3.217.0 (2026-01-23)

Features

• [cli] Extract organization, team, and user from OIDC JWT claims during login #21462

• [engine] Add the OnError resource hook to allow for custom retry policies #21291

• [cli/engine] Add --plan up flag #21368

• [sdk/nodejs] Add requirePulumiVersion to the Node.js SDK #21528 #21478

• [sdk/python] Add require_pulumi_version to the Python SDK #21528 #21430

• [sdk/go] Add CheckPulumiVersion to the Go SDK #21528 #21514

Bug Fixes

• [auto/python] Implement About in Python automation API server #21479

• [engine] When importing a state file that refers to the service backed secret manager, make stack import reconfigure it for the target stack if required #20966

• [protobuf] Fix alias options being passed to Construct for remote components #21050

• [sdk/nodejs] Fix issue with serialized async generators #21484