chore(deps): update dependency @pulumi/pulumi to v3.234.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@pulumi/pulumi (source)	3.130.0 → 3.234.0

---

Release Notes

pulumi/pulumi (@​pulumi/pulumi)

v3.234.0

Compare Source

Features

• [cli/cloud] Add pulumi cloud api describe for inspecting the parameters, request
  body, and response schema of any Pulumi Cloud API operation, with
  text, markdown, and JSON output

  #​22770

• [cli/cloud] Add pulumi cloud api list for browsing every endpoint exposed by the Pulumi
  Cloud OpenAPI spec, with table and JSON output

  #​22769

Bug Fixes

• [engine] Revert changes to property path parsing that resulted in errors for currently valid paths

v3.233.0

Compare Source

Features

• [auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api
  #​22638

• [cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
  #​22494

• [cli] Implement the filesystem__grep and filesystem__content_replace local tools
  for pulumi neo. grep runs a regex search across files in the project root
  with an optional include glob filter and returns results in path:lineno: line
  form. content_replace performs a literal multi-file search-and-replace with a
  file_pattern glob and dry_run preview mode. Both tools skip binary files,
  hidden directories, and node_modules, and reject paths outside the project
  root. Their input schemas match the cloud-side tool definitions.

  #​22655

• [cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo
  agent. The Neo TUI renders a persistent bordered block for each operation that
  streams changed resources and diagnostics as the engine runs and finalizes with a
  summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

  #​22697

• [engine] Add List to the provider protocol and schema
  #​22693

Bug Fixes

• [engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!"
  #​22679

• [programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously
  PCL bound every method call's return type as Output<T>, which caused downstream program-gen
  to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g.
  methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

  #​22696

• [backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages
  #​22701

• [codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously
  the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg>
  itself, producing identifiers that would not compile. Affects generated code for method return
  types (and other schema positions) that reference pulumi:providers:<pkg>.

  #​22696

• [codegen/nodejs] Generate unqualified Provider references for the package's own provider resource when emitting
  TypeScript code inside that package. Previously the generator always qualified the name as
  <pkg>.Provider, which does not resolve when no <pkg> namespace import is in scope.

  #​22696

• [codegen/nodejs] Import the correct class name for a provider resource. Imports for pulumi:providers:<pkg> used
  the title-cased package name instead of Provider, producing a phantom identifier that clashed
  with the containing package's component/resource classes.

  #​22696

• [programgen/nodejs] Emit await for call(...) invocations of methods whose return type is marked plain, and
  force the generated program into an async export = async () => ... wrapper whenever such a
  call is present. The Node SDK returns Promise<T> for plain methods; previously program-gen
  used the result directly, which did not match its runtime type.

  #​22696

• [codegen/python] Avoid a self-import (import pulumi_<pkg> inside pulumi_<pkg>/<module>.py) when referencing
  the package's own provider resource. Python referenced the Provider as pulumi_<pkg>.Provider
  even inside that package, which caused a circular import at runtime.

  #​22696

• [sdk/python] Reduce internal Output[T] data to a single asyncio.Future
  #​22661

• [sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values
  #​22552

Miscellaneous

• [auto/go] Drop the "With" prefix from generated option helpers so they match the naming of the existing optXxx packages
  #​22682

v3.232.0

Compare Source

Features

• [cli] Add an experimental pulumi neo command that creates a Pulumi Neo agent task in CLI
  tool-execution mode and runs the local tool loop. Filesystem and shell tool calls
  issued by the agent run on the user's machine in their working directory; the
  interactive chat continues to happen in the Pulumi Console at the URL the command
  prints. Hidden behind PULUMI_EXPERIMENTAL.

  #​22473

• [cli] Add support for handling user approval requests in the pulumi neo terminal UI.
  When the agent requests confirmation for a sensitive action, the TUI prompts the
  user and forwards their response back to the Pulumi Console. Hidden behind
  PULUMI_EXPERIMENTAL.

