Merge branch 'Azure:dev' into acr_podman

Author: cpressland

.github/policies/resourceManagement.yml

@@ -593,13 +593,11 @@ configuration:
         then:
         - mentionUsers:
             mentionees:
-            - mksuni
-            - bgklein
-            - mscurrell
             - dpwatrous
-            - gingi
-            - paterasMSFT
+            - wiboris
             - cRui861
+            - skapur12
+            - wanghoppe
             replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.
             assignMentionees: False
       - if:
@@ -1555,7 +1553,6 @@ configuration:
         - mentionUsers:
             mentionees:
             - sourabhguha
-            - inesk-vt
             replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.
             assignMentionees: False
       - if:
@@ -2990,6 +2987,20 @@ configuration:
             - xgithubtriage
             replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.
             assignMentionees: False
+      - if:
+        - hasLabel:
+            label: Service Attention
+        - hasLabel:
+            label: Storage Action
+        then:
+        - mentionUsers:
+            mentionees:
+            - blueww
+            - sshankMSFT
+            - golddove
+            - S-J-M
+            replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.
+            assignMentionees: False
       - if:
         - hasLabel:
             label: Service Attention

linter_exclusions.yml

@@ -285,9 +285,15 @@ aks create:
     azure_keyvault_kms_key_vault_network_access:
       rule_exclusions:
         - option_length_too_long
+    enable_ai_toolchain_operator:
+      rule_exclusions:
+      - option_length_too_long
     azure_keyvault_kms_key_vault_resource_id:
       rule_exclusions:
         - option_length_too_long
+    node_provisioning_default_pools:
+      rule_exclusions:
+        - option_length_too_long
 aks enable-addons:
   parameters:
     workspace_resource_id:
@@ -362,9 +368,18 @@ aks update:
     azure_keyvault_kms_key_vault_network_access:
       rule_exclusions:
         - option_length_too_long
+    enable_ai_toolchain_operator:
+      rule_exclusions:
+        - option_length_too_long
+    disable_ai_toolchain_operator:
+      rule_exclusions:
+        - option_length_too_long
     azure_keyvault_kms_key_vault_resource_id:
       rule_exclusions:
         - option_length_too_long
+    node_provisioning_default_pools:
+      rule_exclusions:
+        - option_length_too_long
 aks update-credentials:
   parameters:
     aad_server_app_secret:

scripts/ci/test_extensions.sh

@@ -32,8 +32,16 @@ set +e
 
 for ext in $output; do
     echo
-    # Use regex to detect if $ext is in $ignore_list
-    if [[ $ignore_list =~ $ext ]]; then
+    # Exact string matching against each item in the ignore list
+    ignore_match=0
+    for item in $ignore_list; do
+        if [ "$ext" = "$item" ]; then
+            ignore_match=1
+            break
+        fi
+    done
+    
+    if [ $ignore_match -eq 1 ]; then
         echo "Ignore extension: $ext"
         continue
     fi

src/azure-cli-core/HISTORY.rst

@@ -3,6 +3,10 @@
 Release History
 ===============
 
+2.76.0
+++++++
+* Resolve CVE-2024-47081 (#31708)
+
 2.75.0
 ++++++
 * Resolve CVE-2025-50181 (#31669)

src/azure-cli-core/azure/cli/core/__init__.py

@@ -4,7 +4,7 @@
 # --------------------------------------------------------------------------------------------
 # pylint: disable=line-too-long
 
