[dependabot]

Bumps the all group with 2 updates in the / directory: github.com/bmatcuk/doublestar/v4 and github.com/pulumi/pulumi/sdk/v3.

Updates github.com/bmatcuk/doublestar/v4 from 4.10.2 to 4.10.3

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Handles character ranges when using WithCaseInsensitive

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @​bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

Commits

• 03688d3 fix tests
• 7ac7790 case-insensitive character ranges
• a922627 run symlink tests on windows
• See full diff in compare view

Updates github.com/pulumi/pulumi/sdk/v3 from 3.265.0 to 3.269.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.268.0

3.268.0 (2026-10-07)

Features

• [engine] Negotiate OutputValues on Invoke so SDKs can pass dependency-carrying values in args and receive them in the response, and providers can process them, gated by a new accepts_outputs_in_invoke handshake capability #24953
• [auto] Add version to the generated automation APIs for NodeJS, Python and Go #24990
• [auto] Add whoami to the generated automation APIs for NodeJS, Python and Go #25024
• [auto] Add install to the generated automation APIs for NodeJS, Python and Go #25038

Bug Fixes

• [engine] Restore elided asset contents from prior state when a provider echoes assets back from refresh or update #24570
• [engine] Apply resource transforms declared on an ancestor component to resources parented under a resource read #24689
• [pcl] Unify two recursive object types, or a map with an object, to the same finite type on every run instead of overflowing the stack or picking a different type each time #24805
• [sdkgen/nodejs] Link @pulumi/pulumi types in generated docs to their TypeDoc pages instead of missing anchors #24928
• [engine] Fix snapshot integrity error when untargeted steps change dependencies in the program #24801
• [sdk/nodejs] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [sdk/python] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [cli/package] Download plugins from Git repositories whose version tags have no v prefix #24986
• [engine] Fix a language host process leak when the schema loader boots a plugin that runs in a language host #25002
• [sdkgen] Reject schemas that define a resource named provider in the root module through moduleFormat, instead of panicking during SDK generation #25020
• [engine] Shut down plugins in parallel to avoid timeouts #25026
• [cli/plugin] Fix plugin checksum verification rejecting valid downloads over HTTP/1.1 and ignoring data at the end of the archive #25032
• [cli/new] Fix spurious provider "exited prematurely" error from the pulumi new credentials check, which no longer has a timeout #25030
• [auto] Fix project settings in projects that live in symlinked directories #25046

Improvements

• [backend/service] Send the W3C traceparent header on Pulumi Cloud API calls when --otel-traces is set #25009

Miscellaneous

• [java] Upgrade java to v1.37.4 #25027
• [yaml] Upgrade yaml to v1.38.9 #25027
• [hcl] Upgrade hcl to v0.18.4 #25027
• [sdk/dotnet] Upgrade dotnet to v3.114.2 #25034

v3.267.0

3.267.0 (2026-10-01)

Bug Fixes

• [cli/new] Fix concurrent pulumi new runs failing to clone the templates repository #24939
• [sdk/python] Fix pulumi install for Python plugins and policy packs that use the uv toolchain and a [build-system] table #24951

v3.266.0

3.266.0 (2026-09-30)

Bug Fixes

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.269.0 (2026-10-16)

Features

• [sdk] Add runtime functions to the Go, Node.js and Python SDKs that check whether a resource with a given ID exists without adopting it into the stack #24808
• [engine] Negotiate OutputValues on Call so SDKs receive per-value return dependencies #25017
• [auto] Add convert to the generated automation APIs for NodeJS, Python and Go #25050
• [auto] Add refresh to the generated automation APIs for NodeJS, Python and Go #25052
• [auto] Add about commands to the generated automation APIs for NodeJS, Python and Go #25066
• [auto] Add config commands to the generated automation APIs for NodeJS, Python and Go #25072

