Update first-party Pulumi dependencies to v3.254.0

[pulumi-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@pulumi/pulumi (source)	3.253.0 → 3.254.0			dependencies	minor
pulumi/pulumi	3.253.0-nonroot → 3.254.0-nonroot			final	minor

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pulumi/pulumi (@​pulumi/pulumi)

v3.254.0

Compare Source

3.254.0 (2026-07-23)

Features

• [cli] Add pulumi logs share command for sharing logs with Pulumi #​22546
• [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #​22902
• [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #​23562
• [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #​23886
• [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #​23835
• [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #​23932
• [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #​23813
• [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #​23945
• [cli/do] Allow expressions for number inputs #​23954
• [cli/do] Allow expressions for boolean inputs #​23967
• [cli/policy] Add --runtime-options to pulumi policy new #​23992
• [cli/do] Add support for stateful create #​23996
• [cli/do] Add support for stateful delete #​24000

Bug Fixes

• [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #​22524
• [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #​23935
• [engine] Validate snippets before persisting them #​23920
• [backend] Fix dangling ReplaceWith references in the journal replayer #​23927
• [cli/do] Fix the converter plugin not being called if just attributes needed converting #​23948
• [programgen/go] Generate compilable Go for programs that use discriminated union members as array/list elements #​23980

Improvements

• [cli] Align commands with the CLI naming guidelines, adding ls, rm, delete, mv, update, modify, create and setup aliases to list/remove/move/edit/new commands and making state remove and package remove the canonical names with delete kept as an alias #​23903
• [cli] Suggest closely-matching commands from the whole command tree when an unknown command is entered #​23848
• [cli] Print help but exit with a non-zero code when pulumi is run without a command, matching the behavior of other group commands #​23848
• [programgen] Support onError resource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #​23839
• [protobuf] Add parent and properties fields to ResourceImport so state converters can express resource hierarchy and property filters #​23929
• [protobuf] Allow state converters to declare explicit providers as resources in ConvertState responses and attach imported resources to them via the new provider field #​23975
• [cli] Redact secrets in property values in logs #​23931
• [cli] Make -v<n> --logflow no longer produce separate log files for plugins #​23938
• [protobuf] Pass a schema loader target to state converters in ConvertStateRequest #​23944
• [cli/import] Allow explicit providers to be declared in the resources section of an import file and referenced by name #​23972
• [cli] Remove the template count from pulumi new --help, which required a slow template listing before help could display #​23973
• [cli/import] Support inputs and outputs on resources in import files, importing supplied state directly and skipping the provider read when outputs are given #​23984

Miscellaneous

• [sdk] Move RetrieveGitFolder to the gitutil package #​23955
• [sdk] Move template helpers from workspace to pkg/cmd/pulumi/templates #​23963

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.53%. Comparing base (a35006f) to head (c01d439).
⚠️ Report is 99 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1281      +/-   ##
==========================================
+ Coverage   55.95%   56.53%   +0.57%     
==========================================
  Files          34       35       +1     
  Lines        4130     4498     +368     
==========================================
+ Hits         2311     2543     +232     
- Misses       1594     1718     +124     
- Partials      225      237      +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.