Pulumi on CuraDevOps

Pulumi SDK v3.260.0: redact URL secrets from logs

Mon, 31 Aug 2026 18:45:38 +0000

Platform/SRE — Plan: If you use Pulumi with connection-string URLs (e.g. Postgres), upgrade to sdk/v3.260.0 to prevent passwords leaking into state/log output; no hard deadline but a meaningful security hygiene improvement.
CI/CD — Skip
Leader — Skip

Mon, 10 Aug 2026 13:02:04 +0000

Platform/SRE — Learn: Adds a useful –ignore-protect flag for managing protected resources and fixes TLS verification failures against self-hosted Pulumi backends using self-signed certs; no deadline or breaking change, so worth noting for Pulumi shops at the next upgrade cycle.
CI/CD — Skip
Leader — Skip

Mon, 03 Aug 2026 14:33:55 +0000

Platform/SRE — Learn: Routine minor release of a common IaC tool; the parallel-install race condition fix and provider resolution improvements are worth noting for teams running Pulumi heavily, but no security issue or deadline makes this actionable today.
CI/CD — Skip
Leader — Skip

Mon, 27 Jul 2026 14:28:32 +0000

Platform/SRE — Learn: New pulumi stack migrate command enables moving stacks between backends with secret re-encryption, and --override-env allows one-shot environment substitution without editing stack config — useful patterns to know but no action required with no deadline or breaking change.
CI/CD — Skip
Leader — Skip

Mon, 20 Jul 2026 14:01:18 +0000

Platform/SRE — Plan: If your pipelines use pulumi/actions or pulumi/action-install-pulumi-cli, both have major version bumps (v6→v7, v1→v2) that likely include breaking changes; audit your workflow files and update action refs this quarter.
CI/CD — Plan: pulumi/actions jumped v6→v7 and pulumi/action-install-pulumi-cli jumped v1→v2 — major bumps that may break existing pipeline steps; review release notes for both actions and update workflow references before Renovate auto-merges cause unexpected failures.
Leader — Skip