Update first-party Pulumi dependencies

[pulumi-renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/pulumi/esc	indirect	minor	v0.20.0 -> v0.21.0
github.com/pulumi/pulumi/pkg/v3	require	minor	v3.207.0 -> v3.214.1

---

Release Notes

pulumi/esc (github.com/pulumi/esc)

v0.21.0

Compare Source

Improvements

• Added support for fn::split built-in function to split strings into arrays.
  #​281
• Add native support for OIDC token exchange when logging into Pulumi Cloud. Run esc login --help for more
  information. #​607

Bug Fixes

Breaking changes

pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)

v3.214.1

Compare Source

3.214.1 (2026-01-03)

Bug Fixes

• [cli/package] Preserve existing behavior when pulumi package add is used with a local provider
  #​21350

• [pkg] Create namespace aliases to avoid Pulumi namespace collisions during codegen
  #​21325

v3.214.0

Compare Source

3.214.0 (2025-12-30)

Features

• [cli] Add --config and --config-path options to destroy and refresh
  #​21299

• [sdkgen] Add OutputStyleOnly flag to functions to not emit their plain variants
  #​21198

• [sdk/python] Add support for replacement_trigger in the Python SDK
  #​20940

Bug Fixes

• [engine] Pass ignoreChanges when issuing no-diff updates that resolve initErrors
  #​21319

• [programgen] Fix a bug in programgen binding to invokes from parameterized packages
  #​21284

• [cli/plugin] Fix plugin download URL overrides for fallback mechanism
  #​21095

Miscellaneous

• [pkg] Upgrade pulumi-java to 1.20.0

v3.213.0

Compare Source

3.213.0 (2025-12-17)

Bug Fixes

• [sdkgen/go] Generate three-level nested builtin output types for Go SDK
  #​21248

Miscellaneous

• [pkg] Move plugin downloading from pkg into sdk
  #​21220

v3.212.0

Compare Source

3.212.0 (2025-12-12)

Bug Fixes

• [yaml] Update pulumi-yaml to v1.26.1

v3.211.0

Compare Source

3.211.0 (2025-12-11)

Features

• [cli/about] Print Node.js package manager information in pulumi about
  #​21163

• [backend/diy] Add stack tags support for DIY backends (S3, Postgres, file-based, etc.).

DIY backends now support stack tags functionality, bringing feature parity with cloud backends.
This includes:

• Full CRUD operations for stack tags (create, read, update, delete)
• Automatic system tag injection (e.g., pulumi:project)
• Tag filtering support in stack listing operations
• Backward compatibility with existing stacks (no tags file required)
• Atomic operations with caching for performance
• Automatic cleanup of tag files when stacks are deleted

Tags are stored as separate .pulumi-tags files alongside stack checkpoints, using a versioned
JSON format. The implementation works across all DIY backend storage types including S3, Azure Blob,
Google Cloud Storage, PostgreSQL, and local file systems.

Example usage:

pulumi stack tag set environment production
pulumi stack tag set owner backend-team
pulumi stack ls --tag-filter environment=production

#​19882

• [backend/service] Improve startup performance with the service as backend
  #​21176

• [sdk/nodejs] Add support for replacement_trigger in the NodeJS SDK
  #​20939

• [sdk/python] Allow setting version for python component providers
  #​21149

Bug Fixes

• [cli/package] Correctly identify the innermost Project/Plugin when running pulumi package add
  #​21137

• [engine] Allow referencing multiple git/github/gitlab components from the same repo
  #​21119

• [programgen/go] Account for name conflicts in resource creation functions
  #​21107

• [sdk/python] Fix cancellation handling in a few places in the python language host
  #​21145

• [sdkgen/go] Fix generation of lifted single-value calls in parameterized SDKs
  #​21115

Miscellaneous

• [cli] Don't attempt to re-install plugin dependencies on load failure for plugins based on git with a nested path
  #​21148

• [sdk/{dotnet,java,yaml}] Bump language runtimes for dotnet, java, and yaml
  #​21201

• [cli/engine] Add language runtime metadata to update metadata
  #​21186

v3.210.0

Compare Source

3.210.0 (2025-12-03)

Features

• [cli/about] Print python toolchain information in pulumi about

• [sdk/java] Update java to v1.18

• [components/nodejs] Local components will use the version from package.json rather than 0.0.0
  #​21100

• [cli/package] Add pulumi package delete command to delete package versions from the Pulumi Registry
  #​21069

• [cli/package] Always print the schema first in package get-schema, then print any binding errors
  #​21080

• [sdk/python] Require grpcio>=1.75.1 on Python 3.14
  #​21113

Bug Fixes

• [sdk/nodejs] Fix ComponentResources transfering input arguments to output properties automatically
  #​21094

Miscellaneous

• [sdk/nodejs] Remove @​types/uuid type declarations dev dependency
  #​21077

v3.209.0

Compare Source

3.209.0 (2025-11-26)

Features

• [cli] Add native support for OIDC token exchange when logging into Pulumi Cloud. Run pulumi login --help for more information.
  #​20974

• [sdk/python] Allow older grpcio and protobuf dependencies
  #​21007

• [sdkgen/{dotnet,go,nodejs,python}] Generate .gitignore and .gitattributes files for generated SDKs
  #​21034

Bug Fixes

• [cli/install] Correctly install non-standard plugins. Seehttps://github.com/pulumi/pulumi/issues/209533 for more information
  #​20983

• [cli/new] Create pyproject.toml for uv and poetry projects when using --generate-only
  #​20979

• [sdk/nodejs] Fix serialization errors due to SxS copies of the SDK
  #​21029

• [sdk/python] Add PropertyValue runtime validation checks
  #​21058

Miscellaneous

• [engine] Don't send root directory and runtime options to language plugins as command line arguments
  #​21054

• [sdk/{dotnet,java,yaml}] Bump language runtimes for yaml, dotnet and java

v3.208.0

Compare Source

3.208.0 (2025-11-20)

Features

• [cli] Expose all command flags as env vars (e.g. --refresh can now be set with PULUMI_OPTION_REFRESH)
  #​20868

• [cli/install] Make pulumi install recurse into local packages
  #​20945

• [engine] Add a replacement_trigger resource option. Any change to this value between program runs will trigger a replace of the resource
  #​20936

• [engine] Add a new builtin Stash resource which can be used to save a value to state
  #​20819

• [protobuf] Add Language.Template RPC to protos
  #​20948

• [sdk/go] Add support for replacement_trigger in the Go SDK
  #​20937

Bug Fixes

• [engine] Fix duplicate resource snapshot integrity issue with aliases
  #​20926

• [engine] Allow resources marked as Delete to be targeted, and take them into account for dependency calculation
  #​20962

• [engine] Fix a panic when previewing and import of a resource that wants to delete and then replace due to diffs
  #​20997

• [pkg] Include invalid property names in bind errors
  #​20989

• [sdk/python] Don’t raise when looking up a stack reference output that does not exist
  #​20938

• [sdkgen/python] Ensure resource args accept typeddicts when no language info is specified
  #​20982

Miscellaneous

• [cli] Document the [template|url] argument in pulumi up command help text
  #​20996

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pulumi-renovate]

ℹ Artifact update notice

File name: tests/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/pulumi/pulumi/sdk/v3	v3.207.0 -> v3.214.1
github.com/spf13/pflag	v1.0.9 -> v1.0.10
golang.org/x/time	v0.5.0 -> v0.12.0

[iwahbe]

The test failure should be fixed by pulumi/pulumi#21340.