fix(deps): update module github.com/pulumi/pulumi/sdk/v3 to v3.243.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pulumi/pulumi/sdk/v3	v3.11.0 → v3.243.0

---

Release Notes

pulumi/pulumi (github.com/pulumi/pulumi/sdk/v3)

v3.243.0

Compare Source

3.243.0 (2026-05-22)

Features

• [cli] Make the pulumi project new -y command write a minimal project file with no template
  #​22847

• [cli] Allow coding agents to create claimable temporary accounts when not authenticated

• [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output
  #​23326

• [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC
  #​23287

• [sdkgen] Reserve the package names 'pulumi' and 'input' for internal use
  #​23321

• [cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both
  #​22963

• [cli/do] Add resource support to pulumi do
  #​23215

• [cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn
  #​23299

• [cli/new] Alias pulumi new to pulumi project new
  #​23265

Bug Fixes

• [cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively
  #​23264

• [pcl] Don't silently ignore ... in function arguments
  #​23309

• [sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs
  #​23068

• [backend/service] Error out when setting up journaler fails
  #​22671

Miscellaneous

• [cli/package] Update the pulumi package add --agent documentation hint to use <type-token> as the placeholder for the /docs/... URL
  #​23294

• [cli/plugin] Rename plugin ls to list and rm to remove
  #​23291

v3.242.0

Compare Source

3.242.0 (2026-05-19)

Features

• [cli] Add a pulumi package for npx support

• [cli] Add the pulumi org member edit command
  #​23235

• [cli] Add the pulumi org member remove command
  #​23237

• [cli/cloud] Add pulumi deployment get to retrieve details for a specific deployment
  #​23238

• [cli/cloud] Add pulumi insights account scan get <account> <scan-id> to show the full workflow run for a single Insights scan
  #​23255

• [cli/cloud] Add pulumi insights account scan list <account> to discover recent scan IDs to feed into pulumi insights account scan log
  #​23255

• [cli/deployment] Add dedicated flags for each deployment setting
  #​23236

• [cli/do] Add the start of pulumi do
  #​23176

• [cli/neo] Add --print/-p to pulumi neo to run a single prompt non-interactively and print the agent's final response to stdout
  #​23245

Bug Fixes

• [cli/cloud] Fix pulumi insights account scan log --all to follow the server's pagination cursor through the end of the log, and render --job/--step mode as structured lines instead of an empty raw-string blob
  #​23256

• [sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz output
  #​23240

• [sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
  #​23253

v3.241.0

Compare Source

3.241.0 (2026-05-18)

Features

• [cli] Add --output json to pulumi preview for a structured JSON summary of the operation result
  #​22927

• [cli] Add --output json to pulumi refresh for a structured JSON summary of the operation result
  #​22928

• [cli] Add --output json to pulumi destroy for a structured JSON summary of the operation result
  #​22875

• [cli] Add pulumi stack schedule get to retrieve the configuration of a scheduled action
  #​23153

• [cli] Add pulumi stack schedule list to list all scheduled actions configured for a stack
  #​23153

• [cli] Add pulumi stack schedule new to create a raw, drift, or TTL deployment schedule for a stack
  #​23153

• [cli] Add pulumi stack webhook delivery list to list recent deliveries for a stack webhook
  #​23116

• [cli] Add pulumi stack webhook delivery redeliver to redeliver a webhook event
  #​23118

• [cli] Add pulumi stack webhook edit to update an existing stack webhook
  #​23139

• [cli] Add pulumi stack webhook new to create a new stack webhook
  #​23101

• [cli] Add pulumi stack webhook remove to delete a stack webhook
  #​23102

• [cli] Add pulumi org webhook delivery list to list recent deliveries for an organization webhook
  #​23179

• [cli] Add pulumi org webhook edit to update an organization webhook
  #​23179

• [cli] Add pulumi org webhook list to list all webhooks configured for an organization
  #​23174

• [cli] Add pulumi org webhook new to create a new organization webhook
  #​23172

• [cli] Add pulumi org webhook ping to send a test ping to an organization webhook
  #​23179

• [cli] Add pulumi org webhook remove to delete an organization webhook
  #​23177

• [cli] Add pulumi stack drift list to list drift detection runs for a stack
  #​23159

• [cli] Add pulumi stack drift status to show the drift detection status for a stack
  #​23161

• [cli] Add pulumi stack schedule edit to update an existing scheduled deployment action
  #​23153

• [cli] Add pulumi stack schedule remove to delete a scheduled deployment action
  #​23153

• [cli] Add pulumi audit-log export command
  #​23212

• [cli] Add pulumi org audit-log list
  #​23211

• [cli] Add pulumi policy compliance list to list compliance results grouped by entity
  #​23209

• [cli] Add pulumi policy group new command to allow creating new policy groups
  #​23202

