Update first-party Pulumi dependencies (#593)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| dependencies | minor | [`3.186.0` ->
`3.191.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.186.0/3.191.0)
|
|
[github.com/pulumi/pulumi/pkg/v3](https://redirect.github.com/pulumi/pulumi)
| require | minor | `v3.185.0` -> `v3.191.0` |
| [pulumi/actions](https://redirect.github.com/pulumi/actions) | action
| minor | `v6.3.0` -> `v6.5.0` |
|
[pulumi/esc-export-secrets-action](https://redirect.github.com/pulumi/esc-export-secrets-action)
| action | pinDigest | -> `9d64857` |

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.191.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31910-2025-08-21)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.190.0...v3.191.0)

##### Features

-   \[cli] Document the `PULUMI_ENABLE_STREAMING_JSON_PREVIEW` envvar.
[#&#8203;20328](https://redirect.github.com/pulumi/pulumi/pull/20328)

##### Bug Fixes

- \[engine] Check providers returning 'version' or '\__internal' in
their inputs
[#&#8203;20313](https://redirect.github.com/pulumi/pulumi/pull/20313)

-   \[engine] Fix a panic with `refresh --run-program`
[#&#8203;20337](https://redirect.github.com/pulumi/pulumi/pull/20337)

- \[engine] Fix an infinite loop from passing unordered resources to the
dependency system when using --refresh

- \[programgen] Emit warnings instead of errors in non-strict mode when
binding resource blocks
[#&#8203;20347](https://redirect.github.com/pulumi/pulumi/pull/20347)

- \[programgen] Simplify range value types when it is derived from
object of objects and warn on unknown properties
[#&#8203;20345](https://redirect.github.com/pulumi/pulumi/pull/20345)

- \[programgen] Warn instead of erroring out when traversing a NoneType
in PCL
[#&#8203;20342](https://redirect.github.com/pulumi/pulumi/pull/20342)

-   \[cli/display] Escape non-graphic characters in URNs
[#&#8203;20295](https://redirect.github.com/pulumi/pulumi/pull/20295)

- \[cli/import] Disambiguate duplicate resource names by their types
when importing
[#&#8203;20348](https://redirect.github.com/pulumi/pulumi/pull/20348)

-   \[cli/new] Don't prompt for ai or template when passing --yes
[#&#8203;20256](https://redirect.github.com/pulumi/pulumi/pull/20256)

##### Miscellaneous

-   \[cli] Log version and CLI metadata
[#&#8203;20334](https://redirect.github.com/pulumi/pulumi/pull/20334)

-   \[cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource
[#&#8203;20324](https://redirect.github.com/pulumi/pulumi/pull/20324)

###
[`v3.190.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31900-2025-08-15)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.189.0...v3.190.0)

##### Features

- \[engine] Don't error on `ignoreChanges` paths that are missing old
data, there is nothing to ignore in those cases and we just use the new
data
[#&#8203;20278](https://redirect.github.com/pulumi/pulumi/pull/20278)

##### Bug Fixes

- \[cli] Fix `destroy --exclude-protected --remove` returning an error
for empty stacks that could safely be removed
[#&#8203;20283](https://redirect.github.com/pulumi/pulumi/pull/20283)

- \[cli] Fix `pulumi template publish` failing with relative paths by
normalizing to absolute paths before archive creation
[#&#8203;20301](https://redirect.github.com/pulumi/pulumi/pull/20301)

- \[cli/import] Use mapped name instead of logical name for resource
references during import code generation
[#&#8203;20300](https://redirect.github.com/pulumi/pulumi/pull/20300)

- \[pkg] Make TypeScript code generation use 'declare' keyword instead
of definite assertion operator, to avoid setting all fields to undefined
when targeting environments new enough
[#&#8203;20261](https://redirect.github.com/pulumi/pulumi/pull/20261)

-   \[sdkgen/nodejs] Make TypeScript a full dependency of local SDKs
[#&#8203;20272](https://redirect.github.com/pulumi/pulumi/pull/20272)

##### Miscellaneous

- \[build] Updates protobuf and grpc to v5, bumping dependencies in the
Go, Node.js, and Python SDKs
[#&#8203;19588](https://redirect.github.com/pulumi/pulumi/pull/19588)

-   \[build] Update latest Go version to 1.25
[#&#8203;20284](https://redirect.github.com/pulumi/pulumi/pull/20284)

-   \[sdkgen/nodejs] Target ES2020 for generated SDKs
[#&#8203;20276](https://redirect.github.com/pulumi/pulumi/pull/20276)

###
[`v3.189.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31890-2025-08-12)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.188.0...v3.189.0)

##### Features

-   \[sdk] Remove CacheMS from CLIVersionResponse
[#&#8203;20264](https://redirect.github.com/pulumi/pulumi/pull/20264)

-   \[sdk/go] Calculate PluginInfo.Size on demand
[#&#8203;20241](https://redirect.github.com/pulumi/pulumi/pull/20241)

- \[auto/python] Surface `json` option to `pulumi preview` calls in
Python when using the `pulumi.automation` package.
[#&#8203;20233](https://redirect.github.com/pulumi/pulumi/pull/20233)

##### Bug Fixes

- \[cli/package] Fix incorrect console URLs being displayed after
publishing a policy
[#&#8203;20255](https://redirect.github.com/pulumi/pulumi/pull/20255)

-   \[engine] Fix race when reading plugin stdout
[#&#8203;20242](https://redirect.github.com/pulumi/pulumi/pull/20242)

-   \[sdk/nodejs] Fix component providers when using pnpm
[#&#8203;20253](https://redirect.github.com/pulumi/pulumi/pull/20253)

##### Miscellaneous

- \[pkg] Make TypeScript code generation use nullish coalesce operator
for required property checks, as well as state and args accessing
whenever sensible

- \[sdk/nodejs] Fix swapped stderr/stdout callback comments in
PreviewOptions interface
[#&#8203;20250](https://redirect.github.com/pulumi/pulumi/pull/20250)

-   \[sdkgen] Don’t create empty maps for language specific overrides
[#&#8203;20237](https://redirect.github.com/pulumi/pulumi/pull/20237)

###
[`v3.188.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31880-2025-08-07)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.187.0...v3.188.0)

##### Features

- \[cli] Add `--remove-backups` flag to `pulumi stack rm` for DIY
backends
[#&#8203;20203](https://redirect.github.com/pulumi/pulumi/pull/20203)

##### Bug Fixes

-   \[cli] Fix cancellation when running via some CLI wrapper tools
[#&#8203;20195](https://redirect.github.com/pulumi/pulumi/pull/20195)

-   \[cli] Fix concurrent read/write during plugin downloads
[#&#8203;20223](https://redirect.github.com/pulumi/pulumi/pull/20223)

-   \[cli] Restore terminal mode on panic
[#&#8203;20224](https://redirect.github.com/pulumi/pulumi/pull/20224)

-   \[engine] Fix panic in refreshes due to concurrent map writes
[#&#8203;20206](https://redirect.github.com/pulumi/pulumi/pull/20206)

- \[sdkgen] Warn about refs of the form
"#/resources/pulumi:providers:<pkg>"
[#&#8203;20192](https://redirect.github.com/pulumi/pulumi/pull/20192)

-   \[cli/display] Show changed outputs in preview
[#&#8203;20161](https://redirect.github.com/pulumi/pulumi/pull/20161)

- \[cli/engine] Make `--exclude` correctly handle wildcards in all cases
[#&#8203;20158](https://redirect.github.com/pulumi/pulumi/pull/20158)

- \[sdk/go] Fix running against old CLI versions without
SignalAndWaitForShutdown
[#&#8203;20212](https://redirect.github.com/pulumi/pulumi/pull/20212)

-   \[sdk/python] Fix dependency installation in uv workspaces
[#&#8203;20218](https://redirect.github.com/pulumi/pulumi/pull/20218)

##### Miscellaneous

-   \[cli] Update pulumi-dotnet to 3.87.0
[#&#8203;20222](https://redirect.github.com/pulumi/pulumi/pull/20222)

