pulumi-renovate[bot] d5d676f8ec Update first-party Pulumi dependencies (#558)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.184.0` ->
`3.208.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.184.0/3.208.0)
|
| [github.com/pulumi/esc](https://redirect.github.com/pulumi/esc) |
indirect | minor | `v0.17.0` -> `v0.20.0` |
| [pulumi/esc-action](https://redirect.github.com/pulumi/esc-action) |
action | minor | `v1.4.0` -> `v1.5.0` |

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.208.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.208.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.207.0...v3.208.0)

#### 3.208.0 (2025-11-20)

##### Features

- \[cli] Expose all command flags as env vars (e.g. --refresh can now be
set with PULUMI_OPTION_REFRESH)
[#&#8203;20868](https://redirect.github.com/pulumi/pulumi/pull/20868)

-   \[cli/install] Make `pulumi install` recurse into local packages
[#&#8203;20945](https://redirect.github.com/pulumi/pulumi/pull/20945)

- \[engine] Add a `replacement_trigger` resource option. Any change to
this value between program runs will trigger a replace of the resource
[#&#8203;20936](https://redirect.github.com/pulumi/pulumi/pull/20936)

- \[engine] Add a new builtin `Stash` resource which can be used to save
a value to state
[#&#8203;20819](https://redirect.github.com/pulumi/pulumi/pull/20819)

-   \[protobuf] Add `Language.Template` RPC to protos
[#&#8203;20948](https://redirect.github.com/pulumi/pulumi/pull/20948)

-   \[sdk/go] Add support for `replacement_trigger` in the Go SDK
[#&#8203;20937](https://redirect.github.com/pulumi/pulumi/pull/20937)

##### Bug Fixes

- \[engine] Fix duplicate resource snapshot integrity issue with aliases
[#&#8203;20926](https://redirect.github.com/pulumi/pulumi/pull/20926)

- \[engine] Allow resources marked as `Delete` to be targeted, and take
them into account for dependency calculation
[#&#8203;20962](https://redirect.github.com/pulumi/pulumi/pull/20962)

- \[engine] Fix a panic when previewing and import of a resource that
wants to delete and then replace due to diffs
[#&#8203;20997](https://redirect.github.com/pulumi/pulumi/pull/20997)

-   \[pkg] Include invalid property names in bind errors
[#&#8203;20989](https://redirect.github.com/pulumi/pulumi/pull/20989)

- \[sdk/python] Don’t raise when looking up a stack reference output
that does not exist
[#&#8203;20938](https://redirect.github.com/pulumi/pulumi/pull/20938)

- \[sdkgen/python] Ensure resource args accept typeddicts when no
language info is specified
[#&#8203;20982](https://redirect.github.com/pulumi/pulumi/pull/20982)

##### Miscellaneous

- \[cli] Document the \[template|url] argument in `pulumi up` command
help text
[#&#8203;20996](https://redirect.github.com/pulumi/pulumi/pull/20996)

###
[`v3.207.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32070-2025-11-12)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.206.0...v3.207.0)

##### Features

- \[cli] Log gRPC requests before invoking them in gRPC debug
interceptor
[#&#8203;20817](https://redirect.github.com/pulumi/pulumi/pull/20817)

- \[engine] Add `ReplaceWith` resource option to allow one resource's
replace operations to trigger another's
[#&#8203;20693](https://redirect.github.com/pulumi/pulumi/pull/20693)

-   \[sdkgen/python] Allow all PEP440 version specifiers to be used

##### Bug Fixes

-   \[cli/import] Return errors when an import fails
[#&#8203;20904](https://redirect.github.com/pulumi/pulumi/pull/20904)

- \[engine] Fix parenting of resources in some cases in `refresh
--run-program`
[#&#8203;20894](https://redirect.github.com/pulumi/pulumi/pull/20894)

-   \[engine] Fix StackReference secrets performance
[#&#8203;20908](https://redirect.github.com/pulumi/pulumi/pull/20908)

-   \[programgen] Do not panic when re-writing type-invalid PCL
[#&#8203;20770](https://redirect.github.com/pulumi/pulumi/pull/20770)

- \[sdk/go] Fix import path in instructions when linking a package in Go
[#&#8203;20888](https://redirect.github.com/pulumi/pulumi/pull/20888)

-   \[sdk/nodejs] Fix closure serialization on Node.js v25.2.0
[#&#8203;20913](https://redirect.github.com/pulumi/pulumi/pull/20913)

- \[sdk/{nodejs,python}] Avoid cancellations due to do slow processing
of requests

- \[sdk/python] Avoid cancellations due to do slow processing of
requests in the callbacks server
[#&#8203;20917](https://redirect.github.com/pulumi/pulumi/pull/20917)

##### Miscellaneous

-   \[engine] Stop sending ConfigPropertyMap as part of RunRequest
[#&#8203;20887](https://redirect.github.com/pulumi/pulumi/pull/20887)

###
[`v3.206.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32060-2025-11-05)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.205.0...v3.206.0)

##### Features

- \[protobuf] Pass a `preview` flag to invokes so they can tell if
they're being called during a preview
[#&#8203;20827](https://redirect.github.com/pulumi/pulumi/pull/20827)

- \[cli/about] Include PULUMI_\* environment variables in the `pulumi
about` output
[#&#8203;20855](https://redirect.github.com/pulumi/pulumi/pull/20855)