• [cli] Add the pulumi policy issue get command
  #​23200

• [cli/cloud] Add pulumi insights account list to list Insights accounts in an organization
  #​23091

• [cli/cloud] Add pulumi insights account new to create a Pulumi Insights account
  #​23093

• [cli/cloud] Add pulumi insights account scan log to fetch log output for a Pulumi Insights scan
  #​23092

• [cli/cloud] Add pulumi insights account scan to trigger a resource discovery scan for an Insights account
  #​23094

• [cli/cloud] Implement pulumi stack history events to retrieve engine events for a Pulumi Cloud update
  #​23109

• [cli/cloud] Add pulumi deployment cancel to terminate an in-progress deployment
  #​23164

• [cli/cloud] Add pulumi org member list to list the members of an organization
  #​23170

• [cli/cloud] Add pulumi org usage get to fetch the resources-under-management summary for an organization
  #​23166

• [cli/cloud] Add pulumi org role assign to assign a custom role to a team
  #​23117

• [cli/cloud] Add pulumi org role edit to update a custom role's name, description, or permission tree
  #​23117

• [cli/cloud] Add pulumi org role list to list custom roles for an organization
  #​23117

• [cli/cloud] Add pulumi org role new to create a custom role from a permission descriptor JSON file
  #​23117

• [cli/cloud] Add pulumi org role remove to delete a custom role from an organization
  #​23117

• [cli/env] Update esc to v0.24.0
  #​23213

• [cli/neo] Show tool call arguments and results in pulumi neo via a ctrl+o overlay
  #​23075

• [cli/neo] Multi-line input in pulumi neo - Enter sends, Shift+Enter / Alt+Enter / Ctrl+J / trailing \ insert a newline
  #​23151

• [cli/neo] Make pulumi neo visible by default; the PULUMI_EXPERIMENTAL gate has been removed
  #​23228

• [cli/policy] Add pulumi policy group edit to edit policy groups
  #​23206

• [cli/policy] Add pulumi policy group remove command to remove policies
  #​23208

• [cli/policy] Add the pulumi policy group get command
  #​23203

Bug Fixes

• [cli] Add pulumi policy issue list command
  #​23198

• [cli] Fix pulumi org role list to send the uxPurpose query parameter the service requires
  #​23231

• [engine] Fix pulumi import dropping map entries whose value matched the enum member of a Union<Input<Enum<T>>, ...> element type
  #​23190

• [cli/cloud] Surface a clear error when pulumi api --all is used against an endpoint whose response is not paginatable, instead of silently emitting an empty array
  #​23191
  #​23128

• [cli/cloud] pulumi deployment settings edit no longer clears fields that the patch does not mention
  #​23217

• [cli/import] Generate PCL for asset and archive inputs when importing resources, instead of returning a "NYI" error
  #​22938

• [cli/import] Preserve asset/archive/resource-reference values inside map and array inputs, and HCL-escape map keys containing ${ or %{ template sequences
  #​23222

• [cli/install] Hint at adding a .git / _git when VCS URL resolution fails
  #​22831

• [cli/neo] Transparently reconnect the Neo event stream after a transient network drop, resuming from the last seen event ID
  #​23134

• [cli/neo] Show preparing in the live preview/up block until the first resource arrives
  #​23155

• [cli/new] Support specific versions when using registry-backed templates with pulumi new
  #​22909

v3.239.0

Compare Source

3.239.0 (2026-05-14)

Features

• [cli] Add --output json to pulumi import for a structured JSON summary of the operation result
  #​22929

• [cli] Add pulumi stack get to retrieve detailed information about a stack
  #​23106

• [cli] Add pulumi stack webhook get to inspect a single stack webhook
  #​23088

• [cli] Add pulumi stack webhook ping to send a test ping to a stack webhook

• [cli/cloud] Add pulumi deployment list to list deployment executions for a stack
  #​23114

• [sdkgen] Validate that schema names can't conflict with module paths
  #​22956

Bug Fixes

• [engine] Fix batch encrypt/decrypt errors being silently dropped
  #​23149

• [cli/cloud] Fix pulumi api help examples that referenced non-existent operation IDs and response fields
  #​23125

v3.238.0

Compare Source

3.238.0 (2026-05-13)

Features

• [cli] Add a --language flag to pulumi package add to run outside a Pulumi project or plugin
  #​22791

• [cli] Add --output json to pulumi up for a structured JSON summary of the operation result
  #​22870

• [cli] Recommend pulumi cloud api describe in pulumi cloud api --help to verify operation parameters before calling
  #​22881

• [cli] Add pulumi stack webhook list to list all webhooks configured for a stack
  #​23082

• [cli/cloud] Rename pulumi cloud api to pulumi api
  #​22970

• [cli/cloud] Add pulumi insights resource get to look up a single resource discovered by Pulumi Insights
  #​23077

• [cli/cloud] Add pulumi template list to list registry-backed templates
  #​23074

