Pulumi 3.260.0

Last reviewed Sep 19, 2026

Export as PDF

Prompt Details

Prompt Composition

1prompt
  1. Pulumi 3.260.0118 lines · 4.6K tokens

CWE Coverage

  • 15
  • 20
  • 73
  • 200
  • 209
  • 250
  • 295
  • 312
  • 319
  • 362
  • 367
  • 400
  • 426
  • 494
  • 522
  • 532
  • 552
  • 636
  • 653
  • 732
  • 772
  • 778
  • 807
  • 829
  • 862
  • 863
  • 918
  • 1395

Prompt Preview

Apply these rules to Pulumi CLI 3.260.0, its matching Node.js, Python, and Go SDKs, and the stacks, providers, components, policies, and automation they execute. Use the chosen language's and cloud provider's security guidance alongside this standalone pack; other Pulumi SDKs and provider packages have independent versions.

Version and execution scope

  • Constrain the CLI with a requiredPulumiVersion range in Pulumi.yaml, and the language SDK, provider packages, and policy dependencies with ranges in the language's manifest and a committed lock file that Dependabot or Renovate keeps current. Reference the worker image by a digest the bot maintains, take any exact CLI or plugin version from the Pulumi releases page or the package registry, leaving a placeholder that fails the job rather than a version you remember, and verify the combination's compatibility before promoting a deployment toolchain. The 3.260.0 in this prompt's title names the release these rules were checked against, not a version to install.
  • Use an upstream-supported Node.js release satisfying the Node SDK's >=22 requirement, or an upstream-supported Python release satisfying the Python SDK's >=3.10 requirement; lock the actual interpreter used by the language host.
  • The 3.260.0 Go SDK's go.mod declares go 1.26.6; build Go programs with the newest patch of a Go release that still receives security fixes, and account for the Go 1.27 support added in 3.260.0.
  • Use supported .NET releases and Java 11 or later with their separately versioned Pulumi SDKs; verify feature availability in that