Bug Fixes

• [pcl] Accept a lookup default of any type and type the result as the unification of the element type and the default #24771
• [pcl] Report a missing lookup default at bind time instead of failing when the program runs #24772
• [pcl] Accept a tuple literal that holds an output where a function or property expects the input form of a tuple, such as length([secret(x)]) #24782
• [pcl] Fix a panic in the PCL interpreter's entries built-in on a map whose values have different shapes or on an empty map #24783
• [cli/policy] Fix pulumi policy group edit so that it adds and removes stacks, Policy Packs, and Insights accounts #24996
• [pcl] Stop lifting a prompt operand's type-conversion wrapper into an unnecessary apply, which produced invalid Go code #25021
• [cli/new] Fix switching template source when prefixes match #25087
• [cli] Redact secrets carried on output values in plaintext log output and in pulumi logs share #25092
• [cli/new] Fix template fetching when changing branches #25088
• [cli] Log in through the browser on pulumi login in agent mode instead of creating a new agent account #25107
• [programgen/go] Remove redundant ToIDOutput().ToStringOutput() conversions when passing resource IDs to string inputs #25101
• [programgen/go] Type object literals of outputs as pulumi.StringMap and friends so they compile and export without a cast #25108
• [cli/neo] Honor optional refresh settings in agent previews without persisting refreshed state #25117
• [cli] Stop finished download and unpack progress bars from reappearing below later output, such as the pulumi new success message #25150
• [sdk/python] Fix Output.recover failing to catch faults that arrive through apply or after the program body has returned #25164
• [pcl] Recover from failed function calls with recover in the PCL interpreter #25167
• [pcl] Check assignability of recursive types, such as a schema object that nests itself, without overflowing the stack #25176
• [pcl] Fix Equals on recursive object types that differ under a cycle #25177
• [backend/diy] Only create the PostgreSQL state table when it doesn't already exist, so roles with read-only access to the table can use the backend #25217
• [codegen/go] Fix Go program generation for split and string length so they produce compilable, Unicode-correct code #25214

Improvements

• [cli/env] Add --reason to pulumi env commands that support --draft to set the change request description #24936
• [engine] Download the Java language runtime on demand instead of bundling it with the CLI #25205
• [cli/policy] Run OPA policy packs through the pulumi-language-opa language plugin, which the CLI downloads on demand, and stop falling back to a pulumi-analyzer-policy-<runtime> plugin for policy packs whose runtime has no language plugin #24784
• [cli/new] Mark npm as the recommended package manager when prompting in pulumi new #25098
• [sdk/go] Make IDInput and URNInput satisfy StringInput, and AssetInput and ArchiveInput satisfy AssetOrArchiveInput #25101
• [cli/new] Skip the package manager prompt for new Node.js projects when only one package manager is installed #25151
• [cli/new] Use pip without prompting for a toolchain in pulumi new when neither Poetry nor uv is installed #25158
• [cli] Make pulumi watch error by default before its removal #25202
• [cli] Make pulumi logs error by default before its removal #25201

3.268.0 (2026-10-07)

Features

• [engine] Negotiate OutputValues on Invoke so SDKs can pass dependency-carrying values in args and receive them in the response, and providers can process them, gated by a new accepts_outputs_in_invoke handshake capability #24953

... (truncated)

Commits

• 194c65d Revert "Freeze v3.269.0" (#25247)
• 9dfd2db Freeze v3.269.0 (#25245)
• ddb7458 Only create the PostgreSQL state table when it doesn't already exist (#25217)
• 463235d Fix Go program generation for split and string length (#25214)
• 4e9f82d Prime the batch decrypter instead of threading state into deserialize (#25183)
• 1109c33 Grant id-token: write to release reusable workflow calls (#25233)
• bb43915 Revert "Freeze v3.269.0" (#25241)
• 69b077a Freeze v3.269.0 (#25229)
• ce4b502 Add --reason to pulumi env commands that support --draft (#24936)
• 83e06ed Unbundle the Java language runtime and download it on demand (#25205)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions