build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.267.0 to 3.268.0 in /deploy in the deploy-go-dependencies group

[dependabot]

Bumps the deploy-go-dependencies group in /deploy with 1 update: github.com/pulumi/pulumi/sdk/v3.

Updates github.com/pulumi/pulumi/sdk/v3 from 3.267.0 to 3.268.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.268.0

3.268.0 (2026-10-07)

Features

• [engine] Negotiate OutputValues on Invoke so SDKs can pass dependency-carrying values in args and receive them in the response, and providers can process them, gated by a new accepts_outputs_in_invoke handshake capability #24953
• [auto] Add version to the generated automation APIs for NodeJS, Python and Go #24990
• [auto] Add whoami to the generated automation APIs for NodeJS, Python and Go #25024
• [auto] Add install to the generated automation APIs for NodeJS, Python and Go #25038

Bug Fixes

• [engine] Restore elided asset contents from prior state when a provider echoes assets back from refresh or update #24570
• [engine] Apply resource transforms declared on an ancestor component to resources parented under a resource read #24689
• [pcl] Unify two recursive object types, or a map with an object, to the same finite type on every run instead of overflowing the stack or picking a different type each time #24805
• [sdkgen/nodejs] Link @pulumi/pulumi types in generated docs to their TypeDoc pages instead of missing anchors #24928
• [engine] Fix snapshot integrity error when untargeted steps change dependencies in the program #24801
• [sdk/nodejs] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [sdk/python] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [cli/package] Download plugins from Git repositories whose version tags have no v prefix #24986
• [engine] Fix a language host process leak when the schema loader boots a plugin that runs in a language host #25002
• [sdkgen] Reject schemas that define a resource named provider in the root module through moduleFormat, instead of panicking during SDK generation #25020
• [engine] Shut down plugins in parallel to avoid timeouts #25026
• [cli/plugin] Fix plugin checksum verification rejecting valid downloads over HTTP/1.1 and ignoring data at the end of the archive #25032
• [cli/new] Fix spurious provider "exited prematurely" error from the pulumi new credentials check, which no longer has a timeout #25030
• [auto] Fix project settings in projects that live in symlinked directories #25046

Improvements

• [backend/service] Send the W3C traceparent header on Pulumi Cloud API calls when --otel-traces is set #25009

Miscellaneous

• [java] Upgrade java to v1.37.4 #25027
• [yaml] Upgrade yaml to v1.38.9 #25027
• [hcl] Upgrade hcl to v0.18.4 #25027
• [sdk/dotnet] Upgrade dotnet to v3.114.2 #25034

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.268.0 (2026-10-07)

Features

• [engine] Negotiate OutputValues on Invoke so SDKs can pass dependency-carrying values in args and receive them in the response, and providers can process them, gated by a new accepts_outputs_in_invoke handshake capability #24953
• [auto] Add version to the generated automation APIs for NodeJS, Python and Go #24990
• [auto] Add whoami to the generated automation APIs for NodeJS, Python and Go #25024
• [auto] Add install to the generated automation APIs for NodeJS, Python and Go #25038

Bug Fixes

• [engine] Restore elided asset contents from prior state when a provider echoes assets back from refresh or update #24570
• [engine] Apply resource transforms declared on an ancestor component to resources parented under a resource read #24689
• [pcl] Unify two recursive object types, or a map with an object, to the same finite type on every run instead of overflowing the stack or picking a different type each time #24805
• [sdkgen/nodejs] Link @pulumi/pulumi types in generated docs to their TypeDoc pages instead of missing anchors #24928
• [engine] Fix snapshot integrity error when untargeted steps change dependencies in the program #24801
• [sdk/nodejs] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [sdk/python] Dynamic providers now fall back to the inputs field of a Read request when properties is empty, so Get continues to work after the engine stops duplicating inputs into state #24977
• [cli/package] Download plugins from Git repositories whose version tags have no v prefix #24986
• [engine] Fix a language host process leak when the schema loader boots a plugin that runs in a language host #25002
• [sdkgen] Reject schemas that define a resource named provider in the root module through moduleFormat, instead of panicking during SDK generation #25020
• [engine] Shut down plugins in parallel to avoid timeouts #25026
• [cli/plugin] Fix plugin checksum verification rejecting valid downloads over HTTP/1.1 and ignoring data at the end of the archive #25032
• [cli/new] Fix spurious provider "exited prematurely" error from the pulumi new credentials check, which no longer has a timeout #25030
• [auto] Fix project settings in projects that live in symlinked directories #25046

Improvements

• [backend/service] Send the W3C traceparent header on Pulumi Cloud API calls when --otel-traces is set #25009

Miscellaneous

• [java] Upgrade java to v1.37.4 #25027
• [yaml] Upgrade yaml to v1.38.9 #25027
• [hcl] Upgrade hcl to v0.18.4 #25027
• [sdk/dotnet] Upgrade dotnet to v3.114.2 #25034

Commits

• 128d3f2 pin maven to latest 3.9.* version (#25082)
• 24b14e7 Add install to the generated automation APIs (#25038)
• 93b24ad fix workspace settings path with symlinks (#25046)
• 64298bc TestPackageAddNamespace: retry plugin install (#25048)
• 9174701 Switch some tests to NotZero the map directly (#25044)
• 3d21cef Run the Output.all mixed-inputs message assertion (#25019)
• 5e8fc2c Move operations_aws.go to property.Map (#25045)
• fb0cf4c TestNodejsComponentProviderRun: avoid separate extra plugin installs (#25042)
• 3a669de TestPerfSecretsBatchUpdate: increase timeout (#25041)
• e45b0bb up --target: make untargeted same steps wait for its dependencies (#24801)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions