Update first-party Pulumi dependencies

[pulumi-renovate]

This PR contains the following updates:

Package	Type	Update	Change
@pulumi/kubernetes (source)	dependencies	patch	4.24.0 -> 4.24.1
@pulumi/pulumi (source)	dependencies	minor	3.207.0 -> 3.208.0
github.com/pulumi/esc	indirect	minor	v0.17.0 -> v0.20.0

---

Release Notes

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.24.1

Compare Source

pulumi/pulumi (@​pulumi/pulumi)

v3.208.0

Compare Source

3.208.0 (2025-11-20)

Features

• [cli] Expose all command flags as env vars (e.g. --refresh can now be set with PULUMI_OPTION_REFRESH)
  #​20868

• [cli/install] Make pulumi install recurse into local packages
  #​20945

• [engine] Add a replacement_trigger resource option. Any change to this value between program runs will trigger a replace of the resource
  #​20936

• [engine] Add a new builtin Stash resource which can be used to save a value to state
  #​20819

• [protobuf] Add Language.Template RPC to protos
  #​20948

• [sdk/go] Add support for replacement_trigger in the Go SDK
  #​20937

Bug Fixes

• [engine] Fix duplicate resource snapshot integrity issue with aliases
  #​20926

• [engine] Allow resources marked as Delete to be targeted, and take them into account for dependency calculation
  #​20962

• [engine] Fix a panic when previewing and import of a resource that wants to delete and then replace due to diffs
  #​20997

• [pkg] Include invalid property names in bind errors
  #​20989

• [sdk/python] Don’t raise when looking up a stack reference output that does not exist
  #​20938

• [sdkgen/python] Ensure resource args accept typeddicts when no language info is specified
  #​20982

Miscellaneous

• [cli] Document the [template|url] argument in pulumi up command help text
  #​20996

pulumi/esc (github.com/pulumi/esc)

v0.20.0

Compare Source

Improvements

• Added deletion protection for environments:
  • Use esc env settings set [<org-name>/][<project-name>/]<environment-name> deletion-protected true to enable deletion protection
  • Use esc env settings get [<org-name>/][<project-name>/]<environment-name> [deletion-protected] to check the current status
  • When enabled, environments cannot be deleted until protection is disabled
  • Deletion protection is disabled by default for new environments

Bug Fixes

• Environment declarations are now returned even in the face of syntax errors.

Breaking changes

v0.19.0

Compare Source

Improvements

• Added support for Open Approvals #​592

Bug Fixes

Breaking changes

v0.18.0

Compare Source

Improvements

• Added support for fn::concat built-in function to concatenate arrays.
  #​582

Bug Fixes

Breaking changes

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pulumi-renovate]

ℹ Artifact update notice

File name: examples/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.39.0 -> v0.40.0
golang.org/x/exp	v0.0.0-20240719175910-8a7402abbf56 -> v0.0.0-20250718183923-645b1fa84792
golang.org/x/mod	v0.25.0 -> v0.26.0
golang.org/x/net	v0.41.0 -> v0.42.0
golang.org/x/sync	v0.15.0 -> v0.16.0
golang.org/x/sys	v0.33.0 -> v0.34.0
golang.org/x/term	v0.32.0 -> v0.33.0
golang.org/x/text	v0.26.0 -> v0.27.0
golang.org/x/tools	v0.34.0 -> v0.35.0

File name: provider/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.39.0 -> v0.40.0
golang.org/x/exp	v0.0.0-20240719175910-8a7402abbf56 -> v0.0.0-20250718183923-645b1fa84792
golang.org/x/mod	v0.25.0 -> v0.26.0
golang.org/x/net	v0.41.0 -> v0.42.0
golang.org/x/sync	v0.15.0 -> v0.16.0
golang.org/x/sys	v0.33.0 -> v0.34.0
golang.org/x/term	v0.32.0 -> v0.33.0
golang.org/x/text	v0.26.0 -> v0.27.0
golang.org/x/tools	v0.34.0 -> v0.35.0

[github-actions]

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.