• [cli/cloud] Rename the --format flag to --output on pulumi api and its subcommands
  #​23072

• [cli/cloud] Add pulumi insights resource search to search for resources discovered by Pulumi Insights
  #​23087

• [cli/engine] Add --skip-plugin-pre-install to skip up-front plugin installation

• [engine] Fail the deployment when an after hook fails
  #​22935

• [cli/neo] Render the agent's TODO list in the pulumi neo TUI
  #​22864

• [cli/neo] Add --approval-mode and --permission-mode flags to pulumi neo, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
  #​22950

• [cli/package] When invoked by an AI coding agent, print pulumi api pointers after pulumi package add and pulumi package gen-sdk
  #​22904

• [pkg/testing] Recognize the hcl and pcl runtimes in integration.ProgramTest
  #​23018

• [pkg/testing] Add l1-config-types-optional conformance test for PCL's optional type constructor
  #​23108

Bug Fixes

• [backend/diy] Minify JSON persisted by the DIY backend for checkpoints, history, and stack tags
  #​22245

• [cli/import] Ignore property values that do not conform to the schema in maps
  #​23076

• [cli/import] Stop dropping map values whose element type is a union of Input-wrapped types during HCL2 import

• [cli/neo] Use the selected stack's organization when starting a pulumi neo task instead of the user's default organization
  #​22951

• [cli/neo] Include the failure reason in pulumi_preview and pulumi_up tool results when they fail, so the agent can react instead of seeing a blank error
  #​22948

• [cli/neo] Retry pulumi neo task creation without the attached stack when the backend rejects it with an "invalid entities" error
  #​22945

• [cli/neo] Surface the failure reason when a filesystem tool call fails, instead of returning an empty result to the agent
  #​23019

• [cli/package] Use --output=markdown (not the renamed-away --format=markdown) in the pulumi api pointers printed by pulumi package add and pulumi package gen-sdk
  #​23098

• [programgen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22931

• [sdk/python] Speed up python program resolution by using a set instead of deque to track outputs
  #​22946

Miscellaneous

• [cli/neo] Tag Neo tasks created from the CLI with a cli source so the service can attribute their origin
  #​23099

• [sdk/nodejs] Add registerPackage helper to cache package references per deployment
  #​23014

v3.237.0

Compare Source

3.237.0 (2026-05-08)

Features

• [cli] Include the running command name and detected AI agent (when present) in the User-Agent header on Pulumi Cloud API requests
  #​22908

• [engine] Include result on the summary engine event
  #​22883

• [sdkgen] Eagerly error on schemas with unconstructable types
  #​22890

• [cli/cloud] Auto-fill lang and os query parameters on pulumi cloud api GET/HEAD requests when the matched OpenAPI operation declares them and the caller hasn't supplied them
  #​22726

• [cli/package] Add pulumi package new to bootstrap a Pulumi package from a template
  #​22837

Bug Fixes

• [cli] Add blank-line gaps between pulumi neo TUI conversation blocks
  #​22846

• [cli/import] Preserve __-prefixed keys when generating PCL for imported resource state, so provider-defined payloads round-trip correctly
  #​22856

• [cli/neo] Render ux__ask_user clarifying questions as questions instead of approval prompts
  #​22862

• [cli/neo] Fix a panic when cancelling a pulumi neo session
  #​22898

• [cli/neo] Render every assistant message in the TUI scrollback so multi-turn commentary no longer disappears between tool calls

• [cli/neo] Return the bare stack name and canonical project name from pulumi_preview and pulumi_up tool results instead of echoing the raw input
  #​22891

• [codegen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22916

• [programgen/pcl] Fix PCL binder panic when a conditional mixes a Promise-typed branch with a try() branch
  #​22907

• [sdk/python] Support NotRequired, Required and total=False in TypedDicts for component resource arg types
  #​22858

Miscellaneous

• [cli/cloud] Auto-fit pulumi cloud api list table to terminal width and replace the
  tabular table renderer with go-pretty

  #​22874

• [sdk/nodejs] Test on Node.js 26 and drop 20
  #​22872

v3.236.0

Compare Source

3.236.0 (2026-05-06)

v3.235.0

Compare Source

3.235.0 (2026-05-05)

Features

• [cli] Add pulumi logs decrypt command for viewing logs
  #​22523

• [cli] Bundle the hcl language host (from pulumi-labs/pulumi-hcl)
  #​22807

• [cli] Automatically install the hcl converter from pulumi-labs/pulumi-hcl when running pulumi convert --from hcl
  #​22816

• [pcl] Add read blocks to PCL to read resources via ID and query instead of registering them
  #​22641

• [cli/cloud] Add pulumi cloud api <op-or-path> for calling any Pulumi Cloud API
  endpoint, with --field/--header/--input/--body flag handling, path
  template binding, content negotiation via --format, and --dry-run

  #​22771

• [cli/cloud] Add --paginate to pulumi cloud api: follow continuation cursors,
  accumulate items into a single JSON envelope, and surface progress
  events to stderr with --emit-events (page, complete, truncated,
  partial_failure, cancelled).

  #​22772

Bug Fixes

• [cli] Fix the pulumi neo shell tool to honor the agent-supplied timeout and to terminate the whole process tree (and unblock cmd.Wait) when the deadline fires, so commands like kubectl logs -f no longer hang Neo indefinitely.
  #​22820

• [cli] Surface the error and exit when pulumi neo fails to create the underlying task, instead of leaving the TUI stuck in Thinking…
  #​22825

• [codegen/go] Correctly generate []pulumi.Asset & []pulumi.Archive
  #​22827

• [cli/neo] Exit cleanly when the user presses Ctrl+C twice in pulumi neo instead of hanging until a third press
  #​22821

• [engine] The engine now caches schemas at PULUMI_HOME/schemas, and will cache for parameterised packages as well
  #​22812

• [sdk-python] Preserve __-prefixed keys (e.g. __type discriminators) across RPC deserialization, matching the behavior of the other language SDKs
  #​22834

• [programgen/{nodejs,python}] Fix programgen to emit the right length check for string length
  #​22802

Miscellaneous

• [cli] Replace the Pulumipus mascot in the pulumi neo welcome banner with new Neo-branded ASCII art.
  #​22817

v3.234.0

Compare Source

3.234.0 (2026-05-01)

Features

• [cli/cloud] Add pulumi cloud api describe for inspecting the parameters, request
  body, and response schema of any Pulumi Cloud API operation, with
  text, markdown, and JSON output

  #​22770

• [cli/cloud] Add pulumi cloud api list for browsing every endpoint exposed by the Pulumi
  Cloud OpenAPI spec, with table and JSON output

  #​22769

Bug Fixes

• [engine] Revert changes to property path parsing that resulted in errors for currently valid paths

v3.233.0

Compare Source

3.233.0 (2026-04-30)

Features

• [auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api
  #​22638

• [cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
  #​22494

• [cli] Implement the filesystem__grep and filesystem__content_replace local tools
  for pulumi neo. grep runs a regex search across files in the project root
  with an optional include glob filter and returns results in path:lineno: line
  form. content_replace performs a literal multi-file search-and-replace with a
  file_pattern glob and dry_run preview mode. Both tools skip binary files,
  hidden directories, and node_modules, and reject paths outside the project
  root. Their input schemas match the cloud-side tool definitions.

  #​22655

• [cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo
  agent. The Neo TUI renders a persistent bordered block for each operation that
  streams changed resources and diagnostics as the engine runs and finalizes with a
  summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

  #​22697

• [engine] Add List to the provider protocol and schema
  #​22693

Bug Fixes

• [engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!"
  #​22679

• [programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously
  PCL bound every method call's return type as Output<T>, which caused downstream program-gen
  to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g.
  methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

  #​22696

• [backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages
  #​22701

• [codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously
  the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg>
  itself, producing identifiers that would not compile. Affects generated code for method return
  types (and other schema positions) that reference pulumi:providers:<pkg>.

  #​22696

• [codegen/nodejs] Generate unqualified Provider references for the package's own provider resource when emitting
  TypeScript code inside that package. Previously the generator always qualified the name as
  <pkg>.Provider, which does not resolve when no <pkg> namespace import is in scope.

  #​22696

• [codegen/nodejs] Import the correct class name for a provider resource. Imports for pulumi:providers:<pkg> used
  the title-cased package name instead of Provider, producing a phantom identifier that clashed
  with the containing package's component/resource classes.

  #​22696

• [programgen/nodejs] Emit await for call(...) invocations of methods whose return type is marked plain, and
  force the generated program into an async export = async () => ... wrapper whenever such a
  call is present. The Node SDK returns Promise<T> for plain methods; previously program-gen
  used the result directly, which did not match its runtime type.

  #​22696

• [codegen/python] Avoid a self-import (import pulumi_<pkg> inside pulumi_<pkg>/<module>.py) when referencing
  the package's own provider resource. Python referenced the Provider as pulumi_<pkg>.Provider
  even inside that package, which caused a circular import at runtime.

  #​22696

• [sdk/python] Reduce internal Output[T] data to a single asyncio.Future
  #​22661

• [sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values
  #​22552

Miscellaneous

• [auto/go] Drop the "With" prefix from generated option helpers so they match the naming of the existing optXxx packages
  #​22682

v3.232.0

Compare Source

3.232.0 (2026-04-22)

Features

• [cli] Add an experimental pulumi neo command that creates a Pulumi Neo agent task in CLI
  tool-execution mode and runs the local tool loop. Filesystem and shell tool calls
  issued by the agent run on the user's machine in their working directory; the
  interactive chat continues to happen in the Pulumi Console at the URL the command
  prints. Hidden behind PULUMI_EXPERIMENTAL.

