Pin dependencies

[pulumi-renovate]

This PR contains the following updates:

Package	Type	Update	Change
@pulumi/pulumi (source)	dependencies	pin	^3.0.0 -> 3.111.1
github.com/pulumi/pulumi/pkg/v3	require	minor	v3.190.0 -> v3.205.0
github.com/pulumi/terraform-plugin-sdk/v2	replace	digest	7f1981c -> 717b4ef
github.com/pulumi/terraform-provider-xyz	require	patch	v0.0.2 -> v0.0.3

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)

v3.205.0

Compare Source

3.205.0 (2025-10-28)

Bug Fixes

• [cli/display] Improve how the severity is displayed for policy violations
  #​20805

• [engine] Fix an issue where refresh --run-program could potentially run forever
  #​20781

v3.204.0

Compare Source

3.204.0 (2025-10-23)

Features

• [cli] Print replace diffs when a resource tries to replace but is blocked by still having an import id set
  #​20762

• [engine] Support overriding policy severity on violations
  #​20767

• [backend/service] Send journal entries to the backend if it's supported
  #​20343

Bug Fixes

• [engine] Fix a potential snapshot integrity error when a resources dependency fails to be destroyed using destroy --run-program
  #​20692

• [engine] Fix import error to contain the import ID of non-existent resources
  #​20753

• [sdk/nodejs] Pass secret values as Output objects to resource hooks to properly maintain their secretness. Previously hooks received an internal representation for secret values.
  #​20774

• [sdk/python] Pass secret values as Output objects to resource hooks to properly maintain their secretness. Previously hooks received an internal representation for secret values.
  #​20769

• [sdkgen/go] Fix codegen of scalar return SDK functions
  #​20754

• [sdkgen/{nodejs,python}] Fix scalar return protocol to allow returning secret maps
  #​20747

Miscellaneous

• [sdk/nodejs] Use Language.Link to link Node.js packages
  #​20715

v3.203.0

Compare Source

3.203.0 (2025-10-15)

Features

• [cli/display] Display policy severity for violations
  #​20746

• [cli/package] Show functions in package info
  #​20733

Bug Fixes

• [engine] Make sure errors from the journaler are not shown to the user
  #​20740

• [backend/diy] Fix casing of stack/latest when importing stacks
  #​20727

• [cli/package] Fix 'required' flag for resource inputs in package info
  #​20731

• [programgen] Revert #​20345
  #​20714

• [programgen/{dotnet,nodejs}] Propagate local dependencies for parameterized packages during convert down to GenerateProject
  #​20706

• [sdkgen/python] Fix python invokes for functions returning map types
  #​20719

Miscellaneous

• [sdk/python] Use Language.Link to link python packages
  #​20612

v3.201.0

Compare Source

3.201.0 (2025-10-06)

Features

• [sdkgen/go] Support non-object return types in functions
  #​20646

Bug Fixes

• [backend/service] Fix the --insecure flag in pulumi login

v3.200.0

Compare Source

3.200.0 (2025-10-03)

Features

• [cli] Look for .cmd and .ps1 extensions as well on Windows when looking for executables
  #​20637

• [sdk/go] Add a new resource option: HideDiffs
  #​20631

• [sdk/nodejs] Add a new resource option: hideDiffs
  #​20631

• [sdkgen/python] Support non-object return types in functions
  #​20624

Bug Fixes

• [build] Use ruff to auto fix lints in python
  #​20644

• [sdk/nodejs] Make new arguments to initialize optional
  #​20650

• [sdkgen/nodejs] Generate a .gitignore file inside local SDKs
  #​20643

• [cli/state] Treat providers that are marked as parents in a move as providers still instead of as regular resources
  #​20639

• [cli/state] Exclude root stack correctly when moving resources and when --include-parents is passed

v3.199.0

Compare Source

3.199.0 (2025-10-01)

Features

• [cli/about] Add pulumi about env to help
  #​20633

• [cli/{about,new}] Add environment variables to override template repository settings. The new PULUMI_TEMPLATE_GIT_REPOSITORY, PULUMI_TEMPLATE_BRANCH, PULUMI_POLICY_TEMPLATE_GIT_REPOSITORY, and PULUMI_POLICY_TEMPLATE_BRANCH environment variables allow runtime customization of template sources
  #​20615

• [cli/{install,package}] Add support for package references in plugins
  #​20524

• [sdk/nodejs] Pass options, name, and type to ComponentResources initialize methods
  #​20618

