pulumi-community #general

Channels

general

broad-dog-22463

04/19/2021, 2:02 PM

Also, just 1 more point, the action doesn't require/depend on the alpha, it's using a semver range to make the 2.25.0-alpha to be the minimun expected here

worried-knife-31967

04/19/2021, 2:03 PM

that's what we had, it failed at pulumi up as part of

pulumi/actions@v2

broad-dog-22463

04/19/2021, 2:04 PM

we will make sure and let any version changes be well communicated inadvance going forward here as it's definitely a pain 😕

worried-knife-31967

04/19/2021, 2:04 PM

i.e. we install

2.22.0

but then could run the actual up command as the installed version didn't meet the spec.

broad-dog-22463

04/19/2021, 2:05 PM

you can pin to a specific pulumi/action in the same way 🙂 We should also make that more visible for our users

worried-knife-31967

04/19/2021, 2:05 PM

if there is a commitment going forward that

pulumi/actions@v2

won't require a cli upgrade, then we're good.

broad-dog-22463

04/19/2021, 2:05 PM

there's no commitment on that while Automation API is in Preview

broad-dog-22463

04/19/2021, 2:05 PM

when it gets out of preview there will be

worried-knife-31967

04/19/2021, 2:05 PM

we don't want to pin an old version of the action, as we'll be opting out of critical updates right?

worried-knife-31967

04/19/2021, 2:06 PM

there's a balance that I get, but we realistically need a channel that is "stable with security and other critical updates" that doesn't require those kind of upgrades.

broad-dog-22463

04/19/2021, 2:07 PM

I'd suggest pinning then

worried-knife-31967

04/19/2021, 2:07 PM

i.e. forcing a minor cli version upgrade. Happy to cope right now, it's more about when this flux is over.

broad-dog-22463

04/19/2021, 2:07 PM

there's no way to do both

worried-knife-31967

04/19/2021, 2:07 PM

so we can't pin a minor version? we have to pin all the way to hotfix version?

broad-dog-22463

04/19/2021, 2:08 PM

you can pin a minor perfectly

worried-knife-31967

04/19/2021, 2:08 PM

what's the syntax for that?

2.25

throws an error on install.

broad-dog-22463

04/19/2021, 2:08 PM

2.25.0

broad-dog-22463

04/19/2021, 2:08 PM

there's no tags for minors only

worried-knife-31967

04/19/2021, 2:09 PM

won't that pin to

2.25.0

, as in it won't take

2.25.1

automatically?

broad-dog-22463

04/19/2021, 2:09 PM

correct

broad-dog-22463

04/19/2021, 2:09 PM

and.25 is the minor version

broad-dog-22463

04/19/2021, 2:10 PM

we dont publish tags for patches unless we require them

broad-dog-22463

04/19/2021, 2:10 PM

so a security security fix of 2.25 would be 2.25.1

broad-dog-22463

04/19/2021, 2:10 PM

we tend to not have x.x.1

broad-dog-22463

04/19/2021, 2:10 PM

unless there is a security issue

broad-dog-22463

04/19/2021, 2:10 PM

which doesn't happen often

worried-knife-31967

04/19/2021, 2:13 PM

I'm looking through https://www.pulumi.com/docs/get-started/install/versions/ and it seems pretty regular that there's hotfix/security versions being release. You said that you CAN pin to minor versions, that would imply (to me) that it's the "Latest hotfix version for that minor version" that it will pull in. however, it seems that I have to supply the hotfix version to install, which would mean that I'm pinning to the hotfix version, not the minor version. Maybe I'm misunderstanding something?

broad-dog-22463

04/19/2021, 2:14 PM

that's the CLI

broad-dog-22463

04/19/2021, 2:14 PM

that's completely separate to our GitHub Actions

broad-dog-22463

04/19/2021, 2:14 PM

they don't track each other 1-2-1