Releasesby GlyphNeo code reviews: AI code review for infrastructure
As of today, Pulumi Neo code reviews are available in public preview. Building on the Pulumi GitHub app , which already posts rich diffs as PR comments on pull requests, Neo code reviews help you understand not just what’s changing, but also how those changes relate to, and potentially impact, the rest of your running infrastructure.
Also shipped Jun 22, 2026Pulumi in June 2026 →
Customer-managed encryption key (CMEK) support for Cloud SQL enhanced backups is generally available
Customer-managed encryption key (CMEK) support for Cloud SQL enhanced backups is generally available. You can protect your CMEK-enabled Cloud SQL instances using Google Cloud Backup and DR Service. For more information, see Choose your backup option . Cloud SQL for SQL Server
SDK Releases: MCP Server
- v0.10.0 - Added Music v2 model and endpoints, MCP tool annotations for all 24 tools, Python 3.14 support, Singapore data residency, EU/IN residency shorthand aliases, graceful shutdown handling for client disconnections, and fixes for voice preview creation and output directory path resolution.
What if your product built itself?
PostHog has released a pipeline that ingests product signals, uses research agents to identify actionable problems, and automatically opens GitHub pull requests.
Preview data changes in Netlify Database
You can now preview proposed data changes for your Netlify database with a Git-style diff view, then apply part or all of those changes to a production version of your database.
Refresh Token metadata is now Generally Available
We're excited to announce that **Refresh Token Metadata** is now **Generally Available** for Enterprise customers. Refresh Token Metadata allows you to attach custom key-value pairs to refresh tokens, enabling richer context storage and more personalized authentication experiences.
More from PulumiEvery Pulumi release →
CLI and SDK rollup: New commands, richer output, and more
We shipped many new features and fixes in the Pulumi CLI and SDK this month. A few highlights: New subcommands for pulumi logs , including list and remove ( v3.246 ) More output formats (e.g., JSON) for pulumi about and pulumi whoami ( v3.248 ) Additional resource details (URN, name, type, parent) in the JSON-formatted output of Pulumi operations ( v3.246 )...
ESC webhooks for secret rotations
ESC secret-rotation webhooks enable you to be notified whenever an ESC secret rotation happens, so your dependent services can take action accordingly. Like all Pulumi webhooks, ESC webhooks are configurable in the Pulumi Cloud console, with the Pulumi Service Provider , or with the Pulumi CLI .
Dark mode for the docs
We’re excited to share that the Pulumi docs now support dark mode. 😎 If you’re a dark-mode person, you can turn off the lights by toggling the switcher at the bottom of the docs sidebar: The switcher respects your system settings as well. Visit the docs to give it a try!
Retiring the standalone ESC CLI
When we introduced Pulumi ESC, we shipped it as both a standalone CLI tool ( esc ) as well as a subcommand of the Pulumi CLI ( pulumi env ). Both offered the same functionality, but since the majority of ESC users also use Pulumi IaC, we’ve chosen to retire the standalone CLI in favor of a unified pulumi env .
Individual user authentication for GitHub Enterprise Server
Self-hosted GitHub Enterprise operations may now be run as the individual user who triggered them, so pull requests, commits, and comments are attributed to that person and respect their permissions. To learn more about this feature and how to configure it with your Pulumi organization, see GitHub Enterprise Server support in the docs.
Universal search: A command palette for Pulumi Cloud
We’ve added a new, keyboard-friendly command palette that lets you jump to any stack, environment, resource, or view from anywhere in the Pulumi Cloud console. Hit Command/Control+K to bring it up and start typing: Visit Pulumi Cloud to give it a try!
Versioned CLI and SDK docs
Pinned to an older Pulumi CLI or SDK version and finding that the docs describe a newer release? The CLI command reference and the SDK API docs now include a version selector, so the documentation you’re reading matches the version you’re actually running.
Trigger Pulumi deployments from Git tags
You can now push a Git tag to your Pulumi Cloud-connected version control system to trigger a Pulumi deployment. Available to all Pulumi Cloud organizations, this new feature also supports optional glob filters and works across any supported VCS, including GitHub, GitLab, Bitbucket, Azure DevOps, and custom integrations.