  #​22589

• [cli] Add an interactive terminal UI for pulumi neo built with bubbletea, rendering
  agent messages, tool calls, and streaming output in the terminal alongside the
  Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.

  #​22570

• [cli] Switch logging library from glog to slog.

BREAKING: any if logging.V(x) { need to be changed to if logging.V(x).Enabled()

#​22548

• [cli] Add a plan-mode toggle to the pulumi neo TUI, bound to Shift+Tab. When
  plan mode is on, Neo explores and asks questions without writing files,
  running pulumi up, or opening PRs, and surfaces an approved plan via a
  dedicated approval gate. The toggle must be set before the first message
  (plan mode is task-level on the wire); approving the proposed plan exits
  plan mode automatically.

  #​22634

• [cli] The pulumi neo TUI now drives its "thinking" spinner off a single declarative
  rule (the spinner stays on until a final event — final assistant message, approval
  request, cancellation, or error — lands), so the indicator no longer flickers off
  when the agent hands off tool calls to the CLI or when streaming text arrives
  between tools. Press Esc during a turn to ask the agent to cancel; the label
  switches to "Cancelling..." until the backend acknowledges.

  #​22637

• [cli] pulumi neo now executes the edit filesystem tool locally, matching the schema
  and response wording of the upstream mcp-claude-code tool so the agent sees
  identical output whether the call ran on Cloud or CLI. edit performs exact-string
  replacement with occurrence-count validation, and creates a new file when the
  target is missing and old_string is empty.

  #​22654

Bug Fixes

• [cli] Render user messages in the pulumi neo TUI as soon as they're submitted
  instead of waiting for the Pulumi Cloud event stream to echo them back.
  The initial prompt passed on the command line also appears in the
  transcript at startup. Self-echoes from the server are de-duplicated;
  user input that originated from another client (e.g. the web UI on the
  same task) still renders.

  #​22629

• [cli] Wrap warnings, errors, and user-message bubbles to the terminal width in the
  pulumi neo TUI. Previously these blocks rendered as single long lines that
  were clipped at the right edge of the viewport. On resize, all width-dependent
  transcript blocks (user messages, warnings, errors, assistant messages) now
  reflow to the new terminal width.

  #​22635

• [cli/policy] Fix policy ls to use the default org name, not username
  #​22656

• [engine] Fix provider registry race condition in parallel delete-before-replace
  #​21487

• [engine] Signal providers to cancel before closing them during replacement

• [sdkgen] Error on 'id' in state inputs
  #​22636

• [programgen/python] Add necessary casts between types in generated programs
  #​22567

• [sdkgen/go] Fix caching of package references to be per-deployment not per-process
  #​22170

Miscellaneous

• [java] Upgrade java to v1.25.0
  #​22673

• [auto/go] Generate command methods for the Go Automation API codegen
  #​22612

• [sdk] Clarify docs on the remote parameter of ComponentResource / Resource in the Node and Python SDKs
  #​22603

• [sdk/dotnet] Upgrade dotnet to v3.103.1
  #​22676

• [yaml] Upgrade yaml to v1.32.0
  #​22674

v3.231.0

Compare Source

Features

• [cli] Auto-detect Mercurial repository metadata for pulumi up / pulumi preview updates, mirroring existing Git support
  #​22618

• [engine] Send Cancel RPC to plugins on host close for graceful shutdown
  #​22569

• [engine] Pass resource options to hooks through the engine
  #​22582

• [engine] Add GetDeploymentInfo to the resource monitor service

• [auto/go] Add New command to Automation API
  #​22439

• [auto/{go,nodejs,python}] Add --diff to automation api for destroy
  #​22563

• [auto/python] Add new command to Automation API
  #​22439

• [pcl] Support for resource hooks in PCL
  #​22365

• [sdk-nodejs] Warn when a non-ComponentResource class is passed in the explicit components list to componentProviderHost
  #​22619

• [sdk-python] Warn when a non-ComponentResource class is passed in the explicit components list to component_provider_host
  #​22619

• [cli/import] Add support for providers to be defined in the same import file as their users
  #​21671

• [cli/policy] ESC environment support for local policy packs
  #​22495

• [sdk/nodejs] Support package.yaml when using pnpm
  #​22491

• [sdk/python] Add function decorator variants for resource and error hooks
  #​22519

Bug Fixes

• [auto/{nodejs,python}] Support --run-program for inline programs with preview_refresh/destroy

• [backend/diy] Remove state lock for destroy and import with preview only for diy backend
  #​22561

• [engine] Fix snapshot integrity error with component/provider resources in refresh --run-program
  #​21817

• [pcl] Type list and tuple indices as integers not numbers
  #​22592

• [pcl] Builtin functions element and range take int parameters not numbers
  #​22597

• [programgen/{go,nodejs,python}] Fix some cases of name conflicts in program gen not being handled correctly
  #​22556

• [programgen/nodejs] Add necessary casts between types in generated programs
  #​22557

• [programgen/{nodejs,python}] Fix imports of camelCase modules
  #​22536

• [sdk/python] Support Input[Optional[T]] in Python runtime type unwrapping
  #​22553

• [sdkgen] Warn about modules nested under the index module which are not supported
  #​22531

Miscellaneous

• [java] Upgrade java to v1.24.0
  #​22615

• [yaml] Upgrade yaml to v1.31.1
  #​22610

• [sdk/dotnet] Upgrade dotnet to v3.103.0
  #​22614

• [sdk/nodejs] Replace got by fetch
  #​22533

v3.230.0

Compare Source

Features

• [cli] Detect AI agents and send in update metadata
  #​22497

• [auto/nodejs] Add "org" commands (get-default, set-default, search, search ai) to the auto-generated interface
  #​22395

• [auto/nodejs] Add "new" command to the auto-generated interface
  #​22421

• [sdk/{nodejs,python}] Add Cancel handler to Python & Node.js providers
  #​22516

• [cli/policy] Add ESC environment resolution for policy packs
  #​22425

Bug Fixes

• [auto/go] Insert --non-interactive flag before "--" positional separator to avoid misinterpretation as a positional argument
  #​22462

• [ci] Add code coverage collection for Node.js automation tools tests
  #​22412

• [pcl] Allow key indexing into a map of resources created by range
  #​22498

• [programgen/go] Fix an issue with formatted index modules not importing correctly

• [cli/state] Check for Pulumi.yaml projects and backend option in state upgrade
  #​22483

• [sdk/go] Fix Go program generation for ternary expressions inside apply callbacks, add Go predeclared identifiers to reserved words, handle optional list types in union type codegen, and fix unmarshalOutput for known outputs with null elements.
  #​22460

• [sdk/nodejs] Fix inherited input properties missing from component schema when args interface extends another interface
  #​22446

• [sdk/python] Fix inherited input properties missing from component schema when args class inherits from a base class
  #​22484

Miscellaneous

• [java] Upgrade java to v1.23.0

• [sdk/dotnet] Upgrade dotnet to v3.102.1

• [yaml] Upgrade to v1.31.0
  #​22501

• [programgen/{dotnet,go,java,nodejs,pcl,python,yaml}] Remove mimeType & readDir from PCL
  #​22449

v3.229.0

Compare Source

Features

• [auto/python] Add org get-default and set-default commands to Automation API

• [backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve performance
  #​22373

• [cli] Allow TRACEPARENT to be set for CLI invocations, parenting the pulumi spans under an existing parent span
  #​22369

• [cli/display] Add --urns flag to display full resource URNs instead of short names in preview, up, destroy, refresh, import, and watch commands
  #​22007

• [pcl] Type integer literals as integers rather than numbers in PCL
  #​22268

• [pcl] Support parameterized providers in PCL
  #​22251

• [protobuf] Add RunPlugin2 bidirectional streaming RPC to LanguageRuntime proto
  #​22389

