Update Bicep modules to use latest API versions

- Updated cognitive services account API version from 2025-04-01-preview to 2024-04-01-preview.
- Updated telemetry resource API version from 2024-03-01 to 2025-04-01 in cognitive services and compute modules.
- Updated Key Vault API versions from 2024-11-01 to 2026-02-01 across multiple modules.
- Updated virtual machine extension API version from 2022-11-01 to 2025-11-01.
- Updated document DB database account API version from 2024-11-15 to 2025-10-15.
- Updated machine learning services workspace API version from 2022-10-01 to 2025-12-01.
- Updated private DNS zone API version from 2020-06-01 to 2024-06-01.
- Updated storage account blob service container API version from 2024-03-01 to 2025-04-01.

Author: Akhileswara-Microsoft

extensions/teams/infra/azure.bicep

@@ -30,7 +30,7 @@ param webAppName string = resourceBaseName
 param location string = resourceGroup().location
 
 // Compute resources for your Web App
-resource serverfarm 'Microsoft.Web/serverfarms@2021-02-01' = {
+resource serverfarm 'Microsoft.Web/serverfarms@2024-04-01' = {
   kind: 'app'
   location: location
   name: serverfarmsName
@@ -40,7 +40,7 @@ resource serverfarm 'Microsoft.Web/serverfarms@2021-02-01' = {
 }
 
 // Web App that hosts your bot
-resource webApp 'Microsoft.Web/sites@2021-02-01' = {
+resource webApp 'Microsoft.Web/sites@2024-04-01' = {
   kind: 'app'
   location: location
   name: webAppName

infra/main.bicep

@@ -424,7 +424,7 @@ var replicaLocation = replicaRegionPairs[location]
 // ============== //
 
 #disable-next-line no-deployments-resources
-resource avmTelemetry 'Microsoft.Resources/deployments@2024-03-01' = if (enableTelemetry) {
+resource avmTelemetry 'Microsoft.Resources/deployments@2025-04-01' = if (enableTelemetry) {
   name: '46d3xbcp.ptn.sa-chatwithyourdata.${replace('-..--..-', '.', '-')}.${substring(uniqueString(deployment().name, location), 0, 4)}'
   properties: {
     mode: 'Incremental'
@@ -1078,7 +1078,7 @@ module speechService 'modules/core/ai/cognitiveservices.bicep' = {
   dependsOn: enablePrivateNetworking ? avmPrivateDnsZones : []
 }
 
-resource search 'Microsoft.Search/searchServices@2024-06-01-preview' = if (databaseType == 'CosmosDB') {
+resource search 'Microsoft.Search/searchServices@2025-05-01' = if (databaseType == 'CosmosDB') {
   name: azureAISearchName
   location: location
   sku: {

infra/main.json

@@ -121,7 +121,7 @@ param restore bool = false
 param restrictOutboundNetworkAccess bool = true
 
 @description('Optional. The storage accounts for this resource.')
-param userOwnedStorage resourceInput<'Microsoft.CognitiveServices/accounts@2025-04-01-preview'>.properties.userOwnedStorage?
+param userOwnedStorage resourceInput<'Microsoft.CognitiveServices/accounts@2024-04-01-preview'>.properties.userOwnedStorage?
 
 import { managedIdentityAllType } from 'br/public:avm/utl/types/avm-common-types:0.7.0'
 @description('Optional. The managed identity definition for this resource.')
@@ -281,7 +281,7 @@ var formattedRoleAssignments = [
 ]
 
 #disable-next-line no-deployments-resources
-resource avmTelemetry 'Microsoft.Resources/deployments@2024-03-01' = if (enableTelemetry) {
+resource avmTelemetry 'Microsoft.Resources/deployments@2025-04-01' = if (enableTelemetry) {
   name: '46d3xbcp.res.cognitiveservices-account.${replace('-..--..-', '.', '-')}.${substring(uniqueString(deployment().name, location), 0, 4)}'
   properties: {
     mode: 'Incremental'
@@ -299,7 +299,7 @@ resource avmTelemetry 'Microsoft.Resources/deployments@2024-03-01' = if (enableT
   }
 }
 
-resource cMKKeyVault 'Microsoft.KeyVault/vaults@2024-11-01' existing = if (!empty(customerManagedKey.?keyVaultResourceId)) {
+resource cMKKeyVault 'Microsoft.KeyVault/vaults@2026-02-01' existing = if (!empty(customerManagedKey.?keyVaultResourceId)) {
   name: last(split(customerManagedKey.?keyVaultResourceId!, '/'))
   scope: resourceGroup(
     split(customerManagedKey.?keyVaultResourceId!, '/')[2],
@@ -319,7 +319,7 @@ resource cMKUserAssignedIdentity 'Microsoft.ManagedIdentity/userAssignedIdentiti
   )
 }
 
