[doa-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/renovatebot/renovate (source)	minor	44.220.0 → 44.221.0
pulumi/pulumi	patch	v3.274.0 → v3.274.1

---

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

v44.221.0

Compare Source

Features

• manager/pep621: surface uv.lock transitive deps for security updates (#​47482) (11a4409), closes #​47505
• manager: add julia manager (#​42996) (08f18c7)

Bug Fixes

• workers: keep group branches unchanged after failed lookups (#​47640) (66b9915)

Miscellaneous Chores

• deps: update dependency oxlint-tsgolint to v7.0.2005 (main) (#​47615) (3677fa9)
• deps: update linters (main) (#​47709) (69c19de)

Build System

• retry the image signing and attest the release images (#​47638) (b82309a)

pulumi/pulumi

v3.274.1

Compare Source

3.274.1 (2026-11-05)

Features

• [cli/policy] Add experimental pulumi policy exception new, list, get and remove commands to manage policy exceptions in Pulumi Cloud, hidden behind PULUMI_EXPERIMENTAL #​25417
• [auto] Add org member commands to the generated automation APIs for NodeJS, Python and Go #​25064
• [auto] Add org role commands to the generated automation APIs for NodeJS, Python and Go #​25067

Bug Fixes

• [cli/package] Support publishing npm packages with trusted publishing credentials #​24974
• [cli] Allow a project config key named secret, which was rejected by Pulumi.yaml validation #​25536
• [engine] Fix .NET resource transforms failing when reading secret inputs #​25569
• [engine] Fix resource transforms adding unnecessary Output wrappers to objects with nested dependencies #​25568
• [engine] Revert changes to only send inputs not state to provider reads #​25561

Improvements

• [cli/policy] Describe policy groups and issues in pulumi policy help #​25508
• [cli/policy] Attach the ESC environments listed in the --config file in pulumi policy enable #​25395
• [codegen/pcl] Print syntax.Comment and syntax.TemplateDelimiter trivia that tools build without source text #​25530
• [sdk/python] Preserve argument types for functions decorated with pulumi.runtime.test #​25538
• [sdk/python] Preserve value types and check key types when indexing Python Outputs #​25539

Miscellaneous

• [cli/neo] Update the Neo welcome logo and place the title and greeting below it #​25313
• [pkg] Add an environments parameter to httpstate/client.Client.ApplyPolicyPack #​25395

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.