pulumi

• No significant changes.

• Print a Welcome to Pulumi message for users during interactive logins to the Pulumi CLI. #3145

• Filter the list of templates shown by default during pulumi new. #3147

• Fix a crash when using StackReference from the 1.0.0-beta.3 version of @pulumi/pulumi and 1.0.0-beta.2 or earlier of the CLI.

• Allow Un/MashalProperties to reject Asset and AssetArchive types. (partial fix for https://github.com/pulumi/pulumi-kubernetes/issues/737)

• When using StackReference to fetch output values from another stack, do not mark a value as secret if it was not secret in the stack you referenced. (fixes #2744).

• Allow resource IDs to be changed during pulumi refresh operations

• Do not crash when renaming a stack that has never been updated, when using the local backend. (fixes #2654)

• Fix intermittet "NoSuchKey" issues when using the S3 based backend. (fixes #2714).

• Support filting stacks by organization or tags when using pulumi stack ls. (fixes #2712, #2769

• Explicitly setting deleteBeforeReplace to false now overrides the provider's decision. #3118

• Fail read steps (e.g. the step generated by a call to aws.s3.Bucket.get()) if the requested resource does not exist. #3123

• Fix the package version compatibility checks in the NodeJS language host. #3083

• Do not propagate input properties to missing output properties during preview. The old behavior can cause issues that are difficult to diagnose in cases where the actual value of the output property differs from the value of the input property, and can cause applys to run at unexpected times. If this change causes issues in a Pulumi program, the original behavior can be enabled by setting the PULUMI_ENABLE_LEGACY_APPLY environment variable to true.

• Fix a bug in the GitHub Actions program preventing errors from being rendered in the Actions log on github.com. #3036

• Fix a bug in the Node.JS SDK that caused failure details for provider functions to go unreported. #3048

• Fix a bug in the Python SDK that caused crashes when using asynchronous data sources. #3056

• Fix crash when exporting secrets from a pulumi app #2962

• Fix a panic in logger when a secret contains non-printable characters #3074

• Check the uniqueness of the project name during pulumi new #3065

• Retry renaming a temporary folder during plugin installation #3008

• Add support for additional Pulumi secrets providers using AWS KMS, Azure KeyVault, Google Cloud KMS and HashiCorp Vault. These secrets providers can be configured at stack creation time using pulumi stack init b --secrets-provider="awskms://alias/LukeTesting?region=us-west-2", and ensure that all encrypted data associated with the stack is encrypted using the target cloud platform encryption keys. This augments the previous choice between using the app.pulumi.com-managed secrets encryption or a fully-client-side local passphrase encryption. #2994

• Add Output.concat to Python SDK #3006

• Add requireOutput to StackReference #3007

• Arbitrary values can now be exported from a Python app. This includes dictionaries, lists, class instances, and the like. Values are treated as "plain old python data" and generally kept as simple values (like strings, numbers, etc.) or the simple collections supported by the Pulumi data model (specifically, dictionaries and lists).

• Fix get_secret in Python SDK always returning None.

• Make pulumi.runtime.invoke synchronous in the Python SDK #3019

• Fix a bug in the Python SDK that caused input properties that are coroutines to be awaited twice. #3024

Compatibility

• Deprecated functions in @pulumi/pulumi will now issue warnings if you call them. Please migrate off of these functions as they will be removed in a future release. The deprecated functions are.
  1. function computeCodePaths(extraIncludePaths?: string[], ...). Use the computeCodePaths overload that takes a CodePathOptions instead.
  2. function serializeFunctionAsync. Please use serializeFunction instead.

• Fix an error message from the logging subsystem which was introduced in v0.17.26 #2989

• Add support for property paths in ignoreChanges, and pass ignoreChanges to providers #3005. This allows differences between the actual and desired state of the resource that are not captured by differences in the resource's inputs to be ignored (including differences that may occur due to resource provider bugs).

• Add get_object, require_object, get_secret_object and require_secret_object APIs to Python config module #2959

• Fix unexpected provider replacements when upgrading from older CLIs and older providers pulumi/pulumi-kubernetes#645

• Add Python support for renaming resources via the aliases resource option. Adding aliases allows new resources to match resources from previous deployments which used different names, maintaining the identity of the resource and avoiding replacements or re-creation of the resource. This was previously added to the JavaScript sdk in 0.17.15. #2974