[BC]SecurityInsights Module Breaking Changes Announcement Date Update by JiaSeng-v · Pull Request #29133 · Azure/azure-powershell

JiaSeng-v · 2026-02-04T01:35:32Z

Description

Mandatory Checklist

Please choose the target release of Azure PowerShell. (⚠️Target release is a different concept from API readiness. Please click below links for details.)
- General release
- Public preview
- Private preview
- Engineering build
- No need for a release
Check this box to confirm: I have read the Submitting Changes section of CONTRIBUTING.md and reviewed the following information:

SHOULD update ChangeLog.md file(s) appropriately
- Update src/{{SERVICE}}/{{SERVICE}}/ChangeLog.md.
  - A snippet outlining the change(s) made in the PR should be written under the ## Upcoming Release header in the past tense.
- Should not change ChangeLog.md if no new release is required, such as fixing test case only.
SHOULD regenerate markdown help files if there is cmdlet API change. Instruction
SHOULD have proper test coverage for changes in pull request.
SHOULD NOT adjust version of module manually in pull request

azure-client-tools-bot-prd · 2026-02-04T01:35:36Z

Thanks for your contribution! The pull request validation has started. Please revisit this comment for updated status.

Copilot

Pull request overview

This PR updates the breaking change announcement dates for the SecurityInsights module from Az v15.0.0 (November 19th 2025) to Az v16.0.0 (May 2025/2026). The changes include updates to preview messages, breaking change effective dates, assembly version, module manifest metadata, and various documentation examples.

Changes:

Updated breaking change announcement from Az v15.0.0 to Az v16.0.0
Changed assembly version from 3.2.0 to 3.2.1
Updated various GUIDs in solution and documentation files
Modified help documentation examples with updated GUIDs and minor text changes

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
src/SecurityInsights/SecurityInsights/help/New-AzSentinelIncidentTeam.md	Updated example output with different tenant GUID
src/SecurityInsights/SecurityInsights/help/New-AzSentinelAlertRule.md	Modified example with spelling changes and removed parameter
src/SecurityInsights/SecurityInsights/help/Get-AzSentinelEntityInsight.md	Updated example with different entity GUID
src/SecurityInsights/SecurityInsights/help/Get-AzSentinelEntityActivity.md	Changed description text with spelling error
src/SecurityInsights/SecurityInsights/help/Get-AzSentinelEntity.md	Updated variable names in example
src/SecurityInsights/SecurityInsights/Az.SecurityInsights.psd1	Updated generation date, Az.Accounts version requirement, and formatting
src/SecurityInsights/SecurityInsights.sln	Updated project GUID reference
src/SecurityInsights/SecurityInsights.Autorest/generate-info.json	Updated generation GUID
src/SecurityInsights/SecurityInsights.Autorest/docs/Az.SecurityInsights.md	Updated module GUID
src/SecurityInsights/SecurityInsights.Autorest/README.md	Updated breaking change dates and preview messages from v15.0.0 to v16.0.0
src/SecurityInsights/SecurityInsights.Autorest/Properties/AssemblyInfo.cs	Incremented version from 3.2.0 to 3.2.1

Copilot · 2026-02-04T01:45:46Z

src/SecurityInsights/SecurityInsights/help/New-AzSentinelAlertRule.md

 ### Example 5: Create a Scheduled Alert Rule
 ```powershell
-New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Execution Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventID == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10 -TriggerOperator "GreaterThan"
+New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Exection Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventId == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10


The query was changed from "EventID == 4688" to "EventId == 4688". This change in casing could potentially affect the query's functionality depending on whether the underlying schema uses case-sensitive field names. Please verify that "EventId" is the correct field name in the SecurityEvent table schema.

Copilot · 2026-02-04T01:45:47Z

src/SecurityInsights/SecurityInsights.Autorest/README.md

-        deprecated-by-azversion: 15.0.0
-        change-effective-date: 2025/11/19
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2025/05


Inconsistent breaking change effective dates within the same file. Line 366 specifies "2025/05" while line 375 specifies "2026/05". These should be consistent and aligned with the same breaking change announcement for Az v16.0.0.

Copilot · 2026-02-04T01:45:47Z

src/SecurityInsights/SecurityInsights/help/New-AzSentinelAlertRule.md

 ### Example 5: Create a Scheduled Alert Rule
 ```powershell
-New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Execution Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventID == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10 -TriggerOperator "GreaterThan"
+New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Exection Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventId == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10


Spelling error in the example command. "Exection" should be "Execution" in the DisplayName parameter value.

