Bump pulumi dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Manager	Type	Update
Pulumi (source)	3.38.0 → 3.113.1			nuget	nuget	minor
Pulumi.Automation (source)	3.38.0 → 3.113.1			nuget	nuget	minor
Pulumi.Aws (source)	5.11.0 → 5.43.0			nuget	nuget	minor
Pulumi.Kubernetes (source)	3.20.5 → 3.30.2			nuget	nuget	minor
Pulumi.Random (source)	4.8.2 → 4.21.1			nuget	nuget	minor
Pulumi.Tls (source)	4.6.0 → 4.11.4			nuget	nuget	minor
pulumi	3.38.0 → 3.261.0			regex	run	minor
pulumi-aws	5.11.0 → 5.43.0			regex	plugin	minor
pulumi-kubernetes	3.20.5 → 3.30.2			regex	plugin	minor
pulumi-random	4.8.2 → 4.21.1			regex	plugin	minor
pulumi-tls	4.6.0 → 4.11.4			regex	plugin	minor

---

Release Notes

pulumi/pulumi (Pulumi)

v3.113.1

Features

• [auto/{go,nodejs,python}] Add support for inheritSettings to go, nodejs and python automation API.
  #​15684

Bug Fixes

• [backend] Fix incorrect dependency sorting in snapshot

v3.113.0

Features

• [sdk/nodejs] Make TypeScript and ts-node optional peer dependencies to allow using user specified versions
  #​15622

  Note: TypeScript and ts-node are now optional peer dependencies of the Node.js SDK. This makes its possible to chose any version of these packages by adding them as dependency or devDependency to your package.json. If these optional peer dependencies are not installed, Pulumi will fallback to bundled versions included in the Node.js SDK to maintain backwards compatibility. As a side effect of this change, the tsc binary is no longer available in node_modules/.bin/tsc. If you rely on tsc being available in your project, add it as a dependency or devDependency to your package.json.

• [sdk/python] Add 'typeChecker' runtime option to the Python language host
  #​15725

• [auto/{go,nodejs,python}] Add support for continue-on-error parameter of the destroy command to the Automation API
  #​15921

• [cli] Support always fully qualifying stack names in CLI output
  #​15857

• [cli] Add --no-plugins and --no-dependencies to pulumi install
  #​15910

• [docs] Implement Java constructor syntax examples
  #​15805

• [sdk/go] Allow unknowns during pulumi up
  #​15942

• [sdk/{nodejs,python}] Allow apply to have unknown values during updates
  #​15898

Bug Fixes

• [auto] Tolerate missing stack and bookkeeping files in ProgramTest
  #​15863

• [backend/diy] Fix race condition when listing stacks
  #​15931

• [cli] Fix a panic when user's home directory could not be looked up
  #​15872

• [cli] Fix some commands that didn't respect --disable-integrity-checking
  #​15911

• [auto/go] Avoid flakyness when reading the event log from pulumi commands
  #​15856

• [engine] Resource transforms on component resources now apply to children correctly
  #​15846

• [programgen/dotnet] Remove trailing whitespace from emitted DependsOn resource option expressions
  #​15892

• [sdk/go] Fix Provider and Providers options in Go transform functions
  #​15885

• [sdk/nodejs] Handle serialization of aliases for well known native functions
  #​15873

• [sdk/nodejs] Correctly serialise functions whose code would make use of reserved identifiers
  #​15879

• [sdk/nodejs] Serialize function values obtained from Function.bind
  #​15887

• [sdk/python] Improve types of getters in Python SDK
  #​15865

• [sdkgen/{dotnet,go}] Fix SDK-generation when referencing shared types in config variables
  #​15772

Miscellaneous

• [backend/diy] Upgrade gocloud.dev dependency to 0.37
  #​15924

• [sdk/nodejs] Update builtin module list for function serialization
  #​15830

• [sdk/nodejs] Set package.json engines to node >= 18
  #​15845

v3.112.0

Features

• [docs] Implement constructor syntax examples for every resource in typescript, python, csharp and go
  #​15624

• [docs] Implement YAML constructor syntax examples in the docs
  #​15791

• [engine] Send output values with property dependency information to transform functions
  #​15637

• [engine] Add a --continue-on-error flag to pulumi destroy
  #​15727

• [sdk/go] Make property.Map keyed by string not MapKey
  #​15767

• [sdk/nodejs] Make function serialization work with typescript 4 and 5
  #​15761

• [sdk/python] Improve the error message when depends_on is passed objects of the wrong type
  #​15737

Bug Fixes

• [auto/{go,python}] Make sure to read complete lines before trying to deserialize them as engine events
  #​15778
  #​15798

• [auto/{go,python}] Use the full path when running pulumi from a custom CLI install
  #​15802

• [cli/plugin] Fix installing local language plugins on Windows
  #​15715

• [engine] Don't delete stack outputs on failed deployments
  #​15754

• [engine] Fix a panic when updating provider version in a run using --target
  #​15716

• [engine] Handle that Assets & Archives can be returned from providers without content.
  #​15736

• [engine] Fix the engine trying to delete a protected resource caught in a replace chain
  #​15776

• [sdkgen/docs] Add missing newline for Coming soon!
  #​15783

• [programgen/dotnet] Fix generated code for a list of resources used in resource option DependsOn
  #​15773

• [programgen/{dotnet,go}] Fixes emitted code for object expressions assigned to properties of type Any
  #​15770

• [sdk/go] Fix lookup of plugin and program dependencies when using Go workspaces
  #​15743

• [sdk/nodejs] Export automation.tag.TagMap type
  #​15774

• [sdk/python] Wait only for pending outputs in the Python SDK, not all pending asyncio tasks
  #​15744

Miscellaneous

• [sdk/nodejs] Reorganize function serialization tests
  #​15753

• [sdk/nodejs] Move mockpackage tests to closure integration tests
  #​15757

v3.111.1

Features

• [cli] Offer to create a first project after logging in to an account with no stacks #​24133
• [cli/do] Auto-assign identifiers to existing stack resources in pulumi do input expressions, and add pulumi do show-resources to list them #​24184
• [cli/do] Make "pulumi do <pkg> <resource> patch <name> work in stateful mode, overlaying the supplied inputs onto the existing snippet" #​24295
• [cli/state] Implement pulumi state get to show individual resources #​24191
• [cli/do] Fall back to an auto-created project and stack under PULUMI_HOME when pulumi do is invoked outside of a Pulumi project #​24231

Bug Fixes

• [sdkgen/go] Generated output-form invokes pass their arguments to the core SDK without resolving them first, so invoke dependencies can be inferred from arguments; generated SDKs now require pulumi SDK v3.255.0 or later #​24060
• [cli] Make 'pulumi stack history events --summary report the program errors from the language host #​24111
• [cli/cloud] pulumi api: repeated -H/--header values for the same header name now all reach the wire, instead of each one silently overwriting the last #​24180
• [cli/package] Maintain --server when adding to the packages section of Pulumi.yaml #​24189
• [sdk/go] Fix panics in hooks to not crash the entire process #​24218
• [programgen/go] for expressions are now generated as Go loops #​24228
• [programgen/go] Fix invalid _ := index statement emitted for resources with a numeric range whose value variable is unused #​24227
• [sdk/python] Report an error instead of hanging when a Python resource depends on its own parent #​24230
• [sdkgen/go] Generate the missing Go input types for resource input properties that are deeply nested collections of object types #​24236
• [programgen/go] Rename properties that collide with reserved names (e.g. elementType) the same way SDK codegen does, instead of emitting uncompilable code #​24235
• [cli/display] Show the value being added when a refresh or provider diff reports an added property #​24245
• [cli/plugin] Track when a plugin was last run so pulumi plugin ls reports an accurate last-used time on all platforms #​24251
• [engine] Show secrets in diff display when --show-secrets is passed #​24253
• [cli] Exit promptly when a command is cancelled while an HTTP request is being retried #​24276

Improvements

• [sdk/nodejs] Improve error message when resource registrations are still pending when pulumi exits #​24082
• [cli] Pass the invoked command (e.g. pulumi new) to the browser-based login/signup flow so Pulumi Cloud can attribute signups to the command that triggered them #​24192

