Pulumi v3.271.0
++++++*********
Pulumi v3.271.0 adds an id field to ReadResourceResponse so providers can return a resolved id that differs from the requested one, and adds state and env commands to the generated automation APIs for NodeJS, Python and Go. It also introduces version 2 of the --policy-pack-config format, which nests policy configs under policies and adds an exceptions field. Fixes include redacting secret values in invalid input diagnostics unless --show-secrets is passed, and resolving failed outputs as unknown under --continue-on-error.
What changes for platform teams
Teams using policy packs need to migrate to the version 2 policy-pack-config format to use the new exceptions field. Teams relying on automation APIs gain state and env commands, and secret values in diagnostics are now redacted by default.
Changes
- [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during previewadded
- [cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions fieldadded
- [auto] Add state commands to the generated automation APIs for NodeJS, Python and Goadded
- [auto] Add env commands to the generated automation APIs for NodeJS, Python and Goadded
- [cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi newadded
- [protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requestsadded
- [engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDKfixed
- [cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-timefixed
- [engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populatedfixed
- [engine] Redact secret values in invalid input diagnostics unless --show-secrets is passedfixed
- [pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a mapfixed
- [sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failuresfixed
3 more lines
- [sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty valuesfixed
- [sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methodsfixed
- [sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputsfixed
Full release notes ↗ · all Pulumi releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules