Update module github.com/pulumi/pulumi/sdk/v3 to v3.247.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pulumi/pulumi/sdk/v3	v3.24.1 → v3.247.0

---

Release Notes

pulumi/pulumi (github.com/pulumi/pulumi/sdk/v3)

v3.247.0

Compare Source

3.247.0 (2026-06-18)

Features

• [cli/config] Add --raw flag to pulumi config set to avoid stripping newlines when input is piped through stdin #​23593
• [cli/do] Add --provider flag to pull provider config to use from existing provider state #​23560
• [cli/engine] Resource providers now receive the active login's API address and access token through PULUMI_API and PULUMI_ACCESS_TOKEN #​23589
• [cli/neo] Add a --disable-integrations flag to pulumi neo that runs the task with no integration credentials #​23531
• [engine] Send the address of a mapper service to resource providers as part of the provider handshake
• [programgen/go] Support functions with multiArgumentInputs #​23554
• [programgen/python] Support functions with multiArgumentInputs #​23574
• [sdk/nodejs] Registered resources can now be retrieved from the mock monitor for test assertions #​20539
• [sdk/python] Add Output.recover to catch and recover from exceptions in outputs #​23591
• [sdkgen] Adds support for language agnostic cross references in schemas. Use the form {{% ref <target> %}} to reference other schema components in markdown descriptions. Such as `{{% ref #​21369
• [sdkgen] Add extension parameterization to the package schema model #​23536
• [sdkgen/go] Support functions with multiArgumentInputs #​23554
• [sdkgen/python] Support functions with multiArgumentInputs #​23574
• [cli/auth] When credentials.json carries an OAuth refresh token, the CLI now auto-refreshes the access token on 401 and retries the request once, instead of returning a "login required" error #​23430

Improvements

• [cli] Respect PULUMI_SKIP_CONFIRMATIONS whenever we ask for confirmation #​23607
• [cli] Use list and remove as the canonical names for list/remove commands, with ls and rm as aliases #​23608
• [docs] Generate redirects for command aliases #​23610
• [engine] Serve raw schema bytes from the engine's schema loader service instead of binding and re-marshaling the full schema on every request #​23551
• [sdk/go] The plugin.Host interface is now stateless with respect to workspaces; host methods that boot or resolve plugins take a plugin.Context carrying the workspace state, and closing a plugin.Context no longer closes a host that was passed in to its constructor #​23508
• [sdk/nodejs] Allow running the postinstall script for local SDKs under npm 12 #​23568
• [sdk/python] Add register_package helper to cache package references per deployment #​22459

Bug Fixes

• [cli] Ensure pulumi logout clears the current tokenless backend in coding agent environments #​23540
• [cli] Read Git metadata correctly in repositories that enable the worktreeConfig extension, such as those hosted on Azure DevOps #​23535
• [cli/display] Show interrupted steps as interrupted instead of as finished #​23510
• [cli/plugin] Allow plugin tarballs containing symlinks #​23587
• [sdk/nodejs] Fix pulumi package add failing with pnpm when the generated SDK has a scoped package name (@-prefix), caused by pnpm's pkg set rejecting @ in dot-notation property paths #​23365
• [codegen/pcl] Fix version comparison in NeedsVersionResourceOption to use semver.Version.Equals and reject "v"-prefixed versions #https://github.com/pulumi/pulumi/pull/23441

Miscellaneous

• [cli/plugin] Document the pulumi plugin run command by including it in the generated CLI docs #​23559
• [sdkgen] Modules can no longer be nested under the index module, this was never well supported and is now a strict bind error #​23436

v3.246.0

Compare Source

3.246.0 (2026-06-11)

Bug Fixes

• [backend/diy] Fix backwards incompatible gocloud.dev changes #​23525

Features

• [cli] Add pulumi logs ls to list automatic log files #​23449
• [cli] Add pulumi logs rm to remove automatic log files
• [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
• [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #​23489

Improvements

• [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg #https://github.com/pulumi/pulumi/issues/23394
• [cli] Remove the experimental pulumi ai web command #​23517
• [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #​23417
• [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #​23490

