Pulumi v3.258.0

3.258.0 (2026-08-17)

Features

• [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #24212
• [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #24226
• [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack #24232

Bug Fixes

• [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens #24288
• [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces #24288
• [cli/import] pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them #24261
• [auto/python] Add missing program argument on preview_refresh and preview_destroy stack methods #24274
• [cli/new] Fix cloning templates and repositories into paths containing symlinks with absolute targets #24329
• [cli/do] Fix global project lookup #24334

Improvements

• [sdk/python] Use the resource monitor's advertised feature set consistently throughout the Python SDK #24308

Miscellaneous

• [cli] Rewrite the pulumi login and pulumi logout help text to cover all supported state backends and document PULUMI_ACCESS_TOKEN, --default-org, and --interactive #24319