[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.268.0 to 3.270.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.270.0

3.270.0 (2026-10-16)

Bug Fixes

• [cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the environment; on a conflict, env edit reopens the editor with your edits and the current definition, and the others fail #24983
• [cli] Report an unknown drift status in pulumi stack drift status when drift detection has never run #25172

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.270.0 (2026-10-16)

Bug Fixes

• [cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the environment; on a conflict, env edit reopens the editor with your edits and the current definition, and the others fail #24983
• [cli] Report an unknown drift status in pulumi stack drift status when drift detection has never run #25172

3.269.0 (2026-10-16)

Features

• [sdk] Add runtime functions to the Go, Node.js and Python SDKs that check whether a resource with a given ID exists without adopting it into the stack #24808
• [engine] Negotiate OutputValues on Call so SDKs receive per-value return dependencies #25017
• [auto] Add convert to the generated automation APIs for NodeJS, Python and Go #25050
• [auto] Add refresh to the generated automation APIs for NodeJS, Python and Go #25052
• [auto] Add about commands to the generated automation APIs for NodeJS, Python and Go #25066
• [auto] Add config commands to the generated automation APIs for NodeJS, Python and Go #25072

Bug Fixes

• [pcl] Accept a lookup default of any type and type the result as the unification of the element type and the default #24771
• [pcl] Report a missing lookup default at bind time instead of failing when the program runs #24772
• [pcl] Accept a tuple literal that holds an output where a function or property expects the input form of a tuple, such as length([secret(x)]) #24782
• [pcl] Fix a panic in the PCL interpreter's entries built-in on a map whose values have different shapes or on an empty map #24783
• [cli/policy] Fix pulumi policy group edit so that it adds and removes stacks, Policy Packs, and Insights accounts #24996
• [pcl] Stop lifting a prompt operand's type-conversion wrapper into an unnecessary apply, which produced invalid Go code #25021
• [cli/new] Fix switching template source when prefixes match #25087
• [cli] Redact secrets carried on output values in plaintext log output and in pulumi logs share #25092
• [cli/new] Fix template fetching when changing branches #25088
• [cli] Log in through the browser on pulumi login in agent mode instead of creating a new agent account #25107
• [programgen/go] Remove redundant ToIDOutput().ToStringOutput() conversions when passing resource IDs to string inputs #25101
• [programgen/go] Type object literals of outputs as pulumi.StringMap and friends so they compile and export without a cast #25108
• [cli/neo] Honor optional refresh settings in agent previews without persisting refreshed state #25117
• [cli] Stop finished download and unpack progress bars from reappearing below later output, such as the pulumi new success message #25150
• [sdk/python] Fix Output.recover failing to catch faults that arrive through apply or after the program body has returned #25164
• [pcl] Recover from failed function calls with recover in the PCL interpreter #25167
• [pcl] Check assignability of recursive types, such as a schema object that nests itself, without overflowing the stack #25176
• [pcl] Fix Equals on recursive object types that differ under a cycle #25177
• [backend/diy] Only create the PostgreSQL state table when it doesn't already exist, so roles with read-only access to the table can use the backend #25217
• [codegen/go] Fix Go program generation for split and string length so they produce compilable, Unicode-correct code #25214

Improvements

• [cli/env] Add --reason to pulumi env commands that support --draft to set the change request description #24936
• [engine] Download the Java language runtime on demand instead of bundling it with the CLI #25205
• [cli/policy] Run OPA policy packs through the pulumi-language-opa language plugin, which the CLI downloads on demand, and stop falling back to a pulumi-analyzer-policy-<runtime> plugin for policy packs whose runtime has no language plugin #24784
• [cli/new] Mark npm as the recommended package manager when prompting in pulumi new #25098
• [sdk/go] Make IDInput and URNInput satisfy StringInput, and AssetInput and ArchiveInput satisfy AssetOrArchiveInput #25101
• [cli/new] Skip the package manager prompt for new Node.js projects when only one package manager is installed #25151
• [cli/new] Use pip without prompting for a toolchain in pulumi new when neither Poetry nor uv is installed #25158
• [cli] Make pulumi watch error by default before its removal #25202

... (truncated)

Commits

• 4162541 Skip to 3.270.0 (#25263)
• a02182c Add AcceptsOutputsInCheck handshake negotiation (#25258)
• 8b5758d Send If-Match on ESC environment updates (#24983)
• a8f99f1 Fetch ESC secrets in the npm CLI wrapper release job (#25255)
• bed7dbd Report an unknown drift status when drift detection has never run (#25172)
• a5330f7 Filter methods for RPC marshalling (#25211)
• 1ae6b81 Changelog and go.mod updates for v3.269.0 (#25253)
• c7569fa Freeze v3.269.0 (#25250)
• 194c65d Revert "Freeze v3.269.0" (#25247)
• 9dfd2db Freeze v3.269.0 (#25245)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)