# Pulumi v3.258.0

- Product: Pulumi (https://whatsnew.fyi/product/pulumi)
- Vendor: Pulumi
- Date: 2026-08-17
- Version: v3.258.0
- Original notes: https://github.com/pulumi/pulumi/releases/tag/v3.258.0
- Permalink: https://whatsnew.fyi/product/pulumi/releases/v3.258.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE
- **added** — Ask for a cloud provider and language in interactive pulumi new instead of listing every template
- **added** — Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack
- **fixed** — Generate valid Go package clauses for schema modules whose names contain hyphens
- **fixed** — Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces
- **fixed** — pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them
- **fixed** — Add missing program argument on preview_refresh and preview_destroy stack methods
- **fixed** — Fix cloning templates and repositories into paths containing symlinks with absolute targets
- **fixed** — Fix global project lookup
- **changed** — Use the resource monitor's advertised feature set consistently throughout the Python SDK

##### 3.258.0 (2026-08-17)

###### Features

- [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with `PULUMI_CREDENTIAL_STORE` [#24212](https://github.com/pulumi/pulumi/pull/24212)
- [cli/new] Ask for a cloud provider and language in interactive `pulumi new` instead of listing every template [#24226](https://github.com/pulumi/pulumi/pull/24226)
- [sdk/go] Add `policyx.NewStackValidationPolicy` and wire up the analyzer's `AnalyzeStack` RPC so Go policy packs can validate the full stack [#24232](https://github.com/pulumi/pulumi/pull/24232)

###### Bug Fixes

- [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens [#24288](https://github.com/pulumi/pulumi/pull/24288)
- [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces [#24288](https://github.com/pulumi/pulumi/pull/24288)
- [cli/import] `pulumi preview --import-file` no longer emits unknown values, and `pulumi import` rejects files that contain them [#24261](https://github.com/pulumi/pulumi/pull/24261)
- [auto/python] Add missing `program` argument on `preview_refresh` and `preview_destroy` stack methods [#24274](https://github.com/pulumi/pulumi/pull/24274)
- [cli/new] Fix cloning templates and repositories into paths containing symlinks with absolute targets [#24329](https://github.com/pulumi/pulumi/pull/24329)
- [cli/do] Fix global project lookup [#24334](https://github.com/pulumi/pulumi/pull/24334)

###### Improvements

- [sdk/python] Use the resource monitor's advertised feature set consistently throughout the Python SDK [#24308](https://github.com/pulumi/pulumi/pull/24308)

###### Miscellaneous

- [cli] Rewrite the `pulumi login` and `pulumi logout` help text to cover all supported state backends and document `PULUMI_ACCESS_TOKEN`, `--default-org`, and `--interactive` [#24319](https://github.com/pulumi/pulumi/pull/24319)