• [yaml] Update YAML runtime to 1.30.2
  #​22426

• [sdk/go] Add org get-default and set-default commands to Automation API

• [sdk/nodejs] Modernize generated tsconfig.json to align with TypeScript defaults
  #​22370

• [cli/policy] Add a new policy analyze command to run a policy pack against existing state
  #​22250

Bug Fixes

• [backend/diy] Remove state lock for refresh --preview-only for diy backend
  #​22385

• [cli] Fix OTEL flushing on provider shutdown
  #​22358

• [cli/display] Fix deadlock in message renderer when cancelling an operation
  #​22433

• [engine] Fix --include and --exclude not working for program-based refresh (RefreshV2)
  #​22404

• [engine] Parallelize plugin cancellation in SignalCancellation
  #​22431

• [pcl] Fix looking up variables in parent scopes
  #​22379

• [pcl] Apply default values from resource schemas
  #​22393

• [sdk/{bun,go,nodejs,python}] Wire Cancel RPC to language host Run
  #​22397

• [sdk/nodejs] Allow TypeScript 6 as a peer dependency
  #​22340

• [sdk/nodejs] Fix closure serialization for __importStar-wrapped modules
  #​22388

• [sdk/python] Cache type metadata and class references in Python SDK to reduce CPU overhead during serialization
  #​22422

• [sdk/python] Replace busy-wait polling in wait_for_rpcs with asyncio.wait
  #​22411

Miscellaneous

• [cli] Add update metadata to the otel root span
  #​22357

• [java] Update to v1.22.0
  #​22437

• [sdk/nodejs] Use nodenext for moduleResolution and module
  #​22363

v3.228.0

Compare Source

Features

• [cli] Don't apply the secrets filter to true and false (case-insensitive)
  #​22269

• [cli] Add grpcs:// support and header authentication to OTLP exporter
  #​22320

• [cli] Read OTEL_RESOURCE_ATTRIBUTES
  #​22329

• [auto/nodejs] Add low-level "cancel" command to the auto-generated interface
  #​22156

• [cli/state] Allow pulumi state delete to accept multiple resource URNs and delete them in a dependency-safe order

Bug Fixes

• [cli] Allow relative file paths for --otel-traces
  #​22300

• [cli] Bridge opentracing spans from providers into OTel
  #​22313

• [cli] Correctly end spans for GRPC streams
  #​22304

• [cli/about] Do not include the access token in plain text
  #​22347

• [display] Fix detailed diff indentation so changed resources are not visually nested under unrelated visible resources when unchanged parents are hidden.
  #​22317

• [cli/import] Fix import codegen when generating references to non-standard names
  #​22319

• [engine] Update golang version
  #​22277

• [pcl] Typecheck component inputs in PCL programs
  #​22292

• [programgen/{nodejs,python}] Fix literal conversion when calling into local components
  #​22306

Miscellaneous

• [cli] Add CLI metadata to the root span
  #​22305

• [cli] Add more OTel interceptors for GRPC clients
  #​22309

• [cli] Add spans for plugin installation and add more attributes for dependency installation
  #​22303

• [cli] Allow setting a GRPC endpoint for performance tests
  #​22330

• [backend/diy] Start deprecation of non-project mode for DIY backends
  #​19625

v3.227.0

Compare Source

Features

• [engine] The engine will fill in Name and Type for ResourceReference values on the wire protocol
  #​22208

• [sdk/bun] Add support for running policy packs with bun
  #​22206

• [cli/policy] Auto-install missing policy analyzer plugins
  #​22196

• [sdk/python] Add lock file detection for picking the Python toolchain
  #​22234

Bug Fixes

• [cli] Use distinct exit codes for different types of error
  #​22205

• [cli] Improve SAML SSO reauthorization error message

• [engine] Fix snapshot integrity error in refresh v2 with changed parents
  #​22190

• [pcl] Continue running after errors when running with --continue-on-error
  #​22171

• [pcl] Deprecate labels on package blocks
  #​22253

• [programgen] Preserve traversal parts in rewriteRelativeTraversalExpression
  #​22249

