Pulumi v3.265.0
++****************
Pulumi v3.265.0 adds a pulumi logout --all --delete-credentials-key option, Authenticode signing for Windows CLI and language host binaries, and a PCL error for literals that do not match a schema constant or enum. It also fixes 21 items, mostly in the PCL type checker and interpreter, code generation for Python, Node.js and Go SDKs, and engine handling of unknown outputs when a dependency fails during a --continue-on-error update.
What changes for platform teams
Teams using Pulumi with --continue-on-error can now rely on Unknown=true being reported for skipped Read and Import steps, so SDK consumers no longer treat empty outputs as real values. Windows CLI binaries are now signed, which may matter for install policies.
Changes
- [cli/auth] Add pulumi logout --all --delete-credentials-key to delete the key that encrypts stored credentials from the OS credential storeadded
- [pcl] Name the constant or the enum members a resource property admits when a literal does not match itadded
- [cli/install] Authenticode-sign the Windows CLI and language host binariesadded
- [programgen/python] Generate valid Python for output-dependent resource rangesfixed
- [cli/policy] Recover from partial installs & wait for parallel installsfixed
- [cli/install] Cancel cross-process waits with Ctrl-Cfixed
- [engine] Report Unknown=true on the ReadResourceResponse when a Read is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs can propagate unknowns to dependents rather than treating empty outputs as realfixed
- [cli/auth] Keep encrypted credentials in other PULUMI_HOME directories readable after pulumi logout --all or pulumi login in one of themfixed
- [engine] Report Unknown=true on the register response when an Import step is skipped because one of its dependencies failed during a --continue-on-error update, so SDKs propagate unknowns to dependents rather than treating empty outputs as realfixed
- [sdkgen/nodejs] Fix generated Node.js SDK compilation for self-referencing resource inputsfixed
- [pcl] Fix a panic when a PCL program indexes a tuple literal with an index equal to its lengthfixed
- [pcl] Fix a binder panic on nested tuple literals of different shapes, and unify collection literals that hold different constants into one collection type so they can be iteratedfixed
12 more lines
- [pcl] Fix the length built-in in the PCL interpreter to accept objects and mapsfixed
- [pcl] Add the range built-in to the PCL interpreterfixed
- [pcl] Type min and max as number when any argument is a non-integer literalfixed
- [pcl] Report an error when a number or bool literal is assigned to a property whose schema constant or enum does not admit itfixed
- [pcl] Report a type mismatch on a resource input property that the resource does not also declare as an outputfixed
- [pcl] Allow a resource to be assigned to a plain property typed as a reference to its resource typefixed
- [pcl] Type a quoted string with no interpolation as a constant so string constants and string enums are validated at bind timefixed
- [programgen] Fix length on output values in generated programs, and count the keys of maps and objects in generated Node.js programsfixed
- [sdk/go] Fix policy analyzer config schema serialization for Go analyzersfixed
- [programgen] Fill the lists that range produces in Node.js programsfixed
- [pcl] Fix PCL type conversion checks whose result depended on whether the same types had been unified firstfixed
- [sdk/nodejs] Fix closure serialization for importStar-wrapped cached modulesfixed
Full release notes ↗ · all Pulumi releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules