• If you use vault="name of vault" when creating then it will replace (delete/create) each time From the `details`:

+-onepassword:index/item:Item: (replace)
        [id=vaults/aoeuaoeuaoeuaoeuaoeuaoeuao/items/sntsntsnthnthstnhsthsthsth]
        [urn=urn:pulumi:foo.bar::project::onepassword:index/item:Item::op-item]
        [provider=urn:pulumi:foo.bar::dz-prod::pulumi:providers:onepassword::op::8ca45343-814a-4b33-aead-2c0cff563de6]
      ~ id      : "vaults/aoeuaoeuaoeuaoeuaoeuaoeuao/items/snthsnthstnhsnthsnthsnthsn" => output<string>
      ~ uuid    : "snthsnthsnthsnthsnthsnthsn" => output<string>
      ~ vault   : "aoeuaoeuaoeuaoeuaoeuaoeuai" => "The Vault Name"
    --onepassword:index/item:Item: (delete-replaced)
        [id=vaults/aoeuaoeuaoeuaoeuaoeuaoeuao/items/snthsnthsnthsnthsnthsnthsn]
        [urn=urn:pulumi:foo.bar::dz-prod::onepassword:index/item:Item::op-item]
        [provider=urn:pulumi:foo.bar::project::pulumi:providers:onepassword::op::8ca45343-814a-4b33-aead-2c0cff563de6]

• If you use

vault="uuid of vault"

when creating it, then it will have an "update" that doesn't do anything every time you

pulumi up

From the `details`:

~ onepassword:index/item:Item: (update)
        [id=vaults/aoeuaoeuaoeuaoeuaoeuaoeuao/items/snthsnthsnthsnthsnthstnhsn]
        [urn=urn:pulumi:tenant.boq-test::dz-prod::onepassword:index/item:Item::op-item]
        [provider=urn:pulumi:foo.bar::project::::pulumi:providers:onepassword::op::8ca45343-814a-4b33-aead-2c0cff563de6]

I've tried this with multiple item categories (database, secure_note, password) and the results are the same.