Copilot · 2026-02-04T01:45:47Z

src/SecurityInsights/SecurityInsights/help/Get-AzSentinelEntityActivity.md

 ```

-This command gets insights and activities for an Entity by object
+This command gets insights and activies for an Entity by object


Spelling error in the example description. "activies" should be "activities".

Suggested change

This command gets insights and activies for an Entity by object

This command gets insights and activities for an Entity by object

Copilot · 2026-02-04T01:45:47Z

src/SecurityInsights/SecurityInsights/help/Get-AzSentinelEntity.md

+$Entitys = Get-AzSentinelEntity -ResourceGroupName "myResourceGroupName" -workspaceName "myWorkspaceName"
+ $Entitys[0] | Get-AzSentinelEntity


Variable naming inconsistency. The variable is changed from "Entities" to "Entitys", but "Entitys" is not grammatically correct. The plural of "Entity" should be "Entities".

Suggested change

$Entitys = Get-AzSentinelEntity -ResourceGroupName "myResourceGroupName" -workspaceName "myWorkspaceName"

$Entitys[0] | Get-AzSentinelEntity

$Entities = Get-AzSentinelEntity -ResourceGroupName "myResourceGroupName" -workspaceName "myWorkspaceName"

$Entities[0] | Get-AzSentinelEntity

Copilot · 2026-02-04T01:45:48Z

src/SecurityInsights/SecurityInsights/help/New-AzSentinelAlertRule.md

 ### Example 5: Create a Scheduled Alert Rule
 ```powershell
-New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Execution Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventID == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10 -TriggerOperator "GreaterThan"
+New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Exection Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventId == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10


The TriggerOperator parameter was removed from this example, but according to line 654 in this same file, TriggerOperator is a required parameter for the Scheduled parameter set. Removing it will make this example non-functional. The parameter should be retained in the example.

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

src/SecurityInsights/SecurityInsights/ChangeLog.md

 -->

 ## Upcoming Release
+* Update preannouncement breaking changes date to May 2026.


src/SecurityInsights/SecurityInsights.Autorest/README.md

    set:
      preview-announcement:
-        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v15.0.0, to be released on November 19th 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"
+        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released on May 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"


src/SecurityInsights/SecurityInsights.Autorest/README.md

    set:
      preview-announcement:
-        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v15.0.0, to be released on November 19th 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"
+        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released on May 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"


src/SecurityInsights/SecurityInsights.Autorest/README.md

      breaking-change:
        deprecated-by-version: 4.0.0
-        deprecated-by-azversion: 15.0.0
-        change-effective-date: 2025/11/19
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2025/05


src/SecurityInsights/SecurityInsights.Autorest/docs/Az.SecurityInsights.md

 ---
 Module Name: Az.SecurityInsights
-Module Guid: a632df01-f50e-49fb-b2de-e91a0090c840
+Module Guid: 8e31f664-41a6-46c6-ba93-5fc34733ec88


Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 7 comments.

Copilot · 2026-03-26T10:44:05Z

src/SecurityInsights/SecurityInsights/ChangeLog.md

 -->

 ## Upcoming Release
+* Updated preannouncement breaking changes date to May 2026.


The changelog entry uses “preannouncement”, but the existing entry below uses “Preannounced”. Please update this wording for consistency and correct grammar (e.g., “preannounced breaking changes date”).

Suggested change

* Updated preannouncement breaking changes date to May 2026.

* Updated preannounced breaking changes date to May 2026.

Copilot · 2026-03-26T10:44:06Z

src/SecurityInsights/SecurityInsights.Autorest/README.md

      preview-announcement:
-        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v15.0.0, to be released on November 19th 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"
+        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released on May 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"


The preview breaking-change banner now says Az v16.0.0 will be released in “May 2025”, which is already in the past and also conflicts with the changelog update to May 2026. Please correct the month/year in this preview message so users see an accurate breaking-change announcement date.

Copilot · 2026-03-26T10:44:06Z

src/SecurityInsights/SecurityInsights.Autorest/README.md

    set:
      preview-announcement:
-        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v15.0.0, to be released on November 19th 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"
+        preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released on May 2025. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"


Same issue as above: this preview breaking-change banner states “May 2025”, which is in the past and conflicts with the intended May 2026 announcement. Please update the date in this message to match the actual planned breaking-change effective date.

Copilot · 2026-03-26T10:44:06Z

src/SecurityInsights/SecurityInsights.Autorest/README.md

-        deprecated-by-azversion: 15.0.0
-        change-effective-date: 2025/11/19
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2025/05


change-effective-date: 2025/05 is inconsistent with the other breaking-change entries updated to Az 16.0.0 and with the changelog note indicating May 2026. If the effective date moved to May 2026, update this value accordingly; otherwise, align the changelog and preview messages with the actual effective date.

