Project: Pulumi (Provisioning / Automation & Configuration)
File: CHANGELOG.md

[docs] Resource docs: bump the number of displayed supporting types from 200 to 1000 by default [sdk/go] Prefer pluginDownloadURLOverrides over PluginDownloadURL specified in the package [engine] Fix panic when using `pulumi up --refresh --continue-on-error` [engine] Fix dataraces between snapshot and deployment systems. [cli/display] Fix mangled diffs of strings containing url-encoded chars [sdk/nodejs] Don't load punycode module in function serialization code [sdk/nodejs] Return error in RPC response instead of exiting in the language runtime [sdk/nodejs] Return the underlying error if we can't locate the pulumi SDK [sdk/python] Provide more descriptive exception [sdk/python] Fix typings for `from_input` and `all` to not return `Never` types. [sdk/python] Fix a race condition in output handling [pkg] Upgrade pulumi-java to v0.11.0 [cli/display] Fix a deadlock in the display code [cli/engine] Revert "Make --expect-no-changes fail even if the only changes are output changes" [engine] Normalize provider version during default provider lookup [backend] Fix concurrent reads from and writes to display resource timer maps [engine] Better handle property dependencies and deleted-with relationships when pruning URNs, verifying snapshot integrity and computing dependency graphs. [engine] Fix folder archive outside of cwd. [programgen/python] Sort generated requirements.txt files when generating Python programs [auto/{go,nodejs,python}] Add support for --import-file option on Preview with Automation API [sdk/{go,nodejs,python}] Make transforms a stable, non-experimental feature [sdk/python] Update python dynamic provider types for inputs to Dict[str, Any], from Any [components/yaml] Upgrade pulumi-yaml to 1.7.0 [engine] Fix an issue with archives/assets at paths outside cwd. [cli/display] Avoid showing a diff when the provider returns DIFF_NONE [backend/{diy,service}] Promote snapshot closure errors from diagnostics to actual errors [cli/engine] Make --expect-no-changes fail even if the only changes are output changes [auto/{go,nodejs,python}] Add support for the continue-on-error parameter of the up command to the Automation API [engine] Add a --continue-on-error flag to pulumi up [pkg] Deserialize assets with their sig [cli/display] Fix output of the diff display, making sure it shows diffs from refreshes [auto/python] Ensure async context is not shared between multiple programs [sdk/nodejs] Fix a race condition that could cause the NodeJS runtime to terminate before finishing all work [sdk/python] Fix an exception when setting providers resource option with a dict [sdk/python] Fix event loop tracking in the python SDK when using remote transforms [sdk/python] Workaround lazy module loading regression [sdk/python] Fix a memory leak in tracking outputs [cli/plugin] Move PluginKind type definition into apitype and re-export for backward compatibility [cli/about] Add plugin kind to the about output [engine] Remove locks between snapshot and executor systems [backend/{diy,service}] Elide state file writes for unchanged component outputs [engine] Display the entire preview with diff when a protected resource needs replacement [auto/{go,nodejs,python}] Add support for inheritSettings to go, nodejs and python automation API. [backend] Fix incorrect dependency sorting in snapshot [sdk/nodejs] Make TypeScript and ts-node optional peer dependencies to allow using user specified versions Note: TypeScript and ts-node are now optional peer dependencies of the Node.js SDK. This makes its possible to chose any version of these packages by adding them as dependency or devDependency to your package.json. If these optional peer dependencies are not installed, Pulumi will fallback to bundled versions included in the Node.js SDK to maintain backwards compatibility. As a side effect of this change, the `tsc` binary is no longer available in `node_modules/.bin/tsc`. If you rely on `tsc` being available in your project, add it as a dependency or devDependency to your

[sdk/python] Add 'typeChecker' runtime option to the Python language host [auto/{go,nodejs,python}] Add support for continue-on-error parameter of the destroy command to the Automation API [cli] Support always fully qualifying stack names in CLI output [cli] Add --no-plugins and --no-dependencies to `pulumi install` [docs] Implement Java constructor syntax examples [sdk/go] Allow unknowns during `pulumi up` [sdk/{nodejs,python}] Allow apply to have unknown values during updates [auto] Tolerate missing stack and bookkeeping files in ProgramTest [backend/diy] Fix race condition when listing stacks [cli] Fix a panic when user's home directory could not be looked up [cli] Fix some commands that didn't respect `--disable-integrity-checking` [auto/go] Avoid flakyness when reading the event log from pulumi commands [engine] Resource transforms on component resources now apply to children correctly [programgen/dotnet] Remove trailing whitespace from emitted DependsOn resource option expressions [sdk/go] Fix Provider and Providers options in Go transform functions [sdk/nodejs] Handle serialization of aliases for well known native functions [sdk/nodejs] Correctly serialise functions whose code would make use of reserved identifiers [sdk/nodejs] Serialize function values obtained from Function.bind [sdk/python] Improve types of getters in Python SDK [sdkgen/{dotnet,go}] Fix SDK-generation when referencing shared types in config variables [backend/diy] Upgrade gocloud.dev dependency to 0.37 [sdk/nodejs] Update builtin module list for function serialization [sdk/nodejs] Set package.json engines to node >= 18 [docs] Implement constructor syntax examples for every resource in typescript, python, csharp and go [docs] Implement YAML constructor syntax examples in the docs [engine] Send output values with property dependency information to transform functions [engine] Add a --continue-on-error flag to pulumi destroy [sdk/go] Make `property.Map` keyed by `string` not `MapKey` [sdk/nodejs] Make function serialization work with typescript 4 and 5 [sdk/python] Improve the error message when depends_on is passed objects of the wrong type [auto/{go,python}] Make sure to read complete lines before trying to deserialize them as engine events [auto/{go,python}] Use the full path when running pulumi from a custom CLI install [cli/plugin] Fix installing local language plugins on Windows [engine] Don't delete stack outputs on failed deployments [engine] Fix a panic when updating provider version in a run using --target [engine] Handle that Assets & Archives can be returned from providers without content. [engine] Fix the engine trying to delete a protected resource caught in a replace chain [sdkgen/docs] Add missing newline for `Coming soon!` [programgen/dotnet] Fix generated code for a list of resources used in resource option DependsOn [programgen/{dotnet,go}] Fixes emitted code for object expressions assigned to properties of type Any [sdk/go] Fix lookup of plugin and program dependencies when using Go workspaces [sdk/nodejs] Export automation.tag.TagMap type [sdk/python] Wait only for pending outputs in the Python SDK, not all pending asyncio tasks [sdk/nodejs] Reorganize function serialization tests [sdk/nodejs] Move mockpackage tests to closure integration tests [cli/display] Fix superfluous newlines being written during updates [programgen/{dotnet,go,nodejs,python}] Fix enum resolution from types of the form union[string, enum] [auto/go] Support remote deployment executor image [engine] Test and fix the engine filling in property dependencies to provider constructs [sdkgen/go] Ensure package generation for Go doesn't panic when encountering overly nested arrays or maps of primitive types [cli] Make "pulumi dn" an alias for "pulumi destroy" [yaml] Update yaml to v1.6.0 [sdk/python] Add experimental support to the Python SDK for the new transforms system [cli/state] Add `--yes` to `state upgrade` [programgen/{dotnet,go,python}] Fix panic when generating programs for MLC packages where they include type references to external packages [programgen/go] Fix optional primitive values being derefrenced [sdk/go] Await output properties from Construct/Call before closing the Context [sdk/nodejs] Fix codepaths computation when working dir is nested relative to package.json [sdk/nodejs] Replace glob with fdir to avoid an indirect dependency on inflight [sdkgen/python] Make replace-on-changes values camelCased not kebab_cased [auto/{go,nodejs,python}] Add support for suppress progress and suppress outputs parameters in the Automation API [pkg] Make

respect PULUMIDEBUGPROVIDERS, which enables Pulumi YAML programs to work correctly with this feature [sdk/dotnet] Update dotnet language host to 3.60.0 [sdk/nodejs] Add experimental support to the NodeJS SDK for the new transforms system. [sdk/python] Add support for asynchronous invokes via a new `invoke_async` function [sdkgen/dotnet] Support for non-overlay components in codegen for pulumi-kubernetes provider [cli] Fix a panic when the secrets provider is missing from the deployment snapshot [backend/service] Make decrypt/encrypt network calls retryable to help work around network hiccups [cli/new] Strip credentials and query strings from template URLs saved to project [engine] Fix an issue where snapshots could become invalid when doing a targeted up [engine] Downgrade remediate policy violations to mandatory [pkg/testing] Make ProgramTest use a temporary PULUMI_HOME for each test [sdkgen/dotnet] Codegen fix for resources without constant input properties [sdk/nodejs] Properly capture node:crypto and global.crypto in node 19+ [sdk/python] Fix determining plugins for old packages in the Python language host [sdk/nodejs] Move @types/glob to dev dependencies [cli/state] Exit immediately from state edit when no change was made [docs] Adds ability to process docs without Examples logic, using `<!--Start PulumiCodeChooser -->` markers in incoming schema descriptions [pkg] Adds simple vim keyboard shortcuts to the live tree view (j,k,g,G,Ctrl+F,Ctrl+B) and also wires up Home and End keys [sdk/go] Add experimental support to the Go SDK for the new transforms system. [ci] Use SYSTEMPULLREQUESTSOURCECOMMITID for AZ pipeline on GH PR [engine] Fix root and program paths to always be absolute. [pkg] Tag new pkg versions on a commit on the main branch [sdk/nodejs] Handle yarn/npm workspaces when computing codepaths for function serialization [sdk/nodejs] Replace deprecated read-package-tree with @npmcli/arborist [sdk/nodejs] Upgrade to @grpc/grpc-js 1.10.1 [sdk/nodejs] Regenerate yarn.lock to fix lru-cache hoisting [backend/diy] Remove warning about non-project mode deprecation. [cli/config] Adds an `--open` flag to `pulumi config` command which resolves the environment listed in the stack configuration. [auto/go] Automation API support for `pulumi refresh --preview-only` [engine] Add support for remote transforms to the engine. [pkg/testing] Add a InstallDevReleases option to ProgramTest, to install pulumi dev SDKs [programgen/{dotnet,nodejs,python}] Emit Output-returning JSON serialization methods without rewriting applies for top-level function expression [sdk/nodejs] Detect npm and yarn workspaces setups when installing dependencies [sdk/nodejs] Use pnpm as package manager if we find a pnpm-lock.yaml file [docs] Fixes docs generator parent module computation [engine] Test and fix the engine filling in args dependencies to provider calls. [programgen] Fix infinite recursion when binding invoke signature into promises without accounting for recursive type references [components] Component providers can return output values in their response to the engine. [programgen/{dotnet,go,nodejs,python}] Emit missing trivia for resources and local variables [sdk/{nodejs,python}] Publish dev versions of the nodejs and python SDKs [cli] Fix `pulumi destroy` to fill in stack config with the secret config from state, not fresh secret config. [engine] Engine no longer assumes program dependencies are specified as semantic versions. [components/go] Component providers now correctly return output values to the engine. [protobuf] Split CallRequest into ResourceCallRequest for the ResourceMonitor service. [backend/diy] Add a warning that non-project mode will be deprecated at some point. [auto/go] Adds support for `--refresh` to Stack.Up(), Stack.Preview() and Stack.Destroy() via go automation api [cli] Adds a `preview-only` flag to `pulumi refresh`. [cli] Adds `preview-only` flag for `pulumi destroy` and `pulumi import` [engine] Translate all Computed and Secret values to OutputValues for Construct and Call methods. [cli/display] Add --suppress-progress option to not print dots [sdk/go] Add `UpgradeToOutputValues` to `MarshalOptions`. [cli/plugin] Add experimental `plugin run` command for running plugin binaries directly. [sdkgen/python] Update the default minimum required version of Python to 3.8 or greater for generated provider

[backend/diy] Fix an issue where state stored on a mounted device would result in errors [cli/state] Fix a panic when trying to delete a provider from the state that's still referenced. [cli/state] Fix a nil reference panic in the `state edit` command. [docs] Add kubernetes as a supported pulumi convert language [sdk/python] Require Python 3.8 or greater. [sdk/python] Upgrade grpcio to 1.60.1 [backend/diy] Upgrade gocloud.dev and fix an issue with azurekeyvault keys. [backend/diy] Revert gocloud.dev upgrade [backend] Allows the PULUMISKIPCHECKPOINTS environment variable to be set without requiring the PULUMI_EXPERIMENTAL flag. [auto/go] Add new API to install the Pulumi CLI from the Automation API [auto/nodejs] Allow disabling version validation when using a custom PulumiCommand instance [auto/python] Add new API to install the Pulumi CLI [auto/python] Inline programs can now be defined as async functions. [pkg/testing] Add RequireEmptyPreviewAfterRefresh option to ProgramTest [engine] Fix a hang in preview --import-file. [engine] Engine will now error if aliases request a parent with no URN. [engine] Fix stack name validation when PULUMIDISABLEVALIDATION isn't set. [engine] Fix a performance issue doing unneeded secret encryption. [sdk/go] Include error message in local workspace validation. [sdkgen/go] Remove pulumix references from generated enums [programgen/nodejs] Fixes generated expression for filebase64 function to use fs.readFileSync directly with base64 encoding option [sdkgen/python] Use importlib.metadata instead of pkg_resources [auto/go] Remove obsolete note from FullyQualifiedStackName comment. [backend/filestate] Upgrade gocloud.dev to the latest version [sdk/python] Remove compatability code for Python 3.7 and below. [sdk/nodejs] Include @types/semver as a dependency [engine] Allow import plugins to define components and logical names. [cli/display] Incremental improvement on the output when installing plugins [sdk] Bake the release version into the SDK [sdk/go] Parse config paths strictly [cli/new] Adds pulumi:template tag to `pulumi new` created projects [auto/nodejs] Add new API to install the Pulumi CLI from the Automation API [sdk/python] Add support for Python 3.12 [engine] Fix a bug where mapping lookup could sometimes lead to an infinite loop. [engine] Remove an incorrect assert that resources must have inputs. [cli/display] Improve output when installing policy packs [sdk/go] Removes `omitempty` from StepEventMetadata.DetailedDiff [sdk/go] Replace a deleted type used by Pulumi Cloud code. [yaml] Upgrade yaml to v1.5.0 [sdk/go] Add WithValue to pulumi.Context [cli] Fix a panic when user's home directory could not be looked up. [cli/display] Fix JSON/YAML value diff displays. [sdk/go] Update github.com/cloudflare/circl to v1.3.7. [cli/import] --import-file now omits empty resource lists. [sdk/python] Allow remote components to use output property called id [sdkgen] Emit a warning when using id or urn as resource outputs [backend/filestate] Revert gocloud.dev upgrade to fix regressions introduced by the upgrade. [cli] Adds a flag that allows inserting a fragment into the dot file when generating a graph. This can be used for styling the graph elements, setting properties etc. [engine] Fix an uncommon datarace with replace steps. [sdkgen/go] Revert using plain object type when the plainness is shallow and we should use inputty-types instead [cli/state] Fix a panic in pulumi state when no snapshots are available [sdkgen/python] Fixes resource imports when importing across different modules [backend/filestate] Upgrade gocloud.dev to the latest version [auto/{go,nodejs,python}] Adds ListEnvironments support to Go, Nodejs and Python Automation API. [cli/display] Warn correctly about new versions being availablen when using the CLI dev channel [cli/new] Fixes duplicate printing of the AI prompt & answer on Windows. [engine] Fix bug where unimported resources (of different types) with the same name would cause `--import-file` to panic. [engine] Default parallel operations to a reasonable

[programgen] Fixes type-annotating nested resource properties when these have quoted keys [sdkgen] Temporarily revert validation of `urn` and `id` resource output properties [programgen/{dotnet,python}] Allow object keys to be template expressions such as static quoted strings [backend/service] Exclude internal events from those sent to Pulumi Cloud. [sdk/go] fixes fulfillValue error when joining a nil output state [pkg] Upgrade pulumi-java to v0.9.9 [yaml] Upgrade yaml to v1.4.5 [cli/config] Adds `pulumi config env ls` command to list the environment imports declared in a stack configuration. [cli/new] Adds pulumi new --ai functionality. [sdk/nodejs] Add an environment variable (`PULUMIERROROUTPUT_STRING`) to throw when an output tries to convert to a string. [auto/nodejs] Always run cleanup for refresh and destroy commands [auto/nodejs] Don't mutate original stack settings when saving [programgen] Avoid pretty printing large object graphs when a resource property doesn't type-check when binding PCL programs [cli/config] Fixes config copy command to also copy environments from the source stack [cli/config] Fix a bug in `pulumi config env ls --json` where the json flag was not being correctly passed through. [programgen/go] Fix required config variables of type bool and number [cli] Update esc to v0.6.2 [yaml] Upgrade yaml to 1.4.4 [cli/import] Import can now distinguish between logical names and source names. [programgen/{dotnet,go,nodejs,python}] Fix generated utility functions for filebase64, filebase64sha256, sha1 and mimeType [programgen/{nodejs,python}] Fix duplicated import statements when instantiating a component multiple times [cli] Update esc to v0.6.1 [auto/go] Add `ChangeSecretsProvider` to workspace and stack APIs. [auto/go] Adds AddEnvironments and RemoveEnvironment functions to Stack and LocalWorkspace types for Go Automation API. [auto/nodejs] Adds addEnvironments and removeEnvironment functions to Stack and LocalWorkspace classes for Nodejs Automation API. [auto/python] Adds addenvironments and removeenvironment functions to Stack and LocalWorkspace classes for python Automation API. [sdk/nodejs] Fix a bug in nodejs providers returning empty inputs on read. [sdkgen/go] Fix generated usage documentation for enum input types [cli] The CLI now uses the yaml converter plugin rather than yaml convert logic linked in. [cli/display] Fixes displaying `warning: GOCOVERDIR not set, no coverage data emitted` [engine] Don't validate URNs, this was causing issues with unexpected data from filestate backends. [sdkgen/nodejs] Include @types/google-protobuf as a dependency [cli] Add `--import-file` to `pulumi preview` to generate a placeholder import file for every resource that needs to Create. [sdk/nodejs] Add TypeScript definitions for the grpc and protobuf generated code. [auto] Don't swallow error if EditDir is not found in ProgramTest. [cli/display] Fix a panic in diff display when parsing YAML strings [auto/python] Ensures that the project_settings has a main directory for inline programs in python [engine] Error if a resource's parent is a skipped create. [engine] Warn if SDKs are trying to use old RegisterResource style StackReferences. [engine] Send resource inputs as inputs and state for Reads. [engine] Engine now prefers stable plugin versions to pre-releases when no explict version is given. [engine] Fix handling of delete failures for targeted destroys [sdkgen] Return all bind diagnostics in sdk-gen rather than just the first. [sdkgen/go] Fix compiling plain element type with plain maps [sdkgen/go] Fix generating input collection types for enums when used from an array of map of enums [backend/service] Service backend now validates snapshots are valid on load, same as the self managed backend. This can be disabled with

[cli/config] Include config values from ESC in `pulumi config` [cli/config] Add commands for managing stack environments [cli/config] Add a command to create an ESC environment from stack config [sdk/go] add optional display name and tag fields to project templates [sdk/nodejs] Enable resource imports for nodejs providers [cli/plugin] Load policy packs in parallel on startup to reduce startup time [sdkgen/dotnet] Added support for language specific settings for resources and support for overriding resource name in dotnet codegen [sdkgen/{go,nodejs,python}] Resource methods with plain: true outputs can now return plain values without an Output wrapper. In particular, this feature enables resource methods to serve as explicit provider factories by returning preconfigured explicit providers. [auto/go] Fix a datarace in cloning git repos. [auto/go] Fixes event stream lag on windows runtime [engine] Engine now correctly handles any resource name. [engine] Fix a panic in cancellation. [engine] Fix root directory passed to langauge plugins when starting pulumi in a subfolder. [sdkgen] Schemas now validate that 'urn' and 'id' are not used as resource output properties. [sdkgen] Fixes marshalling the "plain" flag from object or resource properties [yaml] Upgrade yaml to 1.4.3 [programgen/nodejs] Fix generated readFile function so that it includes the encoding and returns a string [sdkgen/{dotnet,go,nodejs,python}] No longer writing out name and project from alias definitions into SDKs, only type [sdk/go] Fix optional handling on nested props [sdk/nodejs] Use local storage to track per stack error log count [sdkgen/go] Fixes plain and optional properties for generated types for Go SDKs using generics [sdkgen/go] Generate non-plain type variants for types used as inputs inside unions [sdk/python] Introduces RuntimeError when we detect a cycle upon adding dependencies to the graph. Additionally adds "PULUMIERRORONDEPENDENCYCYCLES" as a new environment variable to control this behavior. Set to `False` to return to the previous behavior, which could potentially re-introduce infinite hangs for some programs. [cli/import] Generated import files from converter plugins omit empty optional fields. [yaml] Upgrade yaml to 1.4.2 [cli/engine] Fix an issue where the CLI could panic because of a newly introduced event [sdkgen/go] Fix generics-only option for go missing ToOutput(...) methods [cli/display] Adds display when policy packs are being loaded [sdk/dotnet] Update dotnet language host to 3.59.0. [engine] Fix ignore changes ignoring secret values. [sdk/python] Use `typing.Dict` in type annotation instead of `dict`. [engine] `import` can now create empty component resource to use as the parent of other imported resources. [engine] `import` can now import a parent resource in the same deployment as a child resource. [engine] Import files no longer need parent URNs in the name table for resource being imported in the same file. [cli/config] `config refresh` will now restore secret provider config from the last deployment. [cli/new] Simplifies URL parsing for pulumi new zip [components/yaml] Upgrade yaml to 1.4.1 [engine] Ignore spurious error from Kubernetes providers DiffConfig method. [sdk/python] Maintain old behavior for empty Kubernetes invoke results [auto] Allow shallow repository clones in NewLocalWorkspace [cli] Add support for ESC file projection [cli/new] Adds support for remote zip archive templates to pulumi new [engine] Support {NAME} in http plugin download URLs. [yaml] Update pulumi-yaml to 1.4.0 [auto/nodejs] Add `refresh` option for `up` [cli/new] Adds nested directory support to pulumi new .zip [auto/nodejs] Pin @grpc/grpc-js to v1.9.6 to resolve automation-api hang in NodeJS. [engine] Correctly propogate provider errors from DiffConfig. [engine] Fix parsing of property paths such as "root.[1]" being returned from providers. [programgen/go] Fix using inline invoke expressions inside resources, objects and arrays [sdk/python] Fix error on empty invoke returns [sdk/python] Fix traceback diagnostic from being printed when using Python dynamic providers [ci] Bump homebrew using pulumi's fork instead of pulumi-bot's [ci] Additional fixes for the homebrew release job [cli] Pull in fixes from esc v0.5.7 [cli/display] Fix misleading output in stack ls --json [sdkgen/python] Fix regression where constructing ResourceArgs would fail if required arguments were missing. [cli] Adds a new `pulumi install` command which will install packages and plugins for a project. [engine] Fix generation of property paths in

[cli/config] Don't crash on empty config values [sdkgen/python] Fix issue calling nonexistent `_configure` method on external types [sdkgen/python] Fix calling `_configure` with an Output value [auto/nodejs] Add support for the path option for config operations [engine] Converters can return diagnostics from `ConvertState`. [cli] Tightened the parser for property paths to be less prone to typos [engine] Fix handling of explicit providers and --target-dependents. [engine] Fix automatic diffs comparing against output instead of input properties. [sdkgen/dotnet] Fix codegen with nested modules. [programgen/go] Fix codegen to correctly output pulumi.Array instead of pulumi.AnyArray [cli/new] `pulumi new` now allows users to bypass existing project name checks. [sdk/nodejs] Nodejs now supports unknown resource IDs. [sdkgen/python] Fix `_configure` failing due to required args mismatch. [cli] Pull in fixes from esc v0.5.6 [protobuf] Add a config as property map field to RunRequest and pass that to the SDK [sdk/python] updates grpcio dependency [engine] Old inputs are sent to provider Delete functions, as well as the old outputs. [engine] Fix a panic in the engine when same steps failed due to provider errors. [engine] Engine is now more efficent about starting up provider processes, generally saving at least one process startup per deployment. [programgen] Fixes panic when binding the signature of output-versioned invokes without input arguments [sdkgen/python] Python SDK generation configure now correctly handles original property names for resource arguments (i.e. user provides `propName` instead of `propname`). [cli] allow unmarshalling nil as a config value. [auto/nodejs] Remove unneeded SxS check for inline programs [cli] Pull in fixes from esc v0.5.2 [engine] Add the new policy remediations feature. [auto] Added a tracing span for plugin launch [cli/package] Fix a panic in get-mapping when not passing a provider name. [engine] Engine will now error earlier if a deployment needs a bundled plugin that is missing. [sdk/{go,nodejs,python}] Fix MockMonitor reporting DeletedWith wasn't supported [programgen/python] Fix panic in python program-gen when rewriting index expressions [cli] Users can now set `PULUMIDISABLEAUTOMATICPLUGINACQUISITION` to disable the engine trying to auto install missing plugins. [pkg] Upgrade pulumi-java to v0.9.8 [cli/import] Import converters will write out their intermediate import file for manual fixups if needed. [sdkgen/go] Generate output-versioned invokes for functions without inputs [sdk/python] Add `default` arg to `Config.get_secret` [cli] policy publish: default to default-org if possible [cli] Fix a panic in `whoami` with tokens missing expected information. [engine] Calling RegisterResourceOutputs twice no longer panics and returns an error instead. [engine] ComponentResources now emit resourceOutputEvent on Deletion. This fixes the time elapsed timer not ending when the resource is deleted. [engine] Lifecycle tests shouldn't reuse a closed plugin host. [engine] ctrl-c should cause Pulumi to send cancellation signal to providers [engine] Fix a race condition in the engine access step event data. [engine] Restore elided asset contents into returned inputs and state from Read operations [engine] `DISABLEAUTOMATICPLUGIN_ACQUISITION` is respected for deployment operations now. [programgen] `pulumi import` supports resources with duplicate names, it will fail if referenced as a provider/parent due to the ambiguity. [programgen/dotnet] Fixes compiling an empty list of expressions from object properties [cli/about] `pulumi about` and `pulumi whoami` will now return information about the access token used to login to the service. [cli] Add filestate variables to `pulumi env`. [cli] Include a newline in `pulumi whoami`'s output [cli/import] `import --from=plugin` will now try to auto-install the plugin if missing. [engine] Fix creation and modification timestamps sometimes not setting. [engine] Fixes the engine using aliases from old deployments when writing out statefiles. [sdk/python] Resource property parameters are now runtime type checked to ensure they are a `Mapping` object. [engine] Provider mapping information lookups are now more efficient. Providers can also support multiple

