From 02bbcf9a8547ebda3ffaa8220cccd3dcbf8f4a17 Mon Sep 17 00:00:00 2001 From: Daniel Languiller Date: Mon, 12 Jan 2026 16:20:48 +1100 Subject: [PATCH 1/3] feature: add breaking change attribute for GetAzureKeyVaultSecret and GetAzureKeyVaultKey --- src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs | 2 ++ src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs | 2 ++ 2 files changed, 4 insertions(+) diff --git a/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs b/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs index 1c0c3ab2b665..9d35c70c6e27 100644 --- a/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs +++ b/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs @@ -19,11 +19,13 @@ using Microsoft.Azure.Commands.ResourceManager.Common.ArgumentCompleters; using Microsoft.Azure.KeyVault.WebKey; using Microsoft.Azure.Management.Internal.Resources.Utilities.Models; +using Microsoft.WindowsAzure.Commands.Common.CustomAttributes; using System.Linq; using System.Management.Automation; namespace Microsoft.Azure.Commands.KeyVault { + [GenericBreakingChangeWithVersion("Keys that are automatically created and managed by certificates will no longer be returned when listing keys. These keys will only be accessible through Get-AzKeyVaultCertificate.", "16.0.0", "7.0.0")] [Cmdlet("Get", ResourceManager.Common.AzureRMConstants.AzurePrefix + "KeyVaultKey", DefaultParameterSetName = ByVaultNameParameterSet)] [OutputType(typeof(PSKeyVaultKeyIdentityItem), typeof(PSKeyVaultKey), typeof(PSDeletedKeyVaultKeyIdentityItem), typeof(PSDeletedKeyVaultKey))] public class GetAzureKeyVaultKey : KeyVaultCmdletBase diff --git a/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs b/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs index 470770b0e120..6bfff87852ee 100644 --- a/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs +++ b/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs @@ -16,6 +16,7 @@ using Microsoft.Azure.Commands.KeyVault.Models.Secret; using Microsoft.Azure.Commands.ResourceManager.Common.ArgumentCompleters; using Microsoft.Azure.Management.Internal.Resources.Utilities.Models; +using Microsoft.WindowsAzure.Commands.Common.CustomAttributes; using System; using System.Management.Automation; using System.Runtime.InteropServices; @@ -23,6 +24,7 @@ namespace Microsoft.Azure.Commands.KeyVault { + [GenericBreakingChangeWithVersion("Secrets that are automatically created and managed by certificates will no longer be returned when listing secrets. These secrets will only be accessible through Get-AzKeyVaultCertificate.", "16.0.0", "7.0.0")] [Cmdlet("Get", ResourceManager.Common.AzureRMConstants.AzurePrefix + "KeyVaultSecret", DefaultParameterSetName = ByVaultNameParameterSet)] [OutputType(typeof(PSKeyVaultSecretIdentityItem), typeof(PSKeyVaultSecret), typeof(PSDeletedKeyVaultSecretIdentityItem), typeof(PSDeletedKeyVaultSecret), typeof(string))] public class GetAzureKeyVaultSecret : KeyVaultCmdletBase From 0285d31779b1528962557ffcd36de9470488170e Mon Sep 17 00:00:00 2001 From: Daniel Languiller Date: Mon, 12 Jan 2026 16:51:30 +1100 Subject: [PATCH 2/3] feature: adjust wording of breaking change msg --- src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs | 2 +- src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs b/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs index 9d35c70c6e27..b0580ba601af 100644 --- a/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs +++ b/src/KeyVault/KeyVault/Commands/Key/GetAzureKeyVaultKey.cs @@ -25,7 +25,7 @@ namespace Microsoft.Azure.Commands.KeyVault { - [GenericBreakingChangeWithVersion("Keys that are automatically created and managed by certificates will no longer be returned when listing keys. These keys will only be accessible through Get-AzKeyVaultCertificate.", "16.0.0", "7.0.0")] + [GenericBreakingChangeWithVersion("Certificate-backed keys will no longer be returned when listing keys. Use the certificate cmdlets (Get-AzKeyVaultCertificate) to manage these keys.", "16.0.0", "7.0.0")] [Cmdlet("Get", ResourceManager.Common.AzureRMConstants.AzurePrefix + "KeyVaultKey", DefaultParameterSetName = ByVaultNameParameterSet)] [OutputType(typeof(PSKeyVaultKeyIdentityItem), typeof(PSKeyVaultKey), typeof(PSDeletedKeyVaultKeyIdentityItem), typeof(PSDeletedKeyVaultKey))] public class GetAzureKeyVaultKey : KeyVaultCmdletBase diff --git a/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs b/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs index 6bfff87852ee..12a90a391031 100644 --- a/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs +++ b/src/KeyVault/KeyVault/Commands/Secret/GetAzureKeyVaultSecret.cs @@ -24,7 +24,7 @@ namespace Microsoft.Azure.Commands.KeyVault { - [GenericBreakingChangeWithVersion("Secrets that are automatically created and managed by certificates will no longer be returned when listing secrets. These secrets will only be accessible through Get-AzKeyVaultCertificate.", "16.0.0", "7.0.0")] + [GenericBreakingChangeWithVersion("Certificate-backed secrets will no longer be returned when listing secrets. Use the certificate cmdlets (Get-AzKeyVaultCertificate) to manage these secrets.", "16.0.0", "7.0.0")] [Cmdlet("Get", ResourceManager.Common.AzureRMConstants.AzurePrefix + "KeyVaultSecret", DefaultParameterSetName = ByVaultNameParameterSet)] [OutputType(typeof(PSKeyVaultSecretIdentityItem), typeof(PSKeyVaultSecret), typeof(PSDeletedKeyVaultSecretIdentityItem), typeof(PSDeletedKeyVaultSecret), typeof(string))] public class GetAzureKeyVaultSecret : KeyVaultCmdletBase From 13b426f29efdf5263b760794e3eb1d2998732372 Mon Sep 17 00:00:00 2001 From: Daniel Languiller Date: Mon, 9 Feb 2026 15:43:52 +1100 Subject: [PATCH 3/3] Update ChangeLog.md for breaking change notification --- src/KeyVault/KeyVault/ChangeLog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/src/KeyVault/KeyVault/ChangeLog.md b/src/KeyVault/KeyVault/ChangeLog.md index 2664686d2583..05f6739bd5b3 100644 --- a/src/KeyVault/KeyVault/ChangeLog.md +++ b/src/KeyVault/KeyVault/ChangeLog.md @@ -18,6 +18,7 @@ - Additional information about change #1 --> ## Upcoming Release +* Added upcoming breaking change warning messages to `Get-AzKeyVaultKey` and `Get-AzKeyVaultSecret` for filtering certificate-backed keys and secrets. ## Version 6.4.2 * Updated Azure.Core from 1.47.3 to 1.50.0