fix(deps): update module github.com/pulumi/pulumi/pkg/v3 to v3.260.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pulumi/pulumi/pkg/v3	v3.259.0 → v3.260.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pulumi/pulumi (github.com/pulumi/pulumi/pkg/v3)

v3.260.0

Compare Source

3.260.0 (2026-08-28)

Features

• [cli/deployment] Make pulumi deployment settings get render every source kind and show environment variable values, changing the --output=json shape of environmentVariables from a list of names to a list of objects #​24284
• [sdk/go] Support Go 1.27 #​24401
• [cli/state] Add pulumi state promote to turn stateful snippets into Pulumi program code #​24453

Bug Fixes

• [engine] Replace resources whose deletedWith target is being replaced, instead of leaving them orphaned in state #​23818
• [sdk/python] Serialize typed object stack outputs with their wire-format (camelCase) property names, matching other language SDKs #​24246
• [cli/neo] Cancelling a task now interrupts a running local tool call instead of waiting for it to finish #​24268
• [programgen/python] Access schema properties whose names contain hyphens as attributes under their Python names instead of subscripting #​24300
• [programgen/go] Generate valid struct field names for properties whose names contain hyphens #​24300
• [sdkgen/nodejs] Quote property names that are not legal identifiers (e.g. kebab-case) in generated declarations and use bracket access for them #​24300
• [cli/neo] Cancelling a local tool call no longer leaves the TUI stuck on "Thinking..." with input blocked #​24318
• [sdk/go] Use resolved environment names when evaluating ESC imports #​24375
• [codegen/pcl] Allow output-typed values for the id attribute of a read resource #​24386
• [sdkgen/nodejs] Register resolvers for output-only properties in generated Resource.get so they resolve as unknown during preview when the id is unknown #​24386
• [engine] Avoid replacing imported resources when an input changes from plain to a secret or output-wrapped value with the same inner value #​24387
• [backend/diy] Keep DIY backend stacks readable when checkpoint compression transitions fail #​24383
• [cli/stack] Give a clearer error message when selecting a stack by name outside a directory with a Pulumi.yaml project file #​24394
• [sdk/python] Propagate runtime context across thread boundaries #​24403
• [programgen/python] Name plain function input object types without the Args suffix, matching the name the generated SDK exports #​24440
• [cli/new] Reject zip template entries that resolve outside the extraction directory #​24447
• [cli/package] Keep a package's pluginDownloadURL in SDKs regenerated by pulumi install #​24432
• [sdk/python] Preserve all providers passed to remote components in Python programs #​24443
• [sdkgen] Apply schema defaults to generated Python and Node.js function inputs #​24452
• [programgen/python] Mark required component inputs as required in generated Python TypedDicts #​24459
• [programgen/python] Add type annotations for config variables default values coming from invokes #​24464
• [programgen/python] Generate valid Python when a component with inputs instantiates another component #​24466
• [cli/neo] Stop the running local tool immediately when a Neo task is cancelled and report it as cancelled #​24470
• [programgen/python] Support final argument expansion for min and max in Python programs #​24471

Improvements

• [cli] Treat adjacent character swaps as a single typo when suggesting commands #​23899
• [sdk/python] Correctly resolve discriminated unions by their tag #​24352
• [sdk/python] Allow transforms to be mocked #​24406
• [sdk/nodejs] Allow transforms to be mocked #​24415
• [sdk/go] Allow transforms to be mocked #​24416
• [sdkgen] Allow hyphens in the member segment of tokens, so resource, object type and function names can be kebab-case #​24440
• [cli] Print secret provider information with other stack information #​24430
• [auto/python] Allow refresh, preview_refresh, and preview_destroy to request rich diffs #​24445
• [engine] Cache provider mapping results on disk so repeated plans do not boot a provider to re-fetch an unchanged mapping #​24462
• [sdk/python] Improve stack traces for providers #​24465

Miscellaneous

• [sdk/dotnet] Upgrade dotnet to v3.113.0 #​24441
• [java] Upgrade java to v1.36.2 #​24441
• [yaml] Upgrade yaml to v1.38.4 #​24441

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 15 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26 -> 1.26.6
github.com/pulumi/pulumi/sdk/v3	v3.259.0 -> v3.260.0
github.com/deckarep/golang-set/v2	v2.6.0 -> v2.9.0
go.opentelemetry.io/otel	v1.45.0 -> v1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.45.0 -> v1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.45.0 -> v1.46.0
go.opentelemetry.io/otel/metric	v1.45.0 -> v1.46.0
go.opentelemetry.io/otel/sdk	v1.45.0 -> v1.46.0
go.opentelemetry.io/otel/trace	v1.45.0 -> v1.46.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260825221802-da73d73af1c5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260825221802-da73d73af1c5
google.golang.org/grpc	v1.83.1 -> v1.83.2
go.opentelemetry.io/contrib/bridges/otelslog	v0.20.0 -> v0.20.1
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.21.0 -> v0.22.0
go.opentelemetry.io/otel/log	v0.21.0 -> v0.22.0
go.opentelemetry.io/otel/sdk/log	v0.21.0 -> v0.22.0