This release includes 2 breaking changes for platform teams planning a safe upgrade.
Published 18d
Infrastructure as Code
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
aws
azure
cloud
cloud-computing
containers
c#
+10 more
.net
fsharp
gcp
go
iac
javascript
kubernetes
python
serverless
typescript
Summary
AI summaryBroad release touches Miscellaneous, Bug Fixes, https://github.com/pulumi/pulumi/pull/23480, and 3.251.0.
Full changelog
3.251.0 (2026-07-08)
Bug Fixes
- [cli] Show a
retainmarker for retain-on-delete resources in--diffoutput #23754 - [cli] Don't miscopy out archives #23798
Miscellaneous
- [cli] Add
pulumi neo --debug-updateandpulumi neo --debug-previewflags to investigate a failed update or preview, suggested in the failure output #23499
Improvements
- [cli/convert] Add an
ecosystemfield to converter mapping requests so a converter can request mappings for the ecosystem it consumes rather than its own name #23804 - [cli/deployment]
pulumi deployment settingsno longer writes the localPulumi.<stack>.deploy.yamlfile: the experimentalinit,pull,configure, andenvsubcommands have been removed, and the CLI no longer calls the deployment-settings encrypt endpoint.get/edit/destroycontinue to manage settings directly in Pulumi Cloud #23480 - [cli/deployment] The deployment settings file (
Pulumi.<stack>.deploy.yaml) has been removed entirely. The experimentalpulumi deployment settings push(update/up) command, the--config-fileflag, and the SDK helpers that read the file have been removed. Manage deployment settings directly in Pulumi Cloud withpulumi deployment settings get,edit, anddestroy#23480
Bug Fixes
- [cli/display] Prevent plugin debug logs from appearing as raw JSON in the CLI's output when logging with
--logtostderr#23633
Improvements
- [cli/env] Report the new revision number when an environment definition is updated (e.g.
pulumi env edit,pulumi env provider,pulumi env version rollback) #23799
Miscellaneous
- [cli/env] Fold the Pulumi ESC engine and CLI into the pulumi/pulumi monorepo, removing the sdk↔esc Go module cycle. Internal refactor with no user-facing behavior change;
pulumi env/pulumi escare unaffected. #23746
Improvements
- [cli/import] Support importing resources under parameterized providers from a converter or import file #23763
- [cli/import] Support importing resources under extension-parameterized providers #23779
Features
- [engine] Add
TargetSnippetsto deployment options to target snippets by UUID. #23745
Improvements
- [engine] Add OpenTelemetry spans to the StackReference read path so performance traces can pinpoint slow snapshot fetches, deserialization, or secret decryption #23787
Features
- [programgen/pcl] Invoke functions declared with multi-argument inputs using positional arguments in PCL #23571
Bug Fixes
- [sdk/nodejs] Don't include the version in module paths when serializing functions when using pnpm #23767
Features
- [sdkgen] Generate SDKs and programs for extension-parameterized packages #23579
Breaking Changes
- `pulumi deployment settings` no longer writes `Pulumi.<stack>.deploy.yaml`; the file is removed and related experimental commands (`init`, `pull`, `configure`, `env`) are deleted.
- Experimental `pulumi deployment settings push` (update/up) command, `--config-file` flag, and SDK helpers that read `Pulumi.<stack>.deploy.yaml` have been removed.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v3.245.0 Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls in Go SDK.
- v3.245.0 Rename `pulumi stack init` command to `new`.
- v3.238.0 `--format` flag renamed to `--output` on `pulumi api` and subcommands.
- v3.238.0 `pulumi cloud api` renamed to `pulumi api`.
Beta — feedback welcome: [email protected]