  #​22473

• [cli] Add support for handling user approval requests in the pulumi neo terminal UI.
  When the agent requests confirmation for a sensitive action, the TUI prompts the
  user and forwards their response back to the Pulumi Console. Hidden behind
  PULUMI_EXPERIMENTAL.

  #​22589

• [cli] Add an interactive terminal UI for pulumi neo built with bubbletea, rendering
  agent messages, tool calls, and streaming output in the terminal alongside the
  Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.

  #​22570

• [cli] Switch logging library from glog to slog.

BREAKING: any if logging.V(x) { need to be changed to if logging.V(x).Enabled()

#​22548

• [cli] Add a plan-mode toggle to the pulumi neo TUI, bound to Shift+Tab. When
  plan mode is on, Neo explores and asks questions without writing files,
  running pulumi up, or opening PRs, and surfaces an approved plan via a
  dedicated approval gate. The toggle must be set before the first message
  (plan mode is task-level on the wire); approving the proposed plan exits
  plan mode automatically.

  #​22634

• [cli] The pulumi neo TUI now drives its "thinking" spinner off a single declarative
  rule (the spinner stays on until a final event — final assistant message, approval
  request, cancellation, or error — lands), so the indicator no longer flickers off
  when the agent hands off tool calls to the CLI or when streaming text arrives
  between tools. Press Esc during a turn to ask the agent to cancel; the label
  switches to "Cancelling..." until the backend acknowledges.

  #​22637

• [cli] pulumi neo now executes the edit filesystem tool locally, matching the schema
  and response wording of the upstream mcp-claude-code tool so the agent sees
  identical output whether the call ran on Cloud or CLI. edit performs exact-string
  replacement with occurrence-count validation, and creates a new file when the
  target is missing and old_string is empty.

  #​22654

Bug Fixes

• [cli] Render user messages in the pulumi neo TUI as soon as they're submitted
  instead of waiting for the Pulumi Cloud event stream to echo them back.
  The initial prompt passed on the command line also appears in the
  transcript at startup. Self-echoes from the server are de-duplicated;
  user input that originated from another client (e.g. the web UI on the
  same task) still renders.

  #​22629

• [cli] Wrap warnings, errors, and user-message bubbles to the terminal width in the
  pulumi neo TUI. Previously these blocks rendered as single long lines that
  were clipped at the right edge of the viewport. On resize, all width-dependent
  transcript blocks (user messages, warnings, errors, assistant messages) now
  reflow to the new terminal width.

  #​22635

• [cli/policy] Fix policy ls to use the default org name, not username
  #​22656

• [engine] Fix provider registry race condition in parallel delete-before-replace
  #​21487

• [engine] Signal providers to cancel before closing them during replacement

• [sdkgen] Error on 'id' in state inputs
  #​22636

• [programgen/python] Add necessary casts between types in generated programs
  #​22567

• [sdkgen/go] Fix caching of package references to be per-deployment not per-process
  #​22170

Miscellaneous

• [java] Upgrade java to v1.25.0
  #​22673

• [auto/go] Generate command methods for the Go Automation API codegen
  #​22612

• [sdk] Clarify docs on the remote parameter of ComponentResource / Resource in the Node and Python SDKs
  #​22603

• [sdk/dotnet] Upgrade dotnet to v3.103.1
  #​22676

• [yaml] Upgrade yaml to v1.32.0
  #​22674

v3.231.0

Compare Source

3.231.0 (2026-04-16)

Features

• [cli] Auto-detect Mercurial repository metadata for pulumi up / pulumi preview updates, mirroring existing Git support
  #​22618

• [engine] Send Cancel RPC to plugins on host close for graceful shutdown
  #​22569

• [engine] Pass resource options to hooks through the engine
  #​22582

• [engine] Add GetDeploymentInfo to the resource monitor service

• [auto/go] Add New command to Automation API
  #​22439

• [auto/{go,nodejs,python}] Add --diff to automation api for destroy
  #​22563

• [auto/python] Add new command to Automation API
  #​22439

• [pcl] Support for resource hooks in PCL
  #​22365

• [sdk-nodejs] Warn when a non-ComponentResource class is passed in the explicit components list to componentProviderHost
  #​22619

• [sdk-python] Warn when a non-ComponentResource class is passed in the explicit components list to component_provider_host
  #​22619

• [cli/import] Add support for providers to be defined in the same import file as their users
  #​21671

• [cli/policy] ESC environment support for local policy packs
  #​22495

• [sdk/nodejs] Support package.yaml when using pnpm
  #​22491

• [sdk/python] Add function decorator variants for resource and error hooks
  #​22519

Bug Fixes

• [auto/{nodejs,python}] Support --run-program for inline programs with preview_refresh/destroy

