Pulumi - Infrastructure as Code in any programming language. Build infrastructure intuitively on any cloud using familiar languages 🚀
Go to file
bors[bot] 70207e899e
Merge #13192
13192: Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 in /tests/integration/state_rename_parent r=justinvp a=dependabot[bot]

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.1.0 to 1.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/cloudflare/circl/releases">github.com/cloudflare/circl's releases</a>.</em></p>
<blockquote>
<h2>CIRCL v1.3.3</h2>
<h2>New Features</h2>
<ul>
<li><a href="https://ascon.iaik.tugraz.at/">ASCON</a> light-weight authenticated encryption.</li>
<li>Hybrid KEM for HPKE based on Kyber and X25519.</li>
<li>CIRCL can be compiled both as static and dynamic linking modes.</li>
</ul>
<h2>Security</h2>
<ul>
<li>Fixes error-handling on rand readers.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Use untyped consts for Kyber params by <a href="https://github.com/tmthrgd"><code>`@​tmthrgd</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/398">cloudflare/circl#398</a></li>
<li>zk/dl: adds prefixed labels and updates nomenclature. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/396">cloudflare/circl#396</a></li>
<li>Bumping Go version. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/399">cloudflare/circl#399</a></li>
<li>kem: add P-256 + Kyber768Draft00 hybrid by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/402">cloudflare/circl#402</a></li>
<li>ckem: pass xof to elliptic.GenerateKey directly by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/403">cloudflare/circl#403</a></li>
<li>Adding Ascon, an AEAD lightweight cipher. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/400">cloudflare/circl#400</a></li>
<li>Add Ascon-80pq to cipher\ascon by <a href="https://github.com/dhcgn"><code>`@​dhcgn</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/404">cloudflare/circl#404</a></li>
<li>ascon: update formulas and check for API compatibility by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/406">cloudflare/circl#406</a></li>
<li>all: enables dynamic linking, removes R15 is clobbered by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/407">cloudflare/circl#407</a></li>
<li>ascon: Removes table of constants. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/408">cloudflare/circl#408</a></li>
<li>tkn20: prevent panics on key gen errors by <a href="https://github.com/tmthrgd"><code>`@​tmthrgd</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/409">cloudflare/circl#409</a></li>
<li>expander,tkn20: remove superfluous Reset calls by <a href="https://github.com/tmthrgd"><code>`@​tmthrgd</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/410">cloudflare/circl#410</a></li>
<li>Updating stdlib crypto library. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/413">cloudflare/circl#413</a></li>
<li>Reduce x/crypto and x/sys versions to match Go 1.20 by <a href="https://github.com/Lekensteyn"><code>`@​Lekensteyn</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/414">cloudflare/circl#414</a></li>
<li>Make ascon cipher go routine safe by <a href="https://github.com/enj"><code>`@​enj</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/416">cloudflare/circl#416</a></li>
<li>tkn20,kyber,x25519,x448: plug constant-time leaks by <a href="https://github.com/tmthrgd"><code>`@​tmthrgd</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/411">cloudflare/circl#411</a></li>
<li>Check for crypto/rand errors and ReadFull io.Readers by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/417">cloudflare/circl#417</a></li>
<li>Fix encapsulation seed size by <a href="https://github.com/chris-wood"><code>`@​chris-wood</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/419">cloudflare/circl#419</a></li>
<li>Add X25519Kyber768Draft00 experimental HPKE KEM by <a href="https://github.com/chris-wood"><code>`@​chris-wood</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/421">cloudflare/circl#421</a></li>
<li>hpke: Adding NonceSize function to AEAD. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/424">cloudflare/circl#424</a></li>
<li>hpke: Address always nil parameter. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/425">cloudflare/circl#425</a></li>
<li>hpke: update and move xyber768d00 test vectors by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/426">cloudflare/circl#426</a></li>
<li>hpke: fix encapsulation seed in test for xyber by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/428">cloudflare/circl#428</a></li>
<li>Remove scalar sha3 amd64 assembly by <a href="https://github.com/bwesterb"><code>`@​bwesterb</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/429">cloudflare/circl#429</a></li>
<li>Add HPKE benchmarks by <a href="https://github.com/chris-wood"><code>`@​chris-wood</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/434">cloudflare/circl#434</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/tmthrgd"><code>`@​tmthrgd</code></a>` made their first contribution in <a href="https://redirect.github.com/cloudflare/circl/pull/398">cloudflare/circl#398</a></li>
<li><a href="https://github.com/dhcgn"><code>`@​dhcgn</code></a>` made their first contribution in <a href="https://redirect.github.com/cloudflare/circl/pull/404">cloudflare/circl#404</a></li>
<li><a href="https://github.com/Lekensteyn"><code>`@​Lekensteyn</code></a>` made their first contribution in <a href="https://redirect.github.com/cloudflare/circl/pull/414">cloudflare/circl#414</a></li>
<li><a href="https://github.com/enj"><code>`@​enj</code></a>` made their first contribution in <a href="https://redirect.github.com/cloudflare/circl/pull/416">cloudflare/circl#416</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/cloudflare/circl/compare/v1.3.2...v1.3.3">https://github.com/cloudflare/circl/compare/v1.3.2...v1.3.3</a></p>
<h2>CIRCL v1.3.2</h2>
<h2>What's Changed</h2>
<ul>
<li>oprf: Updating test vectors for VOPRF rc-rfc. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/388">cloudflare/circl#388</a></li>
<li>abe: Make golden files for cpabe. by <a href="https://github.com/armfazh"><code>`@​armfazh</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/392">cloudflare/circl#392</a></li>
<li>abe: Improve test clarity by <a href="https://github.com/tanyav2"><code>`@​tanyav2</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/393">cloudflare/circl#393</a></li>
<li>tkn20: change seed size for MAC key from 128-&gt;448 bits in accordance … by <a href="https://github.com/tanyav2"><code>`@​tanyav2</code></a>` in <a href="https://redirect.github.com/cloudflare/circl/pull/394">cloudflare/circl#394</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="3bef500f2b"><code>3bef500</code></a> Releasing CIRCL v1.3.3</li>
<li><a href="4002bafceb"><code>4002baf</code></a> Add HPKE benchmarks</li>
<li><a href="795540340d"><code>7955403</code></a> Remove scalar sha3 amd64 assembly</li>
<li><a href="aef72508ab"><code>aef7250</code></a> hpke: fix encapsulation seed in test for xyber</li>
<li><a href="808526a555"><code>808526a</code></a> hpke: update and move xyber768d00 test vectors</li>
<li><a href="c7845aa103"><code>c7845aa</code></a> Address always nil parameter.</li>
<li><a href="2475a3f4a6"><code>2475a3f</code></a> Adding NonceSize function to AEAD.</li>
<li><a href="eaec71f4cc"><code>eaec71f</code></a> Add X25519Kyber768Draft00 experimental HPKE KEM</li>
<li><a href="f0db2881a9"><code>f0db288</code></a> Fix encapsulation seed size</li>
<li><a href="f4c0e87526"><code>f4c0e87</code></a> Update go-ristretto dep</li>
<li>Additional commits viewable in <a href="https://github.com/cloudflare/circl/compare/v1.1.0...v1.3.3">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl&package-manager=go_modules&previous-version=1.1.0&new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pulumi/pulumi/network/alerts).

</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-17 08:05:00 +00:00
.devcontainer Replace the use of pipenv with Python's venv (#8548) 2021-12-07 07:59:07 -08:00
.github ci(lint): make tidy > ./scripts/tidy.sh 2023-05-30 13:38:58 -07:00
.gitpod add pulumictl to gitpod (#8298) 2021-12-08 21:26:52 +02:00
.vscode Remove experimentalWorkspaceModule from vscode settings 2023-03-09 21:00:00 +00:00
build Fix makefiles 2023-05-26 11:00:45 +01:00
changelog Merge #13190 2023-06-17 05:58:29 +00:00
coverage Toward replacing MSBuild with make+bash on Windows (#8617) 2022-01-07 22:27:14 -05:00
developer-docs fix some links 2023-05-19 19:39:26 -07:00
docker Cleanup of all docker operations since moving to pulumi/pulumi-docker-containers (#8252) 2021-10-26 20:37:33 +03:00
pkg Merge #13190 2023-06-17 05:58:29 +00:00
proto Maintain alias compat for older Node.js SDKs on new CLIs 2023-06-14 08:34:32 -07:00
scripts CI: Node 14 => Node 16 2023-05-09 17:02:08 -04:00
sdk chore: post-release go.mod updates 2023-06-16 18:25:07 +00:00
tests Bump github.com/cloudflare/circl 2023-06-17 06:29:31 +00:00
.dockerignore Add a Dockerfile for the Pulumi CLI 2018-09-29 11:48:21 -07:00
.envrc.template fix: Allows for parallel pulumi programs to run in the node runtime 2022-10-13 07:15:25 -04:00
.gitignore nodejs pcl components, initial commit 2023-03-14 16:17:14 +01:00
.gitpod.yml Move `PULUMI_ROOT` to `$HOME/.pulumi-dev` (#8512) 2021-12-15 12:32:41 -08:00
.golangci.yml lint(vet): Enable more linters 2023-05-19 15:47:41 -07:00
.goreleaser.yml Plumb codegen rpc into nodejs 2023-05-25 14:56:45 +01:00
.readthedocs.yaml Bump the RTD Python version down to 3.6. 2021-08-25 15:23:46 -07:00
.version Freeze v3.72.1 2023-06-16 10:12:11 -07:00
.yarnrc Pass --network-concurrency 1 to yarn 2018-01-29 11:49:42 -08:00
CHANGELOG.md chore: changelog for v3.72.1 2023-06-16 18:23:35 +00:00
CODE-OF-CONDUCT.md Update to "learning in public" on CoC 2021-07-06 11:03:19 -05:00
CONTRIBUTING.md CONTRIBUTING: Clarify gofumpt further 2023-05-10 17:08:08 -07:00
LICENSE Remove appendix from LICENSE 2023-03-01 16:43:41 +00:00
Makefile Add pulumi-language-nodejs to LINT_GOLANG_PKGS 2023-05-26 17:49:01 +01:00
README.md remove migrating to 2 link from readme 2023-05-19 19:43:42 -07:00
bors.toml bors: Drop lint requirement 2023-02-19 00:18:56 -08:00
codecov.yml Remove dotnet 2022-12-13 16:13:53 +00:00
youtube_preview_image.png Make youtube preview smaller 2020-05-15 09:52:23 -07:00

README.md

Slack GitHub Discussions NPM version Python version NuGet version GoDoc License Gitpod ready-to-code

Pulumi's Infrastructure as Code SDK is the easiest way to build and deploy infrastructure, of any architecture and on any cloud, using programming languages that you already know and love. Code and ship infrastructure faster with your favorite languages and tools, and embed IaC anywhere with Automation API.

Simply write code in your favorite language and Pulumi automatically provisions and manages your resources on AWS, Azure, Google Cloud Platform, Kubernetes, and 120+ providers using an infrastructure-as-code approach. Skip the YAML, and use standard language features like loops, functions, classes, and package management that you already know and love.

For example, create three web servers:

let aws = require("@pulumi/aws");
let sg = new aws.ec2.SecurityGroup("web-sg", {
    ingress: [{ protocol: "tcp", fromPort: 80, toPort: 80, cidrBlocks: ["0.0.0.0/0"] }],
});
for (let i = 0; i < 3; i++) {
    new aws.ec2.Instance(`web-${i}`, {
        ami: "ami-7172b611",
        instanceType: "t2.micro",
        vpcSecurityGroupIds: [sg.id],
        userData: `#!/bin/bash
            echo "Hello, World!" > index.html
            nohup python -m SimpleHTTPServer 80 &`,
    });
}