-__version__ = "2.75.0"
+__version__ = "2.76.0"
 
 import os
 import sys

src/azure-cli-core/azure/cli/core/cloud.py

@@ -434,7 +434,7 @@ class CloudNameEnum:  # pylint: disable=too-few-public-methods
         gallery='https://gallery.usgovcloudapi.net/',
         active_directory='https://login.microsoftonline.us',
         active_directory_resource_id='https://management.core.usgovcloudapi.net/',
-        active_directory_graph_resource_id='https://graph.windows.net/',
+        active_directory_graph_resource_id='https://graph.microsoftazure.us/',
         microsoft_graph_resource_id='https://graph.microsoft.us/',
         vm_image_alias_doc='https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/arm-compute/quickstart-templates/aliases.json',
         media_resource_id='https://rest.media.usgovcloudapi.net',

src/azure-cli-core/azure/cli/core/profiles/_shared.py

@@ -187,10 +187,7 @@ def default_api_version(self):
         ResourceType.MGMT_RESOURCE_MANAGEDAPPLICATIONS: '2019-07-01',
         ResourceType.MGMT_NETWORK_PRIVATEDNS: None,
         ResourceType.MGMT_KEYVAULT: None,
-        ResourceType.MGMT_AUTHORIZATION: SDKProfile('2022-04-01', {
-            'role_definitions': '2022-05-01-preview',
-            'provider_operations_metadata': '2018-01-01-preview'
-        }),
+        ResourceType.MGMT_AUTHORIZATION: None,
         ResourceType.MGMT_CONTAINERREGISTRY: SDKProfile('2025-03-01-preview', {
             'agent_pools': '2025-03-01-preview',
             'tasks': '2025-03-01-preview',

src/azure-cli-core/setup.py

@@ -8,7 +8,7 @@
 from codecs import open
 from setuptools import setup, find_packages
 
-VERSION = "2.75.0"
+VERSION = "2.76.0"
 
 # If we have source, validate that our version numbers match
 # This should prevent uploading releases with mismatched versions.

src/azure-cli/HISTORY.rst

@@ -3,6 +3,114 @@
 Release History
 ===============
 
+2.76.0
+++++++
+
+**ACR**
+
+* Fix #31572: `az acr check-health`: Fix crashes when the registry is not found (#31753)
+* `az acr create`: Fix domain name label suffix validation (#31783)
+
+**AKS**
+
+* `az aks machine show/list`: Add zones to table output (#31668)
+* `az aks`: Support Virtual Machines node pools in AKS commands (#31780)
+* `az aks update`: Support VMAS to VMS agent pool migration in AKS commands (#31831)
+* `az aks create/update`: Add new parameter `--enable-ai-toolchain-operator` to enable Kaito addon (#31485)
+* `az aks create/update`: Add `--node-provisioning-mode` and `--node-provisioning-default-pools` parameters (#31836)
+* `az aks safeguards`: Add command group to manage deployment safeguards (#31793)
+* `az aks create`: Support the Azure Monitor metrics and logs addon functionality (#31828)
+* `az aks create`: Add new parameter `--disable-run-command` to disable run command feature for the cluster (#31854)
+* `az aks update`: Add new parameters `--disable-run-command` and `--enable-run-command` to toggle the run command feature on or off (#31854)
+* `az aks update`: Support updating load balancer sku from basic to standard (#31874)
+
+**App Config**
+
+* `az appconfig create/update`: Add support for setting key value revision retention period (#31725)
+* `az appconfig feature list/delete/set`: Support filtering by tags (#31711)
+
+**App Service**
+
+* `az webapp create`: Add `--domain-name-scope` parameter to support DNL scopes during site creation (#31863)
+* `az webapp sitecontainers convert`: Add a command to switch between sitecontainers and classic (#31790)
+
+**ARM**
+
+* `az group export`: Add `--export-format` to specify the format of the exported template (#31667)
+* Fix #31709: `az deployment`: Fix `the content for this response was already consumed` error when create resource (#31722)
+* `az deployment create/validate/what-if`: Expose `--validation-level` parameter at all scopes (#31747)
+
+**Backup**
+
+* `az backup restore restore-disks`: Add new parameter `--cvm-os-des-id` to specify the Disk Encryption Set ID to use for OS disk encryption (#31853)
+
+**Cloud**
+
+* Change `active_directory_graph_resource_id` endpoint of `AZURE_US_GOV_CLOUD` to `https://graph.microsoftazure.us/` (#31849)
+
+**Compute**
+
+* `az sig in-vm-access-control-profile`: Add command group to manage in VM access control profile (#31720)
+* `az sig in-vm-access-control-profile-version`: Add command group to manage in VM access control profile version (#31720)
+* `az vm disk attach`: Add new parameters `--source-snapshots-or-disks` `--source-disk-restore-point` to support implicit disk creation from snapshot and disk restore points (#31830)
+* `az vmss create`: Add new parameter `--enable-automatic-repairs` to support setting automatic repairs policy (#31722)
+* Fix #31685: `az vm/vmss update`: Fix error with `NoneType` object has no attribute `mode` when update wireserver profile (#31855)
+* `az vm disk attach`: Add support for setting disk size and sku of implicit disk creation from snapshot and disk restore points (#31862)
+* `az compute-recommender spot-placement-score`: Add new command to replace original command `az compute-recommender spot-placement-recommender` (#31858)
+
+**Container**
+
+* `az container create`: Remove default values for container group to support standby pool reuse scenario (#31824)
+
+**Cosmos DB**
+
+* `az cosmosdb restore`: Remove restore validations which would cause timeouts for large restore and incorrect error messages (#31792)
+
+**DMS**
+
+* `az dms project create`: Add breaking change warning (#31759)
+
+**Eventhub**
+
+* `az eventhubs namespace`: Add `nsp-configuration show` and `nsp-configuration list` (#31846)
+
+**MySQL**
+
+* `az mysql flexible-server create/update`: Update `--storage-redundancy` parameter and add `--backup-interval` (#31813)
+
+**Network**
+
+* `az network application-gateway waf-policy`: Support `computedDisabledRules` read-only property (#31755)
+* `az network application-gateway waf-policy custom-rule create`: Support `GeoLocationXffHeader`, `ClientAddrXffHeader` for `groupByVariables` (#31767)
+* Fix #31727: `az network private-link-service create`: Support multiple IP configurations (#31735)
+
+**Packaging**
+
+* Support RHEL 10 and CentOS Stream 10 (#31602)
+
+**Profile**
+
+* `az login`: Add `--claims-challenge` argument to support interactive authentication with claims challenge (#31778)
+
+**RDBMS**
+
+* `az postgres flexible-server replica create/promote`: Enable replica operations for elastic cluster operations (#31705)
+* `az postgresql flexible-server create`: Handle failed IP address check (#31834)
+
+**Service Fabric**
+
+* `az sf managed-cluster network-security-rule`: Add new parameter `--source-addr-prefix` to specify the CIDR or source IP range (#31714)
+* `az sf managed-cluster network-security-rule`: Add new parameter `--dest-addr-prefix` to specify the destination port or range (#31714)
+* `az sf managed-cluster network-security-rule`: Add new parameter `--source-port-range` to specify the CIDR or source IP range (#31714)
+* `az sf managed-cluster network-security-rule`: Add new parameter `--dest-port-range` to specify the destination address prefix (#31714)
+* `az sf cluster create`: Add more options for parameter `--vm-os` (#31808)
+* `az sf managed-node-type update`: Add parameters `--vm-size` and `--tags` (#31844)
+
+**SQL**
+
+* `az sql ltr-policy set`: Remove ltr backup policy unused parameter `--access-tier` (#31466)
+* `az sql failover-group create`: Add support for multiple partner failover groups (#31782)
+
 2.75.0
 ++++++
 

src/azure-cli/azure/cli/__main__.py

@@ -17,7 +17,7 @@
 from knack.log import get_logger
 
 __author__ = "Microsoft Corporation <python@microsoft.com>"
-__version__ = "2.75.0"
+__version__ = "2.76.0"
 
 
 logger = get_logger(__name__)