npx @buildinternet/releases get pulumiNew Connect cloud accounts wizard discovers every AWS account, Azure subscription, or Google Cloud project in an organization and onboards them all in a single guided flow, handling OIDC setup, ESC environments, and default scans and policies automatically.
Usage limits for Pulumi Neo let organizations set a monthly dollar cap that pauses the AI agent when reached. Per-member limits and email notifications at 50%, 80%, 95%, and 100% are also available for paid plan organizations.
Fixed a regression where the -v log level was ignored, restoring warnings-only output to stderr by default. The Go Automation API now supports --import-pending-creates for refresh operations.
Google's Open Knowledge Format (OKF) v0.1 formalizes the Karpathy wiki pattern as a specification: markdown files with YAML frontmatter, organized in a directory tree with reserved index.md and log.md filenames. Platform teams can now store runbooks, decision records, and architecture knowledge as code alongside their Pulumi infrastructure, linked via the resource field mapping to Pulumi URNs.
Import is now available in the generated automation APIs for NodeJS, Python, and Go. Reading non-secret stack outputs and running pulumi about no longer require the passphrase for passphrase-encrypted stacks. Also adds a production runtime option for Node.js projects, a --reason flag to pulumi env open-request, and fixes a resource deletion bug when import identifiers differ from canonical IDs.
Pulumi Cloud now supports passkeys for users who sign in with email and password, using Touch ID, Face ID, Windows Hello, or hardware keys. Passkeys are phishing-resistant and synced across devices; existing password and MFA configurations remain unchanged.
The experimental deployment settings file (Pulumi..deploy.yaml) and related commands have been removed; manage settings directly in Pulumi Cloud with get, edit, and destroy subcommands. Added pulumi neo --debug-update and --debug-preview flags to investigate failed updates or previews. Fixed a bug where plugin debug logs appeared as raw JSON with --logtostderr, and improved import support for parameterized and extension-parameterized providers.
The Pulumi CLI command reference and SDK API documentation (Node.js, Python, .NET, Java) now include a version selector dropdown, allowing users to view documentation matching their installed version. Immutable snapshots are available back to v3.150.0.
Fixed recursive property log marshaling in the CLI engine.
Automatic logging is now enabled for every command by default. The Node.js SDK drops support for Node 20 and earlier, requiring Node 22+. Other changes include a --skip-config-validation flag for preview/up/refresh/destroy, a --file flag for policy analysis of state files, and multiple output-format flags for stack, policy, and plugin commands.
New ISO/IEC 27001:2022 policy pack for AWS, available in Pulumi Cloud as iso-27001-aws, includes 238 ready-to-run policies that map the standard's security controls to AWS resource configurations.
Pulumi ESC now supports webhooks that trigger when an environment’s secrets are rotated, notifying on success or failure. Configure them via the Pulumi Cloud Console, the Pulumi Service Provider, or the CLI.
New guide covers provisioning a governed Databricks workspace baseline with Pulumi, including cluster policies, notebooks, secret scopes, permissions, and automated jobs.
Ad-hoc resources can now be tracked as PCL snippets in state, and Node.js SDK adds Output.recover to catch exceptions in outputs. Fixed a panic when binding a schema that references an uninstalled plugin, and generated programs now guard conditionally-created resources.
New blog post walks through building a standardized Cloudflare edge baseline with Pulumi, covering DNS records, WAF custom rules, a Worker canary, and Zero Trust Access policies.
Pulumi introduced Neo code reviews, now in public preview, which analyze pull request changes against live cloud infrastructure and preview output. Reviews post as comments on GitHub PRs, respect existing RBAC and guardrails, and are free during preview before GA on July 1, 2026.