-   \[cli/env] Bump esc to v0.17.0
[#&#8203;20197](https://redirect.github.com/pulumi/pulumi/pull/20197)

###
[`v3.187.0`](https://redirect.github.com/pulumi/pulumi/blob/HEAD/CHANGELOG.md#31870-2025-07-31)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.186.0...v3.187.0)

##### Features

-   \[cli] Support for writing v4 checkpoints/deployments
[#&#8203;20159](https://redirect.github.com/pulumi/pulumi/pull/20159)

- \[cli] Add support for qualified registry template names in `pulumi
new`
[#&#8203;20138](https://redirect.github.com/pulumi/pulumi/pull/20138)

- \[cli/import] Enable `pulumi import` to always `--generate-resources`
when converting `--from` state files
[#&#8203;20178](https://redirect.github.com/pulumi/pulumi/pull/20178)

-   \[yaml] Allow config values to be parsed with type `object`
[#&#8203;20132](https://redirect.github.com/pulumi/pulumi/pull/20132)

- \[auto/python] Allow for `on_error` callbacks in commands to capture
stderr incrementally
[#&#8203;20019](https://redirect.github.com/pulumi/pulumi/pull/20019)

-   \[sdk/nodejs] Add option of Bun as a package manager
[#&#8203;18412](https://redirect.github.com/pulumi/pulumi/pull/18412)

-   \[sdk/nodejs] Copy `getRootDirectory` to the pulumi module
[#&#8203;20173](https://redirect.github.com/pulumi/pulumi/pull/20173)

-   \[sdk/python] Copy `get_root_directory` to the pulumi module
[#&#8203;20172](https://redirect.github.com/pulumi/pulumi/pull/20172)

##### Bug Fixes

- \[cli] Fix un-taring registry-backed templates which come in .tar.gz
format
[#&#8203;20135](https://redirect.github.com/pulumi/pulumi/pull/20135)

- \[cli] Stop passing Accept: application/x-tar to registry template
download URLs to avoid signature mismatch
[#&#8203;20133](https://redirect.github.com/pulumi/pulumi/pull/20133)

- \[engine] Fix a panic with `up --refresh --run-program` and resource
replacements
[#&#8203;20147](https://redirect.github.com/pulumi/pulumi/pull/20147)

- \[engine] Untargeted resources in `destroy` now correctly register as
same steps
[#&#8203;20061](https://redirect.github.com/pulumi/pulumi/pull/20061)

- \[cli/engine] Fix hang when waiting for program that would never
complete
[#&#8203;20153](https://redirect.github.com/pulumi/pulumi/pull/20153)

-   \[sdk/nodejs] Fix delete hooks in inline automation API programs
[#&#8203;20143](https://redirect.github.com/pulumi/pulumi/pull/20143)

-   \[sdk/python] Set features inside construct
[#&#8203;20141](https://redirect.github.com/pulumi/pulumi/pull/20141)

##### Miscellaneous

- \[sdk/nodejs] Bump TypeScript target to ES2020 for plugins and policy
packs
[#&#8203;20148](https://redirect.github.com/pulumi/pulumi/pull/20148)

</details>

<details>
<summary>pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)</summary>

###
[`v3.191.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.191.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.190.0...v3.191.0)

##### 3.191.0 (2025-08-21)

##### Features

-   \[cli] Document the `PULUMI_ENABLE_STREAMING_JSON_PREVIEW` envvar.
[#&#8203;20328](https://redirect.github.com/pulumi/pulumi/pull/20328)

##### Bug Fixes

- \[engine] Check providers returning 'version' or '\__internal' in
their inputs
[#&#8203;20313](https://redirect.github.com/pulumi/pulumi/pull/20313)

-   \[engine] Fix a panic with `refresh --run-program`
[#&#8203;20337](https://redirect.github.com/pulumi/pulumi/pull/20337)

- \[engine] Fix an infinite loop from passing unordered resources to the
dependency system when using --refresh

- \[programgen] Emit warnings instead of errors in non-strict mode when
binding resource blocks
[#&#8203;20347](https://redirect.github.com/pulumi/pulumi/pull/20347)

- \[programgen] Simplify range value types when it is derived from
object of objects and warn on unknown properties
[#&#8203;20345](https://redirect.github.com/pulumi/pulumi/pull/20345)

- \[programgen] Warn instead of erroring out when traversing a NoneType
in PCL
[#&#8203;20342](https://redirect.github.com/pulumi/pulumi/pull/20342)

-   \[cli/display] Escape non-graphic characters in URNs
[#&#8203;20295](https://redirect.github.com/pulumi/pulumi/pull/20295)

- \[cli/import] Disambiguate duplicate resource names by their types
when importing
[#&#8203;20348](https://redirect.github.com/pulumi/pulumi/pull/20348)

-   \[cli/new] Don't prompt for ai or template when passing --yes
[#&#8203;20256](https://redirect.github.com/pulumi/pulumi/pull/20256)

##### Miscellaneous

-   \[cli] Log version and CLI metadata
[#&#8203;20334](https://redirect.github.com/pulumi/pulumi/pull/20334)

-   \[cli/package] Pass ParameterizeParameters to SchemaFromSchemaSource
[#&#8203;20324](https://redirect.github.com/pulumi/pulumi/pull/20324)

###
[`v3.190.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.190.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.189.0...v3.190.0)

##### 3.190.0 (2025-08-15)

##### Features

- \[engine] Don't error on `ignoreChanges` paths that are missing old
data, there is nothing to ignore in those cases and we just use the new
data
[#&#8203;20278](https://redirect.github.com/pulumi/pulumi/pull/20278)

##### Bug Fixes

- \[cli] Fix `destroy --exclude-protected --remove` returning an error
for empty stacks that could safely be removed
[#&#8203;20283](https://redirect.github.com/pulumi/pulumi/pull/20283)

- \[cli] Fix `pulumi template publish` failing with relative paths by
normalizing to absolute paths before archive creation
[#&#8203;20301](https://redirect.github.com/pulumi/pulumi/pull/20301)

- \[cli/import] Use mapped name instead of logical name for resource
references during import code generation
[#&#8203;20300](https://redirect.github.com/pulumi/pulumi/pull/20300)

- \[pkg] Make TypeScript code generation use 'declare' keyword instead
of definite assertion operator, to avoid setting all fields to undefined
when targeting environments new enough
[#&#8203;20261](https://redirect.github.com/pulumi/pulumi/pull/20261)

-   \[sdkgen/nodejs] Make TypeScript a full dependency of local SDKs
[#&#8203;20272](https://redirect.github.com/pulumi/pulumi/pull/20272)

##### Miscellaneous

- \[build] Updates protobuf and grpc to v5, bumping dependencies in the
Go, Node.js, and Python SDKs
[#&#8203;19588](https://redirect.github.com/pulumi/pulumi/pull/19588)

-   \[build] Update latest Go version to 1.25
[#&#8203;20284](https://redirect.github.com/pulumi/pulumi/pull/20284)

-   \[sdkgen/nodejs] Target ES2020 for generated SDKs
[#&#8203;20276](https://redirect.github.com/pulumi/pulumi/pull/20276)

###
[`v3.189.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.189.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.188.0...v3.189.0)

##### 3.189.0 (2025-08-12)

##### Features

-   \[sdk] Remove CacheMS from CLIVersionResponse
[#&#8203;20264](https://redirect.github.com/pulumi/pulumi/pull/20264)

-   \[sdk/go] Calculate PluginInfo.Size on demand
[#&#8203;20241](https://redirect.github.com/pulumi/pulumi/pull/20241)

- \[auto/python] Surface `json` option to `pulumi preview` calls in
Python when using the `pulumi.automation` package.
[#&#8203;20233](https://redirect.github.com/pulumi/pulumi/pull/20233)

##### Bug Fixes

- \[cli/package] Fix incorrect console URLs being displayed after
publishing a policy
[#&#8203;20255](https://redirect.github.com/pulumi/pulumi/pull/20255)

-   \[engine] Fix race when reading plugin stdout
[#&#8203;20242](https://redirect.github.com/pulumi/pulumi/pull/20242)

-   \[sdk/nodejs] Fix component providers when using pnpm
[#&#8203;20253](https://redirect.github.com/pulumi/pulumi/pull/20253)

##### Miscellaneous

- \[pkg] Make TypeScript code generation use nullish coalesce operator
for required property checks, as well as state and args accessing
whenever sensible

- \[sdk/nodejs] Fix swapped stderr/stdout callback comments in
PreviewOptions interface
[#&#8203;20250](https://redirect.github.com/pulumi/pulumi/pull/20250)

-   \[sdkgen] Don’t create empty maps for language specific overrides
[#&#8203;20237](https://redirect.github.com/pulumi/pulumi/pull/20237)

###
[`v3.188.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.188.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.187.0...v3.188.0)

##### 3.188.0 (2025-08-07)

##### Features

- \[cli] Add `--remove-backups` flag to `pulumi stack rm` for DIY
backends
[#&#8203;20203](https://redirect.github.com/pulumi/pulumi/pull/20203)

##### Bug Fixes

-   \[cli] Fix cancellation when running via some CLI wrapper tools
[#&#8203;20195](https://redirect.github.com/pulumi/pulumi/pull/20195)

-   \[cli] Fix concurrent read/write during plugin downloads
[#&#8203;20223](https://redirect.github.com/pulumi/pulumi/pull/20223)

-   \[cli] Restore terminal mode on panic
[#&#8203;20224](https://redirect.github.com/pulumi/pulumi/pull/20224)

-   \[engine] Fix panic in refreshes due to concurrent map writes
[#&#8203;20206](https://redirect.github.com/pulumi/pulumi/pull/20206)

- \[sdkgen] Warn about refs of the form
"#/resources/pulumi:providers:<pkg>"
[#&#8203;20192](https://redirect.github.com/pulumi/pulumi/pull/20192)

-   \[cli/display] Show changed outputs in preview
[#&#8203;20161](https://redirect.github.com/pulumi/pulumi/pull/20161)

- \[cli/engine] Make `--exclude` correctly handle wildcards in all cases
[#&#8203;20158](https://redirect.github.com/pulumi/pulumi/pull/20158)

- \[sdk/go] Fix running against old CLI versions without
SignalAndWaitForShutdown
[#&#8203;20212](https://redirect.github.com/pulumi/pulumi/pull/20212)

-   \[sdk/python] Fix dependency installation in uv workspaces
[#&#8203;20218](https://redirect.github.com/pulumi/pulumi/pull/20218)

##### Miscellaneous

-   \[cli] Update pulumi-dotnet to 3.87.0
[#&#8203;20222](https://redirect.github.com/pulumi/pulumi/pull/20222)

-   \[cli/env] Bump esc to v0.17.0
[#&#8203;20197](https://redirect.github.com/pulumi/pulumi/pull/20197)

###
[`v3.187.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.187.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.186.0...v3.187.0)

##### 3.187.0 (2025-07-31)

##### Features

-   \[cli] Support for writing v4 checkpoints/deployments
[#&#8203;20159](https://redirect.github.com/pulumi/pulumi/pull/20159)

- \[cli] Add support for qualified registry template names in `pulumi
new`
[#&#8203;20138](https://redirect.github.com/pulumi/pulumi/pull/20138)

- \[cli/import] Enable `pulumi import` to always `--generate-resources`
when converting `--from` state files
[#&#8203;20178](https://redirect.github.com/pulumi/pulumi/pull/20178)

-   \[yaml] Allow config values to be parsed with type `object`
[#&#8203;20132](https://redirect.github.com/pulumi/pulumi/pull/20132)

- \[auto/python] Allow for `on_error` callbacks in commands to capture
stderr incrementally
[#&#8203;20019](https://redirect.github.com/pulumi/pulumi/pull/20019)

-   \[sdk/nodejs] Add option of Bun as a package manager
[#&#8203;18412](https://redirect.github.com/pulumi/pulumi/pull/18412)

-   \[sdk/nodejs] Copy `getRootDirectory` to the pulumi module
[#&#8203;20173](https://redirect.github.com/pulumi/pulumi/pull/20173)

-   \[sdk/python] Copy `get_root_directory` to the pulumi module
[#&#8203;20172](https://redirect.github.com/pulumi/pulumi/pull/20172)

##### Bug Fixes

- \[cli] Fix un-taring registry-backed templates which come in .tar.gz
format
[#&#8203;20135](https://redirect.github.com/pulumi/pulumi/pull/20135)

- \[cli] Stop passing Accept: application/x-tar to registry template
download URLs to avoid signature mismatch
[#&#8203;20133](https://redirect.github.com/pulumi/pulumi/pull/20133)

- \[engine] Fix a panic with `up --refresh --run-program` and resource
replacements
[#&#8203;20147](https://redirect.github.com/pulumi/pulumi/pull/20147)

- \[engine] Untargeted resources in `destroy` now correctly register as
same steps
[#&#8203;20061](https://redirect.github.com/pulumi/pulumi/pull/20061)

- \[cli/engine] Fix hang when waiting for program that would never
complete
[#&#8203;20153](https://redirect.github.com/pulumi/pulumi/pull/20153)

-   \[sdk/nodejs] Fix delete hooks in inline automation API programs
[#&#8203;20143](https://redirect.github.com/pulumi/pulumi/pull/20143)

-   \[sdk/python] Set features inside construct
[#&#8203;20141](https://redirect.github.com/pulumi/pulumi/pull/20141)

##### Miscellaneous

- \[sdk/nodejs] Bump TypeScript target to ES2020 for plugins and policy
packs
[#&#8203;20148](https://redirect.github.com/pulumi/pulumi/pull/20148)

###
[`v3.186.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.186.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.185.0...v3.186.0)

##### 3.186.0 (2025-07-25)

##### Features

- \[engine] Send `Cancel` message to language runtime plugins on engine
shutdown
[#&#8203;20007](https://redirect.github.com/pulumi/pulumi/pull/20007)

-   \[engine] Pass stack tags to policy plugins on startup
[#&#8203;20084](https://redirect.github.com/pulumi/pulumi/pull/20084)

- \[yaml] Expose `object` as a possible config type in preparation for
`pulumi-yaml` support
[#&#8203;20129](https://redirect.github.com/pulumi/pulumi/pull/20129)

##### Bug Fixes

- \[cli/engine] --exclude and --exclude-protected flags now work
together correctly for `destroy` commands
[#&#8203;20120](https://redirect.github.com/pulumi/pulumi/pull/20120)

-   \[engine] Fix a datarace in the engine event system
[#&#8203;20105](https://redirect.github.com/pulumi/pulumi/pull/20105)

- \[engine] Fix a panic in the engine when running `up --refresh
--run-program` and finding a deleted resource

- \[sdk/nodejs] Avoid "Cannot convert object to primitive value" error
when running into type errors
[#&#8203;20092](https://redirect.github.com/pulumi/pulumi/pull/20092)

- \[sdk/nodejs] Don’t use automatic ESM mode when `—import` or
`—require` is set
[#&#8203;20091](https://redirect.github.com/pulumi/pulumi/pull/20091)

-   \[sdk/nodejs] Fix callback server hang & delete hooks in Node.js
[#&#8203;20109](https://redirect.github.com/pulumi/pulumi/pull/20109)

-   \[sdk/nodejs] Don’t report leaked promises when we exit abnormally
[#&#8203;20128](https://redirect.github.com/pulumi/pulumi/pull/20128)

- \[cli/package] Force new style Go modules to be written out when using
`package add`
[#&#8203;20011](https://redirect.github.com/pulumi/pulumi/pull/20011)

-   \[sdk/python] Run uv sync on uv command
[#&#8203;20117](https://redirect.github.com/pulumi/pulumi/pull/20117)

##### Miscellaneous

-   \[yaml] Update yaml to 1.21.3
[#&#8203;20118](https://redirect.github.com/pulumi/pulumi/pull/20118)

