Sync release-network-2025-01-01 with Main (#28699)

Author: isra-fel

.github/CODEOWNERS

@@ -1,12 +1,12 @@
 # @wyunchi-ms @dolauli @isra-fel are from the Azure PowerShell team. Adding them ensures they can merge the PR for those modules.
 # To make sure Network PRs go to the right branch, e.g. network-april
-/src/Compute/    @ookoka @haagha @audreyttt @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi
-/src/PolicyInsights/  @pilor @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi 
-/src/Batch/ @wiboris @dpwatrous @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi 
+/src/Compute/    @ookoka @haagha @audreyttt @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi @DanielMicrosoft
+/src/PolicyInsights/  @pilor @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi @DanielMicrosoft
+/src/Batch/ @wiboris @dpwatrous @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi @DanielMicrosoft
 
 # Make sure Device Registry team gets notified of any DeviceRegistry PRs:
 # PRLabel: %Device Registry
-/src/DeviceRegistry/ @marcodalessandro @rohankhandelwal @riteshrao @davidemontanari @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi 
+/src/DeviceRegistry/ @marcodalessandro @rohankhandelwal @riteshrao @davidemontanari @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi @DanielMicrosoft
 
 # Make sure changes to .github folder go through our team's double check
-/.github/        @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi
+/.github/        @wyunchi-ms @dolauli @isra-fel @VeryEarly @YanaXu @vidai-msft @NoriZC @notyashhh @Pan-Qi @DanielMicrosoft

.github/workflows/issue-metrics.yml

@@ -0,0 +1,43 @@
+name: Monthly issue metrics
+on:
+  workflow_dispatch:
+  # schedule:
+  #   - cron: "3 2 1 * *"
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: issue metrics
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: read
+    steps:
+      - name: Get dates for last month
+        shell: bash
+        run: |
+          # Calculate the first day of the previous month
+          first_day=$(date -d "last month" +%Y-%m-01)
+
+          # Calculate the last day of the previous month
+          last_day=$(date -d "$first_day +1 month -1 day" +%Y-%m-%d)
+
+          #Set an environment variable with the date range
+          echo "$first_day..$last_day"
+          echo "last_month=$first_day..$last_day" >> "$GITHUB_ENV"
+
+      - name: Run issue-metrics tool
+        uses: github/issue-metrics@v3
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SEARCH_QUERY: 'repo:Azure/azure-powershell is:pr created:${{ env.last_month }}'
+          DRAFT_PR_TRACKING: 'True'
+
+      - name: Create issue
+        uses: peter-evans/create-issue-from-file@v5
+        with:
+          title: Monthly issue metrics report
+          token: ${{ secrets.GITHUB_TOKEN }}
+          content-filepath: ./issue_metrics.md

.github/workflows/script/PrLabeled.ps1

@@ -15,9 +15,9 @@ $CommentDict = @{
 ‼️ DO NOT MERGE THIS PR ‼️
 This PR was labeled "Do Not Merge" because it contains code change that cannot be merged. Please contact the reviewer for more information.
 "@
-    "Breaking Change Release" = @"
+    "Contains Breaking Change" = @"
 To the author of the pull request,
-This PR was labeled "Breaking Change Release" because it contains breaking changes.
+This PR was labeled "Contains Breaking Change" because breaking changes have been detected by the static analysis pipeline.
 - According to our [policy](https://eng.ms/docs/cloud-ai-platform/azure-core/azure-management-and-platforms/control-plane-bburns/azure-cli-tools-azure-cli-powershell-and-terraform/azure-cli-tools/devguide/azps/breaking-change/breaking-changes-policy), breaking changes can only take place during major release and they must be preannounced.
 - Please follow our [guide](https://eng.ms/docs/cloud-ai-platform/azure-core/azure-management-and-platforms/control-plane-bburns/azure-cli-tools-azure-cli-powershell-and-terraform/azure-cli-tools/devguide/azps/breaking-change/breaking-changes-process) on the detailed steps.
 - [ ] **Required**: Please fill in the [task](https://msazure.visualstudio.com/One/_workitems/create/Task?templateId=030c9f4f-a13e-4393-9b87-ae6fd458692b&ownerId=5439f061-9499-4da9-8c5a-659bd6db3188) below to facilitate our contact,you will receive notifications related to breaking changes.

ChangeLog.md

@@ -1,3 +1,132 @@
+## 14.5.0 - October 2025
+#### Az.Automation 1.11.2
+* Fixed runbook_type: 'PowerShell72' [#24779][#23967]
+
+#### Az.CloudService 2.1.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.Compute 10.4.0
+* Added '-InstantAccessDurationMinutes' parameter to New-AzSnapshotConfig.
+* Added 'SecureVMGuestStateSAS' parameter to 'Grant-AzSnapshotAccess'.
+* Updated SDK to use 2025-04-01 version of the ComputeRP API for Compute related cmdlets.
+
+#### Az.Databricks 1.10.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.DataFactory 1.19.5
+* Added support for Salesforce V2 partitionOption feature.
+* Added support MI In Lakehouse And Warehouse connection.
+
+#### Az.DataMigration 1.0.0
+* General availability for module Az.DataMigration
+* Upgraded Data Migration API to stable version '2025-06-30'.
+* Added support for retrying database migrations and for deleting SQL VM and SQL MI Database Migration Services.
+* Added cmdlets: 'Invoke-AzDataMigrationRetryToSqlDb', 'Remove-AzDataMigrationToSqlManagedInstance', 'Remove-AzDataMigrationToSqlVM'
+
+#### Az.FirmwareAnalysis 1.0.0
+* General availability for module Az.FirmwareAnalysis
+* Upgraded API support to include 2025-08-02
+* Added usage metric support via the Get-AzFirmwareAnalysisUsageMetric cmdlet
+
+#### Az.HDInsight 6.4.0
+* Supported create cluster with entra user as gateway credential to replace use username and password.
+  - Added parameter '-EntraUserIdentity' to cmdlet 'New-AzHDInsightCluster' to support creating Entra user clusters using one or more ObjectId or Upn.
+  - Added parameter '-EntraUserFullInfo' to cmdlet 'New-AzHDInsightCluster' to support creating Entra user clusters using an array of hashtables that include ObjectId, Upn, and DisplayName.
+* Supported update Entra user information for an existing Entra user cluster.
+  - Added parameter '-EntraUserIdentity' to cmdlet 'Set-AzHDInsightGatewayCredential' to support update Entra user clusters using one or more ObjectId or Upn.
+  - Added parameter '-EntraUserFullInfo' to cmdlet 'Set-AzHDInsightGatewayCredential' to support update Entra user clusters using an array of hashtables that include ObjectId, Upn, and DisplayName.
+* Added support for using WASB storage with Managed Identity (MSI) in the 'New-AzHDInsightCluster' cmdlet.
+  -Users can specify the 'StorageAccountManagedIdentity' parameter to use MSI as a wasb storage credential when creating a cluster, as an alternative to using 'StorageAccountKey'.
+
+#### Az.KeyVault 6.4.0
+* Added Managed HSM network rule cmdlets mirroring existing Key Vault network rule management: 'New-AzKeyVaultManagedHsmNetworkRuleSetObject', 'Add-AzKeyVaultManagedHsmNetworkRule', 'Remove-AzKeyVaultManagedHsmNetworkRule', 'Update-AzKeyVaultManagedHsmNetworkRuleSet'
+* New-AzKeyVaultManagedHsm now supports -NetworkRuleSet parameter to specify Managed HSM network rules (default action, bypass, IP ranges, virtual network resource IDs) at creation.
+* Managed HSM network rule enforcement: when any IP or Virtual Network rules are present the client now automatically coerces DefaultAction to Deny (service requirement) and adds a final safeguard at request dispatch. Subscriptions must be allow-listed by the service to use IP/Service Tag ACL features.
+
+#### Az.LoadTesting 1.1.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.Migrate 2.10.0
+* Fixed bugs in 'New-AzMigrateLocalDiskMappingObject': Only validate for non-512 physical sector size of VHD when '-PhysicalSectorSize' parameter is given
+* Fixed bugs in 'New-AzMigrateLocalServerReplication': Only validate for non-512 physical sector size of VHD when '-PhysicalSectorSize' parameter is given. Removed reserved words validation for source disk names as it is no longer required. Added ARM id validation for input parameters
+* Fixed bugs in 'Set-AzMigrateLocalServerReplication': Added ARM id validation for input parameters
+* Fixed bugs in 'Get-AzMigrateLocalServerReplication': Added ARM id validation for input parameters
+* Enhanced Get-AzMigrateServerMigrationStatus to add support for the -Expedite parameter.
+
+#### Az.Network 7.21.0
+- Added deprecation warning for cmdlet 'Invoke-AzFirewallPacketCapture'
+* Added new cmdlet for Invoke PacketCaptureOperation on Azure Firewall
+    - 'Invoke-AzFirewallPacketCaptureOperation'
+* Updated cmdlet to add the mandatory property of 'Operation' and made all other properties not mandatory for Azure Firewall Packet Capture Parameters. Updated corresponding cmdlets.
+    - 'New-AzFirewallPacketCaptureParameter'
+* Added new cmdlet for List NetworkSecurityPerimeter ServiceTags
+    - 'Get-AzNetworkSecurityPerimeterServiceTag'
+* Added properties 'DedicatedBackendConnection', 'ValidateCertChainAndExpiry', 'ValidateSNI', and 'SniName' to Application Gateway Backend HTTP Settings, as well as support for them in the following cmdlets:
+    - 'New-AzApplicationGatewayBackendHttpSetting'
+    - 'Add-AzApplicationGatewayBackendHttpSetting'
+    - 'Set-AzApplicationGatewayBackendHttpSetting'
+* Added cmdlet 'Get-AzAllVirtualNetworkGatewayRadiusServerSecret' to fetch list of VirtualNetworkGateway VpnClientConfiguration Radius servers and corresponding radius secrets.
+* Added cmdlet 'Get-AzAllVpnServerConfigurationRadiusServerSecret ' to fetch list of VirtualWan VpnServerConfiguration Radius servers and corresponding radius secrets.
+
+#### Az.RecoveryServices 7.9.0
+* Added Cross region restore support for new region - eastus3.
+* Added support for reregistration of a backup item to another vault.
+
+#### Az.ResourceMover 1.3.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.Resources 8.1.1
+* Fixed issue where RoleAssignment cmdlets did not properly handle insufficient MSGraph permissions [#28583]
+
+#### Az.SecurityInsights 3.2.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.ServiceFabric 3.8.0
+* Changed from 'Basic' to 'Standard' SKUs for loadbalancers and public IP addresses for 'New-AzServiceFabricCluster' and 'Add-AzServiceFabricNodeType' as 'Basic' SKUs are being deprecated.
+* Added parameters '-EnableAutoOsUpgrade' and '-AllowRdpAccess' to 'New-AzServiceFabricManagedCluster' and 'Set-AzServiceFabricManagedCluster'.
+* Added parameters '-ZoneBalance', '-AllowOverProvisioning', and '-Zone' to 'New-AzServiceFabricManagedNodeType' and 'Set-AzServiceFabricManagedNodeType'.
