{Release} Upgrade to Azure CLI 2.86.0 (#33275)

Co-authored-by: ZelinWang <zelinwang@microsoft.com>
Co-authored-by: necusjz <necusjz@gmail.com>
Co-authored-by: Julie Zhu <105691024+yanzhudd@users.noreply.github.com>
Co-authored-by: Yeming Liu <11371776+isra-fel@users.noreply.github.com>

Author: 5 people

src/azure-cli-core/HISTORY.rst

@@ -3,6 +3,12 @@
 Release History
 ===============
 
+2.86.0
+++++++
+* Resolve CVE-2025-15467 (#33201)
+* Resolve CVE-2025-69419 (#33201)
+* Resolve CVE-2026-39892 (#33154)
+
 2.85.0
 ++++++
 * Resolve CVE-2026-26007 (#32879)

src/azure-cli-core/azure/cli/core/__init__.py

@@ -4,7 +4,7 @@
 # --------------------------------------------------------------------------------------------
 # pylint: disable=line-too-long
 
-__version__ = "2.85.0"
+__version__ = "2.86.0"
 
 import os
 import sys

src/azure-cli-core/azure/cli/core/commandIndex.latest.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.85.0",
+  "version": "2.86.0",
   "cloudProfile": "latest",
   "commandIndex": {
     "account": [

src/azure-cli-core/azure/cli/core/helpIndex.latest.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.85.0",
+  "version": "2.86.0",
   "cloudProfile": "latest",
   "helpIndex": {
     "groups": {

src/azure-cli-core/setup.py

@@ -8,7 +8,7 @@
 from codecs import open
 from setuptools import setup, find_packages
 
-VERSION = "2.85.0"
+VERSION = "2.86.0"
 
 # If we have source, validate that our version numbers match
 # This should prevent uploading releases with mismatched versions.

src/azure-cli/HISTORY.rst

@@ -3,6 +3,83 @@
 Release History
 ===============
 
+2.86.0
+++++++
+
+**ACR**
+
+* `az acr login`: Support Podman for `--name` parameter (#33115)
+* `az acr create`: Add `--regional-endpoints` parameter to enable or disable regional endpoints for a container registry (#33133)
+* `az acr update`: Add `--regional-endpoints` parameter to enable or disable regional endpoints for an existing container registry (#33133)
+* `az acr show-endpoints`: Display regional endpoint host names when regional endpoints are enabled (#33133)
+* `az acr login`: Add `--endpoint` parameter to log in to a specific regional endpoint of a container registry (#33133)
+* `az acr import`: Support importing images using regional endpoint URIs as the source (#33133)
+* `az acr network-rule`: Update `--ip-address` help message to include ipv6 address (#32537)
+
+**AKS**
+
+* `az aks create`, `az aks nodepool add/update`: Add option `AzureContainerLinux` to `--os-sku` parameter (#33129)
+* `az aks check-acr`: Fix command injection via unquoted tempfile path in subprocess call (#33155)
+* `az aks update`: Add `--enable-azure-monitor-app-monitoring` to support Azure Monitor Application Monitoring auto-instrumentation (#32712)
+* `az aks create`: Add parameters `--system-node-subnet-id`, `--node-subnet-id` and `--enable-hosted-system` to support BYO VNet for Automatic Managed System Pool clusters (#33259)
+* `az aks mesh enable/proxy-redirection-mechanism`: Add mesh Istio CNI commands (#32992)
+* `az aks nodepool add`: Add `Windows2025` as a supported value for `--os-sku` (#33246)
+* `az aks update`: Fix `--enable-azure-monitor-metrics` failing with RoleAssignmentExists when Grafana role assignment already exists (#33229)
+
+**App Service**
+
+* `az webapp create`: Add post-creation deployment guidance and startup command examples (#33088)
+* `az webapp deploy`: Add build automation guidance for Linux zip deployments (#33088)
+* `az webapp up`: Add logging for OS type, runtime auto-detection, and plan auto-generation (#33088)
+* Add warning for container image path when `--container-image-name` includes registry host (#33088)
+* `az webapp delete`: Add warning about App Service Plan deletion (#33088)
+* Fix #33180: `az functionapp plan create`: Simplify reserved parameter assignment in AppServicePlan (#33202)
+* `az webapp sitecontainers convert`: Add support for converting Docker Compose multi-container apps to Sitecontainers mode (#33131)
+* `az webapp up/deploy`: Add `--enriched-errors` parameter to see detailed deployment failure log (#32940)
+* `az webapp create`: Add error message that clearly lists all valid options and specifies how to discover available runtimes (#33252)
+* `az appservice plan create`: Make `P0V3` as default SKU when `--sku` is omitted for linux webapp (#33237)
+* `az appservice plan create`: Add `PREMIUM0V3` tier for elastic scale (#33237)
+
+**Cloud**
+
+* Fix #33183: `az cloud set`: Typo correction on AZURE_BLEU_CLOUD active directory endpoint
+
+**Compute**
+
+* `az sig create`: Add new argument group "Managed Service Identity" to configure the service identity of a Shared Image Gallery (SIG) (#33137)
+* `az sig show`: Update command to display the managed service identity of a Shared Image Gallery (SIG) (#33137)
+* `az sig identity`: Add new command group to manage the service identity of a Shared Image Gallery (SIG) (#33137)
+
+**Container app**
+
+* `az containerapp create`: Support other cloud for acr (#33160)
+
+**Network**
+
+* `az network express-route gateway`: Support VWAN gateway resiliency APIs (#32941)
+* `az network route-table create/update`: Add `--disable-peering-route` to support disable peering route (#33231)
+
+**PostgreSQL**
+
+* `az postgres flexible-server create`, `replica create`, `restore`, `geo-restore`, and `revive-dropped`: Add breaking change announcement for command behavioral change related to network resources (#33077)
+* `az postgres flexible-server create`: Announce breaking change deprecation of `--cluster-option` argument (#33225)
+* Fix #33090: `az postgres flexible-server server-logs list`: Command crashes with an AttributeError when listing log files (#33096)
+* `az postgres flexible-server`: Improve validation logic and style of error messages (#33114)
+* `az postgresql flexible-server replica create`: New argument `--storage-type` to select storage type as PremiumV2_LRS for read replica (#33134)
+* Fix #33205: `az postgres flexible-server create`: Update help text for `--storage-auto-grow` argument to reflect actual default value (#33206)
+* `az postgres flexible-server update`: Restart is no longer required for scaling storage size of Premium SSDv2 server (#33178)
+* `az postgres flexible-server create/upgrade`: Block SSDv2 creation for PG version earlier than 14 (#33119)
+
+**Profile**
+
+* `az login`: Add `--subscription` and `--skip-subscription-discovery` to filter subscriptions during login (#33181)
+
+**Storage**
+
+* `az storage account create/update`: Update description for tls 1.3 being not yet available, remove breaking change warning to deprecate tls1.0, tls1.1 (#33243)
+* `az storage blob/container/share/file/queue/fs generate-sas`: Add `--user-delegation-tid` to support cross tenant user delegated sas (#33187)
+* `az storage advanced-platform-metric create/update/show/list/delete`: Support Advanced Platform Metrics (#33224)
+
 2.85.0
 ++++++
 

src/azure-cli/azure/cli/__main__.py

@@ -17,7 +17,7 @@
 from knack.log import get_logger
 
 __author__ = "Microsoft Corporation <python@microsoft.com>"
-__version__ = "2.85.0"
+__version__ = "2.86.0"
 
 
 logger = get_logger(__name__)

src/azure-cli/requirements.py3.Darwin.txt

@@ -4,9 +4,9 @@ argcomplete==3.5.2
 asn1crypto==0.24.0
 azure-appconfiguration==1.7.2
 azure-batch==15.0.0b1
-azure-cli-core==2.85.0
+azure-cli-core==2.86.0
 azure-cli-telemetry==1.1.0
-azure-cli==2.85.0
+azure-cli==2.86.0
 azure-common==1.1.22
 azure-core==1.39.0
 azure-cosmos==3.2.0

src/azure-cli/requirements.py3.Linux.txt

@@ -4,9 +4,9 @@ argcomplete==3.5.2
 asn1crypto==0.24.0
 azure-appconfiguration==1.7.2
 azure-batch==15.0.0b1
-azure-cli-core==2.85.0
+azure-cli-core==2.86.0
 azure-cli-telemetry==1.1.0
-azure-cli==2.85.0
+azure-cli==2.86.0
 azure-common==1.1.22
 azure-core==1.39.0
 azure-cosmos==3.2.0

src/azure-cli/requirements.py3.windows.txt

@@ -4,9 +4,9 @@ argcomplete==3.5.2
 asn1crypto==0.24.0
 azure-appconfiguration==1.7.2
 azure-batch==15.0.0b1
-azure-cli-core==2.85.0
+azure-cli-core==2.86.0
 azure-cli-telemetry==1.1.0
-azure-cli==2.85.0
+azure-cli==2.86.0
 azure-common==1.1.22
 azure-core==1.39.0
 azure-cosmos==3.2.0