Emit integer numbers as floats so generated code compiles
[#​2102](https://redirect.github.com/pulumi/pulumi-java/pull/2102 )
- \[codegen] Generate `pom.xml` in the program directory when `main` is
set in `Pulumi.yaml`
[#​2093](https://redirect.github.com/pulumi/pulumi-java/pull/2093 )
- \[codegen] Fix generated SDK `settings.gradle` to work with Gradle 9
[#​2097](https://redirect.github.com/pulumi/pulumi-java/pull/2097 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-04-02 17:58:57 +00:00
pulumi-renovate[bot]
f98315e8ee
Update first-party Pulumi dependencies to v3.227.0 ( #802 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.226.0` ->
`3.227.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.226.0/3.227.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.226.0` -> `v3.227.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.227.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32270-2026-03-19 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0 )
##### Features
- \[engine] The engine will fill in Name and Type for ResourceReference
values on the wire protocol
[#​22208](https://redirect.github.com/pulumi/pulumi/pull/22208 )
- \[sdk/bun] Add support for running policy packs with bun
[#​22206](https://redirect.github.com/pulumi/pulumi/pull/22206 )
- \[cli/policy] Auto-install missing policy analyzer plugins
[#​22196](https://redirect.github.com/pulumi/pulumi/pull/22196 )
- \[sdk/python] Add lock file detection for picking the Python toolchain
[#​22234](https://redirect.github.com/pulumi/pulumi/pull/22234 )
##### Bug Fixes
- \[cli] Use distinct exit codes for different types of error
[#​22205](https://redirect.github.com/pulumi/pulumi/pull/22205 )
- \[cli] Improve SAML SSO reauthorization error message
- \[engine] Fix snapshot integrity error in refresh v2 with changed
parents
[#​22190](https://redirect.github.com/pulumi/pulumi/pull/22190 )
- \[pcl] Continue running after errors when running with
--continue-on-error
[#​22171](https://redirect.github.com/pulumi/pulumi/pull/22171 )
- \[pcl] Deprecate labels on package blocks
[#​22253](https://redirect.github.com/pulumi/pulumi/pull/22253 )
- \[programgen] Preserve traversal parts in
rewriteRelativeTraversalExpression
[#​22249](https://redirect.github.com/pulumi/pulumi/pull/22249 )
- \[sdk/bun] Check for an SDK version compatible with bun
[#​22262](https://redirect.github.com/pulumi/pulumi/pull/22262 )
- \[programgen/nodejs] Correctly generate `for` expressions
[#​22219](https://redirect.github.com/pulumi/pulumi/pull/22219 )
- \[sdk/go] Add support for Azure DevOps git URLs in pulumi package
publish code paths
[#​22217](https://redirect.github.com/pulumi/pulumi/pull/22217 )
- \[programgen/python] Correctly generate list & dictionary
comprehension in Python code
[#​22182](https://redirect.github.com/pulumi/pulumi/pull/22182 )
##### Miscellaneous
- \[backend] Move CloudConsoleURL from httpstate to httpstate/client
[#​22258](https://redirect.github.com/pulumi/pulumi/pull/22258 )
- \[docs] Move remaining content from /developer-docs to /docs
[#​22225](https://redirect.github.com/pulumi/pulumi/pull/22225 )
- \[sdk/bun] Add a test for the function serialization error message
when using bun
[#​22207](https://redirect.github.com/pulumi/pulumi/pull/22207 )
- \[sdk/bun] Run policy language tests for bun
[#​22209](https://redirect.github.com/pulumi/pulumi/pull/22209 )
- \[sdk/bun] Mark pulumi-language-bun as a bundled plugin
[#​22265](https://redirect.github.com/pulumi/pulumi/pull/22265 )
- \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and
run-policy-pack
[#​22210](https://redirect.github.com/pulumi/pulumi/pull/22210 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.227.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.227.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.226.0...v3.227.0 )
##### 3.227.0 (2026-03-19)
##### Features
- \[engine] The engine will fill in Name and Type for ResourceReference
values on the wire protocol
[#​22208](https://redirect.github.com/pulumi/pulumi/pull/22208 )
- \[sdk/bun] Add support for running policy packs with bun
[#​22206](https://redirect.github.com/pulumi/pulumi/pull/22206 )
- \[cli/policy] Auto-install missing policy analyzer plugins
[#​22196](https://redirect.github.com/pulumi/pulumi/pull/22196 )
- \[sdk/python] Add lock file detection for picking the Python toolchain
[#​22234](https://redirect.github.com/pulumi/pulumi/pull/22234 )
##### Bug Fixes
- \[cli] Use distinct exit codes for different types of error
[#​22205](https://redirect.github.com/pulumi/pulumi/pull/22205 )
- \[cli] Improve SAML SSO reauthorization error message
- \[engine] Fix snapshot integrity error in refresh v2 with changed
parents
[#​22190](https://redirect.github.com/pulumi/pulumi/pull/22190 )
- \[pcl] Continue running after errors when running with
--continue-on-error
[#​22171](https://redirect.github.com/pulumi/pulumi/pull/22171 )
- \[pcl] Deprecate labels on package blocks
[#​22253](https://redirect.github.com/pulumi/pulumi/pull/22253 )
- \[programgen] Preserve traversal parts in
rewriteRelativeTraversalExpression
[#​22249](https://redirect.github.com/pulumi/pulumi/pull/22249 )
- \[sdk/bun] Check for an SDK version compatible with bun
[#​22262](https://redirect.github.com/pulumi/pulumi/pull/22262 )
- \[programgen/nodejs] Correctly generate `for` expressions
[#​22219](https://redirect.github.com/pulumi/pulumi/pull/22219 )
- \[sdk/go] Add support for Azure DevOps git URLs in pulumi package
publish code paths
[#​22217](https://redirect.github.com/pulumi/pulumi/pull/22217 )
- \[programgen/python] Correctly generate list & dictionary
comprehension in Python code
[#​22182](https://redirect.github.com/pulumi/pulumi/pull/22182 )
##### Miscellaneous
- \[backend] Move CloudConsoleURL from httpstate to httpstate/client
[#​22258](https://redirect.github.com/pulumi/pulumi/pull/22258 )
- \[docs] Move remaining content from /developer-docs to /docs
[#​22225](https://redirect.github.com/pulumi/pulumi/pull/22225 )
- \[sdk/bun] Add a test for the function serialization error message
when using bun
[#​22207](https://redirect.github.com/pulumi/pulumi/pull/22207 )
- \[sdk/bun] Run policy language tests for bun
[#​22209](https://redirect.github.com/pulumi/pulumi/pull/22209 )
- \[sdk/bun] Mark pulumi-language-bun as a bundled plugin
[#​22265](https://redirect.github.com/pulumi/pulumi/pull/22265 )
- \[sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and
run-policy-pack
[#​22210](https://redirect.github.com/pulumi/pulumi/pull/22210 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-19 22:21:40 +00:00
pulumi-renovate[bot]
a479383c41
Update module google.golang.org/grpc to v1.79.3 [SECURITY] ( #800 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go ) |
indirect | patch | `v1.79.2` -> `v1.79.3` |
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go ) |
indirect | minor | `v1.72.1` -> `v1.79.3` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
### GitHub Vulnerability Alerts
####
[CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3 )
### Impact
_What kind of vulnerability is it? Who is impacted?_
It is an **Authorization Bypass** resulting from **Improper Input
Validation** of the HTTP/2 `:path` pseudo-header.
The gRPC-Go server was too lenient in its routing logic, accepting
requests where the `:path` omitted the mandatory leading slash (e.g.,
`Service/Method` instead of `/Service/Method`). While the server
successfully routed these requests to the correct handler, authorization
interceptors (including the official `grpc/authz` package) evaluated the
raw, non-canonical path string. Consequently, "deny" rules defined using
canonical paths (starting with `/`) failed to match the incoming
request, allowing it to bypass the policy if a fallback "allow" rule was
present.
**Who is impacted?**
This affects gRPC-Go servers that meet both of the following criteria:
1. They use path-based authorization interceptors, such as the official
RBAC implementation in `google.golang.org/grpc/authz` or custom
interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`.
2. Their security policy contains specific "deny" rules for canonical
paths but allows other requests by default (a fallback "allow" rule).
The vulnerability is exploitable by an attacker who can send raw HTTP/2
frames with malformed `:path` headers directly to the gRPC server.
### Patches
_Has the problem been patched? What versions should users upgrade to?_
Yes, the issue has been patched. The fix ensures that any request with a
`:path` that does not start with a leading slash is immediately rejected
with a `codes.Unimplemented` error, preventing it from reaching
authorization interceptors or handlers with a non-canonical path string.
Users should upgrade to the following versions (or newer):
* **v1.79.3**
* The latest **master** branch.
It is recommended that all users employing path-based authorization
(especially `grpc/authz`) upgrade as soon as the patch is available in a
tagged release.
### Workarounds
_Is there a way for users to fix or remediate the vulnerability without
upgrading?_
While upgrading is the most secure and recommended path, users can
mitigate the vulnerability using one of the following methods:
#### 1. Use a Validating Interceptor (Recommended Mitigation)
Add an "outermost" interceptor to your server that validates the path
before any other authorization logic runs:
```go
func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) {
if info.FullMethod == "" || info.FullMethod[0] != '/' {
return nil, status.Errorf(codes.Unimplemented, "malformed method name")
}
return handler(ctx, req)
}
// Ensure this is the FIRST interceptor in your chain
s := grpc.NewServer(
grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor),
)
```
#### 2. Infrastructure-Level Normalization
If your gRPC server is behind a reverse proxy or load balancer (such as
Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to
enforce strict HTTP/2 compliance for pseudo-headers and reject or
normalize requests where the `:path` header does not start with a
leading slash.
#### 3. Policy Hardening
Switch to a "default deny" posture in your authorization policies
(explicitly listing all allowed paths and denying everything else) to
reduce the risk of bypasses via malformed inputs.
---
### Release Notes
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
###
[`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3 ):
Release 1.79.3
[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3 )
### Security
- server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted "deny"
rules in interceptors like `grpc/authz`. Any request with a
non-canonical path is now immediately rejected with an `Unimplemented`
error.
([#​8981](https://redirect.github.com/grpc/grpc-go/issues/8981 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-19 05:12:33 +00:00
pulumi-provider-automation[bot]
474e757992
Update GitHub Actions workflows. ( #799 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[4eeb9c0311bcea38a166c43eb897cf2a2f88ea4c](4eeb9c0311 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-03-18 06:01:10 +00:00
pulumi-renovate[bot]
23583bfdc8
Update module github.com/pulumi/pulumi-go-provider to v1.3.1 ( #798 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider )
| require | patch | `v1.3.0` -> `v1.3.1` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>
###
[`v1.3.1`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.1 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1 )
#### What's Changed
- Update module github.com/pulumi/pulumi/pkg/v3 to v3.226.0 by
[@​pulumi-renovate](https://redirect.github.com/pulumi-renovate )\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/487 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/487 )7
- Serialize Enum Names by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/488 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/488 )
- Allow annotating enums by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/489 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/489 )
**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.3.0...v1.3.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-17 15:59:50 +00:00
pulumi-renovate[bot]
c1ec48af0a
Update first-party Pulumi dependencies to v3.226.0 ( #796 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.225.1` ->
`3.226.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.225.1/3.226.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.225.1` -> `v3.226.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.226.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32260-2026-03-11 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0 )
##### Features
- \[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
[#​22179](https://redirect.github.com/pulumi/pulumi/pull/22179 )
- \[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
[#​22129](https://redirect.github.com/pulumi/pulumi/pull/22129 )
- \[engine] Engine will use provider references from `__self__`
arguments to calls
[#​22114](https://redirect.github.com/pulumi/pulumi/pull/22114 )
- \[sdk/bun] Support bun as a runtime
[#​22177](https://redirect.github.com/pulumi/pulumi/pull/22177 )
[#​22049](https://redirect.github.com/pulumi/pulumi/pull/22049 )
- \[sdk/bun] Add debugger support for the bun runtime
[#​22177](https://redirect.github.com/pulumi/pulumi/pull/22177 )
- \[sdk/bun] Add support for Bun as a plugin runtime
[#​22189](https://redirect.github.com/pulumi/pulumi/pull/22189 )
##### Bug Fixes
- \[engine] Fix ReplacementTrigger firing due to dependency changes
[#​22119](https://redirect.github.com/pulumi/pulumi/pull/22119 )
- \[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
[#​22120](https://redirect.github.com/pulumi/pulumi/pull/22120 )
- \[pcl] Support resource ranges in PCL
[#​22144](https://redirect.github.com/pulumi/pulumi/pull/22144 )
- \[cli/config] Include environments used when refreshing a stack's
config
[#​22103](https://redirect.github.com/pulumi/pulumi/pull/22103 )
- \[cli/display] Fix `pulumi destroy` not showing parent resource
hierarchy
[#​22148](https://redirect.github.com/pulumi/pulumi/pull/22148 )
- \[cli/package] Correctly parse package URLs with .git in them
[#​22174](https://redirect.github.com/pulumi/pulumi/pull/22174 )
- \[cli/plugin] Fix package get-schema for binary providers at relative
paths
[#​22107](https://redirect.github.com/pulumi/pulumi/pull/22107 )
- \[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing
[#​22140](https://redirect.github.com/pulumi/pulumi/pull/22140 )
- \[cli/state] Fix state move integrity errors when copied providers
depend on resources left in source stack
[#​22141](https://redirect.github.com/pulumi/pulumi/pull/22141 )
##### Miscellaneous
- \[cli/about] Show bun information in `pulumi about`
[#​22121](https://redirect.github.com/pulumi/pulumi/pull/22121 )
- \[programgen/go] Target go 1.25 for generated go.mod files (instead of
go 1.23)
[#​22070](https://redirect.github.com/pulumi/pulumi/pull/22070 )
- \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs
(instead of go 1.20)
[#​22131](https://redirect.github.com/pulumi/pulumi/pull/22131 )
- \[sdk/python] Read Poetry and uv lockfiles to determine program
dependencies
[#​22072](https://redirect.github.com/pulumi/pulumi/pull/22072 )
- \[sdk/python] Use importlib to find pulumi-plugin.json for installed
packages
[#​22127](https://redirect.github.com/pulumi/pulumi/pull/22127 )
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.226.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.226.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0 )
#### 3.226.0 (2026-03-11)
##### Features
- \[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
[#​22179](https://redirect.github.com/pulumi/pulumi/pull/22179 )
- \[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
[#​22129](https://redirect.github.com/pulumi/pulumi/pull/22129 )
- \[engine] Engine will use provider references from `__self__`
arguments to calls
[#​22114](https://redirect.github.com/pulumi/pulumi/pull/22114 )
- \[sdk/bun] Support bun as a runtime
[#​22177](https://redirect.github.com/pulumi/pulumi/pull/22177 )
[#​22049](https://redirect.github.com/pulumi/pulumi/pull/22049 )
- \[sdk/bun] Add debugger support for the bun runtime
[#​22177](https://redirect.github.com/pulumi/pulumi/pull/22177 )
- \[sdk/bun] Add support for Bun as a plugin runtime
[#​22189](https://redirect.github.com/pulumi/pulumi/pull/22189 )
##### Bug Fixes
- \[engine] Fix ReplacementTrigger firing due to dependency changes
[#​22119](https://redirect.github.com/pulumi/pulumi/pull/22119 )
- \[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
[#​22120](https://redirect.github.com/pulumi/pulumi/pull/22120 )
- \[pcl] Support resource ranges in PCL
[#​22144](https://redirect.github.com/pulumi/pulumi/pull/22144 )
- \[cli/config] Include environments used when refreshing a stack's
config
[#​22103](https://redirect.github.com/pulumi/pulumi/pull/22103 )
- \[cli/display] Fix `pulumi destroy` not showing parent resource
hierarchy
[#​22148](https://redirect.github.com/pulumi/pulumi/pull/22148 )
- \[cli/package] Correctly parse package URLs with .git in them
[#​22174](https://redirect.github.com/pulumi/pulumi/pull/22174 )
- \[cli/plugin] Fix package get-schema for binary providers at relative
paths
[#​22107](https://redirect.github.com/pulumi/pulumi/pull/22107 )
- \[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing
[#​22140](https://redirect.github.com/pulumi/pulumi/pull/22140 )
- \[cli/state] Fix state move integrity errors when copied providers
depend on resources left in source stack
[#​22141](https://redirect.github.com/pulumi/pulumi/pull/22141 )
##### Miscellaneous
- \[cli/about] Show bun information in `pulumi about`
[#​22121](https://redirect.github.com/pulumi/pulumi/pull/22121 )
- \[programgen/go] Target go 1.25 for generated go.mod files (instead of
go 1.23)
[#​22070](https://redirect.github.com/pulumi/pulumi/pull/22070 )
- \[sdkgen/go] Target go 1.25 for generated go.mod files for SDKs
(instead of go 1.20)
[#​22131](https://redirect.github.com/pulumi/pulumi/pull/22131 )
- \[sdk/python] Read Poetry and uv lockfiles to determine program
dependencies
[#​22072](https://redirect.github.com/pulumi/pulumi/pull/22072 )
- \[sdk/python] Use importlib to find pulumi-plugin.json for installed
packages
[#​22127](https://redirect.github.com/pulumi/pulumi/pull/22127 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-13 16:28:43 +00:00
pulumi-renovate[bot]
20b453c00b
Update module github.com/pulumi/esc to v0.23.0 ( #795 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc ) |
indirect | minor | `v0.22.0` -> `v0.23.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>
###
[`v0.23.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.23.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.22.0...v0.23.0 )
##### Improvements
- Add warning in CLI when using an ambiguous 2-part environment ref
[#​622](https://redirect.github.com/pulumi/esc/pull/622 )
- Add support for `fn::final` built-in function that marks values as
final and unable to be overwritten.
[#​621](https://redirect.github.com/pulumi/esc/pull/621 )
##### Bug Fixes
##### Breaking changes
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-12 20:38:53 +00:00
Pulumi Bot
f6b499a9d4
[rollout] Set up GH-AW and install shared PR review workflows ( #794 )
...
## Summary
This PR sets up GitHub Agentic Workflows (GH-AW) and installs shared PR
review workflows in `pulumi/pulumi-docker-build`.
### Commands Executed
- `gh-aw version` → `v0.56.2` (used as entrypoint)
- `gh-aw init` → ran (`.github/aw/` was not present)
- `gh-aw add
pulumi-labs/gh-aw-internal/.github/workflows/gh-aw-pr-review.md@main
--name docker-build-pr-review --force`
- `gh-aw add
pulumi-labs/gh-aw-internal/.github/workflows/gh-aw-pr-rereview.md@main
--name docker-build-pr-rereview --force`
- `gh-aw compile`
- `gh-aw validate`
### Configuration
| Property | Value |
|---|---|
| AW entrypoint | `gh-aw` (v0.56.2) |
| Target base branch | `main` |
| `prefix_stem` | `docker-build` |
| `gh-aw init` | Ran (was not previously initialized) |
### Changed Files
- `.gitattributes` — added `merge=ours` strategy for
`.github/workflows/*.lock.yml`
- `.github/agents/agentic-workflows.agent.md` — created by `gh-aw init`
- `.github/workflows/copilot-setup-steps.yml` — generated dependency
workflow
- `.github/workflows/docker-build-pr-review.md` — shared PR review
workflow source
- `.github/workflows/docker-build-pr-review.lock.yml` — compiled lock
file
- `.github/workflows/docker-build-pr-rereview.md` — shared PR re-review
workflow source
- `.github/workflows/docker-build-pr-rereview.lock.yml` — compiled lock
file
- `.github/workflows/shared/review.md` — imported shared workflow
- `.github/workflows/shared/plugins/code-review/code-review.md` —
imported shared plugin
### Validation Output
**compile:**
````
⚠ Compiled 2 workflow(s): 0 error(s), 2 warning(s)
```
**validate:**
```
⚠ Compiled 2 workflow(s): 0 error(s), 2 warning(s)
```
### Validation Warnings
Both workflows produced the same non-blocking warning:
```
warning: This workflow grants id-token: write permission
OIDC tokens can authenticate to cloud providers (AWS, Azure, GCP).
Ensure proper audience validation and trust policies are configured.
````
These warnings are expected for the shared review workflows which use
OIDC for cloud authentication and are non-blocking.
---
Rollout triggered by
[provider-ops#41](https://github.com/pulumi/provider-ops/issues/41 ).
> Generated by [Generic Rollout
Worker](https://github.com/pulumi/provider-ops/actions/runs/23014445857 )
·
[◷](https://github.com/search?q=repo%3Apulumi%2Fpulumi-docker-build+%22gh-aw-workflow-id%3A+gh-aw-workflow-rollout-worker%22&type=pullrequests )
<!-- gh-aw-agentic-workflow: Generic Rollout Worker, engine: claude, id:
23014445857, workflow_id: gh-aw-workflow-rollout-worker, run:
https://github.com/pulumi/provider-ops/actions/runs/23014445857 -->
<!-- gh-aw-workflow-id: gh-aw-workflow-rollout-worker -->
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-12 15:25:04 -04:00
pulumi-renovate[bot]
a8af1bfb5d
Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3.102.0 ( #792 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | minor | `v3.101.2` -> `v3.102.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.102.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31020---2026-03-11 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.101.2...v3.102.0 )
##### Improvements
- \[runtime] Support 'secret' in pcl config blocks
[#​897](https://redirect.github.com/pulumi/pulumi-dotnet/pull/897 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-12 04:43:00 +00:00
pulumi-renovate[bot]
158160e33c
Update module github.com/pulumi/pulumi-java/pkg to v1.21.3 ( #791 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java )
| require | patch | `v1.21.2` -> `v1.21.3` |
---
### Release Notes
<details>
<summary>pulumi/pulumi-java
(github.com/pulumi/pulumi-java/pkg)</summary>
###
[`v1.21.3`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1213---2026-03-11 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.2...v1.21.3 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-11 22:59:16 +00:00
pulumi-provider-automation[bot]
c7b308d64b
Update GitHub Actions workflows. ( #789 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[7dff4f888cb6e5bfa153146d3658d3e86ba74c6f](7dff4f888c ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-03-11 05:55:42 +00:00
Cam Soper
ac9653175b
Fix syntax for language chooser in documentation ( #771 )
...
@pose Fixes a bug in the doc that prevents completion of the build in
`pulumi/registry`.
2026-03-06 09:42:06 -08:00
pulumi-renovate[bot]
76a990fcb2
Update module github.com/pulumi/pulumi/pkg/v3 to v3.225.1 ( #788 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | patch | `v3.225.0` -> `v3.225.1` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.225.1`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.1 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.0...v3.225.1 )
#### 3.225.1 (2026-03-05)
##### Bug Fixes
- \[engine] Fix inheritence of default providers across resources of
different packages
[#​22101](https://redirect.github.com/pulumi/pulumi/pull/22101 )
- \[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
[#​21917](https://redirect.github.com/pulumi/pulumi/pull/21917 )
- \[programgen/go] Fix plain values not always being lifted to
input/output values when needed
[#​22084](https://redirect.github.com/pulumi/pulumi/pull/22084 )
- \[programgen/python] Fix generation of `entries` and `lookup` calls
[#​22086](https://redirect.github.com/pulumi/pulumi/pull/22086 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-06 08:17:59 +00:00
pulumi-provider-automation[bot]
aeb64dc959
Update GitHub Actions workflows. ( #787 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[46f89691d9162d78e8ac301d8b8746b1469b2338](46f89691d9 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-03-06 05:53:08 +00:00
pulumi-renovate[bot]
14fafe1ba2
Update dependency @pulumi/pulumi to v3.225.1 ( #786 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | patch | [`3.225.0` ->
`3.225.1`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.225.0/3.225.1 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.225.1`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.1 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.225.0...v3.225.1 )
#### 3.225.1 (2026-03-05)
##### Bug Fixes
- \[engine] Fix inheritence of default providers across resources of
different packages
[#​22101](https://redirect.github.com/pulumi/pulumi/pull/22101 )
- \[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
[#​21917](https://redirect.github.com/pulumi/pulumi/pull/21917 )
- \[programgen/go] Fix plain values not always being lifted to
input/output values when needed
[#​22084](https://redirect.github.com/pulumi/pulumi/pull/22084 )
- \[programgen/python] Fix generation of `entries` and `lookup` calls
[#​22086](https://redirect.github.com/pulumi/pulumi/pull/22086 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-03-05 23:39:57 +00:00
pulumi-renovate[bot]
38664fbc57
Update first-party Pulumi dependencies to v3.225.0 ( #784 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.224.0` ->
`3.225.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.224.0/3.225.0 )
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.224.0` -> `v3.225.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.225.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.225.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.224.0...v3.225.0 )
##### 3.225.0 (2026-03-04)
##### Features
- \[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
[#​21959](https://redirect.github.com/pulumi/pulumi/pull/21959 )
- \[engine] The engine now handles the inheritance of the `provider`
option in resource registrations
[#​21999](https://redirect.github.com/pulumi/pulumi/pull/21999 )
- \[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
[#​22041](https://redirect.github.com/pulumi/pulumi/pull/22041 )
- \[programgen] PCL can now express config values should be read as
secrets
[#​22066](https://redirect.github.com/pulumi/pulumi/pull/22066 )
- \[yaml] Update yaml to v1.30.0
- \[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
[#​21960](https://redirect.github.com/pulumi/pulumi/pull/21960 )
- \[cli/package] Support source-based packages in `pulumi schema check`,
not just schema files
[#​21897](https://redirect.github.com/pulumi/pulumi/pull/21897 )
##### Bug Fixes
- \[cli] Fix `stack import` panicking when importing a service stack
into a DIY backend
[#​22076](https://redirect.github.com/pulumi/pulumi/pull/22076 )
- \[engine] Fix panic when a new component resource in the program is
not targeted
[#​21957](https://redirect.github.com/pulumi/pulumi/pull/21957 )
- \[sdk/nodejs] Implement GetProgramDependencies for bun and pnpm
[#​22065](https://redirect.github.com/pulumi/pulumi/pull/22065 )
##### Miscellaneous
- \[cli] Build language plugins with the grpcnotrace tag to reduce the
binary size
[#​22012](https://redirect.github.com/pulumi/pulumi/pull/22012 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-03-05 12:51:45 +00:00
pulumi-renovate[bot]
8befdfed62
Update module github.com/pulumi/pulumi/pkg/v3 to v3.224.0 ( #780 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.223.0` -> `v3.224.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.224.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.224.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.223.0...v3.224.0 )
##### 3.224.0 (2026-02-26)
##### Features
- \[backend/diy] Add zstd compression option for DIY backend state files
[#​21877](https://redirect.github.com/pulumi/pulumi/pull/21877 )
- \[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
- \[cli/package] Support source-based packages in `pulumi schema check`,
not just schema files
[#​21897](https://redirect.github.com/pulumi/pulumi/pull/21897 )
##### Bug Fixes
- \[pkg] Correct the schema for "pulumi:pulumi:StackReference"
[#​21895](https://redirect.github.com/pulumi/pulumi/pull/21895 )
- \[programgen/nodejs] Correct the semantics of singleOrNone in
generated files
[#​21947](https://redirect.github.com/pulumi/pulumi/pull/21947 )
- \[sdk/python] Fix `StepEventMetadata.from_json` reading
`detailed_diff` (snake_case) instead of `detailedDiff` (camelCase), and
`PolicyEvent.from_json` reading `resource_urn` instead of `resourceUrn`,
causing both fields to always be `None`
[#​21714](https://redirect.github.com/pulumi/pulumi/pull/21714 )
- \[sdk/python] Convert integer component inputs to `int`
[#​21944](https://redirect.github.com/pulumi/pulumi/pull/21944 )
- \[sdk/python] Fix crash in forked processes using automation API
[#​21937](https://redirect.github.com/pulumi/pulumi/pull/21937 )
- \[engine] Fix panic when a new component resource in the program is
not targeted
[#​21957](https://redirect.github.com/pulumi/pulumi/pull/21957 )
##### Miscellaneous
- \[sdk] Update java, dotnet & yaml
[#​21961](https://redirect.github.com/pulumi/pulumi/pull/21961 )
- \[sdk/python] Improve the performance of `contains_unknowns` for large
objects
[#​21893](https://redirect.github.com/pulumi/pulumi/pull/21893 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-02-27 12:43:28 +00:00
pulumi-renovate[bot]
1e0f067064
Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] ( #776 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/cloudflare/circl](https://redirect.github.com/cloudflare/circl )
| indirect | patch | `v1.6.1` -> `v1.6.3` |
### GitHub Vulnerability Alerts
####
[CVE-2026-1229](https://redirect.github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x )
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1
curve) produces an incorrect value for specific inputs. The issue is
fixed by using complete addition formulas.
ECDH and ECDSA signing relying on this curve are not affected.
The bug was fixed in
**[v1.6.3](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3 )**.
---
### Release Notes
<details>
<summary>cloudflare/circl (github.com/cloudflare/circl)</summary>
###
[`v1.6.3`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3 ):
CIRCL v1.6.3
[Compare
Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.2...v1.6.3 )
##### CIRCL v1.6.3
Fix a bug on ecc/p384 scalar multiplication.
##### What's Changed
- sign/mldsa: Check opts for nil value by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/582 ](https://redirect.github.com/cloudflare/circl/pull/582 )
- ecc/p384: Point addition must handle point doubling case. by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/583 ](https://redirect.github.com/cloudflare/circl/pull/583 )
- Release CIRCL v1.6.3 by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/584 ](https://redirect.github.com/cloudflare/circl/pull/584 )
**Full Changelog**:
https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3
###
[`v1.6.2`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.2 ):
CIRCL v1.6.2
[Compare
Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.1...v1.6.2 )
##### CIRCL v1.6.2
- New SLH-DSA, improvements in ML-DSA for arm64.
- Tested compilation on WASM.
##### What's Changed
- Optimize pairing product computation by moving exponentiations to G1.
by [@​dfaranha](https://redirect.github.com/dfaranha ) in
[https://github.com/cloudflare/circl/pull/547 ](https://redirect.github.com/cloudflare/circl/pull/547 )
- sign: Adding SLH-DSA signature by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/512 ](https://redirect.github.com/cloudflare/circl/pull/512 )
- Update code generators to CIRCL v1.6.1. by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/548 ](https://redirect.github.com/cloudflare/circl/pull/548 )
- ML-DSA: Add preliminary Wycheproof test vectors by
[@​bwesterb](https://redirect.github.com/bwesterb ) in
[https://github.com/cloudflare/circl/pull/552 ](https://redirect.github.com/cloudflare/circl/pull/552 )
- go fmt by [@​bwesterb](https://redirect.github.com/bwesterb ) in
[https://github.com/cloudflare/circl/pull/554 ](https://redirect.github.com/cloudflare/circl/pull/554 )
- gz-compressing test vectors, use of HexBytes and ReadGzip functions.
by [@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/555 ](https://redirect.github.com/cloudflare/circl/pull/555 )
- group: Removes use of elliptic Marshal and Unmarshal functions. by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/556 ](https://redirect.github.com/cloudflare/circl/pull/556 )
- Support encoding/decoding ML-DSA private keys (as long as they contain
seeds) by [@​bwesterb](https://redirect.github.com/bwesterb ) in
[https://github.com/cloudflare/circl/pull/559 ](https://redirect.github.com/cloudflare/circl/pull/559 )
- Update to golangci-lint v2 by
[@​bwesterb](https://redirect.github.com/bwesterb ) in
[https://github.com/cloudflare/circl/pull/560 ](https://redirect.github.com/cloudflare/circl/pull/560 )
- Preparation for ARM64 Implementation of poly operations for dilithium
package. by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/562 ](https://redirect.github.com/cloudflare/circl/pull/562 )
- prepare power2Round for custom implementations in assembly by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/564 ](https://redirect.github.com/cloudflare/circl/pull/564 )
- ARM64 implementation for poly.PackLe16 by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/563 ](https://redirect.github.com/cloudflare/circl/pull/563 )
- add arm64 version of polyMulBy2toD by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/565 ](https://redirect.github.com/cloudflare/circl/pull/565 )
- add arm64 version of polySub by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/566 ](https://redirect.github.com/cloudflare/circl/pull/566 )
- group: add byteLen method for short groups and RandomScalar uses
rand.Int by [@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/568 ](https://redirect.github.com/cloudflare/circl/pull/568 )
- add arm64 version of poly.Add/Sub by
[@​elementrics](https://redirect.github.com/elementrics ) in
[https://github.com/cloudflare/circl/pull/572 ](https://redirect.github.com/cloudflare/circl/pull/572 )
- group: Adding cryptobyte marshaling to scalars by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/569 ](https://redirect.github.com/cloudflare/circl/pull/569 )
- Bumping up to Go1.25 by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/574 ](https://redirect.github.com/cloudflare/circl/pull/574 )
- ci: Including WASM compilation. by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/577 ](https://redirect.github.com/cloudflare/circl/pull/577 )
- Revert to using package-declared HPKE errors for shortkem instead of
standard library errors by
[@​harshiniwho](https://redirect.github.com/harshiniwho ) in
[https://github.com/cloudflare/circl/pull/578 ](https://redirect.github.com/cloudflare/circl/pull/578 )
- Release v1.6.2 by
[@​armfazh](https://redirect.github.com/armfazh ) in
[https://github.com/cloudflare/circl/pull/579 ](https://redirect.github.com/cloudflare/circl/pull/579 )
##### New Contributors
- [@​dfaranha](https://redirect.github.com/dfaranha ) made their
first contribution in
[https://github.com/cloudflare/circl/pull/547 ](https://redirect.github.com/cloudflare/circl/pull/547 )
- [@​elementrics](https://redirect.github.com/elementrics ) made
their first contribution in
[https://github.com/cloudflare/circl/pull/562 ](https://redirect.github.com/cloudflare/circl/pull/562 )
- [@​harshiniwho](https://redirect.github.com/harshiniwho ) made
their first contribution in
[https://github.com/cloudflare/circl/pull/578 ](https://redirect.github.com/cloudflare/circl/pull/578 )
**Full Changelog**:
https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-02-26 21:42:18 +00:00
pulumi-renovate[bot]
52f09191a7
Update first-party Pulumi dependencies ( #769 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.221.0` ->
`3.224.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.221.0/3.224.0 )
|
|
[github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild](https://redirect.github.com/pulumi/pulumi-docker-build )
| require | patch | `v0.0.12` -> `v0.0.15` |
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet )
| require | patch | `v3.101.0` -> `v3.101.2` |
|
[github.com/pulumi/pulumi-java/pkg](https://redirect.github.com/pulumi/pulumi-java )
| require | minor | `v1.16.0` -> `v1.21.2` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.220.0` -> `v3.223.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.224.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.224.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.223.0...v3.224.0 )
##### 3.224.0 (2026-02-26)
##### Features
- \[backend/diy] Add zstd compression option for DIY backend state files
[#​21877](https://redirect.github.com/pulumi/pulumi/pull/21877 )
- \[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
- \[cli/package] Support source-based packages in `pulumi schema check`,
not just schema files
[#​21897](https://redirect.github.com/pulumi/pulumi/pull/21897 )
##### Bug Fixes
- \[pkg] Correct the schema for "pulumi:pulumi:StackReference"
[#​21895](https://redirect.github.com/pulumi/pulumi/pull/21895 )
- \[programgen/nodejs] Correct the semantics of singleOrNone in
generated files
[#​21947](https://redirect.github.com/pulumi/pulumi/pull/21947 )
- \[sdk/python] Fix `StepEventMetadata.from_json` reading
`detailed_diff` (snake_case) instead of `detailedDiff` (camelCase), and
`PolicyEvent.from_json` reading `resource_urn` instead of `resourceUrn`,
causing both fields to always be `None`
[#​21714](https://redirect.github.com/pulumi/pulumi/pull/21714 )
- \[sdk/python] Convert integer component inputs to `int`
[#​21944](https://redirect.github.com/pulumi/pulumi/pull/21944 )
- \[sdk/python] Fix crash in forked processes using automation API
[#​21937](https://redirect.github.com/pulumi/pulumi/pull/21937 )
- \[engine] Fix panic when a new component resource in the program is
not targeted
[#​21957](https://redirect.github.com/pulumi/pulumi/pull/21957 )
##### Miscellaneous
- \[sdk] Update java, dotnet & yaml
[#​21961](https://redirect.github.com/pulumi/pulumi/pull/21961 )
- \[sdk/python] Improve the performance of `contains_unknowns` for large
objects
[#​21893](https://redirect.github.com/pulumi/pulumi/pull/21893 )
###
[`v3.223.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32230-2026-02-19 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.222.0...v3.223.0 )
##### Bug Fixes
- \[engine] Report policy pack installation errors
[#​21882](https://redirect.github.com/pulumi/pulumi/pull/21882 )
###
[`v3.222.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32220-2026-02-18 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.221.0...v3.222.0 )
##### Features
- \[programgen/go] Generate Call requests
[#​21836](https://redirect.github.com/pulumi/pulumi/pull/21836 )
##### Bug Fixes
- \[sdk/{nodejs,python}] Fix hang when loading policy packs that use
v1.18.1 or older of the policy SDK
[#​21866](https://redirect.github.com/pulumi/pulumi/pull/21866 )
</details>
<details>
<summary>pulumi/pulumi-docker-build
(github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild)</summary>
###
[`v0.0.15`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.14...v0.0.15 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.14...v0.0.15 )
###
[`v0.0.14`](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.13...v0.0.14 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.13...v0.0.14 )
###
[`v0.0.13`](https://redirect.github.com/pulumi/pulumi-docker-build/releases/tag/v0.0.13 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-build/compare/v0.0.12...v0.0.13 )
#### What's Changed
- Improve exec error messages by
[@​blampe](https://redirect.github.com/blampe ) in
[https://github.com/pulumi/pulumi-docker-build/pull/553 ](https://redirect.github.com/pulumi/pulumi-docker-build/pull/553 )
- Update p-go-provider to fix version replacement behavior by
[@​blampe](https://redirect.github.com/blampe ) in
[https://github.com/pulumi/pulumi-docker-build/pull/584 ](https://redirect.github.com/pulumi/pulumi-docker-build/pull/584 )
**Full Changelog**:
https://github.com/pulumi/pulumi-docker-build/compare/v0.0.12...v0.0.13
</details>
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.101.2`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31012---2026-02-25 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.101.0...v3.101.2 )
</details>
<details>
<summary>pulumi/pulumi-java
(github.com/pulumi/pulumi-java/pkg)</summary>
###
[`v1.21.2`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1212---2026-02-25 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.1...v1.21.2 )
###
[`v1.21.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1211---2026-02-25 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.21.0...v1.21.1 )
##### Bug Fixes
- \[runtime] Fix `unknown provider package` error in automation API and
correctly propagate errors from inline programs.
[#​2029](https://redirect.github.com/pulumi/pulumi-java/pull/2029 )
###
[`v1.21.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1210---2026-01-28 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.20.0...v1.21.0 )
##### Improvements
- \[sdk] Add Deployment.requirePulumiVersion
[#​1979](https://redirect.github.com/pulumi/pulumi-java/pull/1979 )
- \[codegen] Implement alias resource options generation
[#​1982](https://redirect.github.com/pulumi/pulumi-java/pull/1982 )
##### Bug Fixes
- \[codegen] Use config.require in codegen when there is no default
value
[#​1983](https://redirect.github.com/pulumi/pulumi-java/pull/1983 )
###
[`v1.20.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#vv1200---2025-12-29 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.19.0...v1.20.0 )
##### Improvements
- \[sdk] Add support for the `replacementTrigger` resource option
[#​1958](https://redirect.github.com/pulumi/pulumi-java/pull/1958 )
###
[`v1.19.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1190---2025-12-10 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.18.0...v1.19.0 )
##### Improvements
- \[codegen] Add .gitattributes file to generated SDKs
[#​1949](https://redirect.github.com/pulumi/pulumi-java/pull/1949 )
##### Bug Fixes
- \[language] Stop parsing runtime options at startup
[#​1947](https://redirect.github.com/pulumi/pulumi-java/pull/1947 )
###
[`v1.18.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1180---2025-12-03 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.17.1...v1.18.0 )
##### Improvements
- \[sdk] Add `ReplaceWith` as a resource option
###
[`v1.17.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1171---2025-11-26 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.17.0...v1.17.1 )
##### Improvements
- \[sdk] Dependency bumps
###
[`v1.17.0`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1170---2025-11-12 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.3...v1.17.0 )
##### Improvements
- \[sdk] Get the event log in the automation API over gRPC, instead of
through a text file
###
[`v1.16.3`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1163---2025-11-05 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.2...v1.16.3 )
##### Improvements
- \[sdk] Update pulumi pkg & sdk to 3.205.0
- \[runtime] Implement `Language.Link`
###
[`v1.16.2`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1162---2025-10-10 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.1...v1.16.2 )
##### Bug Fixes
- \[sdk] Add `hideDiffs` as a new resource option. See details
###
[`v1.16.1`](https://redirect.github.com/pulumi/pulumi-java/blob/HEAD/CHANGELOG.md#v1161---2025-07-31 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-java/compare/v1.16.0...v1.16.1 )
##### Bug Fixes
- \[codegen] Fix generated 'plan' argument of 'preview' command
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-02-26 21:24:50 +00:00
pulumi-provider-automation[bot]
7a9b31c60f
Update GitHub Actions workflows. ( #777 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[599b3ade95c3408830d062a38ea7cf9c8607a12f](599b3ade95 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-26 06:00:24 +00:00
Pulumi Bot
e5da099be4
Upgrade to golangci-lint v2 ( #775 )
...
Upgrades golangci-lint from v1 to v2. Automated by Linear issue IT-144.
Co-authored-by: CI <ci@pulumi.com >
2026-02-25 12:40:02 -08:00
pulumi-provider-automation[bot]
1b95d18edc
Update GitHub Actions workflows. ( #773 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[b8b29dc51d452160accc76a310efd6eb38760b50](b8b29dc51d ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-24 06:01:23 +00:00
pulumi-provider-automation[bot]
5eabae0608
Update GitHub Actions workflows. ( #772 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[f591fbcab3c096e497ab858d7155b31b12495ed1](f591fbcab3 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-20 05:57:28 +00:00
pulumi-provider-automation[bot]
583183d5e6
Update GitHub Actions workflows. ( #768 )
...
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[cf7cafe004bfe263736eb8a33fbeead26cc57b58](cf7cafe004 ).
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-18 06:02:18 +00:00
pulumi-renovate[bot]
a30d557dc3
Update dependency @pulumi/pulumi to v3.221.0 ( #767 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.220.0` ->
`3.221.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.220.0/3.221.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.221.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.221.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.220.0...v3.221.0 )
#### 3.221.0 (2026-02-17)
##### Features
- \[auto] Support Go 1.26
[#​21835](https://redirect.github.com/pulumi/pulumi/pull/21835 )
- \[engine] BREAKING: Rename `pulumiVersionRange` to
`requiredPulumiVersion` in `PulumiPlugin.yaml`
[#​21807](https://redirect.github.com/pulumi/pulumi/pull/21807 )
- \[cli/plugin] Reduce GitHub API usage when downloading plugins
[#​21774](https://redirect.github.com/pulumi/pulumi/pull/21774 )
- \[protobuf] Add loader_target to RunPluginRequest
[#​21763](https://redirect.github.com/pulumi/pulumi/pull/21763 )
- \[sdk/nodejs] Support enums when inferring schemas from components
[#​21787](https://redirect.github.com/pulumi/pulumi/pull/21787 )
- \[sdk/nodejs] Support the Partial<T> utility type in component schema
inference
[#​21802](https://redirect.github.com/pulumi/pulumi/pull/21802 )
- \[sdk/nodejs] Support the Required<T> utility type in component schema
inference
[#​21803](https://redirect.github.com/pulumi/pulumi/pull/21803 )
##### Bug Fixes
- \[cli] Make stack graph output deterministic
[#​21786](https://redirect.github.com/pulumi/pulumi/pull/21786 )
- \[engine] Fix snapshot integrity error in `refresh --run-program` with
component resources
[#​21806](https://redirect.github.com/pulumi/pulumi/pull/21806 )
- \[engine] Fix race in refresh --run-program
[#​21815](https://redirect.github.com/pulumi/pulumi/pull/21815 )
- \[programgen/go] Correctly handle import paths for nested modules
[#​21812](https://redirect.github.com/pulumi/pulumi/pull/21812 )
- \[sdkgen] Support type references to parameterized and third-party
packages
[#​21804](https://redirect.github.com/pulumi/pulumi/pull/21804 )
- \[sdkgen/go] Do not depend on pulumix against instructions for enums
[#​21818](https://redirect.github.com/pulumi/pulumi/pull/21818 )
- \[cli/{install,package}] Don't panic when a non-absolute path is
passed to `pulumi package get-schema` where the PulumiPlugin.yaml has a
packages section
[#​21794](https://redirect.github.com/pulumi/pulumi/pull/21794 )
- \[cli/{install,package}] Only link a Pulumi project once
[#​21788](https://redirect.github.com/pulumi/pulumi/pull/21788 )
- \[cli/{install,package}] Run in the correct location when using `uv`
to link python packages
[#​21796](https://redirect.github.com/pulumi/pulumi/pull/21796 )
- \[cli/package] Allow underscores in the path of plugin URLs
[#​21778](https://redirect.github.com/pulumi/pulumi/pull/21778 )
- \[sdk/{nodejs,python}] Use new policy plugin support to run policy
packs
[#​21684](https://redirect.github.com/pulumi/pulumi/pull/21684 )
- \[sdk/python] Surface errors from uv, poetry or pip during linking
[#​21770](https://redirect.github.com/pulumi/pulumi/pull/21770 )
- \[sdk/python] Always surface errors from uv, poetry or pip during
dependency installation
[#​21814](https://redirect.github.com/pulumi/pulumi/pull/21814 )
- \[sdkgen/python] Add missing blank line before :param lists
[#​21789](https://redirect.github.com/pulumi/pulumi/pull/21789 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-02-18 01:31:26 +00:00
Bryce Lampe
710f5d816b
Remove unnecessary envOverride ( #766 )
...
Our DockerHub password is in ESC, and a bunch of the other variables
were copy-pasted defaults. We need to keep GCP because that isn't in
ESC yet.
Refs https://github.com/pulumi/ci-mgmt/issues/1583 .
2026-02-13 15:57:47 -08:00
pulumi-provider-automation[bot]
6aa0b4dde7
Update GitHub Actions workflows. ( #765 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit ee5e1047ced9aa4de854f25974720cb5d4243799.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-13 06:04:28 +00:00
Alberto Pose
13a14388f2
Fix workflow failure by ensuring bin directory exists ( #762 )
...
# **Note: This is a temporary fix until we get this to `ci-mgmt`**
## Summary
Fixes the GoReleaser workflow failure that started on Feb 6, 2026.
## Root Cause
Commit 491f7de deleted `bin/pulumi-language-python-exec`, which was the
last file in the `bin/` directory. Since Git doesn't track empty
directories, the `bin/` directory disappeared from the repository.
When GoReleaser runs the post-build hook `make
sign-goreleaser-exe-amd64`, it attempts to download `jsign-6.0.jar` to
`bin/jsign-6.0.jar`, but fails with:
```
bin/jsign-6.0.jar: No such file or directory
make: *** [Makefile:260: bin/jsign-6.0.jar] Error 1
```
## Changes
Added `@mkdir -p bin` to Makefile targets that write to the `bin/`
directory:
- `bin/jsign-6.0.jar` target (line 260) - **Critical fix**
- `bin/pulumi-gen-${PACK}` target (line 185) - Defensive fix
This ensures the directory exists before attempting to create files in
it.
Fixes #756
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-02-11 15:31:19 +00:00
pulumi-renovate[bot]
13acd934b6
Update first-party Pulumi dependencies ( #760 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc ) |
indirect | minor | `v0.21.0` -> `v0.22.0` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi )
| require | minor | `v3.219.0` -> `v3.220.0` |
---
### Release Notes
<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>
###
[`v0.22.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.22.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.21.0...v0.22.0 )
##### Improvements
##### Bug Fixes
##### Breaking changes
</details>
<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>
###
[`v3.220.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.220.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0 )
##### 3.220.0 (2026-02-10)
##### Features
- \[cli] Show environment variables that were set if a snapshot
integrity error happens
[#​21709](https://redirect.github.com/pulumi/pulumi/pull/21709 )
- \[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names
- \[engine] Pass replacement trigger through to Construct
[#​21408](https://redirect.github.com/pulumi/pulumi/pull/21408 )
- \[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
[#​21572](https://redirect.github.com/pulumi/pulumi/pull/21572 )
- \[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
[#​21720](https://redirect.github.com/pulumi/pulumi/pull/21720 )
##### Bug Fixes
- \[cli] Retry `yarn install` when it fails (e.g. during `pulumi
install`)
[#​21707](https://redirect.github.com/pulumi/pulumi/pull/21707 )
- \[engine] Deal with errors in elided journal entries correctly
[#​21576](https://redirect.github.com/pulumi/pulumi/pull/21576 )
- \[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS
- \[sdk/python] Fix `_LazyModule` to not trigger full module load for
introspection attributes
[#​21620](https://redirect.github.com/pulumi/pulumi/pull/21620 )
- \[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
[#​21722](https://redirect.github.com/pulumi/pulumi/pull/21722 )
##### Miscellaneous
- \[cli] Write logfile location if verbosity is >= 1 to stderr instead
of stdout
[#​21663](https://redirect.github.com/pulumi/pulumi/pull/21663 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
Co-authored-by: Ian Wahbe <me@iwahbe.com >
2026-02-11 10:27:46 +00:00
pulumi-provider-automation[bot]
8cb8d21332
Update GitHub Actions workflows. ( #761 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit f34bb277a6b5001ebd945cebced51ef890cdb7b9.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-11 06:04:08 +00:00
pulumi-renovate[bot]
c11144e1b3
Update dependency @pulumi/pulumi to v3.220.0 ( #759 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.219.0` ->
`3.220.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.219.0/3.220.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.220.0`](https://redirect.github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-02-10 17:51:07 +00:00
pulumi-renovate[bot]
ca8a59a077
Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] ( #758 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git )
| indirect | patch | `v5.16.0` -> `v5.16.5` |
### GitHub Vulnerability Alerts
####
[CVE-2026-25934](https://redirect.github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3 )
### Impact
A vulnerability was discovered in `go-git` whereby data integrity values
for `.pack` and `.idx` files were not properly verified. This resulted
in `go-git` potentially consuming corrupted files, which would likely
result in unexpected errors such as `object not found`.
For context, clients fetch
[`packfiles`](https://git-scm.com/docs/pack-protocol#_packfile_data )
from upstream Git servers. Those files contain a checksum of their
contents, so that clients can perform integrity checks before consuming
it. The pack indexes (`.idx`) are
[generated](https://git-scm.com/docs/pack-format ) locally by `go-git`,
or the `git` cli, when new `.pack` files are received and processed. The
integrity checks for both files were not being verified correctly.
Note that the lack of verification of the packfile checksum has no
impact on the trust relationship between the client and server, which is
enforced based on the protocol being used (e.g. TLS in the case of
`https://` or known hosts for `ssh://`). In other words, the packfile
checksum verification does not provide any security benefits when
connecting to a malicious or compromised Git server.
### Patches
Users should upgrade to `v5.16.5`, or the latest `v6`
[pseudo-version](https://go.dev/ref/mod#pseudo-versions ), in order to
mitigate this vulnerability.
### Workarounds
In case updating to a fixed version of `go-git` is not possible, users
can run [git fsck](https://git-scm.com/docs/git-fsck ) from the `git` cli
to check for data corruption on a given repository.
### Credit
Thanks @​N0zoM1z0 for finding and reporting this issue privately
to the `go-git` project.
---
### Release Notes
<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>
###
[`v5.16.5`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.5 )
[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.4...v5.16.5 )
##### What's Changed
- build: Update module golang.org/x/crypto to v0.45.0 \[SECURITY]
(releases/v5.x) by
[@​go-git-renovate](https://redirect.github.com/go-git-renovate )\[bot]
in[https://github.com/go-git/go-git/pull/1744 ](https://redirect.github.com/go-git/go-git/pull/1744 )4
- build: Bump Go test versions to 1.23-1.25 (v5) by
[@​pjbgf](https://redirect.github.com/pjbgf ) in
[https://github.com/go-git/go-git/pull/1746 ](https://redirect.github.com/go-git/go-git/pull/1746 )
- \[v5] git: worktree, Don't delete local untracked files when resetting
worktree by [@​Ch00k](https://redirect.github.com/Ch00k ) in
[https://github.com/go-git/go-git/pull/1800 ](https://redirect.github.com/go-git/go-git/pull/1800 )
- Expand packfile checks by
[@​pjbgf](https://redirect.github.com/pjbgf ) in
[https://github.com/go-git/go-git/pull/1836 ](https://redirect.github.com/go-git/go-git/pull/1836 )
**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5
###
[`v5.16.4`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.4 )
[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.3...v5.16.4 )
##### What's Changed
- backport plumbing: format/idxfile, prevent panic by
[@​swills](https://redirect.github.com/swills ) in
[https://github.com/go-git/go-git/pull/1732 ](https://redirect.github.com/go-git/go-git/pull/1732 )
- \[backport] build: test, Fix build on Windows. by
[@​pjbgf](https://redirect.github.com/pjbgf ) in
[https://github.com/go-git/go-git/pull/1734 ](https://redirect.github.com/go-git/go-git/pull/1734 )
- build: Update module golang.org/x/net to v0.38.0 \[SECURITY]
(releases/v5.x) by
[@​go-git-renovate](https://redirect.github.com/go-git-renovate )\[bot]
in[https://github.com/go-git/go-git/pull/1742 ](https://redirect.github.com/go-git/go-git/pull/1742 )2
- build: Update module github.com/cloudflare/circl to v1.6.1 \[SECURITY]
(releases/v5.x) by
[@​go-git-renovate](https://redirect.github.com/go-git-renovate )\[bot]
in[https://github.com/go-git/go-git/pull/1741 ](https://redirect.github.com/go-git/go-git/pull/1741 )1
- build: Update module github.com/go-git/go-git/v5 to v5.13.0
\[SECURITY] (releases/v5.x) by
[@​go-git-renovate](https://redirect.github.com/go-git-renovate )\[bot]
in[https://github.com/go-git/go-git/pull/1743 ](https://redirect.github.com/go-git/go-git/pull/1743 )3
**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4
###
[`v5.16.3`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.3 )
[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.2...v5.16.3 )
##### What's Changed
- internal: Expand regex to fix build \[5.x] by
[@​baloo](https://redirect.github.com/baloo ) in
[https://github.com/go-git/go-git/pull/1644 ](https://redirect.github.com/go-git/go-git/pull/1644 )
- build: raise timeouts for windows CI tests and disable CIFuzz \[5.x]
by [@​baloo](https://redirect.github.com/baloo ) in
[https://github.com/go-git/go-git/pull/1646 ](https://redirect.github.com/go-git/go-git/pull/1646 )
- plumbing: support commits extra headers, support jujutsu signed commit
\[5.x] by [@​baloo](https://redirect.github.com/baloo ) in
[https://github.com/go-git/go-git/pull/1633 ](https://redirect.github.com/go-git/go-git/pull/1633 )
**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3
###
[`v5.16.2`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.2 )
[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.1...v5.16.2 )
##### What's Changed
- utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to
releases/v5.x by [@​kane8n](https://redirect.github.com/kane8n ) in
[https://github.com/go-git/go-git/pull/1567 ](https://redirect.github.com/go-git/go-git/pull/1567 )
**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2
###
[`v5.16.1`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.1 )
[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.0...v5.16.1 )
##### What's Changed
- utils: merkletrie, Fix diff on sparse-checkout index. Fixes
[#​1406](https://redirect.github.com/go-git/go-git/issues/1406 ) to
releases/v5.x by [@​kane8n](https://redirect.github.com/kane8n ) in
[https://github.com/go-git/go-git/pull/1561 ](https://redirect.github.com/go-git/go-git/pull/1561 )
##### New Contributors
- [@​kane8n](https://redirect.github.com/kane8n ) made their first
contribution in
[https://github.com/go-git/go-git/pull/1561 ](https://redirect.github.com/go-git/go-git/pull/1561 )
**Full Changelog**:
https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2026-02-10 00:50:46 +00:00
Bryce Lampe
5b05d733ea
Fix lint issues ( #755 )
...
Lint fixes in preparation of
https://github.com/pulumi/ci-mgmt/pull/2024 .
2026-02-06 22:08:57 +00:00
pulumi-renovate[bot]
e9f6bbf15d
Update first-party Pulumi dependencies ( #717 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.212.0` ->
`3.219.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.212.0/3.219.0 )
|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc ) |
indirect | minor | `v0.20.0` -> `v0.21.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.219.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32190-2026-02-05 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.218.0...v3.219.0 )
##### Features
- \[cli] Allow setting `requiredPulumiVersion` in Pulumi.yaml
[#​21627](https://redirect.github.com/pulumi/pulumi/pull/21627 )
- \[cli/{install,package}] Allow using private packages as local
dependencies in components
[#​21664](https://redirect.github.com/pulumi/pulumi/pull/21664 )
- \[cli/policy] Add `pulumi policy install` command
[#​21652](https://redirect.github.com/pulumi/pulumi/pull/21652 )
- \[engine] Run analyzer calls in parallel
[#​21631](https://redirect.github.com/pulumi/pulumi/pull/21631 )
- \[programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
[#​21621](https://redirect.github.com/pulumi/pulumi/pull/21621 )
- \[sdk/python] Add support for the `OnError` resource hook
[#​21644](https://redirect.github.com/pulumi/pulumi/pull/21644 )
- \[sdk/python] Add support for protobuf 6
[#​21647](https://redirect.github.com/pulumi/pulumi/pull/21647 )
##### Bug Fixes
- \[cli] Allow positional arguments to be passed to `convert` again
[#​21604](https://redirect.github.com/pulumi/pulumi/pull/21604 )
[#​21614](https://redirect.github.com/pulumi/pulumi/pull/21614 )
- \[engine] Download/install required policy packs in parallel with
plugins
[#​21651](https://redirect.github.com/pulumi/pulumi/pull/21651 )
- \[cli/package] Correctly install packages that depend on other
packages for `pulumi package add` and `pulumi package get-schema`.
[#​21321](https://redirect.github.com/pulumi/pulumi/pull/21321 )
- \[programgen/python] Fix panic when ranging over a resource output
that is an array of objects
[#​21679](https://redirect.github.com/pulumi/pulumi/pull/21679 )
- \[sdk/python] Fix issue with generic subclasses of `dynamic.Resource`
[#​21670](https://redirect.github.com/pulumi/pulumi/pull/21670 )
##### Miscellaneous
- \[sdk/python] Relax pip version constraint
[#​21639](https://redirect.github.com/pulumi/pulumi/pull/21639 )
###
[`v3.218.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32180-2026-01-29 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.217.1...v3.218.0 )
##### Features
- \[sdk/nodejs] Add support for the `OnError` resource hook
##### Bug Fixes
- \[cli] Allow positional arguments to be passed to `convert` again
- \[cli/install] Correctly include git forge organizations as schema
namespaces when generating SDKs
[#​21579](https://redirect.github.com/pulumi/pulumi/pull/21579 )
- \[cli/{install,package}] Correctly grab package names for Python &
NodeJS
[#​21577](https://redirect.github.com/pulumi/pulumi/pull/21577 )
###
[`v3.217.1`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32171-2026-01-27 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1 )
##### Features
- \[sdk/go] Add support for the `OnError` resource hook
[#​21515](https://redirect.github.com/pulumi/pulumi/pull/21515 )
##### Bug Fixes
- \[cli/install] Copy files when linking to be robust to copying across
file partitions
[#​21549](https://redirect.github.com/pulumi/pulumi/pull/21549 )
- \[cli/install] Do not double install plugins with explicit
parameterizations
[#​21548](https://redirect.github.com/pulumi/pulumi/pull/21548 )
- \[cli/install] Copy files when linking instead of renaming
[#​21549](https://redirect.github.com/pulumi/pulumi/pull/21549 )
**Full Changelog**:
https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1
###
[`v3.217.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32170-2026-01-23 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.216.0...v3.217.0 )
##### Features
- \[cli] Extract organization, team, and user from OIDC JWT claims
during login
[#​21462](https://redirect.github.com/pulumi/pulumi/pull/21462 )
- \[engine] Add the `OnError` resource hook to allow for custom retry
policies
[#​21291](https://redirect.github.com/pulumi/pulumi/pull/21291 )
- \[cli/engine] Add --plan up flag
[#​21368](https://redirect.github.com/pulumi/pulumi/pull/21368 )
- \[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
[#​21528](https://redirect.github.com/pulumi/pulumi/pull/21528 )
[#​21478](https://redirect.github.com/pulumi/pulumi/pull/21478 )
- \[sdk/python] Add require_pulumi_version to the Python SDK
[#​21528](https://redirect.github.com/pulumi/pulumi/pull/21528 )
[#​21430](https://redirect.github.com/pulumi/pulumi/pull/21430 )
- \[sdk/go] Add CheckPulumiVersion to the Go SDK
[#​21528](https://redirect.github.com/pulumi/pulumi/pull/21528 )
[#​21514](https://redirect.github.com/pulumi/pulumi/pull/21514 )
##### Bug Fixes
- \[auto/python] Implement `About` in Python automation API server
[#​21479](https://redirect.github.com/pulumi/pulumi/pull/21479 )
- \[engine] When importing a state file that refers to the service
backed secret manager, make `stack import` reconfigure it for the target
stack if required
[#​20966](https://redirect.github.com/pulumi/pulumi/pull/20966 )
- \[protobuf] Fix alias options being passed to Construct for remote
components
[#​21050](https://redirect.github.com/pulumi/pulumi/pull/21050 )
- \[sdk/nodejs] Fix issue with serialized async generators
[#​21484](https://redirect.github.com/pulumi/pulumi/pull/21484 )
###
[`v3.216.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32160-2026-01-16 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.215.0...v3.216.0 )
##### Features
- \[build] Don't set PULUMI_ROOT with mise
[#​21457](https://redirect.github.com/pulumi/pulumi/pull/21457 )
- \[cli] Default to Pulumi Cloud when using an OIDC token for login
[#​21322](https://redirect.github.com/pulumi/pulumi/pull/21322 )
- \[engine] Add CheckPulumiVersion RPC to the engine
[#​21429](https://redirect.github.com/pulumi/pulumi/pull/21429 )
- \[protobuf] Remove ProviderHandshakeResponse.pulumi_version_range
[#​21438](https://redirect.github.com/pulumi/pulumi/pull/21438 )
- \[sdk/nodejs] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
[#​21315](https://redirect.github.com/pulumi/pulumi/pull/21315 )
- \[sdk/nodejs] Add support for serializing async generators
[#​21410](https://redirect.github.com/pulumi/pulumi/pull/21410 )
- \[sdk/python] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
[#​21315](https://redirect.github.com/pulumi/pulumi/pull/21315 )
##### Bug Fixes
- \[engine] Optimize StackReference performance
[#​21446](https://redirect.github.com/pulumi/pulumi/pull/21446 )
- \[cli/display] Fix message renderer on windows
[#​21401](https://redirect.github.com/pulumi/pulumi/pull/21401 )
- \[sdk/nodejs] Fix RangeError in defaultErrorMessage when error objects
are large
[#​21409](https://redirect.github.com/pulumi/pulumi/pull/21409 )
##### Miscellaneous
- \[sdk/dotnet] Update dotnet to v3.97.0
###
[`v3.215.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32150-2026-01-07 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.214.1...v3.215.0 )
##### Features
- \[cli/plugin] Allow plugins to specify a supported version range for
the CLI
[#​21335](https://redirect.github.com/pulumi/pulumi/pull/21335 )
##### Bug Fixes
- \[cli] Filter internal properties like \__defaults from diff display
[#​21359](https://redirect.github.com/pulumi/pulumi/pull/21359 )
- \[cli/config] Make `config set --type bool` accept different spellings
of boolean values instead of only lowercase "true"
[#​21314](https://redirect.github.com/pulumi/pulumi/pull/21314 )
- \[sdk/python] Fix import_resources with converter failing due to
--stack argument placement
[#​21373](https://redirect.github.com/pulumi/pulumi/pull/21373 )
##### Miscellaneous
- \[cli] Update pulumi-dotnet to 3.96.1
- \[cli/package] Remove superfluous version string
[#​21351](https://redirect.github.com/pulumi/pulumi/pull/21351 )
###
[`v3.214.1`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32141-2026-01-03 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.214.0...v3.214.1 )
##### Bug Fixes
- \[cli/package] Preserve existing behavior when `pulumi package add` is
used with a local provider
[#​21350](https://redirect.github.com/pulumi/pulumi/pull/21350 )
- \[pkg] Create namespace aliases to avoid Pulumi namespace collisions
during codegen
[#​21325](https://redirect.github.com/pulumi/pulumi/pull/21325 )
###
[`v3.214.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32140-2025-12-30 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.213.0...v3.214.0 )
##### Features
- \[cli] Add --config and --config-path options to destroy and refresh
[#​21299](https://redirect.github.com/pulumi/pulumi/pull/21299 )
- \[sdkgen] Add `OutputStyleOnly` flag to functions to not emit their
plain variants
[#​21198](https://redirect.github.com/pulumi/pulumi/pull/21198 )
- \[sdk/python] Add support for `replacement_trigger` in the Python SDK
[#​20940](https://redirect.github.com/pulumi/pulumi/pull/20940 )
##### Bug Fixes
- \[engine] Pass ignoreChanges when issuing no-diff updates that resolve
initErrors
[#​21319](https://redirect.github.com/pulumi/pulumi/pull/21319 )
- \[programgen] Fix a bug in programgen binding to invokes from
parameterized packages
[#​21284](https://redirect.github.com/pulumi/pulumi/pull/21284 )
- \[cli/plugin] Fix plugin download URL overrides for fallback mechanism
[#​21095](https://redirect.github.com/pulumi/pulumi/pull/21095 )
##### Miscellaneous
- \[pkg] Upgrade pulumi-java to 1.20.0
###
[`v3.213.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32130-2025-12-17 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.212.0...v3.213.0 )
##### Bug Fixes
- \[sdkgen/go] Generate three-level nested builtin output types for Go
SDK
[#​21248](https://redirect.github.com/pulumi/pulumi/pull/21248 )
##### Miscellaneous
- \[pkg] Move plugin downloading from pkg into sdk
[#​21220](https://redirect.github.com/pulumi/pulumi/pull/21220 )
</details>
<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>
###
[`v0.21.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.21.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.20.0...v0.21.0 )
##### Improvements
- Added support for `fn::split` built-in function to split strings into
arrays.
[#​281](https://redirect.github.com/pulumi/esc/issues/281 )
- Add native support for OIDC token exchange when logging into Pulumi
Cloud. Run `esc login --help` for more
information.
[#​607](https://redirect.github.com/pulumi/esc/pull/607 )
##### Bug Fixes
##### Breaking changes
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-02-06 21:06:05 +00:00
pulumi-renovate[bot]
491f7de7d5
Update module github.com/pulumi/pulumi-go-provider to v1.3.0 ( #748 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider )
| require | minor | `v1.1.2` -> `v1.3.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>
###
[`v1.3.0`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.2.0...v1.3.0 )
#### What's Changed
- Don't set a default value for `"displayName"` or `"namespace`" by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/452 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/452 )
- Update module github.com/pulumi/pulumi/pkg/v3 to v3.217.0 by
[@​pulumi-renovate](https://redirect.github.com/pulumi-renovate )\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/464 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/464 )4
#### New Contributors
-
[@​pulumi-renovate](https://redirect.github.com/pulumi-renovate )\[bot]
made their first contribution
in[https://github.com/pulumi/pulumi-go-provider/pull/427 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/427 )7
- [@​Frassle](https://redirect.github.com/Frassle ) made their
first contribution in
[https://github.com/pulumi/pulumi-go-provider/pull/455 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/455 )
**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.2.0...v1.3.0
###
[`v1.2.0`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.2.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.1.2...v1.2.0 )
#### What's Changed
- Add old inputs to the rpc passthrough (and the provider in general) by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/414 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/414 )
- Debug middleware/rpc by printing what the wrapped provider sees by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/415 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/415 )
- `rpc.Provider` correctly handles wrapping providers without preview
support by [@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/416 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/416 )
- Add an example of property comments for component resources by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/411 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/411 )
- Use old inputs when calculating Diff for default infer by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/419 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/419 )
- \[infer] Prevent deserialization errors with CustomDiff for Config by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/420 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/420 )
- Fix `CustomDiff[*Config, *Config]` by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/421 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/421 )
- Fix `GetSchema` by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/422 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/422 )
- Correctly keep `DiffResponse`'s non-detailed diffs keys top-level by
[@​iwahbe](https://redirect.github.com/iwahbe ) in
[https://github.com/pulumi/pulumi-go-provider/pull/417 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/417 )
#### New Contributors
- [@​andrzejressel](https://redirect.github.com/andrzejressel )
made their first contribution in
[https://github.com/pulumi/pulumi-go-provider/pull/418 ](https://redirect.github.com/pulumi/pulumi-go-provider/pull/418 )
**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.1.2...v1.2.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: Bryce Lampe <bryce@pulumi.com >
2026-02-06 20:48:41 +00:00
pulumi-provider-automation[bot]
f5d459e624
Update GitHub Actions workflows. ( #751 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 62def83b594d72ccf4eab97cdf5b566ebb910e83.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-02-03 05:54:15 +00:00
pulumi-provider-automation[bot]
d5e5c8a482
Update GitHub Actions workflows. ( #750 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit f51ba6a8731f22e9b3cf35393bf9c792097e4aa1.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-30 19:09:44 +00:00
pulumi-renovate[bot]
d0bb326600
Update module github.com/pulumi/providertest to v0.6.0 ( #749 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest )
| require | minor | `v0.5.1-0.20251217173405-3861778549dd` -> `v0.6.0` |
---
### Release Notes
<details>
<summary>pulumi/providertest (github.com/pulumi/providertest)</summary>
###
[`v0.6.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.6.0 )
[Compare
Source](https://redirect.github.com/pulumi/providertest/compare/v0.5.1...v0.6.0 )
##### What's Changed
- feat: Add local python SDK replacement option via pip by
[@​rshade](https://redirect.github.com/rshade ) in
[https://github.com/pulumi/providertest/pull/150 ](https://redirect.github.com/pulumi/providertest/pull/150 )
**Full Changelog**:
https://github.com/pulumi/providertest/compare/v0.5.1...v0.6.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2026-01-29 19:33:01 +00:00
pulumi-provider-automation[bot]
534bc6c172
Update GitHub Actions workflows. ( #745 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 1131c4d395e39e42386bf9a4dfb975eb219d604b.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-29 05:54:00 +00:00
pulumi-provider-automation[bot]
570f83ca62
Update GitHub Actions workflows. ( #743 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit a3bb44291e85389589513a73050a049a024bd800.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-28 05:43:20 +00:00
pulumi-provider-automation[bot]
b35af1d86d
Update GitHub Actions workflows. ( #742 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 5c1afa4cb1107d1ea52e86433fcd7d54b28925ab.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-26 16:00:41 +00:00
pulumi-provider-automation[bot]
62db1d7f3b
Update GitHub Actions workflows. ( #740 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit d825a77c6fb8405f61d1283d494a3a2c1cba3587.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-23 12:49:06 +00:00
pulumi-provider-automation[bot]
9b5a5d4371
Update GitHub Actions workflows. ( #737 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 16d6357b115512b7bf916a73a75b78fa24fef858.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-16 05:39:51 +00:00
pulumi-provider-automation[bot]
8809a8c708
Update GitHub Actions workflows. ( #735 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit dfe81431707efb057395e33fe5234f01031ecd95.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-15 05:40:12 +00:00
pulumi-provider-automation[bot]
cc1bda22e5
Update GitHub Actions workflows. ( #734 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 329ced61750d1b5d3027894c5e0c79ac08f71378.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-13 05:38:49 +00:00
pulumi-provider-automation[bot]
f820f6547c
Update GitHub Actions workflows. ( #733 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit ea67003b42b286f2a9d25c2a5e878fc1aacf5c94.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2026-01-10 05:38:03 +00:00
pulumi-provider-automation[bot]
214793b929
Update GitHub Actions workflows. ( #730 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 4cdb4b8cad405d730db594e8adb73ee1b875b4a6.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-30 05:45:22 +00:00
pulumi-provider-automation[bot]
9e8c685bc8
Update GitHub Actions workflows. ( #728 )
...
This PR was automatically generated by the
update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt
repo, from commit 021a1f6c9360e1b569457868b4c0c3ecbfc62ff4.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-23 19:01:30 +00:00
pulumi-provider-automation[bot]
09f7b32602
Update GitHub Actions workflows. ( #727 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 6693889d5ebbe0416302e06ac701da21580fbd2d.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-23 15:40:07 +00:00
pulumi-provider-automation[bot]
1e00e5dc89
Update GitHub Actions workflows. ( #724 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 90795a3949f95304f4bd3a9dea2ace1ca3465403.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-23 05:44:49 +00:00
pulumi-provider-automation[bot]
93fae0c1a4
Update GitHub Actions workflows. ( #723 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 1901fce160a37d0c537d831ce6f96e72bf7c9427.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-20 05:44:19 +00:00
pulumi-provider-automation[bot]
4c85816954
Update GitHub Actions workflows. ( #721 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 217fd547b64df90c7919b206f17362d4baec9aa3.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-19 20:07:45 +00:00
pulumi-provider-automation[bot]
4e3830ca83
Update GitHub Actions workflows. ( #720 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 0b04a21b810fd7b4a412c1f42867a70f65c14758.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-19 05:44:14 +00:00
pulumi-provider-automation[bot]
3f329778cf
Update GitHub Actions workflows. ( #718 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit f0ec8c55b928cc870e533b367aaba1f9af2330ad.
Co-authored-by: Pulumi Bot <bot@pulumi.com >
2025-12-18 05:44:56 +00:00
pulumi-provider-automation[bot]
c64d5baba6
Update GitHub Actions workflows. ( #716 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 02f02bb0bfe879d167ed8f335b4950208454bafb.
---------
Co-authored-by: Pulumi Bot <bot@pulumi.com >
Co-authored-by: Bryce Lampe <bryce@pulumi.com >
2025-12-17 18:20:54 +00:00
pulumi-renovate[bot]
4c8968185c
Update dependency @pulumi/pulumi to v3.212.0 ( #710 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.211.0` ->
`3.212.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.211.0/3.212.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.212.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.212.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.211.0...v3.212.0 )
##### 3.212.0 (2025-12-12)
##### Bug Fixes
- \[yaml] Update pulumi-yaml to v1.26.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-12-12 22:13:17 +00:00
pulumi-renovate[bot]
7a75efe8c4
Update dependency @pulumi/pulumi to v3.211.0 ( #708 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.210.0` ->
`3.211.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.210.0/3.211.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.211.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.211.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.210.0...v3.211.0 )
#### 3.211.0 (2025-12-11)
##### Features
- \[cli/about] Print Node.js package manager information in `pulumi
about`
[#​21163](https://redirect.github.com/pulumi/pulumi/pull/21163 )
- \[backend/diy] Add stack tags support for DIY backends (S3, Postgres,
file-based, etc.).
DIY backends now support stack tags functionality, bringing feature
parity with cloud backends.
This includes:
- Full CRUD operations for stack tags (create, read, update, delete)
- Automatic system tag injection (e.g., `pulumi:project`)
- Tag filtering support in stack listing operations
- Backward compatibility with existing stacks (no tags file required)
- Atomic operations with caching for performance
- Automatic cleanup of tag files when stacks are deleted
Tags are stored as separate `.pulumi-tags` files alongside stack
checkpoints, using a versioned
JSON format. The implementation works across all DIY backend storage
types including S3, Azure Blob,
Google Cloud Storage, PostgreSQL, and local file systems.
Example usage:
```bash
pulumi stack tag set environment production
pulumi stack tag set owner backend-team
pulumi stack ls --tag-filter environment=production
```
[#​19882](https://redirect.github.com/pulumi/pulumi/pull/19882 )
- \[backend/service] Improve startup performance with the service as
backend
[#​21176](https://redirect.github.com/pulumi/pulumi/pull/21176 )
- \[sdk/nodejs] Add support for `replacement_trigger` in the NodeJS SDK
[#​20939](https://redirect.github.com/pulumi/pulumi/pull/20939 )
- \[sdk/python] Allow setting version for python component providers
[#​21149](https://redirect.github.com/pulumi/pulumi/pull/21149 )
##### Bug Fixes
- \[cli/package] Correctly identify the innermost Project/Plugin when
running `pulumi package add`
[#​21137](https://redirect.github.com/pulumi/pulumi/pull/21137 )
- \[engine] Allow referencing multiple git/github/gitlab components from
the same repo
[#​21119](https://redirect.github.com/pulumi/pulumi/pull/21119 )
- \[programgen/go] Account for name conflicts in resource creation
functions
[#​21107](https://redirect.github.com/pulumi/pulumi/pull/21107 )
- \[sdk/python] Fix cancellation handling in a few places in the python
language host
[#​21145](https://redirect.github.com/pulumi/pulumi/pull/21145 )
- \[sdkgen/go] Fix generation of lifted single-value calls in
parameterized SDKs
[#​21115](https://redirect.github.com/pulumi/pulumi/pull/21115 )
##### Miscellaneous
- \[cli] Don't attempt to re-install plugin dependencies on load failure
for plugins based on git with a nested path
[#​21148](https://redirect.github.com/pulumi/pulumi/pull/21148 )
- \[sdk/{dotnet,java,yaml}] Bump language runtimes for dotnet, java, and
yaml
[#​21201](https://redirect.github.com/pulumi/pulumi/pull/21201 )
- \[cli/engine] Add language runtime metadata to update metadata
[#​21186](https://redirect.github.com/pulumi/pulumi/pull/21186 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-12-12 05:11:26 +00:00
pulumi-renovate[bot]
16f3939ae0
Update dependency @pulumi/pulumi to v3.210.0 ( #694 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.209.0` ->
`3.210.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.209.0/3.210.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.210.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.210.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.209.0...v3.210.0 )
#### 3.210.0 (2025-12-03)
##### Features
- \[cli/about] Print python toolchain information in `pulumi about`
- \[sdk/java] Update java to v1.18
- \[components/nodejs] Local components will use the version from
package.json rather than 0.0.0
[#​21100](https://redirect.github.com/pulumi/pulumi/pull/21100 )
- \[cli/package] Add `pulumi package delete` command to delete package
versions from the Pulumi Registry
[#​21069](https://redirect.github.com/pulumi/pulumi/pull/21069 )
- \[cli/package] Always print the schema first in `package get-schema`,
then print any binding errors
[#​21080](https://redirect.github.com/pulumi/pulumi/pull/21080 )
- \[sdk/python] Require `grpcio>=1.75.1` on Python 3.14
[#​21113](https://redirect.github.com/pulumi/pulumi/pull/21113 )
##### Bug Fixes
- \[sdk/nodejs] Fix ComponentResources transfering input arguments to
output properties automatically
[#​21094](https://redirect.github.com/pulumi/pulumi/pull/21094 )
##### Miscellaneous
- \[sdk/nodejs] Remove
[@​types/uuid](https://redirect.github.com/types/uuid ) type
declarations dev dependency
[#​21077](https://redirect.github.com/pulumi/pulumi/pull/21077 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-12-03 21:28:06 +00:00
pulumi-renovate[bot]
31065543d9
Update dependency @pulumi/pulumi to v3.209.0 ( #682 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.208.0` ->
`3.209.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.208.0/3.209.0 )
|
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.209.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.209.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.208.0...v3.209.0 )
##### 3.209.0 (2025-11-26)
##### Features
- \[cli] Add native support for OIDC token exchange when logging into
Pulumi Cloud. Run `pulumi login --help` for more information.
[#​20974](https://redirect.github.com/pulumi/pulumi/pull/20974 )
- \[sdk/python] Allow older grpcio and protobuf dependencies
[#​21007](https://redirect.github.com/pulumi/pulumi/pull/21007 )
- \[sdkgen/{dotnet,go,nodejs,python}] Generate .gitignore and
.gitattributes files for generated SDKs
[#​21034](https://redirect.github.com/pulumi/pulumi/pull/21034 )
##### Bug Fixes
- \[cli/install] Correctly install non-standard plugins.
See[https://github.com/pulumi/pulumi/issues/20953 ](https://redirect.github.com/pulumi/pulumi/issues/20953 )3
for more information
[#​20983](https://redirect.github.com/pulumi/pulumi/pull/20983 )
- \[cli/new] Create pyproject.toml for uv and poetry projects when using
--generate-only
[#​20979](https://redirect.github.com/pulumi/pulumi/pull/20979 )
- \[sdk/nodejs] Fix serialization errors due to SxS copies of the SDK
[#​21029](https://redirect.github.com/pulumi/pulumi/pull/21029 )
- \[sdk/python] Add `PropertyValue` runtime validation checks
[#​21058](https://redirect.github.com/pulumi/pulumi/pull/21058 )
##### Miscellaneous
- \[engine] Don't send root directory and runtime options to language
plugins as command line arguments
[#​21054](https://redirect.github.com/pulumi/pulumi/pull/21054 )
- \[sdk/{dotnet,java,yaml}] Bump language runtimes for yaml, dotnet and
java
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-11-26 16:17:55 +00:00
pulumi-renovate[bot]
68d5f3a0cb
Update first-party Pulumi dependencies ( #677 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action ) |
action | minor | `v1.4.0` -> `v1.5.0` |
|
[pulumi/provider-version-action](https://redirect.github.com/pulumi/provider-version-action )
| action | patch | `v1.6.0` -> `v1.6.1` |
---
### Release Notes
<details>
<summary>pulumi/esc-action (pulumi/esc-action)</summary>
###
[`v1.5.0`](https://redirect.github.com/pulumi/esc-action/releases/tag/v1.5.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc-action/compare/v1.4.0...v1.5.0 )
- Fix line parsing when "=" is present
[https://github.com/pulumi/esc-action/pull/30 ](https://redirect.github.com/pulumi/esc-action/pull/30 )
</details>
<details>
<summary>pulumi/provider-version-action
(pulumi/provider-version-action)</summary>
###
[`v1.6.1`](https://redirect.github.com/pulumi/provider-version-action/releases/tag/v1.6.1 )
[Compare
Source](https://redirect.github.com/pulumi/provider-version-action/compare/v1.6.0...v1.6.1 )
#### What's Changed
- Automate floating tag updates and document release process by
[@​EronWright](https://redirect.github.com/EronWright ) in
[https://github.com/pulumi/provider-version-action/pull/17 ](https://redirect.github.com/pulumi/provider-version-action/pull/17 )
- Update dependencies for v1.6.1 by
[@​EronWright](https://redirect.github.com/EronWright ) in
[https://github.com/pulumi/provider-version-action/pull/18 ](https://redirect.github.com/pulumi/provider-version-action/pull/18 )
#### New Contributors
- [@​EronWright](https://redirect.github.com/EronWright ) made
their first contribution in
[https://github.com/pulumi/provider-version-action/pull/17 ](https://redirect.github.com/pulumi/provider-version-action/pull/17 )
**Full Changelog**:
https://github.com/pulumi/provider-version-action/compare/v1...v1.6.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-11-26 01:13:49 +00:00
Pulumi Bot
98fc73df74
Update GitHub Actions workflows. ( #676 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit ad6b9bc68e26fd3eeb270fe212ab46888a1580e3.
2025-11-22 05:45:33 +00:00
pulumi-renovate[bot]
2bf4175cae
Update pulumi/esc-action action to v1.5.0 ( #674 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action ) |
action | minor | `v1.4.0` -> `v1.5.0` |
---
### Release Notes
<details>
<summary>pulumi/esc-action (pulumi/esc-action)</summary>
###
[`v1.5.0`](https://redirect.github.com/pulumi/esc-action/releases/tag/v1.5.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc-action/compare/v1.4.0...v1.5.0 )
- Fix line parsing when "=" is present
[https://github.com/pulumi/esc-action/pull/30 ](https://redirect.github.com/pulumi/esc-action/pull/30 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
2025-11-21 06:06:38 +00:00
Pulumi Bot
345f4699a8
Update GitHub Actions workflows. ( #673 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 8419353a43302449e0cd6d525c08e2d9f4479dd8.
