fix(deps): update all minor updates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@pulumi/kubernetes (source)	4.21.0 → 4.32.0			dependencies	minor
@pulumi/pulumi (source)	3.146.0 → 3.246.0			dependencies	minor
@tanstack/react-query (source)	5.28.14 → 5.101.0			dependencies	minor
@types/node (source)	22.18.10 → 22.19.21			devDependencies	minor
@types/react (source)	^19.0.0 → ^18.3.31			devDependencies	minor
@types/react-dom (source)	^19.0.0 → ^18.3.7			devDependencies	minor
@typescript-eslint/eslint-plugin (source)	7.4.0 → 7.18.0			devDependencies	minor
@typescript-eslint/parser (source)	7.4.0 → 7.18.0			devDependencies	minor
@vitejs/plugin-react-swc (source)	3.6.0 → 3.11.0			devDependencies	minor
axios (source)	1.6.8 → 1.17.0			dependencies	minor
eslint (source)	9.0.0 → 9.39.4			devDependencies	minor
eslint-plugin-react-refresh	^0.4.3 → ^0.5.0			devDependencies	minor
gradle (source)	8.12 → 8.14.5				minor
pulumi/pulumi	3.145.0 → 3.246.0			image-name	minor
react (source)	^19.0.0 → ^18.2.0			dependencies	minor
react-dom (source)	^19.0.0 → ^18.2.0			dependencies	minor
react-router-dom (source)	6.22.3 → 6.30.4			dependencies	minor
typescript (source)	5.4.4 → 5.9.3			devDependencies	minor
typescript (source)	5.7.3 → 5.9.3			dependencies	minor
vite (source)	5.2.8 → 5.4.21			devDependencies	minor
io.insert-koin:koin-test (source)	4.0.1 → 4.2.1			dependencies	minor
org.java-websocket:Java-WebSocket	1.5.7 → 1.6.0			dependencies	minor
io.insert-koin:koin-logger-slf4j (source)	4.0.1 → 4.2.1			dependencies	minor
io.insert-koin:koin-ktor (source)	4.0.1 → 4.2.1			dependencies	minor
org.jetbrains.kotlin.plugin.serialization (source)	2.0.21 → 2.4.0			plugin	minor
org.jetbrains.kotlin.jvm (source)	2.0.21 → 2.4.0			plugin	minor
io.micrometer:micrometer-registry-prometheus	1.14.3 → 1.17.0			dependencies	minor
org.jetbrains.kotlin:kotlin-test-junit (source)	2.1.0 → 2.4.0			dependencies	minor

---

Release Notes

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.32.0

Compare Source

Fixed

• #​3176 ensure Helm-installed CRDs can be resolved during preview
• #​4396 Fix panic when creating a kubernetes.io/service-account-token Secret with a non-existent ServiceAccount.
• #​4394 Don't fail YAML render when a custom resource's namespace scope can't be determined offline. The resource is rendered without a namespace and a warning is logged, rather than erroring.

Changed

• Align the documented minimum supported Kubernetes version and local SDK install instructions with current provider behavior.

v4.31.1

Compare Source

Changed

• #​4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
• Update first-party Pulumi dependencies to v3.242.0.

v4.31.0

Compare Source

Added

• #​2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
• #​4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See docs/list-rpc-semantics.md for design notes.

Fixed

• #​4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

• Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

Compare Source

Fixed

• #​4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs.
  Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
• #​2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

• Upgrade Kubernetes schema and libraries to v1.35.4.
• Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Compare Source

Fixed

• #​2926 Use client-side create for new resources instead of server-side apply.

  Users may observe stricter errors on some Create operations. Please read carefully.

  When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object.
  This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource).
  A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources.
  To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

• #​2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.

Changed

• Upgrade Kubernetes schema and libraries to v1.35.3.

v4.28.0

Compare Source

Changed

• Upgrade Kubernetes schema and libraries to v1.35.2.

v4.27.0

Compare Source

Fixed

• #​4181 Fix PVC timeout when updating to a storage class with WaitForFirstConsumer bind mode.

Added

• #​3661 Support for OCI login inside the provider process. Providing a username/password to Chart v4 and Release v3 will now login to private OCI
  registries as expected.
  (#​2911 and #​1914)

v4.26.0

Compare Source

Fixed

• #​4122 Implements a new provider config option, alwaysRender, which sets Diff_Someto true when used in combination with renderYAMLtoDirectory.
  This allows for user-defined opt-in behavior for YAML manifests to be idempotently generated on every pulumi up, and for Update() to show these changes to a user.

• Fixed a race condition in StatefulSet await logic where Pulumi could
  incorrectly report a rollout as complete before the controller had processed
  the update. This occurred when Pulumi checked status fields before the
  controller updated observedGeneration, causing stale "ready" values to be
  trusted.

• Fixed a regression of
  #​2943 which could
  cause Deployments to erroneously report diffs.

Changed

• Upgraded helm.sh/helm to v3.18.6. (#​3969)

• #​4156 Upgrade Kubernetes schema and libraries to v1.35.1

v4.25.0

Compare Source

v4.24.1

Compare Source

Fixed

• Fixed a regression of #​2943 which could cause Deployments to erroneously report diffs.

Changed

• Upgraded helm.sh/helm to v3.18.6. (#​3969)

v4.24.0

Compare Source

Added

• Added a plainHttp option to the v4.Chart resource. (#​3250)

Changed

• The pulumi.com/waitFor annotation now uses an
  RFC9535-compliant JSONPath
  parser. This makes it possible to wait for more complex scenarios.

  For example:

  • To wait for a Pod's status.phase to be "Running" or "Succeeded":

    pulumi.com/waitFor: "jsonpath={.status[?@​ == 'Running' || @​ == 'Succeeded' ]}"

  • To wait for for an object to have a "Failed" or "Complete" condition with
    a "True" value:

    pulumi.com/waitFor: "jsonpath={.conditions[?(@​.type=='Failed'||@​.type=='Complete')].status}=True

  (Tools like jsonpath.com are very helpful for
  ensuring your JSONPath expression works as expected.)

  Importantly, please note that kubectl wait --for=jsonpath=... supports only
  a subset of RFC9535. This means some complex waitFor annotations will not
  be reproducible with kubectl.

  Existing expressions should continue to work normally with one notable
  exception: a selector like .items[] now requires an explicit wildcard, i.e.
  .items[*].

  As a reminder, the pulumi.com/waitFor annotation is experimental and
  subject to change. Similarly, RFC9535 is still only proposed and may also
  change in the future.

• enableConfigMapMutable and enableSecretMutable are now stable.
  (#​3886)

Fixed

• Helm resources all now use the correct registry/config.json file for
  credentials. For backward-compatibility registry.json is preferred if
  it exists. (#​3606)

• Fixed an issue where deletions could take longer than necessary. (#​3317)

• Significantly reduced memory usage. (#​3713)

• Fixed incorrect deprecation warnings for VolumeAttributesClass. (#​3772)

• SecretPatch inputs are now automatically marked as secret.

v4.23.0

Compare Source

Changed

• Updated Kubernetes schemas and libraries to v1.33.0. (#​3619)

v4.22.2

Compare Source

Fixed

• Fix panic when valueYamlFiles field in helm.v3.Release resources are nil (#​3601)

v4.22.1

Compare Source

Fixed

• Fix race condition in Deleted condition (#​3550)

v4.22.0

Compare Source

Changed

• Update Pulumi dependency to v3.153.1 (#​3534)
• Update ESC dependency to v0.13.0 (#​3551)

Fixed

• Fix race condition in Deleted condition. (#​3550)

v4.21.1

Compare Source

Added

• Windows executable releases are now signed. (#​3455)

pulumi/pulumi (@​pulumi/pulumi)

v3.246.0

Compare Source

Bug Fixes

• [backend/diy] Fix backwards incompatible gocloud.dev changes #​23525

Features

• [cli] Add pulumi logs ls to list automatic log files #​23449
• [cli] Add pulumi logs rm to remove automatic log files
• [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
• [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #​23489