Miscellaneous

• [sdkgen] Extension-parameterized packages now namespace their resource and function tokens under their own package name rather than the base provider's #​24143
• [java] Upgrade java to v1.35.0 #​24202
• [backend/diy] The deprecation warning is now an error. PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_WARNING is now PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_ERROR. #​24216
• [java] Upgrade java to v1.36.0 #​24243
• [sdk/dotnet] Upgrade dotnet to v3.111.1 #​24249

v3.111.0

Features

• [auto/go] Support remote deployment executor image
  #​15697

Bug Fixes

• [engine] Test and fix the engine filling in property dependencies to provider constructs

• [sdkgen/go] Ensure package generation for Go doesn't panic when encountering overly nested arrays or maps of primitive types
  #​15680

v3.110.0

Features

• [cli] Make "pulumi dn" an alias for "pulumi destroy"
  #​15650

• [yaml] Update yaml to v1.6.0
  #​15661

• [sdk/python] Add experimental support to the Python SDK for the new transforms system
  #​15376

Bug Fixes

• [cli/state] Add --yes to state upgrade
  #​15648

• [programgen/{dotnet,go,python}] Fix panic when generating programs for MLC packages where they include type references to external packages
  #​15605

• [programgen/go] Fix optional primitive values being derefrenced
  #​15592

• [sdk/go] Await output properties from Construct/Call before closing the Context
  #​15611

• [sdk/nodejs] Fix codepaths computation when working dir is nested relative to package.json
  #​15601

• [sdk/nodejs] Replace glob with fdir to avoid an indirect dependency on inflight
  #​15617

• [sdkgen/python] Make replace-on-changes values camelCased not kebab_cased
  #​15666

v3.109.0

Features

• [auto/{go,nodejs,python}] Add support for suppress progress and suppress outputs parameters in the Automation API
  #​15596

• [pkg] Make schema.NewPluginLoader respect PULUMI_DEBUG_PROVIDERS, which enables Pulumi YAML programs to work correctly with this feature
  #​15526

• [sdk/dotnet] Update dotnet language host to 3.60.0
  #​15609

• [sdk/nodejs] Add experimental support to the NodeJS SDK for the new transforms system.
  #​15532

• [sdk/python] Add support for asynchronous invokes via a new invoke_async function
  #​15602

• [sdkgen/dotnet] Support for non-overlay components in codegen for pulumi-kubernetes provider
  #​15490

Bug Fixes

• [cli] Fix a panic when the secrets provider is missing from the deployment snapshot
  #​15599

• [backend/service] Make decrypt/encrypt network calls retryable to help work around network hiccups
  #​15600

• [cli/new] Strip credentials and query strings from template URLs saved to project
  #​15586

• [engine] Fix an issue where snapshots could become invalid when doing a targeted up
  #​15476

• [engine] Downgrade remediate policy violations to mandatory

• [pkg/testing] Make ProgramTest use a temporary PULUMI_HOME for each test
  #​15568

• [sdkgen/dotnet] Codegen fix for resources without constant input properties
  #​15488

• [sdk/nodejs] Properly capture node:crypto and global.crypto in node 19+
  #​15492

• [sdk/python] Fix determining plugins for old packages in the Python language host
  #​15576

v3.108.0

Features

• [cli/state] Exit immediately from state edit when no change was made
  #​15514

• [docs] Adds ability to process docs without Examples logic, using <!--Start PulumiCodeChooser --> markers in incoming schema descriptions
  #​15475

• [pkg] Adds simple vim keyboard shortcuts to the live tree view (j,k,g,G,Ctrl+F,Ctrl+B) and also wires up Home and End keys
  #​15418

• [sdk/go] Add experimental support to the Go SDK for the new transforms system.
  #​15355

Bug Fixes

• [ci] Use SYSTEM_PULLREQUEST_SOURCECOMMITID for AZ pipeline on GH PR
  #​15513

• [engine] Fix root and program paths to always be absolute.
  #​15470

• [pkg] Tag new pkg versions on a commit on the main branch
  #​15515

• [sdk/nodejs] Handle yarn/npm workspaces when computing codepaths for function serialization
  #​15426

