chore(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.255.0 to 3.256.0

[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.255.0 to 3.256.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.256.0

3.256.0 (2026-08-04)

Features

• [cli] Add --ignore-protect flag to pulumi up, pulumi preview and pulumi destroy to allow deleting protected resources without unprotecting them in the state first #24053
• [cli/env] Add an optional --export-env-vars flag to the env provider {aws,azure,gcp}-login commands to also set the standard SDK environment variables referencing the login outputs #24055
• [cli] Add a --server flag to pulumi package add, publish, get-schema, get-mapping, gen-sdk, info and pulumi schema check that skips package resolution and uses the given URL as the plugin download URL #24107

Bug Fixes

• [backend/service] Fix pulumi login --insecure not being reflected in the stack's service secrets manager state, which caused TLS verification failures against self-hosted backends using self-signed certificates #24134
• [cli] Scope current stack selection to the active backend so switching backends no longer surfaces stale stack errors #23974
• [programgen/go] Parent an invoke written inside a component to that component, lower a component's outputs, and only import fmt when a component needs it #24019
• [programgen/python] Parent an invoke written inside a component to that component, so it resolves the component's providers #24018
• [sdk/nodejs] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24042
• [engine] Gate invokes on the created-ness of their declared dependencies, including the children of remote components, resolving them as unknown during previews that still have to create them #24040
• [sdk/go] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24044
• [pcl] Declare invoke dependencies to the engine so invokes that depend on pending resources, including remote components, resolve as unknown during previews #24041
• [sdk/python] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24043
• [cli/env] env provider no longer writes a new environment revision when the resulting definition is unchanged #24055
• [sdk/go] Output-form invokes now infer their resource dependencies from their arguments, so they are skipped during preview while a dependent resource is pending creation and their results carry those dependencies #24054
• [sdkgen/go] Fixes nested optional output conversions #24096
• [engine] Fix a plugin process leak in NewPolicyAnalyzer when ConfigureStack fails after the plugin has booted #24106
• [programgen/go] Avoid redundant applies when projecting properties from generated Go object outputs #24112
• [backend/diy] Fix 403 errors writing to third-party S3-compatible backends (e.g. IBM COS, MinIO) by defaulting request_checksum_calculation to when_required when the s3:// backend URL sets a custom endpoint #24109
• [programgen/nodejs] Avoid redundant applies when projecting properties from Node.js outputs #24119
• [programgen/python] Avoid redundant applies when projecting properties from Python outputs #24120
• [sdk] Fix apply erroring for skipped resources #24108
• [cli] Retry rate-limited (HTTP 429) API requests when they are safe to retry, honoring the server's Retry-After header #24131
• [cli] Exit non-zero from remote operations (pulumi up --remote, pulumi deployment run) when the deployment fails #24155
• [cli/new] Resolve and install packages required by the program during pulumi new, as pulumi install does #24126
• [cli] Make --remote not require a Pulumi.yaml file to be present #24128
• [cli/import] Generate explicit providers in the import file resources #24135
• [sdk/nodejs] Fix trustedDependencies parsing for bun #24145
• [auto/go] ImportResources no longer leaks --stack into the converter's arguments when converter args are passed #24146
• [auto/go] Fix ImportResources when GenerateCode(false) is set #24147
• [sdk/go] Fix hooks and transforms causing panics with mocks #24161
• [programgen/go] Fix plain invokes emitting nonexistent ...ArgsArgs argument types #24172

Improvements

• [cli/import] Error when running pulumi import --from terraform in a Pulumi HCL project #23744
• [programgen] Add ID type to PCL #22702
• [engine] Give the resource monitor's Invoke its own response message, separating it from the one a provider returns #24100
• [cli/do] Allow stateful resources to register their own provider resources based on provider inputs on the command line #24098
• [cli] Refresh the first-login welcome message to link your Pulumi Cloud console and the Pulumi changelog #24122
• [cli/do] Add support for the --provider argument for stateful operations #24132
• [programgen/go] Better typing for maps, using known types rather than map[string]interface{} #24142
• [cli/import] Serve the package-resolver service to state converters via resolver_target on ConvertStateRequest, so converters can resolve package specifications the same way the CLI does #24174

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.256.0 (2026-08-04)

Features

• [cli] Add --ignore-protect flag to pulumi up, pulumi preview and pulumi destroy to allow deleting protected resources without unprotecting them in the state first #24053
• [cli/env] Add an optional --export-env-vars flag to the env provider {aws,azure,gcp}-login commands to also set the standard SDK environment variables referencing the login outputs #24055
• [cli] Add a --server flag to pulumi package add, publish, get-schema, get-mapping, gen-sdk, info and pulumi schema check that skips package resolution and uses the given URL as the plugin download URL #24107

