No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Thanks for reraising, hope it gets some visibility.

Out of curiosity, does the same behaviour happen if you set `deleteBeforeReplace`?
<https://www.pulumi.com/docs/concepts/options/deletebeforereplace/|https://www.pulumi.com/docs/concepts/options/deletebeforereplace/>

<@U03K4SWU150> Would you mind also adding a comment to the issue, if using `deleteBeforeReplace` doesn’t fix it? (The issue mentions `deleteBeforeReplace` as a workaround.)

Forgot to post earlier, but the schema in the TF provider isn't quite right. `encryptedValue` is marked as `forceRecreate`, but the github api does support updating the value in place.
This may be a better fix if it can be done on the pulumi side of the bridge

I’m not with this client anymore so sadly I cannot follow up on this.