Or a simple serverless timer that archives Hacker News every day at 8:30AM:

const aws = require("@pulumi/aws");

const snapshots = new aws.dynamodb.Table("snapshots", {
    attributes: [{ name: "id", type: "S", }],
    hashKey: "id", billingMode: "PAY_PER_REQUEST",
});

aws.cloudwatch.onSchedule("daily-yc-snapshot", "cron(30 8 * * ? *)", () => {
    require("https").get("https://news.ycombinator.com", res => {
        let content = "";
        res.setEncoding("utf8");
        res.on("data", chunk => content += chunk);
        res.on("end", () => new aws.sdk.DynamoDB.DocumentClient().put({
            TableName: snapshots.name.get(),
            Item: { date: Date.now(), content },
        }).promise());
    }).end();
});

Many examples are available spanning containers, serverless, and infrastructure in pulumi/examples.

Pulumi is open source under the Apache 2.0 license, supports many languages and clouds, and is easy to extend. This repo contains the pulumi CLI, language SDKs, and core Pulumi engine, and individual libraries are in their own repos.

Welcome

  • Get Started with Pulumi: Deploy a simple application in AWS, Azure, Google Cloud, or Kubernetes using Pulumi.

  • Learn: Follow Pulumi learning pathways to learn best practices and architectural patterns through authentic examples.

  • Examples: Browse several examples across many languages, clouds, and scenarios including containers, serverless, and infrastructure.

  • Docs: Learn about Pulumi concepts, follow user-guides, and consult the reference documentation.

  • Registry: Find the Pulumi Package with the resources you need. Install the package directly into your project, browse the API documentation, and start building.

  • Pulumi Roadmap: Review the planned work for the upcoming quarter and a selected backlog of issues that are on our mind but not yet scheduled.

  • Community Slack: Join us in Pulumi Community Slack. All conversations and questions are welcome.

  • GitHub Discussions: Ask questions or share what you're building with Pulumi.

Getting Started

Watch the video

See the Get Started guide to quickly get started with Pulumi on your platform and cloud of choice.

Otherwise, the following steps demonstrate how to deploy your first Pulumi program, using AWS Serverless Lambdas, in minutes:

  1. Install:

    To install the latest Pulumi release, run the following (see full installation instructions for additional installation options):

    $ curl -fsSL https://get.pulumi.com/ | sh
    
  2. Create a Project:

    After installing, you can get started with the pulumi new command:

    $ mkdir pulumi-demo && cd pulumi-demo
    $ pulumi new hello-aws-javascript
    

    The new command offers templates for all languages and clouds. Run it without an argument and it'll prompt you with available projects. This command created an AWS Serverless Lambda project written in JavaScript.

  3. Deploy to the Cloud:

    Run pulumi up to get your code to the cloud:

    $ pulumi up
    

    This makes all cloud resources needed to run your code. Simply make edits to your project, and subsequent pulumi ups will compute the minimal diff to deploy your changes.

  4. Use Your Program:

    Now that your code is deployed, you can interact with it. In the above example, we can curl the endpoint:

    $ curl $(pulumi stack output url)
    
  5. Access the Logs:

    If you're using containers or functions, Pulumi's unified logging command will show all of your logs:

    $ pulumi logs -f
    
  6. Destroy your Resources:

    After you're done, you can remove all resources created by your program:

    $ pulumi destroy -y
    

To learn more, head over to pulumi.com for much more information, including tutorials, examples, and details of the core Pulumi CLI and programming model concepts.

Platform

Languages

Language Status Runtime
JavaScript Stable Node.js 16+
TypeScript Stable Node.js 16+
Python Stable Python 3.7+
Go Stable Go supported versions
.NET (C#/F#/VB.NET) Stable .NET Core 3.1+
Java Public Preview JDK 11+
YAML Public Preview n/a

EOL Releases

The Pulumi CLI v1 and v2 are no longer supported. If you are not yet running v3, please consider migrating to v3 to continue getting the latest and greatest Pulumi has to offer! 💪

Clouds

Visit the Registry for the full list of supported cloud and infrastructure providers.

Contributing

Visit CONTRIBUTING.md for information on building Pulumi from source or contributing improvements.