Update first-party Pulumi dependencies by pulumi-renovate[bot] · Pull Request #240 · pulumi/kubespy

pulumi-renovate · 2026-03-30T20:24:57Z

This PR contains the following updates:

Package	Type	Update	Change
@pulumi/pulumi (source)	dependencies	minor	`3.228.0` -> `3.248.0`
github.com/pulumi/esc	indirect	minor	`v0.23.0` -> `v0.25.0`
github.com/pulumi/pulumi-kubernetes/provider/v4	require	digest	`d4759d6` -> `60c9681`
github.com/pulumi/pulumi/pkg/v3	indirect	minor	`v3.228.0` -> `v3.248.0`
pulumi/esc-action	action	digest	`6cf9520` -> `197ccaa`

Release Notes

pulumi/pulumi (@pulumi/pulumi)

`v3.248.0`

Compare Source

Bug Fixes

[cli] Fix a panic in pulumi package get-schema when binding a schema that references an uninstalled plugin #23647

Improvements

[cli] Add options to pulumi stack get for parity with bare pulumi stack #23623
[cli] Add --output flag to about and whoami commands #23651

Features

[engine] Add support for 'snippets', blocks of PCL kept in state to track ad-hoc resources #23286
[engine] Send the address of a schema loader service to resource providers as part of the provider handshake #23645
[engine] Send the address of a package resolver service to resource providers as part of the provider handshake #23654

Bug Fixes

[programgen] Guard references to conditionally-created (boolean range) resources in generated Python and NodeJS programs so they type-check #23634
[programgen] Generate map range resource collections as key-indexed maps in Python and NodeJS so they can be indexed by key #23639

Features

[sdk/nodejs] Add Output.recover to catch and recover from exceptions in outputs #23642

Bug Fixes

[sdkgen] Fix extra trailing new lines in comments #23619

Improvements

[sdkgen] Require callers to pass an explicit schema loader when binding PCL programs and package schemas #23672

`v3.247.0`

Compare Source

Bug Fixes

[cli] Ensure pulumi logout clears the current tokenless backend in coding agent environments #23540
[cli] Read Git metadata correctly in repositories that enable the worktreeConfig extension, such as those hosted on Azure DevOps #23535

Improvements

[cli] Respect PULUMI_SKIP_CONFIRMATIONS whenever we ask for confirmation #23607
[cli] Use list and remove as the canonical names for list/remove commands, with ls and rm as aliases #23608

Features

[cli/config] Add --raw flag to pulumi config set to avoid stripping newlines when input is piped through stdin #23593

Bug Fixes

[cli/display] Show interrupted steps as interrupted instead of as finished #23510

Features

[cli/do] Add --provider flag to pull provider config to use from existing provider state #23560
[cli/engine] Resource providers now receive the active login's API address and access token through PULUMI_API and PULUMI_ACCESS_TOKEN #23589
[cli/neo] Add a --disable-integrations flag to pulumi neo that runs the task with no integration credentials #23531

Bug Fixes

[cli/plugin] Allow plugin tarballs containing symlinks #23587

Miscellaneous

[cli/plugin] Document the pulumi plugin run command by including it in the generated CLI docs #23559

Improvements

[docs] Generate redirects for command aliases #23610

Features

[engine] Send the address of a mapper service to resource providers as part of the provider handshake

Improvements

[engine] Serve raw schema bytes from the engine's schema loader service instead of binding and re-marshaling the full schema on every request #23551

Features

[programgen/go] Support functions with multiArgumentInputs #23554
[programgen/python] Support functions with multiArgumentInputs #23574

Improvements

[sdk/go] The plugin.Host interface is now stateless with respect to workspaces; host methods that boot or resolve plugins take a plugin.Context carrying the workspace state, and closing a plugin.Context no longer closes a host that was passed in to its constructor #23508

Features

[sdk/nodejs] Registered resources can now be retrieved from the mock monitor for test assertions #20539

Bug Fixes

[sdk/nodejs] Fix pulumi package add failing with pnpm when the generated SDK has a scoped package name (@-prefix), caused by pnpm's pkg set rejecting @ in dot-notation property paths #23365

Improvements

[sdk/nodejs] Allow running the postinstall script for local SDKs under npm 12 #23568

Features

[sdk/python] Add Output.recover to catch and recover from exceptions in outputs #23591

Improvements

[sdk/python] Add register_package helper to cache package references per deployment #22459

Features

[sdkgen] Adds support for language agnostic cross references in schemas. Use the form {{% ref <target> %}} to reference other schema components in markdown descriptions. Such as `{{% ref #21369
[sdkgen] Add extension parameterization to the package schema model #23536

Miscellaneous

[sdkgen] Modules can no longer be nested under the index module, this was never well supported and is now a strict bind error #23436

Features

[sdkgen/go] Support functions with multiArgumentInputs #23554
[sdkgen/python] Support functions with multiArgumentInputs #23574
[cli/auth] When credentials.json carries an OAuth refresh token, the CLI now auto-refreshes the access token on 401 and retries the request once, instead of returning a "login required" error #23430

Bug Fixes

[codegen/pcl] Fix version comparison in NeedsVersionResourceOption to use semver.Version.Equals and reject "v"-prefixed versions #https://github.com/pulumi/pulumi/pull/23441

`v3.246.0`

Compare Source

Bug Fixes

[backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

[cli] Add pulumi logs ls to list automatic log files #23449
[cli] Add pulumi logs rm to remove automatic log files
[cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
[cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

[cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg #https://github.com/pulumi/pulumi/issues/23394
[cli] Remove the experimental pulumi ai web command #23517
[cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
[cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

[cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
[cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

[cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
[cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
[cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

[cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

[pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
[pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
[programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
[programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

[sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

[sdk] Reject tar entries with path traversal components when extracting archives #23485
[sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826
[sdk/nodejs] Fix local SDKs added with pulumi package add not being built when using pnpm 10.34.2 or newer

Miscellaneous

[sdk/nodejs] Improve error logs when serialization fails #21901

Bug Fixes

[sdkgen] Validate schema names to not contain whitespace or control characters #23460

Improvements

[sdkgen] Allow provider objects to have string enumerations on their outputs #23461

Bug Fixes

[cli/auth] BREAKING: Delete all backend config when logging out #23358

`v3.245.0`

Compare Source

Improvements

[backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #23421
[cli] Show download and unpack progress when installing provider plugins #https://github.com/pulumi/pulumi/issues/23408
[cli/do] Expose the selected stack's organization and short name to PCL input files when running pulumi do inside a project
[cli/do] Suggest similar tokens when an unknown token is passed to pulumi do #23341
[cli/neo] Support up/down arrows to scroll through prompt history in pulumi neo #23425

Bug Fixes

[engine] Download the HCL language runtime on demand instead of bundling it #23356

Miscellaneous

[sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #23363

Bug Fixes

[sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
[cli/auth] Delete shared temporary agent credentials when logging out

Improvements

[cli/stack] Remame pulumi stack init to new #23422

`v3.244.0`

Compare Source

Bug Fixes

[cli/do] Fix top level flags like --logtostderr being recognized when using pulumi do #23355
[cli/install] Distinguish multiple packages with the same plugin
[engine] Fix snapshot integrity issue with up --refresh
[engine] Forward all provider errors to error hooks for retry #23347
[engine] Trace cancel RPCs sent to plugins during shutdown as children of the active operation instead of emitting separate root spans #23362
[sdk/python] Merge requirements.txt into pyproject.toml when using uv without a project section #23340

`v3.243.0`

Compare Source

Features

[cli] Make the pulumi project new -y command write a minimal project file with no template
#22847
[cli] Allow coding agents to create claimable temporary accounts when not authenticated
[cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output
#23326
[sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC
#23287
[sdkgen] Reserve the package names 'pulumi' and 'input' for internal use
#23321
[cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both
#22963
[cli/do] Add resource support to pulumi do
#23215
[cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn
#23299
[cli/new] Alias pulumi new to pulumi project new
#23265

Bug Fixes

[cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively
#23264
[pcl] Don't silently ignore ... in function arguments
#23309
[sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs
#23068
[backend/service] Error out when setting up journaler fails
#22671

Miscellaneous

[cli/package] Update the pulumi package add --agent documentation hint to use <type-token> as the placeholder for the /docs/... URL
#23294
[cli/plugin] Rename plugin ls to list and rm to remove
#23291

`v3.242.0`

Compare Source

Features

[cli] Add a pulumi package for npx support
[cli] Add the pulumi org member edit command
#23235
[cli] Add the pulumi org member remove command
#23237
[cli/cloud] Add pulumi deployment get to retrieve details for a specific deployment
#23238
[cli/cloud] Add pulumi insights account scan get <account> <scan-id> to show the full workflow run for a single Insights scan
#23255
[cli/cloud] Add pulumi insights account scan list <account> to discover recent scan IDs to feed into pulumi insights account scan log
#23255
[cli/deployment] Add dedicated flags for each deployment setting
#23236
[cli/do] Add the start of pulumi do
#23176
[cli/neo] Add --print/-p to pulumi neo to run a single prompt non-interactively and print the agent's final response to stdout
#23245

