Update first-party Pulumi dependencies to v3.258.0

[pulumi-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@pulumi/pulumi (source)	3.257.0 → 3.258.0			dependencies	minor
pulumi/pulumi	3.257.0-nonroot → 3.258.0-nonroot			final	minor

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pulumi/pulumi (@​pulumi/pulumi)

v3.258.0

Compare Source

3.258.0 (2026-08-17)

Features

• [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #​24212
• [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #​24226
• [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack #​24232

Bug Fixes

• [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens #​24288
• [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces #​24288
• [cli/import] pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them #​24261
• [auto/python] Add missing program argument on preview_refresh and preview_destroy stack methods #​24274
• [cli/new] Fix cloning templates and repositories into paths containing symlinks with absolute targets #​24329
• [cli/do] Fix global project lookup #​24334

Improvements

• [sdk/python] Use the resource monitor's advertised feature set consistently throughout the Python SDK #​24308

Miscellaneous

• [cli] Rewrite the pulumi login and pulumi logout help text to cover all supported state backends and document PULUMI_ACCESS_TOKEN, --default-org, and --interactive #​24319

pulumi/pulumi-docker-containers (pulumi/pulumi)

v3.258.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.56%. Comparing base (a35006f) to head (cea5d30).
⚠️ Report is 111 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1309      +/-   ##
==========================================
+ Coverage   55.95%   56.56%   +0.61%     
==========================================
  Files          34       35       +1     
  Lines        4130     4506     +376     
==========================================
+ Hits         2311     2549     +238     
- Misses       1594     1720     +126     
- Partials      225      237      +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.