v3.225.0

3.225.0 (2026-03-04)

Features

• [engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets #21959

• [engine] The engine now handles the inheritance of the provider option in resource registrations #21999

• [engine] Enable journaling by default. It can still be turned off using the PULUMI_DISABLE_JOURNALING env variable #22041

• [programgen] PCL can now express config values should be read as secrets #22066

• [yaml] Update yaml to v1.30.0

• [cli/engine] Add a flag for automatically opening a Neo task on preview/up failure #21960

• [cli/package] Support source-based packages in pulumi schema check, not just schema files #21897

Bug Fixes

• [cli] Fix stack import panicking when importing a service stack into a DIY backend #22076

• [engine] Fix panic when a new component resource in the program is not targeted #21957

• [sdk/nodejs] Implement GetProgramDependencies for bun and pnpm #22065

Miscellaneous

• [cli] Build language plugins with the grpcnotrace tag to reduce the binary size #22012