P

Pulumi

P
Pulumi DevOps v3.267.0

v3.267.0

3.267.0 (2026-10-01) Bug Fixes [cli/new] Fix concurrent pulumi new runs failing to clone the templates repository #24939 [sdk/python] Fix pulumi install for Python plugins and policy packs that use the uv toolchain and a [build-system] table #24951

P
Pulumi DevOps v3.267.0

sdk/v3.267.0: Re-organize login and backend URL tests (#24960)

There are no actual changes to the actual tests Move TestGetCurrentCloudURL… tests move from pkg/cmd/pulumi/backend/backend_test.go to pkg/workspace/creds_test.go, since they test GetCurrentCloudURLWithAgentFallback from pkg/workspace/creds.go Split login tests out of pkg/backend/httpstate/backend_test.go into login_{,refresh,agent,oidcs}_test.go

P
Pulumi DevOps v3.266.0

v3.266.0

3.266.0 (2026-09-30) Bug Fixes [sdk/go] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702 [sdk/python] Use an explicit provider for resources from an extension package, instead of falling back to a default provider #24702 [pcl] Order the members of a union type by a fixed structural order rather than by their printed form, so tha…

P
Pulumi DevOps v3.265.0

v3.265.0

3.265.0 (2026-09-25) Features [cli/auth] Add pulumi logout --all --delete-credentials-key to delete the key that encrypts stored credentials from the OS credential store #24764 Bug Fixes [programgen/python] Generate valid Python for output-dependent resource ranges #24474 [cli/policy] Recover from partial installs & wait for parallel installs #24705 [cli/install] Cancel cross-process waits with Ct…

P
Pulumi DevOps v3.265.0

sdk/v3.265.0: Authenticode-sign Windows binaries in release builds (#24785)

Part of IAC-4046 None of the .exe files we ship for Windows have ever been Authenticode-signed. Only the winget MSI container is, and it wraps the same unsigned zip. Defender is now quarantining pulumi-language-bun.exe as a trojan for customers. It's a false positive (the binary reproduces byte-for-byte from source), but it will keep happening to small unsigned launchers until we sign them. The an…

P
Pulumi DevOps v3.264.0

v3.264.0

3.264.0 (2026-09-23) Features [sdk/python] Add component state migration callbacks to ResourceOptions #24331 [cli/deployment] Allow pulumi deployment settings edit to configure git authentication, dependency caching, template sources and drift remediation #24528 [cli/deployment] Allow pulumi deployment settings edit to configure tag triggers, review stack labels and the version control integration…

P
Pulumi DevOps v3.264.0

sdk/v3.264.0

Preserve root-first state ordering between chained state migration ca…

P
Pulumi DevOps v3.263.0

v3.263.0

3.263.0 (2026-09-15) Bug Fixes [cli/deployment] Stop pulumi deployment settings edit overwriting the source of stacks that use a provider other than GitHub, take --path-filter once per filter rather than splitting it on commas, and report an unconfigured stack from get instead of failing #24526 [engine] Fix remote component provider state migrations being skipped when the caller also supplies migr…

P
Pulumi DevOps v3.263.0

sdk/v3.263.0: Update dependency pulumi/pulumi-yaml to v1.38.6 (#24675)

This PR contains the following updates: Package Update Change pulumi/pulumi-yaml patch v1.38.5 → v1.38.6 WarningSome dependencies could not be looked up. Check the Dependency Dashboard for more information. Release Notes pulumi/pulumi-yaml (pulumi/pulumi-yaml) v1.38.6 Compare Source Dependencies [runtime] Update golang.org/x/crypto to v0.56.0 [runtime] Update github.com/pulumi/pulumi/pkg/v3 to v3.…

P
Pulumi DevOps v3.262.0

v3.262.0

3.262.0 (2026-09-10) Features [engine] Support importing a pulumi:index:Stash resource. The stash adopts the given id and holds a null value, and the program's configured input then applies as an update #24544 Bug Fixes [auto/go] Match wrapped errors in the Automation API error predicates, and unwrap the underlying cause #24197 [cli/deployment] Stop pulumi deployment settings edit clearing setting…

P
Pulumi DevOps v3.262.0

sdk/v3.262.0: Update CheckRequest/Response to use property.Map (#24619)

Took the chance to rename some of the fields here as well, given the TODO. - // TODO Change to (State, Input) - Olds, News resource.PropertyMap - // OldOutputs is the previously persisted outputs of the resource, if any. - OldOutputs resource.PropertyMap + // NewInputs are the new inputs for the resource from the program. + NewInputs property.Map + // OldInputs are the previously persisted inputs…

P
Pulumi DevOps v3.261.0

v3.261.0

3.261.0 (2026-09-02) Features [engine] Support state migration callbacks on resource registrations #24328 [cli/env] Add pulumi env setup {aws,azure,gcp} to configure cloud OIDC trust and create the ESC environments that use it #23911 Bug Fixes [engine] Report a clear error instead of panicking when the stack's state contains a custom resource with no ID #24438 [cli] Show the agent account's claim…

P
Pulumi DevOps v3.261.0

sdk/v3.261.0: Fix ProgramTest for double-digit major versions (#24499)

Summary pkg/testing/integration assumed a single-digit major version in two places, which broke ProgramTest for the Go and .NET SDKs of any provider at v10 or above. getSanitizedModulePath matched v\d anywhere in the module path and stripped that substring. For github.com/pulumi/pulumi-gcp/sdk/v10 it found the v1 inside v10 and rewrote the path to github.com/pulumi/pulumi-gcp/sdk/0, so every Go pr…

P
Pulumi DevOps v3.260.0

v3.260.0

3.260.0 (2026-08-28) Features [cli/deployment] Make pulumi deployment settings get render every source kind and show environment variable values, changing the --output=json shape of environmentVariables from a list of names to a list of objects #24284 [sdk/go] Support Go 1.27 #24401 [cli/state] Add pulumi state promote to turn stateful snippets into Pulumi program code #24453 Bug Fixes [engine] Re…

P
Pulumi DevOps v3.260.0

sdk/v3.260.0: redact secrets from URLs (#24488)

Currently we don't add secrets from URLs to the global secret filter. This inclueds e.g. postgres passwords in the postgres URL, and others. Add all secrets from URLs to the global secret filter, so they don't end up in logs.

P
Pulumi DevOps v3.259.0

v3.259.0

3.259.0 (2026-08-19) Features [cli/new] Show a single confirmation of project, stack, and config defaults in interactive pulumi new instead of prompting for each value #24223 [cli] Introduce PULUMI_DEFAULT_ORGANIZATION to be able to set the default org #24384 Bug Fixes [cli/stack] Announce Created stack when creating a stack against the Pulumi Cloud backend #24280 [cli] Retry pulumi neo cancellati…

P
Pulumi DevOps v3.259.0

sdk/v3.259.0: Collapse guided `pulumi new` prompts into a single confirmation (#24223)

What Guided interactive pulumi new shows the proposed project name, description, stack name, and resolved config in a single confirmation block and asks Do these look good?, instead of prompting for each value one question at a time. pulumi-new-demo.mp4 Why Nearly every prompt in the guided flow has a sensible default, so the common path is pressing Enter repeatedly. One confirmation lets that pat…

P
Pulumi DevOps v3.258.0

v3.258.0

3.258.0 (2026-08-17) Features [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #24212 [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #24226 [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can v…