Update first-party Pulumi dependencies to v3.258.0 (#1309)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|
| [@pulumi/pulumi](https://redirect.github.com/pulumi/pulumi)
([source](https://redirect.github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs))
| [`3.257.0` →
`3.258.0`](https://renovatebot.com/diffs/npm/@pulumi%2fpulumi/3.257.0/3.258.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@pulumi%2fpulumi/3.258.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@pulumi%2fpulumi/3.257.0/3.258.0?slim=true)
| dependencies | minor |
|
[pulumi/pulumi](https://redirect.github.com/pulumi/pulumi-docker-containers)
| `3.257.0-nonroot` → `3.258.0-nonroot` |
![age](https://developer.mend.io/api/mc/badges/age/docker/pulumi%2fpulumi/3.258.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/pulumi%2fpulumi/3.257.0/3.258.0?slim=true)
| final | minor |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/755) for more information.

---

### Release Notes

<details>
<summary>pulumi/pulumi (@&#8203;pulumi/pulumi)</summary>

###
[`v3.258.0`](https://redirect.github.com/pulumi/pulumi/releases/tag/v3.258.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi/compare/v3.257.0...v3.258.0)

##### 3.258.0 (2026-08-17)

##### Features

- \[cli] Add opt-in encryption of stored credentials with a key
protected by the operating system, selected with
`PULUMI_CREDENTIAL_STORE`
[#&#8203;24212](https://redirect.github.com/pulumi/pulumi/pull/24212)
- \[cli/new] Ask for a cloud provider and language in interactive
`pulumi new` instead of listing every template
[#&#8203;24226](https://redirect.github.com/pulumi/pulumi/pull/24226)
- \[sdk/go] Add `policyx.NewStackValidationPolicy` and wire up the
analyzer's `AnalyzeStack` RPC so Go policy packs can validate the full
stack
[#&#8203;24232](https://redirect.github.com/pulumi/pulumi/pull/24232)

##### Bug Fixes

- \[sdkgen/go] Generate valid Go package clauses for schema modules
whose names contain hyphens
[#&#8203;24288](https://redirect.github.com/pulumi/pulumi/pull/24288)
- \[sdkgen/nodejs] Export schema modules whose names contain hyphens
under a valid sanitized identifier, including their type namespaces
[#&#8203;24288](https://redirect.github.com/pulumi/pulumi/pull/24288)
- \[cli/import] `pulumi preview --import-file` no longer emits unknown
values, and `pulumi import` rejects files that contain them
[#&#8203;24261](https://redirect.github.com/pulumi/pulumi/pull/24261)
- \[auto/python] Add missing `program` argument on `preview_refresh` and
`preview_destroy` stack methods
[#&#8203;24274](https://redirect.github.com/pulumi/pulumi/pull/24274)
- \[cli/new] Fix cloning templates and repositories into paths
containing symlinks with absolute targets
[#&#8203;24329](https://redirect.github.com/pulumi/pulumi/pull/24329)
- \[cli/do] Fix global project lookup
[#&#8203;24334](https://redirect.github.com/pulumi/pulumi/pull/24334)

##### Improvements

- \[sdk/python] Use the resource monitor's advertised feature set
consistently throughout the Python SDK
[#&#8203;24308](https://redirect.github.com/pulumi/pulumi/pull/24308)

##### Miscellaneous

- \[cli] Rewrite the `pulumi login` and `pulumi logout` help text to
cover all supported state backends and document `PULUMI_ACCESS_TOKEN`,
`--default-org`, and `--interactive`
[#&#8203;24319](https://redirect.github.com/pulumi/pulumi/pull/24319)

</details>

<details>
<summary>pulumi/pulumi-docker-containers (pulumi/pulumi)</summary>

###
[`v3.258.0`](https://redirect.github.com/pulumi/pulumi-docker-containers/compare/3.257.0...3.258.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-docker-containers/compare/3.257.0...3.258.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Monday through Friday (`* * * * 1-5`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImltcGFjdC9uby1jaGFuZ2Vsb2ctcmVxdWlyZWQiXX0=-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

examples/custom-source/Dockerfile

@@ -1,4 +1,4 @@
-FROM pulumi/pulumi:3.257.0-nonroot@sha256:b0377c031c065bbece36a8e3fac1e431b7fdeccf6018c4d5df1d642ae9e1dff8
+FROM pulumi/pulumi:3.258.0-nonroot@sha256:76728fd277e72c23c2e5d7014128a2603ab002d1c33cbbe1fdbc3c8425c328fb
 
 # Clone the git repository
 RUN git clone --depth 1 https://github.com/pulumi/examples.git /home/pulumi/examples

examples/pulumi-ts/package-lock.json

@@ -7,7 +7,7 @@
     },
     "dependencies": {
         "@pulumi/kubernetes": "4.33.0",
-        "@pulumi/pulumi": "3.257.0",
+        "@pulumi/pulumi": "3.258.0",
         "@pulumi/pulumiservice": "1.3.0"
     }
 }