Update first-party Pulumi dependencies (#819)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.231.0` ->
`3.235.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.231.0/3.235.0)
|
|
[github.com/pulumi/providertest](https://redirect.github.com/pulumi/providertest)
| require | minor | `v0.6.0` -> `v0.7.0` |
|
[github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3](https://redirect.github.com/pulumi/pulumi-dotnet)
| require | minor | `v3.103.0` -> `v3.105.0` |
|
[github.com/pulumi/pulumi-go-provider](https://redirect.github.com/pulumi/pulumi-go-provider)
| require | patch | `v1.3.1` -> `v1.3.2` |
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.230.0` -> `v3.234.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>pulumi/pulumi (@​pulumi/pulumi)</summary>
###
[`v3.235.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.235.0)
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.234.0...v3.235.0)
##### 3.235.0 (2026-05-05)
##### Features
- \[cli] Add `pulumi logs decrypt` command for viewing logs
[#​22523](https://redirect.github.com/pulumi/pulumi/pull/22523)
- \[cli] Bundle the `hcl` language host (from pulumi-labs/pulumi-hcl)
[#​22807](https://redirect.github.com/pulumi/pulumi/pull/22807)
- \[cli] Automatically install the `hcl` converter from
pulumi-labs/pulumi-hcl when running `pulumi convert --from hcl`
[#​22816](https://redirect.github.com/pulumi/pulumi/pull/22816)
- \[pcl] Add `read` blocks to PCL to read resources via ID and query
instead of registering them
[#​22641](https://redirect.github.com/pulumi/pulumi/pull/22641)
- \[cli/cloud] Add `pulumi cloud api <op-or-path>` for calling any
Pulumi Cloud API
endpoint, with `--field`/`--header`/`--input`/`--body` flag handling,
path
template binding, content negotiation via `--format`, and `--dry-run`
[#​22771](https://redirect.github.com/pulumi/pulumi/pull/22771)
- \[cli/cloud] Add `--paginate` to `pulumi cloud api`: follow
continuation cursors,
accumulate items into a single JSON envelope, and surface progress
events to stderr with `--emit-events` (page, complete, truncated,
partial_failure, cancelled).
[#​22772](https://redirect.github.com/pulumi/pulumi/pull/22772)
##### Bug Fixes
- \[cli] Fix the `pulumi neo` shell tool to honor the agent-supplied
`timeout` and to terminate the whole process tree (and unblock cmd.Wait)
when the deadline fires, so commands like `kubectl logs -f` no longer
hang Neo indefinitely.
[#​22820](https://redirect.github.com/pulumi/pulumi/pull/22820)
- \[cli] Surface the error and exit when `pulumi neo` fails to create
the underlying task, instead of leaving the TUI stuck in `Thinking…`
[#​22825](https://redirect.github.com/pulumi/pulumi/pull/22825)
- \[codegen/go] Correctly generate `[]pulumi.Asset` & `[]pulumi.Archive`
[#​22827](https://redirect.github.com/pulumi/pulumi/pull/22827)
- \[cli/neo] Exit cleanly when the user presses Ctrl+C twice in `pulumi
neo` instead of hanging until a third press
[#​22821](https://redirect.github.com/pulumi/pulumi/pull/22821)
- \[engine] The engine now caches schemas at `PULUMI_HOME/schemas`, and
will cache for parameterised packages as well
[#​22812](https://redirect.github.com/pulumi/pulumi/pull/22812)
- \[sdk-python] Preserve `__`-prefixed keys (e.g. `__type`
discriminators) across RPC deserialization, matching the behavior of the
other language SDKs
[#​22834](https://redirect.github.com/pulumi/pulumi/pull/22834)
- \[programgen/{nodejs,python}] Fix programgen to emit the right
`length` check for string length
[#​22802](https://redirect.github.com/pulumi/pulumi/pull/22802)
##### Miscellaneous
- \[cli] Replace the Pulumipus mascot in the `pulumi neo` welcome banner
with new Neo-branded ASCII art.
[#​22817](https://redirect.github.com/pulumi/pulumi/pull/22817)
###
[`v3.234.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32340-2026-05-01)
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.233.0...v3.234.0)
##### Features
- \[cli/cloud] Add `pulumi cloud api describe` for inspecting the
parameters, request
body, and response schema of any Pulumi Cloud API operation, with
text, markdown, and JSON output
[#​22770](https://redirect.github.com/pulumi/pulumi/pull/22770)
- \[cli/cloud] Add `pulumi cloud api list` for browsing every endpoint
exposed by the Pulumi
Cloud OpenAPI spec, with table and JSON output
[#​22769](https://redirect.github.com/pulumi/pulumi/pull/22769)
##### Bug Fixes
- \[engine] Revert changes to property path parsing that resulted in
errors for currently valid paths
###
[`v3.233.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32330-2026-04-30)
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.232.0...v3.233.0)
##### Features
- \[auto/python] Expose the auto-generated Pulumi CLI interface as
`workspace.cli_api`
[#​22638](https://redirect.github.com/pulumi/pulumi/pull/22638)
- \[cli] Add encrypted logging to ~/.pulumi/logs; use the
PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
[#​22494](https://redirect.github.com/pulumi/pulumi/pull/22494)
- \[cli] Implement the `filesystem__grep` and
`filesystem__content_replace` local tools
for `pulumi neo`. `grep` runs a regex search across files in the project
root
with an optional `include` glob filter and returns results in
`path:lineno: line`
form. `content_replace` performs a literal multi-file search-and-replace
with a
`file_pattern` glob and `dry_run` preview mode. Both tools skip binary
files,
hidden directories, and `node_modules`, and reject paths outside the
project
root. Their input schemas match the cloud-side tool definitions.
[#​22655](https://redirect.github.com/pulumi/pulumi/pull/22655)
- \[cli] Add `pulumi_preview` and `pulumi_up` as local tools for the
experimental `pulumi neo`
agent. The Neo TUI renders a persistent bordered block for each
operation that
streams changed resources and diagnostics as the engine runs and
finalizes with a
summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.
[#​22697](https://redirect.github.com/pulumi/pulumi/pull/22697)
- \[engine] Add `List` to the provider protocol and schema
[#​22693](https://redirect.github.com/pulumi/pulumi/pull/22693)
##### Bug Fixes
- \[engine] Return a clear error when two installed plugins claim the
same default provider package name (for example, a native `scaleway`
provider alongside a `terraform-provider` bridge parameterized as
`scaleway`) instead of panicking with "Should not have seen an older
plugin if sorting is correct!"
[#​22679](https://redirect.github.com/pulumi/pulumi/pull/22679)
- \[programgen] Do not wrap a `call(...)` on a method whose return type
is marked plain in an Output. Previously
PCL bound every method call's return type as `Output<T>`, which caused
downstream program-gen
to emit broken `.apply(...)`/`.ApplyT(...)` traversals against plain
struct returns (e.g.
methods with `liftSingleValueMethodReturns=true` or
`ReturnTypePlain=true`).
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[backend/diy] When using a backend url containing creds (e.g.
PostgreSQL conn string), mask user:pass as in lock-related error
messages
[#​22701](https://redirect.github.com/pulumi/pulumi/pull/22701)
- \[codegen/go] Generate unqualified `Provider` references for the
package's own provider resource. Previously
the Go codegen always emitted `<pkg>.Provider` even when the reference
appeared inside `<pkg>`
itself, producing identifiers that would not compile. Affects generated
code for method return
types (and other schema positions) that reference
`pulumi:providers:<pkg>`.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[codegen/nodejs] Generate unqualified `Provider` references for the
package's own provider resource when emitting
TypeScript code inside that package. Previously the generator always
qualified the name as
`<pkg>.Provider`, which does not resolve when no `<pkg>` namespace
import is in scope.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[codegen/nodejs] Import the correct class name for a provider
resource. Imports for `pulumi:providers:<pkg>` used
the title-cased package name instead of `Provider`, producing a phantom
identifier that clashed
with the containing package's component/resource classes.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[programgen/nodejs] Emit `await` for `call(...)` invocations of
methods whose return type is marked plain, and
force the generated program into an async `export = async () => ...`
wrapper whenever such a
call is present. The Node SDK returns `Promise<T>` for plain methods;
previously program-gen
used the result directly, which did not match its runtime type.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[codegen/python] Avoid a self-import (`import pulumi_<pkg>` inside
`pulumi_<pkg>/<module>.py`) when referencing
the package's own provider resource. Python referenced the Provider as
`pulumi_<pkg>.Provider`
even inside that package, which caused a circular import at runtime.
[#​22696](https://redirect.github.com/pulumi/pulumi/pull/22696)
- \[sdk/python] Reduce internal `Output[T]` data to a single
`asyncio.Future`
[#​22661](https://redirect.github.com/pulumi/pulumi/pull/22661)
- \[sdkgen/{nodejs,python}] Generate optional input types that accept
undefined/None values
[#​22552](https://redirect.github.com/pulumi/pulumi/pull/22552)
##### Miscellaneous
- \[auto/go] Drop the "With" prefix from generated option helpers so
they match the naming of the existing optXxx packages
[#​22682](https://redirect.github.com/pulumi/pulumi/pull/22682)
###
[`v3.232.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32320-2026-04-22)
[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.231.0...v3.232.0)
##### Features
- \[cli] Add an experimental `pulumi neo` command that creates a Pulumi
Neo agent task in CLI
tool-execution mode and runs the local tool loop. Filesystem and shell
tool calls
issued by the agent run on the user's machine in their working
directory; the
interactive chat continues to happen in the Pulumi Console at the URL
the command
prints. Hidden behind PULUMI_EXPERIMENTAL.