Bug Fixes

[cli/cloud] Fix pulumi insights account scan log --all to follow the server's pagination cursor through the end of the log, and render --job/--step mode as structured lines instead of an empty raw-string blob
#23256
[sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz output
#23240
[sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
#23253

`v3.241.0`

Compare Source

Features

[cli] Add --output json to pulumi preview for a structured JSON summary of the operation result
#22927
[cli] Add --output json to pulumi refresh for a structured JSON summary of the operation result
#22928
[cli] Add --output json to pulumi destroy for a structured JSON summary of the operation result
#22875
[cli] Add pulumi stack schedule get to retrieve the configuration of a scheduled action
#23153
[cli] Add pulumi stack schedule list to list all scheduled actions configured for a stack
#23153
[cli] Add pulumi stack schedule new to create a raw, drift, or TTL deployment schedule for a stack
#23153
[cli] Add pulumi stack webhook delivery list to list recent deliveries for a stack webhook
#23116
[cli] Add pulumi stack webhook delivery redeliver to redeliver a webhook event
#23118
[cli] Add pulumi stack webhook edit to update an existing stack webhook
#23139
[cli] Add pulumi stack webhook new to create a new stack webhook
#23101
[cli] Add pulumi stack webhook remove to delete a stack webhook
#23102
[cli] Add pulumi org webhook delivery list to list recent deliveries for an organization webhook
#23179
[cli] Add pulumi org webhook edit to update an organization webhook
#23179
[cli] Add pulumi org webhook list to list all webhooks configured for an organization
#23174
[cli] Add pulumi org webhook new to create a new organization webhook
#23172
[cli] Add pulumi org webhook ping to send a test ping to an organization webhook
#23179
[cli] Add pulumi org webhook remove to delete an organization webhook
#23177
[cli] Add pulumi stack drift list to list drift detection runs for a stack
#23159
[cli] Add pulumi stack drift status to show the drift detection status for a stack
#23161
[cli] Add pulumi stack schedule edit to update an existing scheduled deployment action
#23153
[cli] Add pulumi stack schedule remove to delete a scheduled deployment action
#23153
[cli] Add pulumi audit-log export command
#23212
[cli] Add pulumi org audit-log list
#23211
[cli] Add pulumi policy compliance list to list compliance results grouped by entity
#23209
[cli] Add pulumi policy group new command to allow creating new policy groups
#23202
[cli] Add the pulumi policy issue get command
#23200
[cli/cloud] Add pulumi insights account list to list Insights accounts in an organization
#23091
[cli/cloud] Add pulumi insights account new to create a Pulumi Insights account
#23093
[cli/cloud] Add pulumi insights account scan log to fetch log output for a Pulumi Insights scan
#23092
[cli/cloud] Add pulumi insights account scan to trigger a resource discovery scan for an Insights account
#23094
[cli/cloud] Implement pulumi stack history events to retrieve engine events for a Pulumi Cloud update
#23109
[cli/cloud] Add pulumi deployment cancel to terminate an in-progress deployment
#23164
[cli/cloud] Add pulumi org member list to list the members of an organization
#23170
[cli/cloud] Add pulumi org usage get to fetch the resources-under-management summary for an organization
#23166
[cli/cloud] Add pulumi org role assign to assign a custom role to a team
#23117
[cli/cloud] Add pulumi org role edit to update a custom role's name, description, or permission tree
#23117
[cli/cloud] Add pulumi org role list to list custom roles for an organization
#23117
[cli/cloud] Add pulumi org role new to create a custom role from a permission descriptor JSON file
#23117
[cli/cloud] Add pulumi org role remove to delete a custom role from an organization
#23117
[cli/env] Update esc to v0.24.0
#23213
[cli/neo] Show tool call arguments and results in pulumi neo via a ctrl+o overlay
#23075
[cli/neo] Multi-line input in pulumi neo - Enter sends, Shift+Enter / Alt+Enter / Ctrl+J / trailing \ insert a newline
#23151
[cli/neo] Make pulumi neo visible by default; the PULUMI_EXPERIMENTAL gate has been removed
#23228
[cli/policy] Add pulumi policy group edit to edit policy groups
#23206
[cli/policy] Add pulumi policy group remove command to remove policies
#23208
[cli/policy] Add the pulumi policy group get command
#23203

Bug Fixes

[cli] Add pulumi policy issue list command
#23198
[cli] Fix pulumi org role list to send the uxPurpose query parameter the service requires
#23231
[engine] Fix pulumi import dropping map entries whose value matched the enum member of a Union<Input<Enum<T>>, ...> element type
#23190
[cli/cloud] Surface a clear error when pulumi api --all is used against an endpoint whose response is not paginatable, instead of silently emitting an empty array
#23191
#23128
[cli/cloud] pulumi deployment settings edit no longer clears fields that the patch does not mention
#23217
[cli/import] Generate PCL for asset and archive inputs when importing resources, instead of returning a "NYI" error
#22938
[cli/import] Preserve asset/archive/resource-reference values inside map and array inputs, and HCL-escape map keys containing ${ or %{ template sequences
#23222
[cli/install] Hint at adding a .git / _git when VCS URL resolution fails
#22831
[cli/neo] Transparently reconnect the Neo event stream after a transient network drop, resuming from the last seen event ID
#23134
[cli/neo] Show preparing in the live preview/up block until the first resource arrives
#23155
[cli/new] Support specific versions when using registry-backed templates with pulumi new
#22909

`v3.239.0`

Compare Source

Features

[cli] Add --output json to pulumi import for a structured JSON summary of the operation result
#22929
[cli] Add pulumi stack get to retrieve detailed information about a stack
#23106
[cli] Add pulumi stack webhook get to inspect a single stack webhook
#23088
[cli] Add pulumi stack webhook ping to send a test ping to a stack webhook
[cli/cloud] Add pulumi deployment list to list deployment executions for a stack
#23114
[sdkgen] Validate that schema names can't conflict with module paths
#22956

Bug Fixes

[engine] Fix batch encrypt/decrypt errors being silently dropped
#23149
[cli/cloud] Fix pulumi api help examples that referenced non-existent operation IDs and response fields
#23125

`v3.238.0`

Compare Source

Features

[cli] Add a --language flag to pulumi package add to run outside a Pulumi project or plugin
#22791
[cli] Add --output json to pulumi up for a structured JSON summary of the operation result
#22870
[cli] Recommend pulumi cloud api describe in pulumi cloud api --help to verify operation parameters before calling
#22881
[cli] Add pulumi stack webhook list to list all webhooks configured for a stack
#23082
[cli/cloud] Rename pulumi cloud api to pulumi api
#22970
[cli/cloud] Add pulumi insights resource get to look up a single resource discovered by Pulumi Insights
#23077
[cli/cloud] Add pulumi template list to list registry-backed templates
#23074
[cli/cloud] Rename the --format flag to --output on pulumi api and its subcommands
#23072
[cli/cloud] Add pulumi insights resource search to search for resources discovered by Pulumi Insights
#23087
[cli/engine] Add --skip-plugin-pre-install to skip up-front plugin installation
[engine] Fail the deployment when an after hook fails
#22935
[cli/neo] Render the agent's TODO list in the pulumi neo TUI
#22864
[cli/neo] Add --approval-mode and --permission-mode flags to pulumi neo, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
#22950
[cli/package] When invoked by an AI coding agent, print pulumi api pointers after pulumi package add and pulumi package gen-sdk
#22904
[pkg/testing] Recognize the hcl and pcl runtimes in integration.ProgramTest
#23018
[pkg/testing] Add l1-config-types-optional conformance test for PCL's optional type constructor
#23108

Bug Fixes

[backend/diy] Minify JSON persisted by the DIY backend for checkpoints, history, and stack tags
#22245
[cli/import] Ignore property values that do not conform to the schema in maps
#23076
[cli/import] Stop dropping map values whose element type is a union of Input-wrapped types during HCL2 import
[cli/neo] Use the selected stack's organization when starting a pulumi neo task instead of the user's default organization
#22951
[cli/neo] Include the failure reason in pulumi_preview and pulumi_up tool results when they fail, so the agent can react instead of seeing a blank error
#22948
[cli/neo] Retry pulumi neo task creation without the attached stack when the backend rejects it with an "invalid entities" error
#22945
[cli/neo] Surface the failure reason when a filesystem tool call fails, instead of returning an empty result to the agent
#23019
[cli/package] Use --output=markdown (not the renamed-away --format=markdown) in the pulumi api pointers printed by pulumi package add and pulumi package gen-sdk
#23098
[programgen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
#22931
[sdk/python] Speed up python program resolution by using a set instead of deque to track outputs
#22946

Miscellaneous

[cli/neo] Tag Neo tasks created from the CLI with a cli source so the service can attribute their origin
#23099
[sdk/nodejs] Add registerPackage helper to cache package references per deployment
#23014

`v3.237.0`

Compare Source

Features

[cli] Include the running command name and detected AI agent (when present) in the User-Agent header on Pulumi Cloud API requests
#22908
[engine] Include result on the summary engine event
#22883
[sdkgen] Eagerly error on schemas with unconstructable types
#22890
[cli/cloud] Auto-fill lang and os query parameters on pulumi cloud api GET/HEAD requests when the matched OpenAPI operation declares them and the caller hasn't supplied them
#22726
[cli/package] Add pulumi package new to bootstrap a Pulumi package from a template
#22837

Bug Fixes

[cli] Add blank-line gaps between pulumi neo TUI conversation blocks
#22846
[cli/import] Preserve __-prefixed keys when generating PCL for imported resource state, so provider-defined payloads round-trip correctly
#22856
[cli/neo] Render ux__ask_user clarifying questions as questions instead of approval prompts
#22862
[cli/neo] Fix a panic when cancelling a pulumi neo session
#22898
[cli/neo] Render every assistant message in the TUI scrollback so multi-turn commentary no longer disappears between tool calls
[cli/neo] Return the bare stack name and canonical project name from pulumi_preview and pulumi_up tool results instead of echoing the raw input
#22891
[codegen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
#22916
[programgen/pcl] Fix PCL binder panic when a conditional mixes a Promise-typed branch with a try() branch
#22907
[sdk/python] Support NotRequired, Required and total=False in TypedDicts for component resource arg types
#22858

Miscellaneous

[cli/cloud] Auto-fit pulumi cloud api list table to terminal width and replace the
tabular table renderer with go-pretty

#22874
[sdk/nodejs] Test on Node.js 26 and drop 20
#22872

`v3.236.0`

Compare Source

`v3.235.0`

Compare Source

Features

[cli] Add pulumi logs decrypt command for viewing logs
#22523
[cli] Bundle the hcl language host (from pulumi-labs/pulumi-hcl)
#22807
[cli] Automatically install the hcl converter from pulumi-labs/pulumi-hcl when running pulumi convert --from hcl
#22816
[pcl] Add read blocks to PCL to read resources via ID and query instead of registering them
#22641
[cli/cloud] Add pulumi cloud api <op-or-path> for calling any Pulumi Cloud API
endpoint, with --field/--header/--input/--body flag handling, path
template binding, content negotiation via --format, and --dry-run

#22771
[cli/cloud] Add --paginate to pulumi cloud api: follow continuation cursors,
accumulate items into a single JSON envelope, and surface progress
events to stderr with --emit-events (page, complete, truncated,
partial_failure, cancelled).

#22772

Bug Fixes

[cli] Fix the pulumi neo shell tool to honor the agent-supplied timeout and to terminate the whole process tree (and unblock cmd.Wait) when the deadline fires, so commands like kubectl logs -f no longer hang Neo indefinitely.
#22820
[cli] Surface the error and exit when pulumi neo fails to create the underlying task, instead of leaving the TUI stuck in Thinking…
#22825
[codegen/go] Correctly generate []pulumi.Asset & []pulumi.Archive
#22827
[cli/neo] Exit cleanly when the user presses Ctrl+C twice in pulumi neo instead of hanging until a third press
#22821
[engine] The engine now caches schemas at PULUMI_HOME/schemas, and will cache for parameterised packages as well
#22812
[sdk-python] Preserve __-prefixed keys (e.g. __type discriminators) across RPC deserialization, matching the behavior of the other language SDKs
#22834
[programgen/{nodejs,python}] Fix programgen to emit the right length check for string length
#22802

Miscellaneous

[cli] Replace the Pulumipus mascot in the pulumi neo welcome banner with new Neo-branded ASCII art.
#22817

`v3.234.0`

Compare Source

Features

[cli/cloud] Add pulumi cloud api describe for inspecting the parameters, request
body, and response schema of any Pulumi Cloud API operation, with
text, markdown, and JSON output

#22770
[cli/cloud] Add pulumi cloud api list for browsing every endpoint exposed by the Pulumi
Cloud OpenAPI spec, with table and JSON output

#22769

Bug Fixes

[engine] Revert changes to property path parsing that resulted in errors for currently valid paths

`v3.233.0`

Compare Source

Features

[auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api
#22638
[cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
#22494
[cli] Implement the filesystem__grep and filesystem__content_replace local tools
for pulumi neo. grep runs a regex search across files in the project root
with an optional include glob filter and returns results in path:lineno: line
form. content_replace performs a literal multi-file search-and-replace with a
file_pattern glob and dry_run preview mode. Both tools skip binary files,
hidden directories, and node_modules, and reject paths outside the project
root. Their input schemas match the cloud-side tool definitions.

#22655
[cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo
agent. The Neo TUI renders a persistent bordered block for each operation that
streams changed resources and diagnostics as the engine runs and finalizes with a
summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

#22697
[engine] Add List to the provider protocol and schema
#22693

Bug Fixes

[engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!"
#22679
[programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously
PCL bound every method call's return type as Output<T>, which caused downstream program-gen
to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g.
methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

#22696
[backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages
#22701
[codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously
the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg>
itself, producing identifiers that would not compile. Affects generated code for method return
types (and other schema positions) that reference pulumi:providers:<pkg>.

#22696
[codegen/nodejs] Generate unqualified Provider references for the package's own provider resource when emitting
TypeScript code inside that package. Previously the generator always qualified the name as
<pkg>.Provider, which does not resolve when no <pkg> namespace import is in scope.

#22696
[codegen/nodejs] Import the correct class name for a provider resource. Imports for pulumi:providers:<pkg> used
the title-cased package name instead of Provider, producing a phantom identifier that clashed
with the containing package's component/resource classes.

#22696
[programgen/nodejs] Emit await for call(...) invocations of methods whose return type is marked plain, and
force the generated program into an async export = async () => ... wrapper whenever such a
call is present. The Node SDK returns Promise<T> for plain methods; previously program-gen
used the result directly, which did not match its runtime type.

#22696
[codegen/python] Avoid a self-import (import pulumi_<pkg> inside pulumi_<pkg>/<module>.py) when referencing
the package's own provider resource. Python referenced the Provider as pulumi_<pkg>.Provider
even inside that package, which caused a circular import at runtime.

#22696
[sdk/python] Reduce internal Output[T] data to a single asyncio.Future
#22661
[sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values
#22552

Miscellaneous

[auto/go] Drop the "With" prefix from generated option helpers so they match the naming of the existing optXxx packages
#22682

`v3.232.0`

Compare Source

Features

[cli] Add an experimental pulumi neo command that creates a Pulumi Neo agent task in CLI
tool-execution mode and runs the local tool loop. Filesystem and shell tool calls
issued by the agent run on the user's machine in their working directory; the
interactive chat continues to happen in the Pulumi Console at the URL the command
prints. Hidden behind PULUMI_EXPERIMENTAL.

#22473
[cli] Add support for handling user approval requests in the pulumi neo terminal UI.
When the agent requests confirmation for a sensitive action, the TUI prompts the
user and forwards their response back to the Pulumi Console. Hidden behind
PULUMI_EXPERIMENTAL.

#22589
[cli] Add an interactive terminal UI for pulumi neo built with bubbletea, rendering
agent messages, tool calls, and streaming output in the terminal alongside the
Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.

#22570
[cli] Switch logging library from glog to slog.

BREAKING: any if logging.V(x) { need to be changed to if logging.V(x).Enabled()

#22548

[cli] Add a plan-mode toggle to the pulumi neo TUI, bound to Shift+Tab. When
plan mode is on, Neo explores and asks questions without writing files,
running pulumi up, or opening PRs, and surfaces an approved plan via a
dedicated approval gate. The toggle must be set before the first message
(plan mode is task-level on the wire); approving the proposed plan exits
plan mode automatically.

#22634
[cli] The pulumi neo TUI now drives its "thinking" spinner off a single declarative
rule (the spinner stays on until a final event — final assistant message, approval
request, cancellation, or error — lands), so the indicator no longer flickers off
when the agent hands off tool calls to the CLI or when streaming text arrives
between tools. Press Esc during a turn to ask the agent to cancel; the label
switches to "Cancelling..." until the backend acknowledges.

#22637
[cli] pulumi neo now executes the edit filesystem tool locally, matching the schema
and response wording of the upstream mcp-claude-code tool so the agent sees
identical output whether the call ran on Cloud or CLI. edit performs exact-string
replacement with occurrence-count validation, and creates a new file when the
target is missing and old_string is empty.

#22654

Bug Fixes

[cli] Render user messages in the pulumi neo TUI as soon as they're submitted
instead of waiting for the Pulumi Cloud event stream to echo them back.
The initial prompt passed on the command line also appears in the
transcript at startup. Self-echoes from the server are de-duplicated;
user input that originated from another client (e.g. the web UI on the
same task) still renders.

#22629
[cli] Wrap warnings, errors, and user-message bubbles to the terminal width in the
pulumi neo TUI. Previously these blocks rendered as single long lines that
were clipped at the right edge of the viewport. On resize, all width-dependent
transcript blocks (user messages, warnings, errors, assistant messages) now
reflow to the new terminal width.

#22635
[cli/policy] Fix policy ls to use the default org name, not username
#22656
[engine] Fix provider registry race condition in parallel delete-before-replace
#21487
[engine] Signal providers to cancel before closing them during replacement
[sdkgen] Error on 'id' in state inputs
#22636
[programgen/python] Add necessary casts between types in generated programs
#22567
[sdkgen/go] Fix caching of package references to be per-deployment not per-process
#22170

Miscellaneous

[java] Upgrade java to v1.25.0
#22673
[auto/go] Generate command methods for the Go Automation API codegen
#22612
[sdk] Clarify docs on the remote parameter of ComponentResource / Resource in the Node and Python SDKs
#22603
[sdk/dotnet] Upgrade dotnet to v3.103.1
#22676
[yaml] Upgrade yaml to v1.32.0
#22674

`v3.231.0`

Compare Source

Features

[cli] Auto-detect Mercurial repository metadata for pulumi up / pulumi preview updates, mirroring existing Git support
#22618
[engine] Send Cancel RPC to plugins on host close for graceful shutdown
#22569
[engine] Pass resource options to hooks through the engine
#22582
[engine] Add GetDeploymentInfo to the resource monitor service
[auto/go] Add New command to Automation API
#22439
[auto/{go,nodejs,python}] Add --diff to automation api for destroy
#22563
[auto/python] Add new command to Automation API
#22439
[pcl] Support for resource hooks in PCL
#22365
[sdk-nodejs] Warn when a non-ComponentResource class is passed in the explicit components list to componentProviderHost
#22619
[sdk-python] Warn when a non-ComponentResource class is passed in the explicit components list to component_provider_host
#22619
[cli/import] Add support for providers to be defined in the same import file as their users
#21671
[cli/policy] ESC environment support for local policy packs
#22495
[sdk/nodejs] Support package.yaml when using pnpm
#22491
[sdk/python] Add function decorator variants for resource and error hooks
#22519

Bug Fixes

[auto/{n

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

pulumi-renovate · 2026-04-02T03:06:04Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

58 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.8` -> `1.26.0`
`github.com/fatih/color`	`v1.16.0` -> `v1.18.0`
`k8s.io/apimachinery`	`v0.35.2` -> `v0.36.2`
`k8s.io/client-go`	`v0.35.2` -> `v0.36.2`
`github.com/ProtonMail/go-crypto`	`v1.1.6` -> `v1.4.1`
`github.com/charmbracelet/x/ansi`	`v0.11.6` -> `v0.11.7`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.2`
`github.com/go-openapi/jsonpointer`	`v0.22.5` -> `v0.23.1`
`github.com/go-openapi/jsonreference`	`v0.21.5` -> `v0.21.6`
`github.com/go-openapi/swag`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/cmdutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/conv`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/fileutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/jsonname`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/jsonutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/loading`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/mangling`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/netutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/stringutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/typeutils`	`v0.25.5` -> `v0.26.1`
`github.com/go-openapi/swag/yamlutils`	`v0.25.5` -> `v0.26.1`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.28.0` -> `v2.29.0`
`github.com/hashicorp/go-version`	`v1.8.0` -> `v1.9.0`
`github.com/hashicorp/hcl/v2`	`v2.22.0` -> `v2.24.0`
`github.com/kevinburke/ssh_config`	`v1.2.0` -> `v1.6.0`
`github.com/lucasb-eyer/go-colorful`	`v1.3.0` -> `v1.4.0`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`github.com/mattn/go-isatty`	`v0.0.20` -> `v0.0.22`
`github.com/mattn/go-runewidth`	`v0.0.21` -> `v0.0.24`
`github.com/pgavlin/fx/v2`	`v2.0.10` -> `v2.0.12`
`github.com/pjbgf/sha1cd`	`v0.3.2` -> `v0.6.0`
`github.com/pulumi/pulumi/sdk/v3`	`v3.228.0` -> `v3.248.0`
`github.com/zclconf/go-cty`	`v1.14.4` -> `v1.16.3`
`go.opentelemetry.io/collector/featuregate`	`v1.54.0` -> `v1.61.0`
`go.opentelemetry.io/collector/pdata`	`v1.54.0` -> `v1.61.0`
`go.opentelemetry.io/otel`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.42.0` -> `v1.44.0`
`golang.org/x/crypto`	`v0.49.0` -> `v0.53.0`
`golang.org/x/exp`	`v0.0.0-20260218203240-3dfff04db8fa` -> `v0.0.0-20260611194520-c48552f49976`
`golang.org/x/mod`	`v0.33.0` -> `v0.37.0`
`golang.org/x/net`	`v0.52.0` -> `v0.56.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.21.0`
`golang.org/x/sys`	`v0.42.0` -> `v0.46.0`
`golang.org/x/term`	`v0.41.0` -> `v0.44.0`
`golang.org/x/text`	`v0.35.0` -> `v0.38.0`
`golang.org/x/tools`	`v0.42.0` -> `v0.46.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260319201613-d00831a3d3e7` -> `v0.0.0-20260622175928-b703f567277d`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260319201613-d00831a3d3e7` -> `v0.0.0-20260622175928-b703f567277d`
`google.golang.org/grpc`	`v1.79.3` -> `v1.81.1`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`k8s.io/api`	`v0.35.2` -> `v0.36.2`
`k8s.io/cli-runtime`	`v0.35.2` -> `v0.36.2`
`k8s.io/kube-openapi`	`v0.0.0-20260304202019-5b3e3fdb0acf` -> `v0.0.0-20260603220949-865597e52e25`
`k8s.io/kubectl`	`v0.35.2` -> `v0.36.2`
`k8s.io/utils`	`v0.0.0-20260210185600-b8788abfbbc2` -> `v0.0.0-20260617174310-a95e086a2553`
`sigs.k8s.io/kustomize/api`	`v0.20.1` -> `v0.21.1`
`sigs.k8s.io/kustomize/kyaml`	`v0.20.1` -> `v0.21.1`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.2` -> `v6.4.0`

