Merge branch 'main' into powershell-v3

Author: peombwa

.azure-pipelines/docker-image-refresh.yml

@@ -15,12 +15,16 @@
 name: $(Date:yyyyMMdd)$(Rev:.r)_docker-image-refresh
 
 parameters:
+- name: WindowsPool
+  type: string
+  default: 1es-windows-ps-compute-m
 - name: LinuxPool
   type: string
   default: Azure-Pipelines-1ESPT-ExDShared
 
 variables:
   REGISTRY: 'msgraphprodregistry.azurecr.io'
+  REGISTRY_NAME: 'msgraphprodregistry'   # ACR resource name (az acr build uses this, not the FQDN)
   IMAGE_NAME: 'public/microsoftgraph/powershell'
 
 # Rebuild weekly so the image regularly picks up patched OS layers. `always: true` forces a run
@@ -47,10 +51,10 @@ resources:
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
-    pool:
-      name: ${{ parameters.LinuxPool }}
-      image: ubuntu-latest
-      os: linux
+    # The 1ES template injects an SDL/compliance stage that MUST run on a Windows pool, so the
+    # template-level pool is Windows. The actual container build overrides to a Linux pool at the
+    # job level below. (Same pattern as sdk-release.yml.)
+    pool: ${{ parameters.WindowsPool }}
     settings:
       networkIsolationPolicy: Permissive
     customBuildTags:
@@ -68,31 +72,22 @@ extends:
         steps:
         - checkout: self
 
+        # Build server-side with ACR Tasks: no local Docker daemon, no buildx/QEMU, and no
+        # Docker Hub dependency (which the network-isolated 1ES pool can't reach). ACR pulls the
+        # base image from MCR and pushes the result back to the registry.
         - task: AzureCLI@2
-          displayName: 'Log in to Azure Container Registry'
+          displayName: 'Build and push patched image (ACR Tasks)'
           inputs:
             azureSubscription: 'ACR Images Push Service Connection'
             scriptType: 'bash'
             scriptLocation: 'inlineScript'
             inlineScript: |
-              az acr login --name $(REGISTRY)
-
-        - script: |
-            docker run --privileged --rm tonistiigi/binfmt --install all
-          displayName: 'Enable multi-platform builds'
-
-        - script: |
-            docker buildx create --use --name refreshbuilder
-          displayName: 'Set up Docker BuildX'
-
-        - bash: |
-            set -euo pipefail
-            formatted_date=$(date +"%Y%m%d%H%M%S")
-            echo "Rebuilding $(REGISTRY)/$(IMAGE_NAME) on a patched base"
-            docker buildx build \
-              --platform linux/amd64 \
-              --push \
-              -t "$(REGISTRY)/$(IMAGE_NAME):latest" \
-              -t "$(REGISTRY)/$(IMAGE_NAME):$formatted_date" \
-              "$(Build.SourcesDirectory)"
-          displayName: 'Build and push refreshed image'
+              set -euo pipefail
+              formatted_date=$(date +"%Y%m%d%H%M%S")
+              echo "Rebuilding $(REGISTRY_NAME) / $(IMAGE_NAME) on a patched base via ACR Tasks"
+              az acr build \
+                --registry $(REGISTRY_NAME) \
+                --image "$(IMAGE_NAME):latest" \
+                --image "$(IMAGE_NAME):$formatted_date" \
+                --platform linux/amd64 \
+                "$(Build.SourcesDirectory)"

autorest.powershell

@@ -27,15 +27,15 @@
   "versions": {
     "authentication": {
       "prerelease": "",
-      "version": "2.38.1"
+      "version": "2.39.0"
     },
     "beta": {
       "prerelease": "",
-      "version": "2.38.1"
+      "version": "2.39.0"
     },
     "v1.0": {
       "prerelease": "",
-      "version": "2.38.1"
+      "version": "2.39.0"
     }
   }
 }

