chore(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.256.0 to 3.258.0 in /deploy

[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.256.0 to 3.258.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.258.0

3.258.0 (2026-08-17)

Features

• [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #24212
• [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #24226
• [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack #24232

Bug Fixes

• [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens #24288
• [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces #24288
• [cli/import] pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them #24261
• [auto/python] Add missing program argument on preview_refresh and preview_destroy stack methods #24274
• [cli/new] Fix cloning templates and repositories into paths containing symlinks with absolute targets #24329
• [cli/do] Fix global project lookup #24334

Improvements

• [sdk/python] Use the resource monitor's advertised feature set consistently throughout the Python SDK #24308

Miscellaneous

• [cli] Rewrite the pulumi login and pulumi logout help text to cover all supported state backends and document PULUMI_ACCESS_TOKEN, --default-org, and --interactive #24319

v3.257.0

3.257.0 (2026-08-13)

Features

• [cli] Offer to create a first project after logging in to an account with no stacks #24133
• [cli/do] Auto-assign identifiers to existing stack resources in pulumi do input expressions, and add pulumi do show-resources to list them #24184
• [cli/do] Make "pulumi do <pkg> <resource> patch <name> work in stateful mode, overlaying the supplied inputs onto the existing snippet" #24295
• [cli/state] Implement pulumi state get to show individual resources #24191
• [cli/do] Fall back to an auto-created project and stack under PULUMI_HOME when pulumi do is invoked outside of a Pulumi project #24231

Bug Fixes

• [sdkgen/go] Generated output-form invokes pass their arguments to the core SDK without resolving them first, so invoke dependencies can be inferred from arguments; generated SDKs now require pulumi SDK v3.255.0 or later #24060
• [cli] Make 'pulumi stack history events --summary report the program errors from the language host #24111
• [cli/cloud] pulumi api: repeated -H/--header values for the same header name now all reach the wire, instead of each one silently overwriting the last #24180
• [cli/package] Maintain --server when adding to the packages section of Pulumi.yaml #24189
• [sdk/go] Fix panics in hooks to not crash the entire process #24218
• [programgen/go] for expressions are now generated as Go loops #24228
• [programgen/go] Fix invalid _ := index statement emitted for resources with a numeric range whose value variable is unused #24227
• [sdk/python] Report an error instead of hanging when a Python resource depends on its own parent #24230
• [sdkgen/go] Generate the missing Go input types for resource input properties that are deeply nested collections of object types #24236
• [programgen/go] Rename properties that collide with reserved names (e.g. elementType) the same way SDK codegen does, instead of emitting uncompilable code #24235
• [cli/display] Show the value being added when a refresh or provider diff reports an added property #24245

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.258.0 (2026-08-17)

Features

• [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #24212
• [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #24226
• [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack #24232

Bug Fixes

• [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens #24288
• [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces #24288
• [cli/import] pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them #24261
• [auto/python] Add missing program argument on preview_refresh and preview_destroy stack methods #24274
• [cli/new] Fix cloning templates and repositories into paths containing symlinks with absolute targets #24329
• [cli/do] Fix global project lookup #24334

Improvements

• [sdk/python] Use the resource monitor's advertised feature set consistently throughout the Python SDK #24308

Miscellaneous

• [cli] Rewrite the pulumi login and pulumi logout help text to cover all supported state backends and document PULUMI_ACCESS_TOKEN, --default-org, and --interactive #24319

3.257.0 (2026-08-13)

Features

• [cli] Offer to create a first project after logging in to an account with no stacks #24133
• [cli/do] Auto-assign identifiers to existing stack resources in pulumi do input expressions, and add pulumi do show-resources to list them #24184
• [cli/do] Make "pulumi do <pkg> <resource> patch <name> work in stateful mode, overlaying the supplied inputs onto the existing snippet" #24295
• [cli/state] Implement pulumi state get to show individual resources #24191
• [cli/do] Fall back to an auto-created project and stack under PULUMI_HOME when pulumi do is invoked outside of a Pulumi project #24231

Bug Fixes

• [sdkgen/go] Generated output-form invokes pass their arguments to the core SDK without resolving them first, so invoke dependencies can be inferred from arguments; generated SDKs now require pulumi SDK v3.255.0 or later #24060
• [cli] Make 'pulumi stack history events --summary report the program errors from the language host #24111
• [cli/cloud] pulumi api: repeated -H/--header values for the same header name now all reach the wire, instead of each one silently overwriting the last #24180
• [cli/package] Maintain --server when adding to the packages section of Pulumi.yaml #24189
• [sdk/go] Fix panics in hooks to not crash the entire process #24218
• [programgen/go] for expressions are now generated as Go loops #24228
• [programgen/go] Fix invalid _ := index statement emitted for resources with a numeric range whose value variable is unused #24227
• [sdk/python] Report an error instead of hanging when a Python resource depends on its own parent #24230
• [sdkgen/go] Generate the missing Go input types for resource input properties that are deeply nested collections of object types #24236
• [programgen/go] Rename properties that collide with reserved names (e.g. elementType) the same way SDK codegen does, instead of emitting uncompilable code #24235
• [cli/display] Show the value being added when a refresh or provider diff reports an added property #24245
• [cli/plugin] Track when a plugin was last run so pulumi plugin ls reports an accurate last-used time on all platforms #24251
• [engine] Show secrets in diff display when --show-secrets is passed #24253
• [cli] Exit promptly when a command is cancelled while an HTTP request is being retried #24276

... (truncated)

Commits

• dd62362 Update language runtimes (#24345)
• ae55112 Add missing program arg for preview_refresh and preview_destroy (#24274)
• 8889401 Fix do help text about delete not needing stateless (#24305)
• cd514ac Fix config lookup for global projects (#24334)
• 6f63345 introduce begin update request/response types (#24332)
• 879a674 Fix cloning templates and repositories into paths containing symlinks with ab...
• 7601503 Rewrite pulumi login and pulumi logout help text (#24319)
• 6fb9daf Add opt-in OS-protected credential encryption (PULUMI_CREDENTIAL_STORE) (#24212)
• 4249214 StackAnalyze conformance test (#24232)
• 50fdf6f Migrate ConstructResult to use property.Map (#24234)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

The latest Buf updates on your PR. Results from workflow CI / buf-lint (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Aug 20, 2026, 11:24 PM

[coveralls]

Coverage Report for CI Build 32428535129

Coverage increased (+0.02%) to 37.663%

Details

• Coverage increased (+0.02%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	9670
Covered Lines:	3642
Line Coverage:	37.66%
Coverage Strength:	0.42 hits per line

---

💛 - Coveralls