</details>

<details>
<summary>pulumi/actions (pulumi/actions)</summary>

###
[`v6.5.0`](https://redirect.github.com/pulumi/actions/releases/tag/v6.5.0)

[Compare
Source](https://redirect.github.com/pulumi/actions/compare/v6.4.0...v6.5.0)

##### What's Changed

- Revert "feat: add run-program flag support" by
[@&#8203;tgummerer](https://redirect.github.com/tgummerer) in
[https://github.com/pulumi/actions/pull/1381](https://redirect.github.com/pulumi/actions/pull/1381)

**Full Changelog**:
pulumi/actions@v6...v6.5.0

###
[`v6.4.0`](https://redirect.github.com/pulumi/actions/releases/tag/v6.4.0)

[Compare
Source](https://redirect.github.com/pulumi/actions/compare/v6.3.0...v6.4.0)

##### What's Changed

- feat: add run-program flag support by
[@&#8203;fitz-vivodyne](https://redirect.github.com/fitz-vivodyne) in
[https://github.com/pulumi/actions/pull/1376](https://redirect.github.com/pulumi/actions/pull/1376)

**Full Changelog**:
pulumi/actions@v6...v6.4.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - "every weekday" (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

.github/workflows/build.yml

@@ -55,7 +55,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - if: github.event_name == 'pull_request'
@@ -214,7 +214,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -389,7 +389,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -505,7 +505,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Configure AWS Credentials
@@ -570,7 +570,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
     - name: Setup Node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

.github/workflows/export-repo-secrets.yml

@@ -13,7 +13,7 @@ jobs:
           app-id: 1256780 # Export Secrets GitHub App
           private-key: ${{ secrets.EXPORT_SECRETS_PRIVATE_KEY }}
       - name: Export secrets to ESC
-        uses: pulumi/esc-export-secrets-action@v1
+        uses: pulumi/esc-export-secrets-action@9d6485759b6adff2538ae91f1b77cc96265c9dad # v1
         with:
           organization: pulumi
           org-environment: imports/github-secrets

.github/workflows/prerelease.yml

@@ -47,7 +47,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - if: github.event_name == 'pull_request'
@@ -206,7 +206,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -361,7 +361,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -477,7 +477,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Configure AWS Credentials
@@ -542,7 +542,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
     - name: Setup Node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
@@ -624,7 +624,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
     - name: Setup Java
       uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
       with:

.github/workflows/release.yml

@@ -47,7 +47,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - if: github.event_name == 'pull_request'
@@ -206,7 +206,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -361,7 +361,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -477,7 +477,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Configure AWS Credentials
@@ -542,7 +542,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
     - name: Setup Node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
@@ -624,7 +624,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
     - name: Setup Java
       uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
       with:

.github/workflows/run-acceptance-tests.yml

@@ -70,7 +70,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - if: github.event_name == 'pull_request'
@@ -233,7 +233,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node
@@ -392,7 +392,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup Node

.github/workflows/weekly-pulumi-update.yml

@@ -41,7 +41,7 @@ jobs:
       with:
         repo: pulumi/pulumictl
     - name: Install Pulumi CLI
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6.3.0
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6.5.0
       with:
         pulumi-version-file: .pulumi.version
     - name: Setup DotNet

examples/gke-auto-pilot-cert-manager-ts/package.json

@@ -5,7 +5,7 @@
     },
     "dependencies": {
         "@pulumi/kubernetes": "4.23.0",
-        "@pulumi/pulumi": "3.186.0",
+        "@pulumi/pulumi": "3.191.0",
         "@pulumi/kubernetes-cert-manager": "latest"
     }
 }

examples/go.mod

@@ -1,13 +1,11 @@
 module github.com/pulumi/pulumi-kubernetes-cert-manager/examples
 
-go 1.23.0
-
-toolchain go1.23.6
+go 1.23.11
 
 require (
 	github.com/pulumi/providertest v0.3.1
-	github.com/pulumi/pulumi/pkg/v3 v3.185.0
-	github.com/pulumi/pulumi/sdk/v3 v3.185.0
+	github.com/pulumi/pulumi/pkg/v3 v3.191.0
+	github.com/pulumi/pulumi/sdk/v3 v3.191.0
 )
 
 require (
@@ -128,7 +126,7 @@ require (
 	github.com/pkg/term v1.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231 // indirect
-	github.com/pulumi/esc v0.14.3 // indirect
+	github.com/pulumi/esc v0.17.0 // indirect
 	github.com/rivo/uniseg v0.4.4 // indirect
 	github.com/rogpeppe/go-internal v1.13.1 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect

examples/go.sum

@@ -354,14 +354,14 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231 h1:vkHw5I/plNdTr435cARxCW6q9gc0S/Yxz7Mkd38pOb0=
 github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231/go.mod h1:murToZ2N9hNJzewjHBgfFdXhZKjY3z5cYC1VXk+lbFE=
-github.com/pulumi/esc v0.14.3 h1:Zli+9LiSDT/W+Fsfr8tITxCo+5wn969tLrE4KLv44G8=
-github.com/pulumi/esc v0.14.3/go.mod h1:XnSxlt5NkmuAj304l/gK4pRErFbtqq6XpfX1tYT9Jbc=
+github.com/pulumi/esc v0.17.0 h1:oaVOIyFTENlYDuqc3pW75lQT9jb2cd6ie/4/Twxn66w=
+github.com/pulumi/esc v0.17.0/go.mod h1:XnSxlt5NkmuAj304l/gK4pRErFbtqq6XpfX1tYT9Jbc=
 github.com/pulumi/providertest v0.3.1 h1:vlftr7TZlObh81mL88IhhF0/9ZbLrZZos4NAvR4HUUw=
 github.com/pulumi/providertest v0.3.1/go.mod h1:fFHUP4/9DRyYnHWiRnwcynMtM/a7hHR/QcJfcuZKO3A=
-github.com/pulumi/pulumi/pkg/v3 v3.185.0 h1:5QzUo48Sg9hz43fGnkatRJKU7X/NsVvgQg5yAA/1aNQ=
-github.com/pulumi/pulumi/pkg/v3 v3.185.0/go.mod h1:196jVMW0esXqDO+VQDy5g/py66aoRQxHeqZ+P0uNmHI=
-github.com/pulumi/pulumi/sdk/v3 v3.185.0 h1:+pEMQxo2VvZFjSNw5EkpOdEUu87WflApTK9X/Zej8/Y=
-github.com/pulumi/pulumi/sdk/v3 v3.185.0/go.mod h1:YS7uQ+eoIV/Fco804Upv3jmz5pwo/MkLYmbGH3VgA9c=
+github.com/pulumi/pulumi/pkg/v3 v3.191.0 h1:AIONP+ACReGWeIWq9U8yqZ15x3y00DZPLANVk+pGReo=
+github.com/pulumi/pulumi/pkg/v3 v3.191.0/go.mod h1:lOf/lnZK1HcJOrefdjkxctc8p0xDje91ub0kozzXLGs=
+github.com/pulumi/pulumi/sdk/v3 v3.191.0 h1:irZiK/9teTjVOVQLsz8+zqfyWBc0KU/L389gztK5BB0=
+github.com/pulumi/pulumi/sdk/v3 v3.191.0/go.mod h1:aV0+c5xpSYccWKmOjTZS9liYCqh7+peu3cQgSXu7CJw=
 github.com/redis/go-redis/v9 v9.7.0 h1:HhLSs+B6O021gwzl+locl0zEDnyNkxMtf/Z3NNBMa9E=
 github.com/redis/go-redis/v9 v9.7.0/go.mod h1:f6zhXITC7JUJIlPEiBOTXxJgPLdZcA93GewI7inzyWw=
 github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=

examples/simple-cert-manager-ts/package.json

@@ -5,7 +5,7 @@
     },
     "dependencies": {
         "@pulumi/kubernetes": "4.23.0",
-        "@pulumi/pulumi": "3.186.0",
+        "@pulumi/pulumi": "3.191.0",
         "@pulumi/kubernetes-cert-manager": "latest",
         "@pulumi/random": "4.18.3",
         "google-protobuf": "3.21.4"