- \[auto/go] Get event log over gRPC instead of trying to read it from a
text file
[#&#8203;20822](https://redirect.github.com/pulumi/pulumi/pull/20822)

- \[auto/nodejs] Get event log over gRPC instead of trying to read it
from a text file
[#&#8203;20824](https://redirect.github.com/pulumi/pulumi/pull/20824)

- \[auto/python] Get event log over gRPC instead of trying to read it
from a text file
[#&#8203;20833](https://redirect.github.com/pulumi/pulumi/pull/20833)

- \[cli/engine] Add environment variable to add --refresh to
preview,update,destroy
[#&#8203;20797](https://redirect.github.com/pulumi/pulumi/pull/20797)

- \[sdk/nodejs] Add PULUMI_NODEJS_SKIP_COMPONENT_INPUTS environment
variable to skip the new feature of sending component inputs to the
engine for diffing and state storage
[#&#8203;20842](https://redirect.github.com/pulumi/pulumi/pull/20842)

##### Bug Fixes

- \[engine] Fix duplicate resource snapshot integrity issue, when
running `pulumi up --refresh --run-program` and when a resource
`PendingReplacement` exists in the snapshot
[#&#8203;20812](https://redirect.github.com/pulumi/pulumi/pull/20812)

- \[engine] Support floating point NaN and Inf values in resource state
[#&#8203;20843](https://redirect.github.com/pulumi/pulumi/pull/20843)

##### Miscellaneous

-   \[sdk/go] Use Language.Link to link Go packages
[#&#8203;20811](https://redirect.github.com/pulumi/pulumi/pull/20811)

###
[`v3.205.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32050-2025-10-28)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.204.0...v3.205.0)

##### Bug Fixes

- \[cli/display] Improve how the severity is displayed for policy
violations
[#&#8203;20805](https://redirect.github.com/pulumi/pulumi/pull/20805)

- \[engine] Fix an issue where `refresh --run-program` could potentially
run forever
[#&#8203;20781](https://redirect.github.com/pulumi/pulumi/pull/20781)

###
[`v3.204.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32040-2025-10-23)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.203.0...v3.204.0)

##### Features

- \[cli] Print replace diffs when a resource tries to replace but is
blocked by still having an import id set
[#&#8203;20762](https://redirect.github.com/pulumi/pulumi/pull/20762)

-   \[engine] Support overriding policy severity on violations
[#&#8203;20767](https://redirect.github.com/pulumi/pulumi/pull/20767)

- \[backend/service] Send journal entries to the backend if it's
supported
[#&#8203;20343](https://redirect.github.com/pulumi/pulumi/pull/20343)

##### Bug Fixes

- \[engine] Fix a potential snapshot integrity error when a resources
dependency fails to be destroyed using `destroy --run-program`
[#&#8203;20692](https://redirect.github.com/pulumi/pulumi/pull/20692)

- \[engine] Fix import error to contain the import ID of non-existent
resources
[#&#8203;20753](https://redirect.github.com/pulumi/pulumi/pull/20753)

- \[sdk/nodejs] Pass secret values as Output objects to resource hooks
to properly maintain their secretness. Previously hooks received an
internal representation for secret values.
[#&#8203;20774](https://redirect.github.com/pulumi/pulumi/pull/20774)

- \[sdk/python] Pass secret values as Output objects to resource hooks
to properly maintain their secretness. Previously hooks received an
internal representation for secret values.
[#&#8203;20769](https://redirect.github.com/pulumi/pulumi/pull/20769)

-   \[sdkgen/go] Fix codegen of scalar return SDK functions
[#&#8203;20754](https://redirect.github.com/pulumi/pulumi/pull/20754)

- \[sdkgen/{nodejs,python}] Fix scalar return protocol to allow
returning secret maps
[#&#8203;20747](https://redirect.github.com/pulumi/pulumi/pull/20747)

##### Miscellaneous

-   \[sdk/nodejs] Use Language.Link to link Node.js packages
[#&#8203;20715](https://redirect.github.com/pulumi/pulumi/pull/20715)

###
[`v3.203.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32030-2025-10-15)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.202.0...v3.203.0)

##### Features

-   \[cli/display] Display policy severity for violations
[#&#8203;20746](https://redirect.github.com/pulumi/pulumi/pull/20746)

-   \[cli/package] Show functions in `package info`
[#&#8203;20733](https://redirect.github.com/pulumi/pulumi/pull/20733)

##### Bug Fixes

- \[engine] Make sure errors from the journaler are not shown to the
user
[#&#8203;20740](https://redirect.github.com/pulumi/pulumi/pull/20740)

-   \[backend/diy] Fix casing of stack/latest when importing stacks
[#&#8203;20727](https://redirect.github.com/pulumi/pulumi/pull/20727)

- \[cli/package] Fix 'required' flag for resource inputs in `package
info`
[#&#8203;20731](https://redirect.github.com/pulumi/pulumi/pull/20731)

- \[programgen] Revert
[#&#8203;20345](https://redirect.github.com/pulumi/pulumi/issues/20345)
[#&#8203;20714](https://redirect.github.com/pulumi/pulumi/pull/20714)

- \[programgen/{dotnet,nodejs}] Propagate local dependencies for
parameterized packages during convert down to GenerateProject
[#&#8203;20706](https://redirect.github.com/pulumi/pulumi/pull/20706)

- \[sdkgen/python] Fix python invokes for functions returning map types
[#&#8203;20719](https://redirect.github.com/pulumi/pulumi/pull/20719)

##### Miscellaneous

-   \[sdk/python] Use Language.Link to link python packages
[#&#8203;20612](https://redirect.github.com/pulumi/pulumi/pull/20612)

###
[`v3.202.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32020-2025-10-10)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.201.0...v3.202.0)

##### Features

-   \[auto] Add SetAllConfigJson method to automation APIs
[#&#8203;20709](https://redirect.github.com/pulumi/pulumi/pull/20709)

-   \[cli/config] Add `--json` input support to `pulumi config set-all`
[#&#8203;19427](https://redirect.github.com/pulumi/pulumi/pull/19427)

-   \[cli/display] Add error summary at the end of Resource changes
[#&#8203;20658](https://redirect.github.com/pulumi/pulumi/pull/20658)

- \[components/{go,nodejs}] Send component inputs to be saved in state.
This brings NodeJS and Go inline with Python behaviour
[#&#8203;20357](https://redirect.github.com/pulumi/pulumi/pull/20357)

-   \[sdk/python] Add support for Python 3.14
[#&#8203;20433](https://redirect.github.com/pulumi/pulumi/pull/20433)

-   \[sdk/python] Add the `hide_diffs` resource option
[#&#8203;20655](https://redirect.github.com/pulumi/pulumi/pull/20655)

##### Bug Fixes

- \[engine] Fix assert when a resource that's not targeted on a destroy
is marked as Delete
[#&#8203;20684](https://redirect.github.com/pulumi/pulumi/pull/20684)

-   \[sdk/nodejs] Allow compiled local SDKs to be parameterized
[#&#8203;20685](https://redirect.github.com/pulumi/pulumi/pull/20685)

- \[sdk/nodejs] Handle RangeErrors from util.inspect stringifying error
objects
[#&#8203;20705](https://redirect.github.com/pulumi/pulumi/pull/20705)

###
[`v3.201.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32010-2025-10-06)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.200.0...v3.201.0)

##### Features

-   \[sdkgen/go] Support non-object return types in functions
[#&#8203;20646](https://redirect.github.com/pulumi/pulumi/pull/20646)

##### Bug Fixes

-   \[backend/service] Fix the --insecure flag in `pulumi login`

###
[`v3.200.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#32000-2025-10-03)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.199.0...v3.200.0)

##### Features

- \[cli] Look for .cmd and .ps1 extensions as well on Windows when
looking for executables
[#&#8203;20637](https://redirect.github.com/pulumi/pulumi/pull/20637)

-   \[sdk/go] Add a new resource option: `HideDiffs`
[#&#8203;20631](https://redirect.github.com/pulumi/pulumi/pull/20631)

-   \[sdk/nodejs] Add a new resource option: `hideDiffs`
[#&#8203;20631](https://redirect.github.com/pulumi/pulumi/pull/20631)

-   \[sdkgen/python] Support non-object return types in functions
[#&#8203;20624](https://redirect.github.com/pulumi/pulumi/pull/20624)

##### Bug Fixes

-   \[build] Use ruff to auto fix lints in python
[#&#8203;20644](https://redirect.github.com/pulumi/pulumi/pull/20644)

-   \[sdk/nodejs] Make new arguments to `initialize` optional
[#&#8203;20650](https://redirect.github.com/pulumi/pulumi/pull/20650)

-   \[sdkgen/nodejs] Generate a .gitignore file inside local SDKs
[#&#8203;20643](https://redirect.github.com/pulumi/pulumi/pull/20643)

- \[cli/state] Treat providers that are marked as parents in a move as
providers still instead of as regular resources
[#&#8203;20639](https://redirect.github.com/pulumi/pulumi/pull/20639)

- \[cli/state] Exclude root stack correctly when moving resources and
when --include-parents is passed

###
[`v3.199.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31990-2025-10-01)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.198.0...v3.199.0)

##### Features

-   \[cli/about] Add `pulumi about env` to help
[#&#8203;20633](https://redirect.github.com/pulumi/pulumi/pull/20633)

- \[cli/{about,new}] Add environment variables to override template
repository settings. The new PULUMI_TEMPLATE_GIT_REPOSITORY,
PULUMI_TEMPLATE_BRANCH, PULUMI_POLICY_TEMPLATE_GIT_REPOSITORY, and
PULUMI_POLICY_TEMPLATE_BRANCH environment variables allow runtime
customization of template sources
[#&#8203;20615](https://redirect.github.com/pulumi/pulumi/pull/20615)

- \[cli/{install,package}] Add support for package references in plugins
[#&#8203;20524](https://redirect.github.com/pulumi/pulumi/pull/20524)

- \[sdk/nodejs] Pass options, name, and type to ComponentResources
initialize methods
[#&#8203;20618](https://redirect.github.com/pulumi/pulumi/pull/20618)

-   \[cli/policy] Send vcs metadata when publishing policy packs
[#&#8203;20528](https://redirect.github.com/pulumi/pulumi/pull/20528)

##### Bug Fixes

-   \[cli/display] Always send diag events to stderr in the diff display
[#&#8203;20632](https://redirect.github.com/pulumi/pulumi/pull/20632)

-   \[components] Stop including auth info in plugin name
[#&#8203;20620](https://redirect.github.com/pulumi/pulumi/pull/20620)

-   \[engine] Support the import option in resource transforms
[#&#8203;20586](https://redirect.github.com/pulumi/pulumi/pull/20586)