pulumi-renovate Bot added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Mar 30, 2026

pulumi-renovate-approve Bot approved these changes Mar 30, 2026

View reviewed changes

pulumi-renovate Bot force-pushed the renovate/pulumi branch from 0e0da94 to 8db5b2a Compare April 1, 2026 05:00

pulumi-renovate Bot changed the title ~~Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to 5e3f72d~~ Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to 98273ff Apr 1, 2026

pulumi-renovate Bot force-pushed the renovate/pulumi branch from 8db5b2a to f64c9dd Compare April 2, 2026 03:06

pulumi-renovate Bot changed the title ~~Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to 98273ff~~ Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to d44b265 Apr 2, 2026

pulumi-renovate Bot force-pushed the renovate/pulumi branch from f64c9dd to 90aebff Compare April 2, 2026 07:45

pulumi-renovate Bot changed the title ~~Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to d44b265~~ Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to d72ab76 Apr 2, 2026

pulumi-renovate Bot force-pushed the renovate/pulumi branch from 90aebff to eb5f1cb Compare April 2, 2026 20:57

pulumi-renovate Bot changed the title ~~Update github.com/pulumi/pulumi-kubernetes/provider/v4 digest to d72ab76~~ Update first-party Pulumi dependencies Apr 2, 2026

pulumi-renovate Bot force-pushed the renovate/pulumi branch 4 times, most recently from bc3b2b5 to 17f38d0 Compare April 10, 2026 01:33

pulumi-renovate Bot force-pushed the renovate/pulumi branch 7 times, most recently from b98966c to 64aa5bf Compare April 17, 2026 09:28

pulumi-renovate Bot force-pushed the renovate/pulumi branch 7 times, most recently from 18045d7 to 3ffc2a4 Compare April 22, 2026 00:03

pulumi-renovate Bot force-pushed the renovate/pulumi branch 9 times, most recently from 9b1c379 to 695a000 Compare May 8, 2026 00:50

pulumi-renovate Bot force-pushed the renovate/pulumi branch 9 times, most recently from b5dfb89 to 7177994 Compare May 15, 2026 11:56

pulumi-renovate Bot force-pushed the renovate/pulumi branch 11 times, most recently from 70a7a1f to cd4240c Compare May 22, 2026 22:21

Update first-party Pulumi dependencies

bb07d1c

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update first-party Pulumi dependencies#240

Update first-party Pulumi dependencies#240
pulumi-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pulumi

pulumi-renovate Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

pulumi-renovate Bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

pulumi-renovate Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Improvements

Features

Bug Fixes

Features

Bug Fixes

Improvements

Bug Fixes

Improvements

Features

Bug Fixes

Features

Bug Fixes

Miscellaneous

Improvements

Features

Improvements

Features

Improvements

Features

Bug Fixes

Improvements

Features

Improvements

Features

Miscellaneous

Features

Bug Fixes

Bug Fixes

Features

Improvements

Features

Bug Fixes

Improvements

Bug Fixes

Features

Bug Fixes

Miscellaneous

Bug Fixes

Improvements

Bug Fixes

Improvements

Bug Fixes

Miscellaneous

Bug Fixes

Improvements

Bug Fixes

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

Miscellaneous

Features

Bug Fixes

pulumi-renovate Bot commented Mar 30, 2026 •

edited

Loading

pulumi-renovate Bot commented Apr 2, 2026 •

edited

Loading