Features

• [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
• [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #​23402

Bug Fixes

• [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #​23333
• [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #​23444
• [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #​23452

Improvements

• [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #​23450

Bug Fixes

• [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #​23458
• [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #​23494
• [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #​23418
• [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #​23458

Features

• [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #​23459

Bug Fixes

• [sdk] Reject tar entries with path traversal components when extracting archives #​23485
• [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #​14826
• [sdk/nodejs] Fix local SDKs added with pulumi package add not being built when using pnpm 10.34.2 or newer

Miscellaneous

• [sdk/nodejs] Improve error logs when serialization fails #​21901

Bug Fixes

• [sdkgen] Validate schema names to not contain whitespace or control characters #​23460

Improvements

• [sdkgen] Allow provider objects to have string enumerations on their outputs #​23461

Bug Fixes

• [cli/auth] BREAKING: Delete all backend config when logging out #​23358

v3.245.0

Compare Source

3.245.0 (2026-06-04)

Improvements

• [backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #​23421
• [cli] Show download and unpack progress when installing provider plugins #https://github.com/pulumi/pulumi/issues/23408
• [cli/do] Expose the selected stack's organization and short name to PCL input files when running pulumi do inside a project
• [cli/do] Suggest similar tokens when an unknown token is passed to pulumi do #​23341
• [cli/neo] Support up/down arrows to scroll through prompt history in pulumi neo #​23425
• [cli/stack] Remame pulumi stack init to new #​23422

Bug Fixes

• [engine] Download the HCL language runtime on demand instead of bundling it #​23356
• [sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
• [cli/auth] Delete shared temporary agent credentials when logging out

Miscellaneous

• [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #​23363

v3.244.0

Compare Source

3.244.0 (2026-05-28)

Bug Fixes

• [cli/do] Fix top level flags like --logtostderr being recognized when using pulumi do #​23355
• [cli/install] Distinguish multiple packages with the same plugin
• [engine] Fix snapshot integrity issue with up --refresh
• [engine] Forward all provider errors to error hooks for retry #​23347
• [engine] Trace cancel RPCs sent to plugins during shutdown as children of the active operation instead of emitting separate root spans #​23362
• [sdk/python] Merge requirements.txt into pyproject.toml when using uv without a project section #​23340

v3.243.0

Compare Source

3.243.0 (2026-05-22)

Features

• [cli] Make the pulumi project new -y command write a minimal project file with no template
  #​22847

• [cli] Allow coding agents to create claimable temporary accounts when not authenticated

• [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output
  #​23326

• [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC
  #​23287

• [sdkgen] Reserve the package names 'pulumi' and 'input' for internal use
  #​23321

• [cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both
  #​22963

• [cli/do] Add resource support to pulumi do
  #​23215

• [cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn
  #​23299

• [cli/new] Alias pulumi new to pulumi project new
  #​23265

Bug Fixes

• [cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively
  #​23264

• [pcl] Don't silently ignore ... in function arguments
  #​23309

• [sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs
  #​23068

• [backend/service] Error out when setting up journaler fails
  #​22671

Miscellaneous

• [cli/package] Update the pulumi package add --agent documentation hint to use <type-token> as the placeholder for the /docs/... URL
  #​23294

• [cli/plugin] Rename plugin ls to list and rm to remove
  #​23291

v3.242.0

Compare Source

3.242.0 (2026-05-19)

Features

• [cli] Add a pulumi package for npx support

• [cli] Add the pulumi org member edit command
  #​23235

• [cli] Add the pulumi org member remove command
  #​23237

• [cli/cloud] Add pulumi deployment get to retrieve details for a specific deployment
  #​23238

• [cli/cloud] Add pulumi insights account scan get <account> <scan-id> to show the full workflow run for a single Insights scan
  #​23255

• [cli/cloud] Add pulumi insights account scan list <account> to discover recent scan IDs to feed into pulumi insights account scan log
  #​23255

• [cli/deployment] Add dedicated flags for each deployment setting
  #​23236

• [cli/do] Add the start of pulumi do
  #​23176

• [cli/neo] Add --print/-p to pulumi neo to run a single prompt non-interactively and print the agent's final response to stdout
  #​23245

Bug Fixes

• [cli/cloud] Fix pulumi insights account scan log --all to follow the server's pagination cursor through the end of the log, and render --job/--step mode as structured lines instead of an empty raw-string blob
  #​23256

• [sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz output
  #​23240

• [sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
  #​23253

v3.241.0

Compare Source

3.241.0 (2026-05-18)

Features

• [cli] Add --output json to pulumi preview for a structured JSON summary of the operation result
  #​22927

• [cli] Add --output json to pulumi refresh for a structured JSON summary of the operation result
  #​22928

• [cli] Add --output json to pulumi destroy for a structured JSON summary of the operation result
  #​22875

• [cli] Add pulumi stack schedule get to retrieve the configuration of a scheduled action
  #​23153

• [cli] Add pulumi stack schedule list to list all scheduled actions configured for a stack
  #​23153

• [cli] Add pulumi stack schedule new to create a raw, drift, or TTL deployment schedule for a stack
  #​23153

• [cli] Add pulumi stack webhook delivery list to list recent deliveries for a stack webhook
  #​23116

• [cli] Add pulumi stack webhook delivery redeliver to redeliver a webhook event
  #​23118

• [cli] Add pulumi stack webhook edit to update an existing stack webhook
  #​23139

• [cli] Add pulumi stack webhook new to create a new stack webhook
  #​23101

• [cli] Add pulumi stack webhook remove to delete a stack webhook
  #​23102

• [cli] Add pulumi org webhook delivery list to list recent deliveries for an organization webhook
  #​23179

• [cli] Add pulumi org webhook edit to update an organization webhook
  #​23179

• [cli] Add pulumi org webhook list to list all webhooks configured for an organization
  #​23174

• [cli] Add pulumi org webhook new to create a new organization webhook
  #​23172

• [cli] Add pulumi org webhook ping to send a test ping to an organization webhook
  #​23179

• [cli] Add pulumi org webhook remove to delete an organization webhook
  #​23177

• [cli] Add pulumi stack drift list to list drift detection runs for a stack
  #​23159

• [cli] Add pulumi stack drift status to show the drift detection status for a stack
  #​23161

• [cli] Add pulumi stack schedule edit to update an existing scheduled deployment action
  #​23153

• [cli] Add pulumi stack schedule remove to delete a scheduled deployment action
  #​23153

• [cli] Add pulumi audit-log export command
  #​23212

• [cli] Add pulumi org audit-log list
  #​23211

• [cli] Add pulumi policy compliance list to list compliance results grouped by entity
  #​23209

• [cli] Add pulumi policy group new command to allow creating new policy groups
  #​23202

• [cli] Add the pulumi policy issue get command
  #​23200

• [cli/cloud] Add pulumi insights account list to list Insights accounts in an organization
  #​23091

• [cli/cloud] Add pulumi insights account new to create a Pulumi Insights account
  #​23093

• [cli/cloud] Add pulumi insights account scan log to fetch log output for a Pulumi Insights scan
  #​23092

• [cli/cloud] Add pulumi insights account scan to trigger a resource discovery scan for an Insights account
  #​23094

• [cli/cloud] Implement pulumi stack history events to retrieve engine events for a Pulumi Cloud update
  #​23109

• [cli/cloud] Add pulumi deployment cancel to terminate an in-progress deployment
  #​23164

• [cli/cloud] Add pulumi org member list to list the members of an organization
  #​23170

• [cli/cloud] Add pulumi org usage get to fetch the resources-under-management summary for an organization
  #​23166

• [cli/cloud] Add pulumi org role assign to assign a custom role to a team
  #​23117

• [cli/cloud] Add pulumi org role edit to update a custom role's name, description, or permission tree
  #​23117

• [cli/cloud] Add pulumi org role list to list custom roles for an organization
  #​23117

• [cli/cloud] Add pulumi org role new to create a custom role from a permission descriptor JSON file
  #​23117

• [cli/cloud] Add pulumi org role remove to delete a custom role from an organization
  #​23117

• [cli/env] Update esc to v0.24.0
  #​23213

• [cli/neo] Show tool call arguments and results in pulumi neo via a ctrl+o overlay
  #​23075

• [cli/neo] Multi-line input in pulumi neo - Enter sends, Shift+Enter / Alt+Enter / Ctrl+J / trailing \ insert a newline
  #​23151

• [cli/neo] Make pulumi neo visible by default; the PULUMI_EXPERIMENTAL gate has been removed
  #​23228

• [cli/policy] Add pulumi policy group edit to edit policy groups
  #​23206

• [cli/policy] Add pulumi policy group remove command to remove policies
  #​23208

• [cli/policy] Add the pulumi policy group get command
  #​23203

Bug Fixes

• [cli] Add pulumi policy issue list command
  #​23198

• [cli] Fix pulumi org role list to send the uxPurpose query parameter the service requires
  #​23231

• [engine] Fix pulumi import dropping map entries whose value matched the enum member of a Union<Input<Enum<T>>, ...> element type
  #​23190

• [cli/cloud] Surface a clear error when pulumi api --all is used against an endpoint whose response is not paginatable, instead of silently emitting an empty array
  #​23191
  #​23128

• [cli/cloud] pulumi deployment settings edit no longer clears fields that the patch does not mention
  #​23217

• [cli/import] Generate PCL for asset and archive inputs when importing resources, instead of returning a "NYI" error
  #​22938

• [cli/import] Preserve asset/archive/resource-reference values inside map and array inputs, and HCL-escape map keys containing ${ or %{ template sequences
  #​23222

• [cli/install] Hint at adding a .git / _git when VCS URL resolution fails
  #​22831

• [cli/neo] Transparently reconnect the Neo event stream after a transient network drop, resuming from the last seen event ID
  #​23134

• [cli/neo] Show preparing in the live preview/up block until the first resource arrives
  #​23155

• [cli/new] Support specific versions when using registry-backed templates with pulumi new
  #​22909

v3.239.0

Compare Source

3.239.0 (2026-05-14)

Features

• [cli] Add --output json to pulumi import for a structured JSON summary of the operation result
  #​22929

• [cli] Add pulumi stack get to retrieve detailed information about a stack
  #​23106

• [cli] Add pulumi stack webhook get to inspect a single stack webhook
  #​23088

• [cli] Add pulumi stack webhook ping to send a test ping to a stack webhook

• [cli/cloud] Add pulumi deployment list to list deployment executions for a stack
  #​23114

• [sdkgen] Validate that schema names can't conflict with module paths
  #​22956

Bug Fixes

• [engine] Fix batch encrypt/decrypt errors being silently dropped
  #​23149

• [cli/cloud] Fix pulumi api help examples that referenced non-existent operation IDs and response fields
  #​23125

v3.238.0

Compare Source

3.238.0 (2026-05-13)

Features

• [cli] Add a --language flag to pulumi package add to run outside a Pulumi project or plugin
  #​22791

• [cli] Add --output json to pulumi up for a structured JSON summary of the operation result
  #​22870

• [cli] Recommend pulumi cloud api describe in pulumi cloud api --help to verify operation parameters before calling
  #​22881

• [cli] Add pulumi stack webhook list to list all webhooks configured for a stack
  #​23082

• [cli/cloud] Rename pulumi cloud api to pulumi api
  #​22970

• [cli/cloud] Add pulumi insights resource get to look up a single resource discovered by Pulumi Insights
  #​23077

• [cli/cloud] Add pulumi template list to list registry-backed templates
  #​23074

• [cli/cloud] Rename the --format flag to --output on pulumi api and its subcommands
  #​23072

• [cli/cloud] Add pulumi insights resource search to search for resources discovered by Pulumi Insights
  #​23087

• [cli/engine] Add --skip-plugin-pre-install to skip up-front plugin installation

• [engine] Fail the deployment when an after hook fails
  #​22935

• [cli/neo] Render the agent's TODO list in the pulumi neo TUI
  #​22864

• [cli/neo] Add --approval-mode and --permission-mode flags to pulumi neo, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
  #​22950

• [cli/package] When invoked by an AI coding agent, print pulumi api pointers after pulumi package add and pulumi package gen-sdk
  #​22904

• [pkg/testing] Recognize the hcl and pcl runtimes in integration.ProgramTest
  #​23018

• [pkg/testing] Add l1-config-types-optional conformance test for PCL's optional type constructor
  #​23108

Bug Fixes

• [backend/diy] Minify JSON persisted by the DIY backend for checkpoints, history, and stack tags
  #​22245

• [cli/import] Ignore property values that do not conform to the schema in maps
  #​23076

• [cli/import] Stop dropping map values whose element type is a union of Input-wrapped types during HCL2 import

• [cli/neo] Use the selected stack's organization when starting a pulumi neo task instead of the user's default organization
  #​22951

• [cli/neo] Include the failure reason in pulumi_preview and pulumi_up tool results when they fail, so the agent can react instead of seeing a blank error
  #​22948

• [cli/neo] Retry pulumi neo task creation without the attached stack when the backend rejects it with an "invalid entities" error
  #​22945

• [cli/neo] Surface the failure reason when a filesystem tool call fails, instead of returning an empty result to the agent
  #​23019

• [cli/package] Use --output=markdown (not the renamed-away --format=markdown) in the pulumi api pointers printed by pulumi package add and pulumi package gen-sdk
  #​23098

• [programgen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22931

• [sdk/python] Speed up python program resolution by using a set instead of deque to track outputs
  #​22946

Miscellaneous

• [cli/neo] Tag Neo tasks created from the CLI with a cli source so the service can attribute their origin
  #​23099

• [sdk/nodejs] Add registerPackage helper to cache package references per deployment
  #​23014

v3.237.0

Compare Source

3.237.0 (2026-05-08)

Features

• [cli] Include the running command name and detected AI agent (when present) in the User-Agent header on Pulumi Cloud API requests
  #​22908

• [engine] Include result on the summary engine event
  #​22883

• [sdkgen] Eagerly error on schemas with unconstructable types
  #​22890

• [cli/cloud] Auto-fill lang and os query parameters on pulumi cloud api GET/HEAD requests when the matched OpenAPI operation declares them and the caller hasn't supplied them
  #​22726

• [cli/package] Add pulumi package new to bootstrap a Pulumi package from a template
  #​22837

Bug Fixes

• [cli] Add blank-line gaps between pulumi neo TUI conversation blocks
  #​22846

• [cli/import] Preserve __-prefixed keys when generating PCL for imported resource state, so provider-defined payloads round-trip correctly
  #​22856

• [cli/neo] Render ux__ask_user clarifying questions as questions instead of approval prompts
  #​22862

• [cli/neo] Fix a panic when cancelling a pulumi neo session
  #​22898

• [cli/neo] Render every assistant message in the TUI scrollback so multi-turn commentary no longer disappears between tool calls

• [cli/neo] Return the bare stack name and canonical project name from pulumi_preview and pulumi_up tool results instead of echoing the raw input
  #​22891

• [codegen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22916

• [programgen/pcl] Fix PCL binder panic when a conditional mixes a Promise-typed branch with a try() branch
  #​22907

• [sdk/python] Support NotRequired, Required and total=False in TypedDicts for component resource arg types
  #​22858

Miscellaneous

• [cli/cloud] Auto-fit pulumi cloud api list table to terminal width and replace the
  tabular table renderer with go-pretty

  #​22874

• [sdk/nodejs] Test on Node.js 26 and drop 20
  #​22872

v3.236.0

Compare Source

3.236.0 (2026-05-06)

v3.235.0

Compare Source

3.235.0 (2026-05-05)

Features

• [cli] Add pulumi logs decrypt command for viewing logs
  #​22523

• [cli] Bundle the hcl language host (from pulumi-labs/pulumi-hcl)
  #​22807

• [cli] Automatically install the hcl converter from pulumi-labs/pulumi-hcl when running pulumi convert --from hcl
  #​22816

• [pcl] Add read blocks to PCL to read resources via ID and query instead of registering them
  #​22641

• [cli/cloud] Add pulumi cloud api <op-or-path> for calling any Pulumi Cloud API
  endpoint, with --field/--header/--input/--body flag handling, path
  template binding, content negotiation via --format, and --dry-run

  #​22771

• [cli/cloud] Add --paginate to pulumi cloud api: follow continuation cursors,
  accumulate items into a single JSON envelope, and surface progress
  events to stderr with --emit-events (page, complete, truncated,
  partial_failure, cancelled).

  #​22772

Bug Fixes

• [cli] Fix the pulumi neo shell tool to honor the agent-supplied timeout and to terminate the whole process tree (and unblock cmd.Wait) when the deadline fires, so commands like kubectl logs -f no longer hang Neo indefinitely.
  #​22820

• [cli] Surface the error and exit when pulumi neo fails to create the underlying task, instead of leaving the TUI stuck in Thinking…
  #​22825

• [codegen/go] Correctly generate []pulumi.Asset & []pulumi.Archive
  #​22827

• [cli/neo] Exit cleanly when the user presses Ctrl+C twice in pulumi neo instead of hanging until a third press
  #​22821

• [engine] The engine now caches schemas at PULUMI_HOME/schemas, and will cache for parameterised packages as well
  #​22812

• [sdk-python] Preserve __-prefixed keys (e.g. __type discriminators) across RPC deserialization, matching the behavior of the other language SDKs
  #​22834

• [programgen/{nodejs,python}] Fix programgen to emit the right length check for string length
  #​22802

Miscellaneous

• [cli] Replace the Pulumipus mascot in the pulumi neo welcome banner with new Neo-branded ASCII art.
  #​22817

v3.234.0

Compare Source

3.234.0 (2026-05-01)

Features

• [cli/cloud] Add pulumi cloud api describe for inspecting the parameters, request
  body, and response schema of any Pulumi Cloud API operation, with
  text, markdown, and JSON output

  #​22770

• [cli/cloud] Add pulumi cloud api list for browsing every endpoint exposed by the Pulumi
  Cloud OpenAPI spec, with table and JSON output

  #​22769

Bug Fixes

• [engine] Revert changes to property path parsing that resulted in errors for currently valid paths

v3.233.0

Compare Source

3.233.0 (2026-04-30)

Features

• [auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api
  #​22638

• [cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
  #​22494

• [cli] Implement the filesystem__grep and filesystem__content_replace local tools
  for pulumi neo. grep runs a regex search across files in the project root
  with an optional include glob filter and returns results in path:lineno: line
  form. content_replace performs a literal multi-file search-and-replace with a
  file_pattern glob and dry_run preview mode. Both tools skip binary files,
  hidden directories, and node_modules, and reject paths outside the project
  root. Their input schemas match the cloud-side tool definitions.

  #​22655

• [cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo
  agent. The Neo TUI renders a persistent bordered block for each operation that
  streams changed resources and diagnostics as the engine runs and finalizes with a
  summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

  #​22697

• [engine] Add List to the provider protocol and schema
  #​22693

Bug Fixes

• [engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!"
  #​22679

• [programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously
  PCL bound every method call's return type as Output<T>, which caused downstream program-gen
  to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g.
  methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

  #​22696

• [backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages
  #​22701

• [codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously
  the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg>
  itself, producing identifiers that would not compile. Affects generated code for method return
  types (and other schema positions) that reference pulumi:providers:<pkg>.

  #​22696

• [codegen/nodejs] Generate unqualified Provider references for the package's own provider resource when emitting
  TypeScript code inside that package. Previously the generator always qualified the name as
  <pkg>.Provider, which does not resolve when no <pkg> namespace import is in scope.

  #​22696

• [codegen/nodejs] Import the correct class name for a provider resource. Imports for pulumi:providers:<pkg> used
  the title-cased package name instead of Provider, producing a phantom identifier that clashed
  with the containing package's component/resource classes.

  #​22696

• [programgen/nodejs] Emit await for call(...) invocations of methods whose return type is marked plain, and
  force the generated program into an async export = async () => ... wrapper whenever such a
  call is present. The Node SDK returns Promise<T> for plain methods; previously program-gen
  used the result directly, which did not match its runtime type.

  #​22696

• [codegen/python] Avoid a self-import (import pulumi_<pkg> inside pulumi_<pkg>/<module>.py) when referencing
  the package's own provider resource. Python referenced the Provider as pulumi_<pkg>.Provider
  even inside that package, which caused a circular import at runtime.

  #​22696

• [sdk/python] Reduce internal Output[T] data to a single asyncio.Future
  #​22661

• [sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values
  #​22552

Miscellaneous

• [auto/go] Drop the "With" prefix from generated option helpers so they match the naming of the existing optXxx packages
  #​22682

v3.232.0

Compare Source

3.232.0 (2026-04-22)

Features

• [cli] Add an experimental pulumi neo command that creates a Pulumi Neo agent task in CLI
  tool-execution mode and runs the local tool loop. Filesystem and shell tool calls
  issued by the agent run on the user's machine in their working directory; the
  interactive chat continues to happen in the Pulumi Console at the URL the command
  prints. Hidden behind PULUMI_EXPERIMENTAL.

  #​22473

• [cli] Add support for handling user approval requests in the pulumi neo terminal UI.
  When the agent requests confirmation for a sensitive action, the TUI prompts the
  user and forwards their response back to the Pulumi Console. Hidden behind
  PULUMI_EXPERIMENTAL.

  #​22589

• [cli] Add an interactive terminal UI for pulumi neo built with bubbletea, rendering
  agent messages, tool calls, and streaming output in the terminal alongside the
  Pulumi Console session. Hidden behind PULUMI_EXPERIMENTAL.

  #​22570

• [cli] Switch logging library from glog to slog.

BREAKING: any if logging.V(x) { need to be changed to if logging.V(x).Enabled()

#​22548

• [cli] Add a plan-mode toggle to the pulumi neo TUI, bound to Shift+Tab. When
  plan mode is on, Neo explores and asks questions without writing files,
  running pulumi up, or opening PRs, and surfaces an approved plan via a
  dedicated approval gate. The toggle must be set before the first message
  (plan mode is task-level on the wire); approving the proposed plan exits
  plan mode automatically.

  #​22634

• [cli] The pulumi neo TUI now drives its "thinking" spinner off a single declarative
  rule (the spinner stays on until a final event — final assistant message, approval
  request, cancellation, or error — lands), so the indicator no longer flickers off
  when the agent hands off tool calls to the CLI or when streaming text arrives
  between tools. Press Esc during a turn to ask the agent to cancel; the label
  switches to "Cancelling..." until the backend acknowledges.

  #​22637

• [cli] pulumi neo now executes the edit filesystem tool locally, matching the schema
  and response wording of the upstream mcp-claude-code tool so the agent sees
  identical output whether the call ran on Cloud or CLI. edit performs exact-string
  replacement with occurrence-count validation, and creates a new file when the
  target is missing and old_string is empty.

  #​22654

Bug Fixes

• [cli] Render user messages in the pulumi neo TUI as soon as they're submitted
  instead of waiting for the Pulumi Cloud event stream to echo them back.
  The initial prompt passed on the command line also appears in the
  transcript at startup. Self-echoes from the server are de-duplicated;
  user input that originated from another client (e.g. the web UI on the
  same task) still renders.

  #​22629

• [cli] Wrap warnings, errors, and user-message bubbles to the terminal width in the
  pulumi neo TUI. Previously these blocks rendered as single long lines that
  were clipped at the right edge of the viewport. On resize, all width-dependent
  transcript blocks (user messages, warnings, errors, assistant messages) now
  reflow to the new terminal width.

  #​22635

• [cli/policy] Fix policy ls to use the default org name, not username
  #​22656

• [engine] Fix provider registry race condition in parallel delete-before-replace
  #​21487

• [engine] Signal providers to cancel before closing them during replacement

• [sdkgen] Error on 'id' in state inputs
  #​22636

• [programgen/python] Add necessary casts between types in generated programs
  #​22567

• [sdkgen/go] Fix caching of package references to be per-deployment not per-process
  #​22170

Miscellaneous

• [java] Upgrade java to v1.25.0
  #​22673

• [auto/go] Generate command methods for the Go Automation API codegen
  #​22612

• [sdk] Clarify docs on the remote parameter of ComponentResource / Resource in the Node and Python SDKs
  #​22603

• [sdk/dotnet] Upgrade dotnet to v3.103.1
  #​22676

• [yaml] Upgrade yaml to v1.32.0
  #​22674

v3.231.0

Compare Source

3.231.0 (2026-04-16)

Features

• [cli] Auto-detect Mercurial repository metadata for pulumi up / pulumi preview updates, mirroring existing Git support
  #​22618

• [engine] Send Cancel RPC to plugins on host close for graceful shutdown
  #​22569

• [engine] Pass resource options to hooks through the engine
  #​22582

• [engine] Add GetDeploymentInfo to the resource monitor service

• [auto/go] Add New command to Automation API
  #​22439

• [auto/{go,nodejs,python}] Add --diff to automation api for destroy
  #​22563

• [auto/python] Add new command to Automation API
  #​22439

• [pcl] Support for resource hooks in PCL
  #​22365

• [sdk-nodejs] Warn when a non-ComponentResource class is passed in the explicit components list to componentProviderHost
  #​22619

• [sdk-python] Warn when a non-ComponentResource class is passed in the explicit components list to component_provider_host
  #​22619

• [cli/import] Add support for providers to be defined in the same import file as their users
  #​21671

• [cli/policy] ESC environment support for local policy packs
  #​22495

• [sdk/nodejs] Support package.yaml when using pnpm
  #​22491

• [sdk/python] Add function decorator variants for resource and error hooks
  #​22519

Bug Fixes

• [auto/{nodejs,python}] Support --run-program for inline programs with preview_refresh/destroy

• [backend/diy] Remove state lock for destroy and import with preview only for diy backend
  #​22561

• [engine] Fix snapshot integrity error with component/provider resources in refresh --run-program
  #​21817

• [pcl] Type list and tuple indices as integers not numbers
  #​22592

• [pcl] Builtin functions element and range take int parameters not numbers
  #​22597

• [programgen/{go,nodejs,python}] Fix some cases of name conflicts in program gen not being handled correctly
  #​22556

• [programgen/nodejs] Add necessary casts between types in generated programs
  #​22557

• [programgen/{nodejs,python}] Fix imports of camelCase modules
  #​22536

• [sdk/python] Support Input[Optional[T]] in Python runtime type unwrapping
  #​22553

• [sdkgen] Warn about modules nested under the index module which are not supported
  #​22531

Miscellaneous

• [java] Upgrade java to v1.24.0
  #​22615

• [yaml] Upgrade yaml

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: sdk/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.19 -> 1.25.11
github.com/hashicorp/errwrap	v1.0.0 -> v1.1.0
github.com/hashicorp/go-multierror	v1.0.0 -> v1.1.1
github.com/kevinburke/ssh_config	v0.0.0-20190725054713-01f96b0aa0cd -> v1.6.0
github.com/rivo/uniseg	v0.2.0 -> v0.4.7
github.com/rogpeppe/go-internal	v1.8.1 -> v1.14.1
github.com/sabhiram/go-gitignore	v0.0.0-20180611051255-d3107576ba94 -> v0.0.0-20210923224102-525f6e181f06
github.com/texttheater/golang-levenshtein	v0.0.0-20191208221605-eb6844b05fc6 -> v1.0.1
github.com/uber/jaeger-client-go	v2.22.1+incompatible -> v2.30.0+incompatible
github.com/uber/jaeger-lib	v2.2.0+incompatible -> v2.4.1+incompatible
github.com/xanzy/ssh-agent	v0.2.1 -> v0.3.3
gopkg.in/yaml.v2	v2.2.8 -> v2.4.0