build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.216.0 to 3.217.1 in /deploy (#919)

Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.216.0 to 3.217.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.217.1</h2>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548">#21548</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1</a></p>
<h2>v3.217.0</h2>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548">#21548</a></p>
</li>
<li>
<p>[cli/install] Copy files when linking instead of renaming
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1</a></p>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="381f23bab0"><code>381f23b</code></a>
ProgramTest: Fully qualify environment names (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21556">#21556</a>)</li>
<li><a
href="0b1bfabbd6"><code>0b1bfab</code></a>
Fix concurrency bugs in <code>packageinstallation</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21559">#21559</a>)</li>
<li><a
href="de8f97e80e"><code>de8f97e</code></a>
Prepare for patch release v3.217.1 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21558">#21558</a>)</li>
<li><a
href="4bcb1d4046"><code>4bcb1d4</code></a>
Add language tests for <code>replaceOnChanges</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21552">#21552</a>)</li>
<li><a
href="8e23ef0108"><code>8e23ef0</code></a>
Increase partition for the pkg module on windows (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21554">#21554</a>)</li>
<li><a
href="c571535c83"><code>c571535</code></a>
Bump tar from 6.2.1 to 7.5.6 in /tests/integration/iterative-constraints
in t...</li>
<li><a
href="98192921a5"><code>9819292</code></a>
split up python conformance tests (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21367">#21367</a>)</li>
<li><a
href="683b6f63cb"><code>683b6f6</code></a>
Copy files when linking instead of renaming (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21549">#21549</a>)</li>
<li><a
href="b2ecd0eb63"><code>b2ecd0e</code></a>
Implement Go SDK support for <code>OnError</code> hooks (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21515">#21515</a>)</li>
<li><a
href="16713d0b23"><code>16713d0</code></a>
Do not double install plugins with explicit parameterizations (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21548">#21548</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.216.0...v3.217.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.216.0&new-version=3.217.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

deploy/go.mod

@@ -5,7 +5,7 @@ go 1.24.11
 require (
 	github.com/pulumi/pulumi-gcp/sdk/v8 v8.41.1
 	github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.25.0
-	github.com/pulumi/pulumi/sdk/v3 v3.216.0
+	github.com/pulumi/pulumi/sdk/v3 v3.217.1
 	gopkg.in/yaml.v2 v2.4.0
 )
 
@@ -76,15 +76,15 @@ require (
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	github.com/zclconf/go-cty v1.13.2 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.47.0 // indirect
 	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
-	golang.org/x/mod v0.29.0 // indirect
-	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/term v0.37.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
-	golang.org/x/tools v0.38.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250528174236-200df99c418a // indirect
 	google.golang.org/grpc v1.74.2 // indirect
 	google.golang.org/protobuf v1.36.7 // indirect