• [cli/policy] Send vcs metadata when publishing policy packs
  #​20528

Bug Fixes

• [cli/display] Always send diag events to stderr in the diff display
  #​20632

• [components] Stop including auth info in plugin name
  #​20620

• [engine] Support the import option in resource transforms
  #​20586

• [programgen] Fix panic in parseProxyApply when encoutering warning diagnostics
  #​20583

• [sdk/nodejs] Don't attempt to serialise function values for resource inputs/outputs
  #​20621

v3.198.0

Compare Source

3.198.0 (2025-09-26)

Features

• [engine] Expand snapshot integrity check for resources
  #​20519

• [sdk/go] Refactor Go policy SDK to have access to a pulumi Context object
  #​20570

• [sdk/python] Allow registered resources to be retrieved from the mock monitor for test assertions
  #​20540

Bug Fixes

• [engine] Fix snapshot integrity error with run-program --refresh, when a provider has a dependency that isn't being created
  #​20541

• [engine] Remove unneeded data from policy summary events
  #​20589

• [sdk] Fix plugin killing during cancellation
  #​20543

• [sdk/go] Fix [Unm/M]arshalProperties to return nil when given nil
  #​20544

Miscellaneous

• [protobuf] Add loader_target to LanguageRuntime.LinkRequest
  #​20552

• [cli/package] Move InstallPackage from cmd/packagecmd to cmd/packages
  #​20550

• [cli/package] Move stdout/stderr IO out of GenSDK and LinkPackage
  #​20546

• [sdk] Move PluginSpec.Install to pkg/workspace.InstallPluginContent
  #​20537

• [sdk/yaml] Bump pulumi-yaml to 1.23.2
  #​20588

v3.197.0

Compare Source

3.197.0 (2025-09-17)

Features

• [cli] Send new policy fields when publishing a policy pack

• [sdk/dotnet] Update dotnet to v3.88
  #​20512

Bug Fixes

• [engine] Fix a panic in preview, that could happen in some cases when default providers get updated
  #​20511

• [components/python] Fix parenting of python components
  #​20508

• [sdk/python] Fix hang when shutting down in certain error conditions
  #​20484

• [sdk/python] Fix license-files entry for python package
  #​20506

v3.196.0

Compare Source

3.196.0 (2025-09-12)

Miscellaneous

• [sdk] Add policy summary events apitypes
  #​20443

• [sdk] Add new policy fields apitypes
  #​20491

• [protobuf] Add support for indicating "not applicable" policies
  #​20492

• [protobuf] Add new analyzer policy fields
  #​20494

v3.195.0

Compare Source

3.195.0 (2025-09-10)

Features

• [engine] Add support for capturing program stack traces as part of resource registration
  #​20430

• [sdk/go] Registered resources can now be retrieved from the mock monitor for test assertions
  #​20472

• [sdk/go] The current exports map is now available for unit testing through GetCurrentExportMap
  #​20471

Bug Fixes

• [pkg/go] Fix an issue where v3.194.0 of the github.com/pulumi/pulumi/pkg/v3 module depends on APIs from github.com/pulumi/pulumi/sdk/v3 that haven't been released
  #​20487

v3.194.0

Compare Source

3.194.0 (2025-09-08)

Features

• [cli] Log diagnostics to stderr instead of stdout
  #​20461

• [cli/display] Change the default for --show-full-output from true to false
  #​20467

• [cli/display] Fix the --show-full-output the flag
  #​20464

• [sdk/go] Show a message that the Go program is being compiled
  #​20460

Bug Fixes

• [engine] Make ignoreChanges work better for arrays
  #​20465

• [programgen] Fix panic in RewriteApplies when encountering warning diagnostics
  #​20453

Miscellaneous

• [cli] No longer require the PULUMI_EXPERIMENTAL flag for Private Registry template operations (pulumi template publish, registry-based template resolution in pulumi new), while registry-backed template resolution in pulumi new may still be disabled using PULUMI_DISABLE_REGISTRY_RESOLVE=true pulumi new
  #​20458

• [sdk/yaml] Bump pulumi-yaml to 1.23.1

v3.193.0

Compare Source

3.193.0 (2025-09-04)

Bug Fixes

• [cli] Use "Private Registry", not cloud or Pulumi registry, in CLI output
  #​20436

• [cli/display] Avoid printing a double new line when showing secrets in the outputs
  #​20435

