I think I have found the issue. The -deployment job does not checkout the repo. Need to add

checkout: self

to the job prior to the pulumi task. see https://docs.microsoft.com/en-us/azure/devops/pipelines/process/deployment-jobs?view=azure-devops