build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.232.0 to 3.233.0 in /deploy

[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.232.0 to 3.233.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.233.0

3.233.0 (2026-04-30)

Features

• [auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api #22638

• [cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on #22494

• [cli] Implement the filesystem__grep and filesystem__content_replace local tools for pulumi neo. grep runs a regex search across files in the project root with an optional include glob filter and returns results in path:lineno: line form. content_replace performs a literal multi-file search-and-replace with a file_pattern glob and dry_run preview mode. Both tools skip binary files, hidden directories, and node_modules, and reject paths outside the project root. Their input schemas match the cloud-side tool definitions.

  #22655

• [cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo agent. The Neo TUI renders a persistent bordered block for each operation that streams changed resources and diagnostics as the engine runs and finalizes with a summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

  #22697

• [engine] Add List to the provider protocol and schema #22693

Bug Fixes

• [engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!" #22679

• [programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously PCL bound every method call's return type as Output<T>, which caused downstream program-gen to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g. methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

  #22696

• [backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages #22701

• [codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg>

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.233.0 (2026-04-30)

Features

• [auto/python] Expose the auto-generated Pulumi CLI interface as workspace.cli_api #22638

• [cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on #22494

• [cli] Implement the filesystem__grep and filesystem__content_replace local tools for pulumi neo. grep runs a regex search across files in the project root with an optional include glob filter and returns results in path:lineno: line form. content_replace performs a literal multi-file search-and-replace with a file_pattern glob and dry_run preview mode. Both tools skip binary files, hidden directories, and node_modules, and reject paths outside the project root. Their input schemas match the cloud-side tool definitions.

  #22655

• [cli] Add pulumi_preview and pulumi_up as local tools for the experimental pulumi neo agent. The Neo TUI renders a persistent bordered block for each operation that streams changed resources and diagnostics as the engine runs and finalizes with a summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.

  #22697

• [engine] Add List to the provider protocol and schema #22693

Bug Fixes

• [engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native scaleway provider alongside a terraform-provider bridge parameterized as scaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!" #22679

• [programgen] Do not wrap a call(...) on a method whose return type is marked plain in an Output. Previously PCL bound every method call's return type as Output<T>, which caused downstream program-gen to emit broken .apply(...)/.ApplyT(...) traversals against plain struct returns (e.g. methods with liftSingleValueMethodReturns=true or ReturnTypePlain=true).

  #22696

• [backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages #22701

• [codegen/go] Generate unqualified Provider references for the package's own provider resource. Previously the Go codegen always emitted <pkg>.Provider even when the reference appeared inside <pkg> itself, producing identifiers that would not compile. Affects generated code for method return

... (truncated)

Commits

• fa31301 don't stamp vcs information into binaries (#22788)
• 17fd404 double timeout in "does not hang" test (#22789)
• eb6e31d split tests module on macos further (#22790)
• 94dbe64 Remove runInStack from run-policy-pack (#22783)
• a35ec7e retry pip install a few times (#22785)
• 7a4beea Reject schemas with duplicate tokens after applying moduleFormat (#22765)
• 0b914ce unflake TestNodejsComponentProviderRun (#22782)
• 5cd1646 start logging encrypted logs for all pulumi commands (#22494)
• a81ef07 pin more plugin versions in integration tests (#22758)
• 0d2b8bf Update list doc comment (#22777)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)