• [sdk/nodejs] Replace deprecated read-package-tree with @​npmcli/arborist
  #​15503

• [sdk/nodejs] Upgrade to @​grpc/grpc-js 1.10.1
  #​15500

• [sdk/nodejs] Regenerate yarn.lock to fix lru-cache hoisting
  #​15543

Miscellaneous

• [backend/diy] Remove warning about non-project mode deprecation.
  #​15497

v3.107.0

Features

• [cli/config] Adds an --open flag to pulumi config command which resolves the environment listed in the stack configuration.
  #​15469

• [auto/go] Automation API support for pulumi refresh --preview-only
  #​15340

• [engine] Add support for remote transforms to the engine.
  #​15290

• [pkg/testing] Add a InstallDevReleases option to ProgramTest, to install pulumi dev SDKs
  #​15387

• [programgen/{dotnet,nodejs,python}] Emit Output-returning JSON serialization methods without rewriting applies for top-level function expression
  #​15371

• [sdk/nodejs] Detect npm and yarn workspaces setups when installing dependencies
  #​15421

• [sdk/nodejs] Use pnpm as package manager if we find a pnpm-lock.yaml file
  #​15456

Bug Fixes

• [docs] Fixes docs generator parent module computation
  #​15035

• [engine] Test and fix the engine filling in args dependencies to provider calls.
  #​15450

• [programgen] Fix infinite recursion when binding invoke signature into promises without accounting for recursive type references
  #​15463

v3.106.0

Features

• [components] Component providers can return output values in their response to the engine.
  #​15408

• [programgen/{dotnet,go,nodejs,python}] Emit missing trivia for resources and local variables
  #​15419

• [sdk/{nodejs,python}] Publish dev versions of the nodejs and python SDKs
  #​15299

Bug Fixes

• [cli] Fix pulumi destroy to fill in stack config with the secret config from state, not fresh secret config.
  #​15432

• [engine] Engine no longer assumes program dependencies are specified as semantic versions.
  #​15409

• [components/go] Component providers now correctly return output values to the engine.
  #​15405

Miscellaneous

• [protobuf] Split CallRequest into ResourceCallRequest for the ResourceMonitor service.
  #​15404

• [backend/diy] Add a warning that non-project mode will be deprecated at some point.
  #​15411

v3.105.0

Features

• [auto/go] Adds support for --refresh to Stack.Up(), Stack.Preview() and Stack.Destroy() via go automation api
  #​15350

• [cli] Adds a preview-only flag to pulumi refresh.
  #​15330

• [cli] Adds preview-only flag for pulumi destroy and pulumi import
  #​15336

• [engine] Translate all Computed and Secret values to OutputValues for Construct and Call methods.
  #​15362

• [cli/display] Add --suppress-progress option to not print dots
  #​14690

• [sdk/go] Add UpgradeToOutputValues to MarshalOptions.
  #​15349

• [cli/plugin] Add experimental plugin run command for running plugin binaries directly.
  #​12613

• [sdkgen/python] Update the default minimum required version of Python to 3.8 or greater for generated provider SDKs.
  #​15368

Bug Fixes

• [backend/diy] Fix an issue where state stored on a mounted device would result in errors
  #​15375

• [cli/state] Fix a panic when trying to delete a provider from the state that's still referenced.
  #​15322

• [cli/state] Fix a nil reference panic in the state edit command.
  #​15354

Miscellaneous

• [docs] Add kubernetes as a supported pulumi convert language
  #​15359

• [sdk/python] Require Python 3.8 or greater.
  #​15363

• [sdk/python] Upgrade grpcio to 1.60.1
  #​15366

v3.104.0

Features

• [backend] Allows the PULUMI_SKIP_CHECKPOINTS environment variable to be set without requiring the PULUMI_EXPERIMENTAL flag.
  #​15318

• [auto/go] Add new API to install the Pulumi CLI from the Automation API
  #​15049

• [auto/nodejs] Allow disabling version validation when using a custom PulumiCommand instance
  #​15242

