It appears that running .NET tests is not fully supported in the
release.yml workflow unfortunately.

Fixes #4275

This PR was generated via `$ upgrade-provider pulumi/pulumi-aws
--kind=bridge --pr-reviewers=iwahbe`.

---

- Upgrading pulumi-terraform-bridge from v3.86.0 to v3.87.0.
- Upgrading pulumi-terraform-bridge/pf from v0.39.0 to v0.40.0.

---------

Co-authored-by: Ian Wahbe <ian@wahbe.com>
Co-authored-by: Anton Tayanovskyy <anton@pulumi.com>

This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 1fc10076fbfaa5b10fc72c6b310ef02a0be098f7.

We have special logic around applying default provider tags to
resources. This logic only applied to the `Check` call which means it
was not applied when you were importing resources. This PR extends that
logic to also run during the `Read` call by utilizing
`TransformOutputs`.

While it is true that `TransformOutputs` also runs during `Create` &
`Update`
this is a side effect that I think is ok. From my understanding `tags`
and `tagsAll`
should always be equal. If we have an additional place where we make
sure they are equal
it shouldn't harm anything.

I've added tests (see `testTagsPulumiLifecycle`) which test the complete
lifecycle of a pulumi program

1. `Up` with both provider `defaultTags`/`ignoreTags` and resource level
`tags`
    1a. Run validations on result
2. `Refresh` with no changes
3. `Import` using the resource option. Ensures resource can be
successfully imported
3a. Allows for a hook to be run prior to import being run. e.g. Add tags
remotely
4. `Import` using the CLI. Ensures resources can be successfully
imported
4a. Allows for a hook to be run prior to import being run. e.g. Add tags
remotely
5. `Refresh` with no changes

fix #4030, fix #4080, fix #3311