[dependabot]

Removes @opentelemetry/propagator-jaeger. It's no longer used after updating ancestor dependency @pulumi/pulumi. These dependencies need to be updated together.

Removes @opentelemetry/propagator-jaeger

Updates @pulumi/pulumi from 3.130.0 to 3.254.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.254.0

3.254.0 (2026-07-23)

Features

• [cli] Add pulumi logs share command for sharing logs with Pulumi #22546
• [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902
• [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #23562
• [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886
• [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #23835
• [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #23932
• [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #23813
• [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #23945
• [cli/do] Allow expressions for number inputs #23954
• [cli/do] Allow expressions for boolean inputs #23967
• [cli/policy] Add --runtime-options to pulumi policy new #23992
• [cli/do] Add support for stateful create #23996
• [cli/do] Add support for stateful delete #24000

Bug Fixes

• [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #22524
• [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #23935
• [engine] Validate snippets before persisting them #23920
• [backend] Fix dangling ReplaceWith references in the journal replayer #23927
• [cli/do] Fix the converter plugin not being called if just attributes needed converting #23948
• [programgen/go] Generate compilable Go for programs that use discriminated union members as array/list elements #23980

Improvements

• [cli] Align commands with the CLI naming guidelines, adding ls, rm, delete, mv, update, modify, create and setup aliases to list/remove/move/edit/new commands and making state remove and package remove the canonical names with delete kept as an alias #23903
• [cli] Suggest closely-matching commands from the whole command tree when an unknown command is entered #23848
• [cli] Print help but exit with a non-zero code when pulumi is run without a command, matching the behavior of other group commands #23848
• [programgen] Support onError resource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #23839
• [protobuf] Add parent and properties fields to ResourceImport so state converters can express resource hierarchy and property filters #23929
• [protobuf] Allow state converters to declare explicit providers as resources in ConvertState responses and attach imported resources to them via the new provider field #23975
• [cli] Redact secrets in property values in logs #23931
• [cli] Make -v<n> --logflow no longer produce separate log files for plugins #23938
• [protobuf] Pass a schema loader target to state converters in ConvertStateRequest #23944
• [cli/import] Allow explicit providers to be declared in the resources section of an import file and referenced by name #23972
• [cli] Remove the template count from pulumi new --help, which required a slow template listing before help could display #23973
• [cli/import] Support inputs and outputs on resources in import files, importing supplied state directly and skipping the provider read when outputs are given #23984

Miscellaneous

• [sdk] Move RetrieveGitFolder to the gitutil package #23955
• [sdk] Move template helpers from workspace to pkg/cmd/pulumi/templates #23963

v3.253.0

3.253.0 (2026-07-14)

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

Changelog

3.253.0 (2026-07-14)

Features

• [auto/go] Support --import-pending-creates for refresh command in Go Automation API for preview refresh and refresh operations #23833

Bug Fixes

• [sdk] Precompose filenames to NFC on macOS when matching ignore patterns during archive creation, mirroring git's core.precomposeunicode so composed patterns match decomposed filenames #23566
• [cli] Respect the -v log level again so that without -v only warnings and errors are written to stderr #23910
• [codegen] Correctly generate provider resources declared inside PCL components for Node.js, Python and Go #23904

Improvements

• [cli] Add a --version flag to the pulumi command that prints the version, same as pulumi version #23898
• [cli] Align env commands with the CLI naming guidelines, making list, remove and move the canonical names with ls, rm, delete and mv kept as aliases #23901

3.252.0 (2026-07-13)

Features

• [auto] Add import to the generated automation APIs for NodeJS, Python and Go #23876

Bug Fixes

• [cli] Exit with a non-zero code when a command group such as pulumi env is given an unknown subcommand or no subcommand at all #23814
• [cli] Fix a panic when displaying a stack-level policy violation #23692
• [cli] Make reading non-secret stack outputs and running pulumi about no longer require the passphrase for passphrase-encrypted stacks #23820
• [cli] Avoid pulumi logs <command> showing the log for the currently running command #23887

Improvements

• [cli] Improve the error message when using Pulumi ESC with a DIY backend to suggest logging into Pulumi Cloud #23811
• [cli] Show command name for cli commands when running any command that lists logs #23889
• [cli/display] Render strings containing non-UTF8 bytes as b"" in diffs and JSON output #23870

Bug Fixes

• [cli/do] Fix calling delete on PF resources that need read called first #23837
• [cli/env] Submit the change request created by pulumi env open-request so it is pending approval instead of being left as an unsubmitted draft #23802

Improvements

• [cli/env] Add a --reason flag to pulumi env open-request to explain the request to approvers #23802

Bug Fixes

• [cli/neo] Fix the initial prompt sometimes rendering above the welcome banner in pulumi neo #23831

... (truncated)

Commits

• d7522ff Update module google.golang.org/grpc to v1.82.1 [SECURITY] (#24035)
• 29ac4d9 Make test_fast fast (#24005)
• 68f6673 Remove some outdated dependencies (#23998)
• aca1862 Add accepts_byte_string capability fields to the protocol (#23873)
• e14c323 Update dependency js-yaml to v4.3.0 [SECURITY] (#23997)
• 73ab6ca Add loader_target to ConvertStateRequest (#23944)
• 69afa57 Add explicit provider support to ConvertState responses (#23975)
• 53806e2 Remove the simple-enum-schema SDK codegen test, covered by conformance tests ...
• 0f7e7c4 vendor charmbracelet/bubbles/textinput & atotto/clipboard (#23959)
• 8a79286 Add a language conformance test for onError resource hooks (#23839)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.