2025-11-21 05:56:36 +00:00
pulumi-renovate[bot]
d5d676f8ec
Update first-party Pulumi dependencies ( #558 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi )
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs ))
| dependencies | minor | [`3.184.0` ->
`3.208.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.184.0/3.208.0 )
|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc ) |
indirect | minor | `v0.17.0` -> `v0.20.0` |
| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action ) |
action | minor | `v1.4.0` -> `v1.5.0` |
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.208.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.208.0 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.207.0...v3.208.0 )
#### 3.208.0 (2025-11-20)
##### Features
- \[cli] Expose all command flags as env vars (e.g. --refresh can now be
set with PULUMI_OPTION_REFRESH)
[#​20868](https://redirect.github.com/pulumi/pulumi/pull/20868 )
- \[cli/install] Make `pulumi install` recurse into local packages
[#​20945](https://redirect.github.com/pulumi/pulumi/pull/20945 )
- \[engine] Add a `replacement_trigger` resource option. Any change to
this value between program runs will trigger a replace of the resource
[#​20936](https://redirect.github.com/pulumi/pulumi/pull/20936 )
- \[engine] Add a new builtin `Stash` resource which can be used to save
a value to state
[#​20819](https://redirect.github.com/pulumi/pulumi/pull/20819 )
- \[protobuf] Add `Language.Template` RPC to protos
[#​20948](https://redirect.github.com/pulumi/pulumi/pull/20948 )
- \[sdk/go] Add support for `replacement_trigger` in the Go SDK
[#​20937](https://redirect.github.com/pulumi/pulumi/pull/20937 )
##### Bug Fixes
- \[engine] Fix duplicate resource snapshot integrity issue with aliases
[#​20926](https://redirect.github.com/pulumi/pulumi/pull/20926 )
- \[engine] Allow resources marked as `Delete` to be targeted, and take
them into account for dependency calculation
[#​20962](https://redirect.github.com/pulumi/pulumi/pull/20962 )
- \[engine] Fix a panic when previewing and import of a resource that
wants to delete and then replace due to diffs
[#​20997](https://redirect.github.com/pulumi/pulumi/pull/20997 )
- \[pkg] Include invalid property names in bind errors
[#​20989](https://redirect.github.com/pulumi/pulumi/pull/20989 )
- \[sdk/python] Don’t raise when looking up a stack reference output
that does not exist
[#​20938](https://redirect.github.com/pulumi/pulumi/pull/20938 )
- \[sdkgen/python] Ensure resource args accept typeddicts when no
language info is specified
[#​20982](https://redirect.github.com/pulumi/pulumi/pull/20982 )
##### Miscellaneous
- \[cli] Document the \[template|url] argument in `pulumi up` command
help text
[#​20996](https://redirect.github.com/pulumi/pulumi/pull/20996 )
###
[`v3.207.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32070-2025-11-12 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.206.0...v3.207.0 )
##### Features
- \[cli] Log gRPC requests before invoking them in gRPC debug
interceptor
[#​20817](https://redirect.github.com/pulumi/pulumi/pull/20817 )
- \[engine] Add `ReplaceWith` resource option to allow one resource's
replace operations to trigger another's
[#​20693](https://redirect.github.com/pulumi/pulumi/pull/20693 )
- \[sdkgen/python] Allow all PEP440 version specifiers to be used
##### Bug Fixes
- \[cli/import] Return errors when an import fails
[#​20904](https://redirect.github.com/pulumi/pulumi/pull/20904 )
- \[engine] Fix parenting of resources in some cases in `refresh
--run-program`
[#​20894](https://redirect.github.com/pulumi/pulumi/pull/20894 )
- \[engine] Fix StackReference secrets performance
[#​20908](https://redirect.github.com/pulumi/pulumi/pull/20908 )
- \[programgen] Do not panic when re-writing type-invalid PCL
[#​20770](https://redirect.github.com/pulumi/pulumi/pull/20770 )
- \[sdk/go] Fix import path in instructions when linking a package in Go
[#​20888](https://redirect.github.com/pulumi/pulumi/pull/20888 )
- \[sdk/nodejs] Fix closure serialization on Node.js v25.2.0
[#​20913](https://redirect.github.com/pulumi/pulumi/pull/20913 )
- \[sdk/{nodejs,python}] Avoid cancellations due to do slow processing
of requests
- \[sdk/python] Avoid cancellations due to do slow processing of
requests in the callbacks server
[#​20917](https://redirect.github.com/pulumi/pulumi/pull/20917 )
##### Miscellaneous
- \[engine] Stop sending ConfigPropertyMap as part of RunRequest
[#​20887](https://redirect.github.com/pulumi/pulumi/pull/20887 )
###
[`v3.206.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32060-2025-11-05 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.205.0...v3.206.0 )
##### Features
- \[protobuf] Pass a `preview` flag to invokes so they can tell if
they're being called during a preview
[#​20827](https://redirect.github.com/pulumi/pulumi/pull/20827 )
- \[cli/about] Include PULUMI_\* environment variables in the `pulumi
about` output
[#​20855](https://redirect.github.com/pulumi/pulumi/pull/20855 )
- \[auto/go] Get event log over gRPC instead of trying to read it from a
text file
[#​20822](https://redirect.github.com/pulumi/pulumi/pull/20822 )
- \[auto/nodejs] Get event log over gRPC instead of trying to read it
from a text file
[#​20824](https://redirect.github.com/pulumi/pulumi/pull/20824 )
- \[auto/python] Get event log over gRPC instead of trying to read it
from a text file
[#​20833](https://redirect.github.com/pulumi/pulumi/pull/20833 )
- \[cli/engine] Add environment variable to add --refresh to
preview,update,destroy
[#​20797](https://redirect.github.com/pulumi/pulumi/pull/20797 )
- \[sdk/nodejs] Add PULUMI_NODEJS_SKIP_COMPONENT_INPUTS environment
variable to skip the new feature of sending component inputs to the
engine for diffing and state storage
[#​20842](https://redirect.github.com/pulumi/pulumi/pull/20842 )
##### Bug Fixes
- \[engine] Fix duplicate resource snapshot integrity issue, when
running `pulumi up --refresh --run-program` and when a resource
`PendingReplacement` exists in the snapshot
[#​20812](https://redirect.github.com/pulumi/pulumi/pull/20812 )
- \[engine] Support floating point NaN and Inf values in resource state
[#​20843](https://redirect.github.com/pulumi/pulumi/pull/20843 )
##### Miscellaneous
- \[sdk/go] Use Language.Link to link Go packages
[#​20811](https://redirect.github.com/pulumi/pulumi/pull/20811 )
###
[`v3.205.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32050-2025-10-28 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.204.0...v3.205.0 )
##### Bug Fixes
- \[cli/display] Improve how the severity is displayed for policy
violations
[#​20805](https://redirect.github.com/pulumi/pulumi/pull/20805 )
- \[engine] Fix an issue where `refresh --run-program` could potentially
run forever
[#​20781](https://redirect.github.com/pulumi/pulumi/pull/20781 )
###
[`v3.204.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32040-2025-10-23 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.203.0...v3.204.0 )
##### Features
- \[cli] Print replace diffs when a resource tries to replace but is
blocked by still having an import id set
[#​20762](https://redirect.github.com/pulumi/pulumi/pull/20762 )
- \[engine] Support overriding policy severity on violations
[#​20767](https://redirect.github.com/pulumi/pulumi/pull/20767 )
- \[backend/service] Send journal entries to the backend if it's
supported
[#​20343](https://redirect.github.com/pulumi/pulumi/pull/20343 )
##### Bug Fixes
- \[engine] Fix a potential snapshot integrity error when a resources
dependency fails to be destroyed using `destroy --run-program`
[#​20692](https://redirect.github.com/pulumi/pulumi/pull/20692 )
- \[engine] Fix import error to contain the import ID of non-existent
resources
[#​20753](https://redirect.github.com/pulumi/pulumi/pull/20753 )
- \[sdk/nodejs] Pass secret values as Output objects to resource hooks
to properly maintain their secretness. Previously hooks received an
internal representation for secret values.
[#​20774](https://redirect.github.com/pulumi/pulumi/pull/20774 )
- \[sdk/python] Pass secret values as Output objects to resource hooks
to properly maintain their secretness. Previously hooks received an
internal representation for secret values.
[#​20769](https://redirect.github.com/pulumi/pulumi/pull/20769 )
- \[sdkgen/go] Fix codegen of scalar return SDK functions
[#​20754](https://redirect.github.com/pulumi/pulumi/pull/20754 )
- \[sdkgen/{nodejs,python}] Fix scalar return protocol to allow
returning secret maps
[#​20747](https://redirect.github.com/pulumi/pulumi/pull/20747 )
##### Miscellaneous
- \[sdk/nodejs] Use Language.Link to link Node.js packages
[#​20715](https://redirect.github.com/pulumi/pulumi/pull/20715 )
###
[`v3.203.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32030-2025-10-15 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.202.0...v3.203.0 )
##### Features
- \[cli/display] Display policy severity for violations
[#​20746](https://redirect.github.com/pulumi/pulumi/pull/20746 )
- \[cli/package] Show functions in `package info`
[#​20733](https://redirect.github.com/pulumi/pulumi/pull/20733 )
##### Bug Fixes
- \[engine] Make sure errors from the journaler are not shown to the
user
[#​20740](https://redirect.github.com/pulumi/pulumi/pull/20740 )
- \[backend/diy] Fix casing of stack/latest when importing stacks
[#​20727](https://redirect.github.com/pulumi/pulumi/pull/20727 )
- \[cli/package] Fix 'required' flag for resource inputs in `package
info`
[#​20731](https://redirect.github.com/pulumi/pulumi/pull/20731 )
- \[programgen] Revert
[#​20345](https://redirect.github.com/pulumi/pulumi/issues/20345 )
[#​20714](https://redirect.github.com/pulumi/pulumi/pull/20714 )
- \[programgen/{dotnet,nodejs}] Propagate local dependencies for
parameterized packages during convert down to GenerateProject
[#​20706](https://redirect.github.com/pulumi/pulumi/pull/20706 )
- \[sdkgen/python] Fix python invokes for functions returning map types
[#​20719](https://redirect.github.com/pulumi/pulumi/pull/20719 )
##### Miscellaneous
- \[sdk/python] Use Language.Link to link python packages
[#​20612](https://redirect.github.com/pulumi/pulumi/pull/20612 )
###
[`v3.202.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32020-2025-10-10 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.201.0...v3.202.0 )
##### Features
- \[auto] Add SetAllConfigJson method to automation APIs
[#​20709](https://redirect.github.com/pulumi/pulumi/pull/20709 )
- \[cli/config] Add `--json` input support to `pulumi config set-all`
[#​19427](https://redirect.github.com/pulumi/pulumi/pull/19427 )
- \[cli/display] Add error summary at the end of Resource changes
[#​20658](https://redirect.github.com/pulumi/pulumi/pull/20658 )
- \[components/{go,nodejs}] Send component inputs to be saved in state.
This brings NodeJS and Go inline with Python behaviour
[#​20357](https://redirect.github.com/pulumi/pulumi/pull/20357 )
- \[sdk/python] Add support for Python 3.14
[#​20433](https://redirect.github.com/pulumi/pulumi/pull/20433 )
- \[sdk/python] Add the `hide_diffs` resource option
[#​20655](https://redirect.github.com/pulumi/pulumi/pull/20655 )
##### Bug Fixes
- \[engine] Fix assert when a resource that's not targeted on a destroy
is marked as Delete
[#​20684](https://redirect.github.com/pulumi/pulumi/pull/20684 )
- \[sdk/nodejs] Allow compiled local SDKs to be parameterized
[#​20685](https://redirect.github.com/pulumi/pulumi/pull/20685 )
- \[sdk/nodejs] Handle RangeErrors from util.inspect stringifying error
objects
[#​20705](https://redirect.github.com/pulumi/pulumi/pull/20705 )
###
[`v3.201.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32010-2025-10-06 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.200.0...v3.201.0 )
##### Features
- \[sdkgen/go] Support non-object return types in functions
[#​20646](https://redirect.github.com/pulumi/pulumi/pull/20646 )
##### Bug Fixes
- \[backend/service] Fix the --insecure flag in `pulumi login`
###
[`v3.200.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32000-2025-10-03 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.199.0...v3.200.0 )
##### Features
- \[cli] Look for .cmd and .ps1 extensions as well on Windows when
looking for executables
[#​20637](https://redirect.github.com/pulumi/pulumi/pull/20637 )
- \[sdk/go] Add a new resource option: `HideDiffs`
[#​20631](https://redirect.github.com/pulumi/pulumi/pull/20631 )
- \[sdk/nodejs] Add a new resource option: `hideDiffs`
[#​20631](https://redirect.github.com/pulumi/pulumi/pull/20631 )
- \[sdkgen/python] Support non-object return types in functions
[#​20624](https://redirect.github.com/pulumi/pulumi/pull/20624 )
##### Bug Fixes
- \[build] Use ruff to auto fix lints in python
[#​20644](https://redirect.github.com/pulumi/pulumi/pull/20644 )
- \[sdk/nodejs] Make new arguments to `initialize` optional
[#​20650](https://redirect.github.com/pulumi/pulumi/pull/20650 )
- \[sdkgen/nodejs] Generate a .gitignore file inside local SDKs
[#​20643](https://redirect.github.com/pulumi/pulumi/pull/20643 )
- \[cli/state] Treat providers that are marked as parents in a move as
providers still instead of as regular resources
[#​20639](https://redirect.github.com/pulumi/pulumi/pull/20639 )
- \[cli/state] Exclude root stack correctly when moving resources and
when --include-parents is passed
###
[`v3.199.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31990-2025-10-01 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.198.0...v3.199.0 )
##### Features
- \[cli/about] Add `pulumi about env` to help
[#​20633](https://redirect.github.com/pulumi/pulumi/pull/20633 )
- \[cli/{about,new}] Add environment variables to override template
repository settings. The new PULUMI_TEMPLATE_GIT_REPOSITORY,
PULUMI_TEMPLATE_BRANCH, PULUMI_POLICY_TEMPLATE_GIT_REPOSITORY, and
PULUMI_POLICY_TEMPLATE_BRANCH environment variables allow runtime
customization of template sources
[#​20615](https://redirect.github.com/pulumi/pulumi/pull/20615 )
- \[cli/{install,package}] Add support for package references in plugins
[#​20524](https://redirect.github.com/pulumi/pulumi/pull/20524 )
- \[sdk/nodejs] Pass options, name, and type to ComponentResources
initialize methods
[#​20618](https://redirect.github.com/pulumi/pulumi/pull/20618 )
- \[cli/policy] Send vcs metadata when publishing policy packs
[#​20528](https://redirect.github.com/pulumi/pulumi/pull/20528 )
##### Bug Fixes
- \[cli/display] Always send diag events to stderr in the diff display
[#​20632](https://redirect.github.com/pulumi/pulumi/pull/20632 )
- \[components] Stop including auth info in plugin name
[#​20620](https://redirect.github.com/pulumi/pulumi/pull/20620 )
- \[engine] Support the import option in resource transforms
[#​20586](https://redirect.github.com/pulumi/pulumi/pull/20586 )
- \[programgen] Fix panic in parseProxyApply when encoutering warning
diagnostics
[#​20583](https://redirect.github.com/pulumi/pulumi/pull/20583 )
- \[sdk/nodejs] Don't attempt to serialise function values for resource
inputs/outputs
[#​20621](https://redirect.github.com/pulumi/pulumi/pull/20621 )
###
[`v3.198.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31980-2025-09-26 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.197.0...v3.198.0 )
##### Features
- \[engine] Expand snapshot integrity check for resources
[#​20519](https://redirect.github.com/pulumi/pulumi/pull/20519 )
- \[sdk/go] Refactor Go policy SDK to have access to a pulumi Context
object
[#​20570](https://redirect.github.com/pulumi/pulumi/pull/20570 )
- \[sdk/python] Allow registered resources to be retrieved from the mock
monitor for test assertions
[#​20540](https://redirect.github.com/pulumi/pulumi/pull/20540 )
##### Bug Fixes
- \[engine] Fix snapshot integrity error with `run-program --refresh`,
when a provider has a dependency that isn't being created
[#​20541](https://redirect.github.com/pulumi/pulumi/pull/20541 )
- \[engine] Remove unneeded data from policy summary events
[#​20589](https://redirect.github.com/pulumi/pulumi/pull/20589 )
- \[sdk] Fix plugin killing during cancellation
[#​20543](https://redirect.github.com/pulumi/pulumi/pull/20543 )
- \[sdk/go] Fix \[Unm/M]arshalProperties to return nil when given nil
[#​20544](https://redirect.github.com/pulumi/pulumi/pull/20544 )
##### Miscellaneous
- \[protobuf] Add loader_target to LanguageRuntime.LinkRequest
[#​20552](https://redirect.github.com/pulumi/pulumi/pull/20552 )
- \[cli/package] Move InstallPackage from cmd/packagecmd to cmd/packages
[#​20550](https://redirect.github.com/pulumi/pulumi/pull/20550 )
- \[cli/package] Move stdout/stderr IO out of GenSDK and LinkPackage
[#​20546](https://redirect.github.com/pulumi/pulumi/pull/20546 )
- \[sdk] Move PluginSpec.Install to pkg/workspace.InstallPluginContent
[#​20537](https://redirect.github.com/pulumi/pulumi/pull/20537 )
- \[sdk/yaml] Bump pulumi-yaml to 1.23.2
[#​20588](https://redirect.github.com/pulumi/pulumi/pull/20588 )
###
[`v3.197.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31970-2025-09-17 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.196.0...v3.197.0 )
##### Features
- \[cli] Send new policy fields when publishing a policy pack
- \[sdk/dotnet] Update dotnet to v3.88
[#​20512](https://redirect.github.com/pulumi/pulumi/pull/20512 )
##### Bug Fixes
- \[engine] Fix a panic in preview, that could happen in some cases when
default providers get updated
[#​20511](https://redirect.github.com/pulumi/pulumi/pull/20511 )
- \[components/python] Fix parenting of python components
[#​20508](https://redirect.github.com/pulumi/pulumi/pull/20508 )
- \[sdk/python] Fix hang when shutting down in certain error conditions
[#​20484](https://redirect.github.com/pulumi/pulumi/pull/20484 )
- \[sdk/python] Fix license-files entry for python package
[#​20506](https://redirect.github.com/pulumi/pulumi/pull/20506 )
###
[`v3.196.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31960-2025-09-12 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.195.0...v3.196.0 )
##### Miscellaneous
- \[sdk] Add policy summary events apitypes
[#​20443](https://redirect.github.com/pulumi/pulumi/pull/20443 )
- \[sdk] Add new policy fields apitypes
[#​20491](https://redirect.github.com/pulumi/pulumi/pull/20491 )
- \[protobuf] Add support for indicating "not applicable" policies
[#​20492](https://redirect.github.com/pulumi/pulumi/pull/20492 )
- \[protobuf] Add new analyzer policy fields
[#​20494](https://redirect.github.com/pulumi/pulumi/pull/20494 )
###
[`v3.195.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31950-2025-09-10 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.194.0...v3.195.0 )
##### Features
- \[engine] Add support for capturing program stack traces as part of
resource registration
[#​20430](https://redirect.github.com/pulumi/pulumi/pull/20430 )
- \[sdk/go] Registered resources can now be retrieved from the mock
monitor for test assertions
[#​20472](https://redirect.github.com/pulumi/pulumi/pull/20472 )
- \[sdk/go] The current exports map is now available for unit testing
through `GetCurrentExportMap`
[#​20471](https://redirect.github.com/pulumi/pulumi/pull/20471 )
##### Bug Fixes
- \[pkg/go] Fix an issue where v3.194.0 of the
`github.com/pulumi/pulumi/pkg/v3` module depends on APIs from
`github.com/pulumi/pulumi/sdk/v3` that haven't been released
[#​20487](https://redirect.github.com/pulumi/pulumi/issues/20487 )
###
[`v3.194.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31940-2025-09-08 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.193.0...v3.194.0 )
##### Features
- \[cli] Log diagnostics to stderr instead of stdout
[#​20461](https://redirect.github.com/pulumi/pulumi/pull/20461 )
- \[cli/display] Change the default for --show-full-output from true to
false
[#​20467](https://redirect.github.com/pulumi/pulumi/pull/20467 )
- \[cli/display] Fix the --show-full-output the flag
[#​20464](https://redirect.github.com/pulumi/pulumi/pull/20464 )
- \[sdk/go] Show a message that the Go program is being compiled
[#​20460](https://redirect.github.com/pulumi/pulumi/pull/20460 )
##### Bug Fixes
- \[engine] Make ignoreChanges work better for arrays
[#​20465](https://redirect.github.com/pulumi/pulumi/pull/20465 )
- \[programgen] Fix panic in RewriteApplies when encountering warning
diagnostics
[#​20453](https://redirect.github.com/pulumi/pulumi/pull/20453 )
##### Miscellaneous
- \[cli] No longer require the `PULUMI_EXPERIMENTAL` flag for Private
Registry template operations (`pulumi template publish`, registry-based
template resolution in `pulumi new`), while registry-backed template
resolution in `pulumi new` may still be disabled using
`PULUMI_DISABLE_REGISTRY_RESOLVE=true pulumi new`
[#​20458](https://redirect.github.com/pulumi/pulumi/pull/20458 )
- \[sdk/yaml] Bump pulumi-yaml to 1.23.1
###
[`v3.193.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31930-2025-09-04 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.192.0...v3.193.0 )
##### Bug Fixes
- \[cli] Use "Private Registry", not cloud or Pulumi registry, in CLI
output
[#​20436](https://redirect.github.com/pulumi/pulumi/pull/20436 )
- \[cli/display] Avoid printing a double new line when showing secrets
in the outputs
[#​20435](https://redirect.github.com/pulumi/pulumi/pull/20435 )
- \[cli/display] Fix coloring of cobra error messages on windows
- \[cli/{install,package}] Fix local package resolution when
PULUMI_EXPERIMENTAL=true by including local packages in registry
fallback logic
[#​20413](https://redirect.github.com/pulumi/pulumi/pull/20413 )
- \[cli/new] Fail when running with --language without --ai in
non-interactive mode
[#​20415](https://redirect.github.com/pulumi/pulumi/pull/20415 )
- \[cli/package] Fix not using already-installed package in 'pulumi
package add' when PULUMI_EXPERIMENTAL=1
##### Miscellaneous
- \[cli] Start the pprof server when receving SIGUSR1
[#​20392](https://redirect.github.com/pulumi/pulumi/pull/20392 )
- \[cli/display] Replace ijc/Gotty terminfo package with xo/terminfo
[#​20446](https://redirect.github.com/pulumi/pulumi/pull/20446 )
- \[cli/display] Use the passed through writer in ShowProgressOutput
instead of loading a new terminfo
###
[`v3.192.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31920-2025-08-29 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.191.0...v3.192.0 )
##### Features
- \[cli/state] Add pulumi state taint/untaint commands to force
replacement of resources upon next update
[#​20380](https://redirect.github.com/pulumi/pulumi/pull/20380 )
- \[sdk/nodejs] Add `previewDestroy` to allow dry-runs of `destroy`
commands
[#​20371](https://redirect.github.com/pulumi/pulumi/pull/20371 )
##### Bug Fixes
- \[engine] Fix a bug causing hooks to never pass correctly to remote Go
components
[#​20390](https://redirect.github.com/pulumi/pulumi/pull/20390 )
- \[sdk/go] Fix source position information
[#​20351](https://redirect.github.com/pulumi/pulumi/pull/20351 )
- \[sdk/nodejs] Fix function serialisation that contains minified
classes
[#​19345](https://redirect.github.com/pulumi/pulumi/pull/19345 )
- \[sdkgen/nodejs] Limit
[@​types](https://redirect.github.com/types ) packages used during
local SDK generation
[#​20387](https://redirect.github.com/pulumi/pulumi/pull/20387 )
- \[sdk/python] Set ThreadPoolExecutor max_workers to parallelism \* 4
[#​20362](https://redirect.github.com/pulumi/pulumi/pull/20362 )
- \[sdk/python] Handle `-v` flag passed to policy packs
[#​20373](https://redirect.github.com/pulumi/pulumi/pull/20373 )
- \[sdk/python] Forward errors raised in callbacks to the caller
[#​20381](https://redirect.github.com/pulumi/pulumi/pull/20381 )
##### Miscellaneous
- \[cli] Log stack trace when interrupted when using verbose logging
[#​20364](https://redirect.github.com/pulumi/pulumi/pull/20364 )
- \[cli] Print the location of the log file when running with the
verbose flag
[#​20365](https://redirect.github.com/pulumi/pulumi/pull/20365 )
- \[sdk/python] Remove custom typing stubs
[#​20384](https://redirect.github.com/pulumi/pulumi/pull/20384 )
###
[`v3.191.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31910-2025-08-21 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.190.0...v3.191.0 )
##### Features
- \[cli] Document the `PULUMI_ENABLE_STREAMING_JSON_PREVIEW` envvar.
