chore: Update Bicep AVM module versions and Azure Resource API versions by Abdul-Microsoft · Pull Request #558 · microsoft/content-processing-solution-accelerator · GitHub

Purpose

Update all AVM (Azure Verified Modules) Bicep module versions to latest stable releases across 11 infrastructure files
Update all Azure Resource API versions to latest GA versions
Fix breaking changes introduced by newer module versions
Fix container registry deployment error (NetworkRuleNotSupported) for Standard SKU caused by AVM v0.12.1 behavior change

Does this introduce a breaking change?

Yes
No

Golden Path Validation

I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

All 42 AVM module references updated to latest stable versions
All 12 Azure Resource API versions updated to latest GA versions
Breaking change fix: dailyQuotaGb type changed from int to string in operational-insights/workspace 0.15.0
Breaking change fix: appLogsConfiguration inner property changed in app/managed-environment 0.13.2 — old logAnalyticsConfiguration (customerId/sharedKey) replaced with logAnalyticsWorkspaceResourceId (module now resolves workspace details internally)
Breaking change fix: networkRuleSetDefaultAction set to Allow (instead of null) for Standard SKU in container-registry 0.12.1 to prevent NetworkRuleNotSupported error
Bicep compilation succeeds with zero errors for both main.bicep and main_custom.bicep
Deployment succeeds for both WAF and non-WAF configurations

Other Information

Resolves AB#40544

Files Changed (11 bicep files):

infra/main.bicep - 23 AVM module version updates, API version updates, managed-environment breaking change fix
infra/main_custom.bicep - Mirror of main.bicep changes
infra/modules/container-registry.bicep - AVM version update + networkRuleSetDefaultAction fix for Standard SKU
infra/modules/log-analytics-workspace.bicep - AVM version update + dailyQuotaGb type fix
infra/modules/account/aifoundry.bicep - 7 avm-common-types imports + 4 API version updates
infra/modules/account/modules/dependencies.bicep - 4 avm-common-types imports + 2 API version updates
infra/modules/account/modules/keyVaultExport.bicep - 2 avm-common-types imports + 2 API version updates + typo fix
infra/modules/account/modules/project.bicep - 2 API version updates
infra/modules/key-vault.bicep - AVM version update
infra/modules/managed-identity.bicep - AVM version update
infra/modules/virtualNetwork.bicep - NSG + virtual-network AVM version updates

- Updated 42 AVM module references to latest stable versions across 11 bicep files - Updated 12 Azure Resource API versions to latest GA versions - Fixed breaking changes: - operational-insights/workspace 0.15.0: dailyQuotaGb type changed from int to string - app/managed-environment 0.13.2: appLogsConfiguration replaced with logAnalyticsWorkspaceResourceId - container-registry/registry 0.12.1: networkRuleSetDefaultAction set to 'Allow' for Standard SKU to prevent NetworkRuleNotSupported error (new module applies networkRuleSet when default is 'Deny') Resolves AB#40544 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot resolve the merge conflicts in this pull request

Co-authored-by: Abdul-Microsoft <192570837+Abdul-Microsoft@users.noreply.github.com>

Copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit 0c320d6. There was one conflicted file (infra/main.json) with two conflict regions:

Bicep compiler version and template hash — kept our branch's newer values (0.42.1.51946 / 14609948803601664660)
DNS zone dependency ordering in avmContentUnderstanding — kept our branch's order

All other files merged cleanly without conflicts.

Pull request overview

Updates the infrastructure layer to newer Azure Verified Modules (AVM) and newer Azure Resource API versions, including adjustments needed to accommodate breaking changes and an ACR deployment behavior change.

Changes:

Bump AVM module references across core main*.bicep templates and reusable infra modules.
Update multiple Azure resource API versions from older/preview to newer GA versions.
Apply targeted parameter changes for module breaking changes (e.g., Log Analytics quota type, Container Apps managed environment logging, ACR network rule defaults).

Reviewed changes

Copilot reviewed 11 out of 12 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
infra/main.bicep	Updates numerous AVM module versions and adjusts managed environment logging configuration for newer AVM module versions.
infra/main_custom.bicep	Mirrors main.bicep AVM/API updates and managed environment logging config changes for custom deployments.
infra/modules/container-registry.bicep	Updates ACR AVM module + common types import; adjusts network rule/export policy params to avoid Standard SKU deployment issues.
infra/modules/log-analytics-workspace.bicep	Updates Log Analytics workspace AVM module version, changes dailyQuotaGb to string, and updates existing workspace API version.
infra/modules/account/aifoundry.bicep	Updates avm-common-types imports and multiple resource API versions used by AI Foundry/Cognitive Services resources.
infra/modules/account/modules/dependencies.bicep	Updates avm-common-types imports, Cognitive Services API versions, and private-endpoint AVM module version.
infra/modules/account/modules/keyVaultExport.bicep	Updates avm-common-types imports and Key Vault API versions for setting secrets.
infra/modules/account/modules/project.bicep	Updates Cognitive Services and AI Project API versions (preview → GA).
infra/modules/key-vault.bicep	Updates Key Vault AVM module version.
infra/modules/managed-identity.bicep	Updates user-assigned identity AVM module version.
infra/modules/virtualNetwork.bicep	Updates NSG and VNet AVM module versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…-registry comment - Fix typo: 'ecrets' -> 'secrets' in keyVaultExport.bicep parameter description - Update container-registry.bicep comment to accurately describe networkRuleSetDefaultAction behavior Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

🎉 This PR is included in version 1.14.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

NPM (ContentProcessorWeb pnpm overrides): - websocket-driver -> ^0.7.5 (CRITICAL, microsoft#541) - axios 1.16.0 -> 1.18.0 (microsoft#558) - brace-expansion ^2.0.3 -> ^2.1.2 (microsoft#587) - fast-uri 3.1.2 -> 3.1.4 (microsoft#602/microsoft#604) - immutable ^5.1.5 -> ^5.1.8 (microsoft#600/microsoft#601) - js-yaml ^4.2.0 -> ^4.3.0 (microsoft#588) - shell-quote ^1.8.4 -> ^1.9.0 (microsoft#589) - svgo ^2.8.1 -> ^2.8.3 (microsoft#603) - react-router-dom 7.15.1 -> 7.18.1 (microsoft#611 DoS) Python (uv): - pillow 12.2.0 -> 12.3.0 (ContentProcessor) - pyasn1 0.6.3 -> 0.6.4 (ContentProcessor, Workflow) - mcp 1.25.0 -> 1.28.1 (Workflow); transitive mcp -> 1.29.0 (ContentProcessor) Deferred: react-router microsoft#610 (RSC CSRF, fixed only in v8.3.0 major; RSC mode unused by this CRA SPA). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 22668762-66d8-4311-b4c2-ee147376b71d

Abdul-Microsoft requested review from Avijit-Microsoft, Prajwal-Microsoft, Roopan-Microsoft, Vinay Sharma (Vinay-Microsoft), Anish Arora (aniaroramsft), dgp10801, nchandhi and Todd Herman (toherman-msft) as code owners April 22, 2026 03:53

Abdul-Microsoft temporarily deployed to production April 22, 2026 03:53 — with GitHub Actions Inactive

updated main.json

f2c8bf8

Copilot started work on behalf of Abdul-Microsoft April 22, 2026 05:41 View session

Merge origin/dev into feature/update-bicep-avm-versions-40544

0c320d6

Co-authored-by: Abdul-Microsoft <192570837+Abdul-Microsoft@users.noreply.github.com>

Copilot finished work on behalf of Abdul-Microsoft April 22, 2026 05:44

Copilot AI temporarily deployed to production April 22, 2026 06:30 Inactive

Abdul-Microsoft requested a review from Copilot April 22, 2026 06:36

Copilot started reviewing on behalf of Abdul-Microsoft April 22, 2026 06:37 View session

Copilot AI reviewed Apr 22, 2026

View reviewed changes

Comment thread infra/modules/container-registry.bicep Outdated

Comment thread infra/modules/account/modules/keyVaultExport.bicep Outdated

Comment thread infra/main.bicep

Comment thread infra/main_custom.bicep

Update infra/modules/container-registry.bicep

a3f38b9

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Abdul-Microsoft temporarily deployed to production April 22, 2026 06:42 — with GitHub Actions Inactive

Abdul-Microsoft temporarily deployed to production April 22, 2026 06:47 — with GitHub Actions Inactive

Roopan-Microsoft approved these changes Apr 22, 2026

View reviewed changes

Roopan-Microsoft merged commit c72b293 into dev Apr 22, 2026
5 checks passed

github-actions Bot added the released label Apr 28, 2026

Ayaz-Microsoft mentioned this pull request Jul 30, 2026

fix: dependabot package upgrades (critical/high security) #667

Open

chore: Update Bicep AVM module versions and Azure Resource API versions by Abdul-Microsoft · Pull Request #558 · microsoft/content-processing-solution-accelerator · GitHub

chore: Update Bicep AVM module versions and Azure Resource API versions - #558

chore: Update Bicep AVM module versions and Azure Resource API versions#558
Roopan-Microsoft merged 5 commits into
devfrom
feature/update-bicep-avm-versions-40544

Abdul-Microsoft commented Apr 22, 2026 •
edited
Loading

Uh oh!

Uh oh!

Abdul-Microsoft commented Apr 22, 2026

Uh oh!

Copilot AI commented Apr 22, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

chore: Update Bicep AVM module versions and Azure Resource API versions by Abdul-Microsoft · Pull Request #558 · microsoft/content-processing-solution-accelerator · GitHub

chore: Update Bicep AVM module versions and Azure Resource API versions - #558

Conversation

Abdul-Microsoft commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose

Does this introduce a breaking change?

Golden Path Validation

Deployment Validation

What to Check

Other Information

Files Changed (11 bicep files):

Uh oh!

Abdul-Microsoft commented Apr 22, 2026

Uh oh!

Copilot AI commented Apr 22, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Abdul-Microsoft commented Apr 22, 2026 •
edited
Loading