[#​22473](https://redirect.github.com/pulumi/pulumi/pull/22473)
- \[cli] Add support for handling user approval requests in the `pulumi
neo` terminal UI.
When the agent requests confirmation for a sensitive action, the TUI
prompts the
user and forwards their response back to the Pulumi Console. Hidden
behind
PULUMI_EXPERIMENTAL.
[#​22589](https://redirect.github.com/pulumi/pulumi/pull/22589)
- \[cli] Add an interactive terminal UI for `pulumi neo` built with
bubbletea, rendering
agent messages, tool calls, and streaming output in the terminal
alongside the
Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.
[#​22570](https://redirect.github.com/pulumi/pulumi/pull/22570)
- \[cli] Switch logging library from glog to slog.
BREAKING: any `if logging.V(x) {` need to be changed to `if
logging.V(x).Enabled()`
[#​22548](https://redirect.github.com/pulumi/pulumi/pull/22548)
- \[cli] Add a plan-mode toggle to the `pulumi neo` TUI, bound to
Shift+Tab. When
plan mode is on, Neo explores and asks questions without writing files,
running `pulumi up`, or opening PRs, and surfaces an approved plan via a
dedicated approval gate. The toggle must be set before the first message
(plan mode is task-level on the wire); approving the proposed plan exits
plan mode automatically.
[#​22634](https://redirect.github.com/pulumi/pulumi/pull/22634)
- \[cli] The `pulumi neo` TUI now drives its "thinking" spinner off a
single declarative
rule (the spinner stays on until a final event — final assistant
message, approval
request, cancellation, or error — lands), so the indicator no longer
flickers off
when the agent hands off tool calls to the CLI or when streaming text
arrives
between tools. Press `Esc` during a turn to ask the agent to cancel; the
label
switches to "Cancelling..." until the backend acknowledges.
[#​22637](https://redirect.github.com/pulumi/pulumi/pull/22637)
- \[cli] `pulumi neo` now executes the `edit` filesystem tool locally,
matching the schema
and response wording of the upstream mcp-claude-code tool so the agent
sees
identical output whether the call ran on Cloud or CLI. `edit` performs
exact-string
replacement with occurrence-count validation, and creates a new file
when the
target is missing and `old_string` is empty.
[#​22654](https://redirect.github.com/pulumi/pulumi/pull/22654)
##### Bug Fixes
- \[cli] Render user messages in the `pulumi neo` TUI as soon as they're
submitted
instead of waiting for the Pulumi Cloud event stream to echo them back.
The initial prompt passed on the command line also appears in the
transcript at startup. Self-echoes from the server are de-duplicated;
user input that originated from another client (e.g. the web UI on the
same task) still renders.
[#​22629](https://redirect.github.com/pulumi/pulumi/pull/22629)
- \[cli] Wrap warnings, errors, and user-message bubbles to the terminal
width in the
`pulumi neo` TUI. Previously these blocks rendered as single long lines
that
were clipped at the right edge of the viewport. On resize, all
width-dependent
transcript blocks (user messages, warnings, errors, assistant messages)
now
reflow to the new terminal width.
[#​22635](https://redirect.github.com/pulumi/pulumi/pull/22635)
- \[cli/policy] Fix `policy ls` to use the default org name, not
username
[#​22656](https://redirect.github.com/pulumi/pulumi/pull/22656)
- \[engine] Fix provider registry race condition in parallel
delete-before-replace
[#​21487](https://redirect.github.com/pulumi/pulumi/pull/21487)
- \[engine] Signal providers to cancel before closing them during
replacement
- \[sdkgen] Error on 'id' in state inputs
[#​22636](https://redirect.github.com/pulumi/pulumi/pull/22636)
- \[programgen/python] Add necessary casts between types in generated
programs
[#​22567](https://redirect.github.com/pulumi/pulumi/pull/22567)
- \[sdkgen/go] Fix caching of package references to be per-deployment
not per-process
[#​22170](https://redirect.github.com/pulumi/pulumi/pull/22170)
##### Miscellaneous
- \[java] Upgrade java to v1.25.0
[#​22673](https://redirect.github.com/pulumi/pulumi/pull/22673)
- \[auto/go] Generate command methods for the Go Automation API codegen
[#​22612](https://redirect.github.com/pulumi/pulumi/pull/22612)
- \[sdk] Clarify docs on the `remote` parameter of `ComponentResource` /
`Resource` in the Node and Python SDKs
[#​22603](https://redirect.github.com/pulumi/pulumi/pull/22603)
- \[sdk/dotnet] Upgrade dotnet to v3.103.1
[#​22676](https://redirect.github.com/pulumi/pulumi/pull/22676)
- \[yaml] Upgrade yaml to v1.32.0
[#​22674](https://redirect.github.com/pulumi/pulumi/pull/22674)
</details>
<details>
<summary>pulumi/providertest (github.com/pulumi/providertest)</summary>
###
[`v0.7.0`](https://redirect.github.com/pulumi/providertest/releases/tag/v0.7.0)
[Compare
Source](https://redirect.github.com/pulumi/providertest/compare/v0.6.0...v0.7.0)
##### What's Changed
- Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group
across 1 directory by
[@​dependabot](https://redirect.github.com/dependabot)\[bot]
in[https://github.com/pulumi/providertest/pull/159](https://redirect.github.com/pulumi/providertest/pull/159)9
- Fix python_gcp test by adding setuptools dependency by
[@​pose](https://redirect.github.com/pose) in
[https://github.com/pulumi/providertest/pull/167](https://redirect.github.com/pulumi/providertest/pull/167)
- Rename project to python_gcp and update description by
[@​pose](https://redirect.github.com/pose) in
[https://github.com/pulumi/providertest/pull/166](https://redirect.github.com/pulumi/providertest/pull/166)
- fix(pulumitest): start fresh providers per engine operation by
[@​rshade](https://redirect.github.com/rshade) in
[https://github.com/pulumi/providertest/pull/170](https://redirect.github.com/pulumi/providertest/pull/170)
- feat(pulumitest): log pulumi version and plugins on stack creation by
[@​rshade](https://redirect.github.com/rshade) in
[https://github.com/pulumi/providertest/pull/171](https://redirect.github.com/pulumi/providertest/pull/171)
**Full Changelog**:
https://github.com/pulumi/providertest/compare/v0.6.0...v0.7.0
</details>
<details>
<summary>pulumi/pulumi-dotnet
(github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3)</summary>
###
[`v3.105.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31050---2026-05-04)
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.104.0...v3.105.0)
###
[`v3.104.0`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31040---2026-04-29)
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.1...v3.104.0)
##### Improvements
- \[runtime] Support the `getOutput` pcl intrinsic in codegen
[#​977](https://redirect.github.com/pulumi/pulumi-dotnet/pull/977)
###
[`v3.103.1`](https://redirect.github.com/pulumi/pulumi-dotnet/blob/HEAD/CHANGELOG.md#v31031---2026-04-21)
[Compare
Source](https://redirect.github.com/pulumi/pulumi-dotnet/compare/v3.103.0...v3.103.1)
##### Bug Fixes
- \[runtime] Ensure that 'main' is always respected for selecting
projects to run
[#​55](https://redirect.github.com/pulumi/pulumi-dotnet/pull/55)
- \[runtime] Generate compilable C# for resources whose range is an
Output-typed expression such as `length(someInvoke.result)`. The loop is
now wrapped in `.Apply(rangeBody => { ... })` so the loop bound sees a
plain `int`, and `length` on an `Output<ImmutableArray<T>>` is emitted
as the extension method `.Length()` (with parentheses) rather than as a
property.
[#​969](https://redirect.github.com/pulumi/pulumi-dotnet/pull/969)
- \[runtime] Fix codegen for nested `InputMap` literals so the produced
C# compiles
([#​833](https://redirect.github.com/pulumi/pulumi-dotnet/issues/833))
[#​970](https://redirect.github.com/pulumi/pulumi-dotnet/pull/970)
</details>
<details>
<summary>pulumi/pulumi-go-provider
(github.com/pulumi/pulumi-go-provider)</summary>
###
[`v1.3.2`](https://redirect.github.com/pulumi/pulumi-go-provider/releases/tag/v1.3.2)
[Compare
Source](https://redirect.github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2)
#### What's Changed
- Update module github.com/pulumi/pulumi/pkg/v3 to v3.230.0 by
[@​pulumi-renovate](https://redirect.github.com/pulumi-renovate)\[bot]
in[https://github.com/pulumi/pulumi-go-provider/pull/509](https://redirect.github.com/pulumi/pulumi-go-provider/pull/509)9
- Correctly encode & decode `types.AssetOrArchive` by
[@​iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/512](https://redirect.github.com/pulumi/pulumi-go-provider/pull/512)
- Resolve framework version via runtime/debug.ReadBuildInfo by
[@​iwahbe](https://redirect.github.com/iwahbe) in
[https://github.com/pulumi/pulumi-go-provider/pull/514](https://redirect.github.com/pulumi/pulumi-go-provider/pull/514)
**Full Changelog**:
https://github.com/pulumi/pulumi-go-provider/compare/v1.3.1...v1.3.2
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
---------
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: Ian Wahbe <me@iwahbe.com>
0110626c42