• [sdk/bun] Check for an SDK version compatible with bun
  #​22262

• [programgen/nodejs] Correctly generate for expressions
  #​22219

• [sdk/go] Add support for Azure DevOps git URLs in pulumi package publish code paths
  #​22217

• [programgen/python] Correctly generate list & dictionary comprehension in Python code
  #​22182

Miscellaneous

• [backend] Move CloudConsoleURL from httpstate to httpstate/client
  #​22258

• [docs] Move remaining content from /developer-docs to /docs
  #​22225

• [sdk/bun] Add a test for the function serialization error message when using bun
  #​22207

• [sdk/bun] Run policy language tests for bun
  #​22209

• [sdk/bun] Mark pulumi-language-bun as a bundled plugin
  #​22265

• [sdk/{bun,nodejs}] Use defaultErrorMessage in run-plugin and run-policy-pack
  #​22210

v3.226.0

Compare Source

Features

• [backend/service] Automatically repair snapshot integrity issues, while sending an error event to the backend for further diagnosis
  #​22179

• [cli] Add a --otel-traces flag, that allows writing otel traces to a file, or directly to a grpc interface
  #​22129

• [engine] Engine will use provider references from __self__ arguments to calls
  #​22114

• [sdk/bun] Support bun as a runtime
  #​22177
  #​22049

• [sdk/bun] Add debugger support for the bun runtime
  #​22177

• [sdk/bun] Add support for Bun as a plugin runtime
  #​22189

Bug Fixes

• [engine] Fix ReplacementTrigger firing due to dependency changes
  #​22119

• [engine] Correctly serialize output values to the snapshot rather than always recording them as computed even when known
  #​22120

• [pcl] Support resource ranges in PCL
  #​22144

• [cli/config] Include environments used when refreshing a stack's config
  #​22103

• [cli/display] Fix pulumi destroy not showing parent resource hierarchy
  #​22148

• [cli/package] Correctly parse package URLs with .git in them
  #​22174

• [cli/plugin] Fix package get-schema for binary providers at relative paths
  #​22107

• [sdk/python] Handle null detailedDiff in automation StepEventMetadata JSON parsing
  #​22140

• [cli/state] Fix state move integrity errors when copied providers depend on resources left in source stack
  #​22141

Miscellaneous

• [cli/about] Show bun information in pulumi about
  #​22121

• [programgen/go] Target go 1.25 for generated go.mod files (instead of go 1.23)
  #​22070

• [sdkgen/go] Target go 1.25 for generated go.mod files for SDKs (instead of go 1.20)
  #​22131

• [sdk/python] Read Poetry and uv lockfiles to determine program dependencies
  #​22072

• [sdk/python] Use importlib to find pulumi-plugin.json for installed packages
  #​22127

v3.225.1

Compare Source

Bug Fixes

• [engine] Fix inheritence of default providers across resources of different packages
  #​22101

• [programgen/go] Fix panic on digit-prefixed schema properties in Go code generation
  #​21917

• [programgen/go] Fix plain values not always being lifted to input/output values when needed
  #​22084

• [programgen/python] Fix generation of entries and lookup calls
  #​22086

v3.225.0

Compare Source

Features

• [engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets
  #​21959

• [engine] The engine now handles the inheritance of the provider option in resource registrations
  #​21999

• [engine] Enable journaling by default. It can still be turned off using the PULUMI_DISABLE_JOURNALING env variable
  #​22041

• [programgen] PCL can now express config values should be read as secrets
  #​22066

• [yaml] Update yaml to v1.30.0

• [cli/engine] Add a flag for automatically opening a Neo task on preview/up failure
  #​21960

• [cli/package] Support source-based packages in pulumi schema check, not just schema files
  #​21897

Bug Fixes

• [cli] Fix stack import panicking when importing a service stack into a DIY backend
  #​22076

• [engine] Fix panic when a new component resource in the program is not targeted
  #​21957

• [sdk/nodejs] Implement GetProgramDependencies for bun and pnpm
  #​22065

Miscellaneous

• [cli] Build language plugins with the grpcnotrace tag to reduce the binary size
  #​22012

v3.224.0

Compare Source

Features

• [backend/diy] Add zstd compression option for DIY backend state files
  #​21877

Bug Fixes

• [cli/state] state move now correctly handles reparenting of resources

• [pkg] Correct the schema for "pulumi:pulumi:StackReference"
  #​21895

• [programgen/nodejs] Correct the semantics of singleOrNone in generated files
  #​21947

• [sdk/python] Fix StepEventMetadata.from_json reading detailed_diff (snake_case) instead of detailedDiff (camelCase), and PolicyEvent.from_json reading resource_urn instead of resourceUrn, causing both fields to always be None
  #​21714

• [sdk/python] Convert integer component inputs to int
  #​21944

• [sdk/python] Fix crash in forked processes using automation API
  #​21937

Miscellaneous

• [sdk] Update java, dotnet & yaml
  #​21961

• [sdk/python] Improve the performance of contains_unknowns for large objects
  #​21893

v3.223.0

Compare Source

Bug Fixes

• [engine] Report policy pack installation errors
  #​21882

v3.222.0

Compare Source

Features

• [programgen/go] Generate Call requests
  #​21836

Bug Fixes

• [sdk/{nodejs,python}] Fix hang when loading policy packs that use v1.18.1 or older of the policy SDK
  #​21866

v3.221.0

Compare Source

Features

• [auto] Support Go 1.26
  #​21835

• [engine] BREAKING: Rename pulumiVersionRange to requiredPulumiVersion in PulumiPlugin.yaml
  #​21807

• [cli/plugin] Reduce GitHub API usage when downloading plugins
  #​21774

• [protobuf] Add loader_target to RunPluginRequest
  #​21763

• [sdk/nodejs] Support enums when inferring schemas from components
  #​21787

• [sdk/nodejs] Support the Partial utility type in component schema inference
  #​21802

• [sdk/nodejs] Support the Required utility type in component schema inference
  #​21803

Bug Fixes

• [cli] Make stack graph output deterministic
  #​21786

• [engine] Fix snapshot integrity error in refresh --run-program with component resources
  #​21806

• [engine] Fix race in refresh --run-program
  #​21815

• [programgen/go] Correctly handle import paths for nested modules
  #​21812

• [sdkgen] Support type references to parameterized and third-party packages
  #​21804

• [sdkgen/go] Do not depend on pulumix against instructions for enums
  #​21818

• [cli/{install,package}] Don't panic when a non-absolute path is passed to pulumi package get-schema where the PulumiPlugin.yaml has a packages section
  #​21794

• [cli/{install,package}] Only link a Pulumi project once
  #​21788

• [cli/{install,package}] Run in the correct location when using uv to link python packages
  #​21796

• [cli/package] Allow underscores in the path of plugin URLs
  #​21778

• [sdk/{nodejs,python}] Use new policy plugin support to run policy packs
  #​21684

• [sdk/python] Surface errors from uv, poetry or pip during linking
  #​21770

• [sdk/python] Always surface errors from uv, poetry or pip during dependency installation
  #​21814

• [sdkgen/python] Add missing blank line before :param lists
  #​21789

v3.220.0

Compare Source

Features

• [cli] Show environment variables that were set if a snapshot integrity error happens
  #​21709

• [cli/{install,package}] Use the Pulumi Cloud Registry by default to resolve package names

• [engine] Pass replacement trigger through to Construct
  #​21408

• [engine] Add EnvVarMappings resource option for provider resources, allowing environment variables to be remapped before being passed to the provider
  #​21572

• [pkg] BREAKING: Deprecate github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This package will be removed from pulumi/pulumi soon!
  #​21720

Bug Fixes

• [cli] Retry yarn install when it fails (e.g. during pulumi install)
  #​21707

• [engine] Deal with errors in elided journal entries correctly
  #​21576

• [sdk/nodejs] Fix remote components with PULUMI_NODEJS_SKIP_COMPONENT_INPUTS

• [sdk/python] Fix _LazyModule to not trigger full module load for introspection attributes
  #​21620

• [sdkgen/python] Remove workaround for slow typechecking with MyPy and PyCharm
  #​21722

Miscellaneous

• [cli] Write logfile location if verbosity is >= 1 to stderr instead of stdout
  #​21663

v3.219.0

Compare Source

Features

• [cli] Allow setting requiredPulumiVersion in Pulumi.yaml
  #​21627

• [cli/{install,package}] Allow using private packages as local dependencies in components
  #​21664

• [cli/policy] Add pulumi policy install command
  #​21652

• [engine] Run analyzer calls in parallel
  #​21631

• [programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
  #​21621

• [sdk/python] Add support for the OnError resource hook
  #​21644

• [sdk/python] Add support for protobuf 6
  #​21647

Bug Fixes

• [cli] Allow positional arguments to be passed to convert again
  #​21604
  #​21614

• [engine] Download/install required policy packs in parallel with plugins
  #​21651

• [cli/package] Correctly install packages that depend on other packages for pulumi package add and pulumi package get-schema.
  #​21321

• [programgen/python] Fix panic when ranging over a resource output that is an array of objects
  #​21679

• [sdk/python] Fix issue with generic subclasses of dynamic.Resource
  #​21670

Miscellaneous

• [sdk/python] Relax pip version constraint
  #​21639

v3.218.0

Compare Source

Features

• [sdk/nodejs] Add support for the OnError resource hook

Bug Fixes

• [cli] Allow positional arguments to be passed to convert again

• [cli/install] Correctly include git forge organizations as schema namespaces when generating SDKs
  #​21579

• [cli/{install,package}] Correctly grab package names for Python & NodeJS
  #​21577

v3.217.1

Compare Source

Features

• [sdk/go] Add support for the OnError resource hook
  #​21515

Bug Fixes

• [cli/install] Copy files when linking to be robust to copying across file partitions
  #​21549

• [cli/install] Do not double install plugins with explicit parameterizations
  #​21548

• [cli/install] Copy files when linking instead of renaming
  #​21549

Full Changelog: pulumi/pulumi@v3.217.0...v3.217.1

v3.217.0

Compare Source

Features

• [cli] Extract organization, team, and user from OIDC JWT claims during login
  #​21462

• [engine] Add the OnError resource hook to allow for custom retry policies
  #​21291

• [cli/engine] Add --plan up flag
  #​21368

• [sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
  #​21528
  #​21478

• [sdk/python] Add require_pulumi_version to the Python SDK
  #​21528
  #​21430

• [sdk/go] Add CheckPulumiVersion to the Go SDK
  #​21528
  #​21514

Bug Fixes

• [auto/python] Implement About in Python automation API server
  #​21479

• [engine] When importing a state file that refers to the service backed secret manager, make stack import reconfigure it for the target stack if required
  #​20966

• [protobuf] Fix alias options being passed to Construct for remote components
  #​21050

• [sdk/nodejs] Fix issue with serialized async generators
  #​21484

v3.216.0

Compare Source

Features

• [build] Don't set PULUMI_ROOT with mise
  #​21457

• [cli] Default to Pulumi Cloud when using an OIDC token for login
  #​21322

• [engine] Add CheckPulumiVersion RPC to the engine
  #​21429

• [protobuf] Remove ProviderHandshakeResponse.pulumi_version_range
  #​21438

• [sdk/nodejs] Allow dynamic providers to return inputs from read() for accurate diffs after refresh
  #​21315

• [sdk/nodejs] Add support for serializing async generators
  #​21410

• [sdk/python] Allow dynamic providers to return inputs from read() for accurate diffs after refresh
  #​21315

Bug Fixes

• [engine] Optimize StackReference performance
  #​21446

• [cli/display] Fix message renderer on windows
  #​21401

• [sdk/nodejs] Fix RangeError in defaultErrorMessage when error objects are large
  #​21409