• [backend/diy] Remove state lock for destroy and import with preview only for diy backend
  #​22561

• [engine] Fix snapshot integrity error with component/provider resources in refresh --run-program
  #​21817

• [pcl] Type list and tuple indices as integers not numbers
  #​22592

• [pcl] Builtin functions element and range take int parameters not numbers
  #​22597

• [programgen/{go,nodejs,python}] Fix some cases of name conflicts in program gen not being handled correctly
  #​22556

• [programgen/nodejs] Add necessary casts between types in generated programs
  #​22557

• [programgen/{nodejs,python}] Fix imports of camelCase modules
  #​22536

• [sdk/python] Support Input[Optional[T]] in Python runtime type unwrapping
  #​22553

• [sdkgen] Warn about modules nested under the index module which are not supported
  #​22531

Miscellaneous

• [java] Upgrade java to v1.24.0
  #​22615

• [yaml] Upgrade yaml to v1.31.1
  #​22610

• [sdk/dotnet] Upgrade dotnet to v3.103.0
  #​22614

• [sdk/nodejs] Replace got by fetch
  #​22533

v3.230.0

Compare Source

3.230.0 (2026-04-08)

Features

• [cli] Detect AI agents and send in update metadata
  #​22497

• [auto/nodejs] Add "org" commands (get-default, set-default, search, search ai) to the auto-generated interface
  #​22395

• [auto/nodejs] Add "new" command to the auto-generated interface
  #​22421

• [sdk/{nodejs,python}] Add Cancel handler to Python & Node.js providers
  #​22516

• [cli/policy] Add ESC environment resolution for policy packs
  #​22425

Bug Fixes

• [auto/go] Insert --non-interactive flag before "--" positional separator to avoid misinterpretation as a positional argument
  #​22462

• [ci] Add code coverage collection for Node.js automation tools tests
  #​22412

• [pcl] Allow key indexing into a map of resources created by range
  #​22498

• [programgen/go] Fix an issue with formatted index modules not importing correctly

• [cli/state] Check for Pulumi.yaml projects and backend option in state upgrade
  #​22483

• [sdk/go] Fix Go program generation for ternary expressions inside apply callbacks, add Go predeclared identifiers to reserved words, handle optional list types in union type codegen, and fix unmarshalOutput for known outputs with null elements.
  #​22460

• [sdk/nodejs] Fix inherited input properties missing from component schema when args interface extends another interface
  #​22446

• [sdk/python] Fix inherited input properties missing from component schema when args class inherits from a base class
  #​22484

Miscellaneous

• [java] Upgrade java to v1.23.0

• [sdk/dotnet] Upgrade dotnet to v3.102.1

• [yaml] Upgrade to v1.31.0
  #​22501

• [programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove mimeType & readDir from PCL
  #​22449

v3.229.0

Compare Source

3.229.0 (2026-04-02)

Features

• [auto/python] Add org get-default and set-default commands to Automation API

• [backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve performance
  #​22373

• [cli] Allow TRACEPARENT to be set for CLI invocations, parenting the pulumi spans under an existing parent span
  #​22369

• [cli/display] Add --urns flag to display full resource URNs instead of short names in preview, up, destroy, refresh, import, and watch commands
  #​22007

• [pcl] Type integer literals as integers rather than numbers in PCL
  #​22268

• [pcl] Support parameterized providers in PCL
  #​22251

• [protobuf] Add RunPlugin2 bidirectional streaming RPC to LanguageRuntime proto
  #​22389

• [yaml] Update YAML runtime to 1.30.2
  #​22426

• [sdk/go] Add org get-default and set-default commands to Automation API

• [sdk/nodejs] Modernize generated tsconfig.json to align with TypeScript defaults
  #​22370

• [cli/policy] Add a new policy analyze command to run a policy pack against existing state
  #​22250

Bug Fixes

• [backend/diy] Remove state lock for refresh --preview-only for diy backend
  #​22385

• [cli] Fix OTEL flushing on provider shutdown
  #​22358

• [cli/display] Fix deadlock in message renderer when cancelling an operation
  #​22433

• [engine] Fix --include and --exclude not working for program-based refresh (RefreshV2)
  #​22404

• [engine] Parallelize plugin cancellation in SignalCancellation
  #​22431

• [pcl] Fix looking up variables in parent scopes
  #​22379

• [pcl] Apply default values from resource schemas
  #​22393

• [sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
  #​22397

• [sdk/nodejs] Allow TypeScript 6 as a peer dependency
  #​22340

• [sdk/nodejs] Fix closure serialization for __importStar-wrapped modules
  #​22388

• [sdk/python] Cache type metadata and class references in Python SDK to reduce CPU overhead during serialization
  #​22422

• [sdk/python] Replace busy-wait polling in wait_for_rpcs with asyncio.wait
  #​22411

