This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+10 more
ReleasePort's take
Light signalPulumi v3.245.0 updates dependencies, adds CLI progress UI features, fixes several bugs, and introduces two breaking changes: renaming `stack init` to `new` and altering the Go SDK plugin API.
Why it matters: Breaking commands (`pulumi stack init` → `new`) require command‑line adjustments; removing "name" from Go SDK plugin loading mandates code updates. All changes apply in version v3.245.0 released 2026-06-04.
Summary
AI summaryUpdates 3.245.0, Bug Fixes, and Miscellaneous across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Rename `pulumi stack init` command to `new`. Rename `pulumi stack init` command to `new`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Breaking | High |
Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls in Go SDK. Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls in Go SDK. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Show download and unpack progress when installing provider plugins in the CLI. Show download and unpack progress when installing provider plugins in the CLI. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Expose selected stack's organization and short name to PCL input files in `pulumi do`. Expose selected stack's organization and short name to PCL input files in `pulumi do`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Suggest similar tokens when an unknown token is passed to `pulumi do`. Suggest similar tokens when an unknown token is passed to `pulumi do`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Support up/down arrows to scroll through prompt history in `pulumi neo`. Support up/down arrows to scroll through prompt history in `pulumi neo`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Update gocloud.dev to 0.46 and aws SDK to v2 in backend/diy component. Update gocloud.dev to 0.46 and aws SDK to v2 in backend/diy component. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Download the HCL language runtime on demand instead of bundling it in the engine. Download the HCL language runtime on demand instead of bundling it in the engine. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK. Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Delete shared temporary agent credentials when logging out from CLI auth. Delete shared temporary agent credentials when logging out from CLI auth. Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
3.245.0 (2026-06-04)
Improvements
- [backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #23421
- [cli] Show download and unpack progress when installing provider plugins #https://github.com/pulumi/pulumi/issues/23408
- [cli/do] Expose the selected stack's organization and short name to PCL input files when running
pulumi doinside a project - [cli/do] Suggest similar tokens when an unknown token is passed to
pulumi do#23341 - [cli/neo] Support up/down arrows to scroll through prompt history in
pulumi neo#23425 - [cli/stack] Remame
pulumi stack inittonew#23422
Bug Fixes
- [engine] Download the HCL language runtime on demand instead of bundling it #23356
- [sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
- [cli/auth] Delete shared temporary agent credentials when logging out
Miscellaneous
- [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #23363
Breaking Changes
- [cli] Remame `pulumi stack init` to `new`
- [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]