Miscellaneous

• [sdk/dotnet] Update dotnet to v3.97.0

v3.215.0

Compare Source

Features

• [cli/plugin] Allow plugins to specify a supported version range for the CLI
  #​21335

Bug Fixes

• [cli] Filter internal properties like __defaults from diff display
  #​21359

• [cli/config] Make config set --type bool accept different spellings of boolean values instead of only lowercase "true"
  #​21314

• [sdk/python] Fix import_resources with converter failing due to --stack argument placement
  #​21373

Miscellaneous

• [cli] Update pulumi-dotnet to 3.96.1

• [cli/package] Remove superfluous version string
  #​21351

v3.214.1

Compare Source

Bug Fixes

• [cli/package] Preserve existing behavior when pulumi package add is used with a local provider
  #​21350

• [pkg] Create namespace aliases to avoid Pulumi namespace collisions during codegen
  #​21325

v3.214.0

Compare Source

Features

• [cli] Add --config and --config-path options to destroy and refresh
  #​21299

• [sdkgen] Add OutputStyleOnly flag to functions to not emit their plain variants
  #​21198

• [sdk/python] Add support for replacement_trigger in the Python SDK
  #​20940

Bug Fixes

• [engine] Pass ignoreChanges when issuing no-diff updates that resolve initErrors
  #​21319

• [programgen] Fix a bug in programgen binding to invokes from parameterized packages
  #​21284

• [cli/plugin] Fix plugin download URL overrides for fallback mechanism
  #​21095

Miscellaneous

• [pkg] Upgrade pulumi-java to 1.20.0

v3.213.0

Compare Source

Bug Fixes

• [sdkgen/go] Generate three-level nested builtin output types for Go SDK
  #​21248

Miscellaneous

• [pkg] Move plugin downloading from pkg into sdk
  #​21220

v3.212.0

Compare Source

Bug Fixes

• [yaml] Update pulumi-yaml to v1.26.1

v3.211.0

Compare Source

3.211.0 (2025-12-11)

Features

• [cli/about] Print Node.js package manager information in pulumi about
  #​21163

• [backend/diy] Add stack tags support for DIY backends (S3, Postgres, file-based, etc.).

DIY backends now support stack tags functionality, bringing feature parity with cloud backends.
This includes:

• Full CRUD operations for stack tags (create, read, update, delete)
• Automatic system tag injection (e.g., pulumi:project)
• Tag filtering support in stack listing operations
• Backward compatibility with existing stacks (no tags file required)
• Atomic operations with caching for performance
• Automatic cleanup of tag files when stacks are deleted

Tags are stored as separate .pulumi-tags files alongside stack checkpoints, using a versioned
JSON format. The implementation works across all DIY backend storage types including S3, Azure Blob,
Google Cloud Storage, PostgreSQL, and local file systems.

Example usage:

pulumi stack tag set environment production
pulumi stack tag set owner backend-team
pulumi stack ls --tag-filter environment=production

#​19882

• [backend/service] Improve startup performance with the service as backend
  #​21176

• [sdk/nodejs] Add support for replacement_trigger in the NodeJS SDK
  #​20939

• [sdk/python] Allow setting version for python component providers
  #​21149

Bug Fixes

• [cli/package] Correctly identify the innermost Project/Plugin when running pulumi package add
  #​21137

• [engine] Allow referencing multiple git/github/gitlab components from the same repo
  #​21119

• [programgen/go] Account for name conflicts in resource creation functions
  #​21107

• [sdk/python] Fix cancellation handling in a few places in the python language host
  #​21145

• [sdkgen/go] Fix generation of lifted single-value calls in parameterized SDKs
  #​21115

Miscellaneous

• [cli] Don't attempt to re-install plugin dependencies on load failure for plugins based on git with a nested path
  #​21148

• [sdk/{dotnet,java,yaml}] Bump language runtimes for dotnet, java, and yaml
  #​21201

• [cli/engine] Add language runtime metadata to update metadata
  #​21186

[v3.210.0](https://redir

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.