Miscellaneous

• [cli] Add update metadata to the otel root span
  #​22357

• [java] Update to v1.22.0
  #​22437

• [sdk/nodejs] Use nodenext for moduleResolution and module
  #​22363

v3.228.0

Compare Source

3.228.0 (2026-03-25)

Features

• [cli] Don't apply the secrets filter to true and false (case-insensitive)
  #​22269

• [cli] Add grpcs:// support and header authentication to OTLP exporter
  #​22320

• [cli] Read OTEL_RESOURCE_ATTRIBUTES
  #​22329

• [auto/nodejs] Add low-level "cancel" command to the auto-generated interface
  #​22156

• [cli/state] Allow pulumi state delete to accept multiple resource URNs and delete them in a dependency-safe order

Bug Fixes

• [cli] Allow relative file paths for --otel-traces
  #​22300

• [cli] Bridge opentracing spans from providers into OTel
  #​22313

• [cli] Correctly end spans for GRPC streams
  #​22304

• [cli/about] Do not include the access token in plain text
  #​22347

• [display] Fix detailed diff indentation so changed resources are not visually nested under unrelated visible resources when unchanged parents are hidden.
  #​22317

• [cli/import] Fix import codegen when generating references to non-standard names
  #​22319

• [engine] Update golang version
  #​22277

• [pcl] Typecheck component inputs in PCL programs
  #​22292

• [programgen/{nodejs,python}] Fix literal conversion when calling into local components
  #​22306

Miscellaneous

• [cli] Add CLI metadata to the root span
  #​22305

• [cli] Add more OTel interceptors for GRPC clients
  #​22309

• [cli] Add spans for plugin installation and add more attributes for dependency installation
  #​22303

• [cli] Allow setting a GRPC endpoint for performance tests
  #​22330

• [backend/diy] Start deprecation of non-project mode for DIY backends
  #​19625

v3.227.0

Compare Source

3.227.0 (2026-03-19)

Features

• [engine] The engine will fill in Name and Type for ResourceReference values on the wire protocol
  #​22208

• [sdk/bun] Add support for running policy packs with bun
  #​22206

• [cli/policy] Auto-install missing policy analyzer plugins
  #​22196

• [sdk/python] Add lock file detection for picking the Python toolchain
  #​22234

Bug Fixes

• [cli] Use distinct exit codes for different types of error
  #​22205

• [cli] Improve SAML SSO reauthorization error message

• [engine] Fix snapshot integrity error in refresh v2 with changed parents
  #​22190

• [pcl] Continue running after errors when running with --continue-on-error
  #​22171

• [pcl] Deprecate labels on package blocks
  #​22253

• [programgen] Preserve traversal parts in rewriteRelativeTraversalExpression
  #​22249

• [sdk/bun] Check for an SDK version compatible with bun
  #​22262

• [programgen/nodejs] Correctly generate for expressions
  #​22219

• [sdk/go] Add support for Azure DevOps git URLs in pulumi package publish code paths
  #​22217

• [programgen/python] Correctly generate list & dictionary comprehension in Python code
  #​22182

Miscellaneous

• [backend] Move CloudConsoleURL from httpstate to httpstate/client
  #​22258

• [docs] Move remaining content from /developer-docs to /docs
  #​22225

• [sdk/bun] Add a test for the function serialization error message when using bun
  #​22207

• [sdk/bun] Run policy language tests for bun
  #​22209

• [sdk/bun] Mark pulumi-language-bun as a bundled plugin
  #​22265

• [sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and run-policy-pack
  #​22210

v3.226.0

Compare Source

3.226.0 (2026-03-11)

Features

• [backend/service] Automatically repair snapshot integrity issues, while sending an error event to the backend for further diagnosis
  [#​22179](https://redirect.github.com/pulumi/pulumi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 36 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.17 -> 1.24.0
github.com/pulumi/pulumi/pkg/v3	v3.11.0 -> v3.154.0
github.com/spf13/afero	v1.6.0 -> v1.9.5
cloud.google.com/go	v0.81.0 -> v0.112.1
github.com/djherbis/times	v1.2.0 -> v1.5.0
github.com/dustin/go-humanize	v1.0.0 -> v1.0.1
github.com/gofrs/uuid	v3.3.0+incompatible -> v4.2.0+incompatible
github.com/gogo/protobuf	v1.3.1 -> v1.3.2
github.com/golang/glog	v0.0.0-20160126235308-23def4e6c14b -> v1.2.4
github.com/golang/protobuf	v1.5.2 -> v1.5.4
github.com/golang/snappy	v0.0.3 -> v0.0.4
github.com/google/go-cmp	v0.5.5 -> v0.6.0
github.com/google/go-querystring	v1.0.0 -> v1.1.0
github.com/google/wire	v0.5.0 -> v0.6.0
github.com/hashicorp/go-retryablehttp	v0.7.0 -> v0.7.7
github.com/hashicorp/vault/api	v1.1.0 -> v1.12.0
github.com/inconshreveable/mousetrap	v1.0.0 -> v1.1.0
github.com/json-iterator/go	v1.1.9 -> v1.1.12
github.com/kevinburke/ssh_config	v0.0.0-20190725054713-01f96b0aa0cd -> v1.2.0
github.com/mattn/go-colorable	v0.1.6 -> v0.1.13
github.com/modern-go/reflect2	v1.0.1 -> v1.0.2
github.com/sabhiram/go-gitignore	v0.0.0-20180611051255-d3107576ba94 -> v0.0.0-20210923224102-525f6e181f06
github.com/sergi/go-diff	v1.1.0 -> v1.3.2-0.20230802210424-5b0b94c5c0d3
github.com/texttheater/golang-levenshtein	v0.0.0-20191208221605-eb6844b05fc6 -> v1.0.1
github.com/uber/jaeger-client-go	v2.22.1+incompatible -> v2.30.0+incompatible
github.com/uber/jaeger-lib	v2.2.0+incompatible -> v2.4.1+incompatible
github.com/xanzy/ssh-agent	v0.2.1 -> v0.3.3
go.opencensus.io	v0.23.0 -> v0.24.0
go.uber.org/atomic	v1.7.0 -> v1.9.0
gocloud.dev	v0.23.0 -> v0.37.0
gocloud.dev/secrets/hashivault	v0.23.0 -> v0.37.0
golang.org/x/crypto	v0.0.0-20210506145944-38f3c27a63bf -> v0.45.0
golang.org/x/net	v0.0.0-20210505214959-0714010a04ed -> v0.47.0
golang.org/x/oauth2	v0.0.0-20210427180440-81ed05c6b58c -> v0.25.0
golang.org/x/sync	v0.0.0-20210220032951-036812b2e83c -> v0.18.0
golang.org/x/sys	v0.0.0-20210817190340-bfb29a6856f2 -> v0.38.0
gopkg.in/yaml.v3	v3.0.0-20210107192922-496545a6307b -> v3.0.1

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 32 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.17 -> 1.25.8
github.com/pulumi/pulumi/pkg/v3	v3.11.0 -> v3.209.0
github.com/spf13/afero	v1.6.0 -> v1.9.5
cloud.google.com/go	v0.81.0 -> v0.112.1
github.com/Azure/go-ansiterm	v0.0.0-20170929234023-d6e3b3328b78 -> v0.0.0-20210617225240-d185dfc1b5a1
github.com/djherbis/times	v1.2.0 -> v1.5.0
github.com/dustin/go-humanize	v1.0.0 -> v1.0.1
github.com/gofrs/uuid	v3.3.0+incompatible -> v4.2.0+incompatible
github.com/gogo/protobuf	v1.3.1 -> v1.3.2
github.com/golang/glog	v0.0.0-20160126235308-23def4e6c14b -> v1.2.5
github.com/golang/groupcache	v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/golang/protobuf	v1.5.2 -> v1.5.4
github.com/golang/snappy	v0.0.3 -> v0.0.4
github.com/google/go-cmp	v0.5.5 -> v0.7.0
github.com/google/go-querystring	v1.0.0 -> v1.1.0
github.com/google/wire	v0.5.0 -> v0.6.0
github.com/hashicorp/go-retryablehttp	v0.7.0 -> v0.7.7
github.com/hashicorp/go-sockaddr	v1.0.2 -> v1.0.6
github.com/hashicorp/vault/api	v1.1.0 -> v1.12.0
github.com/inconshreveable/mousetrap	v1.0.0 -> v1.1.0
github.com/json-iterator/go	v1.1.9 -> v1.1.12
github.com/kevinburke/ssh_config	v0.0.0-20190725054713-01f96b0aa0cd -> v1.2.0
github.com/modern-go/reflect2	v1.0.1 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/sabhiram/go-gitignore	v0.0.0-20180611051255-d3107576ba94 -> v0.0.0-20210923224102-525f6e181f06
github.com/sergi/go-diff	v1.1.0 -> v1.4.0
github.com/texttheater/golang-levenshtein	v0.0.0-20191208221605-eb6844b05fc6 -> v1.0.1
github.com/uber/jaeger-client-go	v2.22.1+incompatible -> v2.30.0+incompatible
github.com/uber/jaeger-lib	v2.2.0+incompatible -> v2.4.1+incompatible
github.com/xanzy/ssh-agent	v0.2.1 -> v0.3.3
go.opencensus.io	v0.23.0 -> v0.24.0
go.uber.org/atomic	v1.7.0 -> v1.11.0
gocloud.dev	v0.23.0 -> v0.37.0
gopkg.in/yaml.v3	v3.0.0-20210107192922-496545a6307b -> v3.0.1