-resource cognitiveService 'Microsoft.CognitiveServices/accounts@2025-06-01' = {
+resource cognitiveService 'Microsoft.CognitiveServices/accounts@2024-04-01-preview' = {
   name: name
   kind: kind
   identity: identity
@@ -379,7 +379,7 @@ resource cognitiveService 'Microsoft.CognitiveServices/accounts@2025-06-01' = {
 }
 
 @batchSize(1)
-resource cognitiveService_deployments 'Microsoft.CognitiveServices/accounts/deployments@2025-06-01' = [
+resource cognitiveService_deployments 'Microsoft.CognitiveServices/accounts/deployments@2024-04-01-preview' = [
   for (deployment, index) in (deployments ?? []): {
     parent: cognitiveService
     name: deployment.?name ?? '${name}-deployments'
@@ -409,7 +409,7 @@ resource cognitiveService_lock 'Microsoft.Authorization/locks@2020-05-01' = if (
   scope: cognitiveService
 }
 
-resource cognitiveService_commitmentPlans 'Microsoft.CognitiveServices/accounts/commitmentPlans@2025-06-01' = [
+resource cognitiveService_commitmentPlans 'Microsoft.CognitiveServices/accounts/commitmentPlans@2024-04-01-preview' = [
   for plan in (commitmentPlans ?? []): {
     parent: cognitiveService
     name: '${plan.hostingModel}-${plan.planType}'

infra/modules/cognitive-services/account/cognitive-services.bicep

@@ -41,11 +41,11 @@ param enableAutomaticUpgrade bool
 @description('Optional. Tags of the resource.')
 param tags object?
 
-resource virtualMachine 'Microsoft.Compute/virtualMachines@2022-11-01' existing = {
+resource virtualMachine 'Microsoft.Compute/virtualMachines@2025-11-01' existing = {
   name: virtualMachineName
 }
 
-resource extension 'Microsoft.Compute/virtualMachines/extensions@2022-11-01' = {
+resource extension 'Microsoft.Compute/virtualMachines/extensions@2025-11-01' = {
   name: name
   parent: virtualMachine
   location: location

infra/modules/compute/virtual-machine/extension/extension.bicep

@@ -398,7 +398,7 @@ var formattedRoleAssignments = [
 ]
 
 #disable-next-line no-deployments-resources
-resource avmTelemetry 'Microsoft.Resources/deployments@2024-03-01' = if (enableTelemetry) {
+resource avmTelemetry 'Microsoft.Resources/deployments@2025-04-01' = if (enableTelemetry) {
   name: '46d3xbcp.res.compute-virtualmachine.${replace('0.15.0', '.', '-')}.${substring(uniqueString(deployment().name, location), 0, 4)}'
   properties: {
     mode: 'Incremental'
@@ -439,7 +439,7 @@ module vm_nic 'nic-configuration/nic-configuration.bicep' = [
   }
 ]
 
-resource managedDataDisks 'Microsoft.Compute/disks@2024-03-02' = [
+resource managedDataDisks 'Microsoft.Compute/disks@2025-01-02' = [
   for (dataDisk, index) in dataDisks ?? []: if (empty(dataDisk.managedDisk.?id)) {
     location: location
     name: dataDisk.?name ?? '${name}-disk-data-${padLeft((index + 1), 2, '0')}'
@@ -459,7 +459,7 @@ resource managedDataDisks 'Microsoft.Compute/disks@2024-03-02' = [
   }
 ]
 
-resource vm 'Microsoft.Compute/virtualMachines@2024-07-01' = {
+resource vm 'Microsoft.Compute/virtualMachines@2025-11-01' = {
   name: name
   location: location
   identity: identity
@@ -601,7 +601,7 @@ resource vm 'Microsoft.Compute/virtualMachines@2024-07-01' = {
   ]
 }
 
-resource vm_configurationAssignment 'Microsoft.Maintenance/configurationAssignments@2023-04-01' = if (!empty(maintenanceConfigurationResourceId)) {
+resource vm_configurationAssignment 'Microsoft.Maintenance/configurationAssignments@2024-02-01-preview' = if (!empty(maintenanceConfigurationResourceId)) {
   name: '${vm.name}assignment'
   location: location
   properties: {
@@ -659,7 +659,7 @@ module vm_azureGuestConfigurationExtension 'extension/extension.bicep' = if (ext
   }
 }
 
-resource AzureWindowsBaseline 'Microsoft.GuestConfiguration/guestConfigurationAssignments@2020-06-25' = if (!empty(guestConfiguration)) {
+resource AzureWindowsBaseline 'Microsoft.GuestConfiguration/guestConfigurationAssignments@2024-04-05' = if (!empty(guestConfiguration)) {
   name: guestConfiguration.?name ?? 'AzureWindowsBaseline'
   scope: vm
   dependsOn: [

infra/modules/compute/virtual-machine/virtual-machine.bicep

@@ -62,7 +62,7 @@ param vnetRouteAllEnabled bool = false
 param scmSiteAlsoStopped bool = false
 
 @description('Optional. The site config object. The defaults are set to the following values: alwaysOn: true, minTlsVersion: \'1.2\', ftpsState: \'FtpsOnly\'.')
-param siteConfig resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.siteConfig = {
+param siteConfig object = {
   alwaysOn: true
   minTlsVersion: '1.2'
   ftpsState: 'FtpsOnly'
@@ -72,7 +72,7 @@ param siteConfig resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.site
 param configs appSettingsConfigType[]?
 
 @description('Optional. The Function App configuration object.')
-param functionAppConfig resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.functionAppConfig?
+param functionAppConfig object?
 
 import { privateEndpointSingleServiceType } from 'br/public:avm/utl/types/avm-common-types:0.7.0'
 @description('Optional. Configuration details for private endpoints. For security reasons, it is recommended to use private endpoints whenever possible.')
@@ -105,7 +105,7 @@ Optional. This composes with ClientCertEnabled setting.
 param clientCertMode string = 'Optional'
 
 @description('Optional. If specified during app creation, the app is cloned from a source app.')
-param cloningInfo resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.cloningInfo?
+param cloningInfo object?
 
 @description('Optional. Size of the function container.')
 param containerSize int?
@@ -117,7 +117,7 @@ param dailyMemoryTimeQuota int?
 param enabled bool = true
 
 @description('Optional. Hostname SSL states are used to manage the SSL bindings for app\'s hostnames.')
-param hostNameSslStates resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.hostNameSslStates?
+param hostNameSslStates array?
 
 @description('Optional. Hyper-V sandbox.')
 param hyperV bool = false
@@ -143,7 +143,7 @@ param publicNetworkAccess string?
 param e2eEncryptionEnabled bool?
 
 @description('Optional. Property to configure various DNS related settings for a site.')
-param dnsConfiguration resourceInput<'Microsoft.Web/sites@2024-04-01'>.properties.dnsConfiguration?
+param dnsConfiguration object?
 
 @description('Optional. Specifies the scope of uniqueness for the default hostname during resource creation.')
 @allowed([

infra/modules/core/host/appservice.bicep

@@ -70,7 +70,7 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2024-01-01' existing
   scope: resourceGroup(split(storageAccountResourceId!, '/')[2], split(storageAccountResourceId!, '/')[4])
 }
 
-resource app 'Microsoft.Web/sites@2023-12-01' existing = {
+resource app 'Microsoft.Web/sites@2024-04-01' existing = {
   name: appName
 }
 

infra/modules/core/host/web-sites.config.bicep

@@ -8,7 +8,7 @@ param name string
 param location string = resourceGroup().location
 
 @description('Optional. Tags for the resource.')
-param tags resourceInput<'Microsoft.DocumentDB/databaseAccounts@2024-11-15'>.tags?
+param tags resourceInput<'Microsoft.DocumentDB/databaseAccounts@2025-10-15'>.tags?
 
 import { managedIdentityAllType } from 'br/public:avm/utl/types/avm-common-types:0.7.0'
 @description('Optional. The managed identity definition for this resource.')
@@ -166,7 +166,7 @@ var identity = !empty(managedIdentities)
   : null
 
 #disable-next-line no-deployments-resources
-resource avmTelemetry 'Microsoft.Resources/deployments@2024-07-01' = if (enableTelemetry) {
+resource avmTelemetry 'Microsoft.Resources/deployments@2025-04-01' = if (enableTelemetry) {
   name: '46d3xbcp.res.documentdb-databaseaccount.${replace('-..--..-', '.', '-')}.${substring(uniqueString(deployment().name, location), 0, 4)}'
   properties: {
     mode: 'Incremental'
@@ -184,7 +184,7 @@ resource avmTelemetry 'Microsoft.Resources/deployments@2024-07-01' = if (enableT
   }
 }
 
-resource databaseAccount 'Microsoft.DocumentDB/databaseAccounts@2024-11-15' = {
+resource databaseAccount 'Microsoft.DocumentDB/databaseAccounts@2025-10-15' = {
   name: name
   location: location
   tags: tags

infra/modules/document-db/database-account/database-account.bicep

@@ -78,15 +78,15 @@ var containerResourceParams = union(
     : {}
 )
 
-resource databaseAccount 'Microsoft.DocumentDB/databaseAccounts@2024-11-15' existing = {
+resource databaseAccount 'Microsoft.DocumentDB/databaseAccounts@2025-10-15' existing = {
   name: databaseAccountName
 
   resource sqlDatabase 'sqlDatabases@2024-11-15' existing = {
     name: sqlDatabaseName
   }
 }
 
-resource container 'Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers@2024-11-15' = {
+resource container 'Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers@2025-10-15' = {
   name: name
   parent: databaseAccount::sqlDatabase
   tags: tags