Jan. releases: Pulumi Packages support for plugins hosted anywhere and Pulumi Service 3rd party audit for secrets decryption

Pulumi has introduced a range of new features and improvements in its latest release, enhancing various aspects of its cloud infrastructure management capabilities. The update includes a new Pulumi Command package that facilitates running scripts locally or remotely as part of the resource lifecycle, now available in all Pulumi languages. Enhanced support for Kubernetes CustomResourceDefinitions (CRDs) and significant improvements to Helm Release, including importing existing Helm releases and using YAML files for Helm values, have also been added. Additionally, the Pulumi CLI now supports native ECMAScript modules (ESM) for Node.js SDK, allowing top-level await in Pulumi programs. Pulumi packages can now host plugins in third-party locations, and state locking is enabled by default for self-managed backends. Audit logging has been expanded to include third-party secrets managers, ensuring comprehensive event logging for users not using Pulumi's secrets provider.