• [cli/display] Fix coloring of cobra error messages on windows

• [cli/{install,package}] Fix local package resolution when PULUMI_EXPERIMENTAL=true by including local packages in registry fallback logic
  #​20413

• [cli/new] Fail when running with --language without --ai in non-interactive mode
  #​20415

• [cli/package] Fix not using already-installed package in 'pulumi package add' when PULUMI_EXPERIMENTAL=1

Miscellaneous

• [cli] Start the pprof server when receving SIGUSR1
  #​20392

• [cli/display] Replace ijc/Gotty terminfo package with xo/terminfo
  #​20446

• [cli/display] Use the passed through writer in ShowProgressOutput instead of loading a new terminfo

v3.192.0

Compare Source

3.192.0 (2025-08-29)

Features

• [cli/state] Add pulumi state taint/untaint commands to force replacement of resources upon next update
  #​20380

• [sdk/nodejs] Add previewDestroy to allow dry-runs of destroy commands
  #​20371

Bug Fixes

• [engine] Fix a bug causing hooks to never pass correctly to remote Go components
  #​20390

• [sdk/go] Fix source position information
  #​20351

• [sdk/nodejs] Fix function serialisation that contains minified classes
  #​19345

• [sdkgen/nodejs] Limit @​types packages used during local SDK generation
  #​20387

• [sdk/python] Set ThreadPoolExecutor max_workers to parallelism * 4
  #​20362

• [sdk/python] Handle -v flag passed to policy packs
  #​20373

• [sdk/python] Forward errors raised in callbacks to the caller
  #​20381

Miscellaneous

• [cli] Log stack trace when interrupted when using verbose logging
  #​20364

• [cli] Print the location of the log file when running with the verbose flag
  #​20365

• [sdk/python] Remove custom typing stubs
  #​20384

v3.191.0

Compare Source

3.191.0 (2025-08-21)

Features

• [cli] Document the PULUMI_ENABLE_STREAMING_JSON_PREVIEW envvar.
  #​20328

Bug Fixes

• [engine] Check providers returning 'version' or '__internal' in their inputs
  #​20313

• [engine] Fix a panic with refresh --run-program
  #​20337

• [engine] Fix an infinite loop from passing unordered resources to the dependency system when using --refresh

• [programgen] Emit warnings instead of errors in non-strict mode when binding resource blocks
  #​20347

• [programgen] Simplify range value types when it is derived from object of objects and warn on unknown properties
  #​20345

• [programgen] Warn instead of erroring out when traversing a NoneType in PCL
  #​20342

• [cli/display] Escape non-graphic characters in URNs
  #​20295

• [cli/import] Disambiguate duplicate resource names by their types when importing
  #​20348

• [cli/new] Don't prompt for ai or template when passing --yes
  #​20256

Miscellaneous

• [cli] Log version and CLI metadata
  #​20334

• [cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource
  #​20324

pulumi/terraform-provider-xyz (github.com/pulumi/terraform-provider-xyz)

v0.0.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pulumi-renovate]

ℹ Artifact update notice

File name: provider/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
github.com/hashicorp/hcl/v2	v2.22.0 -> v2.23.0
github.com/pulumi/pulumi-java/pkg	v0.17.0 -> v0.18.0
github.com/pulumi/pulumi-yaml	v1.11.2 -> v1.12.0
github.com/pulumi/pulumi/sdk/v3	v3.140.0 -> v3.142.0
golang.org/x/crypto	v0.28.0 -> v0.29.0
golang.org/x/sync	v0.8.0 -> v0.9.0
golang.org/x/sys	v0.26.0 -> v0.27.0
golang.org/x/term	v0.25.0 -> v0.26.0
golang.org/x/text	v0.19.0 -> v0.20.0

[github-actions]

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Maintainer note: consult the runbook for dealing with any breaking changes.

[pulumi-renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: examples/go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: errors parsing go.mod:
go.mod:179: replace github.com/pulumi/terraform-plugin-sdk/v2: version "v2.0.0-20250924000205-717b4eff435b" invalid: go.mod has non-.../v2 module path "github.com/hashicorp/terraform-plugin-sdk" (and .../v2/go.mod does not exist) at revision 717b4eff435b

File name: provider/go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: errors parsing go.mod:
go.mod:7: replace github.com/pulumi/terraform-plugin-sdk/v2: version "v2.0.0-20250924000205-717b4eff435b" invalid: go.mod has non-.../v2 module path "github.com/hashicorp/terraform-plugin-sdk" (and .../v2/go.mod does not exist) at revision 717b4eff435b