Create changelog for azd 1.23.14 (#7500)

Author: Copilot

cli/azd/.vscode/cspell.yaml

@@ -217,6 +217,7 @@ overrides:
       - aistudio
       - apiserver
       - azdevify
+      - Chdir
       - creds
       - Moby
       - upsert

cli/azd/CHANGELOG.md

@@ -10,6 +10,37 @@
 
 ### Other Changes
 
+## 1.23.14 (2026-04-03)
+
+### Features Added
+
+- [[#7489]](https://github.com/Azure/azure-dev/pull/7489) Promote `azd update` to public preview; the command no longer requires enabling an alpha feature flag and displays a preview notice on first use.
+- [[#7382]](https://github.com/Azure/azure-dev/pull/7382) Add per-layer hook support in `azure.yaml`; hooks defined under `infra.layers[].hooks` now execute during `azd provision`, and `azd hooks run` supports a new `--layer` flag for targeted execution.
+- [[#7392]](https://github.com/Azure/azure-dev/pull/7392) Add `--non-interactive` as a global flag alias for `--no-prompt` and support the `AZD_NON_INTERACTIVE` environment variable for enabling non-interactive mode. Thanks @spboyer for the contribution!
+- [[#7361]](https://github.com/Azure/azure-dev/pull/7361) Add `docker.network` option to `azure.yaml` service configuration, passing `--network` to `docker build` for services that require host networking (e.g., behind corporate proxies). Thanks @spboyer for the contribution!
+- [[#7384]](https://github.com/Azure/azure-dev/pull/7384) `azd auth token` now prints the raw access token by default; use `--output json` for structured output including expiration metadata.
+- [[#7296]](https://github.com/Azure/azure-dev/pull/7296) `azd pipeline config` no longer prompts for parameters that are outputs of earlier provisioning layers, reducing unnecessary user prompts in multi-layer deployments.
+- [[#7401]](https://github.com/Azure/azure-dev/pull/7401) Add a "Fix this error" option to the Copilot-assisted error troubleshooting flow, allowing the agent to directly apply a fix and collect user feedback.
+- [[#7397]](https://github.com/Azure/azure-dev/pull/7397) Add `allowed_locations` filter to the `PromptLocation` extension framework API and improve AI model capacity resolution to fall back to the highest valid capacity within remaining quota.
+- [[#7043]](https://github.com/Azure/azure-dev/pull/7043) Add Key Vault secret resolver to the extension framework, automatically resolving `@Microsoft.KeyVault(...)` references in environment variables before passing them to extensions.
+
+### Breaking Changes
+
+### Bugs Fixed
+
+- [[#7314]](https://github.com/Azure/azure-dev/pull/7314) Fix environment variable leak and broken `--debug`, `--cwd`, and `-e`/`--environment` flag propagation to extension commands.
+- [[#7343]](https://github.com/Azure/azure-dev/pull/7343) Fix nil pointer panic when `azure.yaml` contains services, resources, or hooks with empty definitions; reports all issues in a single actionable error message.
+- [[#7356]](https://github.com/Azure/azure-dev/pull/7356) Fix panic when `azd auth token` is called with an unsupported `--output` format.
+- [[#7417]](https://github.com/Azure/azure-dev/pull/7417) Improve `azd update` error message when the installation is managed by an administrator, with guidance to suppress update notifications via `AZD_SKIP_UPDATE_CHECK=1`.
+- [[#7298]](https://github.com/Azure/azure-dev/pull/7298) Add code-signing verification for Windows MSI installs performed via `azd update`.
+- [[#7362]](https://github.com/Azure/azure-dev/pull/7362) Remove unsafe global `os.Chdir` call from Aspire server initialization that could cause concurrency issues in concurrent operations. Thanks @spboyer for the contribution!
+
+### Other Changes
+
+- [[#7456]](https://github.com/Azure/azure-dev/pull/7456) Update bundled GitHub CLI to v2.89.0.
+- [[#7299]](https://github.com/Azure/azure-dev/pull/7299) Add command-specific telemetry attributes for `auth login`, `env list`, `hooks run`, `pipeline config`, and `infra generate` commands.
+- [[#7396]](https://github.com/Azure/azure-dev/pull/7396) Add telemetry instrumentation for preflight validation with unique rule and diagnostic IDs, tracking outcomes and warning and error counts per run.
+
 ## 1.23.13 (2026-03-26)
 
 ### Features Added