Improvements

• [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg #https://github.com/pulumi/pulumi/issues/23394
• [cli] Remove the experimental pulumi ai web command #​23517
• [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #​23417
• [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #​23490

Features

• [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
• [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #​23402

Bug Fixes

• [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #​23333
• [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #​23444
• [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #​23452

Improvements

• [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #​23450

Bug Fixes

• [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #​23458
• [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #​23494
• [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #​23418
• [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #​23458

Features

• [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #​23459

Bug Fixes

• [sdk] Reject tar entries with path traversal components when extracting archives #​23485
• [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #​14826
• [sdk/nodejs] Fix local SDKs added with pulumi package add not being built when using pnpm 10.34.2 or newer

Miscellaneous

• [sdk/nodejs] Improve error logs when serialization fails #​21901

Bug Fixes

• [sdkgen] Validate schema names to not contain whitespace or control characters #​23460

Improvements

• [sdkgen] Allow provider objects to have string enumerations on their outputs #​23461

Bug Fixes

• [cli/auth] BREAKING: Delete all backend config when logging out #​23358

v3.245.0

Compare Source

Improvements

• [backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #​23421
• [cli] Show download and unpack progress when installing provider plugins #https://github.com/pulumi/pulumi/issues/23408
• [cli/do] Expose the selected stack's organization and short name to PCL input files when running pulumi do inside a project
• [cli/do] Suggest similar tokens when an unknown token is passed to pulumi do #​23341
• [cli/neo] Support up/down arrows to scroll through prompt history in pulumi neo #​23425

Bug Fixes

• [engine] Download the HCL language runtime on demand instead of bundling it #​23356

Miscellaneous

• [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #​23363

Bug Fixes

• [sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
• [cli/auth] Delete shared temporary agent credentials when logging out

Improvements

• [cli/stack] Remame pulumi stack init to new #​23422

v3.244.0

Compare Source

3.244.0 (2026-05-28)

Bug Fixes

• [cli/do] Fix top level flags like --logtostderr being recognized when using pulumi do #​23355
• [cli/install] Distinguish multiple packages with the same plugin
• [engine] Fix snapshot integrity issue with up --refresh
• [engine] Forward all provider errors to error hooks for retry #​23347
• [engine] Trace cancel RPCs sent to plugins during shutdown as children of the active operation instead of emitting separate root spans #​23362
• [sdk/python] Merge requirements.txt into pyproject.toml when using uv without a project section #​23340

v3.243.0

Compare Source

Features

• [cli] Make the pulumi project new -y command write a minimal project file with no template
  #​22847

• [cli] Allow coding agents to create claimable temporary accounts when not authenticated

• [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output
  #​23326

• [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC
  #​23287

• [sdkgen] Reserve the package names 'pulumi' and 'input' for internal use
  #​23321

• [cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both
  #​22963

• [cli/do] Add resource support to pulumi do
  #​23215

• [cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn
  #​23299

• [cli/new] Alias pulumi new to pulumi project new
  #​23265

Bug Fixes

• [cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively
  #​23264

• [pcl] Don't silently ignore ... in function arguments
  #​23309

• [sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs
  #​23068

• [backend/service] Error out when setting up journaler fails
  #​22671

Miscellaneous

• [cli/package] Update the pulumi package add --agent documentation hint to use <type-token> as the placeholder for the /docs/... URL
  #​23294

• [cli/plugin] Rename plugin ls to list and rm to remove
  #​23291

v3.242.0

Compare Source

Features

• [cli] Add a pulumi package for npx support

• [cli] Add the pulumi org member edit command
  #​23235

• [cli] Add the pulumi org member remove command
  #​23237

• [cli/cloud] Add pulumi deployment get to retrieve details for a specific deployment
  #​23238

• [cli/cloud] Add pulumi insights account scan get <account> <scan-id> to show the full workflow run for a single Insights scan
  #​23255

• [cli/cloud] Add pulumi insights account scan list <account> to discover recent scan IDs to feed into pulumi insights account scan log
  #​23255

• [cli/deployment] Add dedicated flags for each deployment setting
  #​23236

• [cli/do] Add the start of pulumi do
  #​23176

• [cli/neo] Add --print/-p to pulumi neo to run a single prompt non-interactively and print the agent's final response to stdout
  #​23245

Bug Fixes

• [cli/cloud] Fix pulumi insights account scan log --all to follow the server's pagination cursor through the end of the log, and render --job/--step mode as structured lines instead of an empty raw-string blob
  #​23256

• [sdk] Close gzip.Writer in archiveTarGZIP to produce valid tar.gz output
  #​23240

• [sdkgen/python] Fix usage of ArgsDict types in typed dictionaries
  #​23253

v3.241.0

Compare Source

Features

• [cli] Add --output json to pulumi preview for a structured JSON summary of the operation result
  #​22927

• [cli] Add --output json to pulumi refresh for a structured JSON summary of the operation result
  #​22928

• [cli] Add --output json to pulumi destroy for a structured JSON summary of the operation result
  #​22875

• [cli] Add pulumi stack schedule get to retrieve the configuration of a scheduled action
  #​23153

• [cli] Add pulumi stack schedule list to list all scheduled actions configured for a stack
  #​23153

• [cli] Add pulumi stack schedule new to create a raw, drift, or TTL deployment schedule for a stack
  #​23153

• [cli] Add pulumi stack webhook delivery list to list recent deliveries for a stack webhook
  #​23116

• [cli] Add pulumi stack webhook delivery redeliver to redeliver a webhook event
  #​23118

• [cli] Add pulumi stack webhook edit to update an existing stack webhook
  #​23139

• [cli] Add pulumi stack webhook new to create a new stack webhook
  #​23101

• [cli] Add pulumi stack webhook remove to delete a stack webhook
  #​23102

• [cli] Add pulumi org webhook delivery list to list recent deliveries for an organization webhook
  #​23179

• [cli] Add pulumi org webhook edit to update an organization webhook
  #​23179

• [cli] Add pulumi org webhook list to list all webhooks configured for an organization
  #​23174

• [cli] Add pulumi org webhook new to create a new organization webhook
  #​23172

• [cli] Add pulumi org webhook ping to send a test ping to an organization webhook
  #​23179

• [cli] Add pulumi org webhook remove to delete an organization webhook
  #​23177

• [cli] Add pulumi stack drift list to list drift detection runs for a stack
  #​23159

• [cli] Add pulumi stack drift status to show the drift detection status for a stack
  #​23161

• [cli] Add pulumi stack schedule edit to update an existing scheduled deployment action
  #​23153

• [cli] Add pulumi stack schedule remove to delete a scheduled deployment action
  #​23153

• [cli] Add pulumi audit-log export command
  #​23212

• [cli] Add pulumi org audit-log list
  #​23211

• [cli] Add pulumi policy compliance list to list compliance results grouped by entity
  #​23209

• [cli] Add pulumi policy group new command to allow creating new policy groups
  #​23202

• [cli] Add the pulumi policy issue get command
  #​23200

• [cli/cloud] Add pulumi insights account list to list Insights accounts in an organization
  #​23091

• [cli/cloud] Add pulumi insights account new to create a Pulumi Insights account
  #​23093

• [cli/cloud] Add pulumi insights account scan log to fetch log output for a Pulumi Insights scan
  #​23092

• [cli/cloud] Add pulumi insights account scan to trigger a resource discovery scan for an Insights account
  #​23094

• [cli/cloud] Implement pulumi stack history events to retrieve engine events for a Pulumi Cloud update
  #​23109

• [cli/cloud] Add pulumi deployment cancel to terminate an in-progress deployment
  #​23164

• [cli/cloud] Add pulumi org member list to list the members of an organization
  #​23170

• [cli/cloud] Add pulumi org usage get to fetch the resources-under-management summary for an organization
  #​23166

• [cli/cloud] Add pulumi org role assign to assign a custom role to a team
  #​23117

• [cli/cloud] Add pulumi org role edit to update a custom role's name, description, or permission tree
  #​23117

• [cli/cloud] Add pulumi org role list to list custom roles for an organization
  #​23117

• [cli/cloud] Add pulumi org role new to create a custom role from a permission descriptor JSON file
  #​23117

• [cli/cloud] Add pulumi org role remove to delete a custom role from an organization
  #​23117

• [cli/env] Update esc to v0.24.0
  #​23213

• [cli/neo] Show tool call arguments and results in pulumi neo via a ctrl+o overlay
  #​23075

• [cli/neo] Multi-line input in pulumi neo - Enter sends, Shift+Enter / Alt+Enter / Ctrl+J / trailing \ insert a newline
  #​23151

• [cli/neo] Make pulumi neo visible by default; the PULUMI_EXPERIMENTAL gate has been removed
  #​23228

• [cli/policy] Add pulumi policy group edit to edit policy groups
  #​23206

• [cli/policy] Add pulumi policy group remove command to remove policies
  #​23208

• [cli/policy] Add the pulumi policy group get command
  #​23203

Bug Fixes

• [cli] Add pulumi policy issue list command
  #​23198

• [cli] Fix pulumi org role list to send the uxPurpose query parameter the service requires
  #​23231

• [engine] Fix pulumi import dropping map entries whose value matched the enum member of a Union<Input<Enum<T>>, ...> element type
  #​23190

• [cli/cloud] Surface a clear error when pulumi api --all is used against an endpoint whose response is not paginatable, instead of silently emitting an empty array
  #​23191
  #​23128

• [cli/cloud] pulumi deployment settings edit no longer clears fields that the patch does not mention
  #​23217

• [cli/import] Generate PCL for asset and archive inputs when importing resources, instead of returning a "NYI" error
  #​22938

• [cli/import] Preserve asset/archive/resource-reference values inside map and array inputs, and HCL-escape map keys containing ${ or %{ template sequences
  #​23222

• [cli/install] Hint at adding a .git / _git when VCS URL resolution fails
  #​22831

• [cli/neo] Transparently reconnect the Neo event stream after a transient network drop, resuming from the last seen event ID
  #​23134

• [cli/neo] Show preparing in the live preview/up block until the first resource arrives
  #​23155

• [cli/new] Support specific versions when using registry-backed templates with pulumi new
  #​22909

v3.239.0

Compare Source

Features

• [cli] Add --output json to pulumi import for a structured JSON summary of the operation result
  #​22929

• [cli] Add pulumi stack get to retrieve detailed information about a stack
  #​23106

• [cli] Add pulumi stack webhook get to inspect a single stack webhook
  #​23088

• [cli] Add pulumi stack webhook ping to send a test ping to a stack webhook

• [cli/cloud] Add pulumi deployment list to list deployment executions for a stack
  #​23114

• [sdkgen] Validate that schema names can't conflict with module paths
  #​22956

Bug Fixes

• [engine] Fix batch encrypt/decrypt errors being silently dropped
  #​23149

• [cli/cloud] Fix pulumi api help examples that referenced non-existent operation IDs and response fields
  #​23125

v3.238.0

Compare Source

Features

• [cli] Add a --language flag to pulumi package add to run outside a Pulumi project or plugin
  #​22791

• [cli] Add --output json to pulumi up for a structured JSON summary of the operation result
  #​22870

• [cli] Recommend pulumi cloud api describe in pulumi cloud api --help to verify operation parameters before calling
  #​22881

• [cli] Add pulumi stack webhook list to list all webhooks configured for a stack
  #​23082

• [cli/cloud] Rename pulumi cloud api to pulumi api
  #​22970

• [cli/cloud] Add pulumi insights resource get to look up a single resource discovered by Pulumi Insights
  #​23077

• [cli/cloud] Add pulumi template list to list registry-backed templates
  #​23074

• [cli/cloud] Rename the --format flag to --output on pulumi api and its subcommands
  #​23072

• [cli/cloud] Add pulumi insights resource search to search for resources discovered by Pulumi Insights
  #​23087

• [cli/engine] Add --skip-plugin-pre-install to skip up-front plugin installation

• [engine] Fail the deployment when an after hook fails
  #​22935

• [cli/neo] Render the agent's TODO list in the pulumi neo TUI
  #​22864

• [cli/neo] Add --approval-mode and --permission-mode flags to pulumi neo, with Ctrl+A and Ctrl+R hotkeys to switch modes mid-session
  #​22950

• [cli/package] When invoked by an AI coding agent, print pulumi api pointers after pulumi package add and pulumi package gen-sdk
  #​22904

• [pkg/testing] Recognize the hcl and pcl runtimes in integration.ProgramTest
  #​23018

• [pkg/testing] Add l1-config-types-optional conformance test for PCL's optional type constructor
  #​23108

Bug Fixes

• [backend/diy] Minify JSON persisted by the DIY backend for checkpoints, history, and stack tags
  #​22245

• [cli/import] Ignore property values that do not conform to the schema in maps
  #​23076

• [cli/import] Stop dropping map values whose element type is a union of Input-wrapped types during HCL2 import

• [cli/neo] Use the selected stack's organization when starting a pulumi neo task instead of the user's default organization
  #​22951

• [cli/neo] Include the failure reason in pulumi_preview and pulumi_up tool results when they fail, so the agent can react instead of seeing a blank error
  #​22948

• [cli/neo] Retry pulumi neo task creation without the attached stack when the backend rejects it with an "invalid entities" error
  #​22945

• [cli/neo] Surface the failure reason when a filesystem tool call fails, instead of returning an empty result to the agent
  #​23019

• [cli/package] Use --output=markdown (not the renamed-away --format=markdown) in the pulumi api pointers printed by pulumi package add and pulumi package gen-sdk
  #​23098

• [programgen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22931

• [sdk/python] Speed up python program resolution by using a set instead of deque to track outputs
  #​22946

Miscellaneous

• [cli/neo] Tag Neo tasks created from the CLI with a cli source so the service can attribute their origin
  #​23099

• [sdk/nodejs] Add registerPackage helper to cache package references per deployment
  #​23014

v3.237.0

Compare Source

Features

• [cli] Include the running command name and detected AI agent (when present) in the User-Agent header on Pulumi Cloud API requests
  #​22908

• [engine] Include result on the summary engine event
  #​22883

• [sdkgen] Eagerly error on schemas with unconstructable types
  #​22890

• [cli/cloud] Auto-fill lang and os query parameters on pulumi cloud api GET/HEAD requests when the matched OpenAPI operation declares them and the caller hasn't supplied them
  #​22726

• [cli/package] Add pulumi package new to bootstrap a Pulumi package from a template
  #​22837

Bug Fixes

• [cli] Add blank-line gaps between pulumi neo TUI conversation blocks
  #​22846

• [cli/import] Preserve __-prefixed keys when generating PCL for imported resource state, so provider-defined payloads round-trip correctly
  #​22856

• [cli/neo] Render ux__ask_user clarifying questions as questions instead of approval prompts
  #​22862

• [cli/neo] Fix a panic when cancelling a pulumi neo session
  #​22898

• [cli/neo] Render every assistant message in the TUI scrollback so multi-turn commentary no longer disappears between tool calls

• [cli/neo] Return the bare stack name and canonical project name from pulumi_preview and pulumi_up tool results instead of echoing the raw input
  #​22891

• [codegen/pcl] Stop reporting spurious circular references when an ignoreChanges, hideDiffs, replaceOnChanges, or additionalSecretOutputs entry shares a name with a top-level node
  #​22916

• [programgen/pcl] Fix PCL binder panic when a conditional m

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: frontend/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: frontend@0.0.0
npm error Found: eslint@9.39.4
npm error node_modules/eslint
npm error   dev eslint@"^9.0.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer eslint@"^8.56.0" from @typescript-eslint/parser@7.18.0
npm error node_modules/@typescript-eslint/parser
npm error   dev @typescript-eslint/parser@"^7.0.0" from the root project
npm error   peer @typescript-eslint/parser@"^7.0.0" from @typescript-eslint/eslint-plugin@7.18.0
npm error   node_modules/@typescript-eslint/eslint-plugin
npm error     dev @typescript-eslint/eslint-plugin@"^7.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-06-12T16_16_43_966Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-06-12T16_16_43_966Z-debug-0.log