[sdkgen/python] Generate output-versioned invokes for functions without inputs [sdkgen/dotnet] Fixes potential conflicts when generating resources called System [cli/engine] Errors writing out snapshots now print error messages to be seen by users. [sdk/go] Ensure Assets of AssetArchive are non-nil when creating and deserializing [cli/new] Fix selector wrapping on narrow terminals. [sdkgen/python] Fix error calling _configure when the value is None [engine] Program conversion plugins can now be passed extra arguments from `convert`. [sdkgen/go] Support generating Go SDKs that use generic input and output types [cli/new] `pulumi new` no longer defaults to a project name of "pulum" if ran in a folder called "pulumi". [engine] pulumi-test-language can now be used to test language runtimes against a standard suite of tests. [cli] Fixes panic when default org is not set and no org is provided to org search [engine] Fix aliases of parents tracking over partial deployments. [sdkgen/python] Python sdkgen now correctly sets default values on dicts passed as resource arguments. [cli/config] Allows org search for individual accounts [sdkgen/{go,nodejs,python}] Fix a bug in marshalling enums across gRPC [cli/state] `pulumi state edit` now handles multi-part EDITOR env vars (i.e. `emacs -nw`). [programgen/python] Fix deprecation warning triggering on ResourceArgs with default values. [cli] Adds `pulumi org search` and `pulumi org search ai` for Pulumi Insights in the CLI. These commands render a table containing all resources in a given organization matching the query provided. `-q <query>` will search for resources in the organization using a query provided in Pulumi Query Syntax. `-o <json|csv|yaml>` flag customizes the output. The `ai` command uses AI Assist to translate a natural language query into Pulumi Query Syntax. Default table output will show a count of displayed resources out of the total. Additional output includes the query run, a URL to view and explore search results in the Pulumi Console and the query, and the query run. Additional output is suppressed for non-table output formats such that they can be easily piped into other tools. The `--web` flag will open the search results in a default browser. [cli] Adds `pulumi ai` command - currently the only functionality in this group is `pulumi ai web`, which will open the Pulumi AI application in a default browser. An optional `--prompt/-p` flag can be provided with a query to pre-populate the search bar in the Pulumi AI application. By default, that prompt will be submitted automatically, but passing `--no-auto-submit` will prevent that. [engine] Support SDKs sending plugin checksums as part of resource requests. [cli/new] Fixes `pulumi policy new <template-name>` to not require `--yes` when run non-interactively. [cli] Pass args from import to state converters. [cli/config] Removes PULUMI_DEV flag for org search [sdkgen/python] Opting into pyproject.toml SDK generation no longer generates setup.py, but instead generates a standalone pyproject.toml that can be built with `python -m build .` [engine] Check for old resources first by URN and then aliases [sdk/nodejs] Fix a possible panic in running NodeJS programs. [sdk/go] Support multi-errors built from errors.Join for RunFunc, Exit, and friends. [sdk/go] Rename Join in pulumix to Flatten. [sdk/go] Add sdk/go/pulumix package with type-safe generics-based APIs to interact with Pulumi's core functionality. [sdk/go] Built-in Pulumi types all satisfy `pulumix.Input[T]` for their underlying types. [sdkgen/go] Generate types that are compatible with sdk/go/pulumix's type-safe APIs. [sdkgen/{nodejs,python}] NodeJS and Python packages no longer running plugin install scripts on package install. [cli/new] Fix regression where `pulumi new -s org/project/stack` would fail if the project already exists. [sdk/nodejs] Fix provider used for resource methods [cli] Some CLI prompts now support backspace, arrow keys, etc. [sdk/go] Add cmdutil.TerminateProcessGroup to terminate processes gracefully. [sdk/{go,nodejs,python}] Language plugins now clean up resources and exit cleanly on receiving SIGINT or CTRL_BREAK

[engine] Support runtime plugins returning plugin checksums from GetRequiredPlugins. [sdkgen/go] Implement option to override the name of the generated internal/utilities module [engine] Fix panic when analyzer plugin is not found on PATH. [programgen/go] Fixes go.mod version requirement [sdk/nodejs] When using closure serializtion, lookup package.json up from current working directory up to parent directories recursively [pkg] Update pulumi-yaml (v1.2.1 -> v1.2.2) pulumi-java (v0.9.0 -> v0.9.6) pulumi-dotnet (v3.54.0 -> v3.56.1) [sdk/python] Update grpc-io from 1.56.0 to 1.56.2 [yaml] Update pulumi-yaml to 1.2.1. [engine] Fixes some synchronization in plugin shutdown to prevent panics on Ctrl-C. [sdkgen/python] Fixes rendering v1.2.3-alpha.8 style of versions to valid PyPI versions when respectSchemaVersions option is set in sdkgen. [ci] Add preliminary support for GitHub's native merge queues. [engine] Pass Loader gRPC target to converter plugins. [sdk/go] Updates aws-sdk-go to 1.44.298 to enable support for sso-session link AWS profiles. [yaml] Update pulumi-yaml to 1.2.0. [sdkgen/dotnet] Generate output-versioned invokes for functions without inputs. [sdkgen/nodejs] Generate output-versioned invokes for functions without inputs. [cli/package] New experimental "pack-sdk" command to pack an SDK into an artifact. [cli/plugin] CLI will now warn when loading ambient plugins from $PATH. [programgen/dotnet] Fixes code generation of ForExpressions, both when creating a list or a dictionary. [programgen/dotnet] Fixes list initializer for plain lists in resource properties. [programgen/{go,nodejs}] Fix a bug in marshalling type refs across gRPC. [programgen/nodejs] Fixes parseProxyApply to handle nested outputs within index expressions. [sdk/nodejs] Fix finding the pulumi package when the runtime wasn't started in the project directory. [cli/plugin] Improve error message during `pulumi plugin install` if the plugin is bundled with Pulumi. [sdkgen/nodejs] Remove the pluginVersion and pluginName options from nodejs schema options. [cli] Revert warning about ambient plugins loaded from $PATH #13607. [programgen/dotnet] Fix typing for optional and complex config variables in main program [cli/new] Support SSH-style Git URLs, including private template repositories for `pulumi new` [sdk/nodejs] NodeJS programs will now warn that undefined values will not show as stack outputs. [cli/plugin] CLI will now warn when loading ambient plugins from $PATH. [cli] Several fixes for `pulumi logs` including support for first-class providers, support for ambient credentials and improved error reporting. [cli/state] Fix panic in `pulumi state edit` when no stack is selected. [engine] Language plugins now defer schema loading to the engine via a gRPC interface. [programgen/{dotnet,go,nodejs,python}] Normalize the declaration name of generated resource components [sdk/python] `Output.from_input` now recurses into tuples. [sdkgen] Fix bug binding provider schema where type default int values could not take integers. [sdkgen/python] Fixes python external enum types missing the import reference to the external package. [sdk/go] Move some types to an internal package, re-exporting them from sdk/go/pulumi. This should have no meaningful effect on users of these APIs. [sdk/go] Bump the minimum required versions of google.golang.org/genproto and google.golang.org/grpc. [engine] Fix --target-dependents from targeting all resources with default providers. [engine] Fix a panic when trying to construct a remote component with an explicit provider configured with unknown values during preview. [programgen/go] Fix conflicting imports generated when two imported packages have the same name. [programgen/nodejs] Fixes issue with javascript program generation where enums would incorrectly reference the package rather than the import alias. [cli/state] Adds `pulumi state edit` an experimental developer utility for manually editing state files. [programgen] Allow binding unsupported range and collection types in non-strict mode for pulumi convert [programgen/nodejs] Improve static typing of config variables in main program [sdk/{go,nodejs,python}] Add support for reporting resource source positions [sdk/{nodejs,python}] Support explicit providers for packaged components [cli/config] Pulumi no longer falls back on old config when config resolution fails (except for `pulumi destroy --stack <stack-name>` where the config may be

[cli/new] Fix the use of uninitalized backend when running `new` with --generate-only. When --generate-only is set `new` will skip all checks that require the backend. [engine] Fix alias resoloution when parent alieses where also aliased. [engine] Validate URNs passed via ResourceOptions are valid. [engine] Add a missing lock that could cause a concurrent map read/write panic. [programgen/go] Fix panic in GenerateProject when version is not set in schema [sdkgen/{go,nodejs}] Fix ReplaceOnChanges being dropped in Go and NodeJS codegen. [programgen/nodejs] Fix interpolated strings used as keys of maps [cli/plugin] Automatically install pulumiverse provider plugins during convert. [cli/plugin] Fix lookup of side-by-side binaries when PULUMIIGNOREAMBIENT_PLUGINS is set. [sdk/python] Move some global state to context state for parallel updates. [programgen] Consistently use the same non-strict bind options when applicable [programgen] Propagate SkipRangeTypechecking option down to program components [programgen/{dotnet,go,nodejs,python}] Allow generating code for unknown invokes (tf data sources) in non-strict mode [programgen/go] Adds explicit package versioning to Golang codegen [sdk/go] Fix downloading of unimported external plugins. [cli/new] `pulumi new -s 'org/project/stack'` checks the specified organization for project existence rather than the currentUser. [cli/new] When providing a `--stack` and `--name` to `pulumi new`, the project names must match before creating Pulumi.yaml. [cli/plugin] Fix interpolation of vesion into http plugin source URLs. [sdk/nodejs] Add dependency on @opentelemetry/instrumentation [sdk/nodejs] Node.js dynamic providers mark serialized functions as secret if they capture any secrets [sdk/python] Python dynamic provider serialized code is now saved to state as secret. [cli] Improve the CLI stack validation error message [engine] Old inputs are sent to provider Diff and Update functions, as well as the old outputs. , that field is relative to the directory containing package.json. [programgen/{nodejs,python}] Prefer output-versioned invokes in generated programs for nodejs and python [cli/state] The upgrade command now prompts the user to supply project names for stacks for which the project name could not be automatically guessed. [cli/state] Add interactive URN selection to `pulumi state {rename,unprotect,delete}`. [auto/nodejs] Adds a better error message for invalid NodeJS AutoAPI workDir. [cli] Stack output on the console no longer escapes HTML characters inside JSON strings. This matches the behavior of the `--json` flag. [engine] Engine marks outputs secret if an output of the same name is marked secret. [sdkgen] Fix loading schemas from providers on PATH. [cli/display] Print the summary event for previews that contain non-error level diagnostic messages. [cli/display] Fix diffs sometimes not showing even in details view. [cli/package] Fixes resolving plugins when they are not yet installed in plugin cache [cli/state] Disallow renaming resources to invalid names that will corrupt the state. [programgen/go] Fix aliasing package names using dashes when schema doesn't include go package info override [programgen/go] Use raw string literals for long, multi-line strings. [sdk/{go,nodejs,python}] Missing config error text includes "--secret" if requireSecret was used. [sdkgen/nodejs] Fix isInstance methods for generated provider types. [pkg/testing] ProgramTest dropped the CoverProfile option as it's no longer necessary. [sdk/nodejs] Update @grpc/grpc-js to 1.8.16. [programgen] Allow traversing unknown properties from resources when skipping resource type checking [backend/filestate] Fix auto-opt-in to project mode. [cli] `pulumi convert` will now cleanup temporary pulumi-convert directories when the command is finished. [cli] Fix Markdown formatting issues in command usage. [cli] Fix `stack rm` removing config files for the wrong project. [cli/config] No longer error on directory read permissions when searching for project files. [cli/display] Fix diff display partially parsing JSON/YAML from strings. [cli/display] Fix large integers displaying in scientific notation. [cli/display] Update summary is now correctly shown when `advisory` and `disabled` policy events are encountered. [cli/display] Fix formatting bugs in display causing text like (MISSING) showing in

[cli/display] On Windows, make `pulumi state unprotect` command suggestion use double-quotes instead of single-quotes. [cli/new] `pulumi new` now correctly supports numeric stack names. [cli/new] Fix empty config values being added to the config file as part of `new`. [cli/plugin] Fixes the output of plugin rm --yes command to explicitly say that plugins were removed [engine] Fix wildcards in IgnoreChanges. [engine] Fix ignoreChanges setting ignore array indexes to zero. [sdk/nodejs] Write port to stdout as a string so Node doesn't colorize the output [sdk/python] Allow tuples as Sequence input values to resources. [sdkgen/python] Python SDK only prints a Function Invoke result's deprecation messages when using getters rather than on instantiation. [cli] Make no retry attempts for the Pulumi new version query. This should speed up the CLI in certain environments. [cli/state] Fix panic caused by an invalid stack when a parent resource is renamed in the state. Now, parent references are also updated when the resource is renamed. [cli] Revert go.cloud update to fixes issues with using azure object store and secrets. [cli] Don't warn about the CLI version being out of date on every run. The CLI will now only warn once a day, when it queries for the latest version. [programgen/{dotnet,go,nodejs,python}] Extend SkipResourceTypechecking to allow generating unknown resources [cli/package] Add a "get-mapping" command to query providers for their mapping information. [cli/config] `pulumi destroy` now sets the `encryptedkey` every run like the rest of the CLI commands. [engine] Fix aliasing children [sdk/nodejs] Fix Parent/NoParent aliases [sdk/nodejs] Fixes uncaught rejections on the resource monitor terminating causing Automation API programs to exit prematurely. [backend/filestate] Add an option to the Upgrade operation allowing injection of an external source of project names for stacks where the project name could not be automatically determined. [sdk/go] Adds `tokens.ValidateProjectName` to validate project names. [cli] Support for `pulumi convert --from terraform` [cli] Make convert errors more clear to users [programgen/{dotnet,go}] Add support for the singleOrNone intrinsic [engine] Fix plugin installation when looking up new schemas. [programgen] Fixes range scoping for PCL components [programgen] Fixes panic when trying to convert a null literal to a string value [sdkgen/dotnet] sdkgen no longer sets the UseSharedCompilation project setting. [programgen/python] Fixes python panic when emiting code for index expressions that aren't typechecked [sdkgen/python] Fixes python always printing input deprecation messages. [cli] 'convert' now defaults to be more leniant about program correctness, old behaviour can be toggled back on with --strict. [engine] DeletedWith ResourceOption is now inherited from its parent across SDKs. [engine] Add 'pulumi:tags' config option to set stack tags. [pkg] Upgrade pulumi-java to v0.9.4. [programgen/nodejs] Allow output variables to have the same identifier as other program nodes [sdk/nodejs] Add support for asynchronous mock implementations [cli/new] Escape special characters in project description [engine] Fixes a bug where targeted previews would error on deletes of targeted resources. [programgen/dotnet] Only await task-returning invokes in dotnet program-gen [programgen/{dotnet,go}] Do not error out when generaing not yet implemented ForExpressions [cli/plugin] Language plugins respect PULUMIIGNOREAMBIENT_PLUGINS. [programgen/go] Fix conversion of programs with components for Go. [programgen/go] Fix panic in go program-gen when encountering splat expressions [programgen/{go,nodejs}] Fix a panic in diagnostics from go/nodejs project generation. [programgen/nodejs] Only await promise-returning invokes in typescript program-gen [auto/python] Add support for the path option for config operations [cli] Replace heap profiles with allocation profiles and add a flag, --memprofilerate, to control the sampling rate. --memprofilerate behaves like the -memprofilerate flag to `go test`; set it to "1" to profile every allocation site. [cli] The convert and import commands will try to install plugins needed for correct

[cli/plugin] Plugin install auto-fills the download URL for some known third-party plugins. [engine] Provider plugins are now loaded as needed, not at startup based on old state information. [programgen] Include the component source directory in diagnostics when reporting PCL errors [programgen/{nodejs,python}] Implement singleOrNone intrinsic [sdkgen/python] Generate a pyproject.toml file. This enables Python providers to build Wheels per PEP 621 [backend] Fixes a bug where Resource instances as stack exports got printed as if it had diff in the end steps [engine] Fix --replace behavior to be not considered a targeted update (where only --replace resources would be targeted). [backend/filestate] Fix the project filter when listing stacks from new stores that support per-project stack references. [backend/filestate] Fix stack rename renaming projects for the self-managed backend. [programgen/go] Do not error when generated Go code cannot be formatted [cli/plugin] Fixes PULUMIDEBUGGRPC to surface provider errors [sdkgen/go] For properties with environment variable defaults, differentiate between unset environment variables and empty. [sdkgen/go] When a property has an environment variable default, and the environment variable is not set, sdkgen would incorrectly set it to the zero value of that property. Fixes by only setting the property if the environment variable is set. [sdkgen/go] Fix versioned typerefs being marshalled across code generator RPCs. [backend/service] Improve memory consumption and decrease CPU time required when using snapshot patching [engine] Step generation now uses old inputs for untargeted resources and does not send current inputs to `Check()` on providers. [sdk/go] Fix regression disallowing placing a Pulumi program in a subdirectory of a Go module. [programgen/nodejs] Allow iterating dynamic entries in TypeScript [programgen/go] Module support as component resources [engine] Non-targeted resources are now added to internal update plans fixing a bug where the step_executor would error due to missing resources in the plan. [programgen] Fix stack overflow panic when pretty printing recursive types [sdk/nodejs] Revert recursive package.json lookup. [sdk/go] testing.Environment now tolerates errors in deleting the test environment. [sdk/nodejs] Replaces empty interfaces with type aliases. Empty interfaces are equivalent to their supertype; this change expresses these type definitions using type aliases instead of interface extention to provide better clarity. This change will not affect type-checking. , that field is relative to the directory containing package.json. [build] Fixes race condition in building Go sdk. [cli] Convert to PCL will recover from panics in program binding. [engine] Fix bug with targeting and plans where root stack resource and target-replaces were not being marked targeted. [engine] Fix the engine trying to install the pulumi-resource-pulumi plugin which is builtin. [programgen] Allow null literal as a default value for config variables [programgen] Fix panic on component type traversal [sdk/python] Fix hang due to component children cycles [sdk/nodejs] With Node14 sunset on April 30, the minimum version of Node is now Node 16. [cli] `convert` now prints all diagnostics from program conversion [programgen/nodejs] Support range expressions that are of type output [programgen/python] Support range expressions that are of type output [cli] Fix destroy without project file. [engine] Fix bug where non-default providers are created even when not specified as a target. [backend/filestate] Improve performance of project-existence check. [backend/filestate] Revert change causing `provided project name "" doesn't match Pulumi.yaml` error [auto/nodejs] Add `excludeProtected` option for `destroy` [auto/nodejs] Add `refresh` option for `preview` [cli] Speed up conversion mapping lookups for the common case of Pulumi names matching external ecosystem names. [engine] Support propagating more resource options to packaged components. [cli/display] Pulumi CLI can now display messages provided by the service. [sdk/go] Support new options on packaged components (MLCs), including: AdditionalSecretOutputs, Timeouts, DeletedWith, DeleteBeforeReplace, IgnoreChanges, ReplaceOnChanges, and RetainOnDelete. [sdk/go] Support vendored dependencies for Pulumi

[cli] Fix destroy without project file. [programgen] Allow using option(T) in range expressions [sdk/go] Ensure that dependency searches happen in the Pulumi program directory. [pkg/testing] Fix failure in writing a package.json for test overrides. [pkg/testing] ProgramTest now supports --exclude-protected during stack cleanup. [cli/display] Adds an indicator for resources that are being deleted/replaced with `retainOnDelete` set as well as an itemized warning. [backend/{filestate,service}] Add more information to `pulumi stack history` (Update CLI Args, Environment Variables, Pulumi Version, OS, Architecture). [pkg/testing] deploytest: Fix nil custom timeouts and timeouts smaller than a minute being ignored. [programgen] Do not panic when PCL attribute type or PCL resource variable type isn't fully bound [sdk/go] Fixed NewResourceOptions dropping MLC dependencies from the options preview. [programgen/nodejs] Linearize component resource nodes [sdk/python] Fix component resources not correctly propagating the `provider` option to their children. This is a re-application of #12292, which was previously reverted in #12522. [sdk/python] Fix multi-language components dropping the `provider` option intended for their descendants. [sdkgen/python] Fix referencing local types with a different package name [pkg] Bump pulumi-terraform-bridge [programgen] Do not panic when the type of PCL local variable isn't known [cli/config] Fix config set-all not saving secret provider configuration. [cli/display] Fix a panic when diffing empty archives. [programgen] Suppport the `any` type in config and outputs. [sdk/go] Fix hang due to component children cycles [sdk/nodejs] Fix hang due to component children cycles [sdk/python] Fix hang due to component children cycles [backend/filestate] Propagate request context to external call sites. [yaml] Updates Pulumi YAML to v1.1.0. [programgen/python] Impleneted python program-gen for PCL components [programgen/{nodejs,python}] Fixes the type signature of PCL function "entries" to return list of key-value pair objects [cli/package] Fix bug in `package get-schema` subcommand caused it to bail on certain providers. [cli/state] Fixes panic when renaming providers in `pulumi state rename`. [backend/filestate] Add support for project-scoped stacks. Newly initialized backends will automatically use this mode. Set PULUMISELFMANAGEDSTATELEGACY_LAYOUT=1 to opt-out of this. This mode needs write access to the root of the .pulumi directory; if you're using a cloud storage, be sure to update your ACLs. [cli/state] Add 'upgrade' subcommand to upgrade a Pulumi self-managed state to use project layout. [cli/display] Fix a bug in the interactive update tree display where small terminals would cause the Pulumi CLI to panic. [sdkgen/dotnet] Fix a whitespace error in generated .csproj files. [backend/filestate] Print a warning if a project-scoped backend has non-project stacks in it. Disable this warning by setting PULUMISELFMANAGEDSTATENOLEGACYWARNING=1. [sdkgen/python] In codegen, use 3.7 as a default if not provided. [backend/filestate] Don't write a state metadata file for legacy layouts. This should prevent permissioning issues for users with tight access control to the storage backend. [docs] Fix filename clashes between resources and functions on case-insensitive filesystems in docsgen. [engine] Fix updating a resource from a component to custom resource. [engine] Revert PR moving deletedWith inheritance logic to the engine as `get` resources and packaged components are incompatible. [sdk] Fix multiplied retries when downloading plugins. [auto/go] Added support for the path option for config operations [backend/filestate] Rename state metadata file from .pulumi/Pulumi.yaml to .pulumi/meta.yaml. This is an internal detail to the self-managed backend's storage format intended to avoid confusion with Pulumi project files, and should not affect most users. [engine] Enhances the state schema to track fields `Created`, `Modified` per each resource. The timestamp is captured in RFC3339. It pertains to timestamps of state modification done by the engine. [engine] DeletedWith ResourceOption is now inherited from its parent across SDKs. [programgen/{dotnet,nodejs}] Object-typed config variables for components [sdk] common: Fix extraneous backoff during

[sdkgen/dotnet] respectSchemaVersion now writes the package version to the .csproj file. [sdk/python] Revert #12292 to unbreak some users. [sdkgen/{dotnet,go,nodejs,python}] Add respectSchemaVersion to schema. [sdk] Make default logger thread-safe. [sdk/go] Track rehydrated components as dependencies. [sdkgen/go] Fixes emission of dup types breaking Go compilation when chunking >500 helper types. [cli] Improve CLI upgrade instructions for macOS. [programgen] PCL program.WriteSource(afero.Fs) writes the full directory tree of PCL source files. [programgen/{dotnet,go,nodejs,python}] Implement description as comments or docstring for config variables in program-gen [programgen/{dotnet,nodejs}] Component resources implementation including nested components [backend/service] Add "--teams" flag to assign team name to stack during init [auto/go] Fix memory leak in stack.Up() in Automation API. [auto/{go,nodejs,python}] Fix calling WhoAmI against pre 3.58 CLIs. [engine] Fixed automatic plugin downloads for third-party plugins. [programgen/python] Fix handling of reserved words in imports. [ci] Bumps python version in matrix to 3.11 [auto/go] Add WhoAmIDetails which includes user, url and organizations to Go Automation API [auto/nodejs] Add url and organizations to WhoAmIResult for NodeJS Automation API [auto/python] Add url and organizations to WhoAmIResult for Python Automation API [cli] Add `--json` flag to `pulumi whoami` to emit output as JSON [cli/display] Add a view in browser shortcut to the interactive display. [programgen/dotnet] PCL components and dotnet program-gen implementation [programgen/{dotnet,go,nodejs,python}] Add "NotImplemented" PCL function intrinsic [sdk/go] Adds `NewInvokeOptions` to preview the effect of a list of `InvokeOption` values. [cli/display] Do not treat single-line strings as YAML values [sdk/go] Fixes an ID handling bug in provider_server Read implementation [sdk/go] Fixes use of Provider option from parent resources with mismatched packages. [cli/plugin] Fix sending empty tokens to GitHub API. [cli/display] Autoscroll the interactive display and support pgup/pgdown [programgen] Support `options.retainOnDelete` on resources in PCL. [sdkgen/dotnet] Update sdkgen to target dotnet 6. [programgen/{dotnet,go,nodejs,python}] Adds support for generating RetainOnDelete options. [auto/go] Enable programmatic tagging of stacks (Go only) [auto/python] Enable programmatic tagging of stacks (Python only) [sdk/go] Adds `NewResourceOptions` to preview the effect of a list of `ResourceOption` values. [sdk/python] Added support for shimless Python plugins. [cli/display] Reorder options to handle pending creates. Users can now hold enter to select the clear option which should be more ergonomic. [auto/{dotnet,go,nodejs,python}] Fix support for specifying a git commit for remote workspaces [auto/go] Fetch commits before checkout [auto/go] The various workspace load routines (e.g. LoadProject) are no longer singularly cached. [sdk/go] Fixes overwrite of the Provider option by the Providers option due to ordering. [auto/nodejs] Fixes issue with specifying a git username for remote workspaces [sdk/python] Fixes Component Resources not correctly propagating the provider option to its children. [sdk/go] common/util/contract: Deprecate functions that don't accept printf-style arguments. [cli/display] Display now shows default colorized stacktraces in NodeJS. [cli/plugin] Plugin download urls now support GitLab as a first class url schema. For example "gitlab://gitlab.com/43429536". [backend/service] Reduce retrieval-validation latency for update tokens [sdk/go] Fix panic from attempting to create a resource with an uninitialized parent resource. [cli/import] Fixes panic on incomplete resources in JSON file. [sdk/nodejs] Cleanup temporary pulumi-node-pipes folders after running. [sdk/nodejs] Fix stack outputs picking up co-located JSON files. [cli/plugin] Remove temporary files from plugin downloads. [sdk/go] common/resource/testing: Returns strongly typed generators instead of `interface{}` generators. [sdk/python] grpc 1.51.3 Python SDK contains native arm64 binaries (universal2) [cli] Remove the `[experimental] yes, using Update Plans` prompt. [backend/filestate] pulumi login gs:// to support google oauth access tokens via environment variable for Google Cloud Storage backends [sdk/go] Adds StackReference.GetOutputDetails to retrieve outputs from StackReferences as plain objects. [sdk/nodejs] Adds StackReference.getOutputDetails to retrieve outputs from StackReferences as plain objects. [sdk/python] Adds StackReference.getoutputdetails to retrieve outputs from StackReferences as plain objects. [cli] Fix verbose logging to filter

[engine] This fixes an issue where 'pulumi state delete ' would prompt the user to disambiguate between multiple resources in state with the same URN and proceed to delete all of them. With this change, dependency checks are performed only if the deletion will lead to no resources possessing the URN. The targetDependents flag will only target dependents if the deleted resource will orphan the dependents. [engine] Fixed issue where pulumi displays multiline secrets when the newlines(' ') are escaped. [sdkgen/go] Prevent defaults from overriding set values. [pkg] Raise 'go' directive to 1.18. [sdk/go] Raise 'go' directive to 1.18. [cli] Add `--shell` flag to `pulumi stack output` to print outputs as a shell script. [cli] Add `--insecure` flag to `pulumi login` which disables https certificate checks [programgen] Add a new `unsecret` intrinsic function to PCL. [sdkgen/go] Go SDKs now use `errors.New` instead of `github.com/pkg/errors.New`. [auto] Add support for cloning from Azure DevOps [sdkgen] Correctly error on resource using the reserved name "provider". [sdk/python] Fix handling of Output keys in dicts passed to Output.from_input. [sdk/go] Delegate alias computation to the engine [sdk/python] Delegate alias computation to the engine [engine] Revert go-cloud upgrade to fix issues with Azure secrets. [auto/nodejs] Enable programmatic tagging of stacks (Nodejs only) [sdk/go] Coerces output values in ApplyT calls if the types are equivalent. [sdk/nodejs] Add optional / backwards compatible generic types to pulumi.dynamic.ResourceProvider. [auto/nodejs] Fix NodeJS automation api always setting the PULUMI_CONFIG environment variable. [cli/display] Display text-based diff if yaml/json diff is semantically equal [sdk/go] Fixes data race in provider plugin resulting in weakly typed secrets. [sdk/nodejs] Fix handling of recursive symlinks in node_modules. [engine] Fix launching non-Go plugins on Windows. [sdk/go] Allows users to discover if their program is being run with a mock monitor [sdk/nodejs] Add support for custom naming of dynamic provider resource. [sdkgen/{dotnet,nodejs}] Initial implementation of simplified invokes for dotnet and nodejs. [cli/display] Fixes #11864. Pulumi panics before main when Pulumi.yaml provider plugin does not have a path provided. [sdk/{go,nodejs,python}] Fix DeletedWith resource option [sdk/python] Fix a TypeError in Output.from_input. [sdk/go] Add JSONUnmarshal to go sdk. [sdk/python] Add output json_loads using json.loads. [cli/new] Allow running inside new VCS repositories. [auto/python] Fix issue specifying log_verbosity [protobuf] Downstream implementers of the RPC server interfaces must embed UnimplementedServer structs or opt out of forward compatibility. Happy New Years from the Pulumi team! This is our first release of 2023, and we're very excited for all the things to come this year. [sdk/nodejs] Add output jsonParse using JSON.parse. [cli/display] Fix flickering in the interactive display [cli/plugin] Fix check of executable bits on Windows. [codegen] Revert change to codegen schema spec. We're approaching the end of 2022, and this is the final minor release scheduled for the year! Thank you very much to our wonderful community for your many contributions! [auto/{go,nodejs,python}] Adds SkipInstallDependencies option for Remote Workspaces and signatures are uploaded to the . [cli] Adds a flag that allows user to set the node label as the resource name instead of full URN in the stack graph [cli] pulumi destroy --remove will now delete the stack config file [cli] Allow rotating the encrpytion key for cloud secrets. [cli/{config,new,package}] Preserve comments on editing of project and config files. [sdk/dotnet] Add Output.JsonSerialize using System.Text.Json. [sdk/go] Add JSONMarshal to go sdk. [sdkgen/{dotnet,nodejs}] Initial implementation of simplified invokes for dotnet and nodejs. [sdk/nodejs] Delegates alias computation to engine for Node SDK [sdk/nodejs] Emit closure requires in global scope for improved cold start on Lambda [sdk/nodejs] Add output jsonStringify using JSON.stringify. [sdk/python] Add json_dumps to python

[backend/service] Fixes out-of-memory issues when using PULUMIOPTIMIZEDCHECKPOINT_PATCH protocol [cli] Improve performance of convert to not try and load so many provider plugins. [programgen] Don't panic on some empty objects [cli/display] Fixes negative durations on update display. [programgen/go] Check for optional/ Ptr types within Union types. This fixes a bug in Go programgen where optional outputs are not returned as pointers. [sdkgen/{dotnet,go,nodejs,python}] Do not generate Result types for functions with empty outputs [sdk/python] Fix a deadlock on provider-side error with automation api [sdkgen/{dotnet,nodejs}] Fix imports when a component is using another component from the same schema as a property [sdkgen/go] Illegal cast in resource constructors when secret-wrapping input arguments. [sdk/nodejs] Remove function serialization code for out of suppport NodeJS versions. queue-merge: true run-dispatch-commands: true version-set: { "dotnet": "6.0.x", "go": "1.18.x", "nodejs": "14.x", "python": "3.9.x" } [sdk] Add methods to cast pointer types to corresponding Pulumi Ptr types unblocking Docker Image resource support in a future Docker provider release. [backend/service] Allows the service to opt into a bandwidth-optimized DIFF protocol for storing checkpoints. Previously this required setting the PULUMIOPTIMIZEDCHECKPOINT_PATCH env variable on the client. This env variable is now deprecated. [cli/about] Add fully qualified stack name to current stack. [sdk/{dotnet,nodejs}] Add InvokeSingle variants to dotnet and nodejs SDKs [docs] Exclude id output property for component resources [engine] Fix an assert for resources being replaced but also pending deletion. [pkg] Fixes codegen/python generation of non-string secrets in provider properties [pkg/testing] Optionally caches python venvs for testing [programgen] Improve error message for invalid enum values on `pulumi convert`. [programgen] Interpret schema.Asset as pcl.AssetOrArchive. [programgen/go] Convert the result of immediate invokes to ouputs when necessary. [programgen/nodejs] Add `.` between `?` and `[`. [programgen/nodejs] Fix capitalization when generating `fs.readdirSync`. [sdk/nodejs] Fix regression when passing a provider to a MLC [sdk/python] Allows for duplicate output values in python [sdkgen/go] Fixes superfluous newline being added between documentation comment and package statement in doc.go [sdkgen/nodejs] Generate JS doc comments for output-versioned invokes and use explicit any type. [cli] Don't print update plan message with --json. [cli] `up --yes` should not use update plans. [cli] Add prompt to `up` to use experimental update plans. [sdk/python] Don't error on type mismatches when using input values for outputs [sdk/{dotnet,go,nodejs}] Attempt to select stack then create as fallback on 'createOrSelect' [cli] Added "--from=tf" to pulumi convert. [engine] Engine and Golang support for language plugins starting providers directly. [sdk/dotnet] Add DictionaryInvokeArgs for dynamically constructing invoke input bag of properties. [sdk/go] Allow sane conversions for `AsMap` and `AsArray` conversions. [sdkgen/{dotnet,nodejs}] Add default dependencies for generated SDKs. [sdkgen/nodejs] Splits input and output definitions into multiple files. [cli] Fix stack selection prompt. [engine] Always keep resources when pulumi:pulumi:getResource is invoked [pkg] Fix a panic in codegen for an edge case involving object expressions without corresponding function arguments. [programgen] Enable type checking for resource attributes [cli/display] Fix text cutting off prior to the edge of the terminal [programgen/{dotnet,go,nodejs,python}] Don't generate traverse errors when typechecking a dynamic type [sdk/{go,nodejs,python}] Set acceptResources when invoking pulumi:pulumi:getResource [sdk/python] Copy ResourceOptions correctly during a merge. [cli] Enables debug tracing of Pulumi gRPC internals: `PULUMIDEBUGGRPC=$PWD/grpc.json pulumi up` [cli/display] Improve the usability of the interactive dipslay by making the treetable scrollable [pkg] Add `DeletedWith` as a resource option. [programgen] More programs can be converted to Pulumi when using `pulumi convert`, provider bridging, and conversion tools by allowing property accesses and field names to fall back to a case insensitive lookup. [engine] Disable auto parenting to see if that fixes #10950. which fixes a bug encountered using templates with project level config. [sdkgen/go] Allow resource names that conflict with additional types. [sdkgen/go] Guard against conflicting field

[sdk/python] Handle None being passed to registerresourceoutputs. [programgen/{dotnet,go,java,nodejs,python}] Support a logical name for config vars [sdk/dotnet] Make the `LocalSerializer` class public. containing runtime support for external config. [engine] Fix a bug in update plans handling resources being replaced due to other resources being deleted before replacement. [engine] Pending deletes are no longer executed before everything else. This correctly handles dependencies for resource graphs that were partially deleted. [engine] Expand duplicate URN checks across direct URNs and aliases. [auto/dotnet] Support for remote operations [cli/config] Typing made optional, extended short-hand values to arrays and correctly pass stack name to config validator [auto/go] Support for remote operations [auto/nodejs] Support for remote operations [auto/python] Support for remote operations [sdk/{go,yaml}] Block IsSecret until secretness is known [sdk/{go,yaml}] Prevent race on resource output [cli/state] Add the --target-dependents flag to `pulumi state delete` [cli] Hard reset the templates checkout to work around a go-git issue with ignored files. [auto/dotnet] allow deserializing complex stack config values. [auto/{dotnet,go,nodejs,python}] detect concurrent update error from local backend. [cli] Allow globbing for resources that do not yet exist [auto/dotnet] Add Json option to UpdateOptions. [build] Fix release build to continue to use MacOS 11. [engine] Prevent concurrent read/writes to the component providers map. [engine] Fix an invalid cast in analyzer plugins. [auto/go] Add InstallPluginFromServer method [auto/nodejs] Add InstallPluginFromServer [auto/python] Add installpluginfrom_server [cli] Implement initial MVP for hierarchical and structured project configuration. [cli] Allow rotating the passphrase non-interactively [programgen] Add error reporting infrastructure [ci] Fix pull request URLs in Pulumi changelogs [engine] Fix type validation of stack config with secure values. [cli/engine] Component Resources inherit thier parents providers map [cli/import] Only trigger an import when necessary during refresh. [sdk/go] Allow decoding asset and archive values [sdkgen/{go,python}] Handle hypheneated names in go and python [sdk/nodejs] Fixes loss of undefined type case in `all()` [sdk/python] pulumi.automation.createorselect_stack() attempts to select the stack before attempting to create [sdk/python] Python runtime now respects the --parallel flag. [protobuf] Bumps python grpcio version [sdk/go] Update notes, update the deprecated functions, make some lint. [sdkgen/{go,python}] Revert 10738, fixing python class generation [auto/nodejs] Adds support for parallel programs in NodeJS Automation API [backend/service] Implements diff-based snapshot saving protocol that reduces bandwidth on large stacks. To opt into this feature, set the environment variable and value `PULUMIOPTIMIZEDCHECKPOINT_PATCH=true`. [engine] Adds structured alias support to the engine [cli/display] Displays time elapsed when modifying a resource. [sdk/go] Modifies built-in As-ArrayOutput methods to attempt to convert []interface{} to []T. [sdkgen/go] Add `modulePath` to go, allowing accurate `go.mod` files for prerelease packages [cli/new] Add --remove flag to`pulumi destroy` [cli] Project path is included in error messages when a project can't be loaded. [cli/display] Fix gocloud unconditonally writing to stderr. [cli/{display,engine}] Use of unsupported ResourceOptions on components will no longer raise resource warnings, instead they are just logged to the diagnostic error stream. [cli/import] Handle importing resource properties that are typed as a union [cli/package] Require a path separator for path based binaries. This allows us to distinguish between ./myProvider (execute the binary at path) and myProvider (execute the installed plugin). [programgen/dotnet] Annotate deeply nested objects with their schema types and apply property name overrides [programgen/go] Fixes int constant range expressions for go [programgen/go] Missing default case handling when generating local variables [sdk/go] Avoid backfilling property deps for Go [sdkgen] Re-enables caching the schemas of versioned provider plugins. [programgen/python] Recursively annotate expressions under invoke calls with their associated schema types containing bug fixes and improvements primarily for `pulumi convert` from YAML." [cli/new] Fix cloning templates from Azure DevOps

[docs] Allow more flexible parsing when extracting examples from doc comments [sdkgen/python] Fixes dangling type-refs generated under compatibility=tfbridge20 for schemas that refer to types aross modules. [backend] Allows CLI auth for Azure blob storage [cli/{about,plugin}] Remove experimental feature for plugins from private github releases. This is now supported by `github:` plugin urls, see https://www.pulumi.com/docs/guides/pulumi-packages/how-to-author/#support-for-github-releases. [sdk/go] Adds an `UnsafeAwaitOutput` function to the Go SDK. This permits a workaround for component providers and other advanced scenarios where resources created are conditional on an output. [sdk/python] Add invoke to Provider interface. [sdk/python] Add Output.format to the python SDK. [cli] Prevent sending on a closed channel panics during 'pulumi convert' [programgen/go] Fix codegen for `apply` functions [sdk/go] Go programs run with Go 1.17 or below failed due to go mod tidy being run with -compat=1.18. The change is reverted. [sdk/go] Fixed bug in (ours, theirs) to (theirs, theirs) [sdk/python] Fix KeyError in UpdateSummary. [sdkgen/nodejs] Fixes a bug with lazy-loaded modules that caused mixins to observe unexpected null values. [cli] Allow per-execution override of the cloud secrets provider url via the `PULUMICLOUDSECRET_OVERRIDE` environment variable. This allows a temporary replacement without updating the stack config, such a during CI. This does not effect stacks using service secrets or passphrases. [cli/new] Enables `pulumi new` to use templates from Azure DevOps(currently limited to master/main branches and does not support providing subdirectories). [engine] 'pulumi policy new' now uses the same system as 'pulumi new' to install dependencies. [programgen] Support resource option "version" in `pulumi convert` to select specific provider SDK versions. [cli/plugin] Don't retry plugin downloads in 403 and 404 responses [sdk/dotnet] Added `Deployment.OrganizationName` to return the current organization if available. [sdk/go] Pulumi Go Programs now support a Pulumi.yaml option `buildTarget: path/to/binary` to compile/recompile a Go binary to that location. [sdk/go] Added `Context.Organization` to return the current organization if available. [ci] Re-enable Homebrew Tap publishing. [cli] Fixes --tracing to account for response parsing in HTTP api/* spans. [cli] Fixes Pulumi.yaml validation error when the `refresh: always` option is specified [engine] Mark pulumi-analyzer-policy and pulumi-analyzer-policy-python as bundled plugins. [engine] Fix node and python MLCs on Windows. [sdkgen/dotnet] Fixes a .NET SDK codegen bug when emitting functions with secret parameters. [sdkgen/dotnet] Fix the type emitted for `ImmutableArray.Create` and `ImmutableDictionary.Create` for secret properties. [sdk/nodejs] The `@pulumi/pulumi` package is now interoperable with ESModules. [sdk/{nodejs,python}] `getOrganization` now returns "organization" by default. [programgen/yaml] Fix incorrect import for non-pulumi owned package on convert [backend] Adds a flag `PULUMISKIPCHECKPOINTS=true` that makes Pulumi skip saving state checkpoints as it modifies resources and only save the final state of a deployment. This is an experimental feature that also requires `PULUMI_EXPERIMENTAL=true` to be set. Using the feature introduces risk that in the case of network disconnect or crash state edits will be lost and may require manual recovery. When this risk is acceptable, using the feature can speed up Pulumi deployments. See also: - [ci] Improves first-time contributor developer experience and reduces test execution time by defaulting `integration.ProgramTest` to a filestate backend. Tests that require running against a service should set `RequireService` to `true`. [cli] Add a package author focused subcommand: `pulumi package` with subcommands `pulumi package gen-sdk` and `pulumi package get-schema`. [cli] Use "https://github.com/pulumi/pulumi/blob/master/sdk/go/common/workspace/project.json" to validate loaded project files. [sdk/go] Correctly handle nil resource references in the RPC layer. [engine] Plugin resolution now automatically installs any missing plugins as they are encountered. [ci] Miscellaneous improvements to release process. [provider/go]: Added support for token authentication in the go providers which use git. [codegen/go] Chunk the `pulumiTypes.go` file to reduce max file

Fix invalid resource type on `pulumi convert` to Go [auto/nodejs] `onOutput` is now called incrementally as the underyling Pulumi process produces data, instead of being called once at the end of the process execution. This restores behavior that regressed since 3.39.0. [ci] Migrate to merge queues for more reliable builds [sdk/python] Improve error message when pulumi-python cannot find a main program. [cli] provide info message to user if a pulumi program contains no resources [engine/plugins]: Revert change causing third party provider packages to prevent deployment commands (`up`, `preview`, ...) when used with the nodejs runtime. Reverts #10530. [sdk/go] Pulumi Go programs, on failure, now log a single error message. [sdk/nodejs] Updated the vendored version of TypeScript in the NodeJS SDK and runtime from v3.7.3 to v3.8.3 [sdk/nodejs] Calls onOutput in runPulumiCmd [cli] Display outputs last in diff view. [sdk/python] Dropped support for Python 3.6. [codegen/nodejs] Support lazy-loading Node modules. [cli/backend] Gzip compress HTTPS payloads for `pulumi import` and secret decryption against the Pulumi Service backend. [cli] Fix the "no Pulumi.yaml project file found" error message. [cli/refresh] Do not panic when snapshot is `nil`. [sdk/{python,nodejs}] Fix the use of `getOrganization` in policy packs. [cli] Allow `pulumi refresh` to interactively resolve pending creates. [cli] Clarify highlighting of confirmation text in `confirmPrompt`. [provider/python]: Improved exception display. The traceback is now shorter and it always starts with user code. [sdk/python] Update PyYAML to 6.0 to implement recursive file watching, improving performance and cross-platform compatibility. This `pulumi-watch` program is now included in releases. [codegen] Reduce time to execute `pulumi convert` and some YAML programs, depending on providers used, by up to 3 seconds. [dotnet/sdk] Implement `Deployment.TestAsync` overloads which accept functions that create resources without requiring a stack definition. [sdk/nodejs] Added stack truncation to `SyntaxError` in nodejs. [sdk/python] Makes global SETTINGS values context-aware to not leak state between Pulumi programs running in parallel [sdk/python] Makes global ROOT, CONFIG, SECRETKEYS ContextVars to not leak state between parallel inline Pulumi programs [sdk/go] Improve error messages for `StackReference`s [sdk/dotnet] Added `Output.CreateSecret<T>(Output<T> value)` to set the secret bit on an output value. [policy] `pulumi policy publish` now takes into account `.gitignore` files higher in the file tree. [sdk/go] enable direct compilation via `go build`(set `PULUMIGOUSE_RUN=true` to opt out) [cli/backend] Updates no longer immediately renew the token but wait until the token is halfway through its expiration period. Currently it is assumed tokens expire in 5 minutes, so with this change the first lease renewal now happens approximately 2.5 minutes after the start of the update. The change optimizes startup latency for Pulumi CLI. [cli/plugin] `plugin install` now supports a `--checksum` option. [sdk/{nodejs/python}] Added `getOrganization()` to return the current organization if available. [codegen/go] Fix StackReference codegen. [#10260](https://github.com/pulumi/pulumi/pull/10260 [engine/backends]: Fix bug where File state backend failed to apply validation to stack names, resulting in a panic. [cli] Fix VCS detection for domains other than .com and .org. [codegen/go] Fix incorrect method call for reading floating point values from configuration. [engine]: HTML characters are no longer escaped in JSON output. [codegen/go] Ensure consistency between go docs information and package name [auto/go] Clone non-default branches (and tags). [cli] Fixes `survey.v1` panics in Terminal UI introduced in in v3.38.0. [codegen/ts] Fix non-pulumi owned provider import alias. [codegen/go] Fix import path for non-pulumi owner providers [cli] Fixes panics on repeat Ctrl+C invocation during long-running updates [cli] Improve Windows reliability with dependency update to ssh-agent [sdk/{dotnet,nodejs,python}] Dynamic providers and automation API will not trigger a firewall permission prompt, will only accept network requests via loopback address. [cli] Fix `pulumi console` command to follow documented behavior in help