config/ModuleMetadata.json

@@ -12500,8 +12500,10 @@ components:
           $ref: '#/components/schemas/microsoft.graph.restorableArtifact'
         queryExpression:
           type: string
-          description: Specifies criteria to retrieve artifacts.
+          description: 'Deprecated. Going forward, use the structuredQueryExpression property instead. Specifies criteria to retrieve artifacts.'
           nullable: true
+        structuredQueryExpression:
+          $ref: '#/components/schemas/microsoft.graph.restoreSearchArtifactQueryExpression'
       additionalProperties:
         type: object
     microsoft.graph.restorePointSearchResponse:
@@ -13141,6 +13143,8 @@ components:
               nullable: true
             destinationType:
               $ref: '#/components/schemas/microsoft.graph.destinationType'
+            error:
+              $ref: '#/components/schemas/microsoft.graph.publicError'
             restoredItemKey:
               type: string
               description: The unique identifier for the restored artifact.
@@ -13346,6 +13350,39 @@ components:
         - message
         - unknownFutureValue
       type: string
+    microsoft.graph.restoreSearchArtifactQueryExpression:
+      title: restoreSearchArtifactQueryExpression
+      type: object
+      properties:
+        hasAttachment:
+          type: boolean
+          description: Indicates whether the artifact has an attachment. Optional.
+          nullable: true
+        items:
+          type: array
+          items:
+            $ref: '#/components/schemas/microsoft.graph.granularRestoreItems'
+          description: The types of items to include in the search. Optional.
+        recipients:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The recipient email addresses to filter by. Optional.
+        senders:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The sender email addresses to filter by. Optional.
+        subjects:
+          type: array
+          items:
+            type: string
+            nullable: true
+          description: The subject lines to filter by. Optional.
+      additionalProperties:
+        type: object
     microsoft.graph.restorePointSearchResult:
       title: restorePointSearchResult
       type: object
@@ -14099,6 +14136,16 @@ components:
         - completed
         - unknownFutureValue
       type: string
+    microsoft.graph.granularRestoreItems:
+      title: granularRestoreItems
+      enum:
+        - email
+        - note
+        - contact
+        - task
+        - calendar
+        - unknownFutureValue
+      type: string
     microsoft.graph.ODataErrors.MainError:
       required:
         - code

openApiDocs/beta/Applications.yml

@@ -13917,6 +13917,7 @@ components:
               nullable: true
             isRegistrationRequired:
               type: boolean
+              description: Indicates whether attendee registration is enabled for the virtual event.
               nullable: true
             settings:
               $ref: '#/components/schemas/microsoft.graph.virtualEventSettings'
@@ -15054,6 +15055,8 @@ components:
               type: string
               description: Specifies the spoken language used during the meeting for recording and transcription purposes.
               nullable: true
+            meetingType:
+              $ref: '#/components/schemas/microsoft.graph.onlineMeetingType'
             recordAutomatically:
               type: boolean
               description: Indicates whether to record the meeting automatically.
@@ -16586,58 +16589,58 @@ components:
             completeAfterDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: DateTime after which the migration should be performed
+              description: 'Date and time after which the migration should be performed. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z.'
               format: date-time
             createdBy:
               type: string
-              description: ID of the user that created the job
+              description: User principal name (UPN) of the user who created the job. Read-only.
             createdDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When the job what created
+              description: 'When the job was created. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             displayName:
               type: string
-              description: Display name of the job. Must be unique per tenant
+              description: Display name of the job. Must be unique per tenant.
             exchangeSettings:
               $ref: '#/components/schemas/microsoft.graph.exchangeOnlineCrossTenantMigrationSettings'
             jobType:
               $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationJobType'
             lastUpdatedDateTime:
               pattern: '^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$'
               type: string
-              description: When this migration job was last updated
+              description: 'When this migration job was last updated. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2024, is 2024-01-01T00:00:00Z. Read-only.'
               format: date-time
             message:
               type: string
-              description: Status message of the migration job
+              description: Status message of the migration job. Nullable. Read-only.
               nullable: true
             resources:
               type: array
               items:
                 type: string
-              description: IDs (GUID) of the resources being migrated with the migration job
+              description: IDs (GUID) of the resources that are migrated with the migration job.
             resourceType:
               type: string
-              description: Type of resource being migrated. Only Users is currently supported
+              description: Type of resource being migrated. Only Users is currently supported.
             sourceTenantId:
               type: string
-              description: ID (GUID) of the tenant that content is being migrated from
+              description: ID (GUID) of the tenant that content is migrated from.
             status:
               $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationJobStatus'
             targetTenantId:
               type: string
-              description: ID of the tenant that content is being migrated to
+              description: ID of the tenant that content is migrated to. Read-only.
             workloads:
               type: array
               items:
                 type: string
-              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint)'
+              description: 'Workloads to migrate. Supported workloads are Teams, Exchange, and ODSP (OneDrive/SharePoint).'
             users:
               type: array
               items:
                 $ref: '#/components/schemas/microsoft.graph.crossTenantMigrationTask'
-              description: Details and status of the users being migrated in this migration job
+              description: Details and status of the users migrated in this migration job.
               x-ms-navigationProperty: true
           additionalProperties:
             type: object
@@ -16790,12 +16793,15 @@ components:
       properties:
         moreInfoWebUrl:
           type: string
+          description: Provides other video teleconferencing (VTC) dial-in options. Read-only.
           nullable: true
         tenantKey:
           type: string
+          description: The tenant key that is used to dial into the interactive voice response (IVR) of the partner CVI service.
           nullable: true
         videoTeleconferenceId:
           type: string
+          description: The video teleconferencing ID. Read-only.
           nullable: true
       additionalProperties:
         type: object
@@ -16829,6 +16835,16 @@ components:
           $ref: '#/components/schemas/microsoft.graph.lobbyBypassScope'
       additionalProperties:
         type: object
+    microsoft.graph.onlineMeetingType:
+      title: onlineMeetingType
+      enum:
+        - adhoc
+        - scheduled
+        - recurring
+        - broadcast
+        - meetnow
+        - unknownFutureValue
+      type: string
     microsoft.graph.onlineMeetingSensitivityLabelAssignment:
       title: onlineMeetingSensitivityLabelAssignment
       type: object
@@ -17990,6 +18006,8 @@ components:
               nullable: true
             destinationType:
               $ref: '#/components/schemas/microsoft.graph.destinationType'
+            error:
+              $ref: '#/components/schemas/microsoft.graph.publicError'
             restoredItemKey:
               type: string
               description: The unique identifier for the restored artifact.

openApiDocs/beta/BackupRestore.yml

@@ -21450,7 +21450,6 @@ components:
               description: 'A short, friendly name for the room, often used for easier identification or display in UI.'
             placeId:
               type: string
-              description: An alternative immutable unique identifier of the room. Read-only.
               nullable: true
             teamsEnabledState:
               $ref: '#/components/schemas/microsoft.graph.placeFeatureEnablement'
@@ -21525,7 +21524,6 @@ components:
               description: 'A short, friendly name for the workspace, often used for easier identification or display in the UI.'
             placeId:
               type: string
-              description: An alternative immutable unique identifier of the workspace. Read-only.
               nullable: true
           additionalProperties:
             type: object

openApiDocs/beta/Bookings.yml

@@ -308,6 +308,18 @@ components:
             resource:
               type: string
               description: Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/beta/). See the possible resource path values for each supported resource.
+            vapidPublicKey:
+              type: string
+              description: 'Optional. The application server''s VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292.'
+              nullable: true
+            webPushEncryptionP256dhPublicKey:
+              type: string
+              description: 'Optional. The subscriber''s ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''p256dh''). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
+            webPushEncryptionSecret:
+              type: string
+              description: 'Optional. The subscriber''s auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey(''auth''). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3.'
+              nullable: true
           additionalProperties:
             type: object
     microsoft.graph.entity: