Update GitHub Actions workflows.

.config/mise.toml

@@ -12,7 +12,7 @@ PULUMI_HOME = "{{config_root}}/.pulumi"
 go = "{{ get_env(name='GO_VERSION_MISE', default='latest') }}"
 node = '20.19.5'
 python = '3.11.8'
-dotnet = '8.0.414'
+"vfox:version-fox/vfox-dotnet" = "8.0.20" # vfox backend doesn't work on Windows, gives "error converting Lua table to PreInstall (no version returned from vfox plugin)" https://github.com/jdx/mise/discussions/5876 https://github.com/jdx/mise/discussions/5550
 # Corretto version used as Java SE/OpenJDK version no longer offered
 java = 'corretto-11'
 

.github/workflows/build_provider.yml

@@ -67,7 +67,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ steps.app-auth.outputs.token }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/build_sdk.yml

@@ -66,7 +66,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ steps.app-auth.outputs.token }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/copilot-setup-steps.yml

@@ -37,7 +37,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ secrets.GITHUB_TOKEN }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/license.yml

@@ -46,7 +46,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ steps.app-auth.outputs.token }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/lint.yml

@@ -46,7 +46,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         cache_save: false # A different job handles caching our tools.

.github/workflows/main-post-build.yml

@@ -60,7 +60,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ steps.app-auth.outputs.token }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/prerequisites.yml

@@ -72,7 +72,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         # only saving the cache in the prerequisites job

.github/workflows/publish.yml

@@ -64,7 +64,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         cache_save: false
@@ -161,7 +161,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         # only saving the cache in the prerequisites job

.github/workflows/test.yml

@@ -61,7 +61,7 @@ jobs:
         MISE_ENV: test
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         # also save this cache since we are using a different mise env.

.github/workflows/upgrade-bridge.yml

@@ -97,7 +97,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2025.11.6
+        version: 2026.1.1
         github_token: ${{ steps.app-auth.outputs.token }}
         plugin_install: https://github.com/pulumi/vfox-pulumi
         # only saving the cache in the prerequisites job

.github/workflows/upgrade-provider.yml

@@ -64,7 +64,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2025.11.6
+          version: 2026.1.1
           github_token: ${{ steps.app-auth.outputs.token }}
           plugin_install: https://github.com/pulumi/vfox-pulumi
           # only saving the cache in the prerequisites job

.github/workflows/verify-release.yml

@@ -74,44 +74,19 @@ jobs:
         id: esc-secrets
         name: Fetch secrets from ESC
         uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b
-      - name: Setup Python
-        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+      - name: Setup mise
+        uses: blampe/mise-action@blampe/plugins
         with:
-          python-version: 3.11.8
-      - name: Setup Java
-        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
+          version: 2026.1.1
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          cache_save: false
+          plugin_install: https://github.com/pulumi/vfox-pulumi
+      - name: Setup Go Cache
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
-          cache: gradle
-          distribution: temurin
-          java-version: 11
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
-        with:
-          gradle-version: 7.6
-      - name: Setup DotNet
-        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
-        with:
-          dotnet-version: 8.0.x
-      - name: Setup Node
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
-        with:
-          node-version: 20.x
-          registry-url: https://registry.npmjs.org
-      - name: Install Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
-        with:
-          go-version: "1.21.x"
           cache-dependency-path: |
             provider/*.sum
             upstream/*.sum
             sdk/go/*.sum
             sdk/*.sum
             *.sum
-          cache: true
-      - name: Set Go Toolchain to auto explicitly
-        run: |
-          echo "GOTOOLCHAIN=auto" >> "$GITHUB_ENV"
-      - name: Install Pulumi CLI
-        uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 # v6
-        with:
-          pulumi-version: "dev"

.golangci.yml

@@ -1,46 +1,37 @@
-version: "2"
+# WARNING: This file is autogenerated - changes will be overwritten when regenerated by https://github.com/pulumi/ci-mgmt
+
 linters:
   enable:
-    - goconst
-    - gosec
-    - lll
-    - misspell
-    - nakedret
-    - revive
-    - unconvert
-  exclusions:
-    generated: lax
-    presets:
-      - comments
-      - common-false-positives
-      - legacy
-      - std-error-handling
-    paths:
-      - schema.go
-      - pulumiManifest.go
-      - pkg/vendored
-      - third_party$
-      - builtin$
-      - examples$
-formatters:
-  enable:
-    - gci
-    - gofmt
-  settings:
-    gci:
-      sections:
-        - standard
-        - blank
-        - default
-        - prefix(github.com/pulumi/)
-        - prefix(github.com/pulumi/pulumi-tailscale)
-      custom-order: true
-  exclusions:
-    generated: lax
-    paths:
-      - schema.go
-      - pulumiManifest.go
-      - pkg/vendored
-      - third_party$
-      - builtin$
-      - examples$
+  - errcheck
+  - gci
+  - goconst
+  - gofmt
+  - gosec
+  - govet
+  - ineffassign
+  - lll
+  - gosimple
+  - staticcheck
+  - misspell
+  - nakedret
+  - revive
+  - unconvert
+  - unused
+  enable-all: false
+issues:
+  exclude-dirs:
+  - pkg/vendored
+  exclude-files:
+  - schema.go
+  - pulumiManifest.go
+run:
+  timeout: 20m
+linters-settings:
+  gci:
+    sections:
+      - standard # Standard section: captures all standard library packages.
+      - blank # Blank section: contains all blank imports.
+      - default # Default section: contains all imports that could not be matched to another section type.
+      - prefix(github.com/pulumi/) # Custom section: groups all imports with the github.com/pulumi/ prefix.
+      - prefix(github.com/pulumi/pulumi-tailscale) # Custom section: local imports
+    custom-order: true