build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.0 in /deploy

[dependabot]

Bumps github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.0.

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.225.0

3.225.0 (2026-03-04)

Features

• [engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets #21959

• [engine] The engine now handles the inheritance of the provider option in resource registrations #21999

• [engine] Enable journaling by default. It can still be turned off using the PULUMI_DISABLE_JOURNALING env variable #22041

• [programgen] PCL can now express config values should be read as secrets #22066

• [yaml] Update yaml to v1.30.0

• [cli/engine] Add a flag for automatically opening a Neo task on preview/up failure #21960

• [cli/package] Support source-based packages in pulumi schema check, not just schema files #21897

Bug Fixes

• [cli] Fix stack import panicking when importing a service stack into a DIY backend #22076

• [engine] Fix panic when a new component resource in the program is not targeted #21957

• [sdk/nodejs] Implement GetProgramDependencies for bun and pnpm #22065

Miscellaneous

• [cli] Build language plugins with the grpcnotrace tag to reduce the binary size #22012

v3.224.0

3.224.0 (2026-02-26)

Features

• [backend/diy] Add zstd compression option for DIY backend state files

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

Changelog

3.224.0 (2026-02-26)

Features

• [backend/diy] Add zstd compression option for DIY backend state files #21877

Bug Fixes

• [cli/state] state move now correctly handles reparenting of resources

• [pkg] Correct the schema for "pulumi:pulumi:StackReference" #21895

• [programgen/nodejs] Correct the semantics of singleOrNone in generated files #21947

• [sdk/python] Fix StepEventMetadata.from_json reading detailed_diff (snake_case) instead of detailedDiff (camelCase), and PolicyEvent.from_json reading resource_urn instead of resourceUrn, causing both fields to always be None #21714

• [sdk/python] Convert integer component inputs to int #21944

• [sdk/python] Fix crash in forked processes using automation API #21937

Miscellaneous

• [sdk] Update java, dotnet & yaml #21961

• [sdk/python] Improve the performance of contains_unknowns for large objects #21893

3.223.0 (2026-02-19)

Bug Fixes

• [engine] Report policy pack installation errors #21882

3.222.0 (2026-02-18)

... (truncated)

Commits

• ca6228e Update yaml to 1.30.0 (#22081)
• e72496a fix race when looking up package ref (#22080)
• 21b4452 l1 builtin secret test (#22079)
• af62e35 Test Eject with Language Tests (#22063)
• 4e8535e opentelementry in the python SDK (#22017)
• af275d1 Correctly reset secret managers on import for DIY backends (#22076)
• 8fa4ff6 NodeJS Automation API Codegen #3: Boilerplate (#22059)
• 8d1e62e implement otel in the Go SDK (#22020)
• f1d34d3 fix another flaky tail test (#22067)
• 1ed4349 Local proto with mise (#22069)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)