Folks we had to undo the tls release one more time. The issue is https://github.com/pulumi/pulumi-tls/issues/173 - it looks like it should have been a major version bump since upstream doesn't provide a safe upgrade path. Moreover, the workarounds from upstream didn't work at all for making the upgrades safe to Pulumi without ignoreChanges (coming soon) support.