[dependabot]

Bumps the all group with 1 update: github.com/pulumi/pulumi/sdk/v3.

Updates github.com/pulumi/pulumi/sdk/v3 from 3.269.0 to 3.272.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.272.0

3.272.0 (2026-10-22)

Features

• [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their exceptions #25290
• [engine] Add an AwaitError provider protocol error indicating an operation needs to be awaited; the deployment continues, the resource's outputs are unknown, and the CLI exits with the dedicated ExitAwaitError code (10) #25278
• [cli/env] Add pulumi env change-request commands for working with change requests #25122

Bug Fixes

• [cli] Name the directory searched in the no Pulumi.yaml project file found error of pulumi preview, refresh, import, logs and install instead of leaving it empty #25187
• [sdk] Keep the unknown outputs of remote components, such as those that depend on an awaiting or failed child, instead of resolving them as empty values #25291

Improvements

• [cli/env] Use --organization/-o to select the organization in pulumi env setup commands #25231
• [engine] Return dry-run outputs to dependents of resources skipped under --continue-on-error, instead of failing their registrations #25227

v3.271.0

3.271.0 (2026-10-21)

Features

• [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #25228
• [cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #25280
• [auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #25071
• [auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #25073

Bug Fixes

• [engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #25222
• [cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #24665
• [engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #24973
• [engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #24995
• [pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #25112
• [sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #25168
• [sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #25169
• [sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #25181
• [sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #25273

Improvements

• [cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #25257
• [protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #25277

v3.270.0

3.270.0 (2026-10-16)

Bug Fixes

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.272.0 (2026-10-22)

Features

• [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their exceptions #25290
• [engine] Add an AwaitError provider protocol error indicating an operation needs to be awaited; the deployment continues, the resource's outputs are unknown, and the CLI exits with the dedicated ExitAwaitError code (10) #25278
• [cli/env] Add pulumi env change-request commands for working with change requests #25122

Bug Fixes

• [cli] Name the directory searched in the no Pulumi.yaml project file found error of pulumi preview, refresh, import, logs and install instead of leaving it empty #25187
• [sdk] Keep the unknown outputs of remote components, such as those that depend on an awaiting or failed child, instead of resolving them as empty values #25291

Improvements

• [cli/env] Use --organization/-o to select the organization in pulumi env setup commands #25231
• [engine] Return dry-run outputs to dependents of resources skipped under --continue-on-error, instead of failing their registrations #25227

3.271.0 (2026-10-21)

Features

• [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #25228
• [cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #25280
• [cli/policy] Apply the policy exceptions Pulumi Cloud sends for required policy packs #25284
• [auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #25071
• [auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #25073

Bug Fixes

• [engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #25222
• [cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #24665
• [engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #24973
• [engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #24995
• [pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #25112
• [sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #25168
• [sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #25169
• [sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #25181
• [sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #25273

Improvements

• [cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #25257
• [protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #25277

3.270.0 (2026-10-16)

Bug Fixes

• [cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the environment; on a conflict, env edit reopens the editor with your edits and the current definition, and the others fail #24983
• [cli] Report an unknown drift status in pulumi stack drift status when drift detection has never run #25172

Commits

• 8a99ec5 Keep the unknown outputs of remote components (#25291)
• 701581d Migrate conformance tests to property.Map (#25308)
• 0cbf317 Add AwaitError to the provider protocol (#25278)
• 2e7fe6f Add pulumi env change-request commands (#25122)
• 37b5fcc Use --organization/-o in pulumi env setup commands (#25231)
• c2c8ca2 Show policy violations that an exception exempts (#25290)
• d0938ae Pin bun (#25332)
• 910c80d Remove automation overrides for commands that no longer exist (#25074)
• c17c167 New policy test to check secrets and unknowns don't crash the policy pack (#2...
• 7847d65 Regenerate automation APIs (#25314)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions