chore(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.145.0 to 3.1…

…47.0 (#103)

Bumps [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from 3.145.0 to 3.147.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's releases</a>.</em></p>
<blockquote>
<h2>v3.147.0</h2>
<h2>3.147.0 (2025-01-21)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Update go.mod to require go1.22
<a href="https://redirect.github.com/pulumi/pulumi/pull/18274">#18274</a></p>
</li>
<li>
<p>[cli/config] Improve documentation for pulumi config set
<a href="https://redirect.github.com/pulumi/pulumi/pull/18285">#18285</a></p>
</li>
<li>
<p>[cli/package] Allow short hashes as versions in package add
<a href="https://redirect.github.com/pulumi/pulumi/pull/18277">#18277</a></p>
</li>
<li>
<p>[cli/{package,plugin}] Support getting plugins from remote git sources
<a href="https://redirect.github.com/pulumi/pulumi/pull/17827">#17827</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Skip acquiring program packages during refresh when running inline automation programs
<a href="https://redirect.github.com/pulumi/pulumi/pull/18283">#18283</a></p>
</li>
<li>
<p>[sdk/nodejs] Avoid unnecessary Node.js installations
<a href="https://redirect.github.com/pulumi/pulumi/pull/18293">#18293</a></p>
</li>
<li>
<p>[sdk/{nodejs,python}] Fix handling of DependencyResource when checking invoke deps
<a href="https://redirect.github.com/pulumi/pulumi/pull/18275">#18275</a></p>
</li>
<li>
<p>[sdk/{nodejs,python}] Permit output arguments in plain invokes for backwards compatibility
<a href="https://redirect.github.com/pulumi/pulumi/pull/18304">#18304</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Manage the publish dependencies in pyproject.toml
<a href="https://redirect.github.com/pulumi/pulumi/pull/18261">#18261</a></li>
</ul>
<h2>v3.146.0</h2>
<h2>3.146.0 (2025-01-15)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow specifying a version with <code>pulumi convert --from=&lt;plugin&gt;@&lt;version&gt;</code>
<a href="https://redirect.github.com/pulumi/pulumi/pull/18220">#18220</a></p>
</li>
<li>
<p>[cli] Enable Autonaming Configuration in non-experimental mode
<a href="https://redirect.github.com/pulumi/pulumi/pull/18228">#18228</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's changelog</a>.</em></p>
<blockquote>
<h2>3.147.0 (2025-01-21)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Update go.mod to require go1.22
<a href="https://redirect.github.com/pulumi/pulumi/pull/18274">#18274</a></p>
</li>
<li>
<p>[cli/config] Improve documentation for pulumi config set
<a href="https://redirect.github.com/pulumi/pulumi/pull/18285">#18285</a></p>
</li>
<li>
<p>[cli/package] Allow short hashes as versions in package add
<a href="https://redirect.github.com/pulumi/pulumi/pull/18277">#18277</a></p>
</li>
<li>
<p>[cli/{package,plugin}] Support getting plugins from remote git sources
<a href="https://redirect.github.com/pulumi/pulumi/pull/17827">#17827</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Skip acquiring program packages during refresh when running inline automation programs
<a href="https://redirect.github.com/pulumi/pulumi/pull/18283">#18283</a></p>
</li>
<li>
<p>[sdk/nodejs] Avoid unnecessary Node.js installations
<a href="https://redirect.github.com/pulumi/pulumi/pull/18293">#18293</a></p>
</li>
<li>
<p>[sdk/{nodejs,python}] Fix handling of DependencyResource when checking invoke deps
<a href="https://redirect.github.com/pulumi/pulumi/pull/18275">#18275</a></p>
</li>
<li>
<p>[sdk/{nodejs,python}] Permit output arguments in plain invokes for backwards compatibility
<a href="https://redirect.github.com/pulumi/pulumi/pull/18304">#18304</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Manage the publish dependencies in pyproject.toml
<a href="https://redirect.github.com/pulumi/pulumi/pull/18261">#18261</a></li>
</ul>
<h2>3.146.0 (2025-01-15)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow specifying a version with <code>pulumi convert --from=&lt;plugin&gt;@&lt;version&gt;</code>
<a href="https://redirect.github.com/pulumi/pulumi/pull/18220">#18220</a></p>
</li>
<li>
<p>[cli] Enable Autonaming Configuration in non-experimental mode
<a href="https://redirect.github.com/pulumi/pulumi/pull/18228">#18228</a></p>
</li>
<li>
<p>[cli] Retrieve Git metadata from the environment if not running in a repository</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pulumi/pulumi/commit/bcbbcc67c1c6fe043e737e4ce1ae34aedd37390a"><code>bcbbcc6</code></a> Upgrade astral-sh/setup-uv to v5 (<a href="https://redirect.github.com/pulumi/pulumi/issues/18307">#18307</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/cf91d2f5f28051b0fb4f7a784271799da64c2dc8"><code>cf91d2f</code></a> Allow resource annotations to be publicly queried, for real (<a href="https://redirect.github.com/pulumi/pulumi/issues/18302">#18302</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/52c47088309148dd4b9333dfc43766fe1949f767"><code>52c4708</code></a> allow using short hashes for versions in package add (<a href="https://redirect.github.com/pulumi/pulumi/issues/18277">#18277</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/34d2aa32b0e55db4c35a74ed4dc4c74459ad2d54"><code>34d2aa3</code></a> Add some skeletal documentation on the built-in provider (<a href="https://redirect.github.com/pulumi/pulumi/issues/18303">#18303</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/28e6af366bd76245cafab0cf3dd9beb2c0b0dfbe"><code>28e6af3</code></a> document the parsing behaviour of pulumi config set (<a href="https://redirect.github.com/pulumi/pulumi/issues/18285">#18285</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/d5cf13b6cd3839a7cadb58d92971f0182ab56197"><code>d5cf13b</code></a> Permit output arguments in plain invokes for backwards compatibility (<a href="https://redirect.github.com/pulumi/pulumi/issues/18304">#18304</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/a2ab0b96dec04be8cf132a10ec9b318dc11e9819"><code>a2ab0b9</code></a> Avoid unnecessary Node.js installations (<a href="https://redirect.github.com/pulumi/pulumi/issues/18293">#18293</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/aaab6dfca577ec766faaddc3d99e83b396f165d4"><code>aaab6df</code></a> Fix small typo (<a href="https://redirect.github.com/pulumi/pulumi/issues/18300">#18300</a>)</li>
<li><a href="https://github.com/pulumi/pulumi/commit/63fab35215fbea5c8c18e7719ad9370ddc8437ed"><code>63fab35</code></a> [engine/refresh] Skip acquiring program packages during refresh when running ...</li>
<li><a href="https://github.com/pulumi/pulumi/commit/2e95b7b08a5dca0822c6a0a7a164ca0137b62442"><code>2e95b7b</code></a> Fix dev releases for the Python SDK (<a href="https://redirect.github.com/pulumi/pulumi/issues/18291">#18291</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pulumi/pulumi/compare/v3.145.0...v3.147.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.145.0&new-version=3.147.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

go.mod

@@ -5,15 +5,15 @@ go 1.22.0
 require (
 	github.com/pulumi/pulumi-command/sdk v1.0.1
 	github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.19.0
-	github.com/pulumi/pulumi/sdk/v3 v3.145.0
+	github.com/pulumi/pulumi/sdk/v3 v3.147.0
 	github.com/stretchr/testify v1.10.0
 )
 
 require (
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/BurntSushi/toml v1.2.1 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v1.0.0 // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
 	github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
@@ -27,13 +27,13 @@ require (
 	github.com/cheggaaa/pb v1.0.29 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/containerd/console v1.0.4-0.20230313162750-1ae8d489ac81 // indirect
-	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/djherbis/times v1.5.0 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
-	github.com/go-git/go-billy/v5 v5.5.0 // indirect
-	github.com/go-git/go-git/v5 v5.12.0 // indirect
+	github.com/go-git/go-billy/v5 v5.6.1 // indirect
+	github.com/go-git/go-git/v5 v5.13.1 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/glog v1.2.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
@@ -69,7 +69,7 @@ require (
 	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 // indirect
 	github.com/santhosh-tekuri/jsonschema/v5 v5.0.0 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
-	github.com/skeema/knownhosts v1.2.2 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/spf13/cast v1.4.1 // indirect
 	github.com/spf13/cobra v1.8.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
@@ -80,14 +80,14 @@ require (
 	github.com/zclconf/go-cty v1.13.2 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	golang.org/x/crypto v0.31.0 // indirect
-	golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8 // indirect
-	golang.org/x/mod v0.18.0 // indirect
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
+	golang.org/x/mod v0.19.0 // indirect
 	golang.org/x/net v0.33.0 // indirect
 	golang.org/x/sync v0.10.0 // indirect
 	golang.org/x/sys v0.28.0 // indirect
 	golang.org/x/term v0.27.0 // indirect
 	golang.org/x/text v0.21.0 // indirect
-	golang.org/x/tools v0.22.0 // indirect
+	golang.org/x/tools v0.23.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 // indirect
 	google.golang.org/grpc v1.67.1 // indirect
 	google.golang.org/protobuf v1.35.1 // indirect