pulumi

History

Will Jones 9f6213dc4e Bump `go-git` to 5.13.1 (#18247 ) `go-git` has an argument injection vulnerability via the URL field for versions lower than 5.13.0 (https://github.com/pulumi/pulumi/security/dependabot/1537). This change bumps `go-git` to 5.13.1 everywhere to mitigate this risk. Closes #18174 Closes #18175		2025-01-15 21:34:14 +00:00
..
Pulumi.yaml	Non-mutating snapshot normalization (#10128 )	2022-07-18 14:04:19 -04:00
README.md	Non-mutating snapshot normalization (#10128 )	2022-07-18 14:04:19 -04:00
bench.sh	Non-mutating snapshot normalization (#10128 )	2022-07-18 14:04:19 -04:00
go.mod	Bump `go-git` to 5.13.1 (#18247 )	2025-01-15 21:34:14 +00:00
go.sum	Bump `go-git` to 5.13.1 (#18247 )	2025-01-15 21:34:14 +00:00
main.go	ci: Simplify test listing, update go dependencies to 1.18 compat	2022-09-21 09:51:59 -07:00

README.md

Stress-testing rewriting and normalizing aliases in the engine state.

Benchmark timings (1-shot, n=100, darwin mbp 2019):

pulumi       3.36.0-alpha.1657742945+3cfba73d
destroy      0m48.543s
up           0m43.026s
empty-update 0m32.936s

pulumi       v3.35.3
destroy      0m48.645s
up           0m41.580s
empty-update 0m32.341s

Non-quadratic version (1-shot, n=100, darwin mbp 2019):

pulumi       3.36.0-alpha.1657742945+3cfba73d
up           0m36.441s
empty-update 0m19.781s

pulumi       v3.35.3
up           0m36.265s
empty-update 0m19.574s

Same with n=1000

pulumi       3.36.0-alpha.1657742945+3cfba73d
up           6m40.879s
empty-update 4m8.565s

pulumi       v3.35.3
up           6m39.083s
empty-update 4m10.661s