railway config apply safety and config pull imports

Introduced 2026-06-11 · score 0.91

HOW TO USE IT

When reviewing or importing Railway infrastructure configuration, run `railway config plan` to preview changes and pull with `--omit-preserved-variables` for a smaller import; unknown imported secrets otherwise render as `preserve()`. For destructive changes in a non-interactive or agent session, review the plan and use `railway config apply --confirm-destructive` only with explicit approval for that exact plan.

WHY THIS HELPS

When reviewing or importing this repository’s Railway infrastructure configuration, preview the plan, preserve imported secrets, and apply destructive changes only after reviewing the plan and obtaining approval.

REQUIREMENTS AND LIMITATIONS

• Version: v5.9.1
• --omit-preserved-variables: For `railway config pull`, omit imported preserved variable entries for a smaller import.
• --confirm-destructive: For `railway config apply`, required for destructive changes in non-interactive or agent sessions after reviewing the plan.
• --yes: For `railway config apply`, skip the confirmation prompt. The v5.9.1 README does not document its rejection by `railway config plan`.
• Destructive changes in non-interactive or agent sessions require `--confirm-destructive` after reviewing the plan.
• Never use `railway config apply --yes` or `railway config apply --confirm-destructive` from an agent session without explicit user approval for the exact plan.
• `railway config plan --yes` is rejected.
• Unknown imported variable values are rendered as `preserve()` by default.

FIRST-PARTY EVIDENCE

• https://github.com/railwayapp/cli/releases/tag/v5.9.1
• https://github.com/railwayapp/cli/pull/962
• https://github.com/railwayapp/cli/blob/v5.9.1/assets/railway-config/README.md

Check the installed version and the source before using it. Entry JSON

Report a problem with this card