- \[programgen] Fix panic in parseProxyApply when encoutering warning
diagnostics
[#&#8203;20583](https://redirect.github.com/pulumi/pulumi/pull/20583)

- \[sdk/nodejs] Don't attempt to serialise function values for resource
inputs/outputs
[#&#8203;20621](https://redirect.github.com/pulumi/pulumi/pull/20621)

###
[`v3.198.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31980-2025-09-26)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.197.0...v3.198.0)

##### Features

-   \[engine] Expand snapshot integrity check for resources
[#&#8203;20519](https://redirect.github.com/pulumi/pulumi/pull/20519)

- \[sdk/go] Refactor Go policy SDK to have access to a pulumi Context
object
[#&#8203;20570](https://redirect.github.com/pulumi/pulumi/pull/20570)

- \[sdk/python] Allow registered resources to be retrieved from the mock
monitor for test assertions
[#&#8203;20540](https://redirect.github.com/pulumi/pulumi/pull/20540)

##### Bug Fixes

- \[engine] Fix snapshot integrity error with `run-program --refresh`,
when a provider has a dependency that isn't being created
[#&#8203;20541](https://redirect.github.com/pulumi/pulumi/pull/20541)

-   \[engine] Remove unneeded data from policy summary events
[#&#8203;20589](https://redirect.github.com/pulumi/pulumi/pull/20589)

-   \[sdk] Fix plugin killing during cancellation
[#&#8203;20543](https://redirect.github.com/pulumi/pulumi/pull/20543)

-   \[sdk/go] Fix \[Unm/M]arshalProperties to return nil when given nil
[#&#8203;20544](https://redirect.github.com/pulumi/pulumi/pull/20544)

##### Miscellaneous

-   \[protobuf] Add loader_target to LanguageRuntime.LinkRequest
[#&#8203;20552](https://redirect.github.com/pulumi/pulumi/pull/20552)

- \[cli/package] Move InstallPackage from cmd/packagecmd to cmd/packages
[#&#8203;20550](https://redirect.github.com/pulumi/pulumi/pull/20550)

-   \[cli/package] Move stdout/stderr IO out of GenSDK and LinkPackage
[#&#8203;20546](https://redirect.github.com/pulumi/pulumi/pull/20546)

-   \[sdk] Move PluginSpec.Install to pkg/workspace.InstallPluginContent
[#&#8203;20537](https://redirect.github.com/pulumi/pulumi/pull/20537)

-   \[sdk/yaml] Bump pulumi-yaml to 1.23.2
[#&#8203;20588](https://redirect.github.com/pulumi/pulumi/pull/20588)

###
[`v3.197.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31970-2025-09-17)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.196.0...v3.197.0)

##### Features

-   \[cli] Send new policy fields when publishing a policy pack

-   \[sdk/dotnet] Update dotnet to v3.88
[#&#8203;20512](https://redirect.github.com/pulumi/pulumi/pull/20512)

##### Bug Fixes

- \[engine] Fix a panic in preview, that could happen in some cases when
default providers get updated
[#&#8203;20511](https://redirect.github.com/pulumi/pulumi/pull/20511)

-   \[components/python] Fix parenting of python components
[#&#8203;20508](https://redirect.github.com/pulumi/pulumi/pull/20508)

- \[sdk/python] Fix hang when shutting down in certain error conditions
[#&#8203;20484](https://redirect.github.com/pulumi/pulumi/pull/20484)

-   \[sdk/python] Fix license-files entry for python package
[#&#8203;20506](https://redirect.github.com/pulumi/pulumi/pull/20506)

###
[`v3.196.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31960-2025-09-12)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.195.0...v3.196.0)

##### Miscellaneous

-   \[sdk] Add policy summary events apitypes
[#&#8203;20443](https://redirect.github.com/pulumi/pulumi/pull/20443)

-   \[sdk] Add new policy fields apitypes
[#&#8203;20491](https://redirect.github.com/pulumi/pulumi/pull/20491)

-   \[protobuf] Add support for indicating "not applicable" policies
[#&#8203;20492](https://redirect.github.com/pulumi/pulumi/pull/20492)

-   \[protobuf] Add new analyzer policy fields
[#&#8203;20494](https://redirect.github.com/pulumi/pulumi/pull/20494)

###
[`v3.195.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31950-2025-09-10)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.194.0...v3.195.0)

##### Features

- \[engine] Add support for capturing program stack traces as part of
resource registration
[#&#8203;20430](https://redirect.github.com/pulumi/pulumi/pull/20430)

- \[sdk/go] Registered resources can now be retrieved from the mock
monitor for test assertions
[#&#8203;20472](https://redirect.github.com/pulumi/pulumi/pull/20472)

- \[sdk/go] The current exports map is now available for unit testing
through `GetCurrentExportMap`
[#&#8203;20471](https://redirect.github.com/pulumi/pulumi/pull/20471)

##### Bug Fixes

- \[pkg/go] Fix an issue where v3.194.0 of the
`github.com/pulumi/pulumi/pkg/v3` module depends on APIs from
`github.com/pulumi/pulumi/sdk/v3` that haven't been released
[#&#8203;20487](https://redirect.github.com/pulumi/pulumi/issues/20487)

###
[`v3.194.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31940-2025-09-08)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.193.0...v3.194.0)

##### Features

-   \[cli] Log diagnostics to stderr instead of stdout
[#&#8203;20461](https://redirect.github.com/pulumi/pulumi/pull/20461)

