diff --git a/sdk/go/keycloak/identityProviderTokenExchangeScopePermission.go b/sdk/go/keycloak/identityProviderTokenExchangeScopePermission.go
index accd3f8d..b4b4f9cb 100644
--- a/sdk/go/keycloak/identityProviderTokenExchangeScopePermission.go
+++ b/sdk/go/keycloak/identityProviderTokenExchangeScopePermission.go
@@ -47,7 +47,7 @@ import (
 //			if err != nil {
 //				return err
 //			}
-//			_, err = openid.NewClient(ctx, "token-exchange_webapp_client", &openid.ClientArgs{
+//			token_exchangeWebappClient, err := openid.NewClient(ctx, "token-exchange_webapp_client", &openid.ClientArgs{
 //				RealmId:             tokenExchangeRealm.ID(),
 //				Name:                pulumi.String("webapp_client"),
 //				ClientId:            pulumi.String("webapp_client"),
diff --git a/sdk/java/build.gradle b/sdk/java/build.gradle
index 09719115..616de301 100644
--- a/sdk/java/build.gradle
+++ b/sdk/java/build.gradle
@@ -44,7 +44,7 @@ repositories {
 dependencies {
     implementation("com.google.code.findbugs:jsr305:3.0.2")
     implementation("com.google.code.gson:gson:2.8.9")
-    implementation("com.pulumi:pulumi:1.1.0")
+    implementation("com.pulumi:pulumi:1.3.0")
 }
 
 task sourcesJar(type: Jar) {
diff --git a/sdk/python/pulumi_keycloak/_utilities.py b/sdk/python/pulumi_keycloak/_utilities.py
index 3ce408d5..56d3cfb8 100644
--- a/sdk/python/pulumi_keycloak/_utilities.py
+++ b/sdk/python/pulumi_keycloak/_utilities.py
@@ -89,12 +89,16 @@ def _get_semver_version():
     elif pep440_version.pre_tag == 'rc':
         prerelease = f"rc.{pep440_version.pre}"
     elif pep440_version.dev is not None:
+        # PEP440 has explicit support for dev builds, while semver encodes them as "prerelease" versions. To bridge 
+        # between the two, we convert our dev build version into a prerelease tag. This matches what all of our other
+        # packages do when constructing their own semver string.
         prerelease = f"dev.{pep440_version.dev}"
+    elif pep440_version.local is not None:
+        # PEP440 only allows a small set of prerelease tags, so when converting an arbitrary prerelease,
+        # PypiVersion in /pkg/codegen/python/utilities.go converts it to a local version. Therefore, we need to
+        # do the reverse conversion here and set the local version as the prerelease tag.
+        prerelease = pep440_version.local
 
-    # The only significant difference between PEP440 and semver as it pertains to us is that PEP440 has explicit support
-    # for dev builds, while semver encodes them as "prerelease" versions. In order to bridge between the two, we convert
-    # our dev build version into a prerelease tag. This matches what all of our other packages do when constructing
-    # their own semver string.
     return SemverVersion(major=major, minor=minor, patch=patch, prerelease=prerelease)