[doa-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/renovatebot/renovate (source)	minor	44.175.5 → 44.176.0
pulumi/pulumi	minor	v3.270.0 → v3.271.0

---

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

v44.176.0

Compare Source

Features

• deps: update renovate-base-image to v13.139.0 (main) (#​47275) (11db0f2)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.48.0 (main) (#​47272) (6924b7b)
• deps: update github/codeql-action action to v4.39.1 (main) (#​47273) (43af5fa)

pulumi/pulumi

v3.271.0

Compare Source

3.271.0 (2026-10-21)

Features

• [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #​25228
• [cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #​25280
• [auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #​25071
• [auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #​25073

Bug Fixes

• [engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #​25222
• [cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #​24665
• [engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #​24973
• [engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #​24995
• [pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #​25112
• [sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #​25168
• [sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #​25169
• [sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #​25181
• [sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #​25273

Improvements

• [cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #​25257
• [protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #​25277

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.