Warn users of outdated TF providers

[iwahbe]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

When a user generates a source based provider, they bake in a set of version preferences:

$ pulumi package add terraform-provider my/provider '>=1.3.0,<2.0.0'
$ pulumi package add terraform-provider my/provider # implicitly latest

By saving the original version specified, we can warn users when a new version of the upstream provider they are using is released.

We don't want to give users warnings that they are unable to dismiss, so we won't warn them that there are new TF providers beyond the version range they specify. If they always want new provider warnings, then they can leave an open ended version constraint: >=x.y.z.

Rational:

SDKs already serve as a lock file, pinning a specific upstream version. Even if the user originally specified latest, they will need to regenerate their SDK to move to a new version. Most users won't know to do that, how would they.

Affected area/feature

[pierskarsenbarg]

Couple of bits to add:

1. I think the main concern is about being told that there are changes rather than automatically having the sdk’s updated
2. Can we have an env var to error rather than warn so that people can stop updates from happening if they’re on an older version?