build(deps): bump the deploy-go-dependencies group in /deploy with 2 updates

[dependabot]

Bumps the deploy-go-dependencies group in /deploy with 2 updates: github.com/pulumi/pulumi-kubernetes/sdk/v4 and github.com/pulumi/pulumi/sdk/v3.

Updates github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.34.0 to 4.34.1

Release notes

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's releases.

v4.34.1

Fixed

• #4588 Fix a crash on CRD schema generation with nullable: true fields.

Changelog

Sourced from github.com/pulumi/pulumi-kubernetes/sdk/v4's changelog.

CHANGELOG

Unreleased

Fixed

• #4603 Fix a lookup condition where one parameterization package name clobbered the other

Commits

• d3e92bf Prepare for v4.34.1 release (#4592)
• a385981 CRD schema gen: Fix nullable types (#4590)
• 27fc005 Update GitHub Actions workflows. (#4587)
• ace9010 Record removed scheduling.k8s.io group/versions and detect future removals (#...
• aaf05e0 Update dependency @​pulumi/gcp to v9.36.0 (#4582)
• 687261d Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3...
• 99ffef8 Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 to v3...
• See full diff in compare view

Updates github.com/pulumi/pulumi/sdk/v3 from 3.261.0 to 3.262.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.262.0

3.262.0 (2026-09-10)

Features

• [engine] Support importing a pulumi:index:Stash resource. The stash adopts the given id and holds a null value, and the program's configured input then applies as an update #24544

Bug Fixes

• [auto/go] Match wrapped errors in the Automation API error predicates, and unwrap the underlying cause #24197
• [cli/deployment] Stop pulumi deployment settings edit clearing settings it was not asked to change, let --branch and --commit replace one another rather than be combined, and reject --oidc-*-clear=false instead of ignoring it #24525
• [cli] Re-validate an agent account claim marked unavailable instead of trusting the stale marker forever #24495
• [cli] Verify TLS certificates when downloading a template from a URL outside the configured service #24504
• [engine] Propagate --target-dependents and --exclude-dependents through resources read with .get() #24538
• [engine] Run state migrations for aliased remote components #24545
• [engine] Sort resources deterministically when repairing a snapshot #24551
• [engine] Fix state migration ordering for components interleaved with other resources #24552
• [sdk] Allow Automation API project settings to use any language runtime #24559
• [engine] Redact secret property values in violates plan error messages unless --show-secrets is passed #24567
• [cli] Treat a resource provider attached through PULUMI_DEBUG_PROVIDERS as installed, so package installation does not try to download it #24572
• [cli] Install the packages a local plugin directory requires before the plugin is installed and run #24576
• [engine] Avoid a deadlock when a resource provider asks the engine to load another plugin while it boots #24571
• [engine] Allow component state migrations to split managed state using compatible existing resource identities #24582
• [sdk/go] Allow outputs and prompt values to be marshalled into fields typed as input interfaces, such as pulumi.StringInput #24577
• [backend/diy] Make sure disableSSL doesn't override explicitly specified protocols #24593
• [cli] Fix pulumi install for a project that requires a resource provider attached through PULUMI_DEBUG_PROVIDERS #24604
• [cli] Resolve a project's relative plugin and package paths against the project directory when a plugin starts from a subdirectory of the project #24596
• [sdk/go] Report the source position of the user code that calls a generated resource getter instead of the getter body #24602
• [engine] Normalize successor references between chained component state migration callbacks #24598
• [cli/new] Error out on ambiguous template names instead of failing silently #24607

Improvements

• [cli/plugin] Correct pulumi plugin rm help text to note that the CLI re-downloads removed plugins automatically #24618
• [cli] Add --filter to pulumi api list to filter endpoints by keyword #24594
• [cli/new] Warn in interactive pulumi new when cloud credentials are missing or invalid for providers that opt in via the new validateCredentialsOnNew and configurationDocsUrl schema fields #24456
• [sdk/nodejs] Add helper methods to transform ResourceOptions to InvokeOptions #24534
• [cli] Read stack outputs for stack references through the Pulumi Cloud stack outputs endpoint when the service advertises it, instead of exporting the whole deployment #24554
• [sdkgen/python] Replace parver with packaging in generated Python SDKs #24585
• [ci] Skip the unconsumed release-binary rebuild on pull requests #24595
• [engine] Run provider configuration as part of provider create steps so errors are returned associated with the provider resource, not the first resource that uses it #24556
• [backend/service] Improve error messages if default org is invalid #24605

Miscellaneous

• [sdk/dotnet] Upgrade dotnet to v3.113.2 #24590
• [java] Upgrade java to v1.37.0 #24590
• [hcl] Upgrade hcl to v0.17.0 #24590

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.262.0 (2026-09-10)

Features

• [engine] Support importing a pulumi:index:Stash resource. The stash adopts the given id and holds a null value, and the program's configured input then applies as an update #24544

Bug Fixes

• [auto/go] Match wrapped errors in the Automation API error predicates, and unwrap the underlying cause #24197
• [cli/deployment] Stop pulumi deployment settings edit clearing settings it was not asked to change, let --branch and --commit replace one another rather than be combined, and reject --oidc-*-clear=false instead of ignoring it #24525
• [cli] Re-validate an agent account claim marked unavailable instead of trusting the stale marker forever #24495
• [cli] Verify TLS certificates when downloading a template from a URL outside the configured service #24504
• [engine] Propagate --target-dependents and --exclude-dependents through resources read with .get() #24538
• [engine] Run state migrations for aliased remote components #24545
• [engine] Sort resources deterministically when repairing a snapshot #24551
• [engine] Fix state migration ordering for components interleaved with other resources #24552
• [sdk] Allow Automation API project settings to use any language runtime #24559
• [engine] Redact secret property values in violates plan error messages unless --show-secrets is passed #24567
• [cli] Treat a resource provider attached through PULUMI_DEBUG_PROVIDERS as installed, so package installation does not try to download it #24572
• [cli] Install the packages a local plugin directory requires before the plugin is installed and run #24576
• [engine] Avoid a deadlock when a resource provider asks the engine to load another plugin while it boots #24571
• [engine] Allow component state migrations to split managed state using compatible existing resource identities #24582
• [sdk/go] Allow outputs and prompt values to be marshalled into fields typed as input interfaces, such as pulumi.StringInput #24577
• [backend/diy] Make sure disableSSL doesn't override explicitly specified protocols #24593
• [cli] Fix pulumi install for a project that requires a resource provider attached through PULUMI_DEBUG_PROVIDERS #24604
• [cli] Resolve a project's relative plugin and package paths against the project directory when a plugin starts from a subdirectory of the project #24596
• [sdk/go] Report the source position of the user code that calls a generated resource getter instead of the getter body #24602
• [engine] Normalize successor references between chained component state migration callbacks #24598
• [cli/new] Error out on ambiguous template names instead of failing silently #24607

Improvements

• [cli/plugin] Correct pulumi plugin rm help text to note that the CLI re-downloads removed plugins automatically #24618
• [cli] Add --filter to pulumi api list to filter endpoints by keyword #24594
• [cli/new] Warn in interactive pulumi new when cloud credentials are missing or invalid for providers that opt in via the new validateCredentialsOnNew and configurationDocsUrl schema fields #24456
• [sdk/nodejs] Add helper methods to transform ResourceOptions to InvokeOptions #24534
• [cli] Read stack outputs for stack references through the Pulumi Cloud stack outputs endpoint when the service advertises it, instead of exporting the whole deployment #24554
• [sdkgen/python] Replace parver with packaging in generated Python SDKs #24585
• [ci] Skip the unconsumed release-binary rebuild on pull requests #24595
• [engine] Run provider configuration as part of provider create steps so errors are returned associated with the provider resource, not the first resource that uses it #24556
• [backend/service] Improve error messages if default org is invalid #24605

Miscellaneous

• [sdk/dotnet] Upgrade dotnet to v3.113.2 #24590
• [java] Upgrade java to v1.37.0 #24590
• [hcl] Upgrade hcl to v0.17.0 #24590

Commits

• 9c1b6ff Update CheckRequest/Response to use property.Map (#24619)
• 8f56de9 deployment settings: fix the patches edit builds for clearing and for the e...
• f0a9fea Correct pulumi plugin rm help about automatic re-installation (#24618)
• bbff193 Don't run GetRequiredPackages on attached providers (#24604)
• 1b991f9 new: error out on ambiguous templates (#24607)
• 68e69d5 Add tests for serialisation errors (#24560)
• de4a60a Document component state migration (#24310)
• 098d56d Warn about invalid cloud credentials in interactive pulumi new (#24456)
• f050daf Normalize references between state migration callbacks (#24598)
• 9114220 improve error messages for invalid default org (#24605)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions