chore(deps): update all dependencies

[doa-renovate]

This PR contains the following updates:

Package	Update	Change
Infisical/cli	minor	v0.43.145 → v0.44.0
pulumi/pulumi	minor	v3.268.0 → v3.269.0

---

Release Notes

Infisical/cli

v0.44.0

Compare Source

What's Changed

• feat(cli): add sm namespace for secrets management commands by @​victorvhs017 in #​427

Full Changelog: Infisical/cli@v0.43.145...v0.44.0

pulumi/pulumi

v3.269.0

Compare Source

3.269.0 (2026-10-14)

Features

• [sdk] Add runtime functions to the Go, Node.js and Python SDKs that check whether a resource with a given ID exists without adopting it into the stack #​24808
• [engine] Negotiate OutputValues on Call so SDKs receive per-value return dependencies #​25017
• [auto] Add convert to the generated automation APIs for NodeJS, Python and Go #​25050
• [auto] Add refresh to the generated automation APIs for NodeJS, Python and Go #​25052
• [auto] Add about commands to the generated automation APIs for NodeJS, Python and Go #​25066
• [auto] Add config commands to the generated automation APIs for NodeJS, Python and Go #​25072

Bug Fixes

• [pcl] Accept a lookup default of any type and type the result as the unification of the element type and the default #​24771
• [pcl] Report a missing lookup default at bind time instead of failing when the program runs #​24772
• [pcl] Accept a tuple literal that holds an output where a function or property expects the input form of a tuple, such as length([secret(x)]) #​24782
• [pcl] Fix a panic in the PCL interpreter's entries built-in on a map whose values have different shapes or on an empty map #​24783
• [cli/policy] Fix pulumi policy group edit so that it adds and removes stacks, Policy Packs, and Insights accounts #​24996
• [pcl] Stop lifting a prompt operand's type-conversion wrapper into an unnecessary apply, which produced invalid Go code #​25021
• [cli/new] Fix switching template source when prefixes match #​25087
• [cli] Redact secrets carried on output values in plaintext log output and in pulumi logs share #​25092
• [cli/new] Fix template fetching when changing branches #​25088
• [cli] Log in through the browser on pulumi login in agent mode instead of creating a new agent account #​25107
• [programgen/go] Remove redundant ToIDOutput().ToStringOutput() conversions when passing resource IDs to string inputs #​25101
• [programgen/go] Type object literals of outputs as pulumi.StringMap and friends so they compile and export without a cast #​25108
• [cli/neo] Honor optional refresh settings in agent previews without persisting refreshed state #​25117
• [cli] Stop finished download and unpack progress bars from reappearing below later output, such as the pulumi new success message #​25150
• [sdk/python] Fix Output.recover failing to catch faults that arrive through apply or after the program body has returned #​25164
• [pcl] Recover from failed function calls with recover in the PCL interpreter #​25167
• [pcl] Check assignability of recursive types, such as a schema object that nests itself, without overflowing the stack #​25176
• [pcl] Fix Equals on recursive object types that differ under a cycle #​25177

Improvements

• [cli/policy] Run OPA policy packs through the pulumi-language-opa language plugin, which the CLI downloads on demand, and stop falling back to a pulumi-analyzer-policy-<runtime> plugin for policy packs whose runtime has no language plugin #​24784
• [cli/new] Mark npm as the recommended package manager when prompting in pulumi new #​25098
• [sdk/go] Make IDInput and URNInput satisfy StringInput, and AssetInput and ArchiveInput satisfy AssetOrArchiveInput #​25101
• [cli/new] Skip the package manager prompt for new Node.js projects when only one package manager is installed #​25151
• [cli/new] Use pip without prompting for a toolchain in pulumi new when neither Poetry nor uv is installed #​25158
• [cli] Make pulumi logs error by default before its removal #​25201
• [cli] Make pulumi watch error by default before its removal #​25202

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.