Pulumi Defang

v2.5.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 15d Infrastructure as Code

✓ No known CVEs patched

This release patches 1 known CVE

Topics

aws azure cloud deploy deployment docker

+4 more

gcp iac pulumi pulumi-go

Summary

AI summary

Updates ci, chore, and fix across a mixed release.

Type	Severity	Summary	CVE
Feature	Low	Adds MemoryDB engine support, config‑path recipe, and x-defang-aliases adoption. Adds MemoryDB engine support, config‑path recipe, and x-defang-aliases adoption. Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Updates Pulumi dependency to version 3.251.0 across the project. Updates Pulumi dependency to version 3.251.0 across the project. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes booting of arm64 COS image for ARM Compute Engine services. Fixes booting of arm64 COS image for ARM Compute Engine services. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Waits for Redis private DNS before starting Azure Container Apps. Waits for Redis private DNS before starting Azure Container Apps. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

chore: regenerate examples for v2.4.1 by @github-actions[bot] in https://github.com/DefangLabs/pulumi-defang/pull/317
ci: make regen and image jobs work on fork PRs by @defangdevs in https://github.com/DefangLabs/pulumi-defang/pull/316
fix: boot the arm64 COS image for ARM Compute Engine services by @defangdevs in https://github.com/DefangLabs/pulumi-defang/pull/315
feat: MemoryDB engine, config-path recipe, and x-defang-aliases adoption by @defangdevs in https://github.com/DefangLabs/pulumi-defang/pull/313
chore(deps): bump pulumi to 3.251.0 everywhere; clear all open security advisories by @defangdevs in https://github.com/DefangLabs/pulumi-defang/pull/319
fix(azure): wait for Redis private DNS before starting Container Apps by @edwardrf in https://github.com/DefangLabs/pulumi-defang/pull/299
ci: group Dependabot gomod security updates per directory by @defangdevs in https://github.com/DefangLabs/pulumi-defang/pull/318

Full Changelog: https://github.com/DefangLabs/pulumi-defang/compare/v2.4.1...v2.5.0

chore(deps): bump pulumi to 3.251.0 everywhere; clear all open security advisories

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Pulumi Defang

Get notified when new releases ship.

About Pulumi Defang