Suggested change

change-effective-date: 2025/05

change-effective-date: 2026/05

Copilot · 2026-03-26T10:44:07Z

src/SecurityInsights/SecurityInsights.sln

+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Az.SecurityInsights", "..\..\generated\SecurityInsights\SecurityInsights.Autorest\Az.SecurityInsights.csproj", "{D620B181-286B-487D-8112-7AFB12BC48E0}"
 EndProject


This PR is scoped to updating the breaking change announcement date, but this change updates the Az.SecurityInsights project GUID in the solution. Please confirm this GUID change is intentional; if it’s an accidental regeneration/noise, revert it to keep the PR focused and reduce downstream merge conflicts.

Copilot · 2026-03-26T10:44:07Z

src/SecurityInsights/SecurityInsights.Autorest/docs/Az.SecurityInsights.md

 ---
 Module Name: Az.SecurityInsights
-Module Guid: a632df01-f50e-49fb-b2de-e91a0090c840
+Module Guid: 8e31f664-41a6-46c6-ba93-5fc34733ec88


This PR is about updating breaking-change announcement dates, but it also changes the Module Guid in the generated help metadata. Please confirm this GUID change is intentional (e.g., required by a regeneration pipeline); otherwise revert to avoid unrelated churn in documentation artifacts.

Copilot · 2026-03-26T10:44:07Z

src/SecurityInsights/SecurityInsights.Autorest/generate-info.json

@@ -1,3 +1,3 @@
 {
-  "generate_Id": "a062268b-a8f0-4e2a-a487-273786173c10"
+  "generate_Id": "5d560291-eed6-4aed-bee9-cd5c6119c97f"


This PR appears focused on a breaking-change date update, but it also changes the generator tracking ID. If this is not required for the date change (and was produced by an incidental regen), consider reverting to avoid unrelated diffs.

[BC]SecurityInsights Module Breaking Changes Announcement Date Update

03d64f9

Copilot AI review requested due to automatic review settings February 4, 2026 01:35

JiaSeng-v added Breaking Change Preannounce This PR adds preannouncement about upcoming breaking change autorest v4 migration pr migrating module from generated by autorest.powershell v3 to v4 labels Feb 4, 2026

JiaSeng-v mentioned this pull request Feb 4, 2026

[PS] Migrate SecurityInsights module to autorest v4 #28447

Open

6 tasks

Copilot started reviewing on behalf of JiaSeng-v February 4, 2026 01:37 View session

Copilot AI reviewed Feb 4, 2026

View reviewed changes

JiaSeng-v added 2 commits February 12, 2026 13:34

update ChangeLog.md

0c50afe

fix merge conflict

a2e201b

Copilot AI review requested due to automatic review settings March 16, 2026 03:45

Copilot started reviewing on behalf of JiaSeng-v March 16, 2026 03:47 View session

Copilot AI reviewed Mar 16, 2026

View reviewed changes

NoriZC self-assigned this Mar 26, 2026

Update breaking changes date in ChangeLog

ee245bd

NoriZC previously approved these changes Mar 26, 2026

View reviewed changes

Merge branch 'main' into jiaseng/SecurityInsights-breakingchanges

950777a

Copilot AI review requested due to automatic review settings March 26, 2026 10:38

NoriZC dismissed their stale review via 950777a March 26, 2026 10:38

NoriZC enabled auto-merge (squash) March 26, 2026 10:39

Copilot started reviewing on behalf of NoriZC March 26, 2026 10:40 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

jsntcy requested a review from VeryEarly April 7, 2026 03:46

JiaSeng-v added 2 commits April 7, 2026 12:26

slight adjustments and rebuild

fa29558

fix conflict

70288d0

VeryEarly approved these changes Apr 8, 2026

View reviewed changes

NoriZC merged commit 20461f5 into Azure:main Apr 8, 2026
12 checks passed

	This command gets insights and activies for an Entity by object
	This command gets insights and activities for an Entity by object

		$Entitys = Get-AzSentinelEntity -ResourceGroupName "myResourceGroupName" -workspaceName "myWorkspaceName"
		$Entitys[0] \| Get-AzSentinelEntity

	* Updated preannouncement breaking changes date to May 2026.
	* Updated preannounced breaking changes date to May 2026.

	change-effective-date: 2025/05
	change-effective-date: 2026/05

		Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Az.SecurityInsights", "..\..\generated\SecurityInsights\SecurityInsights.Autorest\Az.SecurityInsights.csproj", "{D620B181-286B-487D-8112-7AFB12BC48E0}"
		EndProject

Conversation

JiaSeng-v commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Mandatory Checklist

Uh oh!

azure-client-tools-bot-prd bot commented Feb 4, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

JiaSeng-v commented Feb 4, 2026 •

edited

Loading