[sdk/nodejs] Fixes an issue which would occur when multiple processes were spawned and some would receive no stdout/stderr [engine] Plugin resolution now automatically installs any missing plugins as they are encountered. [python] put python version check after installing dependencies to resolve `fork/exec` warning [go/codegen] Fix generating invalid Go code when derivatives of input types collide with existing resource types [cli] Updated to the latest version of go-git. [sdk] Merge python error message and traceback into single error message. [sdk/python] Support optional default parameters in pulumi.Config [sdk/nodejs] Adds warning message when entrypoint resolution is ambiguous [automation] Add options for Automation API in each SDK to control logging and tracing, allowing automation API to run with the equivalent of CLI arguments `--logflow`, `--verbose`, `--logtostderr`, `--tracing` and `--debug` [cli] `pulumi about` now queries language plugins for information, rather than having hardcoded language logic. [sdk/python] Deprecate PULUMITESTMODE [cli] Paginate template options [sdk/dotnet] Fix serialization of non-generic list types. [codegen/nodejs] Correctly reference external enums. [sdk/python] Support deeply nested protobuf objects. Revert to fix #10293. [codegen/go] Remove superfluous double forward slash from doc.go [codegen/go] Add an external package cache option to `GenerateProgramOptions`. [cli/plugins] Don't retry plugin downloads that failed due to local file errors. [dotnet] Set environment exit code during `Deployment.RunAsync` in case users don't bubble it the program entry point themselves [cli/display] Fix a panic in the color logic. [#10354](https://github.com/pulumi/pulumi/pull/10354 [sdk/dotnet] Fix serialization of non-generic list types. [codegen/nodejs] Correctly reference external enums. [sdk/python] Support deeply nested protobuf objects. Revert to fix #10293. [cli] Groups `pulumi help` commands by category [sdk/nodejs] Removed stack trace output for Typescript compilation errors [cli] Fix installation failures on Windows due to release artifacts shipped omitting a folder, `pulumi/*.exe` instead of `pulumi/bin/*.exe`. [engine] Engine now always encrypts secret return values in Invoke. May break `Language SDKs<3.0.0` [auto/go] Adds the ability to capture incremental `stderr` via the new option `ErrorProgressStreams`. [cli/plugins] Warn that using GITHUBREPOSITORYOWNER is deprecated. [dotnet/codegen] code generation for csharp Pulumi programs now targets .NET 6 [cli] Allow `pulumi plugin install <type> <pkg> -f <path>` to target a binary file or a folder. [cli/config] Allow `pulumi config cp --path` between objects. [codegen/schema] Support stack reference as a resource [backends] When logging in to a file backend, validate that the bucket is accessible. [cli] Add flag to specify whether to install dependencies on `pulumi convert`. [cli] Expose `gen-completion` command when running `pulumi --help`. [sdk/go] Expose context.Context from pulumi.Context. [cli/plugins] Add local plugin linkage in `Pulumi.yaml`. [engine] Remove sequence numbers from the engine and provider interfaces. [engine] The engine will retry plugin downloads that error. [cli] Only log github request headers at log level 11. [sdk/go] `config.Encrypter` and `config.Decrypter` interfaces now require explicit `Context`. This is a minor breaking change to the SDK. The change fixes parenting of opentracing spans that decorate calls to the Pulumi Service crypter. [codegen/go] Support program generation, `pulumi convert` for programs that create explicit provider resources. [sdk/go] Remove the `AsName` and `AsQName` asserting functions. [python] PULUMIPYTHONCMD is checked for deciding what python binary to use in a virtual environment. [cli] Reduced the noisiness of `pulumi new --help` by replacing the list of available templates to just the number. [cli] Revert "Add last status to `pulumi stack ls` output #10059" [python] Fix overriding of PATH on Windows. [dotnet/codgen] Allow specified root namespace to be suffixed with "Pulumi" when generating packages [dotnet/sdk] Serialize immutable arrays initialized by default. [dotnet/codegen] Override static `Empty` property to return concrete argument types [cli] Display outputs during the very first preview. [cli] Add Last Status to `pulumi stack ls`

[cli] Allow pulumi `destroy -s <stack>` if not in a Pulumi project dir [protobuf] Pulumi protobuf messages are now namespaced under "pulumi". [cli] Truncate long stack outputs [sdk/go] Add `As*Output` methods to `AnyOutput` [sdk/go] Accept a short branch name in `GitRepo.Branch` [cli] `pulumi convert` help text is wrong [go/codegen] fix error assignment when creating a new resource in generated go code [cli] `pulumi convert` generates incorrect input parameter names for C# [engine] Un-parent child resource when a resource is deleted during a refresh. [cli] `pulumi state change-secrets-provider` now takes `--stack` into account [nodejs/sdkgen] Default set `pulumi.name` in package.json to the pulumi package name. [sdk/python] update protobuf library to v4 which speeds up pulumi CLI dramatically on M1 machines [engine] Fix data races discovered in CLI and Go SDK that could cause nondeterministic behavior or a panic. , [go] Fix panic when returning pulumi.Bool, .String, .Int, and .Float64 in the argument to ApplyT and casting the result to the corresponding output, e.g.: BoolOutput. [plugins] Plugin download urls now support GitHub as a first class url schema. For example "github://api.github.com/pulumiverse". [nodejs] No longer roundtrips requests for the stack URN via the engine. [cli] `pulumi convert` supports provider packages without a version. [cli] Revert changes to how --target works. This means that non-targeted resources do need enough valid inputs to pass Check. [sdk/go] Added `PreviewDigest` for third party tools to be able to ingest the preview json [cli] Do not require the `--yes` option if the `--skip-preview` option is set. , containing bug fixes and improvements primarily for `pulumi convert` from YAML. [engine] Filter out non-targeted resources much earlier in the engine cycle. [cli] Fix a panic in `pulumi plugin ls --project --json`. [engine] Revert support for aliases in the engine. which only warns for the `ignoreChanges` resource options. [auto/*] Add a option to control the `--show-secrets` flag in the automation API. [auto/go] Fix passing of the color option. [engine] Fix panic from unexpected resource name formats. [auto/*] Add `--policy-pack` and `--policy-pack-configs` options to automation API. [cli] The engine now produces a warning when the 'ignoreChanges' option is applied to a Component resource. [sdk/python] Changed `Output[T].str()` to return an informative message rather than "<pulumi.output.Output object at 0x012345ABCDEF>". [cli] The engine will now default resource parent to the root stack if it exists. [engine] Reduce memory usage in convert and yaml programs by caching of package schemas. [sdk/go] Added `NewUniqueName` for providers to use for generating autonames. [engine] The engine now understands alias objects which it can resolve to URNs, requiring less logic in SDKs. [sdk/dotnet] The dotnet SDK will now send alias objects rather than URNs to the engine. [cli] Add java to `pulumi convert` [sdk/go] Handle nils in mapper encoding. [engine] Explicit providers use the same plugin as default providers unless otherwise requested. [sdk/go] Correctly parse nested git projects in GitLab. [sdk/go] Mark StackReference keys that don't exist as unknown. Error when converting unknown keys to strings. [sdk/go] Precisely mark values obtained via stack reference `Get...Output(key)` methods as secret or not. [codegen/go] Import external Enum types as external. [codegen/go] Correctly generate nested `Input` and `Ouput` collection types. [engine] Revert the additional secret outputs warning until the engine can understand optional outputs. [cli/python] Respond to SIGINT when installing plugins. [codegen/go] Always chose the correct version when `respectSchemaVersion` is set. [sdk/python] Better explain the keyword arguments to create(etc)_stack. [cli] Revert changes causing a panic in `pulumi destroy` that tried to operate without config files. [cli] Revert to statically linked binaries on Windows and Linux, fixing a regression introduced in 3.34.0 [codegen/python] ResourceOptions are no longer mutated by resources. [codegen/go] Handle long and complicated traversals in a nicer

[cli] Allow pulumi `destroy -s <stack>` if not in a Pulumi project dir [cli] Plugins will now shut themselves down if they can't contact the engine that started them. [cli/engine] The engine will emit a warning of a key given in additional secret outputs doesn't match any of the property keys on the resources. [sdk/go] Add `CompositeInvoke` function, like `Composite` but for `InvokeOption`. [cli] The `gcpkms://` now supports the same credentials resolution mechanism as the state store, including the `GOOGLE_CREDENTIALS`.` , containing bug fixes, new functions, diagnostics and validation. Fixes support for using providers such as `awsx`. [sdk/nodejs] Fix a crash due to dependency cycles from component resources. [cli/about] Make `pulumi about` aware of the YAML and Java runtimes. [cli/engine] Fix a panic deserializing resource plans without goals. [cli/engine] Provide a sorting for plugins of equivalent version. [cli/backend] Fix degraded performance in filestate backend [engine] Engine correctly the number of bytes written to a TAR archive is what was expected. [cli] `pulumi logout` now prints a confirmation message that it logged out. [cli/backend] Add gzip compression to filestate backend. Compression can be enabled via `PULUMISELFMANAGEDSTATEGZIP=true`. Special thanks to @awoimbee for the initial PR. [sdk/nodejs] Lazy load inflight context to remove module import side-effect. [sdk/python] Fix spurious diffs causing an "update" on resources created by dynamic providers. [sdk/python] Do not depend on the children of remote component resources. [codegen/nodejs] Emit the "package.json".pulumi.server as "server" correctly. Previously, "pluginDownloadURL" was emitted but never read. [cli] Fix panic in `pulumi console` when no stack is selected. [cli] Engine now correctly tracks that resource reads have unique URNs. [sdk/python] Fixed bug in automation API that invoked Pulumi with malformed arguments. [cli/backend] Fix a panic in the filestate backend when renaming history files. [sdk/python] Pin protobuf library to <4. [sdk/proto] Inline dockerfile used to generate protobuf code. [cli] Add `--stack` to `pulumi about`. [sdk/dotnet] Bumped several dependency versions to avoid pulling packages with known vulnerabilities. [cli] Updated gocloud.dev to 0.24.0, which adds support for using AWS SDK v2. It enables users to pass an AWS profile to the `awskms` secrets provider url (i.e. `awskms://alias/pulumi?awssdk=v2&region=eu-west-1&profile=aws-prod`) [cli] The PULUMICONFIGPASSPHRASE environment variables can be empty, this is treated different to being unset. [codegen/python] Fix importing of enum types from other packages. [cli] Fix panic in `pulumi console` when no stack is selected. [auto/python] - Fix text color argument being ignored during stack operations. Replaced by 3.33.1 during release process. [cli/plugins] The engine will try to lookup the latest version of plugins if the program doesn't specify a version to use. [cli] Fix an issue using PULUMICONFIGPASSPHRASE_FILE. [cli/display] Avoid an assert in the table display logic. Pulumi Java support Pulumi YAML support [dotnet] No longer roundtrips requests for the stack URN via the engine. [codegen/go] Enable obtaining resource outputs off a ResourceOutput. [codegen/go] Ensure that "plain" generates shallowly plain types. [codegen/nodejs] Fix enum naming when the enum name starts with `_`. [cli] Empty passphrases environment variables are now treated as if the variable was not set. [sdk/go] Fix awaits for outputs containing resources. [cli] Decode YAML mappings with numeric keys during diff. [cli] Fix an issue with explicit and default organization names in `pulumi new` [auto/*] Add `--save-plan` and `--plan` options to automation API. [cli] "down" is now treated as an alias of "destroy". [go] Add `Composite` resource option allowing several options to be encapsulated into a "single" option. types. [cli] Display JSON/YAML property values as objects for creates, sames, and deletes. [codegen/go] Ensure that plain properties are plain. [cli] Fixed some context leaks where shutdown code wasn't correctly

[cli] Do not render array diffs for unchanged elements without recorded values. [auto/go] Fixed the exit code reported by `runPulumiCommandSync` to be zero if the command runs successfully. Previously it returned -2 which could lead to confusing messages if the exit code was used for other errors, such as in `Stack.Preview`. [auto/go] Fixed a race condition that could cause `Preview` to fail with "failed to get preview summary". [backend/filestate] Fix a bug creating `stack.json.bak` files. [cli] Split invoke request protobufs, as monitors and providers take different arguments. [providers] - gRPC providers can now support an Attach method for debugging. The engine will attach to providers listed in the PULUMIDEBUGPROVIDERS environment variable. This should be of the form "providerName:port,otherProvider:port". [cli/plugin] - Dynamic provider binaries will now be found even if pulumi/bin is not on $PATH. [sdk/go] - Fail appropriatly for `config.Try` and `config.Require` where the key is present but of the wrong type. [cli] - Installing of language specific project dependencies is now managed by the language plugins, not the pulumi cli. [cli] Warn users when there are pending operations but proceed with deployment [cli] Display more useful diffs for secrets that are not primitive values [cli] - Warn when `additionalSecretOutputs` is used to mark the `id` property as secret. [cli] Display richer diffs for texutal property values. [cli] Display richer diffs for JSON/YAML property values. [codegen/node] - Fix an issue with escaping deprecation messages. [cli] - StackReferences will now correctly use the service bulk decryption end point. When a resource is aliased to an existing resource with a different URN, only store the alias of the existing resource in the statefile rather than storing all possible aliases. Clear pending operations during `pulumi refresh` or `pulumi up -r`. [cli] - `pulumi whoami --verbose` and `pulumi about` include a list of the current users organizations. [codegen/go] - Fix Go SDK function output to check for errors [cli/engine] - Fix a panic due to `Check` returning nil while using update plans. [cli] - Implement `pulumi stack unselect`. [language/dotnet] - Updated Pulumi dotnet packages to use grpc-dotnet instead of grpc. [cli/config] - Rename the `config` property in `Pulumi.yaml` to `stackConfigDir`. The `config` key will continue to be supported. [cli/plugins] Add support for downloading plugin from private Pulumi GitHub releases. This also drops the use of the `GITHUBACTOR` and `GITHUBPERSONALACCESSTOKEN` environment variables for authenticating to github. Only `GITHUB_TOKEN` is now used, but this can be set to a personal access token. [cli] - Speed up `pulumi stack --show-name` by skipping unneeded snapshot loading. [cli/plugins] - Improved error message for missing plugins. [sdk/nodejs] - Take engines property into account when engine-strict appear in npmrc file [sdk/nodejs] - Fix uncaught error "ENOENT: no such file or directory" when an error occurs during the stack up. [sdk/nodejs] - Fix uncaught error "ENOENT: no such file or directory" when an error occurs during the stack preview. [sdk/go] - Fix a panic in `pulumi.All` when using pointer inputs. [cli/engine] - Fix a panic due to passing `""` as the ID for a resource read. [cli/engine] - Fix a panic due to `Check` failing while using update plans. [cli] - Stack names correctly take `org set-default` into account when printing. [cli/new] Fix an error message when the project name picked by default was already used. [area/cli] - Implemented `state rename` command. [cli/plugins] `pulumi plugin install` can now look up the latest version of plugins on GitHub releases. [cli/backend] - `pulumi cancel` is now supported for the file state backend. [cli/import] - The import command no longer errors if resource properties do not

Instead the engine warns about property issues returned by the provider but then continues with the import and codegen as best it can. This should result in more resources being imported to the pulumi state and being able to generate some code, at the cost that the generated code may not work as is in an update. Users will have to edit the code to successfully run. [cli/import] - Code generation in `pulumi import` can now be disabled with the `--generate-code=false` flag. [sdk/python] - Fix build warnings. See for more details. [cli/backend] - Fixed an issue with non-atomicity when saving file state stacks. [sdk/go] - Fixed an issue where the RetainOnDelete resource option is not applied. [sdk/nodejs] - Fix Node `fs.rmdir` DeprecationWarning for Node JS 15.X+ [engine] - Fix deny default provider handling for Invokes and Reads. [codegen/go] - Fix secret codegen for input properties [sdk/nodejs] - `PULUMINODEJSTSCONFIG_PATH` is now explicitly passed to tsnode for the tsconfig file. [codegen/go] - Add GenerateProgramWithOpts function to enable configurable codegen options. [cli] - Enabled dot spinner for non-interactive mode [sdk] - Add `RetainOnDelete` as a resource option. [cli] - Adding `completion` as an alias to `gen-completion` [cli/plugins] Add support for downloading plugin from private GitHub releases. [sdk/go] - Normalize merge behavior for `ResourceOptions`, inline with other SDKs. See https://github.com/pulumi/pulumi/issues/8796 for more details. [sdk/go] - Correctly parse GoLang version. [sdk/go] - Fix git initialization in git_test.go [cli/go] - Fix git initialization in util_test.go [sdk/nodejs] - Fix nodejs function serialization module path to comply with package.json exports if exports is specified. [cli/python] - Parse a larger subset of PEP440 when guessing Pulumi package versions. [sdk/nodejs] - Allow disabling TypeScript typechecking [cli/backend] - Revert a change to file state locking that was causing stacks to stay locked. [cli] - Fix passphrase secrets provider prompting. [cli] - Fix an assert when replacing protected resources. [release] - Update .gitignore to allow for a clean git repository for release. [codegen/go] - Implement go type conversions for optional string, boolean, int, and float32 arguments, and changes our behavior for optional spilling from variable declaration hoisting to instead rewrite as calls to these functions. Fixes #8821. [sdk/go] Added new conversion functions for Read methods on resources exported at the top level of the Pulumi sdk. They are `StringRef`, `BoolRef`, `IntRef`, and `Float64Ref`. They are used for creating a pointer to the type they name, e.g.: StringRef takes `string` and returns `*string`. Data source methods which take optional strings, bools, ints, and float64 values can be set to the return value of these functions. These functions will appear in generated programs as well as future docs updates. [sdk/nodejs] - Fix resource plugins advertising a `pluginDownloadURL` not being downloaded. This should allow resource plugins published via boilerplates to find and consume plugins published outside the registry. See: https://github.com/pulumi/pulumi/issues/8890 for the tracking issue to document this feature. [cli] Experimental support for update plans. Only enabled when PULUMI_EXPERIMENTAL is set. This enables preview to save a plan of what the engine expects to happen in a file with --save-plan. That plan can then be read in by up with --plan and is used to ensure only the expected operations happen. [codegen] - Add language option to make codegen respect the `Version` field in the Pulumi package schema. [cli] - Support wildcards for `pulumi up --target <urn>` and similar commands. . [cli/import] - The import command now takes an extra argument --properties to instruct the engine which properties to use for the import. This can be used to import resources which the engine couldn't automaticly infer the correct property set

[cli] Ensure defaultOrg is used as part of any stack name [codegen] - Correctly handle third party resource imports. [sdk/dotnet] - Normalize merge behavior for ComponentResourceOptions, inline with other SDKs. See https://github.com/pulumi/pulumi/issues/8796 for more details. [codegen/nodejs] - Respect compat modes when referencing external types. [cli] The engine will allow a resource to be replaced if either it's old or new state (or both) is not protected. [cli] - Fixed CLI duplicating prompt question. [cli] - `pulumi plugin install --reinstall` now always reinstalls plugins. [codegen/go] - Honor import aliases for external types/resources. [codegen/python] - Correctly reference external types/resources with same module name. [sdk/nodejs] - Correctly pickup provider as a member of providers. [sdk/{nodejs,python}] - Remove sequence numbers from the dynamic provider interfaces. [codegen/dotnet] - Add C# extension `rootNamespace`, allowing the user to replace `Pulumi` as the default C# global namespace in generated programs. The `Company` and `Author` fields of the .csproj file are now driven by `schema.publisher`. [cli] Download provider plugins from GitHub Releases [cli] Using a decryptAll functionality when deserializing a deployment. This will allow decryption of secrets stored in the Pulumi Service backend to happen in bulk for performance increase [sdk/dotnet] - Changed `Output<T>.ToString()` to return an informative message rather than just "Output`1[X]" [cli] Add the concept of sequence numbers to the engine and resource provider interface. [common] Allow names with hyphens. [cli] - Add support for overriding plugin download URLs. [automation] - Add `color` option to stack up, preview, refresh, and destroy commands. [sdk/nodejs] - Support top-level default exports in ESM. [cli] - Allow disabling default providers via the Pulumi config. [cli] Add better error message for pulumi service rate limit responses [sdk/{python,nodejs}] - Prevent `ResourceOptions.merge` from promoting between the `.provider` and `.providers` fields. This changes the general behavior of merging for `.provider` and `.providers`, as described in . Note that this is a breaking change in two ways: Passing a provider to a custom resource of the wrong package now produces a `ValueError`. In the past it would send to the provider, and generally crash the provider. Merging two `ResourceOptions` with `provider` set no longer hoists to `providers`. One `provider` will now take priority over the other. The new behavior reflects the common case for `ResourceOptions.merge`. To restore the old behavior, replace `ResourceOptions(provider=FooProvider).merge(ResourceOptions(provider=BarProvider))` with `ResourceOptions(providers=[FooProvider]).merge(ResourceOptions(providers=[BarProvider]))`. [codegen/nodejs] - Generate an install script that runs `pulumi plugin install` with the `--server` flag when necessary. [cli] The engine will no longer try to replace resources that are protected as that entails a delete. [codegen/pcl] - Fix handling of function invokes without args [sdk/dotnet] - Add `PluginDownloadURL` as a resource option. When provided by the schema, `PluginDownloadURL` will be baked into `new Resource` and `Invoke` requests in generated SDKs. [sdk] - Allow property paths to accept `[]` as sugar for `[""]`. [sdk/dotnet] Add `Union.Bimap` function for converting both sides of a union at once. [sdk/dotnet] Allow `Output<Union>` to be converted to `InputUnion`. [cli/config] - Revert number handling in `pulumi config`. [sdk/{nodejs,go,python}] - Add `PluginDownloadURL` as a resource option. When provided by the schema, `PluginDownloadURL` will be baked into `new Resource` and `Invoke` requests in generated SDKs. [auto/python] - Fixes an issue with exception isolation in a sequence of inline programs that caused all inline programs to fail after the first one failed [sdk/go] - Add `PluginDownloadURL` as a resource option. [sdk/go] - Allow users to override enviromental variables for

[sdk/nodejs] Support using native ES modules as Pulumi scripts [sdk/nodejs] Support a `nodeargs` option for passing `node` arguments to the Node language host , a bug where the engine ignored the final line of stdout/stderr if it didn't terminate with a newline. [nodejs/sdk] - GetRequiredPlugins: Return plugins even when there're errors. [engine] - Interpret `pluginDownloadURL` as the provider host url when downloading plugins. [sdk/dotnet] - `InputMap` and `InputList` can now be initialized with any value that implicitly converts to the collection type. These values are then automatically appended, for example: var list = new InputList<string> { "V1", Output.Create("V2"), new[] { "V3", "V4" }, new List<string> { "V5", "V6" }, Output.Create(ImmutableArray.Create("V7", "V8")) }; This feature simplifies the syntax for constructing resources and specifying resource options such as the `DependsOn` option. [sdk/python] - Fixes an issue with stack outputs persisting after they are removed from the Pulumi program [auto/*] - Fixes `stack.setConfig()` breaking when trying to set values that look like flags (such as `-value`) [sdk/dotnet] - Don't throw converting value types that don't match schema [sdk/{go,nodejs,dotnet,python}] - Compute full set of aliases when both parent and child are aliased. [cli/import] - Fix import of resource with non-identifier map keys [backend/filestate] - Allow preview on locked stack [codegen/go] - Do not generate unreferenced input types by default. [codegen/go] - Simplify the application of object defaults in generated SDKs. [codegen/{python,dotnet}] - Emit `pulumi-plugin.json` unconditionally. [sdk/python] - Lookup Pulumi packages by searching for `pulumi-plugin.json`. Pulumi packages need not be prefixed by `pulumi-` anymore. [sdk/go] - Lookup packages by searching for `pulumi-plugin.json`. Pulumi packages need not be prefixed by `github.com/pulumi/pulumi-` anymore. [sdk/dotnet] - Lookup packages by searching for `pulumi-plugin.json`. Pulumi packages need not be prefixed by `Pulumi.` anymore. [sdk/go] - Emit `pulumi-plugin.json` [cli] - Always use locking in filestate backends. This feature was previously disabled by default and activated by setting the `PULUMISELFMANAGEDSTATELOCKING=1` environment variable. [{cli,auto}] - Exclude language plugins from `PULUMIIGNOREAMBIENT_PLUGINS`. [sdk/dotnet] - Fixes a rare race condition that sporadically caused NullReferenceException to be raised when constructing resources [cli] Log secret decryption events when a project uses the Pulumi Service and a 3rd party secrets provider [schema] Do not validate against the metaschema in ImportSpec. Clients that need to validate input schemas should use the BindSpec API instead. [codegen/schema] - Error on type token names that are not allowed (schema.Name or specified in allowedPackageNames). [codegen/go] - Fix `ElementType` for nested collection input and output types. [{codegen,sdk}/{python,dotnet,go}] - Use `pulumi-plugin.json` rather than `pulumiplugin.json`. [codegen/go] - Remove `ResourcePtr` types from generated SDKs. Besides being unnecessary--`Resource` types already accommodate `nil` to indicate the lack of a value--the implementation of `Ptr` types for resources was incorrect, making these types virtually unusable in practice. [cli] - Allow interpolating plugin custom server URLs. [cli/engine] - Accurately computes the fields changed when diffing with unhelpful providers. This allows the `replaceOnChanges` feature to be respected for all providers. [codegen/go] - Respect default values in Pulumi object types. [cli] - When running `pulumi new https://github.com/name/repo`, check for branch `main` if branch `master` doesn't exist. [codegen/python] - Program generator now uses `fn_output` forms where appropriate, simplifying auto-generated examples. [codegen/go] - Program generator now uses fnOutput forms where appropriate, simplifying auto-generated examples. [codegen/dotnet] - Program generator now uses `Invoke` forms where appropriate, simplifying auto-generated examples. [cli/nodejs] - Allow specifying the tsconfig file used in Pulumi.yaml. [codegen/nodejs] - Respect default values in Pulumi object types. [sdk/python] - Correctly handle version checking python virtual environments. [cli] - Catch expected errors in stacks with filestate backends. [sdk/dotnet] - Do not attempt to serialize unknown values. [ci] - Adds CI detector for Buildkite [cli] - Add `--exclude-protected` flag to `pulumi

[cli] Add the ability to use `pulumi org set [name]` to set a default org to use when creating a stacks in the Pulumi Service backend or self-hosted Service. [schema] Add IsOverlay option to disable codegen for particular types. [sdk/dotnet] - Marshal output values. [sdk/python] - Unmarshal output values in component provider. [sdk/nodejs] - Unmarshal output values in component provider. [sdk/nodejs] - Allow returning failures from Call in the provider without setting result outputs. [sdk/go] - Allow specifying Call failures from the provider. [codegen/nodejs] - Program generator now uses `fnOutput` forms where appropriate, simplifying auto-generated examples. [engine] - Compute dependents correctly during targeted deletes. [cli/engine] - Update command respects `--target-dependents`. [docs] - Fix broken lists in dotnet docs. [codegen/docs] Edit docs codegen to document `$fnOutput` function invoke forms in API documentation. [automation/python] - Fix deserialization of events. [sdk/dotnet] - Fixes failing preview for programs that call data sources (`F.Invoke`) with unknown outputs. [programgen/go] - Don't change imported resource names. [cli] - Reformat error message string in `sdk/go/common/diag/errors.go`. [cli] - Add `--json` flag to `up`, `destroy` and `refresh`. Passing the `--json` flag to `up`, `destroy` and `refresh` will stream JSON events from the engine to stdout. For `preview`, the existing functionality of outputting a JSON object at the end of preview is maintained. However, the streaming output can be extended to `preview` by using the `PULUMIENABLESTREAMINGJSONPREVIEW` environment variable. [sdk/go] - Respect implicit parents in alias resolution. [sdk/python] - Expand dependencies when marshaling output values. [codegen/go] - Interaction between the `plain` and `default` tags of a type. [sdk/dotnet] - Fix a race condition when detecting exceptions in stack creation. [sdk/go] - Fix regression marshaling assets/archives. [sdk/dotnet] - Don't panic on schema mismatches. [codegen/python] - Fixes issue with `$fn_output` functions failing in preview when called with unknown arguments. [codegen/dotnet] - Add helper function forms `$fn.Invoke` that accept `Input`s, return an `Output`, and wrap the underlying `$fn.InvokeAsync` call. This change addreses for .NET, making it easier to compose functions/datasources with Pulumi resources. NOTE for resource providers: the generated code requires Pulumi .NET SDK 3.15 or higher. [auto/dotnet] - Add `pulumi state delete` and `pulumi state unprotect` functionality [automation/python] - Use `rstrip` rather than `strip` for the sake of indentation [codegen/nodejs] - Add helper function forms `$fnOutput` that accept `Input`s, return an `Output`, and wrap the underlying `$fn` call. This change addreses for NodeJS, making it easier to compose functions/datasources with Pulumi resources. [sdk/dotnet] - Update SDK to support the upcoming codegen feature that will enable functions to accept Outputs (). Specifically add `Pulumi.DeploymentInstance.Invoke` and remove the now redundant `Pulumi.Utilities.CodegenUtilities`. [cli] - Upgrade CLI to go1.17 [codegen/go] Register input types for schema object types. [codegen/go] Register input types for schema resource and enum types. ) [codegen/go] Add schema flag to disable registering input types. [codegen/go] - Use `importBasePath` before `name` if specified for name and path. [auto/go] - Mark entire exported map as secret if key in map is secret. [cli] - Differentiate in-progress actions by bolding output. [CLI] Adding the ability to set `refresh: always` in an options object at a Pulumi.yaml level to allow a user to be able to always refresh their derivative stacks by default [codegen/go] - Fix generation of cyclic struct types. [codegen/nodejs] - Fix type literal generation by adding disambiguating parens; previously nested types such as arrays of unions and optionals generated type literals that were incorrectly parsed by TypeScript precedence rules. NOTE for providers: using updated codegen may result in API changes that break existing working programs built against the older (incorrect) API declarations. [auto/go] - Fix --target / --replace args [sdk/python] - Fix deprecation warning when using python 3.10 Please Note: The

release failed in our build pipeline and was re-released as v3.13.2. [CLI] - Enable output values in the engine by default. [automation/python] - Fix a bug in printing `Stack` if no program is provided. [codegen/schema] - Revert #7938. [codegen/nodejs] - Correctly determine imports for functions. [codegen/go] - Fix resolution of enum naming collisions. [sdk/{nodejs,python}] - Fix errors when testing remote components with mocks. [codegen/nodejs] - Fix generation of provider enum with environment variables. [sdk/go] - Improve error messages for (un)marshalling properties. [sdk/go] - Initial support for (un)marshalling output values. [sdk/go] - Add `RegisterInputType` and register built-in types. [codegen] - Packages include `Package.Version` when provided. [auto/*] - Fix escaped HTML characters from color directives in event stream. E.g. `"<{%reset%}>debug: <{%reset%}>"` -> `"<{%reset%}>debug: <{%reset%}>"` [auto/*] - Allow eliding color directives from event logs by passing `NO_COLOR` env var. E.g. `"<{%reset%}>debug: <{%reset%}>"` -> `"debug: "` [schema] The syntactical well-formedness of a package schema is now described and checked by a JSON schema metaschema. [codegen/schema] - Correct validation for Package [cli] Use json.Unmarshal instead of custom parser [sdk/{go,dotnet}] - Thread replaceOnChanges through Go and .NET [codegen/nodejs] - Correctly handle hyphenated imports [build] - make lint returns an accurate status code [codegen/python] - Add helper function forms `$fn_output` that accept `Input`s, return an `Output`, and wrap the underlying `$fn` call. This change addresses for Python, making it easier to compose functions/datasources with Pulumi resources. [codegen] - Add `replaceOnChange` to schema. [cli/about] - Add command for debug information [codegen/schema] Add a `pulumi schema check` command to validate package schemas. [sdk/python] - Fix Pulumi programs hanging when dependency graph forms a cycle, as when `eks.NodeGroup` declaring `eks.Cluster` as a parent while also depending on it indirectly via properties [sdk/python] Fix a regression in Python dynamic providers introduced in #7755. [automation/go] Fix loading of stack settings/configs from yaml files. [codegen/python] - Fix invalid Python docstring generation for enums that contain doc comments with double quotes [auto/dotnet] - Add support for `--exact` and `--server` with `pulumi plugin install` via Automation API. BREAKING NOTE: If you are subclassing `Workspace` your `InstallPluginAsync` implementation will need to be updated to reflect the new `PluginInstallOptions` parameter. [codegen/go] - Add helper function forms `$fnOutput` that accept `Input`s, return an `Output`, and wrap the underlying `$fn` call. This change addreses for Go, making it easier to compose functions/datasources with Pulumi resources. [sdk/python] - Speed up `pulumi up` on Python projects by optimizing `pip` invocations [sdk/dotnet] - Support for calling methods. [cli] - Avoid `missing go.sum entry for module` for new Go projects. [codegen/schema] - Allow hyphen in schema path reference. [sdk/python] - Add support for custom naming of dynamic provider resource. [codegen/go] - Fix nested collection type generation. [sdk/dotnet] - Fix an exception when passing an unknown `Output` to the `DependsOn` resource option. [engine] Include transitive children in dependency list for deletes. [cli] Stop printing secret value on `pulumi config set` if it looks like a secret. [sdk/nodejs] Prevent Pulumi from overriding tsconfig.json options. [sdk/go] - Permit declaring explicit resource dependencies via `ResourceInput` values. [sdk/go] - Fix marshaling behavior for undefined properties. [sdk/python] - Fix program hangs when monitor becomes unavailable. [sdk/python] Allow Python dynamic provider resources to be constructed outside of `main`. [sdk/go] - Depending on a component now depends on the transitive closure of its child resources. [sdk/python] - Depending on a component now depends on the transitive closure of its child resources. [cli] - Fix the preview experience for unconfigured providers. Rather than returning the inputs of a resource managed by an unconfigured provider as its outputs, the engine will treat all outputs as

Most programs will not be affected by these changes: in general, the only programs that will see differences are programs that: pass unknown values to provider instances use these provider instances to manage resources pass values from these resources to resources that are managed by other providers These kinds of programs are most common in scenarios that deploy managed Kubernetes clusters and Kubernetes apps within the same program, then flow values from those apps into other resources. The legacy behavior can be re-enabled by setting the `PULUMILEGACYPROVIDER_PREVIEW` to a truthy value (e.g. `1`, `true`, etc.). [automation] - Add force flag for RemoveStack in workspace [cli] - Properly parse Git remotes with periods or hyphens. [codegen/python] - Recover good IDE completion experience over module imports that was compromised when introducing the lazy import optimization. [sdk/python] - Use `Sequence[T]` instead of `List[T]` for several `Resource` parameters. [auto/nodejs] - Fix a case where inline programs could exit with outstanding async work. [sdk/nodejs] - Use ESlint instead of TSlint [sdk/python] - Fix pulumi.property's default value handling. [cli] - Respect provider aliases [cli] - `pulumi stack ls` now returns all accessible stacks (removing earlier cap imposed by the httpstate backend). [sdk/go] - Fix panics caused by logging from `ApplyT`, affecting `pulumi-docker` and potentially other providers [sdk/python] - Handle unknown results from methods. [sdk/go] - Add stack output helpers for numeric types. [sdk/python] - Permit `Input[Resource]` values in `depends_on`. [backend/filestate] - Allow pulumi stack ls to see all stacks regardless of passphrase. [sdk/{go,python,nodejs}] - Rehydrate provider resources in `Construct`. [engine] - Include children when targeting components. [cli] - Restore passing log options to providers when `--logflow` is specified https://github.com/pulumi/pulumi/pull/7640 [sdk/nodejs] - Fix `pulumi up --logflow` causing Node multi-lang components to hang [sdk/{dotnet,python,nodejs}] - Set the package on DependencyProviderResource. [sdk/dotnet] - Fix async await warnings. [codegen/dotnet] - Emit dynamic config-getters. [sdk/python] - Support for authoring resource methods in Python. [sdk/{go,dotnet}] - Admit non-asset/archive values when unmarshalling into assets and archives. [sdk/dotnet] - Fix for race conditions in .NET SDK that used to manifest as a `KeyNotFoundException` from `WhileRunningAsync`. [sdk/go] - Fix target and replace options for the Automation API. [cli] - Don't escape special characters when printing JSON. [sdk/go] - Fix panic when marshaling `self` in a method. [codegen/python,nodejs] Emit dynamic config-getters. , [sdk/python] Make `Output[T]` covariant [sdk/nodejs] Fix a bug in closure serialization. [cli] Normalize cloud URL during login [sdk/nodejs,dotnet] Wait on remote component dependencies [sdk/nodejs] Support for calling resource methods. [sdk/go] Support for calling resource methods. [codegen/go] Reimplement strict go enums to be Inputs. [codegen/go] Emit To[ElementType]Output methods for go enum output types. [sdk] Add `replaceOnChanges` resource option. [sdk/go] Support for authoring resource methods in Go. [sdk/python] Fix an issue where dependency keys were incorrectly translates to camelcase. [cli] Fix rendering of diffs for resource without DetailedDiffs. [cli] Added support for passing custom paths that need to be watched by the `pulumi watch` command. [auto/nodejs] Fail early when multiple versions of `@pulumi/pulumi` are detected in nodejs inline programs. [sdk/go] Add preliminary support for unmarshaling plain arrays and maps of output values. Initial support for resource methods (Node.js authoring, Python calling). [sdk/dotnet] Fix swallowed nested exceptions with inline program, so they correctly bubble to the consumer. [sdk/go] Specify known when creating outputs for `construct`. [cli] Fix passphrase rotation. [multilang/python] Fix nested module generation. [multilang/nodejs] Fix a hang when an error is thrown within an apply in a remote component. [codegen/python] Include enum docstrings for python. Please Note: The v3.5.0 release did not complete and was re-released at the same commit as

[dotnet/sdk] Support microsoft logging extensions with inline programs. [dotnet/sdk] Add create unknown to output utilities. [dotnet] Fix Resharper code issues. [codegen] Include properties with an underlying type of string on Go provider instances. [cli] Provide a more helpful error instead of panicking when codegen fails during import. [codegen/python] Cache package version for improved performance. [sdk/python] Reduce `log.debug` calls for improved performance. [sdk/dotnet] Fix resources destroyed after exception thrown during inline program. [sdk/python] Fix regression in behaviour for `Output.from_input({})`. [sdk/python] Prevent infinite loops when iterating `Output` objects. [codegen/python] Rename conflicting ResourceArgs classes. [dotnet/sdk] Add get value async to output utilities. [CLI] Fix broken venv for Python projects started from templates. [cli] Send plugin install output to stderr, so that it doesn't clutter up --json, automation API scenarios, and so on. [cli] Protect against panics when using the wrong resource type with `pulumi import`. [auto/nodejs] Emit warning instead of breaking on parsing JSON events for automation API. [sdk/python] Improve performance of `Output.from_input` and `Output.all` on nested objects. [cli] Update version of go-cloud used by Pulumi to `0.23.0`. [dotnet/sdk] Use source context with serilog. [auto/dotnet] Make StackDeployment.FromJsonString public. [sdk/python] Generated SDKs may now be installed from in-tree source. [auto/nodejs] Fix an intermittent bug in parsing JSON events. [auto/dotnet] Fix deserialization of CancelEvent in .NET 5. Temporarily disable warning when a secret config is read as a non-secret. [cli] Provide user information when protected resources are not able to be deleted [cli] Error instead of panic on invalid state file import Warn when a secret config is read as a non-secret [sdk/nodejs|python] Add GetSchema support to providers [auto/dotnet] Provide PulumiFn implementation that allows runtime stack type [auto/go] Provide GetPermalink for all results [sdk/python] Fix relative `runtime:options:virtualenv` path resolution to ignore `main` project attribute [auto/dotnet] Disable Language Server Host logging and checking appsettings.json config [auto/python] Export missing `ProjectBackend` type [sdk/nodejs] Fix noisy errors. Config: Avoid emitting integers in objects using exponential notation. [codegen/python] Fix issue with lazy_import affecting pulumi-eks Ensure that all outstanding asynchronous work is awaited before returning from a .NET Pulumi program. Config: Avoid emitting integers in objects using exponential notation. Build: Add vs code dev container Ensure that all outstanding asynchronous work is awaited before returning from a Go Pulumi program. Note that this may require changes to programs that use the `pulumi.NewOutput` API. that stopped stacks created with empty passphrases from completing successful pulumi commands when loading the passphrase secrets provider. [auto/go] Provide GetPermalink for all results [automation/*] Add support for getting stack outputs using Workspace [automation/*] Optionally skip Automation API version check The version check can be skipped by passing a non-empty value to the `PULUMIAUTOMATIONAPISKIPVERSION_CHECK` environment variable. [auto/go,nodejs] Add UserAgent to update/pre/refresh/destroy options. [cli] Return an appropriate error when a user has not set `PULUMICONFIGPASSPHRASE` nor `PULUMICONFIGPASSPHRASE_FILE` when trying to access the Passphrase Secrets Manager [cli] Prevent against panic when using a ResourceReference as a program output [sdk/python] Fix bug in MockResourceArgs. [sdk/python] Address issues when using resource subclasses. [sdk/python] Fix type-related regression on Python 3.6. [sdk/python] Don't error when a dict input value has a mismatched type annotation. [automation/dotnet] Fix EventLogWatcher failing to read events after an exception was thrown [automation/dotnet] Use stackName in ImportStack [automation/go] Improve autoError message formatting [auto/dotnet] Bump YamlDotNet to 11.1.1 [sdk/dotnet] Enable deterministic builds [auto/*] Bump minimum version to v3.1.0. Please note, the following 2 breaking changes were included in our Unfortunately, the initial release did not include that change. We apologize for any confusion or inconvenience this may have included the addressed

[cli] Standardize stack select behavior to ensure that passing `--stack` does not make that the current stack. [cli] Set pagination defaults for `pulumi stack history` to 10 entries. [sdk/nodejs] Handle providers for RegisterResourceRequest [automation/dotnet] Remove dependency on Gprc.Tools for F# / Paket compatibility [codegen] Fix codegen for types that are used by both resources and functions. [sdk/python] Fix bug in `getresourcemodule` affecting resource hydration. [automation/python] Fix bug in UpdateSummary deserialization for nested config values. [sdk/cli] Bump version of Pulumi CLI and SDK to v3 Dropped support for NodeJS < v11.x [CLI] Standardize the `--stack` flag to not set the stack as current (i.e. setStack=false) across CLI commands. [CLI] Set pagination defaults for `pulumi stack history` to 10 entries. [CLI] Remove `pulumi history` command. This was previously deprecated and replaced by `pulumi stack history` [sdk/*] Refactor Mocks newResource and call to accept an argument struct for future extensibility rather than individual args [sdk/nodejs] Enable nodejs dynamic provider caching by default on program side. [sdk/python] Improved dict key translation support (3.0-based providers will opt-in to the improved behavior) [sdk/python] Allow using Python to build resource providers for multi-lang components. [sdk/go] Simplify `Apply` method options to reduce binary size [Automation/*] All operations use `--stack` to specify the stack instead of running `select stack` before the operation. [Automation/go] Moving go automation API package from sdk/v2/go/x/auto -> sdk/v2/go/auto [Automation/nodejs] Moving NodeJS automation API package from sdk/nodejs/x/automation -> sdk/nodejs/automation [Automation/python] Moving Python automation API package from pulumi.x.automation -> pulumi.automation [Automation/go] Moving go automation API package from sdk/v2/go/x/auto -> sdk/v2/go/auto [sdk/nodejs] Add support for multiple V8 VM contexts in closure serialization. [sdk] Handle providers for RegisterResourceRequest [sdk/go] Support defining remote components in Go. [CLI] Clean the template cache if the repo remote has changed. [cli] Fix a bug that prevented copying checkpoint files when using Azure Blob Storage as the backend provider. [automation/python] Fix serialization bug in `StackSettings` [automation/dotnet] Rename (Get,Set,Remove)Config(Value) The following methods on Workspace and WorkspaceStack classes have been renamed. Please update your code (before -> after): GetConfigValue -> GetConfig SetConfigValue -> SetConfig RemoveConfigValue -> RemoveConfig GetConfig -> GetAllConfig SetConfig -> SetAllConfig RemoveConfig -> RemoveAllConfig This change was made to align with the other Pulumi language SDKs. [cli] Add option to print absolute rather than relative dates in stack history Example: ```bash pulumi stack history --full-dates ``` [cli] Enable absolute and relative parent paths for pulumi main [sdk/dotnet] Thread-safe concurrency-friendly global state [tooling] Update pulumi python docker image to python 3.9 [sdk/nodejs] Add program side caching for dynamic provider serialization behind env var [sdk/nodejs] Allow prompt values in `construct` for multi-lang components. [automation/dotnet] Allow null environment variables [automation/dotnet] Expose WorkspaceStack.GetOutputsAsync Example: ```csharp var stack = await WorkspaceStack.CreateAsync(stackName, workspace); await stack.SetConfigAsync(config); var initialOutputs = await stack.GetOutputsAsync(); ``` [automation/dotnet] Implement (Import,Export)StackAsync methods on LocalWorkspace and WorkspaceStack and expose StackDeployment helper class. Example: ```csharp var stack = await WorkspaceStack.CreateAsync(stackName, workspace); var upResult = await stack.UpAsync(); deployment = await workspace.ExportStackAsync(stackName); ``` [automation/dotnet] Implement CancelAsync method on WorkspaceStack Example: ```csharp var stack = await WorkspaceStack.CreateAsync(stackName, workspace); var cancelTask = stack.CancelAsync(); ``` [automation/python] Expose structured logging for Stack.up/preview/refresh/destroy. You can now pass in an `on_event` callback function as a keyword arg to `up`, `preview`, `refresh` and `destroy` to process streaming json events defined in `automation/events.py` Example: ```python stack.up(on_event=print) ``` [sdk/go] Fix wrongly named Go modules [cli] Handle non-existent creds file in `pulumi logout --all` [automation/nodejs] Do not run the promise leak checker if an inline program has errored. [sdk/nodejs] Explicitly create event log file for NodeJS Automation API. [sdk/nodejs] Fix error handling for failed logging statements [sdk/nodejs] Fix `Construct` to wait for child resources of a multi-lang components to be

[sdk/python] Fix serialization bug if output contains 'items' property. [automation] Set default value for 'main' for inline programs to support relative paths, assets, and closure serialization. [automation/dotnet] Environment variable value type is now nullable. [automation/dotnet] Fix GetConfigValueAsync failing to deserialize [automation] Fix (de)serialization of StackSettings in .NET, Node, and Python. [cli] Revert the swapping out of the YAML parser library [automation/go,python,nodejs] Respect pre-existing Pulumi.yaml for inline programs. [sdk/nodejs] Add provider side caching for dynamic provider deserialization [automation/dotnet] Expose structured logging [cli] Support full fidelity YAML round-tripping Strip Byte-order Mark (BOM) from YAML configs during load. Swap out YAML parser library [sdk/python] Ensure all async tasks are awaited prior to exit. [sdk/nodejs] Fix error propagation in registerResource and other resource methods. [automation/python] Fix passing of additional environment variables. [sdk/python] Make exceptions raised by calls to provider functions (e.g. data sources) catchable. [automation/go,python,nodejs] Respect pre-existing Pulumi.yaml for inline programs. [cli] Improve diff displays during `pulumi refresh` [sdk/go] Cache loaded configuration files. [sdk/nodejs] Allow `Mocks::newResource` to determine whether the created resource is a `CustomResource`. [automation/*] Implement minimum version checking and add: Go: `LocalWorkspace.PulumiVersion()` Nodejs: `LocalWorkspace.pulumiVersion` Python: `LocalWorkspace.pulumi_version` Dotnet: `LocalWorkspace.PulumiVersion` [sdk/python] Fix automatic venv creation [automation/python] Fix Settings file save [sdk/dotnet] Remove MaybeNull from Output/Input.Create to avoid spurious warnings [cli] Fix a bug where a version wasn't passed to go install commands as part of `make brew` installs from homebrew [automation/go] Expose structured logging for Stack.Up/Preview/Refresh/Destroy. This change is marked breaking because it changes the shape of the `PreviewResult` struct. Before ```go type PreviewResult struct { Steps []PreviewStep `json:"steps"` ChangeSummary map[string]int `json:"changeSummary"` } ``` After ```go type PreviewResult struct { StdOut string StdErr string ChangeSummary map[apitype.OpType]int } ``` [automation/dotnet] Add ability to capture stderr This change is marked breaking because it also renames `OnOutput` to `OnStandardOutput`. [sdk/go] Add helpers to convert raw Go maps and arrays to Pulumi `Map` and `Array` inputs. [sdk/go] Return zero values instead of panicing in `Index` and `Elem` methods. [sdk/go] Support multiple folders in GOPATH. [#6228](https://github.com/pulumi/pulumi/pull/6228 [cli] Add ability to download arm64 provider plugins [build] Updating Pulumi to use Go 1.16 [build] Adding a Pulumi arm64 binary for use on new macOS hardware. Please note that `pulumi watch` will not be supported on darwin/arm64 builds. [automation/nodejs] Expose structured logging for Stack.up/preview/refresh/destroy. [automation/nodejs] Add `onOutput` event handler to `PreviewOptions`. [cli] Add locking support to the self-managed backends using the `PULUMISELFMANAGEDSTATELOCKING=1` environment variable. [sdk/python] Fix mocks issue when passing a resource more than once. [automation/dotnet] Add ReadDiscard OperationType [cli] Ensure the user has the correct access to the secrets manager before using it as part of `pulumi stack export --show-secrets`. [sdk/go] Implement getResource in the mock monitor. Add `diff` option to Automation API's `preview` and `up` [automation/dotnet] resolve issue with OnOutput delegate not being called properly during pulumi process execution. [automation/python,nodejs,dotnet] BREAKING Remove `summary` property from `PreviewResult`. The `summary` property on `PreviewResult` returns a result that is always incorrect and is being removed. [automation/python] Fix Windows error caused by use of NamedTemporaryFile in automation api. [cli] Respect provider aliases while diffing resources. [cli] Disable permalinks to the update details page when using self-managed backends (S3, Azure, GCS). Should the user want to get permalinks when using a self backend, they can pass a flag: `pulumi up --suppress-permalink false`. Permalinks for these self-managed backends will be suppressed on `update`, `preview`, `destroy`, `import` and `refresh` operations. [cli] Added commands `config set-all` and `config rm-all` to set and remove multiple configuration keys. [automation/*] Consume `config set-all` and `config rm-all` from automation API. [sdk/dotnet] C# Automation API. [sdk/dotnet] F# API to specify stack

[sdk/nodejs] Don't error when loading multiple copies of the same version of a Node.js component package. [cli] Skip unnecessary state file writes to address performance regression introduced in 2.16.2. [sdk/python] Fixed a change to `Output.all()` that raised an error if no inputs are passed in. This is used as follows: `pulumi stack history --page-size=20 --page=1` [automation/*] Added pagination options for stack history in Automation API SDKs to improve performance of stack updates. This is used similar to the following example in go: ```go func ExampleStack_History() { ctx := context.Background() stackName := FullyQualifiedStackName("org", "project", "stack") stack, _ := SelectStackLocalSource(ctx, stackName, filepath.Join(".", "program")) pageSize := 0 page := 0 hist, _ := stack.History(ctx, pageSize, page) fmt.Println(hist[0].StartTime) } ``` [pkg/testing/integration] Changed the default behavior for Python test projects to use `UseAutomaticVirtualEnv` by default. `UsePipenv` is now the way to use pipenv with tests. [automation/go] Exposed the version in the UpdateSummary for use in understanding the version of a stack update [cli] Changed the behavior for Python on Windows to look for `python` binary first instead of `python3`. [sdk/python] Gracefully handle monitor shutdown in the python runtime without exiting the process. [sdk/python] Fixed a bug in `contains_unknowns` where outputs with a property named "values" failed with a TypeError. [sdk/python] Allowed keyword args in Output.all() to create a dict. [sdk/python] Defined `all` in modules for better IDE autocomplete. [automation/python] Fixed a bug in nested configuration parsing. [sdk/python] Fix `Output.from_input` to unwrap nested output values in input types (args classes), which addresses an issue that was preventing passing instances of args classes with nested output values to Provider resources. [sdk/nodejs] Always read and write NodeJS runtime options from the environment. [sdk/go] Take a breaking change to remove unidiomatic numerical types and drastically improve build performance (binary size and compilation time). [cli] Ensure `pulumi stack change-secrets-provider` allows rotating the key from hashivault to passphrase provider [CLI] Fix malformed resource value bug. [sdk/dotnet] Fix `RegisterResourceOutputs` to serialize resources as resource references only when the monitor reports that resource references are supported. [CLI] Avoid panic for diffs with invalid property paths. Enable resource reference feature by default. Revert as it caused a which introduced a bug with serializing resource IDs [CLI] Add the ability to log out of all Pulumi backends at once. [sdk/go] Added `pulumi.Unsecret` which will take an existing secret output and create a non-secret variant with an unwrapped secret value. Also adds, `pulumi.IsSecret` which will take an existing output and determine if an output has a secret within the output. .NET: Allow `IMock.NewResourceAsync` to return a null ID for component resources. Note that this may require mocks written in C# to be updated to account for the change in nullability. [automation/go] Add debug logging settings for common automation API operations [automation/go] Set DryRun on previews so unknowns are identified correctly. [sdk/python] Fix python 3.6 support by removing annotations import. [sdk/nodejs] Added `pulumi.unsecret` which will take an existing secret output and create a non-secret variant with an unwrapped secret value. Also adds, `pulumi.isSecret` which will take an existing output and determine if an output has a secret within the output. [sdk/python] Added `pulumi.unsecret` which will take an existing secret output and create a non-secret variant with an unwrapped secret value. Also adds, `pulumi.is_secret` which will take an existing output and determine if an output has a secret within the output. Fix an issue with go sdk generation where optional strict enum values could not be omitted. Note - this is a breaking change to go sdk's enum values. However we currently only support strict enums in the azure-nextgen provider's

Fix an issue where python debug messages print unexpectedly. [CLI] Add `version` to the stack history output to be able to correlate events back to the Pulumi SaaS Fix a typo in the unit testing mocks to get the outputs while registering them [sdk/dotnet] Moved urn value retrieval into if statement for MockMonitor [sdk/dotnet] Added `Pulumi.Output.Unsecret` which will take an existing secret output and create a non-secret variant with an unwrapped secret value. [sdk/dotnet] Added `Pulumi.Output.IsSecretAsync` which will take an existing output and determine if an output has a secret within the output. [sdk/dotnet] Fix looking up empty version in `ResourcePackages.TryGetResourceType`. Python Automation API. Support recovery workflow (import/export/cancel) in Python Automation API. Respect the `version` resource option for provider resources. Allow `serializeFunction` to capture secrets. [CLI] Allow `pulumi console` to accept a stack name Support recovery workflow (import/export/cancel) in NodeJS Automation API. [CLI] Add a confirmation prompt when using `pulumi policy rm` [CLI] Ensure errors with the Pulumi credentials file give the user some information on how to resolve the problem [sdk/go] Support maps in Invoke outputs and Read inputs Fix a bug in the core engine that could cause previews to fail if a resource with changes had unknown output property values. Fix a panic due to unsafe concurrent map access. Fix regression in `venv` creation for python policy packs. Do not read plugins and policy packs into memory prior to extraction, as doing so can exhaust the available memory on lower-end systems. Fix a bug in the core engine where deleting/renaming a resource would panic on update + refresh. Fix a bug in the core engine that caused `ignoreChanges` to fail for resources being imported. Fix a bug in the core engine that could cause resources references to marshal improperly during preview. [sdk/dotnet] Add collection initializers for smooth support of Union<T, U> as element type Fix a bug in the core engine where ComponentResource state would be accessed before initialization. Prevent a panic by not attempting to show progress for zero width/height terminals. Fix a bug in the Go SDK that could result in dropped resource dependencies. Temporarily disable resource ref feature. Re-apply fix for running multiple `pulumi` processes concurrently. [cli] Prevent a panic when using `pulumi import` with local filesystems [sdk/nodejs] Fix issue that would cause unit tests using mocks to fail with unhandled errors when a resource references another resources that's been registered with `registerResourceModule`. Enable resource reference feature by default. [codegen/go] Fix Input/Output methods for Go resources. [sdk/python] Implement getResource in the mock monitor. [sdk/dotnet] Implement getResource in the mock monitor and fix some issues around deserializing resources. Fix a problem where `pulumi import` could panic on an import error due to missing error message. Correct the system name detected for Jenkins CI. Fix python execution for users running Python installed through the Windows App Store on Windows 10 Fix errors when running `pulumi` in Windows-based CI environments. Fix a problem where `pulumi import` could panic on importing arrays and sets, due to incorrect array resizing logic. . Address potential issues when running multiple `pulumi` processes concurrently. Automatically install missing Python dependencies. [cli] Ensure `pulumi stack change-secrets-provider` allows rotating the key for a passphrase provider [sdk/python] Add deserialization support for enums. Correctly rename `Pulumi.*.yaml` stack files during a rename that includes an organization in its name . Respect `PULUMIPYTHONCMD` in scripts. Add `PULUMIBACKENDURL` environment variable to configure the state backend. [sdk/dotnet] Add support for dependency injection into TStack instance by adding an overload to

The overload accepts an `IServiceProvider` that is used to create the instance of TStack. Also added a new method `Deployment.TestWithServiceProviderAsync` for testing stacks that use dependency injection. [cli] Ensure `pulumi stack change-secrets-provider` allows rotating the key in Azure KeyVault Propagate secretness of provider configuration through to the statefile. This ensures that any configuration values marked as secret (i.e. values set with `pulumi config set --secret`) that are used as inputs to providers are encrypted before they are stored. Fix a bug that could prevent `pulumi import` from succeeding. [Docs] Add support for the generation of Import documentation in the resource docs. This documentation will only be available if the resource is importable. [codegen/go] Add support for ResourceType and isComponent to enable multi-language components in Go. This change also generates Input/Output types for all resources in downstream Go SDKs. Support python 3.9 on Windows. `pulumi-language-go` and `pulumi new` now explicitly requires Go 1.14.0 or greater. Update .NET `Grpc` libraries to 2.33.1 and `Protobuf` to 3.13.0 (forked to increase the recursion limit) Fix plugin install failures on Windows. .NET: Report plugin install errors during `pulumi new`. Correct error message on KeyNotFoundException against StackReference. [cli] Small UX change on the policy violations output to render as `type: name` Fix a bug that was causing errors when (de)serializing custom resources. [cli] Ensure `pulumi history` annotes when secrets are unable to be decrypted Fix a bug in the Python SDK that caused incompatibilities with versions of the CLI prior to 2.13.0. Add internal scaffolding for using cross-language components from Go. Support python 3.9. [cli] Ensure that the CLI doesn't panic when using pulumi watch and using ComponentResources with non-standard naming [cli] Ensure that the CLI doesn't panic when trying to assemble a graph on a stack that has no snapshot available Add boolean values to Go SDK [cli] Ensure that the CLI doesn't panic when using pulumi watch and policies are enabled [cli] Ensure that the CLI doesn't panic when using the JSON output as part of previews and policies are enabled NodeJS Automation API. Improve the accuracy of previews by allowing providers to participate in determining what the impact of a change will be on output properties. Previously, Pulumi previews conservatively assumed that any output-only properties changed their values when an update occurred. For many properties, this was guaranteed to not be the case (because those properties are immutable, for example), and by suggesting the value might change, this could lead to the preview suggesting additional transitive updates of even replaces that would not actually happen during an update. Pulumi now allows the provider to specify the details of what properties will change during a preview, allowing them to expose more accurate provider-specific knowledge. This change is less conservative than the previous behavior, and so in case it causes preview results which are not deemed correct in some case - the `PULUMIDISABLEPROVIDER_PREVIEW` flag can be set to a truthy value (e.g. `1`) to enable the previous and more conservative behavior for previews. . Add an import command to the Pulumi CLI. This command can be used to import existing resources into a Pulumi stack. [cli] Remove eternal loop if a configured passphrase is invalid. Correctly validate project names during 'pulumi new' Fixing gzip compression for alternative backends. Add internal scaffolding for using cross-language components from .NET. Support self-contained executables as binary option for .NET

[cli] Ensure old secret provider variables are cleaned up when changing between secret providers [cli] Respect logging verbosity as part of pulumi plugin install commands [cli] Accept `-f` as a shorthand for `--skip-preview` on `pulumi up`, `pulumi refresh` and `pulumi destroy` operations [cli] Validate cloudUrl formats before `pulumi login` and throw an error if incorrect format specified [automation api] Add support for passing a private ssh key for git authentication that doesn't rely on a file path [cli] Improve user experience when pulumi plugin rm --all finds no plugins to remove. The previous behaviour was an error and should not be so. [sdk/python] Fix ResourceOptions annotations and doc strings. [sdk/dotnet] Fix HashSet concurrency issue. feat(autoapi): expose EnvVars LocalWorkspaceOption to set in ctor [sdk/python] Fix secret regression: ensure unwrapped secrets during deserialization are rewrapped before being returned. Add internal scaffolding for using cross-language components from Python. Do not oversimplify types for display when running an update or preview. Pulumi Windows CLI now uploads all VCS information to console (fixes ) .NET SDK: Support `Output<object>` for resource output properties (fixes ) [sdk/go] Add missing Version field to invokeOptions Add `pulumi console` command which opens the currently selected stack in the Pulumi console. Python SDK: Cast numbers intended to be integers to `int`. feat(autoapi): add GetPermalink for operation result Relax stack name validations for Automation API Allow Pulumi to read a passphrase file, via `PULUMICONFIGPASSPHRASE_FILE` to interact with the passphrase secrets provider. Pulumi will first try and use the `PULUMICONFIGPASSPHRASE` to get the passphrase then will check `PULUMICONFIGPASSPHRASE_FILE` and then all through to asking interactively as the final option. feat(autoapi): Add support for working with private Git repos. Either `SSHPrivateKeyPath`, `PersonalAccessToken` or `UserName` and `Password` can be pushed to the `auto.GitRepo` struct when interacting with a private repo Revise the design for connecting an existing language runtime to a CLI invocation. Note that this is a protocol breaking change for the Automation API, so both the API and the CLI must be updated together. Automation API - support streaming output for Up/Refresh/Destroy operations. Automation API - add recovery APIs (cancel/export/import) feat(autoapi): add Upsert methods for stacks Add IsSelectStack404Error and IsCreateStack409Error Add internal scaffolding for cross-language components. feat(autoapi): add workspace scoped envvars to LocalWorkspace and Stack refactor(autoapi-gitrepo): use Workspace in SetupFn callback Fix Go SDK plugin acquisition for programs with vendored dependencies Python SDK: Add support for `Sequence[T]` for array types feat(autoapi): Add support for non default secret providers in local workspaces .NET SDK: Prevent a task completion race condition Alpha version of the Automation API for Go Python SDK: Avoid raising an error when internal properties don't match the expected type. Added `--suppress-permalink` option to suppress the permalink output (fixes ) Python SDK: Avoid raising an error when an output has a type annotation of Any and the value is a list or dict. Fix support for CheckFailures in Python Dynamic Providers Upgrade version of `gocloud.dev`. This ensures that 'AWSKMS' secrets providers can now be used with full ARNs rather than just Aliases Ensure the 'history' command is a subcommand of 'stack'. This means that `pulumi history` has been deprecated in favour of `pulumi stack history`. Add support for extracting jar files in archive resources SDK changes to support Python input/output classes Add nuget badge to README Support publishing and consuming Policy Packs using any runtime Fix regression where any CLI integration for any stack with a default secrets provider would sort the config alphabetically and new stacks created would get created with an empty map `{}` in the config file Fix a bug where passphrase managers were not being recognised correctly when getting the configuration for the current stack. Please Note: This specific bug may have caused the stack config file to remove the password encryption

Add missing MapMap and ArrayArray types to Go SDK Switch os/user package with luser drop in replacement Update pip/setuptools/wheel in virtual environment before installing dependencies Add ability to change a secrets provider for the current stack Add ability to create a stack based on the config from an existing stack Python: Improved error message when `virtualenv` doesn't exist Enable pushing to Artifact Registry in actions Fix logic to parse pulumi venv on github action Add pluginDownloadURL field to package definition Add support for streamInvoke during update Add ability to copy configuration values between stacks Add logic to parse pulumi venv on github action Better performance for stacks with many resources using the .NET SDK Output PDB files and enable SourceLink integration for .NET assemblies Fix a panic in the display during CLI operations Go program gen: Improved handling for pulumi.Map types Go SDK: Input type interfaces should declare pointer type impls where appropriate Fixes issue where base64-encoded GOOGLE_CREDENTIALS causes problems with other commands Go program gen: prompt array conversion, unused range vars, id handling Go program gen handling for prompt optional primitives Go program gen All().Apply rewriter Go program gen improvements (multiline strings, get/lookup disambiguation, invoke improvements) Go program gen improvements (splat, all, index, traversal, range) Go program gen improvements (resource range, readDir, fileArchive) Set default config namespace for Get/Try/Require methods in Go SDK. Handle invalid UTF-8 characters before RPC calls Improve typing for Go SDK secret config values Fix panic on `pulumi up` prompt after preview when filtering and hitting arrow keys. Ensure GitHub Action authenticates to GCR when `$GOOGLE_CREDENTIALS` specified Fix `pylint(no-member)` when accessing `resource.id`. Fix GitHub Actions environment detection for PRs. Adding language sdk specific docker containers. Workaround bug in grcpio v1.30.0 by excluding this version from required dependencies. Turn program generation NYIs into diagnostic errors Improve dev version detection logic Export `CustomTimeouts` in the Python SDK Add GitHub Actions CI detection Allow users to specify base64 encoded strings as GOOGLE_CREDENTIALS Install and use dependencies automatically for new Python projects. Add F# operators for InputUnion. Add support for untagged outputs in Go SDK. Update go-cloud to support all Azure regions Fix a Regression in .NET unit testing. Allow `pulumi.export` calls from Python unit tests. Add support for publishing Python policy packs. Improve download perf by fetching plugins from a CDN. Add new brew target to fix homebrew builds Fixed ResourceOptions issue with stack references in Python SDK Add runTask to F# Deployment module Add support for generating Fish completions Support map-typed inputs in RegisterResource for Go SDK Don't call IMocks.NewResourceAsync for the root stack resource Add ResourceOutput type to Go SDK Allow secrets to be decrypted when exporting a stack Commands checking for a confirmation or requiring a `--yes` flag can now be skipped by setting `PULUMISKIPCONFIRMATIONS` to `1` or `true`. Add retry support when writing to state buckets Fix infinite recursion bug for Go SDK Order secretOutputNames when used in stack references Add support for a `PULUMICONSOLEDOMAIN` environment variable to override the behavior for how URLs to the Pulumi Console are generated. Protect against panic when unprotecting non-existant resources Add flag to `pulumi stack` to output only the stack name Ensure Go accessor methods correctly support nested fields of optional outputs Improve `ResourceOptions.merge` type in Python SDK Ensure generated Python module names are keyword-safe. Explicitly set XDGCONFIGHOME and XDGCACHEHOME env vars for helm in the pulumi docker image Increase the MaxCallRecvMsgSize for all RPC calls. CLI behavior change. Commands in non-interactive mode

when `pulumi` has its output piped to another process or running on CI) will not default to assuming that `--yes` was passed in. `--yes` is now explicitly required to proceed in non-interactive scenarios. This affects: `pulumi destroy` `pulumi new` `pulumi refresh` `pulumi up` Fixed introduced by usage of another library. @pulumi/pulumi now requires Node.js version >=10.10.0. All data-source invocations are now asynchronous (Promise-returning) by default. C# code generation switched to schema. .NET API: replace `IDeployment` interface with `DeploymentInstance` class. Fix Go SDK secret propagation for Resource inputs/outputs. Fix Go codegen to emit config packages Treat config values set with `--path` that start with '0' as strings rather than numbers. Switch .NET projects to .NET Core 3.1 Avoid unexpected replace on resource with `import` applied on second update. Propagate `additionalSecretOutputs` opt to Read in NodeJS. Fix handling of `nil` values in Outputs in Go. Include usage hints for Input types in Go SDK Fix secretness propagation in Python `apply`. Fix the `call` mock in Python. Fix handling of secret values in mock-based tests. Automatic plugin acquisition for Go Define merge behavior for resource options in Go SDK Add overloads to Output.All in .NET Make prebuilt executables opt-in only for the Go SDK Support the `binary` option (prebuilt executables) for the .NET SDK Add helper methods for stack outputs in the Go SDK Add additional overloads to Deployment.RunAsync in .NET API. Automate execution of `go mod download` for `pulumi new` Go templates Fix `pulumi up -r -t $URN` not refreshing only the target Fix logout with file backend when state is deleted Fix specific flags for `pulumi stack` being global Fix error when setting config without value in non-interactive mode Propagate unknowns in Go SDK during marshal operations Fix Go SDK stack reference helpers to handle nil values Fix propagation of unknown status for secrets Fix error related to side-by-side versions of `@pulumi/pulumi`. Allow users to specify an alternate backend URL when using the GitHub Actions container with the env var `PULUMIBACKENDURL`. Move to a multi-module repo to enable modules for the Go SDK Report compile time errors for Go programs during plugin acquisition. Add missing builtin `MapArray` to Go SDK. Add aliases to Go SDK codegen pkg. Discontinue testing on Node 8 (which has been end-of-life since January 2020), and start testing on Node 13. Add support for enabling Policy Packs with configuration. Remove obsolete .NET serialization attributes. Add support for validating Policy Pack configuration. Add support for plugin acquisition for Go programs Display resource type in PAC violation output Update to Helm v3 in pulumi Docker image Add ArrayMap builtin types to Go SDK Improve documentation of URL formats for `pulumi login` Add support for stack transformations in the .NET SDK. Fix `pulumi stack ls` on Windows Add support for running Python policy packs. Fix Kubernetes YAML parsing error in .NET. Avoid projects beginning with `Pulumi` to stop cyclic imports Ensure we can locate Go created application binaries on Windows Ensure Python overlays work as part of our SDK generation Fix terminal gets into a state where UP/DOWN don't work with prompts. Ensure old provider is not used when configuration has changed Support for unit testing and mocking in the .NET SDK. Avoid Configuring providers which are not used during preview. Fix missing module import on Windows platform. Add support for mocking the resource monitor to the NodeJS and Python SDKs. Reinstate caching of TypeScript compilation. Remove the need to set PULUMI_EXPERIMENTAL to use the policy and watch commands. Fix type annotations for `Output.all` and `Output.concat` in Python SDK. Add support for configuring policies. Fix a regression for CustomTimeouts in Python

Avoid panic when displaying failed stack policies. Add support for secrets in the Go SDK. Add support for transformations in the Go SDK. Allow oversize protocol buffers for Python SDK. Avoid duplicated messages in preview/update progress display. Improve CPU utilization in the Python SDK when waiting for resource operations. Expose resource options, parent, dependencies, and provider config to policies. Move .NET SDK attributes to the root namespace. Support exporting older stack versions. Disable interactive progress display when no terminal size is available. Mark `ResourceOptions` class as abstract in the .NET SDK. Require the use of derived classes. Support stack references in the Go SDK. Fix the Windows release process. Avoid writing checkpoints to backend storage in common case where no changes are being made. Add information about an in-flight operation to the stack command output, if applicable. Update `SummaryEvent` to include the actual name and local file path for locally-executed policy packs. Add support for aliases in the Go SDK Fix Python Dynamic Providers on Windows. Fix a stack reference regression in the Python SDK. Fix a buggy assertion in the Go SDK. Add `--latest` flag to `pulumi policy enable`. Breaking change for Policy which removes requirement for version when running `pulumi policy disable`. Add `--version` flag if user wants to specify version of Policy Pack to disable. Fix rendering of Policy Packs to ensure they are always displayed. Primitive input types in the Go SDK (e.g. Int, String, etc.) now implement the corresponding Ptr type e.g. IntPtr, StringPtr, etc.). This is consistent with the output of the Go code generator and is much more ergonomic for optional inputs than manually converting to pointer types. Add ability to specify all versions when removing a Policy Pack. Breaking change to Policy command: Change enable command to use `pulumi policy enable <org-name>/<policy-pack-name> latest` instead of a `--latest` flag. Publish python types for PEP 561 Lock dep ts-node to v8.5.4 Improvements to `pulumi policy` functionality. Add ability to remove & disable Policy Packs. Breaking change for Policy which is in Public Preview: Change `pulumi policy apply` to `pulumi policy enable`, and allow users to specify the Policy Group. Add Permalink to output when publishing a Policy Pack. Add `pulumi policy ls` and `pulumi policy group ls` to list Policy related resources. Add `BuildNumber` to CI vars and backend metadata property bag for CI systems that have separate ID and a user-friendly number. Breaking changes for the Go SDK. Complete details are in . Fix a panic in `pulumi stack select`. Update version of TypeScript used by Pulumi to `3.7.3`. Add support for GOOGLE_CREDENTIALS when using Google Cloud Storage backend. ```sh export GOOGLE_CREDENTIALS="$(cat ~/service-account-credentials.json)" pulumi login gs://my-bucket ``` Support for using `Config`, `getProject()`, `getStack()`, and `isDryRun()` from Policy Packs. Top-level Stack component in the .NET SDK. Add the .NET Core 3.0 runtime to the `pulumi/pulumi` container. Add `pulumi preview` support for `--refresh`, `--target`, `--replace`, `--target-replace` and `--target-dependents` to align with `pulumi up`. `ComponentResource`s now have built-in support for asynchronously constructing their children. `Output.apply` (for the JS, Python and .Net sdks) has updated semantics, and will lift dependencies from inner Outputs to the returned Output. Fix bug in determining PRNumber and BuildURL for an Azure Pipelines CI environment. Improvements to `pulumi policy` functionality. Add ability to remove & disable Policy Packs. Breaking change for Policy which is in Public Preview: Change `pulumi policy apply` to `pulumi policy enable`, and allow users to specify the Policy Group. Fix introduced in 1.7.0 when assigning `Output`s across different versions of the `@pulumi/pulumi`

A Pulumi JavaScript/TypeScript program can now consist of a single exported top level function. This allows for an easy approach to create a Pulumi program that needs to perform `async`/`await` operations at the top-level. ```ts // JavaScript module.exports = async () => { } //TypeScript export = async () => { } ``` Support passing a parent and providers for `ReadResource`, `RegisterResource`, and `Invoke` in the go SDK. Fix go SDK ReadResource. Fix go SDK DeleteBeforeReplace. Support for setting the `PULUMIPREFERYARN` environment variable to opt-in to using `yarn` instead of `npm` for installing Node.js dependencies. Fix regression that prevented relative paths passed to `--policy-pack` from working. Support for config.GetObject and related variants for Golang. Add support for IgnoreChanges in the go SDK. Support for a `go run` style workflow. Building or installing a pulumi program written in go is now optional. Re-apply "propagate resource inputs to resource state during preview, including first-class unknown values." The new set of changes have additional fixes to ensure backwards compatibility with earlier code. This allows the preview to better estimate the state of a resource after an update, including property values that were populated using defaults calculated by the provider. Validate StackName when passing a non-default secrets provider to `pulumi stack init` Add support for go1.13.x `pulumi update --target` and `pulumi destroy --target` will both error if they determine a dependent resource needs to be updated, destroyed, or created that was not was specified in the `--target` list. To proceed with an `update/destroy` after this error, either specify all the reported resources as `--target`s, or pass the `--target-dependents` flag to allow necessary changes to unspecified dependent targets. Support for node 13.x, building with gcc 8 and newer. [#3512] (https://github.com/pulumi/pulumi/pull/3512) Codepaths which could result in a hang will print a message to the console indicating the problem, along with a link to documentation on how to restructure code to best address it. `StackReference.getOutputSync` and `requireOutputSync` are deprecated as they may cause hangs on some combinations of Node and certain OS platforms. `StackReference.getOutput` and `requireOutput` should be used instead. `pulumi policy publish` now determines the Policy Pack name from the Policy Pack, and the the `org-name` CLI argument is now optional. If not specified; the current user account is used. Refactor the Output API in the Go SDK. Include the .NET language provider in the Windows SDK. Gracefully handle errors when resources use duplicate aliases. Use the update token for renew_lease calls and update the API version to 5. Improve startup time performance by 0.5-1s by checking for a newer CLI release in parallel. Add an experimental `pulumi watch` command. Adds a preview of .NET support for Pulumi. This code is an preview state and is subject to change at any point. Fix another colorizer issue that could cause garbled output for messages that did not end in colorization tags. Verify deployment integrity during import and issue an error if verification fails. The state file can still be imported by passing the `--force` flag. Omit unknowns in resources in stack outputs during preview. `pulumi update` can now be instructed that a set of resources should be replaced by adding a `--replace urn` argument. Multiple resources can be specified using `--replace urn1 --replace urn2`. In order to replace exactly one resource and leave other resources unchanged, invoke `pulumi update --replace urn --target urn`, or `pulumi update --target-replace urn` for short. `pulumi stack` now renders the stack as a tree view. Support for lists and maps in config. `ResourceProvider#StreamInvoke` implemented, will be the basis for streaming APIs in `pulumi

`FileAsset` in the Python SDK now accepts anything implementing `os.PathLike` in addition to `str`. Fix colorization on Windows 10, and fix a colorizer bug that could cause garbled output for resources with long status messages. Remove unintentional console outupt introduced in 1.3.3. Fix an issue with first-class providers introduced in 1.3.2. Fix hangs and crashes related to use of `getResource` (i.e. `aws.ec2.getSubnetIds(...)`) methods, including frequent hangs on Node.js 12. This fixes https://github.com/pulumi/pulumi/issues/3260) and . Some less common existing styles of using `getResource` calls are also deprecated as part of this change, and users should see https://www.pulumi.com/docs/troubleshooting/#synchronous-call for details on adjusting their code if needed. Revert "propagate resource inputs to resource state during preview". These changes had a critical issue that needs further investigation. Propagate resource inputs to resource state during preview, including first-class unknown values. This allows the preview to better estimate the state of a resource after an update, including property values that were populated using defaults calculated by the provider. Fetch version information from the Homebrew JSON API for CLIs installed using `brew`. Support renaming stack projects via `pulumi stack rename`. Add `helm` to `pulumi/pulumi` Dockerhub container Make the location of `.pulumi` folder configurable with an environment variable. (Fixes ) `pulumi update` can now be scoped to update a single resource by adding a `--target urn` or `-t urn` argument. Multiple resources can be specified using `-t urn1 -t urn2`. Adds the ability to provide transformations to modify the properties and resource options that will be used for any child resource of a component or stack. Add resource transformations support in Python. Support emitting high-level execution trace data to a file and add a debug-only command to view trace data. Fix parsing of GitLab urls with subgroups. `pulumi refresh` can now be scoped to refresh a subset of resources by adding a `--target urn` or `-t urn` argument. Multiple resources can be specified using `-t urn1 -t urn2`. `pulumi destroy` can now be scoped to delete a single resource (and its dependents) by adding a `--target urn` or `-t urn` argument. Multiple resources can be specified using `-t urn1 -t urn2`. Avoid re-encrypting secret values on each checkpoint write. These changes should improve update times for stacks that contain secret values. Add Codefresh CI detection. Add `-c` (config array) flag to the `preview` command. Fix a bug that caused the Python runtime to ignore unhandled exceptions and erroneously report that a Pulumi program executed successfully. Read operations are no longer considered changes for the purposes of `--expect-no-changes`. Increase the MaxCallRecvMsgSize for interacting with the gRPC server. Do not ask for a passphrase in non-interactive sessions (fix ). Support combining the filestate backend (local or remote storage) with the cloud-backed secrets providers (KMS, etc.). Moved `@pulumi/pulumi` to target `es2016` instead of `es6`. As `@pulumi/pulumi` programs run inside Nodejs, this should not change anything externally as Nodejs already provides es2016 support. Internally, this makes more APIs available for `@pulumi/pulumi` to use in its implementation. Fix the --stack option of the `pulumi new` command. ( fixes ) No significant changes. Print a Welcome to Pulumi message for users during interactive logins to the Pulumi CLI. Filter the list of templates shown by default during `pulumi new`. Fix a crash when using StackReference from the `1.0.0-beta.3` version of `@pulumi/pulumi` and `1.0.0-beta.2` or earlier of the CLI. Allow Un/MashalProperties to reject Asset and AssetArchive types. (partial fix for https://github.com/pulumi/pulumi-kubernetes/issues/737) When using StackReference to fetch output values from another stack, do not mark a value as secret if it was not secret in the stack you referenced. (fixes

Allow resource IDs to be changed during `pulumi refresh` operations Do not crash when renaming a stack that has never been updated, when using the local backend. (fixes ) Fix intermittet "NoSuchKey" issues when using the S3 based backend. (fixes ). Support filting stacks by organization or tags when using `pulumi stack ls`. (fixes , Explicitly setting `deleteBeforeReplace` to `false` now overrides the provider's decision. Fail read steps (e.g. the step generated by a call to `aws.s3.Bucket.get()`) if the requested resource does not exist. Fix the package version compatibility checks in the NodeJS language host. Do not propagate input properties to missing output properties during preview. The old behavior can cause issues that are difficult to diagnose in cases where the actual value of the output property differs from the value of the input property, and can cause `apply`s to run at unexpected times. If this change causes issues in a Pulumi program, the original behavior can be enabled by setting the `PULUMIENABLELEGACY_APPLY` environment variable to `true`. Fix a bug in the GitHub Actions program preventing errors from being rendered in the Actions log on github.com. Fix a bug in the Node.JS SDK that caused failure details for provider functions to go unreported. Fix a bug in the Python SDK that caused crashes when using asynchronous data sources. Fix crash when exporting secrets from a pulumi app Fix a panic in logger when a secret contains non-printable characters Check the uniqueness of the project name during pulumi new Retry renaming a temporary folder during plugin installation Add support for additional Pulumi secrets providers using AWS KMS, Azure KeyVault, Google Cloud KMS and HashiCorp Vault. These secrets providers can be configured at stack creation time using `pulumi stack init b --secrets-provider="awskms://alias/LukeTesting?region=us-west-2"`, and ensure that all encrypted data associated with the stack is encrypted using the target cloud platform encryption keys. This augments the previous choice between using the app.pulumi.com-managed secrets encryption or a fully-client-side local passphrase encryption. Add `Output.concat` to Python SDK Add `requireOutput` to `StackReference` Arbitrary values can now be exported from a Python app. This includes dictionaries, lists, class instances, and the like. Values are treated as "plain old python data" and generally kept as simple values (like strings, numbers, etc.) or the simple collections supported by the Pulumi data model (specifically, dictionaries and lists). Fix `get_secret` in Python SDK always returning None. Make `pulumi.runtime.invoke` synchronous in the Python SDK Fix a bug in the Python SDK that caused input properties that are coroutines to be awaited twice. Deprecated functions in `@pulumi/pulumi` will now issue warnings if you call them. Please migrate off of these functions as they will be removed in a future release. The deprecated functions are. `function computeCodePaths(extraIncludePaths?: string[], ...)`. Use the `computeCodePaths` overload that takes a `CodePathOptions` instead. `function serializeFunctionAsync`. Please use `serializeFunction` instead. Fix an error message from the logging subsystem which was introduced in v0.17.26 Add support for property paths in `ignoreChanges`, and pass `ignoreChanges` to providers . This allows differences between the actual and desired state of the resource that are not captured by differences in the resource's inputs to be ignored (including differences that may occur due to resource provider bugs). Add `getobject`, `requireobject`, `getsecretobject` and `requiresecretobject` APIs to Python `config` module Fix unexpected provider replacements when upgrading from older CLIs and older providers Add Python support for renaming resources via the `aliases` resource option. Adding aliases allows new resources to match resources from previous deployments which used different names, maintaining the identity of the resource and avoiding replacements or re-creation of the

This was previously added to the JavaScript sdk in 0.17.15. Support for Dynamic Providers in Python Fix a crash when two different versions of `@pulumi/pulumi` are used in the same Pulumi program `pulumi new` allows specifying a local path to templates (resolves ) Fix an issue where a file archive created on Windows would contain back-slashes Fix an issue where output values of a resource would not be present when they contained secret values, when using Python. Fix an issue where emojis are printed in non-interactive mode. (fixes ) Promises/Outputs can now be directly exported as the top-level (i.e. not-named) output of a Stack. (fixes ) Add support for importing existing resources to be managed using Pulumi. A resource can be imported by setting the `import` property in the resource options bag when instantiating a resource. In order to successfully import a resource, its desired configuration (i.e. its inputs) must not differ from its actual configuration (i.e. its state) as calculated by the resource's provider. Better error message for missing npm on `pulumi new` (fixes ) Add the ability to pass a customTimeouts object from the providers across the engine to resource management. (fixes ) Defer to resource providers in all cases where the engine must determine whether or not a resource has changed. Note that this can expose bugs in the resources providers that cause diffs to be present even if the desired configuration matches the actual state of the resource: in these cases, users can set the `PULUMIENABLELEGACY_DIFF` environment variable to `1` or `true` to enable the old diff behavior. https://github.com/pulumi/pulumi/issues/2971 lists the known provider bugs exposed by these changes and links to appropriate workarounds or tracking issues. Improve update performance in cases where a large number of log messages are reported during an update. Python SDK fix for a crash resulting from a KeyError if secrets were used in configuration. Fix an issue where a secret would not be encrypted in the state file if it was a property of a resource which was used as a stack output (fixes ) SDK fix for crash that could occasionally happen if there were multiple identical aliases to the same Resource. Engine fix for crash that could occasionally happen if there were multiple identical aliases to the same Resource. Allow setting backend URL explicitly in `Pulumi.yaml` file `StackReference` now has a `.getOutputSync` function to retrieve exported values from an existing stack synchronously. This can be valuable when creating another stack that wants to base flow-control off of the values of an existing stack (i.e. importing the information about all AZs and basing logic off of that in a new stack). Note: this only works for importing values from Stacks that have not exported `secrets`. When the environment variable `PULUMITESTMODE` is set to `true`, the Python runtime will now behave as if `pulumi.runtime.settings.settestmodeenabled(True)` had been called. This mirrors the behavior for NodeJS programs (fixes ). Resources that are only 'read' will no longer be displayed in the terminal tree-display anymore. These ended up heavily cluttering the display and often meant that programs without updates still showed a bunch of resources that weren't important. There will still be a message displayed indicating that a 'read' has happened to help know that these are going on and that the program is making progress. docs(login): escape codeblocks, and add object store state instructions The API for passing along a custom provider to a ComponentResource has been

You can now just say `new SomeComponentResource(name, props, { provider: awsProvider })` instead of `new SomeComponentResource(name, props, { providers: { "aws" : awsProvider } })` Fix a bug where the path provided to a URL in `pulumi login` is lost are dropped, so if you `pulumi login s3://bucketname/afolder`, the Pulumi files will be inside of `s3://bucketname/afolder/.pulumi` rather than `s3://bucketname/.pulumi` (thanks, !). NOTE: If you have been logging in to the s3 backend with a path after the bucket name, you will need to either move the .pulumi folder in the bucket to the correct location or log in again without the path prefix to see your previous stacks. Fix a crash that would happen if you ran `pulumi stack output` against an empty stack (fixes ). Unparented Pulumi `CustomResource`s now support calling `.getProvider(...)` on them. Fixed a bug that caused an assertion when dealing with unchanged resources across version upgrades. Pulumi now allows Python programs to "read" existing resources instead of just creating them. This feature enables Pulumi Python packages to expose ".get()" methods that allow for reading of resources that already exist. Support for referencing the outputs of other Pulumi stacks has been added to the Pulumi Python libraries via the `StackReference` type. Add CI system detection for Bitbucket Pipelines. Pulumi now tolerates changes in default providers in certain cases, which fixes an issue where users would see unexpected replaces when upgrading a Pulumi package. Add support for renaming resources via the `aliases` resource option. Adding aliases allows new resources to match resources from previous deployments which used different names, maintaining the identity of the resource and avoiding replacements or re-creation of the resource. `pulumi plugin install` gained a new optional argument `--server` which can be used to provide a custom server to be used when downloading a plugin. `pulumi refresh` now tries to install any missing plugins automatically like `pulumi destroy` and `pulumi update` do (fixes ). `pulumi whoami` now outputs the URL of the currently connected backend. Correctly suppress stack outputs when serializing previews to JSON, i.e. `pulumi preview --json --suppress-outputs`. Fixes . Fix an issue where creating a first class provider would fail if any of the configuration values for the providers were secrets. (fixes ). Fix an issue where when using `--diff` or looking at details for a proposed updated, the CLI might print text like: `<{%reset%}> --outputs:--<{%reset%}>` instead of just `--outputs:--`. Fixes local login on Windows. Specifically, windows local paths are properly understood and backslashes `\` are not converted to `5c` in paths. Fix an issue where some operations would fail with `error: could not deserialize deployment: unknown secrets provider type`. Fix an issue where pulumi might try to replace existing resources when upgrading to the newest version of some resource providers. Pulumi now tells you much earlier when the `--secrets-provider` argument to `up` `init` or `new` has the wrong value. In addition, supported values are now listed in the help text. (fixes ). Pulumi no longer prompts for your passphrase twice during operations when you are using the passphrase based secrets provider. (fixes ). Fix an issue where complex inputs to a resource which contained secret values would not be stored correctly. Fix a panic during property diffing when comparing two secret arrays. The Pulumi engine and Python and NodeJS SDKs now have support for tracking values as "secret" to ensure they are encrypted when being persisted in a state file. `` Any existing value may be turned into a secret by calling `pulumi.secret(<value>)` (NodeJS) or `Output.secret(<value>`) (Python). In both cases, the returned value is an output which may be passed around like any

If this value flows into a resource, the plaintext will not be stored in the state file, but instead It will be encrypted, just like values added to config with `pulumi config set --secret`. You can verify that values are being stored as you expect by running `pulumi stack export`, When values are encrypted in the state file, they appear as an object with a special signature key and a ciphertext property. When outputs of a stack are secrets, `pulumi stack output` will show `[secret]` as the value, by default. You can pass `--show-secrets` to `pulumi stack output` in order to see the actual raw value. When storing state with the Pulumi Service, you may now elect to use the passphrase based encryption for both secret configuration values and values that are encrypted in a state file. To use this new feature, pass `--secrets-provider passphrase` to `pulumi new` or `pulumi stack init` when you initally create the stack. When you create the stack, you will be prompted for a passphrase (or if `PULUMICONFIGPASSPHRASE` is set, it will be used). This passphrase is used to generate a unique key for your stack, and config values and encrypted state values are encrypted using AES-256-GCM. The key is derived from your passphrase, and while information to re-create it when provided with your passphrase is stored in both the `Pulumi.<stack-name>.yaml` file and the state file for your stack, this information can not be used to recover the key. When using this mode, the Pulumi Service is unable to decrypt either your secret configuration values or and secret values in your state file. We will be adding gestures to move existing stacks managed by the service to use passphrase based encryption soon as well as gestures to change the passphrase for an existing stack. Note Stacks with encrypted secrets in their state files can only be managed by 0.17.11 or later of the CLI. Attempting to use a previous version of the CLI with these stacks will result in an error. Fixes #397 Add support for Azure Pipelines in CI environment detection. Minor fix to how Azure repository information is extracted to allow proper grouping of Azure repositories when various remote URLs are used to pull the repository. Fixes issue introduced in 0.17.9 where local-login broke on Windows due to the new support for `s3://`, `azblob://` and `gs://` save locations. Minor contributing document improvement. Warnings from `npm` about missing description, repository, and license fields in package.json are now suppressed when `npm install` is run from `pulumi new` (via `npm install --loglevel=error`). Depend on newer version of gRPC package in the NodeJS SDK. This version has prebuilt binaries for Node 12, which should make installing `@pulumi/pulumi` more reliable when running on Node 12. `pulumi login` now supports `s3://`, `azblob://` and `gs://` paths (on top of `file://`) for storing stack information. These are passed the location of a desired bucket for each respective cloud provider (i.e. `pulumi login s3://mybucket`). Pulumi artifacts (like the `xxx.checkpoint.json` file) will then be stored in that bucket. Credentials for accessing the bucket operate in the normal manner for each cloud provider. i.e. for AWS this can come from the environment, or your `.aws/credentials` file, etc. The pulumi version update check can be skipped by setting the environment variable `PULUMISKIPUPDATE_CHECK` to `1` or `true`. Fix an issue where the stack would not be selected when an existing stack is specified when running `pulumi new <template> -s <existing-stack>`. Add a `--json` flag (`-j` for short) to the `preview`

This allows basic serialization of a plan, including the anticipated set of deployment steps, list of diagnostics messages, and summary information. Each step includes deeply serialized information about the resource state and step metadata itself. This is part of ongoing work tracked in . Add a new `ignoreChanges` option to resource options to allow specifying a list of properties to ignore for purposes of updates or replacements. Fix an engine bug that could lead to incorrect interpretation of the previous state of a resource leading to unexpected Update, Replace or Delete operations being scheduled. [#2650]https://github.com/pulumi/pulumi/issues/2650) Build/push `pulumi/actions` container to with new SDK releases A new "test mode" can be enabled by setting the `PULUMITESTMODE` environment variable to `true` in either the Node.js or Python SDK. This new mode allows you to unit test your Pulumi programs using standard test harnesses, without needing to run the program using the Pulumi CLI. In this mode, limited functionality is available, however basic resource object allocation with input properties will work. Note that no actual engine operations will occur in this mode, and that you'll need to use the `PULUMICONFIG`, `PULUMINODEJSPROJECT`, and `PULUMINODEJS_STACK` environment variables to control settings the CLI would have otherwise managed for you. `refresh` will now warn instead of returning an error when it notices a resource is in an unhealthy state. This is in service of https://github.com/pulumi/pulumi/issues/2633. Correctly handle the case where we would fail to detect an archive type if the filename included a dot in it. (fixes ) Make `Config`'s constructor's `name` argument optional in Python, for consistency with our Node.js SDK. If it isn't supplied, the current project name is used as the default. `pulumi logs` will now display log messages from Google Cloud Functions. Don't print the `error:` prefix when Pulumi exists because of a declined confirmation prompt (fixes ) Fix issue where `Outputs` produced by `pulumi.interpolate` might have values which could cause validation errors due to them containing the text `<computed>` during previews. A new command, `pulumi stack rename` was added. This allows you to change the name of an existing stack in a project. Note: When a stack is renamed, the `pulumi.getStack` function in the SDK will now return a new value. If a stack name is used as part of a resource name, the next `pulumi up` will not understand that the old and new resources are logically the same. We plan to support adding aliases to individual resources so you can handle these cases. See for discussion on this new feature. For now, if you are unwilling to have `pulumi up` create and destroy these resources, you can rename your stack back to the old name. (fixes ) Fix two warnings that were printed when using a dynamic provider about missing method handlers. A bug in the previous version of the Pulumi CLI occasionally caused the Pulumi Engine to load the incorrect resource plugin when processing an update. This bug has been fixed in 0.17.3 by performing a deterministic selection of the best set of plugins available to the engine before starting up. See Add support for serializing JavaScript function that capture . Support serializing arrow-functions with deconstructed parameters. Show `brew upgrade pulumi` as the upgrade message when the currently running `pulumi` executable is running on macOS from the brew install directory. Resource diffs that are rendered to the console are now filtered to properties that have semantically-meaningful changes where possible. `pulumi new` no longer runs an initial deployment after a project is generated for nodejs projects. Instead, instructions are printed indicating that `pulumi up` can be used to deploy the

Differences between the state of a refreshed resource and the state described in a Pulumi program are now properly detected when using newer providers. Differences between a resource's provider-internal properties are no longer displayed in the CLI. Pulumi will now install missing plugins on startup. Previously, Pulumi would error if a required plugin was not present and a bug in the Pulumi CLI made it common for users using Pulumi in their continuous integration setup to have problems with missing plugins. Starting with 0.17.2, if Pulumi detects that required plugins are missing, it will make an attempt to install the missing plugins before proceeding with the update. Slight tweak to `Output.apply` signature to help TypeScript infer types better. This update includes several changes to core `@pulumi/pulumi` constructs that will not play nicely in side-by-side applications that pull in prior versions of this package. As such, we are rev'ing the minor version of the package from 0.16 to 0.17. Recent version of `pulumi` will now detect, and warn, if different versions of `@pulumi/pulumi` are loaded into the same application. If you encounter this warning, it is recommended you move to versions of the `@pulumi/...` packages that are compatible. i.e. keep everything on 0.16.x until you are ready to move everything to 0.17.x. `Output<T>` now 'lifts' property members from the value it wraps, simplifying common coding patterns. For example: ```ts interface Widget { text: string, x: number, y: number }; var v: Output<Widget>; var widgetX = v.x; // `widgetX` has the type Output<number>. // This is equivalent to writing `v.apply(w => w.x)` ``` Note: this 'lifting' only occurs for POJO values. It does not happen for `Output<Resource>`s. Similarly, this only happens for properties. Functions are not lifted. Depending on a Component Resource will now depend on all other Resources parented by that Resource. This will help out the programming model for Component Resources as your consumers can just depend on a Component and have that automatically depend on all the child Resources created by that Component. Note: this does not apply to a Custom resource. Depending on a CustomResource will still only wait on that single resource being created, not any other Resources that consider that CustomResource to be a parent. Rolled back change where calling toString/toJSON on an Output would cause a message to be logged to the `pulumi` diagnostics stream. Fix an issue where the Pulumi CLI would load the newest plugin for a resource provider instead of the version that was requested, which could result in the Pulumi CLI loading a resource provider plugin that is incompatible with the program. This has the potential to disrupt users that previously had working configurations; if you are experiencing problems after upgrading to 0.16.17, you can opt-in to the legacy plugin load behavior by setting the environnment variable `PULUMIENABLELEGACYPLUGINSEARCH=1`. You can also install plugins that are missing with the command `pulumi plugin install resource <name> <version> --exact`. Attempting to convert an [Output<T>] to a string or to JSON will now result in a warning message being printed, as well as information on how to rectify the situation. This is to help with diagnosing cryptic problems that can occur when Outputs are accidentally concatenated into a string in some part of the program. Fixes incorrect closure serialization issue (https://github.com/pulumi/pulumi/pull/2497) `pulumi` will now check that all versions of `@pulumi/pulumi` are compatible in your node_modules folder, and will issue a warning message if not. To be compatible, the versions of `@pulumi/pulumi` must agree on their major and minor

Running incompatible versions is not something that will be blocked, but it is discouraged as it may lead to subtle problems if one version of `@pulumi/pulumi` is loaded and passes objects to/from an incompatible version. Rolling back the change: "Depending on a Resource will now depend on all other Resource's parented by that Resource." Unforeseen problems cropped up that caused deadlocks. Removing this change until we can have a high quality solution without these issues. Fix deadlock with resource dependencies (https://github.com/pulumi/pulumi/issues/2470) When trying to `stack rm` a stack managed by pulumi.com that has resources, the error message now informs you to pass `--force` if you really want to remove a stack that still has resources under management, as this would orphan these resources (fixes ). Enabled Python programs to delete resources in parallel (fixes ). If you are using Python 2, you should upgrade to Python 3 or else you may experience problems when deleting resources. Fixed an issue where Python programs would occasionally fail during preview with errors about empty IDs being passed to resources. () Return an error from `pulumi stack tag` commands when using the `--local` mode. Depending on a Resource will now depend on all other Resource's parented by that Resource. This will help out the programming model for Component Resources as your consumers can just depend on a Component and have that automatically depend on all the child Resources created by that Component. Fix a regression in `@pulumi/pulumi` introduced by 0.16.13 where an update could fail with an error like: ``` Diagnostics: pulumi:pulumi:Stack (my-great-stack): TypeError: resproto.InvokeRequest is not a constructor at Object.<anonymous> (.../node_modules/@pulumi/pulumi/runtime/invoke.js:58:25) at Generator.next (<anonymous>) at fulfilled (.../node_modules/@pulumi/pulumi/runtime/invoke.js:17:58) at <anonymous> ``` We appologize for the regression. (fixes ) Individual resources may now be explicitly marked as requiring delete-before-replace behavior. This can be used e.g. to handle explicitly-named resources that may not be able to be replaced in the usual manner. When used in conjunction with the latest versions of the various language SDKs, the Pulumi CLI is now more precise about the dependent resources that must be deleted when a given resource must be deleted before it can be replaced (fixes ). NOTE: As part of the above change, once a stack is updated with v0.16.13, previous versions of `pulumi` will be unable to manage it. Issue a more prescriptive error when using StackReference and the name of the stack to reference is not of the form `<organization>/<project>/<stack>`. When using the cloud backend, stack names now must only be unique within a project, instead of across your entire account. Starting with version of 0.16.12 the CLI, you can create stacks with duplicate names. If an account has multiple stacks with the same name across different projects, you must use 0.16.12 or later of the CLI to manage them. BREAKING CHANGE NOTICE: As part of the above change, when using the 0.16.12 CLI (or a later version) the names passed to `StackReference` must be updated to be of the form (`<organization>/<project>/<stack>`) e.g. `acmecorp/infra/dev` to refer to the `dev` stack of the `infra` project in the `acmecorp` organization. Add `--json` to `pulumi config`, `pulumi config get`, `pulumi history` and `pulumi plugin ls` to request the output be in JSON. Changes to `pulumi new`'s output to improve the experience. In the nodejs SDK, `pulumi.interpolate` and `pulumi.concat` have been added as convenient ways to combine Output values into strings. Added `pulumi history` to show information about the history of updates to a stack. When creating a project with `pulumi new` the generated

file no longer contains the template section, which was unused after creating a project In the Python SDK, the `isdryrun` function just always returned `true`, even when an update (and not a preview) was being preformed. This has been fixed. Python programs will no longer deadlock due to exceptions in functions run during applies. Support for first-class providers in Python. Fix a bug where `StackReference` outputs were not updated when changes occured in the referenced stack. Added `pulumi stack tag` commands for managing stack tags stored in the cloud backend. Link directly to /account/tokens when prompting for an access token. Exporting a Resource from an application Stack now exports it as a rich recursive pojo instead of just being an opaque URN (fixes https://github.com/pulumi/pulumi/issues/1858). Update the error message when When `pulumi` commands fail to detect your project to mention that `pulumi new` can be used to create a new project (fixes ) Added a `--stack` argument (short form `-s`) to `pulumi stack`, `pulumi stack init`, `pulumi state delete` and `pulumi state unprotect` to allow operating on a different stack than the currently selected stack. This brings these commands in line with the other commands that operate on stacks and already provided a `--stack` option (fixes ) Added `Output.all` and `Output.from_input` to the Python SDK. During previews and updates, read operations (i.e. calls to `.get` methods) are no longer shown in the output unless they cause any changes. Fix a performance regression where `pulumi preview` and `pulumi up` would hang for a few moments at the end of a preview or update, in addition to the overall operation being slower. Fix an issue that caused panics due to shutting the Jaeger tracing infrastructure down before all traces had finished () Configuration and stack commands now take a `--config-file` options. This option allows the user to override the file used to fetch and store config information for a stack during the execution of a command. Fix an issue where ANSI escape codes would appear in messages printed from the CLI when running on Windows. Fix an error about a bad icotl when trying to read sensitive input from the console and standard in was not connected to a terminal. The dynamic provider would fail to launch if your `nodemodules` folder was non in the default location or had a non standard layout. This has been fixed so we correctly find your `nodemodules` folder in the same way node does. (fixes ) When running a Python program, pulumi will now run `python3` instead of `python`, since `python` often points at Python 2.7 binary, and Pulumi requires Python 3.6 or later. The environment variable `PULUMIPYTHONCMD` can be used to provide a different binary to run. Allow `Output`s in the dependsOn property of `ResourceOptions` (fixes ) Add a new `StackReference` type to the node SDK which allows referencing an output of another stack (fixes ) Fix an issue where `pulumi` would not respect common `NO_PROXY` settings (fixes ) The CLI wil now correctly report any output from a Python program which writes to `sys.stderr` (fixes ) Don't install packages by default for Python projects when creating a new project from a template using `pulumi new`. Previously, `pulumi` would install these packages using `pip install` and they would be installed globally when `pulumi` was run outside a virtualenv. Fix an issue where `pulumi` could panic during a peview when using a first class provider which was constructed using an output property of another resource (fixes ) Fix an issue where `pulumi` would fail to load resource plugins for newer dev

Fix an issue where running two copies of `pulumi plugin install` in parallel for the same plugin version could cause one to fail with an error about renaming a directory. Fix an issue where if the directory containing the `pulumi` executable was not on the `$PATH` we would fail to load language plugins. We now will also search next to the current running copy of Pulumi (fixes ) Fix an issue where passing a key of the form `foo:config:bar:baz` to `pulumi config set` would succeed but cause errors later when trying to interact with the stack. Setting this value is now blocked eagerly (fixes ) Fix an issue where `pulumi plugin install` would fail on Windows with an access deined message. If you're using Pulumi with Python, this release removes Python 2.7 support in favor of Python 3.6 and greater. In addition, some members have been renamed. For example the `stack_output` function has been renamed to `export`. All major features of Pulumi work with this release, including parallelism! Download plugins to a temporary folder during `pulumi plugin install` to ensure if the operation is canceled, the have downloaded plugin is not used. If an update is in progress when `pulumi stack ls` is run, don't show its last update time as "a long time ago". Add `--preserve-config` to `pulumi stack rm` which causes Pulumi to keep the `Pulumi.<stack-name>.yaml` when removing a stack. Support passing template names to `pulumi up` the same as `pulumi new` does. When `-g` or `--generate-only` is passed to `pulumi new`, don't show a confusing message that says it will update a stack. Fix an issue where an output property of a resource would change its type during an update in some cases. Provide richer detail on the properties during a multi-stage replace. Fix `pulumi logs` so it can collect log messages from Lambdas on AWS. Pulumi now reports metadata during CI runs on CircleCI, for later display on app.pulumi.com. Fix an assert that could fire if a checkpoint had multiple resources with the same URN (which could happen in cases where a delete operation was pending on an old copy of a resource). When `$TERM` is set to `dumb`, Pulumi should no longer try to use interactive reading from the terminal, which would fail. When displaying elapsed time for an update, round to the nearest second. Add the `--json` flag to the `pulumi logs` command. Add an `iterable` module to `@pulumi/pulumi` with two helpful combinators `toObject` and `groupBy` to help combine multiple `Output<T>`'s into a single object. Pulumi no longer prompts you for confirmation when `--skip-preview` is passed to `pulumi up`. Instead, it just preforms the update as requested. Add the `--json` flag to the `pulumi stack ls` command. The `--color=always` flag should now be respected in all cases. Pulumi now reports metadata about GitLab repositories when doing an update, so they can be shown on app.pulumi.com. Pulumi now uses compression when uploading your checkpoint file to the Pulumi service, which should speed up updates where your stack has many resources. "First Class" providers used to be shown as changing during previews. This is no longer the case. Fully support Node 11 Fix a regression that would cause resource operations to not be processed in parallel when using the latest CLI with a `@pulumi/pulumi` older than 0.16.1 Fail with a better error message (and in fewer cases) on Node 11. We hope to have complete support for Node 11 later this week, but for now recommend using Node 10 or

A new top-level CLI command pulumi state was added to assist in making targeted edits to the state of a stack. Two subcommands, pulumi state delete and pulumi state unprotect, can be used to delete or unprotect individual resources respectively within a Pulumi stack. Default to allowing as many parallel operations as possible Fixed an issue with the generated type for an Unwrap expression when using TypeScript Improve error messages when resource plugins can't be loaded or when a checkpoint is invalid Fix link to the Pulumi Web Console in the CLI for a stack Attach git commit metadata to Pulumi updates in some additional cases and Default colors that fit better for both light and dark terminals. Overall updates to rendering of previews/updates for consistency and simplicity of the display. Parallel resource creation and updates were added in `0.15`. In `0.16`, this has been extended to include deletions, which are now conservatively parallelized based on dependency information. The Pulumi GitHub App previously supported just TravisCI. With this release the `pulumi` CLI now supports configurable CI providers via environment variables. Thanks ! In addition to the above features, we've made a handfull of day to day improvements in the CLI: Support for `zsh` completions. Thanks to !) JSON formatting support for `pulumi stack output`. Added a `Dockerfile` for the Pulumi CLI and development environment for use in hosted environments. Many improvements for Go development. Thanks to !. Extend `pulumi.output` to deeply unwrap `Input`s. This significantly simplifies working with `Inputs` when building Pulumi components. Fix an assert in display code when a resource property transitions from an asset to an archive or the other way around Improved performance of `pulumi stack ls` Fix build authoring so the dynamic provider works for the CLI built by Homebrew (thanks to !) Major features of this release include: Providers are now able to register "ephmeral" update messages which are shown in the "Info" column in the CLI during an update, but which are not printed at the end of the update. The new version of the `@pulumi/kubernetes` package uses this when printing messages about resource initialization. The local backend (which stores your deployment's state file locally, instead of on pulumi.com) has been improved. You can now use `pulumi login --local` or `pulumi login file://<path-to-storage-root>` to select the local backend and control where state files are stored. In addition, older versions of the CLI would behave slightly differently when using the local backend vs pulumi.com, for example, some operations would not show previews before running. This has been fixed. When using the local backend, updates print the on disk location of the checkpoint file that was written. The local backend is covered in more detail in . We've made a bunch of improvements in `pulumi refresh`. Some of these improve the UI during a refresh (for example, clarifying text about the underyling operations) as well fixing bugs with refreshing certain types of objects (for example CloudFront CDNs). You can now pass a URL to a Git repository to `pulumi up <url>` to deploy a project without having to manage its source code locally. This works like `pulumi new <url>`, but configures and deploys the project from a temporary directory that will be cleaned up automatically after the update. `pulumi new` now outputs an error when the current working directory (or directory specified explicitly via the `--dir` flag) is not empty. Additionally, `pulumi new` now runs a preview of an initial update at the end of its operation and asks if you would like to perform the

Both `pulumi up` and `pulumi new` now support `-c` flags for specifying config values as arguments (e.g. `pulumi up <url> -c aws:region=us-east-1`). In addition to the above features, we've made a handfull of day to day improvements in the CLI: Support `pulumi` in a projects in a Yarn workspaces. Improve error message when there are errors decrypting secret configuration values. Don't fail `pulumi up` when plugin discovery fails. New helpers for extracting and validating values from `pulumi.Config`. Support serializng "factory" functions. Pulumi now performs resource creates and updates in parallel, driven by dependencies in the resource graph. (Parallel deletes are coming in a future release.) If your program has implicit dependencies that Pulumi does not already see as dependencies, it's possible parallel will cause ordering issues. If this happens, you may set the `dependsOn` on property in the `resourceOptions` parameter to any resource. By default, Pulumi allows 10 parallel operations, but the `-p` flag can be used to override this. `-p=1` disables parallelism altogether. Parallelism is supported for Node.js and Go programs, and Python support will come in a future release. Pulumi now allows creation and configuration of resource providers programmatically. In addition to the default provider instance for each resource, you can also create an explicit version of the provider and configure it explicitly. This can be used to create some resources in a different region from your main deployment, or deploy resources to a programmatically configured Kubernetes cluster, for example. We have for illustrative purposes. The Pulumi CLI is now able to report more detailed information from individual resources during an update. This is used, for instance, in the Kubernetes provider, to provide incremental progress output for steps that may take a while to comeplete (such as deployment orchestration). We anticipate leveraging this feature in more places over time. You can now pass a URL to a Git repository to `pulumi new` to install a custom template, enabling you to share common templates across your team. If you pass a simple name, or omit arguments altogether, `pulumi new` behaves as before, using the . By default, Pulumi now natively supports TypeScript, so you do not need to run `tsc` explicitly before deploying. (We often forget to do this too!) Simply run `pulumi up`, and the program will be recompiled on the fly before running it. To use this new support, upgrade your `@pulumi/pulumi` version to 0.15.0, in addition to the CLI. Pulumi prefers JavaScript source to TypeScript source, so if you had been using TypeScript previously, we recommend you make the following changes: Remove the `main` and `typings` directives from `package.json`, as well as the `build` script. Remove the `bin` folder that contained your previously compiled code. You may remove the dependency on `typescript` from your `package.json` as well, since `@pulumi/pulumi` has one. While a `tsconfig.json` file is no longer required, as Pulumi uses intelligent defaults, other tools like VS Code behave better when it is present, so you'll probably want to keep it. We've improved our closure capturing logic, which should allow you to write more idiomatic code in lambda functions that are uploaded to the cloud. Previously, if you wanted to use a module, we required you to write either `require('module')` or `await import('module')` inside your lambda function. In addition, if you wanted to use a helper you defined in another file, you had to require that module in your function as well. With these changes, the following code now works: ```typescript import * as axios from "axios"; import * as cloud from "@pulumi/cloud-aws"; const api = new cloud.API("api");

async (req, res) => { const statusText = (await axios.default.get("https://www.pulumi.com")).statusText; res.write(`GET https://www.pulumi.com/ == ${statusText}`).end(); }); ``` The `pulumi.Config` object can now be created without an argument. When no argument is supplied, the value of the current project is used. This means that application level code can simply do `new pulumi.Confg()` without passing any argument. For library authors, you should continue to pass the name of your package as an argument. The Pulumi GitHub application bridges the gap between GitHub (source code, pull requests) and Pulumi (cloud resources, stack updates). By installing the Pulumi GitHub application into your GitHub organization, and then running Pulumi as part of your CI build process, you can now see the results of stack updates and previews as part of pull requests. This allows you to see the potential impact a change would have on your cloud infrastructure before merging the code. The Pulumi GitHub application is still in preview as we work to support more CI systems and provide richer output. For information on how to install the GitHub application and configure it with your CI system, please page. The CLI no longer emits warnings if it can't detect metadata about your git enlistement (for example, what GitHub project it coresponds to). The CLI now only warns about adding a plaintext configuration in cases where it appears likely you may be storing a secret. Support empty text assets (). When printing message in non-interactive mode, do not keep printing out the worst diagnostic (). When run in non interactive environments (e.g. docker) Pulumi would print duplicate messages to the screen related to a resource when the running Pulumi program was writing to standard out (e.g. if it was invoking a docker build). This no longer happens. The full output from the program continues to be printed at the end of execution. Work around a potentially bad assert in the engine (). In some cases, when Pulumi failed to delete a resource as part of an update, future updates would crash with an assert message. This is no longer the case and Pulumi will try to delete the resource it had marked as should be deleted. Print out a 'still working' message every 20 seconds when in non-interactive mode (). When Pulumi is waiting for a long running resource operation to create (e.g. waiting for an ECS service to become stable after creation), print some output to the console even when running non-interactively. This helps for cases like TravsCI where if output is not written for a while the job is assumed to have hung and is aborted. Support the NOCOLOR env variable to suppress any colored output (). Pulumi now respects the `NOCOLOR` environment variable. When set to a truthy value, colors are suppressed from the CLI. In addition, the `--color` flag can now be passed to all `pulumi` commands. Support -s in `stack {export, graph, import, output}` (). `pulumi stack export`, `pulumi stack graph`, `pulumi stack import` and `pulumi stack output` now support a `-s` or `--stack` flag, which allows them to operate on a different stack that the currently selected one. Add `pulumi whoami` (). `pulumi whoami` will report the account name of the current logged in user. In addition, we now display the name of the current user after `pulumi login`. Don't require `PULUMIDEBUGCOMMANDS` to be set to use local backend (). Improve misleading `pulumi new` summary message (). Fix printing out outputs in a pulumi program

Pulumi now shows the values of output properties after a `pulumi up` instead of requiring you to run `pulumi stack output`. Do a better job preventing serialization of unnecessary objects in closure serialization (). We've improved our analysis when serializing functions. This yeilds smaller code when a function is serialized and prevents errors around unused native code being captured in some cases. Publish to pypi.org (). Pulumi packages are now public on pypi.org! Add optional `--dir` flag to `pulumi new` (). The `pulumi new` command now has an optional flag `--dir`, for the directory to place the generated project. If it doesn't exist, it will be created. Support Pulumi programs written in Go (). Initial version for Pulumi programs written in Go. While it is not complete, basic resource registration works. Allow overriding config location (). Support a new `config` member in `Pulumi.yaml`, which specifies a relative path to a folder where per-stack configuration is stored. The path is relative to the location of `Pulumi.yaml` itself. Delete existing resources before replacing, for resources that must be singletons (). For resources where the cloud vendor does not allow multiple resources to exist, such as a mount target in EFS, Pulumi now deletes the existing resource before creating a replacement resource. Compute required packages during closure serialization (). Closure serialization now keeps track of the `require`'d packages it sees in the function bodies that are serialized during a call to `serializeFunction`. So, only required packages are uploaded to Lambda. Support browser based logins to the CLI (). The Pulumi CLI now has an option to login via a browser. When you are prompted for an access token, you can just hit enter. The CLI then opens a browser to so that you can authenticate. Support better previews in Python by mocking out Unknown values (). During the preview phase of a deployment, computed values were `Unknown` in Python, causing the preview to be empty. This issue is now resolved. Issue a better error message if you capture a V8 intrinsic (). It's possible to accidentally take a dependency on a Pulumi deployment-time library, which causes problems when creating a runtime function for AWS Lambda. There is now a better error message when this situation occurs. Improve the promise leak experience (). Fixes an issue where a promise leak could be erroneously reported. Also, show simple error message by default, unless the environment variable `PULUMIDEBUGPROMISE_LEAKS` is set. A new all-in-one installer script is now available at . Many enhancements to `pulumi new` (). The command now interactively walks through creating everything needed to deploy a new stack, including selecting a template, providing a name, creating a stack, setting default configuration, and installing dependencies. Several improvements to the `pulumi up` CLI experience (): a tree view display, more details from logs during deployments, and rendering of stack outputs at the end of updates. (Breaking) Remove the `--preview` flag in `pulumi up`, in favor of reintroducing `pulumi preview` (). Also, to accept an update without the interactive prompt, use the `--yes` flag, rather than `--force`. Significant performance improvements for `pulumi up` (). JavaScript `async` functions in Node 7.6+ now work with Pulumi function serialization (. Support installation on Windows in folders which contain spaces in their name (). Add a `pulumi cancel` command (). This command cancels any in-progress operation for the current stack. (Breaking) Eliminate `pulumi init` requirement (). The `pulumi init` command is no longer required and should not be used for new stacks. For stacks created prior to the v0.12.0 SDK, `pulumi init` should still be run in the project directory if you are connecting to an existing

For new projects, stacks will be created under the currently logged in account. After upgrading the CLI, it is necessary to run `pulumi stack select`, as the location of bookkeeping files has been changed. For more information, see . (Breaking) Remove the explicit 'pulumi preview' command (). The `pulumi preview` output has now been merged in to the `pulumi up` command. Before an update is run, the preview is shown and you can choose whether to proceed or see more update details. To see just the preview operation, run `pulumi up --preview`. Switch to a more streamlined view for property diffs in `pulumi up` (). Allow multiple versions of the `@pulumi/pulumi` package to be loaded (). This allows packages and dependencies to be versioned independently. When running a `pulumi up` or `destroy` operation, a single ctrl-c will cancel the current operation, waiting for it to complete. A second ctrl-c will terminate the operation immediately. (). When getting update logs, get all results (). Fixes a bug where logs could sometimes be truncated in the pulumi.com console. Switch to a resource-progress oriented view for pulumi preview, update, and destroy operations (). The operations `pulumi preview`, `update` and `destroy` have far simpler output by default, and show a progress view of ongoing operations. In addition, there is a structured component view, showing a parent operation as complete only when all child resources have been created. Remove strict dependency on Node v6.10.x (). It is now no longer necessary to use a specific version of Node to run Pulumi programs. Node versions after 6.10.x are supported, as long as they are under Active LTS or are the Current stable release. (Breaking) Require `pulumi login` before commands that need a backend (). The `pulumi` CLI now requires you to log in to pulumi.com for most operations. Improve the error message arising from missing required configurations for resource providers (). The error message now prints all missing configuration keys, along with their descriptions. Add a `pulumi new` command to scaffold a project (). Usage is `pulumi new and contributions are welcome! Python is now a supported language in Pulumi (). For more information, see . (Breaking) Change the way that configuration is stored (). To simplify the configuration model, there is no longer a separate notion of project and workspace settings, but only stack settings. The switches `--all` and `--save` are no longer supported; any common settings across stacks must be set on each stack directly. Settings for a stack are stored in a file that is a sibling to `Pulumi.yaml`, named `Pulumi.<stack-name>.yaml`. On first run `pulumi`, will migrate projects from the previous configuration format to the new one. The recommended practice is that developer stacks that are not shared between team members should be added to `.gitignore`, while stack setting files for shared stacks should be checked in to source control. For more information, see the section . (Breaking) Eliminate the superfluous `:config` part of configuration keys (). `pulumi` no longer requires configuration keys to have the string `:config` in them. Using the `:config` string in keys for the object `@pulumi/pulumi.Config` is deprecated and `preview` and `update` show warnings when it is used. Additionally, it is preferred to set keys in the form `aws:region` rather than `aws:config:region`. For compatibility, the old behavior is also supported, but will be removed in a future release. For more information, see the article . (Breaking) Modules are treated as normal values when serialized

If you need to use a module at runtime, consider either using `require` or `await import` at runtime, or pre-compute what you need and capture the resulting data or objects. <!-- NOTE: the programming-model article below is still all todos. --> (Breaking) Serialize resource registration after inputs resolve (). Previously, resources were most often created/updated in the order they were seen during the Pulumi program execution. In preparation for supporting parallel resource operations, these operations now run in an order that respects the dependencies between resources (via ), but may not match the order of program execution. This is mostly transparent to Pulumi program authors, but does mean that any missing dependencies will cause your program to fail in unexpected ways. For more information on how such failures manifest and what to do about them, see the article . Hide secrets from CLI output (). To prevent secret values from being accidentally disclosed in command output or logs, `pulumi` replaces secret values with the string `. Change default of where stacks are created (). If currently logged in to the Pulumi CLI, `stack init` creates a managed stack; otherwise, it creates a local stack. To force a local or remote stack, use the flags `--local` or `--remote`. Improve error messages output by the CLI (). RPC endpoint errors have been improved. Errors such as "catastrophic error" and "fatal error" are no longer duplicated in the output. Produce better error messages when the main module is not found (). If you're running TypeScript but have not run `tsc` or your main JavaScript file does not exist, the CLI will print a helpful `info:` message that points to the possible source of the error. Note: The v0.10.0 SDK has a strict dependency on Node.js 6.10.2. Support "force" option when deleting a managed stack. Add a `pulumi history` command (). For a managed stack, use the `pulumi history` to view deployments of that stack's resources. (Breaking) Use `npm install` instead of `npm link` to reference the Pulumi SDK `@pulumi/aws`, `@pulumi/cloud`, `@pulumi/cloud-aws`. For more information, see . (Breaking) Explicitly track resource dependencies via `Input` and `Output` types. This enables future improvements to the Pulumi development experience, such as parallel resource creation and enhanced dependency visualization. When a resource is created, all of its output properties are instances of a new type . `Output<T>` contains both the value of the resource property and metadata that tracks resource dependencies. Inputs to a resource now accept `Output<T>` in addition to `T` and `Promise<T>`. Managed stacks sometimes return a 500 error when requesting logs Error when using `float64` attributes using SDK v0.9.9 () `pulumi logs` entries only return first line () Added the ability to control the upload context to the Pulumi Service. You may now set a `context` property in `Pulumi.yaml`, which is combined with the location of `Pulumi.yaml`. This new path is the root of what is uploaded and can be used during deployment. This allows you to, for example, share common code that is located in a folder in your source tree above the directory `Pulumi.yaml` for the project you are deploying. Added additional configuration for docker builds for a container. The `build` property of a container may now either be a string (which is treated as a path to the folder to do a `docker build` in) or an object with properties `context`, `dockerfile` and `args`, which are passed to `docker build`. If unset, `context` defaults to the current working directory, `dockerfile` defaults to `Dockerfile` and `args` default to no arguments. Added the ability to import or export a stack's deployment in the Pulumi

This command can be used for either local or managed stacks. There are two new verbs under the command `stack`: `export` writes the current stack's latest deployment to stdout in JSON format. `import` reads a new JSON deployment from stdin and applies it to the current stack. A basic progress spinner is displayed during deployment operations. When the Pulumi CLI is run in interactive mode, it displays an animated ASCII spinner When run in non-interactive mode, CLI prints a message that it is still working. For CI systems that kill jobs when there is no CLI output (such as TravisCI), this eliminates the need to create shell scripts that periodically print output. To make the behavior of local and managed stacks consistent, the Pulumi CLI uses a separate encryption key for each stack, rather than one shared for all stacks. You can now use a different passphrase for different stacks. Similar to managed stacks, you cannot copy and paste an encrypted value from one stack to another in `Pulumi.yaml`. Instead you must manage the value via `pulumi config`. The default behavior for `--color` is now `always`. To change this, specify `--color always` or `--color never`. Previously, the value was based on the presence of the flag `--debug`. The command `pulumi logs` now defaults to returning one hour of logs and outputs the start time that is used. When a stack is removed, `pulumi` now deletes any configuration it had saved in either the `Pulumi.yaml` file or the workspace. New in this release is the and stacks that are managed by Pulumi. This is the recommended way to safely deploy cloud applications. `pulumi stack init` now creates a Pulumi managed stack. For a local stack, use `--local`. All Pulumi CLI commands now work with managed stacks. Login to Pulumi via `pulumi login`. The provides a management experience for stacks. You can view the currently deployed resources (along with the AWS ARNs) and see logs from the last update operation. Support for component resources(), enabling grouping of resources into logical components. This provides an improved view of resources during `preview` and `update` operations in the CLI (). ``` pulumi:pulumi:Stack: (create) [urn=urn:pulumi:donna-testing::url-shortener::pulumi:pulumi:Stack::url-shortener-donna-testing] cloud:table:Table: (create) [urn=urn:pulumi:donna-testing::url-shortener::cloud:table:Table::urls] aws:dynamodb/table:Table: (create) [urn=urn:pulumi:donna-testing::url-shortener::cloud:table:Table$aws:dynamodb/table:Table::urls] ``` A stack can have output properties, defined as `export let varName = val`. You can view the last deployed value for the output property using `pulumi stack output varName` or in the Pulumi Console. Resource naming is now more consistent, but there is a new file format for checkpoint files for both local and managed stacks. If you created stacks in the 0.8 release, you should destroy them with the 0.8 CLI, then recreate with the 0.9.x CLI. Store secrets securely in configuration via `pulumi config set --secret`. chris The verbs for `config` are now consistent, via `get`, `set`, and `rm`. See . ). These features now work: To see new logs as they arrive, use `--follow` Use `--since` to limit to recent logs, such as `pulumi logs --since=1h` Filter to specific resources with `--resource`. This filters to a particular component and its child resources (if any), such as `pulumi logs --resource examples-todoc57917fa --since 1h` Support for `.pulumiignore`, for files that should not be uploaded when deploying a managed stack through Pulumi. . To specify the entry directory, specify `main` in `Pulumi.yaml`. For instance, `main: a/path/to/main/`. Support for protected resources. A resource can be marked as `protect: true`, which prevents deletion of the resource. For example, `let res = new MyResource("precious", { .. }, { protect: true });`. To "unprotect" the resource, change `protect: false` then run `pulumi up`. See . Changed defaults for