Bug Fixes

• [backend/service] Fix pulumi login --insecure not being reflected in the stack's service secrets manager state, which caused TLS verification failures against self-hosted backends using self-signed certificates #24134
• [cli] Scope current stack selection to the active backend so switching backends no longer surfaces stale stack errors #23974
• [programgen/go] Parent an invoke written inside a component to that component, lower a component's outputs, and only import fmt when a component needs it #24019
• [programgen/python] Parent an invoke written inside a component to that component, so it resolves the component's providers #24018
• [sdk/nodejs] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24042
• [engine] Gate invokes on the created-ness of their declared dependencies, including the children of remote components, resolving them as unknown during previews that still have to create them #24040
• [sdk/go] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24044
• [pcl] Declare invoke dependencies to the engine so invokes that depend on pending resources, including remote components, resolve as unknown during previews #24041
• [sdk/python] Defer output-form invokes that depend on a remote component whose resources are pending creation, by declaring invoke dependencies to the engine #24043
• [cli/env] env provider no longer writes a new environment revision when the resulting definition is unchanged #24055
• [sdk/go] Output-form invokes now infer their resource dependencies from their arguments, so they are skipped during preview while a dependent resource is pending creation and their results carry those dependencies #24054
• [sdkgen/go] Fixes nested optional output conversions #24096
• [engine] Fix a plugin process leak in NewPolicyAnalyzer when ConfigureStack fails after the plugin has booted #24106
• [programgen/go] Avoid redundant applies when projecting properties from generated Go object outputs #24112
• [backend/diy] Fix 403 errors writing to third-party S3-compatible backends (e.g. IBM COS, MinIO) by defaulting request_checksum_calculation to when_required when the s3:// backend URL sets a custom endpoint #24109
• [programgen/nodejs] Avoid redundant applies when projecting properties from Node.js outputs #24119
• [programgen/python] Avoid redundant applies when projecting properties from Python outputs #24120
• [sdk] Fix apply erroring for skipped resources #24108
• [cli] Retry rate-limited (HTTP 429) API requests when they are safe to retry, honoring the server's Retry-After header #24131
• [cli] Exit non-zero from remote operations (pulumi up --remote, pulumi deployment run) when the deployment fails #24155
• [cli/new] Resolve and install packages required by the program during pulumi new, as pulumi install does #24126
• [cli] Make --remote not require a Pulumi.yaml file to be present #24128
• [cli/import] Generate explicit providers in the import file resources #24135
• [sdk/nodejs] Fix trustedDependencies parsing for bun #24145
• [auto/go] ImportResources no longer leaks --stack into the converter's arguments when converter args are passed #24146
• [auto/go] Fix ImportResources when GenerateCode(false) is set #24147
• [sdk/go] Fix hooks and transforms causing panics with mocks #24161
• [programgen/go] Fix plain invokes emitting nonexistent ...ArgsArgs argument types #24172

Improvements

• [cli/import] Error when running pulumi import --from terraform in a Pulumi HCL project #23744
• [programgen] Add ID type to PCL #22702
• [engine] Give the resource monitor's Invoke its own response message, separating it from the one a provider returns #24100
• [cli/do] Allow stateful resources to register their own provider resources based on provider inputs on the command line #24098
• [cli] Refresh the first-login welcome message to link your Pulumi Cloud console and the Pulumi changelog #24122
• [cli/do] Add support for the --provider argument for stateful operations #24132
• [programgen/go] Better typing for maps, using known types rather than map[string]interface{} #24142
• [cli/import] Serve the package-resolver service to state converters via resolver_target on ConvertStateRequest, so converters can resolve package specifications the same way the CLI does #24174

... (truncated)

Commits

• dc5427b Depend on pulumi/pulumi-hcl v0.13.0 (#24170)
• 36467a8 Fix Go codegen for ID types (#24181)
• 46afb53 Update Provider.List to use property.Map (#24183)
• 01c1ccd [programgen/go] Fix plain invokes emitting ...ArgsArgs argument types (#24172)
• daae2fc Send invoke dependencies to the engine in the Node.js SDK (#24042)
• 0886898 Send invoke dependencies to the engine in the Python SDK (#24043)
• f33e94a Send invoke dependencies to the engine in the Go SDK (#24044)
• c034ca4 Add an l2-invoke-depends-on-component conformance test (#24041)
• ad1bb4d Forbid import --from terraform in an hcl project (#23744)
• 811fa2d Update converter plugin to use property.Map (#24177)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cocogitto-bot]

✔️ 7b19ee7 - Conventional commits check succeeded.

[holochain-release-automation2]

🍹 preview on holochain/holochain/github

Pulumi report

View in Pulumi Cloud

  Previewing update (holochain/github)

View Live: https://app.pulumi.com/holochain/holochain/github/previews/bb9bf434-f50a-4b81-af7f-b882b35f9dd0

@ Previewing update.....
pulumi:pulumi:Stack: (same)
  [urn=urn:pulumi:github::holochain::pulumi:pulumi:Stack::holochain-github]
  ~ github:index/repository:Repository: (update)
      [id=wind-tunnel-peerkit-bootstrap-relay]
      [urn=urn:pulumi:github::holochain::github:index/repository:Repository::wind-tunnel-peerkit-bootstrap-relay]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
    ~ allowAutoMerge: false => true
  + github:index/repositoryRuleset:RepositoryRuleset: (create)
      [urn=urn:pulumi:github::holochain::github:index/repositoryRuleset:RepositoryRuleset::wind-tunnel-peerkit-bootstrap-relay-default]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
      conditions : {
          refName   : {
              excludes  : []
              includes  : [
                  [0]: "~DEFAULT_BRANCH"
              ]
          }
      }
      enforcement: "active"
      name       : "default"
      repository : "wind-tunnel-peerkit-bootstrap-relay"
      rules      : {
          creation             : true
          deletion             : true
          pullRequest          : {
              dismissStaleReviewsOnPush     : true
              requireCodeOwnerReview        : false
              requireLastPushApproval       : true
              requiredApprovingReviewCount  : 1
              requiredReviewThreadResolution: true
          }
          requiredLinearHistory: true
          requiredSignatures   : false
          requiredStatusChecks : {
              requiredChecks                  : [
                  [0]: {
                      context   : "ci_pass"
                  }
              ]
              strictRequiredStatusChecksPolicy: true
          }
          update               : false
      }
      target     : "branch"
  + github:index/repositoryFile:RepositoryFile: (create)
      [urn=urn:pulumi:github::holochain::github:index/repositoryFile:RepositoryFile::wind-tunnel-peerkit-bootstrap-relay-dependabot-yml-file]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
      branch           : "chore/update-dependabot-yml"
      commitAuthor     : "holochain-release-automation2"
      commitEmail      : "hra@holochain.org"
      commitMessage    : "chore: update dependabot.yml with shared content"
      content          : (yaml) {
          updates: [
              [0]: {
                  directory        : "/"
                  groups           : {
                      updates: {
                          applies-to: "version-updates"
                          patterns  : [
                              [0]: "*"
                          ]
                      }
                  }
                  package-ecosystem: "github-actions"
                  schedule         : {
                      interval: "weekly"
                  }
              }
              [1]: {
                  directory        : "/"
                  groups           : {
                      npm: {
                          applies-to: "version-updates"
                          patterns  : [
                              [0]: "*"
                          ]
                      }
                  }
                  package-ecosystem: "npm"
                  schedule         : {
                      interval: "monthly"
                  }
              }
          ]
          version: 2
      }

      file             : ".github/dependabot.yml"
      overwriteOnCreate: true
      repository       : "wind-tunnel-peerkit-bootstrap-relay"
  + github:index/repositoryFile:RepositoryFile: (create)
      [urn=urn:pulumi:github::holochain::github:index/repositoryFile:RepositoryFile::wind-tunnel-peerkit-bootstrap-relay-code-owners-file]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
      branch           : "chore/update-code-owners"
      commitAuthor     : "holochain-release-automation2"
      commitEmail      : "hra@holochain.org"
      commitMessage    : "chore: update CODEOWNERS with shared content"
      content          : "# Actions
.github/workflows/*.yaml @holochain/holochain-devs
.github/workflows/*.yml  @holochain/holochain-devs
..."
      file             : ".github/CODEOWNERS"
      overwriteOnCreate: true
      repository       : "wind-tunnel-peerkit-bootstrap-relay"
  + github:index/repositoryPullRequest:RepositoryPullRequest: (create)
      [urn=urn:pulumi:github::holochain::github:index/repositoryPullRequest:RepositoryPullRequest::wind-tunnel-peerkit-bootstrap-relay-dependabot-yml-pr]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
      baseRef       : "main"
      baseRepository: "wind-tunnel-peerkit-bootstrap-relay"
      body          : "This PR updates dependeabot.yml with the content from the shared file in the hc-github-config repo."
      headRef       : "chore/update-dependabot-yml"
      title         : "chore: update dependabot.yml with shared content"
  + github:index/repositoryPullRequest:RepositoryPullRequest: (create)
      [urn=urn:pulumi:github::holochain::github:index/repositoryPullRequest:RepositoryPullRequest::wind-tunnel-peerkit-bootstrap-relay-codeowners-pr]
      [provider=urn:pulumi:github::holochain::pulumi:providers:github::default_6_14_1::5254dfc2-7745-4637-8471-7d7c900bf5ee]
      baseRef       : "main"
      baseRepository: "wind-tunnel-peerkit-bootstrap-relay"
      body          : "This PR updates CODEOWNERS with the content from the shared file in the hc-github-config repo."
      headRef       : "chore/update-code-owners"
      title         : "chore: update CODEOWNERS with shared content"
Resources:
  + 5 to create
  ~ 1 to update
  6 changes. 602 unchanged