[#​20328](https://redirect.github.com/pulumi/pulumi/pull/20328 )
##### Bug Fixes
- \[engine] Check providers returning 'version' or '\__internal' in
their inputs
[#​20313](https://redirect.github.com/pulumi/pulumi/pull/20313 )
- \[engine] Fix a panic with `refresh --run-program`
[#​20337](https://redirect.github.com/pulumi/pulumi/pull/20337 )
- \[engine] Fix an infinite loop from passing unordered resources to the
dependency system when using --refresh
- \[programgen] Emit warnings instead of errors in non-strict mode when
binding resource blocks
[#​20347](https://redirect.github.com/pulumi/pulumi/pull/20347 )
- \[programgen] Simplify range value types when it is derived from
object of objects and warn on unknown properties
[#​20345](https://redirect.github.com/pulumi/pulumi/pull/20345 )
- \[programgen] Warn instead of erroring out when traversing a NoneType
in PCL
[#​20342](https://redirect.github.com/pulumi/pulumi/pull/20342 )
- \[cli/display] Escape non-graphic characters in URNs
[#​20295](https://redirect.github.com/pulumi/pulumi/pull/20295 )
- \[cli/import] Disambiguate duplicate resource names by their types
when importing
[#​20348](https://redirect.github.com/pulumi/pulumi/pull/20348 )
- \[cli/new] Don't prompt for ai or template when passing --yes
[#​20256](https://redirect.github.com/pulumi/pulumi/pull/20256 )
##### Miscellaneous
- \[cli] Log version and CLI metadata
[#​20334](https://redirect.github.com/pulumi/pulumi/pull/20334 )
- \[cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource
[#​20324](https://redirect.github.com/pulumi/pulumi/pull/20324 )
###
[`v3.190.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31900-2025-08-15 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.189.0...v3.190.0 )
##### Features
- \[engine] Don't error on `ignoreChanges` paths that are missing old
data, there is nothing to ignore in those cases and we just use the new
data
[#​20278](https://redirect.github.com/pulumi/pulumi/pull/20278 )
##### Bug Fixes
- \[cli] Fix `destroy --exclude-protected --remove` returning an error
for empty stacks that could safely be removed
[#​20283](https://redirect.github.com/pulumi/pulumi/pull/20283 )
- \[cli] Fix `pulumi template publish` failing with relative paths by
normalizing to absolute paths before archive creation
[#​20301](https://redirect.github.com/pulumi/pulumi/pull/20301 )
- \[cli/import] Use mapped name instead of logical name for resource
references during import code generation
[#​20300](https://redirect.github.com/pulumi/pulumi/pull/20300 )
- \[pkg] Make TypeScript code generation use 'declare' keyword instead
of definite assertion operator, to avoid setting all fields to undefined
when targeting environments new enough
[#​20261](https://redirect.github.com/pulumi/pulumi/pull/20261 )
- \[sdkgen/nodejs] Make TypeScript a full dependency of local SDKs
[#​20272](https://redirect.github.com/pulumi/pulumi/pull/20272 )
##### Miscellaneous
- \[build] Updates protobuf and grpc to v5, bumping dependencies in the
Go, Node.js, and Python SDKs
[#​19588](https://redirect.github.com/pulumi/pulumi/pull/19588 )
- \[build] Update latest Go version to 1.25
[#​20284](https://redirect.github.com/pulumi/pulumi/pull/20284 )
- \[sdkgen/nodejs] Target ES2020 for generated SDKs
[#​20276](https://redirect.github.com/pulumi/pulumi/pull/20276 )
###
[`v3.189.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31890-2025-08-12 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.188.0...v3.189.0 )
##### Features
- \[sdk] Remove CacheMS from CLIVersionResponse
[#​20264](https://redirect.github.com/pulumi/pulumi/pull/20264 )
- \[sdk/go] Calculate PluginInfo.Size on demand
[#​20241](https://redirect.github.com/pulumi/pulumi/pull/20241 )
- \[auto/python] Surface `json` option to `pulumi preview` calls in
Python when using the `pulumi.automation` package.
[#​20233](https://redirect.github.com/pulumi/pulumi/pull/20233 )
##### Bug Fixes
- \[cli/package] Fix incorrect console URLs being displayed after
publishing a policy
[#​20255](https://redirect.github.com/pulumi/pulumi/pull/20255 )
- \[engine] Fix race when reading plugin stdout
[#​20242](https://redirect.github.com/pulumi/pulumi/pull/20242 )
- \[sdk/nodejs] Fix component providers when using pnpm
[#​20253](https://redirect.github.com/pulumi/pulumi/pull/20253 )
##### Miscellaneous
- \[pkg] Make TypeScript code generation use nullish coalesce operator
for required property checks, as well as state and args accessing
whenever sensible
- \[sdk/nodejs] Fix swapped stderr/stdout callback comments in
PreviewOptions interface
[#​20250](https://redirect.github.com/pulumi/pulumi/pull/20250 )
- \[sdkgen] Don’t create empty maps for language specific overrides
[#​20237](https://redirect.github.com/pulumi/pulumi/pull/20237 )
###
[`v3.188.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31880-2025-08-07 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.187.0...v3.188.0 )
##### Features
- \[cli] Add `--remove-backups` flag to `pulumi stack rm` for DIY
backends
[#​20203](https://redirect.github.com/pulumi/pulumi/pull/20203 )
##### Bug Fixes
- \[cli] Fix cancellation when running via some CLI wrapper tools
[#​20195](https://redirect.github.com/pulumi/pulumi/pull/20195 )
- \[cli] Fix concurrent read/write during plugin downloads
[#​20223](https://redirect.github.com/pulumi/pulumi/pull/20223 )
- \[cli] Restore terminal mode on panic
[#​20224](https://redirect.github.com/pulumi/pulumi/pull/20224 )
- \[engine] Fix panic in refreshes due to concurrent map writes
[#​20206](https://redirect.github.com/pulumi/pulumi/pull/20206 )
- \[sdkgen] Warn about refs of the form
"#/resources/pulumi:providers:<pkg>"
[#​20192](https://redirect.github.com/pulumi/pulumi/pull/20192 )
- \[cli/display] Show changed outputs in preview
[#​20161](https://redirect.github.com/pulumi/pulumi/pull/20161 )
- \[cli/engine] Make `--exclude` correctly handle wildcards in all cases
[#​20158](https://redirect.github.com/pulumi/pulumi/pull/20158 )
- \[sdk/go] Fix running against old CLI versions without
SignalAndWaitForShutdown
[#​20212](https://redirect.github.com/pulumi/pulumi/pull/20212 )
- \[sdk/python] Fix dependency installation in uv workspaces
[#​20218](https://redirect.github.com/pulumi/pulumi/pull/20218 )
##### Miscellaneous
- \[cli] Update pulumi-dotnet to 3.87.0
[#​20222](https://redirect.github.com/pulumi/pulumi/pull/20222 )
- \[cli/env] Bump esc to v0.17.0
[#​20197](https://redirect.github.com/pulumi/pulumi/pull/20197 )
###
[`v3.187.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31870-2025-07-31 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.186.0...v3.187.0 )
##### Features
- \[cli] Support for writing v4 checkpoints/deployments
[#​20159](https://redirect.github.com/pulumi/pulumi/pull/20159 )
- \[cli] Add support for qualified registry template names in `pulumi
new`
[#​20138](https://redirect.github.com/pulumi/pulumi/pull/20138 )
- \[cli/import] Enable `pulumi import` to always `--generate-resources`
when converting `--from` state files
[#​20178](https://redirect.github.com/pulumi/pulumi/pull/20178 )
- \[yaml] Allow config values to be parsed with type `object`
[#​20132](https://redirect.github.com/pulumi/pulumi/pull/20132 )
- \[auto/python] Allow for `on_error` callbacks in commands to capture
stderr incrementally
[#​20019](https://redirect.github.com/pulumi/pulumi/pull/20019 )
- \[sdk/nodejs] Add option of Bun as a package manager
[#​18412](https://redirect.github.com/pulumi/pulumi/pull/18412 )
- \[sdk/nodejs] Copy `getRootDirectory` to the pulumi module
[#​20173](https://redirect.github.com/pulumi/pulumi/pull/20173 )
- \[sdk/python] Copy `get_root_directory` to the pulumi module
[#​20172](https://redirect.github.com/pulumi/pulumi/pull/20172 )
##### Bug Fixes
- \[cli] Fix un-taring registry-backed templates which come in .tar.gz
format
[#​20135](https://redirect.github.com/pulumi/pulumi/pull/20135 )
- \[cli] Stop passing Accept: application/x-tar to registry template
download URLs to avoid signature mismatch
[#​20133](https://redirect.github.com/pulumi/pulumi/pull/20133 )
- \[engine] Fix a panic with `up --refresh --run-program` and resource
replacements
[#​20147](https://redirect.github.com/pulumi/pulumi/pull/20147 )
- \[engine] Untargeted resources in `destroy` now correctly register as
same steps
[#​20061](https://redirect.github.com/pulumi/pulumi/pull/20061 )
- \[cli/engine] Fix hang when waiting for program that would never
complete
[#​20153](https://redirect.github.com/pulumi/pulumi/pull/20153 )
- \[sdk/nodejs] Fix delete hooks in inline automation API programs
[#​20143](https://redirect.github.com/pulumi/pulumi/pull/20143 )
- \[sdk/python] Set features inside construct
[#​20141](https://redirect.github.com/pulumi/pulumi/pull/20141 )
##### Miscellaneous
- \[sdk/nodejs] Bump TypeScript target to ES2020 for plugins and policy
packs
[#​20148](https://redirect.github.com/pulumi/pulumi/pull/20148 )
###
[`v3.186.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31860-2025-07-25 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.185.0...v3.186.0 )
##### Features
- \[engine] Send `Cancel` message to language runtime plugins on engine
shutdown
[#​20007](https://redirect.github.com/pulumi/pulumi/pull/20007 )
- \[engine] Pass stack tags to policy plugins on startup
[#​20084](https://redirect.github.com/pulumi/pulumi/pull/20084 )
- \[yaml] Expose `object` as a possible config type in preparation for
`pulumi-yaml` support
[#​20129](https://redirect.github.com/pulumi/pulumi/pull/20129 )
##### Bug Fixes
- \[cli/engine] --exclude and --exclude-protected flags now work
together correctly for `destroy` commands
[#​20120](https://redirect.github.com/pulumi/pulumi/pull/20120 )
- \[engine] Fix a datarace in the engine event system
[#​20105](https://redirect.github.com/pulumi/pulumi/pull/20105 )
- \[engine] Fix a panic in the engine when running `up --refresh
--run-program` and finding a deleted resource
- \[sdk/nodejs] Avoid "Cannot convert object to primitive value" error
when running into type errors
[#​20092](https://redirect.github.com/pulumi/pulumi/pull/20092 )
- \[sdk/nodejs] Don’t use automatic ESM mode when `—import` or
`—require` is set
[#​20091](https://redirect.github.com/pulumi/pulumi/pull/20091 )
- \[sdk/nodejs] Fix callback server hang & delete hooks in Node.js
[#​20109](https://redirect.github.com/pulumi/pulumi/pull/20109 )
- \[sdk/nodejs] Don’t report leaked promises when we exit abnormally
[#​20128](https://redirect.github.com/pulumi/pulumi/pull/20128 )
- \[cli/package] Force new style Go modules to be written out when using
`package add`
[#​20011](https://redirect.github.com/pulumi/pulumi/pull/20011 )
- \[sdk/python] Run uv sync on uv command
[#​20117](https://redirect.github.com/pulumi/pulumi/pull/20117 )
##### Miscellaneous
- \[yaml] Update yaml to 1.21.3
[#​20118](https://redirect.github.com/pulumi/pulumi/pull/20118 )
###
[`v3.185.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31850-2025-07-21 )
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.184.0...v3.185.0 )
##### Features
- \[cli/{install,package}] Allow using `pulumi package add` with
registry identifiers
[#​19928](https://redirect.github.com/pulumi/pulumi/pull/19928 )
##### Bug Fixes
- \[engine] Fix a snapshot integrity issue with `destroy --run-program`
and resource reads
[#​20078](https://redirect.github.com/pulumi/pulumi/pull/20078 )
- \[sdkgen/python] Remove unnecessary `import copy`
[#​20089](https://redirect.github.com/pulumi/pulumi/pull/20089 )
- \[sdkgen/python] Support properties named "builtins"
[#​20085](https://redirect.github.com/pulumi/pulumi/pull/20085 )
</details>
<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>
###
[`v0.20.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.20.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.19.0...v0.20.0 )
##### Improvements
- Added deletion protection for environments:
- Use `esc env settings set
[<org-name>/][<project-name>/]<environment-name> deletion-protected
true` to enable deletion protection
- Use `esc env settings get
[<org-name>/][<project-name>/]<environment-name> [deletion-protected]`
to check the current status
- When enabled, environments cannot be deleted until protection is
disabled
- Deletion protection is disabled by default for new environments
##### Bug Fixes
- Environment declarations are now returned even in the face of syntax
errors.
##### Breaking changes
###
[`v0.19.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.19.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.18.0...v0.19.0 )
##### Improvements
- Added support for Open Approvals
[#​592](https://redirect.github.com/pulumi/esc/pull/592 )
##### Bug Fixes
##### Breaking changes
###
[`v0.18.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.18.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.17.0...v0.18.0 )
##### Improvements
- Added support for `fn::concat` built-in function to concatenate
arrays.
[#​582](https://redirect.github.com/pulumi/esc/pull/582 )
##### Bug Fixes
##### Breaking changes
</details>
<details>
<summary>pulumi/esc-action (pulumi/esc-action)</summary>
###
[`v1.5.0`](https://redirect.github.com/pulumi/esc-action/releases/tag/v1.5.0 )
[Compare
Source](https://redirect.github.com/pulumi/esc-action/compare/v1.4.0...v1.5.0 )
- Fix line parsing when "=" is present
[https://github.com/pulumi/esc-action/pull/30 ](https://redirect.github.com/pulumi/esc-action/pull/30 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMjY0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImltcGFjdC9uby1jaGFuZ2Vsb2ctcmVxdWlyZWQiXX0=-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2025-11-20 21:38:09 +00:00
pulumi-renovate[bot]
f1ff9e765f
Update vulnerable dependencies [SECURITY] ( #671 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/containerd/containerd/v2](https://redirect.github.com/containerd/containerd )
| indirect | patch | `v2.0.3` -> `v2.0.7` |
|
[github.com/go-viper/mapstructure/v2](https://redirect.github.com/go-viper/mapstructure )
| indirect | minor | `v2.0.0` -> `v2.4.0` |
| [github.com/ulikunitz/xz](https://redirect.github.com/ulikunitz/xz ) |
indirect | patch | `v0.5.12` -> `v0.5.15` |
| golang.org/x/crypto | indirect | minor | `v0.39.0` -> `v0.45.0` |
### GitHub Vulnerability Alerts
####
[CVE-2024-40635](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg )
### Impact
A bug was found in containerd where containers launched with a User set
as a `UID:GID` larger than the maximum 32-bit signed integer can cause
an overflow condition where the container ultimately runs as root (UID
0). This could cause unexpected behavior for environments that require
containers to run as a non-root user.
### Patches
This bug has been fixed in the following containerd versions:
* 2.0.4 (Fixed in
1a43cb6a10 )
* 1.7.27 (Fixed in
05044ec0a9 )
* 1.6.38 (Fixed in
cf158e884c )
Users should update to these versions to resolve the issue.
### Workarounds
Ensure that only trusted images are used and that only trusted users
have permissions to import images.
### Credits
The containerd project would like to thank [Benjamin
Koltermann](https://redirect.github.com/p4ck3t0 ) and
[emxll](https://redirect.github.com/emxll ) for responsibly disclosing
this issue in accordance with the [containerd security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
### References
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635
### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
####
[CVE-2025-47291](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff )
# Impact
A bug was found in the containerd's CRI implementation where containerd
doesn't put usernamespaced containers under the Kubernetes' cgroup
hierarchy, therefore some Kubernetes limits are not honored. This may
cause a denial of service of the Kubernetes node.
# Patches
This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should
update to these versions to resolve the issue.
# Workarounds
Disable usernamespaced pods in Kubernetes temporarily.
# Credits
The containerd project would like to thank Rodrigo Campos Catelin and
Piotr Rogowski for responsibly disclosing this issue in accordance with
the [containerd security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
# For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at security@containerd.io
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
####
[CVE-2024-25621](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w )
### Impact
An overly broad default permission vulnerability was found in
containerd.
- `/var/lib/containerd` was created with the permission bits 0o711,
while it should be created with 0o700
- Allowed local users on the host to potentially access the metadata
store and the content store
- `/run/containerd/io.containerd.grpc.v1.cri` was created with 0o755,
while it should be created with 0o700
- Allowed local users on the host to potentially access the contents of
Kubernetes local volumes. The contents of volumes might include setuid
binaries, which could allow a local user on the host to elevate
privileges on the host.
- `/run/containerd/io.containerd.sandbox.controller.v1.shim` was created
with 0o711, while it should be created with 0o700
The directory paths may differ depending on the daemon configuration.
When the `temp` directory path is specified in the daemon configuration,
that directory was also created with 0o711, while it should be created
with 0o700.
### Patches
This bug has been fixed in the following containerd versions:
* 2.2.0
* 2.1.5
* 2.0.7
* 1.7.29
Users should update to these versions to resolve the issue.
These updates automatically change the permissions of the existing
directories.
> [!NOTE]
>
> `/run/containerd` and `/run/containerd/io.containerd.runtime.v2.task`
are still created with 0o711.
> This is an expected behavior for supporting userns-remapped
containers.
### Workarounds
The system administrator on the host can manually chmod the directories
to not
have group or world accessible permisisons:
```
chmod 700 /var/lib/containerd
chmod 700 /run/containerd/io.containerd.grpc.v1.cri
chmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim
```
An alternative mitigation would be to run containerd in [rootless
mode](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md ).
### Credits
The containerd project would like to thank David Leadbeater for
responsibly disclosing this issue in accordance with the [containerd
security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
####
[CVE-2025-64329](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 )
### Impact
A bug was found in containerd's CRI Attach implementation where a user
can exhaust memory on the host due to goroutine leaks.
Repetitive calls of CRI Attach (e.g., [`kubectl
attach`](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_attach/ ))
could increase the memory usage of containerd.
### Patches
This bug has been fixed in the following containerd versions:
* 2.2.0
* 2.1.5
* 2.0.7
* 1.7.29
Users should update to these versions to resolve the issue.
### Workarounds
Set up an admission controller to control accesses to `pods/attach`
resources.
e.g., [Validating Admission
Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ ).
### Credits
The containerd project would like to thank @​Wheat2018 for
responsibly disclosing this issue in accordance with the [containerd
security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
### References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329
### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
---
### containerd has an integer overflow in User ID handling in
github.com/containerd/containerd
[CVE-2024-40635](https://nvd.nist.gov/vuln/detail/CVE-2024-40635 ) /
[GHSA-265r-hfxg-fhmg](https://redirect.github.com/advisories/GHSA-265r-hfxg-fhmg )
/ [GO-2025-3528](https://pkg.go.dev/vuln/GO-2025-3528 )
<details>
<summary>More information</summary>
#### Details
containerd has an integer overflow in User ID handling in
github.com/containerd/containerd
#### Severity
Unknown
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg )
-
[05044ec0a9 )
-
[1a43cb6a10 )
-
[cf158e884c )
This data is provided by
[OSV](https://osv.dev/vulnerability/GO-2025-3528 ) and the [Go
Vulnerability Database](https://redirect.github.com/golang/vulndb )
([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license )).
</details>
---
### containerd has an integer overflow in User ID handling
[CVE-2024-40635](https://nvd.nist.gov/vuln/detail/CVE-2024-40635 ) /
[GHSA-265r-hfxg-fhmg](https://redirect.github.com/advisories/GHSA-265r-hfxg-fhmg )
/ [GO-2025-3528](https://pkg.go.dev/vuln/GO-2025-3528 )
<details>
<summary>More information</summary>
#### Details
##### Impact
A bug was found in containerd where containers launched with a User set
as a `UID:GID` larger than the maximum 32-bit signed integer can cause
an overflow condition where the container ultimately runs as root (UID
0). This could cause unexpected behavior for environments that require
containers to run as a non-root user.
##### Patches
This bug has been fixed in the following containerd versions:
* 2.0.4 (Fixed in
1a43cb6a10 )
* 1.7.27 (Fixed in
05044ec0a9 )
* 1.6.38 (Fixed in
cf158e884c )
Users should update to these versions to resolve the issue.
##### Workarounds
Ensure that only trusted images are used and that only trusted users
have permissions to import images.
##### Credits
The containerd project would like to thank [Benjamin
Koltermann](https://redirect.github.com/p4ck3t0 ) and
[emxll](https://redirect.github.com/emxll ) for responsibly disclosing
this issue in accordance with the [containerd security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
##### References
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635
##### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
#### Severity
- CVSS Score: 4.6 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N`
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg )
-
[https://nvd.nist.gov/vuln/detail/CVE-2024-40635 ](https://nvd.nist.gov/vuln/detail/CVE-2024-40635 )
-
[05044ec0a9 )
-
[1a43cb6a10 )
-
[cf158e884c )
-
[https://github.com/containerd/containerd ](https://redirect.github.com/containerd/containerd )
-
[https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html ](https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-265r-hfxg-fhmg ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
---
### containerd CRI plugin: Incorrect cgroup hierarchy assignment for
containers running in usernamespaced Kubernetes pods.
[CVE-2025-47291](https://nvd.nist.gov/vuln/detail/CVE-2025-47291 ) /
[GHSA-cxfp-7pvr-95ff](https://redirect.github.com/advisories/GHSA-cxfp-7pvr-95ff )
/ [GO-2025-3701](https://pkg.go.dev/vuln/GO-2025-3701 )
<details>
<summary>More information</summary>
#### Details
##### Impact
A bug was found in the containerd's CRI implementation where containerd
doesn't put usernamespaced containers under the Kubernetes' cgroup
hierarchy, therefore some Kubernetes limits are not honored. This may
cause a denial of service of the Kubernetes node.
##### Patches
This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should
update to these versions to resolve the issue.
##### Workarounds
Disable usernamespaced pods in Kubernetes temporarily.
##### Credits
The containerd project would like to thank Rodrigo Campos Catelin and
Piotr Rogowski for responsibly disclosing this issue in accordance with
the [containerd security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
##### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at security@containerd.io
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
#### Severity
- CVSS Score: Unknown
- Vector String:
`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U`
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff )
-
[https://nvd.nist.gov/vuln/detail/CVE-2025-47291 ](https://nvd.nist.gov/vuln/detail/CVE-2025-47291 )
-
[https://github.com/containerd/containerd ](https://redirect.github.com/containerd/containerd )
-
[https://pkg.go.dev/vuln/GO-2025-3701 ](https://pkg.go.dev/vuln/GO-2025-3701 )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-cxfp-7pvr-95ff ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
---
### Incorrect cgroup assignment for containers running in usernamespaced
Kubernetes pods in github.com/containerd/containerd
[CVE-2025-47291](https://nvd.nist.gov/vuln/detail/CVE-2025-47291 ) /
[GHSA-cxfp-7pvr-95ff](https://redirect.github.com/advisories/GHSA-cxfp-7pvr-95ff )
/ [GO-2025-3701](https://pkg.go.dev/vuln/GO-2025-3701 )
<details>
<summary>More information</summary>
#### Details
Incorrect cgroup assignment for containers running in usernamespaced
Kubernetes pods in github.com/containerd/containerd
#### Severity
Unknown
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff )
This data is provided by
[OSV](https://osv.dev/vulnerability/GO-2025-3701 ) and the [Go
Vulnerability Database](https://redirect.github.com/golang/vulndb )
([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license )).
</details>
---
### containerd affected by a local privilege escalation via wide
permissions on CRI directory
[CVE-2024-25621](https://nvd.nist.gov/vuln/detail/CVE-2024-25621 ) /
[GHSA-pwhc-rpq9-4c8w](https://redirect.github.com/advisories/GHSA-pwhc-rpq9-4c8w )
<details>
<summary>More information</summary>
#### Details
##### Impact
An overly broad default permission vulnerability was found in
containerd.
- `/var/lib/containerd` was created with the permission bits 0o711,
while it should be created with 0o700
- Allowed local users on the host to potentially access the metadata
store and the content store
- `/run/containerd/io.containerd.grpc.v1.cri` was created with 0o755,
while it should be created with 0o700
- Allowed local users on the host to potentially access the contents of
Kubernetes local volumes. The contents of volumes might include setuid
binaries, which could allow a local user on the host to elevate
privileges on the host.
- `/run/containerd/io.containerd.sandbox.controller.v1.shim` was created
with 0o711, while it should be created with 0o700
The directory paths may differ depending on the daemon configuration.
When the `temp` directory path is specified in the daemon configuration,
that directory was also created with 0o711, while it should be created
with 0o700.
##### Patches
This bug has been fixed in the following containerd versions:
* 2.2.0
* 2.1.5
* 2.0.7
* 1.7.29
Users should update to these versions to resolve the issue.
These updates automatically change the permissions of the existing
directories.
> [!NOTE]
>
> `/run/containerd` and `/run/containerd/io.containerd.runtime.v2.task`
are still created with 0o711.
> This is an expected behavior for supporting userns-remapped
containers.
##### Workarounds
The system administrator on the host can manually chmod the directories
to not
have group or world accessible permisisons:
```
chmod 700 /var/lib/containerd
chmod 700 /run/containerd/io.containerd.grpc.v1.cri
chmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim
```
An alternative mitigation would be to run containerd in [rootless
mode](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md ).
##### Credits
The containerd project would like to thank David Leadbeater for
responsibly disclosing this issue in accordance with the [containerd
security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
##### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
#### Severity
- CVSS Score: 7.3 / 10 (High)
- Vector String: `CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w )
-
[https://nvd.nist.gov/vuln/detail/CVE-2024-25621 ](https://nvd.nist.gov/vuln/detail/CVE-2024-25621 )
-
[7c59e8e9e9 )
-
[https://github.com/containerd/containerd ](https://redirect.github.com/containerd/containerd )
-
[https://github.com/containerd/containerd/blob/main/docs/rootless.md ](https://redirect.github.com/containerd/containerd/blob/main/docs/rootless.md )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-pwhc-rpq9-4c8w ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
---
### containerd CRI server: Host memory exhaustion through Attach
goroutine leak
[CVE-2025-64329](https://nvd.nist.gov/vuln/detail/CVE-2025-64329 ) /
[GHSA-m6hq-p25p-ffr2](https://redirect.github.com/advisories/GHSA-m6hq-p25p-ffr2 )
<details>
<summary>More information</summary>
#### Details
##### Impact
A bug was found in containerd's CRI Attach implementation where a user
can exhaust memory on the host due to goroutine leaks.
Repetitive calls of CRI Attach (e.g., [`kubectl
attach`](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_attach/ ))
could increase the memory usage of containerd.
##### Patches
This bug has been fixed in the following containerd versions:
* 2.2.0
* 2.1.5
* 2.0.7
* 1.7.29
Users should update to these versions to resolve the issue.
##### Workarounds
Set up an admission controller to control accesses to `pods/attach`
resources.
e.g., [Validating Admission
Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ ).
##### Credits
The containerd project would like to thank @​Wheat2018 for
responsibly disclosing this issue in accordance with the [containerd
security
policy](https://redirect.github.com/containerd/project/blob/main/SECURITY.md ).
##### References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329
##### For more information
If you have any questions or comments about this advisory:
* Open an issue in
[containerd](https://redirect.github.com/containerd/containerd/issues/new/choose )
* Email us at [security@containerd.io ](mailto:security@containerd.io )
To report a security issue in containerd:
* [Report a new
vulnerability](https://redirect.github.com/containerd/containerd/security/advisories/new )
#### Severity
- CVSS Score: Unknown
- Vector String:
`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N`
#### References
-
[https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 ](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 )
-
[https://nvd.nist.gov/vuln/detail/CVE-2025-64329 ](https://nvd.nist.gov/vuln/detail/CVE-2025-64329 )
-
[083b53cd6f )
-
[https://github.com/containerd/containerd ](https://redirect.github.com/containerd/containerd )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-m6hq-p25p-ffr2 ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
####
[GHSA-fv92-fjc5-jj9h](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h )
### Summary
Use of this library in a security-critical context may result in leaking
sensitive information, if used to process sensitive fields.
### Details
OpenBao (and presumably HashiCorp Vault) have surfaced error messages
from `mapstructure` as follows:
98c3a59c04/sdk/framework/field_data.go (L43-L50)
```go
_, _, err := d.getPrimitive(field, schema)
if err != nil {
return fmt.Errorf("error converting input for field %q: %w", field, err)
}
```
where this calls `mapstructure.WeakDecode(...)`:
98c3a59c04/sdk/framework/field_data.go (L181-L193)
```go
func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) {
raw, ok := d.Raw[k]
if !ok {
return nil, false, nil
}
switch t := schema.Type; t {
case TypeBool:
var result bool
if err := mapstructure.WeakDecode(raw, &result); err != nil {
return nil, false, err
}
return result, true, nil
```
Notably, `WeakDecode(...)` eventually calls one of the decode helpers,
which surfaces the original value:
1a66224d5e/mapstructure.go (L679-L686)
1a66224d5e/mapstructure.go (L726-L730)
1a66224d5e/mapstructure.go (L783-L787)
& more.
### PoC
To reproduce with OpenBao:
```
$ podman run -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300
```
and in a new tab:
```
$ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass
Success! Enabled userpass auth method at: userpass/
$ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"password":{"asdf":"my-sensitive-value"}}' "http://localhost:8300/v1/auth/userpass/users/adsf "
{"errors":["error converting input for field \"password\": '' expected type 'string', got unconvertible type 'map[string]interface {}', value: 'map[asdf:my-sensitive-value]'"]}
```
### Impact
This is an information disclosure bug with little mitigation. See
https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717
for a previous version. That version was fixed, but this is in the
second part of that error message (starting at `'' expected a map, got
'string'` -- when the field type is `string` and a `map` is provided, we
see the above information leak -- the previous example had a `map` type
field with a `string` value provided).
This was rated 4.5 Medium by HashiCorp in the past iteration.
####
[GHSA-2464-8j7c-4cjm](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm )
### Summary
Use of this library in a security-critical context may result in leaking
sensitive information, if used to process sensitive fields.
### Details
OpenBao (and presumably HashiCorp Vault) have surfaced error messages
from `mapstructure` as follows:
98c3a59c04/sdk/framework/field_data.go (L43-L50)
```go
_, _, err := d.getPrimitive(field, schema)
if err != nil {
return fmt.Errorf("error converting input for field %q: %w", field, err)
}
```
where this calls `mapstructure.WeakDecode(...)`:
98c3a59c04/sdk/framework/field_data.go (L181-L193)
```go
func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) {
raw, ok := d.Raw[k]
if !ok {
return nil, false, nil
}
switch t := schema.Type; t {
case TypeBool:
var result bool
if err := mapstructure.WeakDecode(raw, &result); err != nil {
return nil, false, err
}
return result, true, nil
```
Notably, `WeakDecode(...)` eventually calls one of the decode helpers,
which surfaces the original value via `strconv` helpers:
8c61ec1924/mapstructure.go (L720-L727)
8c61ec1924/mapstructure.go (L791-L798)
8c61ec1924/decode_hooks.go (L180)
& more. These are different code paths than are fixed in the previous
iteration at
https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h .
### PoC
To reproduce with OpenBao:
```
$ podman run --pull=always -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300
```
and in a new tab:
```
$ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass
Success! Enabled userpass auth method at: userpass/
$ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"ttl":"asdf"}' "http://localhost:8200/v1/auth/userpass/users/asdf "
--> server logs:
2025-06-25T21:32:25.101-0500 [ERROR] core: failed to run existence check: error="error converting input for field \"ttl\": time: invalid duration \"asdf\""
```
### Impact
This is an information disclosure bug with little mitigation. See
https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717
for a previous version. That version was fixed, but this is in the
second part of that error message (starting at `'' expected a map, got
'string'` -- when the field type is `string` and a `map` is provided, we
see the above information leak -- the previous example had a `map` type
field with a `string` value provided).
This was rated 4.5 Medium by HashiCorp in the past iteration.
---
### mapstructure May Leak Sensitive Information in Logs When Processing
Malformed Data
[GHSA-fv92-fjc5-jj9h](https://redirect.github.com/advisories/GHSA-fv92-fjc5-jj9h )
/ [GO-2025-3787](https://pkg.go.dev/vuln/GO-2025-3787 )
<details>
<summary>More information</summary>
#### Details
##### Summary
Use of this library in a security-critical context may result in leaking
sensitive information, if used to process sensitive fields.
##### Details
OpenBao (and presumably HashiCorp Vault) have surfaced error messages
from `mapstructure` as follows:
98c3a59c04/sdk/framework/field_data.go (L43-L50)
```go
_, _, err := d.getPrimitive(field, schema)
if err != nil {
return fmt.Errorf("error converting input for field %q: %w", field, err)
}
```
where this calls `mapstructure.WeakDecode(...)`:
98c3a59c04/sdk/framework/field_data.go (L181-L193)
```go
func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) {
raw, ok := d.Raw[k]
if !ok {
return nil, false, nil
}
switch t := schema.Type; t {
case TypeBool:
var result bool
if err := mapstructure.WeakDecode(raw, &result); err != nil {
return nil, false, err
}
return result, true, nil
```
Notably, `WeakDecode(...)` eventually calls one of the decode helpers,
which surfaces the original value:
1a66224d5e/mapstructure.go (L679-L686)
1a66224d5e/mapstructure.go (L726-L730)
1a66224d5e/mapstructure.go (L783-L787)
& more.
##### PoC
To reproduce with OpenBao:
```
$ podman run -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300
```
and in a new tab:
```
$ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass
Success! Enabled userpass auth method at: userpass/
$ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"password":{"asdf":"my-sensitive-value"}}' "http://localhost:8300/v1/auth/userpass/users/adsf "
{"errors":["error converting input for field \"password\": '' expected type 'string', got unconvertible type 'map[string]interface {}', value: 'map[asdf:my-sensitive-value]'"]}
```
##### Impact
This is an information disclosure bug with little mitigation. See
https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717
for a previous version. That version was fixed, but this is in the
second part of that error message (starting at `'' expected a map, got
'string'` -- when the field type is `string` and a `map` is provided, we
see the above information leak -- the previous example had a `map` type
field with a `string` value provided).
This was rated 4.5 Medium by HashiCorp in the past iteration.
#### Severity
- CVSS Score: 5.3 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`
#### References
-
[https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h ](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h )
-
[https://github.com/go-viper/mapstructure ](https://redirect.github.com/go-viper/mapstructure )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-fv92-fjc5-jj9h ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
---
### May leak sensitive information in logs when processing malformed
data in github.com/go-viper/mapstructure
[GHSA-fv92-fjc5-jj9h](https://redirect.github.com/advisories/GHSA-fv92-fjc5-jj9h )
/ [GO-2025-3787](https://pkg.go.dev/vuln/GO-2025-3787 )
<details>
<summary>More information</summary>
#### Details
May leak sensitive information in logs when processing malformed data in
github.com/go-viper/mapstructure
#### Severity
Unknown
#### References
-
[https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h ](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h )
This data is provided by
[OSV](https://osv.dev/vulnerability/GO-2025-3787 ) and the [Go
Vulnerability Database](https://redirect.github.com/golang/vulndb )
([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license )).
</details>
---
### Go-viper's mapstructure May Leak Sensitive Information in Logs in
github.com/go-viper/mapstructure
[GHSA-2464-8j7c-4cjm](https://redirect.github.com/advisories/GHSA-2464-8j7c-4cjm )
/ [GO-2025-3900](https://pkg.go.dev/vuln/GO-2025-3900 )
<details>
<summary>More information</summary>
#### Details
Go-viper's mapstructure May Leak Sensitive Information in Logs in
github.com/go-viper/mapstructure
#### Severity
Unknown
#### References
-
[https://github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm ](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm )
-
[742921c9ba )
This data is provided by
[OSV](https://osv.dev/vulnerability/GO-2025-3900 ) and the [Go
Vulnerability Database](https://redirect.github.com/golang/vulndb )
([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license )).
</details>
---
### go-viper's mapstructure May Leak Sensitive Information in Logs When
Processing Malformed Data
[GHSA-2464-8j7c-4cjm](https://redirect.github.com/advisories/GHSA-2464-8j7c-4cjm )
/ [GO-2025-3900](https://pkg.go.dev/vuln/GO-2025-3900 )
<details>
<summary>More information</summary>
#### Details
##### Summary
Use of this library in a security-critical context may result in leaking
sensitive information, if used to process sensitive fields.
##### Details
OpenBao (and presumably HashiCorp Vault) have surfaced error messages
from `mapstructure` as follows:
98c3a59c04/sdk/framework/field_data.go (L43-L50)
```go
_, _, err := d.getPrimitive(field, schema)
if err != nil {
return fmt.Errorf("error converting input for field %q: %w", field, err)
}
```
where this calls `mapstructure.WeakDecode(...)`:
98c3a59c04/sdk/framework/field_data.go (L181-L193)
```go
func (d *FieldData) getPrimitive(k string, schema *FieldSchema) (interface{}, bool, error) {
raw, ok := d.Raw[k]
if !ok {
return nil, false, nil
}
switch t := schema.Type; t {
case TypeBool:
var result bool
if err := mapstructure.WeakDecode(raw, &result); err != nil {
return nil, false, err
}
return result, true, nil
```
Notably, `WeakDecode(...)` eventually calls one of the decode helpers,
which surfaces the original value via `strconv` helpers:
8c61ec1924/mapstructure.go (L720-L727)
8c61ec1924/mapstructure.go (L791-L798)
8c61ec1924/decode_hooks.go (L180)
& more. These are different code paths than are fixed in the previous
iteration at
https://github.com/go-viper/mapstructure/security/advisories/GHSA-fv92-fjc5-jj9h .
##### PoC
To reproduce with OpenBao:
```
$ podman run --pull=always -p 8300:8300 openbao/openbao:latest server -dev -dev-root-token-id=root -dev-listen-address=0.0.0.0:8300
```
and in a new tab:
```
$ BAO_TOKEN=root BAO_ADDR=http://localhost:8300 bao auth enable userpass
Success! Enabled userpass auth method at: userpass/
$ curl -X PUT -H "X-Vault-Request: true" -H "X-Vault-Token: root" -d '{"ttl":"asdf"}' "http://localhost:8200/v1/auth/userpass/users/asdf "
--> server logs:
2025-06-25T21:32:25.101-0500 [ERROR] core: failed to run existence check: error="error converting input for field \"ttl\": time: invalid duration \"asdf\""
```
##### Impact
This is an information disclosure bug with little mitigation. See
https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717
for a previous version. That version was fixed, but this is in the
second part of that error message (starting at `'' expected a map, got
'string'` -- when the field type is `string` and a `map` is provided, we
see the above information leak -- the previous example had a `map` type
field with a `string` value provided).
This was rated 4.5 Medium by HashiCorp in the past iteration.
#### Severity
- CVSS Score: 5.3 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`
#### References
-
[https://github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm ](https://redirect.github.com/go-viper/mapstructure/security/advisories/GHSA-2464-8j7c-4cjm )
-
[742921c9ba )
-
[https://github.com/go-viper/mapstructure ](https://redirect.github.com/go-viper/mapstructure )
-
[https://pkg.go.dev/vuln/GO-2025-3900 ](https://pkg.go.dev/vuln/GO-2025-3900 )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-2464-8j7c-4cjm ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
####
[CVE-2025-58058](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 )
### Summary
It is possible to put data in front of an LZMA-encoded byte stream
without detecting the situation while reading the header. This can lead
to increased memory consumption because the current implementation
allocates the full decoding buffer directly after reading the header.
The LZMA header doesn't include a magic number or has a checksum to
detect such an issue according to the
[specification](https://redirect.github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt ).
Note that the code recognizes the issue later while reading the stream,
but at this time the memory allocation has already been done.
### Mitigations
The release v0.5.15 includes following mitigations:
- The ReaderConfig DictCap field is now interpreted as a limit for the
dictionary size.
- The default is 2 Gigabytes - 1 byte (2^31-1 bytes).
- Users can check with the [Reader.Header] method what the actual values
are in their LZMA files and set a smaller limit using ReaderConfig.
- The dictionary size will not exceed the larger of the file size and
the minimum dictionary size. This is another measure to prevent huge
memory allocations for the dictionary.
- The code supports stream sizes only up to a pebibyte (1024^5).
Note that the original v0.5.14 version had a compiler error for 32 bit
platforms, which has been fixed by v0.5.15.
### Methods affected
Only software that uses
[lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader )
or
[lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader )
is affected. There is no issue for software using the xz functionality.
I thank @​GregoryBuligin for his report, which is provided below.
### Summary
When unpacking a large number of LZMA archives, even in a single
goroutine, if the first byte of the archive file is 0 (a zero byte added
to the beginning), an error __writeMatch: distance out of range__
occurs. Memory consumption spikes sharply, and the GC clearly cannot
handle this situation.
### Details
Judging by the error __writeMatch: distance out of range__, the problems
occur in the code around this function.
c8314b8f21/lzma/decoderdict.go (L81)
### PoC
Run a function similar to this one in 1 or several goroutines on a
multitude of LZMA archives that have a 0 (a zero byte) added to the
beginning.
```
const ProjectLocalPath = "some/path"
const TmpDir = "tmp"
func UnpackLZMA(lzmaFile string) error {
file, err := os.Open(lzmaFile)
if err != nil {
return err
}
defer file.Close()
reader, err := lzma.NewReader(bufio.NewReader(file))
if err != nil {
return err
}
tmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix)
if err != nil {
return err
}
defer func() {
tmpFile.Close()
_ = os.Remove(tmpFile.Name())
}()
sha256Hasher := sha256.New()
multiWriter := io.MultiWriter(tmpFile, sha256Hasher)
if _, err = io.Copy(multiWriter, reader); err != nil {
return err
}
unpackHash := hex.EncodeToString(sha256Hasher.Sum(nil))
unpackDir := filepath.Join(
ProjectLocalPath, unpackHash[:2],
)
_ = os.MkdirAll(unpackDir, DirPerm)
unpackPath := filepath.Join(unpackDir, unpackHash)
return os.Rename(tmpFile.Name(), unpackPath)
}
```
### Impact
Servers with a small amount of RAM that download and unpack a large
number of unverified LZMA archives
---
### github.com/ulikunitz/xz leaks memory when decoding a corrupted
multiple LZMA archives
[CVE-2025-58058](https://nvd.nist.gov/vuln/detail/CVE-2025-58058 ) /
[GHSA-jc7w-c686-c4v9](https://redirect.github.com/advisories/GHSA-jc7w-c686-c4v9 )
/ [GO-2025-3922](https://pkg.go.dev/vuln/GO-2025-3922 )
<details>
<summary>More information</summary>
#### Details
##### Summary
It is possible to put data in front of an LZMA-encoded byte stream
without detecting the situation while reading the header. This can lead
to increased memory consumption because the current implementation
allocates the full decoding buffer directly after reading the header.
The LZMA header doesn't include a magic number or has a checksum to
detect such an issue according to the
[specification](https://redirect.github.com/jljusten/LZMA-SDK/blob/master/DOC/lzma-specification.txt ).
Note that the code recognizes the issue later while reading the stream,
but at this time the memory allocation has already been done.
##### Mitigations
The release v0.5.15 includes following mitigations:
- The ReaderConfig DictCap field is now interpreted as a limit for the
dictionary size.
- The default is 2 Gigabytes - 1 byte (2^31-1 bytes).
- Users can check with the [Reader.Header] method what the actual values
are in their LZMA files and set a smaller limit using ReaderConfig.
- The dictionary size will not exceed the larger of the file size and
the minimum dictionary size. This is another measure to prevent huge
memory allocations for the dictionary.
- The code supports stream sizes only up to a pebibyte (1024^5).
Note that the original v0.5.14 version had a compiler error for 32 bit
platforms, which has been fixed by v0.5.15.
##### Methods affected
Only software that uses
[lzma.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#NewReader )
or
[lzma.ReaderConfig.NewReader](https://pkg.go.dev/github.com/ulikunitz/xz/lzma#ReaderConfig.NewReader )
is affected. There is no issue for software using the xz functionality.
I thank @​GregoryBuligin for his report, which is provided below.
##### Summary
When unpacking a large number of LZMA archives, even in a single
goroutine, if the first byte of the archive file is 0 (a zero byte added
to the beginning), an error __writeMatch: distance out of range__
occurs. Memory consumption spikes sharply, and the GC clearly cannot
handle this situation.
##### Details
Judging by the error __writeMatch: distance out of range__, the problems
occur in the code around this function.
c8314b8f21/lzma/decoderdict.go (L81)
##### PoC
Run a function similar to this one in 1 or several goroutines on a
multitude of LZMA archives that have a 0 (a zero byte) added to the
beginning.
```
const ProjectLocalPath = "some/path"
const TmpDir = "tmp"
func UnpackLZMA(lzmaFile string) error {
file, err := os.Open(lzmaFile)
if err != nil {
return err
}
defer file.Close()
reader, err := lzma.NewReader(bufio.NewReader(file))
if err != nil {
return err
}
tmpFile, err := os.CreateTemp(TmpDir, TmpLZMAPrefix)
if err != nil {
return err
}
defer func() {
tmpFile.Close()
_ = os.Remove(tmpFile.Name())
}()
sha256Hasher := sha256.New()
multiWriter := io.MultiWriter(tmpFile, sha256Hasher)
if _, err = io.Copy(multiWriter, reader); err != nil {
return err
}
unpackHash := hex.EncodeToString(sha256Hasher.Sum(nil))
unpackDir := filepath.Join(
ProjectLocalPath, unpackHash[:2],
)
_ = os.MkdirAll(unpackDir, DirPerm)
unpackPath := filepath.Join(unpackDir, unpackHash)
return os.Rename(tmpFile.Name(), unpackPath)
}
```
##### Impact
Servers with a small amount of RAM that download and unpack a large
number of unverified LZMA archives
#### Severity
- CVSS Score: 5.3 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`
#### References
-
[https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 ](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 )
-
[https://nvd.nist.gov/vuln/detail/CVE-2025-58058 ](https://nvd.nist.gov/vuln/detail/CVE-2025-58058 )
-
[88ddf1d0d9 )
-
[https://github.com/ulikunitz/xz ](https://redirect.github.com/ulikunitz/xz )
This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-jc7w-c686-c4v9 ) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database )
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md )).
</details>
---
### Memory leaks when decoding a corrupted multiple LZMA archives in
github.com/ulikunitz/xz
[CVE-2025-58058](https://nvd.nist.gov/vuln/detail/CVE-2025-58058 ) /
[GHSA-jc7w-c686-c4v9](https://redirect.github.com/advisories/GHSA-jc7w-c686-c4v9 )
/ [GO-2025-3922](https://pkg.go.dev/vuln/GO-2025-3922 )
<details>
<summary>More information</summary>
#### Details
Memory leaks when decoding a corrupted multiple LZMA archives in
github.com/ulikunitz/xz
#### Severity
Unknown
#### References
-
[https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 ](https://redirect.github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 )
-
[88ddf1d0d9 )
This data is provided by
[OSV](https://osv.dev/vulnerability/GO-2025-3922 ) and the [Go
Vulnerability Database](https://redirect.github.com/golang/vulndb )
([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license )).
</details>
#### [CVE-2025-58181](https://nvd.nist.gov/vuln/detail/CVE-2025-58181 )
SSH servers parsing GSSAPI authentication requests do not validate the
number of mechanisms specified in the request, allowing an attacker to
cause unbounded memory consumption.
#### [CVE-2025-47914](https://nvd.nist.gov/vuln/detail/CVE-2025-47914 )
SSH Agent servers do not validate the size of messages when processing
new identity requests, which may cause the program to panic if the
message is malformed due to an out of bounds read.
---
### Release Notes
<details>
<summary>containerd/containerd
(github.com/containerd/containerd/v2)</summary>
###
[`v2.0.7`](https://redirect.github.com/containerd/containerd/releases/tag/v2.0.7 ):
containerd 2.0.7
[Compare
Source](https://redirect.github.com/containerd/containerd/compare/v2.0.6...v2.0.7 )
Welcome to the v2.0.7 release of containerd!
The seventh patch release for containerd 2.0 includes various bug fixes
and updates.
##### Security Updates
- **containerd**
-
[**GHSA-pwhc-rpq9-4c8w**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w )
-
[**GHSA-m6hq-p25p-ffr2**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 )
- **runc**
-
[**GHSA-qw9x-cqr3-wc7r**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r )
-
[**GHSA-cgrx-mc8f-2prm**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm )
-
[**GHSA-9493-h29p-rfm2**](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2 )
##### Highlights
##### Container Runtime Interface (CRI)
- **Disable event subscriber during task cleanup**
([#​12406](https://redirect.github.com/containerd/containerd/pull/12406 ))
- **Add SystemdCgroup to default runtime options**
([#​12254](https://redirect.github.com/containerd/containerd/pull/12254 ))
- **Fix userns with container image VOLUME mounts that need copy**
([#​12241](https://redirect.github.com/containerd/containerd/pull/12241 ))
##### Image Distribution
- **Add dial timeout field to hosts toml configuration**
([#​12136](https://redirect.github.com/containerd/containerd/pull/12136 ))
##### Runtime
- **Update runc binary to v1.3.3**
([#​12479](https://redirect.github.com/containerd/containerd/pull/12479 ))
- **Fix lost container logs from quickly closing io**
([#​12376](https://redirect.github.com/containerd/containerd/pull/12376 ))
- **Create bootstrap.json with 0644 permission**
([#​12184](https://redirect.github.com/containerd/containerd/pull/12184 ))
- **Fix pidfd leak in UnshareAfterEnterUserns**
([#​12178](https://redirect.github.com/containerd/containerd/pull/12178 ))
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues .
##### Contributors
- Austin Vazquez
- Phil Estes
- Rodrigo Campos
- Wei Fu
- Akihiro Suda
- Derek McGowan
- Maksym Pavlenko
- ningmingxiao
- Kirtana Ashok
- Akhil Mohan
- Andrew Halaney
- Jin Dong
- Jose Fernandez
- Mike Baynton
- Philip Laine
- Swagat Bora
- wheat2018
##### Changes
<details><summary>56 commits</summary>
<p>
- Prepare release notes for v2.0.7
([#​12482](https://redirect.github.com/containerd/containerd/pull/12482 ))
-
[`4931e24f1`](4931e24f16 )
Prepare release notes for v2.0.7
-
[`205bc4f2d`](205bc4f2db )
Update mailmap
-
[`5f708b76a`](5f708b76a4 )
Merge commit from fork
-
[`8cd112d82`](8cd112d829 )
Fix directory permissions
-
[`05290b5bc`](05290b5bc8 )
Merge commit from fork
-
[`4d1edf4ad`](4d1edf4add )
fix goroutine leak of container Attach
- Update runc binary to v1.3.3
([#​12479](https://redirect.github.com/containerd/containerd/pull/12479 ))
-
[`b46dc6a67`](b46dc6a67c )
runc: Update runc binary to v1.3.3
- ci: bump Go 1.24.9; 1.25.3
([#​12361](https://redirect.github.com/containerd/containerd/pull/12361 ))
-
[`5e9c82178`](5e9c821780 )
Update GHA runners to use latest images for basic binaries build
-
[`7f59248dc`](7f59248dcd )
Update GHA runners to use latest image for most jobs
-
[`e1373e8a8`](e1373e8a8a )
ci: bump Go 1.24.9, 1.25.3
-
[`e1a910a6a`](e1a910a6a9 )
ci: bump Go 1.24.8; 1.25.2
-
[`fd04b7f17`](fd04b7f176 )
move exclude-dirs to issues.exclude-dirs
-
[`b49377975`](b493779751 )
update golangci-lint to v1.64.2
-
[`6e45022a1`](6e45022a1e )
build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0
-
[`09ce0f2a1`](09ce0f2a1e )
build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2
-
[`de63a740b`](de63a740b8 )
build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
- Fix lost container logs from quickly closing io
([#​12376](https://redirect.github.com/containerd/containerd/pull/12376 ))
-
[`f953ee8a3`](f953ee8a3c )
bugfix:fix container logs lost because io close too quickly
- CI: update Fedora to 43
([#​12448](https://redirect.github.com/containerd/containerd/pull/12448 ))
-
[`f6f15f513`](f6f15f5135 )
CI: update Fedora to 43
- Disable event subscriber during task cleanup
([#​12406](https://redirect.github.com/containerd/containerd/pull/12406 ))
-
[`2a2329cbd`](2a2329cbd0 )
cri/server/podsandbox: disable event subscriber
- CI: skip ubuntu-24.04-arm on private repos
([#​12428](https://redirect.github.com/containerd/containerd/pull/12428 ))
-
[`dfb954743`](dfb9547437 )
CI: skip ubuntu-24.04-arm on private repos
- Remove additional fuzzers from instrumentation repo
([#​12420](https://redirect.github.com/containerd/containerd/pull/12420 ))
-
[`f6b02f6bb`](f6b02f6bb8 )
Remove additional fuzzers from CI
- runc:Update runc binary to v1.3.1
([#​12275](https://redirect.github.com/containerd/containerd/pull/12275 ))
-
[`75c13ee3f`](75c13ee3fc )
runc:Update runc binary to v1.3.1
- Add SystemdCgroup to default runtime options
([#​12254](https://redirect.github.com/containerd/containerd/pull/12254 ))
-
[`427cdd06c`](427cdd06c9 )
add SystemdCgroup to default runtime options
- install-runhcs-shim: fetch target commit instead of tags
([#​12255](https://redirect.github.com/containerd/containerd/pull/12255 ))
-
[`0b35e19fb`](0b35e19fb1 )
install-runhcs-shim: fetch target commit instead of tags
- Fix userns with container image VOLUME mounts that need copy
([#​12241](https://redirect.github.com/containerd/containerd/pull/12241 ))
-
[`3212afc2f`](3212afc2f2 )
integration: Add test for directives with userns
-
[`b855c6e10`](b855c6e103 )
cri: Fix userns with Dockerfile VOLUME mounts that need copy
- Fix overlayfs issues related to user namespace
([#​12223](https://redirect.github.com/containerd/containerd/pull/12223 ))
-
[`05c0c99f4`](05c0c99f43 )
core/mount: Retry unmounting idmapped directories
-
[`afdede4ce`](afdede4ced )
core/mount: Test cleanup of DoPrepareIDMappedOverlay()
-
[`47205f814`](47205f814d )
core/mount: Properly cleanup on doPrepareIDMappedOverlay errors
-
[`6f4abd970`](6f4abd970a )
core/mount: Don't call nil function on errors
-
[`a2f0d65d7`](a2f0d65d78 )
core/mount: Only idmap once per overlayfs, not per layer
-
[`1c32accd7`](1c32accd71 )
Make ovl idmap mounts read-only
- ci: bump Go 1.23.12, 1.24.6
([#​12187](https://redirect.github.com/containerd/containerd/pull/12187 ))
-
[`9e72e91e6`](9e72e91e63 )
ci: bump Go 1.23.12, 1.24.6
- Create bootstrap.json with 0644 permission
([#​12184](https://redirect.github.com/containerd/containerd/pull/12184 ))
-
[`009622e04`](009622e042 )
fix: create bootstrap.json with 0644 permission
- Fix pidfd leak in UnshareAfterEnterUserns
([#​12178](https://redirect.github.com/containerd/containerd/pull/12178 ))
- [`5bec0a332`](https://redirec
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2025-11-20 20:33:06 +00:00
Pulumi Bot
c7ab0e0f35
Update GitHub Actions workflows. ( #669 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 9575e75e5316d699a77abf48a351abe840e1bed5.
2025-11-20 05:54:04 +00:00
pulumi-renovate[bot]
b1e526630c
Update module golang.org/x/crypto to v0.45.0 [SECURITY] ( #668 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.39.0` -> `v0.45.0` |
### GitHub Vulnerability Alerts
#### [CVE-2025-58181](https://nvd.nist.gov/vuln/detail/CVE-2025-58181 )
SSH servers parsing GSSAPI authentication requests do not validate the
number of mechanisms specified in the request, allowing an attacker to
cause unbounded memory consumption.
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through
Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com >
2025-11-20 02:14:14 +00:00
Pulumi Bot
32ecb82eb6
Update GitHub Actions workflows. ( #667 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit f76cbff100ad8e6e3192b379edb5bcf1f536eb3e.
2025-11-15 05:55:02 +00:00
Pulumi Bot
77b931b32c
Update GitHub Actions workflows. ( #666 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit ed916848970fd62ea0f62c7e6ac674d4d5ca05ef.
2025-11-14 05:58:25 +00:00
Pulumi Bot
487acd799c
Update GitHub Actions workflows. ( #663 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 962009a157587c5c11d686e51206a2d312bc4618.
2025-11-11 05:53:59 +00:00
Pulumi Bot
8e273d9f68
Update GitHub Actions workflows. ( #662 )
...
This PR was automatically generated by the
update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt
repo, from commit 52b77e4c448dd747630cff0918ade69cef3b4f16.
2025-11-10 15:47:40 -08:00
Pulumi Bot
faffc8cc45
Update GitHub Actions workflows. ( #633 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 5619381e924fbac90750f41b6a27cadcd11c4c2d.
2025-10-22 05:56:54 +00:00
Alberto Pose
2b1230f252
Introduce ${GOTEST} Makefile variable to override test runner. ( #632 )
...
Allow to use other tools like `gotestsum` locally.
2025-10-20 15:20:48 +01:00
Pulumi Bot
eaf5461bbc
Update GitHub Actions workflows. ( #631 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit f0bcdaf5cb0825e542d0a2eb71f05d538135a9bc.
2025-10-18 05:52:38 +00:00
Alberto Pose
38e65a3f81
Remove URL and Token arguments from CacheFromGitHubActions. ( #626 )
...
Fixes #75
Arguments URL and Token have been removed but `$ACTIONS_CACHE_URL` and
`$ACTIONS_RUNTIME_TOKEN` env variables could be injected if desired.
---------
Co-authored-by: Bryce Lampe <bryce@pulumi.com >
2025-10-17 11:00:40 +01:00
Pulumi Bot
1811524e66
Update GitHub Actions workflows. ( #629 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 16969054030269fefacac22b8536d1f80ed8e2d9.
2025-10-16 05:52:39 +00:00
Pulumi Bot
361335bba0
Update GitHub Actions workflows. ( #628 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 0fccf404186fee66f0a9bb9b53959a52b4812c5e.
2025-10-14 05:54:14 +00:00
Pulumi Bot
49deed7d9c
Update GitHub Actions workflows. ( #627 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit b4e68d0418afb9fa72c1e31347a01f7fae952eff.
2025-10-10 05:51:39 +00:00
Alberto Pose
ff8995c434
Move _index.md and installation-configuration.md into the repo. ( #622 )
...
Related to: https://github.com/pulumi/registry/pull/8814
Make this provider follow the Pulumi official convention of [using the
`_index.md` and
`installation-configuration.md`](https://www.pulumi.com/docs/iac/build-with-pulumi/publishing-packages/#write-documentation ).
2025-10-09 09:34:35 +01:00
Pulumi Bot
c159079132
Update GitHub Actions workflows. ( #624 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 45de636c4cb364e6fc2ab50006d5358239005657.
2025-10-09 05:52:11 +00:00
Pulumi Bot
24ebad1ee5
Update GitHub Actions workflows. ( #623 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 93823adfede429861d981e43f485afda9292376e.
2025-10-08 05:55:33 +00:00
Alberto Pose
40c723d82f
Remove installation of pulumi CLI and golangci-lint from Makefile ( #621 )
...
Installation of runtime and tools should now be done through `mise`.
In addition, the following binaries are included with `pulumi` CLI:
* pulumi-language-go
* pulumi-language-nodejs
* pulumi-language-python
* pulumi-language-java
* pulumi-language-dotnet
* pulumi-converter-yaml
2025-10-07 16:18:53 +01:00
Pulumi Bot
36362d0317
Update GitHub Actions workflows. ( #620 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 23f84aba12118601865d1a686c2c46a4ec3fa729.
2025-10-03 22:26:52 +00:00
Pulumi Bot
0b684b81fb
Update GitHub Actions workflows. ( #619 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 58bbf9b943afc66c10382b6fa89dc3e226f18f20.
2025-10-03 05:53:37 +00:00
Pulumi Bot
ebf4290bb2
Update GitHub Actions workflows. ( #617 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 72d9a2e28cf75e7d1ba2c5e6324d26546c95e4cb.
2025-10-02 05:55:45 +00:00
Pulumi Bot
c7b2867559
Update GitHub Actions workflows. ( #616 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit d2d946e761bab19abc5e5a598d44cf709dae77e9.
2025-10-01 05:54:01 +00:00
Bryce Lampe
5e589f61ec
Upgrade go-provider to 1.1.2 ( #615 )
...
Fixes https://github.com/pulumi/pulumi-docker-build/issues/579 .
2025-09-30 16:40:35 -07:00
Pulumi Bot
5f0c2ede72
Update GitHub Actions workflows. ( #613 )
...
This PR was automatically generated by the
update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt
repo, from commit f16439eadce749cfc5fc959f926069e5943f4640.
2025-09-29 22:24:54 +00:00
Pulumi Bot
d27e6d14db
Update GitHub Actions workflows. ( #612 )
...
This PR was automatically generated by the
update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt
repo, from commit e43a0e1c1f44e3e431240deb0ac363cf172ae9a9.
2025-09-29 15:36:43 -04:00
Cory Hall
6ae16f10ff
chore: update modulePath in ci-mgmt ( #607 )
...
This is needed for https://github.com/pulumi/ci-mgmt/pull/1730
2025-09-29 12:01:37 -04:00
Pulumi Bot
f17e43bad7
Update GitHub Actions workflows. ( #604 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 2b81d6d332c32c7ebc106fb53b745cbbfec266c7.
2025-09-16 05:49:46 +00:00
Pulumi Bot
bce330f598
Update GitHub Actions workflows. ( #603 )
...
This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 0337d8381eace02d1b6fb82d43e3ab543bf5774a.
2025-09-12 23:58:08 +00:00
Pulumi Bot
5107181566
Update GitHub Actions workflows. ( #602 )
...
This PR was automatically generated by the
update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt
repo, from commit c390ce58d72b0eb947d844358c3204353b21839c.
2025-09-11 19:03:02 +00:00