This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 1mo
Infrastructure as Code
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
aws
azure
cloud
cloud-computing
containers
c#
+10 more
.net
fsharp
gcp
go
iac
javascript
kubernetes
python
serverless
typescript
Affected surfaces
auth
Summary
AI summaryBroad release touches Bug Fixes, https://github.com/pulumi/pulumi/pull/23458, Miscellaneous, and 3.246.0.
Full changelog
3.246.0 (2026-06-11)
Bug Fixes
- [backend/diy] Fix backwards incompatible gocloud.dev changes #23525
Features
- [cli] Add
pulumi logs lsto list automatic log files #23449 - [cli] Add
pulumi logs rmto remove automatic log files - [cli] Include the list of affected resources (urn, type, name, op, parent) in
--output jsonforpreview,up,destroy, andrefresh - [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489
Improvements
- [cli] Support Ctrl+Z to suspend a running
pulumi neosession and restore the transcript on resume withfg#https://github.com/pulumi/pulumi/issues/23394 - [cli] Remove the experimental
pulumi ai webcommand #23517 - [cli/cloud] Improve the interactive
pulumi loginprompt wording and coloring #23417 - [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490
Features
- [cli/do] Add a
--statelessflag topulumi do.create,patch, anddeletenow require--statelessfor the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release - [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402
Bug Fixes
- [cli/neo] The
pulumi neoTUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333 - [cli/neo] Increase the
pulumi neotask-creation timeout so backend cold starts no longer fail #23444 - [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452
Improvements
- [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to
pulumi neoapproval prompts as approvals #23450
Bug Fixes
- [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
- [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
- [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
- [programgen/go] Fix Go program generation to no longer produce
**Twhen an output traversal lands on an optional struct field, and to emit the correctpulumi.<T>ArrayOutputcast for traversals to slice-typed fields #23458
Features
- [sdk] Add a
readfield tocustomTimeoutsso users can configure a timeout for resource read operations #23459
Bug Fixes
- [sdk] Reject tar entries with path traversal components when extracting archives #23485
- [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the
RegisterResourcecall #14826 - [sdk/nodejs] Fix local SDKs added with
pulumi package addnot being built when using pnpm 10.34.2 or newer
Miscellaneous
- [sdk/nodejs] Improve error logs when serialization fails #21901
Bug Fixes
- [sdkgen] Validate schema names to not contain whitespace or control characters #23460
Improvements
- [sdkgen] Allow provider objects to have string enumerations on their outputs #23461
Bug Fixes
- [cli/auth] BREAKING: Delete all backend config when logging out #23358
Breaking Changes
- Delete all backend config when logging out (BREAKING change in cli/auth).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v3.245.0 Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls in Go SDK.
- v3.245.0 Rename `pulumi stack init` command to `new`.
- v3.238.0 `--format` flag renamed to `--output` on `pulumi api` and subcommands.
- v3.238.0 `pulumi cloud api` renamed to `pulumi api`.
Beta — feedback welcome: [email protected]