- \[cli/display] Change the default for --show-full-output from true to
false
[#&#8203;20467](https://redirect.github.com/pulumi/pulumi/pull/20467)

-   \[cli/display] Fix the --show-full-output the flag
[#&#8203;20464](https://redirect.github.com/pulumi/pulumi/pull/20464)

-   \[sdk/go] Show a message that the Go program is being compiled
[#&#8203;20460](https://redirect.github.com/pulumi/pulumi/pull/20460)

##### Bug Fixes

-   \[engine] Make ignoreChanges work better for arrays
[#&#8203;20465](https://redirect.github.com/pulumi/pulumi/pull/20465)

- \[programgen] Fix panic in RewriteApplies when encountering warning
diagnostics
[#&#8203;20453](https://redirect.github.com/pulumi/pulumi/pull/20453)

##### Miscellaneous

- \[cli] No longer require the `PULUMI_EXPERIMENTAL` flag for Private
Registry template operations (`pulumi template publish`, registry-based
template resolution in `pulumi new`), while registry-backed template
resolution in `pulumi new` may still be disabled using
`PULUMI_DISABLE_REGISTRY_RESOLVE=true pulumi new`
[#&#8203;20458](https://redirect.github.com/pulumi/pulumi/pull/20458)

-   \[sdk/yaml] Bump pulumi-yaml to 1.23.1

###
[`v3.193.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31930-2025-09-04)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.192.0...v3.193.0)

##### Bug Fixes

- \[cli] Use "Private Registry", not cloud or Pulumi registry, in CLI
output
[#&#8203;20436](https://redirect.github.com/pulumi/pulumi/pull/20436)

- \[cli/display] Avoid printing a double new line when showing secrets
in the outputs
[#&#8203;20435](https://redirect.github.com/pulumi/pulumi/pull/20435)

-   \[cli/display] Fix coloring of cobra error messages on windows

- \[cli/{install,package}] Fix local package resolution when
PULUMI_EXPERIMENTAL=true by including local packages in registry
fallback logic
[#&#8203;20413](https://redirect.github.com/pulumi/pulumi/pull/20413)

- \[cli/new] Fail when running with --language without --ai in
non-interactive mode
[#&#8203;20415](https://redirect.github.com/pulumi/pulumi/pull/20415)

- \[cli/package] Fix not using already-installed package in 'pulumi
package add' when PULUMI_EXPERIMENTAL=1

##### Miscellaneous

-   \[cli] Start the pprof server when receving SIGUSR1
[#&#8203;20392](https://redirect.github.com/pulumi/pulumi/pull/20392)

-   \[cli/display] Replace ijc/Gotty terminfo package with xo/terminfo
[#&#8203;20446](https://redirect.github.com/pulumi/pulumi/pull/20446)

- \[cli/display] Use the passed through writer in ShowProgressOutput
instead of loading a new terminfo

###
[`v3.192.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31920-2025-08-29)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.191.0...v3.192.0)

##### Features

- \[cli/state] Add pulumi state taint/untaint commands to force
replacement of resources upon next update
[#&#8203;20380](https://redirect.github.com/pulumi/pulumi/pull/20380)

- \[sdk/nodejs] Add `previewDestroy` to allow dry-runs of `destroy`
commands
[#&#8203;20371](https://redirect.github.com/pulumi/pulumi/pull/20371)

##### Bug Fixes

- \[engine] Fix a bug causing hooks to never pass correctly to remote Go
components
[#&#8203;20390](https://redirect.github.com/pulumi/pulumi/pull/20390)

-   \[sdk/go] Fix source position information
[#&#8203;20351](https://redirect.github.com/pulumi/pulumi/pull/20351)

- \[sdk/nodejs] Fix function serialisation that contains minified
classes
[#&#8203;19345](https://redirect.github.com/pulumi/pulumi/pull/19345)

- \[sdkgen/nodejs] Limit
[@&#8203;types](https://redirect.github.com/types) packages used during
local SDK generation
[#&#8203;20387](https://redirect.github.com/pulumi/pulumi/pull/20387)

-   \[sdk/python] Set ThreadPoolExecutor max_workers to parallelism \* 4
[#&#8203;20362](https://redirect.github.com/pulumi/pulumi/pull/20362)

-   \[sdk/python] Handle `-v` flag passed to policy packs
[#&#8203;20373](https://redirect.github.com/pulumi/pulumi/pull/20373)

-   \[sdk/python] Forward errors raised in callbacks to the caller
[#&#8203;20381](https://redirect.github.com/pulumi/pulumi/pull/20381)

##### Miscellaneous

-   \[cli] Log stack trace when interrupted when using verbose logging
[#&#8203;20364](https://redirect.github.com/pulumi/pulumi/pull/20364)

- \[cli] Print the location of the log file when running with the
verbose flag
[#&#8203;20365](https://redirect.github.com/pulumi/pulumi/pull/20365)

-   \[sdk/python] Remove custom typing stubs
[#&#8203;20384](https://redirect.github.com/pulumi/pulumi/pull/20384)

###
[`v3.191.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31910-2025-08-21)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.190.0...v3.191.0)

##### Features

-   \[cli] Document the `PULUMI_ENABLE_STREAMING_JSON_PREVIEW` envvar.
[#&#8203;20328](https://redirect.github.com/pulumi/pulumi/pull/20328)

##### Bug Fixes

- \[engine] Check providers returning 'version' or '\__internal' in
their inputs
[#&#8203;20313](https://redirect.github.com/pulumi/pulumi/pull/20313)

-   \[engine] Fix a panic with `refresh --run-program`
[#&#8203;20337](https://redirect.github.com/pulumi/pulumi/pull/20337)

- \[engine] Fix an infinite loop from passing unordered resources to the
dependency system when using --refresh

- \[programgen] Emit warnings instead of errors in non-strict mode when
binding resource blocks
[#&#8203;20347](https://redirect.github.com/pulumi/pulumi/pull/20347)

- \[programgen] Simplify range value types when it is derived from
object of objects and warn on unknown properties
[#&#8203;20345](https://redirect.github.com/pulumi/pulumi/pull/20345)

- \[programgen] Warn instead of erroring out when traversing a NoneType
in PCL
[#&#8203;20342](https://redirect.github.com/pulumi/pulumi/pull/20342)

-   \[cli/display] Escape non-graphic characters in URNs
[#&#8203;20295](https://redirect.github.com/pulumi/pulumi/pull/20295)

- \[cli/import] Disambiguate duplicate resource names by their types
when importing
[#&#8203;20348](https://redirect.github.com/pulumi/pulumi/pull/20348)

-   \[cli/new] Don't prompt for ai or template when passing --yes
[#&#8203;20256](https://redirect.github.com/pulumi/pulumi/pull/20256)

##### Miscellaneous

-   \[cli] Log version and CLI metadata
[#&#8203;20334](https://redirect.github.com/pulumi/pulumi/pull/20334)

-   \[cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource
[#&#8203;20324](https://redirect.github.com/pulumi/pulumi/pull/20324)

###
[`v3.190.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31900-2025-08-15)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.189.0...v3.190.0)

##### Features

- \[engine] Don't error on `ignoreChanges` paths that are missing old
data, there is nothing to ignore in those cases and we just use the new
data
[#&#8203;20278](https://redirect.github.com/pulumi/pulumi/pull/20278)

##### Bug Fixes

- \[cli] Fix `destroy --exclude-protected --remove` returning an error
for empty stacks that could safely be removed
[#&#8203;20283](https://redirect.github.com/pulumi/pulumi/pull/20283)

- \[cli] Fix `pulumi template publish` failing with relative paths by
normalizing to absolute paths before archive creation
[#&#8203;20301](https://redirect.github.com/pulumi/pulumi/pull/20301)

- \[cli/import] Use mapped name instead of logical name for resource
references during import code generation
[#&#8203;20300](https://redirect.github.com/pulumi/pulumi/pull/20300)

- \[pkg] Make TypeScript code generation use 'declare' keyword instead
of definite assertion operator, to avoid setting all fields to undefined
when targeting environments new enough
[#&#8203;20261](https://redirect.github.com/pulumi/pulumi/pull/20261)

-   \[sdkgen/nodejs] Make TypeScript a full dependency of local SDKs
[#&#8203;20272](https://redirect.github.com/pulumi/pulumi/pull/20272)

##### Miscellaneous

- \[build] Updates protobuf and grpc to v5, bumping dependencies in the
Go, Node.js, and Python SDKs
[#&#8203;19588](https://redirect.github.com/pulumi/pulumi/pull/19588)

-   \[build] Update latest Go version to 1.25
[#&#8203;20284](https://redirect.github.com/pulumi/pulumi/pull/20284)

-   \[sdkgen/nodejs] Target ES2020 for generated SDKs
[#&#8203;20276](https://redirect.github.com/pulumi/pulumi/pull/20276)

###
[`v3.189.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31890-2025-08-12)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.188.0...v3.189.0)

##### Features

-   \[sdk] Remove CacheMS from CLIVersionResponse
[#&#8203;20264](https://redirect.github.com/pulumi/pulumi/pull/20264)

-   \[sdk/go] Calculate PluginInfo.Size on demand
[#&#8203;20241](https://redirect.github.com/pulumi/pulumi/pull/20241)

- \[auto/python] Surface `json` option to `pulumi preview` calls in
Python when using the `pulumi.automation` package.
[#&#8203;20233](https://redirect.github.com/pulumi/pulumi/pull/20233)

##### Bug Fixes

- \[cli/package] Fix incorrect console URLs being displayed after
publishing a policy
[#&#8203;20255](https://redirect.github.com/pulumi/pulumi/pull/20255)

-   \[engine] Fix race when reading plugin stdout
[#&#8203;20242](https://redirect.github.com/pulumi/pulumi/pull/20242)

-   \[sdk/nodejs] Fix component providers when using pnpm
[#&#8203;20253](https://redirect.github.com/pulumi/pulumi/pull/20253)

##### Miscellaneous

- \[pkg] Make TypeScript code generation use nullish coalesce operator
for required property checks, as well as state and args accessing
whenever sensible

- \[sdk/nodejs] Fix swapped stderr/stdout callback comments in
PreviewOptions interface
[#&#8203;20250](https://redirect.github.com/pulumi/pulumi/pull/20250)

-   \[sdkgen] Don’t create empty maps for language specific overrides
[#&#8203;20237](https://redirect.github.com/pulumi/pulumi/pull/20237)

###
[`v3.188.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31880-2025-08-07)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.187.0...v3.188.0)

##### Features

- \[cli] Add `--remove-backups` flag to `pulumi stack rm` for DIY
backends
[#&#8203;20203](https://redirect.github.com/pulumi/pulumi/pull/20203)

##### Bug Fixes

-   \[cli] Fix cancellation when running via some CLI wrapper tools
[#&#8203;20195](https://redirect.github.com/pulumi/pulumi/pull/20195)

-   \[cli] Fix concurrent read/write during plugin downloads
[#&#8203;20223](https://redirect.github.com/pulumi/pulumi/pull/20223)

-   \[cli] Restore terminal mode on panic
[#&#8203;20224](https://redirect.github.com/pulumi/pulumi/pull/20224)

-   \[engine] Fix panic in refreshes due to concurrent map writes
[#&#8203;20206](https://redirect.github.com/pulumi/pulumi/pull/20206)

- \[sdkgen] Warn about refs of the form
"#/resources/pulumi:providers:<pkg>"
[#&#8203;20192](https://redirect.github.com/pulumi/pulumi/pull/20192)

-   \[cli/display] Show changed outputs in preview
[#&#8203;20161](https://redirect.github.com/pulumi/pulumi/pull/20161)

- \[cli/engine] Make `--exclude` correctly handle wildcards in all cases
[#&#8203;20158](https://redirect.github.com/pulumi/pulumi/pull/20158)

- \[sdk/go] Fix running against old CLI versions without
SignalAndWaitForShutdown
[#&#8203;20212](https://redirect.github.com/pulumi/pulumi/pull/20212)

-   \[sdk/python] Fix dependency installation in uv workspaces
[#&#8203;20218](https://redirect.github.com/pulumi/pulumi/pull/20218)

##### Miscellaneous

-   \[cli] Update pulumi-dotnet to 3.87.0
[#&#8203;20222](https://redirect.github.com/pulumi/pulumi/pull/20222)

-   \[cli/env] Bump esc to v0.17.0
[#&#8203;20197](https://redirect.github.com/pulumi/pulumi/pull/20197)

###
[`v3.187.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31870-2025-07-31)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.186.0...v3.187.0)

##### Features

-   \[cli] Support for writing v4 checkpoints/deployments
[#&#8203;20159](https://redirect.github.com/pulumi/pulumi/pull/20159)

- \[cli] Add support for qualified registry template names in `pulumi
new`
[#&#8203;20138](https://redirect.github.com/pulumi/pulumi/pull/20138)

- \[cli/import] Enable `pulumi import` to always `--generate-resources`
when converting `--from` state files
[#&#8203;20178](https://redirect.github.com/pulumi/pulumi/pull/20178)

-   \[yaml] Allow config values to be parsed with type `object`
[#&#8203;20132](https://redirect.github.com/pulumi/pulumi/pull/20132)

- \[auto/python] Allow for `on_error` callbacks in commands to capture
stderr incrementally
[#&#8203;20019](https://redirect.github.com/pulumi/pulumi/pull/20019)

-   \[sdk/nodejs] Add option of Bun as a package manager
[#&#8203;18412](https://redirect.github.com/pulumi/pulumi/pull/18412)

-   \[sdk/nodejs] Copy `getRootDirectory` to the pulumi module
[#&#8203;20173](https://redirect.github.com/pulumi/pulumi/pull/20173)

-   \[sdk/python] Copy `get_root_directory` to the pulumi module
[#&#8203;20172](https://redirect.github.com/pulumi/pulumi/pull/20172)

##### Bug Fixes

- \[cli] Fix un-taring registry-backed templates which come in .tar.gz
format
[#&#8203;20135](https://redirect.github.com/pulumi/pulumi/pull/20135)

- \[cli] Stop passing Accept: application/x-tar to registry template
download URLs to avoid signature mismatch
[#&#8203;20133](https://redirect.github.com/pulumi/pulumi/pull/20133)

- \[engine] Fix a panic with `up --refresh --run-program` and resource
replacements
[#&#8203;20147](https://redirect.github.com/pulumi/pulumi/pull/20147)

- \[engine] Untargeted resources in `destroy` now correctly register as
same steps
[#&#8203;20061](https://redirect.github.com/pulumi/pulumi/pull/20061)

- \[cli/engine] Fix hang when waiting for program that would never
complete
[#&#8203;20153](https://redirect.github.com/pulumi/pulumi/pull/20153)

-   \[sdk/nodejs] Fix delete hooks in inline automation API programs
[#&#8203;20143](https://redirect.github.com/pulumi/pulumi/pull/20143)

-   \[sdk/python] Set features inside construct
[#&#8203;20141](https://redirect.github.com/pulumi/pulumi/pull/20141)

##### Miscellaneous

- \[sdk/nodejs] Bump TypeScript target to ES2020 for plugins and policy
packs
[#&#8203;20148](https://redirect.github.com/pulumi/pulumi/pull/20148)

###
[`v3.186.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31860-2025-07-25)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.185.0...v3.186.0)

##### Features

- \[engine] Send `Cancel` message to language runtime plugins on engine
shutdown
[#&#8203;20007](https://redirect.github.com/pulumi/pulumi/pull/20007)

-   \[engine] Pass stack tags to policy plugins on startup
[#&#8203;20084](https://redirect.github.com/pulumi/pulumi/pull/20084)

- \[yaml] Expose `object` as a possible config type in preparation for
`pulumi-yaml` support
[#&#8203;20129](https://redirect.github.com/pulumi/pulumi/pull/20129)

##### Bug Fixes

- \[cli/engine] --exclude and --exclude-protected flags now work
together correctly for `destroy` commands
[#&#8203;20120](https://redirect.github.com/pulumi/pulumi/pull/20120)

-   \[engine] Fix a datarace in the engine event system
[#&#8203;20105](https://redirect.github.com/pulumi/pulumi/pull/20105)

- \[engine] Fix a panic in the engine when running `up --refresh
--run-program` and finding a deleted resource

- \[sdk/nodejs] Avoid "Cannot convert object to primitive value" error
when running into type errors
[#&#8203;20092](https://redirect.github.com/pulumi/pulumi/pull/20092)

- \[sdk/nodejs] Don’t use automatic ESM mode when `—import` or
`—require` is set
[#&#8203;20091](https://redirect.github.com/pulumi/pulumi/pull/20091)

-   \[sdk/nodejs] Fix callback server hang & delete hooks in Node.js
[#&#8203;20109](https://redirect.github.com/pulumi/pulumi/pull/20109)

-   \[sdk/nodejs] Don’t report leaked promises when we exit abnormally
[#&#8203;20128](https://redirect.github.com/pulumi/pulumi/pull/20128)

- \[cli/package] Force new style Go modules to be written out when using
`package add`
[#&#8203;20011](https://redirect.github.com/pulumi/pulumi/pull/20011)

-   \[sdk/python] Run uv sync on uv command
[#&#8203;20117](https://redirect.github.com/pulumi/pulumi/pull/20117)

##### Miscellaneous

-   \[yaml] Update yaml to 1.21.3
[#&#8203;20118](https://redirect.github.com/pulumi/pulumi/pull/20118)

###
[`v3.185.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31850-2025-07-21)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.184.0...v3.185.0)

##### Features

- \[cli/{install,package}] Allow using `pulumi package add` with
registry identifiers
[#&#8203;19928](https://redirect.github.com/pulumi/pulumi/pull/19928)

##### Bug Fixes

- \[engine] Fix a snapshot integrity issue with `destroy --run-program`
and resource reads
[#&#8203;20078](https://redirect.github.com/pulumi/pulumi/pull/20078)

-   \[sdkgen/python] Remove unnecessary `import copy`
[#&#8203;20089](https://redirect.github.com/pulumi/pulumi/pull/20089)

-   \[sdkgen/python] Support properties named "builtins"
[#&#8203;20085](https://redirect.github.com/pulumi/pulumi/pull/20085)

</details>

<details>
<summary>pulumi/esc (github.com/pulumi/esc)</summary>

###
[`v0.20.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.20.0)

[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.19.0...v0.20.0)

##### Improvements

-   Added deletion protection for environments:
- Use `esc env settings set
[<org-name>/][<project-name>/]<environment-name> deletion-protected
true` to enable deletion protection
- Use `esc env settings get
[<org-name>/][<project-name>/]<environment-name> [deletion-protected]`
to check the current status
- When enabled, environments cannot be deleted until protection is
disabled
    -   Deletion protection is disabled by default for new environments

##### Bug Fixes

- Environment declarations are now returned even in the face of syntax
errors.

##### Breaking changes

###
[`v0.19.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.19.0)

[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.18.0...v0.19.0)

##### Improvements

- Added support for Open Approvals
[#&#8203;592](https://redirect.github.com/pulumi/esc/pull/592)

##### Bug Fixes

##### Breaking changes

###
[`v0.18.0`](https://redirect.github.com/pulumi/esc/releases/tag/v0.18.0)

[Compare
Source](https://redirect.github.com/pulumi/esc/compare/v0.17.0...v0.18.0)

##### Improvements

- Added support for `fn::concat` built-in function to concatenate
arrays.
    [#&#8203;582](https://redirect.github.com/pulumi/esc/pull/582)

##### Bug Fixes

##### Breaking changes

</details>

<details>
<summary>pulumi/esc-action (pulumi/esc-action)</summary>

###
[`v1.5.0`](https://redirect.github.com/pulumi/esc-action/releases/tag/v1.5.0)

[Compare
Source](https://redirect.github.com/pulumi/esc-action/compare/v1.4.0...v1.5.0)

- Fix line parsing when "=" is present
[https://github.com/pulumi/esc-action/pull/30](https://redirect.github.com/pulumi/esc-action/pull/30)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMjY0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImltcGFjdC9uby1jaGFuZ2Vsb2ctcmVxdWlyZWQiXX0=-->

---------

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Co-authored-by: pulumi-bot <bot@pulumi.com>
2025-11-20 21:38:09 +00:00
2024-03-07 11:17:15 -08:00
2024-05-30 13:50:54 +01:00
2024-03-07 11:17:15 -08:00
2024-03-07 11:17:15 -08:00
2024-03-20 11:09:37 -07:00
2024-03-07 11:17:15 -08:00
2025-07-21 13:04:32 -07:00

Slack NPM version Python version NuGet version PkgGoDev License

Docker-Build Resource Provider

A Pulumi provider for building modern Docker images with buildx and BuildKit.

Not to be confused with the earlier Docker provider, which is still appropriate for managing resources unrelated to building images.

Provider Use cases
@pulumi/docker-build Anything related to building images with docker build.
@pulumi/docker Everything else -- including running containers and creating networks.

Reference

For more information, including examples and migration guidance, please see the Docker-Build provider's detailed API documentation.

Description
No description provided
Readme Apache-2.0 4.8 MiB
Languages
Go 94.8%
Makefile 4.6%
Shell 0.6%