• [auto/python] Add new API to install the Pulumi CLI
  #​15204

• [auto/python] Inline programs can now be defined as async functions.
  #​15278

• [pkg/testing] Add RequireEmptyPreviewAfterRefresh option to ProgramTest

Bug Fixes

• [engine] Fix a hang in preview --import-file.
  #​15203

• [engine] Engine will now error if aliases request a parent with no URN.
  #​15232

• [engine] Fix stack name validation when PULUMI_DISABLE_VALIDATION isn't set.
  #​15245

• [engine] Fix a performance issue doing unneeded secret encryption.
  #​15306

• [sdk/go] Include error message in local workspace validation.
  #​15279

• [sdkgen/go] Remove pulumix references from generated enums
  #​15280

• [programgen/nodejs] Fixes generated expression for filebase64 function to use fs.readFileSync directly with base64 encoding option
  #​15253

• [sdkgen/python] Use importlib.metadata instead of pkg_resources
  #​15266

Miscellaneous

• [auto/go] Remove obsolete note from FullyQualifiedStackName comment.
  #​15281

• [backend/filestate] Upgrade gocloud.dev to the latest version
  #​15202

• [sdk/python] Remove compatability code for Python 3.7 and below.
  #​15276

v3.103.1

Bug Fixes

• [sdk/nodejs] Include @​types/semver as a dependency
  #​15251

v3.103.0

Features

• [engine] Allow import plugins to define components and logical names.
  #​15199

• [cli/display] Incremental improvement on the output when installing plugins
  #​15201

• [sdk] Bake the release version into the SDK
  #​15185

• [sdk/go] Parse config paths strictly
  #​15173

• [cli/new] Adds pulumi:template tag to pulumi new created projects
  #​15056

• [auto/nodejs] Add new API to install the Pulumi CLI from the Automation API
  #​14991

• [sdk/python] Add support for Python 3.12
  #​15190

Bug Fixes

• [engine] Fix a bug where mapping lookup could sometimes lead to an infinite loop.
  #​15200

• [engine] Remove an incorrect assert that resources must have inputs.
  #​15197

• [cli/display] Improve output when installing policy packs
  #​15186

• [sdk/go] Removes omitempty from StepEventMetadata.DetailedDiff
  #​15213

• [sdk/go] Replace a deleted type used by Pulumi Cloud code.
  #​15216

Miscellaneous

• [yaml] Upgrade yaml to v1.5.0
  #​15214

v3.102.0

Features

• [sdk/go] Add WithValue to pulumi.Context
  #​15149

Bug Fixes

• [cli] Fix a panic when user's home directory could not be looked up.
  #​15160

• [cli/display] Fix JSON/YAML value diff displays.
  #​15171

• [sdk/go] Update github.com/cloudflare/circl to v1.3.7.
  #​15151

• [cli/import] --import-file now omits empty resource lists.
  #​15132

• [sdk/python] Allow remote components to use output property called id
  #​15115

Miscellaneous

• [sdkgen] Emit a warning when using id or urn as resource outputs
  #​15060

v3.101.0

Features

• [cli] Adds a flag that allows inserting a fragment into the dot file when generating a graph. This can be used for styling the graph elements, setting properties etc.
  #​14858

Bug Fixes

• [engine] Fix an uncommon datarace with replace steps.
  #​15112

• [sdkgen/go] Revert using plain object type when the plainness is shallow and we should use inputty-types instead
  #​15059

• [cli/state] Fix a panic in pulumi state when no snapshots are available
  #​15045

• [sdkgen/python] Fixes resource imports when importing across different modules
  #​14832

Miscellaneous

• [backend/filestate] Upgrade gocloud.dev to the latest version
  #​15011

v3.100.0

Features

• [auto/{go,nodejs,python}] Adds ListEnvironments support to Go, Nodejs and Python Automation API.
  #​14995

• [cli/display] Warn correctly about new versions being availablen when using the CLI dev channel
  #​14954

Bug Fixes

• [cli/new] Fixes duplicate printing of the AI prompt & answer on Windows.
  #​15010

• [engine] Fix bug where unimported resources (of different types) with the same name would cause --import-file to panic.
  #​15008

• [engine] Default parallel operations to a reasonable limit.
  #​15016

• [programgen] Fixes type-annotating nested resource properties when these have quoted keys
  #​15001

• [sdkgen] Temporarily revert validation of urn and id resource output properties
  #​15025

• [programgen/{dotnet,python}] Allow object keys to be template expressions such as static quoted strings
  #​15000

• [backend/service] Exclude internal events from those sent to Pulumi Cloud.
  #​14972

• [sdk/go] fixes fulfillValue error when joining a nil output state
  #​14949

Miscellaneous

• [pkg] Upgrade pulumi-java to v0.9.9
  #​15007

• [yaml] Upgrade yaml to v1.4.5
  #​15007

v3.99.0

Features

• [cli/config] Adds pulumi config env ls command to list the environment imports declared in a stack configuration.
  #​14855

• [cli/new] Adds pulumi new --ai functionality.
  #​14685

• [sdk/nodejs] Add an environment variable (PULUMI_ERROR_OUTPUT_STRING) to throw when an output tries to convert to a string.
  #​14811

Bug Fixes

• [auto/nodejs] Always run cleanup for refresh and destroy commands
  #​14948

• [auto/nodejs] Don't mutate original stack settings when saving
  #​14952

• [programgen] Avoid pretty printing large object graphs when a resource property doesn't type-check when binding PCL programs
  #​14864

• [cli/config] Fixes config copy command to also copy environments from the source stack
  #​14847

• [cli/config] Fix a bug in pulumi config env ls --json where the json flag was not being correctly passed through.
  #​14961

• [programgen/go] Fix required config variables of type bool and number
  #​14958

Miscellaneous

• [cli] Update esc to v0.6.2
  #​14960

• [yaml] Upgrade yaml to 1.4.4
  #​14963

v3.98.0

Features

• [cli/import] Import can now distinguish between logical names and source names.
  #​14745

Bug Fixes

• [programgen/{dotnet,go,nodejs,python}] Fix generated utility functions for filebase64, filebase64sha256, sha1 and mimeType
  #​14857

• [programgen/{nodejs,python}] Fix duplicated import statements when instantiating a component multiple times
  #​14829

Miscellaneous

• [cli] Update esc to v0.6.1
  #​14939

v3.97.0

Features

• [auto/go] Add ChangeSecretsProvider to workspace and stack APIs.
  #​14039

• [auto/go] Adds AddEnvironments and RemoveEnvironment functions to Stack and LocalWorkspace types for Go Automation API.
  #​14785

• [auto/nodejs] Adds addEnvironments and removeEnvironment functions to Stack and LocalWorkspace classes for Nodejs Automation API.
  #​14788

• [auto/python] Adds add_environments and remove_environment functions to Stack and LocalWorkspace classes for python Automation API.
  #​14776

Bug Fixes

• [sdk/nodejs] Fix a bug in nodejs providers returning empty inputs on read.
  #​14803

• [sdkgen/go] Fix generated usage documentation for enum input types
  #​14739

v3.96.1

Features

• [cli/plugin] Allow plugins to specify a supported version range for the CLI
  #​21335

Bug Fixes

• [cli] Filter internal properties like __defaults from diff display
  #​21359

• [cli/config] Make config set --type bool accept different spellings of boolean values instead of only lowercase "true"
  #​21314

• [sdk/python] Fix import_resources with converter failing due to --stack argument placement
  #​21373

Miscellaneous

• [cli] Update pulumi-dotnet to 3.96.1

• [cli/package] Remove superfluous version string
  #​21351

v3.96.0

Features

• [cli] Add --import-file to pulumi preview to generate a placeholder import file for every resource that needs to Create.
  #​14548

• [sdk/nodejs] Add TypeScript definitions for the grpc and protobuf generated code.
  #​14415

Bug Fixes

• [auto] Don't swallow error if EditDir is not found in ProgramTest.
  #​14695

• [cli/display] Fix a panic in diff display when parsing YAML strings
  #​14710

• [auto/python] Ensures that the project_settings has a main directory for inline programs in python
  #​14709

• [engine] Error if a resource's parent is a skipped create.
  #​14672

• [engine] Warn if SDKs are trying to use old RegisterResource style StackReferences.
  #​14678

• [engine] Send resource inputs as inputs and state for Reads.
  #​14683

• [engine] Engine now prefers stable plugin versions to pre-releases when no explict version is given.
  #​14700

• [engine] Fix handling of delete failures for targeted destroys
  #​14735

• [sdkgen] Return all bind diagnostics in sdk-gen rather than just the first.
  #​14661

• [sdkgen/go] Fix compiling plain element type with plain maps
  #​14704

• [sdkgen/go] Fix generating input collection types for enums when used from an array of map of enums
  #​14744

• [backend/service] Service backend now validates snapshots are valid on load, same as the self managed backend. This can be disabled with --disable-integrity-checking.
  #​14046

v3.95.0

Features

• [cli/config] Include config values from ESC in pulumi config
  #​14560

• [cli/config] Add commands for managing stack environments
  #​14628

• [cli/config] Add a command to create an ESC environment from stack config
  #​14634

• [sdk/go] add optional display name and tag fields to project templates
  #​14587

• [sdk/nodejs] Enable resource imports for nodejs providers
  #​14668

• [cli/plugin] Load policy packs in parallel on startup to reduce startup time
  #​14495

• [sdkgen/dotnet] Added support for language specific settings for resources and support for overriding resource name in dotnet codegen
  #​14308

• [sdkgen/{go,nodejs,python}] Resource methods with plain: true outputs can now return plain values without an Output wrapper. In particular, this feature enables resource methods to serve as explicit provider factories by returning preconfigured explicit providers.
  #​13592

Bug Fixes

• [auto/go] Fix a datarace in cloning git repos.
  #​14643

• [auto/go] Fixes event stream lag on windows runtime
  #​14659

• [engine] Engine now correctly handles any resource name.
  #​14107

• [engine] Fix a panic in cancellation.
  #​14612

• [engine] Fix root directory passed to langauge plugins when starting pulumi in a subfolder.
  #​14684

• [sdkgen] Schemas now validate that 'urn' and 'id' are not used as resource output properties.
  #​14637

• [sdkgen] Fixes marshalling the "plain" flag from object or resource properties
  #​14648

• [yaml] Upgrade yaml to 1.4.3
  #​14693

• [programgen/nodejs] Fix generated readFile function so that it includes the encoding and returns a string
  #​14633

• [sdkgen/{dotnet,go,nodejs,python}] No longer writing out name and project from alias definitions into SDKs, only type
  #​14625

• [sdk/go] Fix optional handling on nested props
  #​14629

• [sdk/nodejs] Use local storage to track per stack error log count
  #​14702

• [sdkgen/go] Fixes plain and optional properties for generated types for Go SDKs using generics
  #​14616

• [sdkgen/go] Generate non-plain type variants for types used as inputs inside unions
  #​14679

• [sdk/python] Introduces RuntimeError when we detect a cycle upon adding dependencies to the graph. Additionally adds "PULUMI_ERROR_ON_DEPENDENCY_CYCLES" as a new environment variable to control this behavior. Set to False to return to the previous behavior, which could potentially re-introduce infinite hangs for some programs.
  #​14597

v3.94.1

Features

• [cli/display] Adds display when policy packs are being loaded
  #​14493

• [sdk/dotnet] Update dotnet language host to 3.59.0.
  #​14577

Bug Fixes

• [engine] Fix ignore changes ignoring secret values.
  #​14565

• [sdk/python] Use typing.Dict in type annotation instead of dict.
  #​14579

v3.94.0

Features

• [engine] import can now create empty component resource to use as the parent of other imported resources.
  #​14467

• [engine] import can now import a parent resource in the same deployment as a child resource.
  #​14461

• [engine] Import files no longer need parent URNs in the name table for resource being imported in the same file.
  #​14524

• [cli/config] config refresh will now restore secret provider config from the last deployment.
  #​13900

• [cli/new] Simplifies URL parsing for pulumi new zip
  #​14546

Bug Fixes

• [components/yaml] Upgrade yaml to 1.4.1
  #​14542

• [engine] Ignore spurious error from Kubernetes providers DiffConfig method.
  #​14533

• [sdk/python] Maintain old behavior for empty Kubernetes invoke results
  #​14535

v3.93.0

3.93.0 (2023-11-09)

Features

• [sdk/python] Add provider side caching for dynamic provider deserialization.
  #​14491

Bug Fixes

• [cli/new] Fix panic parsing template URL.
  #​14504

• [pkg] Fixes a panic in property mapping logic
  #​14498

• [sdkgen/go] Remove generic ToOutput methods from legacy non-generic go SDKs
  #​14492

v3.92.0

Features

• [auto] Allow shallow repository clones in NewLocalWorkspace
  #​14312

• [cli] Add support for ESC file projection
  #​14447

• [cli/new] Adds support for remote zip archive templates to pulumi new
  #​14443

• [engine] Support {NAME} in http plugin download URLs.
  #​14435

• [yaml] Update pulumi-yaml to 1.4.0
  #​14425

• [auto/nodejs] Add refresh option for up
  #​14306

Bug Fixes

• [cli/new] Adds nested directory support to pulumi new .zip
  #​14473

• [auto/nodejs] Pin @​grpc/grpc-js to v1.9.6 to resolve automation-api hang in NodeJS.
  #​14445

• [engine] Correctly propogate provider errors from DiffConfig.
  #​14436

• [engine] Fix parsing of property paths such as "root.[1]" being returned from providers.
  #​14451

• [programgen/go] Fix using inline invoke expressions inside resources, objects and arrays
  #​14484

• [sdk/python] Fix error on empty invoke returns
  #​14470

• [sdk/python] Fix traceback diagnostic from being printed when using Python dynamic providers
  #​14474

Miscellaneous

• [ci] Bump homebrew using pulumi's fork instead of pulumi-bot's
  #​14449

• [ci] Additional fixes for the homebrew release job
  #​14482

• [cli] Pull in fixes from esc v0.5.7
  #​14430

v3.91.0

Features

• [cli] Adds a new pulumi install command which will install packages and plugins for a project.
  #​13081

Bug Fixes

• [engine] Fix generation of property paths in diff.
  #​14337

v3.90.0

Features

• [auto/nodejs] Add support for the path option for config operations
  #​14305

• [engine] Converters can return diagnostics from ConvertState.
  #​14135

Bug Fixes

• [cli] Tightened the parser for property paths to be less prone to typos
  #​14257

• [engine] Fix handling of explicit providers and --target-dependents.
  #​14238

• [engine] Fix automatic diffs comparing against output instead of input properties.
  #​14256

• [sdkgen/dotnet] Fix codegen with nested modules.
  #​14297

• [programgen/go] Fix codegen to correctly output pulumi.Array instead of pulumi.AnyArray
  #​14299

• [cli/new] pulumi new now allows users to bypass existing project name checks.
  #​14081

• [sdk/nodejs] Nodejs now supports unknown resource IDs.
  [#​14137](https://redirect.github.com/pulumi/pulumi/pull/1

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Aws/packages.lock.json, Cli/packages.lock.json

  Determining projects to restore...
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj (in 3.81 sec).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj (in 311 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj (in 1.52 sec).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj (in 6 ms).

File name: Cli/packages.lock.json

  Determining projects to restore...
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj (in 359 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj (in 72 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj (in 36 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj (in 6 ms).

File name: K8s/packages.lock.json, Aws/packages.lock.json, Cli/packages.lock.json

  Determining projects to restore...
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj (in 345 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj (in 73 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj (in 36 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj (in 6 ms).

File name: Library/packages.lock.json, Aws/packages.lock.json, Cli/packages.lock.json, K8s/packages.lock.json

  Determining projects to restore...
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Library/Library.csproj (in 342 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/K8s/K8s.csproj (in 66 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj (in 35 ms).
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Api' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-g94r-2vxg-569j [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj : error NU1902: Warning As Error: Package 'OpenTelemetry.Exporter.OpenTelemetryProtocol' 1.9.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-4625-4j76-fww9 [/tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Cli/Cli.csproj]
  Failed to restore /tmp/renovate/repos/github/gitfool/Pulumi.Dungeon/Aws/Aws.csproj (in 6 ms).