Skip to content

pulumi

v3.246.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

aws azure cloud cloud-computing containers c#
+10 more
.net fsharp gcp go iac javascript kubernetes python serverless typescript

Affected surfaces

auth

Summary

AI summary

Broad release touches Bug Fixes, https://github.com/pulumi/pulumi/pull/23458, Miscellaneous, and 3.246.0.

Full changelog

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg #https://github.com/pulumi/pulumi/issues/23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485
  • [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826
  • [sdk/nodejs] Fix local SDKs added with pulumi package add not being built when using pnpm 10.34.2 or newer

Miscellaneous

  • [sdk/nodejs] Improve error logs when serialization fails #21901

Bug Fixes

  • [sdkgen] Validate schema names to not contain whitespace or control characters #23460

Improvements

  • [sdkgen] Allow provider objects to have string enumerations on their outputs #23461

Bug Fixes

  • [cli/auth] BREAKING: Delete all backend config when logging out #23358

Breaking Changes

  • Delete all backend config when logging out (BREAKING change in cli/auth).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track pulumi

Get notified when new releases ship.

Sign up free

About pulumi

Pulumi - Infrastructure as Code in any programming language

All releases →

Related context

Earlier breaking changes

  • v3.245.0 Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls in Go SDK.
  • v3.245.0 Rename `pulumi stack init` command to `new`.
  • v3.238.0 `--format` flag renamed to `--output` on `pulumi api` and subcommands.
  • v3.238.0 `pulumi cloud api` renamed to `pulumi api`.

Beta — feedback welcome: [email protected]