[renovate]

This PR contains the following updates:

Package	Update	Change
pulumi/pulumi	minor	3.268.0 → 3.272.0

---

Release Notes

pulumi/pulumi

v3.272.0

Compare Source

Features

• [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their exceptions #​25290
• [engine] Add an AwaitError provider protocol error indicating an operation needs to be awaited; the deployment continues, the resource's outputs are unknown, and the CLI exits with the dedicated ExitAwaitError code (10) #​25278
• [cli/env] Add pulumi env change-request commands for working with change requests #​25122

Bug Fixes

• [cli] Name the directory searched in the no Pulumi.yaml project file found error of pulumi preview, refresh, import, logs and install instead of leaving it empty #​25187
• [sdk] Keep the unknown outputs of remote components, such as those that depend on an awaiting or failed child, instead of resolving them as empty values #​25291

Improvements

• [cli/env] Use --organization/-o to select the organization in pulumi env setup commands #​25231
• [engine] Return dry-run outputs to dependents of resources skipped under --continue-on-error, instead of failing their registrations #​25227

v3.271.0

Compare Source

Features

• [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #​25228
• [cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #​25280
• [cli/policy] Apply the policy exceptions Pulumi Cloud sends for required policy packs #​25284
• [auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #​25071
• [auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #​25073

Bug Fixes

• [engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #​25222
• [cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #​24665
• [engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #​24973
• [engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #​24995
• [pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #​25112
• [sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #​25168
• [sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #​25169
• [sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #​25181
• [sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #​25273

Improvements

• [cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #​25257
• [protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #​25277

v3.270.0

Compare Source

Bug Fixes

• [cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the environment; on a conflict, env edit reopens the editor with your edits and the current definition, and the others fail #​24983
• [cli] Report an unknown drift status in pulumi stack drift status when drift detection has never run #​25172

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

TL;DR for garyj

Minor bump, no action needed.

• Bug-fix only release: pulumi env edit/set/rm/provider no longer clobber concurrent changes to the environment; conflicts now surface properly (edit reopens with both versions, others fail cleanly) instead of silently overwriting.
• pulumi stack drift status now reports "unknown" instead of a misleading status when drift detection has never been run for a stack.
• Nothing CVE-related or breaking, safe to merge.

_{Auto-summarized by claude-sonnet-5 from the release notes above. Add/remove the deps-summary label to control this.}