Pulumi

Introduces PULUMI_DEFAULT_ORGANIZATION to set the default org, and interactive pulumi new now shows a single confirmation of project, stack, and config defaults. Also removes the Node.js Automation API output buffer limit and improves error reporting for failed logins and package schema validation.

Stored credentials can now be encrypted with an OS-protected key, enabled with PULUMI_CREDENTIAL_STORE. Interactive pulumi new now asks for cloud provider and language instead of listing every template, Go policy packs gain stack validation support, and preview --import-file no longer emits unknown values. Plus fixes for hyphenated schema modules, symlinked paths, and missing Python SDK arguments.

Adds pulumi state get to show individual resources, plus new pulumi do capabilities including auto-created project and stack fallback, auto-assigned stack resource identifiers, and stateful patch support. The DIY backend deprecation warning is now an error, and Go codegen fixes several node-naming and collision bugs.

Announces the Notification Center in the Pulumi console, surfacing organization activity such as teammate task completions and pending ESC change requests in real time. Users can keep an eye on what matters without leaving the console.

Added --ignore-protect flag to delete protected resources without state changes, and a --server flag that skips package resolution. Fixed output-form invokes depending on pending remote components to resolve as unknown during previews.

An analysis of why prompt guardrails fail for autonomous coding agents, particularly in infrastructure contexts, and how Docker Sandboxes provide a practical alternative with a single command.

Package commands now support an --extension flag for extension-parameterized packages, reinstalled from Pulumi.yaml on pulumi install. Fixed a race condition where parallel pulumi install processes sharing a PULUMI_HOME could intermittently fail with a missing provider executable error.

Organization admins can now set a maximum expiry for access tokens, enforced on every request. Tokens that never expire or exceed the cap are rejected with a 403 error. A preview tool shows which machine tokens would be affected before the policy is saved, and rejections include the org name and policy maximum for easy remediation.

New pulumi stack migrate command moves stacks between backends with secret re-encryption, and pulumi logs share shares logs with Pulumi. pulumi neo acp runs Neo as an ACP agent over stdio for editors. Also adds pulumi.run for Python programs, upsert in pulumi do, and an --override-env flag for config environment substitution. CLI commands now have ls, rm, and other aliases, and secrets are redacted in property value logs.

Blog post explains the Kubernetes Agent Sandbox project, which provides AI agents with isolated, disposable environments as Kubernetes resources using gVisor or Kata Containers for kernel-level isolation. Includes a guide to deploying it on GKE with Pulumi.