upstream-patches SKILL.md skillA

upstream-patches from pulumi/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add pulumi/agent-skills/upstream-patches@git:20260716.8880e3c

Pins git:20260716.8880e3c in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
pulumi/agent-skills
Path
package-maintenance/skills/upstream-patches/SKILL.md
Versions recorded
2
Latest version
git:20260716.8880e3c, committed Jul 16, 2026
First version recorded
Jun 2, 2026
Size
5,706 bytes
Repository stars
78
License
Apache-2.0

Create, amend, remove, and rebase patches for Terraform provider submodules using `./scripts/upstream.sh`. Use when `upgrade-provider` or manual patch work needs owning-patch lookup, patch conflict fixes, patch/hunk removal, or upstream rebase.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Upstream Patches

`upstream/` is a git submodule pointing to the upstream Terraform provider. `patches/` contains patch files applied on top of it. Use `./scripts/upstream.sh` to manage patch state.

## Default Behavior

- If fixing a regression introduced by an existing patch, amend the owning patch commit.
- Do not create a new patch unless the user explicitly asks.

## Commands Reference

| Command | Description |
|---------|-------------|
| `./scripts/upstream.sh init` | Initialize upstream and apply patches to working directory |
| `./scripts/upstream.sh init -f` | Destructively discard checkout/rebase state and re-initialize upstream |
| `./scripts/upstream.sh checkout` | Create branch with patches as commits for editing |
| `./scripts/upstream.sh rebase -i` | Interactively edit patch commits |
| `./scripts/upstream.sh rebase -o <commit>` | Rebase patches onto a new upstream commit |
| `./scripts/upstream.sh check_in` | Write commits back to patches and exit checkout mode |

## Guardrails

- Never commit directly to `upstream/` without `checkout/check_in`.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add pulumi/agent-skills/upstream-patches@sha256:56a593f44d1bcc05

The line at the top of this page pins the label git:20260716.8880e3c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_xzjrqns757iz2dph.svg)](https://markdownregistry.com/a/art_xzjrqns757iz2dph)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Jun 2, 2026 and Jul 16, 2026, about one every 44 days.

versioncommittedcommitsizeaudit
git:20260716.8880e3c latest2026-07-16 8880e3c 5,706 BA view · diff
git:20260602.8dccc432026-06-02 8dccc43 5,102 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5706 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

pulumi/agent-skills · 78 stars · license Apache-2.0 · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_xzjrqns757iz2dph
GET https://markdownregistry.com/api/v1/resolve?ref=pulumi/agent-skills/upstream-patches
GET https://markdownregistry.com/api/v1/blob/56a593f44d1bcc05413354204da3c73488d8cb9239f043fea4cc103fad7054b1

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from pulumi/agent-skills

AGENTS.md AGENTS.md file
pulumi/agent-skills · AGENTS.md
git:20261008.99abfda · audit A · 78 stars
CLAUDE.md CLAUDE.md file
pulumi/agent-skills · CLAUDE.md
git:20260127.62f2745 · audit B · 78 stars
pulumi-neo-handoff SKILL.md skill
pulumi/agent-skills · delegation/skills/pulumi-neo-handoff/SKILL.md · Hand off the current thread to a new Pulumi Neo task as a one-way transfer. Use when the user explicitly asks to hand…
git:20260513.f810e50 · audit A · 78 stars
cloudformation-to-pulumi SKILL.md skill
pulumi/agent-skills · migration/skills/cloudformation-to-pulumi/SKILL.md · Convert, migrate, or import AWS CloudFormation stacks or templates into Pulumi programs. Load this skill whenever a…
git:20260330.2f41625 · audit A · 78 stars
pulumi-arm-to-pulumi SKILL.md skill
pulumi/agent-skills · migration/skills/pulumi-arm-to-pulumi/SKILL.md · Convert or migrate Azure ARM (Azure Resource Manager) templates, Bicep templates, or code to Pulumi, including…
git:20260330.2f41625 · audit A · 78 stars
pulumi-cdk-to-pulumi SKILL.md skill
pulumi/agent-skills · migration/skills/pulumi-cdk-to-pulumi/SKILL.md · Load this skill when a user wants to migrate, convert, port, translate, or move an AWS CDK application (including CDK…
git:20260330.2f41625 · audit A · 78 stars
pulumi-migrate-from-discovered-stack SKILL.md skill
pulumi/agent-skills · migration/skills/pulumi-migrate-from-discovered-stack/SKILL.md · Migrate a CloudFormation or ARM stack into a Pulumi stack, sourced from a stack that Pulumi Cloud's Discovery feature…
git:20260803.4be16bf · audit A · 78 stars
pulumi-terraform-to-pulumi SKILL.md skill
pulumi/agent-skills · migration/skills/pulumi-terraform-to-pulumi/SKILL.md · Migrate Terraform/OpenTofu projects to Pulumi, including translating HCL source code and/or importing Terraform state…
git:20260330.2f41625 · audit A · 78 stars
pulumi-upgrade-provider SKILL.md skill
pulumi/agent-skills · package-maintenance/skills/pulumi-upgrade-provider/SKILL.md · Automate Pulumi provider repo upgrades with the `upgrade-provider` tool. Use when upgrading a pulumi provider…
git:20260716.8880e3c · audit A · 78 stars
package-usage SKILL.md skill
pulumi/agent-skills · pulumi/skills/package-usage/SKILL.md · Track which stacks across a Pulumi organization use a specific package and at what versions. Use for cross-stack…
git:20260722.49e2562 · audit A · 78 stars
provider-upgrade SKILL.md skill
pulumi/agent-skills · pulumi/skills/provider-upgrade/SKILL.md · Upgrade any Pulumi provider to a newer version and reconcile the resulting diff. Use when users want to upgrade or…
git:20261005.e2aa9b8 · audit A · 78 stars
pulumi-automation-api SKILL.md skill
pulumi/agent-skills · pulumi/skills/pulumi-automation-api/SKILL.md · Load this skill when a user asks how to run Pulumi programmatically, embed Pulumi in an application, orchestrate…
v1.0.0 · audit A · 78 stars

Every file in pulumi/agent-skills

Browse by kind, by grade A, or by owner.