- Added OIDC JWT claim extraction for org/team/user in CLI login and new SDK version‑requirement helpers (requirePulumiVersion/CheckPulumiVersion) for Node, Python, and Go.
- Introduced OnError resource hook for custom retry policies, a `--up` flag for `pulumi plan`, and improved stack import handling to reconfigure secret manager when needed.
- Fixed automation API About endpoint, corrected alias option handling in protobuf, and resolved async generator serialization bugs in the Node.js SDK.
v3.217.0
Official Pulumi changelog summary with source attribution, release tags, and community reactions.
Track this Pulumi release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Pulumi release note into a weekly digest for the tools you actually use.
Create digestMore Pulumi changelog updates
Added CLI enhancements: single confirmation prompt for `pulumi new`, new `PULUMI_DEFAULT_ORGANIZATION` env var, and clearer messages for stack creation, login failures, and policy group listing.
Added optional OS‑protected encryption for stored credentials and new interactive prompts for cloud provider/language in `pulumi new`.
CLI adds first‑project creation after login, auto‑assigns identifiers in "pulumi do", supports stateful resource patching, introduces "pulumi state get", and falls back to an auto‑created project/stack when run outside a Pulumi project.