chore(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.256.0 to 3.267.0 in /sdk

[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.256.0 to 3.267.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.267.0

3.267.0 (2026-10-01)

Bug Fixes

• [cli/new] Fix concurrent pulumi new runs failing to clone the templates repository #24939
• [sdk/python] Fix pulumi install for Python plugins and policy packs that use the uv toolchain and a [build-system] table #24951

v3.266.0

3.266.0 (2026-09-30)

Bug Fixes

• [sdk/go] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702
• [sdk/python] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702
• [pcl] Order the members of a union type by a fixed structural order rather than by their printed form, so that a recursive object type prints all of its properties and diagnostics list union members consistently #24804
• [cli/new] Avoid printing the provider docs link twice in the pulumi new credentials warning #24925

Improvements

• [cli/neo] Report the console URL and update identifiers in pulumi neo pulumi_preview/pulumi_up tool results #24721
• [sdkgen] Support #/provider doc references in schema descriptions #24918

Miscellaneous

• [sdk/go] Remove workspace.Credentials.AccessTokens and read stored logins only from the accounts object of credentials.json #24922
• [sdk/dotnet] Upgrade dotnet to v3.114.1 #24926
• [java] Upgrade java to v1.37.3 #24926
• [yaml] Upgrade yaml to v1.38.8 #24926
• [hcl] Upgrade hcl to v0.18.3 #24926

v3.265.0

3.265.0 (2026-09-25)

Features

• [cli/auth] Add pulumi logout --all --delete-credentials-key to delete the key that encrypts stored credentials from the OS credential store #24764

Bug Fixes

• [programgen/python] Generate valid Python for output-dependent resource ranges #24474
• [cli/policy] Recover from partial installs & wait for parallel installs #24705
• [cli/install] Cancel cross-process waits with Ctrl-C #24711
• [engine] Report Unknown=true on the ReadResourceResponse when a Read is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs can propagate unknowns to dependents rather than treating empty outputs as real #24747
• [cli/auth] Keep encrypted credentials in other PULUMI_HOME directories readable after pulumi logout --all or pulumi login in one of them #24764
• [engine] Report Unknown=true on the register response when an Import step is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs propagate unknowns to dependents rather than treating empty outputs as real #24774
• [sdkgen/nodejs] Fix generated Node.js SDK compilation for self-referencing resource inputs #24752
• [pcl] Fix a panic when a PCL program indexes a tuple literal with an index equal to its length #24755
• [pcl] Fix a binder panic on nested tuple literals of different shapes, and unify collection literals that hold different constants into one collection type so they can be iterated #24756
• [pcl] Fix the length built-in in the PCL interpreter to accept objects and maps #24757

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.267.0 (2026-10-01)

Bug Fixes

• [cli/new] Fix concurrent pulumi new runs failing to clone the templates repository #24939
• [sdk/python] Fix pulumi install for Python plugins and policy packs that use the uv toolchain and a [build-system] table #24951

3.266.0 (2026-09-30)

Bug Fixes

• [sdk/go] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702
• [sdk/python] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702
• [pcl] Order the members of a union type by a fixed structural order rather than by their printed form, so that a recursive object type prints all of its properties and diagnostics list union members consistently #24804
• [cli/new] Avoid printing the provider docs link twice in the pulumi new credentials warning #24925

Improvements

• [cli/neo] Report the console URL and update identifiers in pulumi neo pulumi_preview/pulumi_up tool results #24721
• [sdkgen] Support #/provider doc references in schema descriptions #24918

Miscellaneous

• [sdk/go] Remove workspace.Credentials.AccessTokens and read stored logins only from the accounts object of credentials.json #24922
• [sdk/dotnet] Upgrade dotnet to v3.114.1 #24926
• [java] Upgrade java to v1.37.3 #24926
• [yaml] Upgrade yaml to v1.38.8 #24926
• [hcl] Upgrade hcl to v0.18.3 #24926

3.265.0 (2026-09-25)

Features

• [cli/auth] Add pulumi logout --all --delete-credentials-key to delete the key that encrypts stored credentials from the OS credential store #24764

Bug Fixes

• [programgen/python] Generate valid Python for output-dependent resource ranges #24474
• [cli/policy] Recover from partial installs & wait for parallel installs #24705
• [cli/install] Cancel cross-process waits with Ctrl-C #24711
• [engine] Report Unknown=true on the ReadResourceResponse when a Read is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs can propagate unknowns to dependents rather than treating empty outputs as real #24747
• [cli/auth] Keep encrypted credentials in other PULUMI_HOME directories readable after pulumi logout --all or pulumi login in one of them #24764
• [engine] Report Unknown=true on the register response when an Import step is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs propagate unknowns to dependents rather than treating empty outputs as real #24774
• [sdkgen/nodejs] Fix generated Node.js SDK compilation for self-referencing resource inputs #24752
• [pcl] Fix a panic when a PCL program indexes a tuple literal with an index equal to its length #24755
• [pcl] Fix a binder panic on nested tuple literals of different shapes, and unify collection literals that hold different constants into one collection type so they can be iterated #24756
• [pcl] Fix the length built-in in the PCL interpreter to accept objects and maps #24757
• [pcl] Add the range built-in to the PCL interpreter #24758
• [pcl] Type min and max as number when any argument is a non-integer literal #24759
• [pcl] Report an error when a number or bool literal is assigned to a property whose schema constant or enum does not admit it #24761
• [pcl] Report a type mismatch on a resource input property that the resource does not also declare as an output #24765
• [pcl] Allow a resource to be assigned to a plain property typed as a reference to its resource type #24763

... (truncated)

Commits

• eaf158c Re-organize login and backend URL tests (#24960)
• 2a41c68 Strengthen login and logout test assertions (#24959)
• 289cf7a Run TestGetTokenValue in parallel (#24958)
• 6fc63e0 Simplify credential-store test fixtures (#24957)
• f20fdd9 Isolate login and credential tests from local authentication (#24950)
• fd80abd Migrate DeleteRequest to property.Map (#24948)
• 7b07107 drop legacy preset for lint (#24952)
• 1a0e5f2 Add l2-invoke-union-dependencies conformance test and fix PCL dep loss (#24944)
• 2803d47 Do not run pip to install Python plugin packages under uv or Poetry (#24951)
• b87d121 Switch the PCL interpreter to use property.{Map,Value} (#24942)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

The latest Buf updates on your PR. Results from workflow CI / buf-lint (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Oct 8, 2026, 11:23 PM