+* Added preannoucement for removing Reimage parameters from 'Set-AzServiceFabricManagedNodeType'.
+* Added new cmdlets for managed node types: 'Invoke-AzServiceFabricDeallocateManagedNodeType', 'Invoke-AzServiceFabricRedeployManagedNodeType', 'Invoke-AzServiceFabricReimageManagedNodeType', 'Start-AzServiceFabricManagedNodeType'
+* Marked 'NodeName' as non-required and added parameter '-UpdateType' in 'Restart-AzServiceFabricManagedNodeType' to allow UD by UD restarts of all nodes in node type.
+* Renamed Remove-AzServiceFabricManagedNodeType parameter sets to use 'Remove' instead of 'Delete' for consistency with cmdlet name.
+
+#### Az.SignalR 2.2.0
+* Added cmdlets for managing custom domains: 'New-AzSignalRCustomDomain', 'Get-AzSignalRCustomDomain', 'Remove-AzSignalRCustomDomain', 'Update-AzSignalRCustomDomain'
+* Added cmdlets for managing custom certificates: 'New-AzSignalRCustomCertificate', 'Get-AzSignalRCustomCertificate', 'Remove-AzSignalRCustomCertificate', 'Update-AzSignalRCustomCertificate'
+* Added '-EnableSystemAssignedIdentity' and 'UserAssignedIdentity' for managed identity to 'New-AzSignalR' and 'Update-AzSignalR'
+
+#### Az.Sql 6.2.0
+* Improved parameter validation for the EnableSoftDelete and SoftDeleteRetentionDays parameters.
+* Added 'EnableSoftDelete' and 'SoftDeleteRetentionDays' to 'New-AzSqlServer' to support soft-delete retention
+* Added 'EnableSoftDelete' and 'SoftDeleteRetentionDays' to 'Set-AzSqlServer' to support soft-delete retention
+* Added 'Restore-AzSqlServer' cmdlet to restore a deleted Azure SQL server within the retention period
+
+#### Az.StackHCI 2.6.3
+* Modified the Cluster Registration to use Managed Service Identity instead of AAD App based registration for new OS versions.
+
+#### Az.Storage 9.2.0
+* Supported Zone and ZonePlacementPolicy on Storage accounts: 'New-AzStorageAccount', 'Set-AzStorageAccount'
+* Supported listing Storage SKU: 'Get-AzStorageSku'
+* Supported enabling SMB Oauth on Storage accounts: 'New-AzStorageAccount', 'Set-AzStorageAccount'
+* Supported Enable Metrics when set object replication policy: 'Set-AzStorageObjectReplicationPolicy'
+* Supported create and get symbolic link in NFS File Share: 'New-AzStorageFileSymbolicLink', 'Get-AzStorageFileSymbolicLink'
+
+#### Az.StorageDiscovery 1.0.0
+* General availability for module Az.StorageDiscovery
+
+#### Az.StorageMover 1.6.0
+* Added  support for new api version 2025-07-01
+* Included new endpoint types supported in the api version: 'MultiCloudConnector', 'NFSFileShare'
+* Enhanced help documentation for New-AzStorageMoverAzStorageContainerEndpoint and New-AzStorageMoverMultiCloudConnectorEndpoint with identity details.
+* Corrected online version link for Update-AzStorageMoverAzNfsFileShareEndpoint help documentation.
+* Added identity information to the output properties in help documentation for storage container and multi-cloud connector endpoints.
+
+#### Az.Websites 3.4.2
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
+#### Az.Workloads 1.0.1
+* Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
+
 ## 14.4.0 - September 2025
 #### Az.Accounts 5.3.0
 * Updated 'AuthenticationAssemblyLoadContext' project to deprecate .NET 6.0 and build on .NET 8.0.

NuGet.Config

@@ -42,6 +42,8 @@
 
 
 
+
+
 
 
 

documentation/SyntaxChangeLog/SyntaxChangeLog-Az14.md

@@ -1,3 +1,64 @@
+## 14.5.0 - October 2025
+#### Az.Compute 10.4.0 
+* Modified cmdlet `Grant-AzSnapshotAccess`
+   - Added parameter `-SecureVMGuestStateSAS`
+* Modified cmdlet `New-AzSnapshotConfig`
+   - Added parameter `-InstantAccessDurationMinutes`
+#### Az.HDInsight 6.4.0 
+* Modified cmdlet `New-AzHDInsightCluster`
+   - Added parameters `-EntraUserIdentity`, `-EntraUserFullInfo`
+* Modified cmdlet `Set-AzHDInsightGatewayCredential`
+   - Added parameters `-EntraUserIdentity`, `-EntraUserFullInfo`
+#### Az.KeyVault 6.4.0 
+* Modified cmdlet `New-AzKeyVaultManagedHsm`
+   - Added parameter `-NetworkRuleSet`
+* Added cmdlet `Add-AzKeyVaultManagedHsmNetworkRule`, `New-AzKeyVaultManagedHsmNetworkRuleSetObject`, `Remove-AzKeyVaultManagedHsmNetworkRule`, `Update-AzKeyVaultManagedHsmNetworkRuleSet`
+#### Az.Migrate 2.10.0 
+* Modified cmdlet `Get-AzMigrateServerMigrationStatus`
+   - Added parameter `-Expedite`
+#### Az.RecoveryServices 7.9.0 
+* Added cmdlet `Redo-AzRecoveryServicesBackupProtection`
+#### Az.ServiceFabric 3.8.0 
+* Modified cmdlet `New-AzServiceFabricManagedCluster`
+   - Added parameters `-EnableAutoOsUpgrade`, `-AllowRdpAccess`
+* Modified cmdlet `New-AzServiceFabricManagedNodeType`
+   - Added parameters `-ZoneBalance`, `-EnableOverProvisioning`, `-Zone`
+* Modified cmdlet `Restart-AzServiceFabricManagedNodeType`
+   - Added parameter `-UpdateType`
+   - Parameter `-NodeName` ValidateNotNullOrEmpty changed from `True` to `False`
+* Modified cmdlet `Set-AzServiceFabricManagedCluster`
+   - Added parameters `-EnableAutoOsUpgrade`, `-AllowRdpAccess`
+* Modified cmdlet `Set-AzServiceFabricManagedNodeType`
+   - Added parameters `-ZoneBalance`, `-EnableOverProvisioning`, `-Zone`
+* Added cmdlet `Invoke-AzServiceFabricDeallocateManagedNodeType`, `Invoke-AzServiceFabricRedeployManagedNodeType`, `Invoke-AzServiceFabricReimageManagedNodeType`, `Start-AzServiceFabricManagedNodeType`
+#### Az.SignalR 2.2.0 
+* Modified cmdlet `New-AzSignalR`
+   - Added parameters `-EnableSystemAssignedIdentity`, `-UserAssignedIdentity`
+* Modified cmdlet `Update-AzSignalR`
+   - Added parameters `-EnableSystemAssignedIdentity`, `-UserAssignedIdentity`
+* Added cmdlet `Get-AzSignalRCustomCertificate`, `Get-AzSignalRCustomDomain`, `New-AzSignalRCustomCertificate`, `New-AzSignalRCustomDomain`, `Remove-AzSignalRCustomCertificate`, `Remove-AzSignalRCustomDomain`, `Update-AzSignalRCustomDomain`
+#### Az.Sql 6.2.0 
+* Modified cmdlet `New-AzSqlServer`
+   - Added parameters `-EnableSoftDelete`, `-SoftDeleteRetentionDays`
+* Modified cmdlet `Set-AzSqlServer`
+   - Added parameters `-EnableSoftDelete`, `-SoftDeleteRetentionDays`
+* Added cmdlet `Restore-AzSqlServer`
+#### Az.Storage 9.2.0 
+* Modified cmdlet `New-AzStorageAccount`
+   - Added parameters `-EnableSmbOAuth`, `-Zone`, `-ZonePlacementPolicy`
+* Modified cmdlet `Set-AzStorageAccount`
+   - Added parameters `-EnableSmbOAuth`, `-Zone`, `-ZonePlacementPolicy`
+* Modified cmdlet `Set-AzStorageObjectReplicationPolicy`
+   - Added parameter `-EnableMetric`
+* Modified cmdlet `Get-AzStorageTaskAssignment`
+   - Removed parameter `-Maxpagesize`
+   - Added parameter `-Top`
+* Added cmdlet `Get-AzStorageFileSymbolicLink`, `New-AzStorageFileSymbolicLink`, `Get-AzStorageSku`
+#### Az.StorageMover 1.6.0 
+* Modified cmdlet `New-AzStorageMoverJobDefinition`
+   - Added parameter `-JobType`
+* Added cmdlet `New-AzStorageMoverAzNfsFileShareEndpoint`, `New-AzStorageMoverMultiCloudConnectorEndpoint`, `Update-AzStorageMoverAzNfsFileShareEndpoint`, `Update-AzStorageMoverMultiCloudConnectorEndpoint`
+
 ## 14.4.0 - September 2025
 #### Az.Accounts 5.3.0 
 * Modified cmdlet `Invoke-AzRestMethod`
@@ -679,3 +740,4 @@
 
 
 
+