pulumi-upgrade-provider SKILL.md skillA
pulumi-upgrade-provider from pulumi/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pulumi/agent-skills/pulumi-upgrade-provider@git:20260716.8880e3cPins git:20260716.8880e3c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pulumi/agent-skills
- Path
package-maintenance/skills/pulumi-upgrade-provider/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260716.8880e3c, committed Jul 16, 2026
- First version recorded
- Jun 2, 2026
- Size
- 11,154 bytes
- Repository stars
- 78
- License
- Apache-2.0
Automate Pulumi provider repo upgrades with the `upgrade-provider` tool. Use when upgrading a pulumi provider repository to a new upstream version, running `upgrade-provider`, and addressing its common failure modes like patch conflicts or missing module mappings.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Pulumi Upgrade Provider
## Overview
Run `upgrade-provider --no-submit`, fix known failures, and rerun until success. During the run loop, the tool owns branch and generated-commit state but does not push or mutate GitHub. After success, review and correct the local result before submitting it using the plan printed by the tool.
## Preflight
1. Record existing changes as the pre-upgrade baseline:
```bash
baseline_file="${TMPDIR:-/tmp}/upgrade-provider-$(basename "$PWD")-baseline.txt"
git status --short --untracked-files=all | tee "$baseline_file"
```
Existing changes do not block the upgrade, but the tool stages broadly and may include them in generated commits. If practical, isolate clearly unrelated work in another branch or worktree, move local-only files, or add untracked local artifacts to `.git/info/exclude`. Otherwise proceed and carry this baseline into the final review. Do not add a repository `.gitignore` rule unless the path should be ignored for all contributors.
2. Keep the run log outside the repository so the tool cannot stage it.
## Run Loop
1. Run from repo root:
```bash
log_file="${TMPDIR:-/tmp}/upgrade-provider-$(basename "$PWD").log"
…Read the whole file at its exact version.
How to install
mdr add pulumi/agent-skills/pulumi-upgrade-provider@sha256:7dfc873f30ff4d4fThe line at the top of this page pins the label git:20260716.8880e3c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rytxn6oahgfoo5b4)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jun 2, 2026 and Jul 16, 2026, about one every 22 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260716.8880e3c latest | 2026-07-16 | 8880e3c | 11,154 B | A | view · diff |
| git:20260615.478096e | 2026-06-15 | 478096e | 5,195 B | A | view · diff |
| git:20260602.8dccc43 | 2026-06-02 | 8dccc43 | 4,358 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11154 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pulumi/agent-skills · 78 stars · license Apache-2.0 · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rytxn6oahgfoo5b4 GET https://markdownregistry.com/api/v1/resolve?ref=pulumi/agent-skills/pulumi-upgrade-provider GET https://markdownregistry.com/api/v1/blob/7dfc873f30ff4d4f7bb6f537e9b59e0b47403392e5567e6912fa536cdc34f4a3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.