Release 1.5.0

CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [1.5.0] - 2026-04-18
+
+### Added
+- Added strict grouped `chains` artifact reuse for compatible local source JSON so repeated family
+  reruns can reuse already-produced evidence truthfully instead of recollecting every backing
+  command.
+- Added YAML-backed Azure DevOps pipeline evidence so `devops` and `chains deployment-path` can
+  admit repo-backed Azure service connections and variable groups from real Azure Repos pipeline
+  definitions and same-repo local templates.
+
+### Changed
+- Batched the expensive Graph fanout behind `role-trusts`, which keeps live grouped `chains`
+  families responsive on fresh runs instead of stalling on serial trust-edge collection.
+- Tightened reduced-view and maintenance-mode truthfulness across `permissions`,
+  `tokens-credentials`, `credential-path`, `deployment-path`, `functions`, `arm-deployments`, and
+  `resource-trusts` so reduced or partial visibility reads as exactly that instead of broader proof.
+- Bumped the published package and output schema version to `1.5.0` for the completed minor
+  release boundary.
+
 ## [1.4.0] - 2026-04-12
 
 ### Added

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "azurefox"
-version = "1.4.0"
+version = "1.5.0"
 description = "AzureFox - offensive-focused Azure situational awareness CLI"
 readme = "README.md"
 requires-python = ">=3.11"

src/azurefox/__init__.py

@@ -2,4 +2,4 @@
 
 __all__ = ["__version__"]
 
-__version__ = "1.4.0"
+__version__ = "1.5.0"

src/azurefox/models/common.py

@@ -6,7 +6,7 @@
 
 from pydantic import BaseModel, Field, model_validator
 
-SCHEMA_VERSION = "1.4.0"
+SCHEMA_VERSION = "1.5.0"
 
 
 class OutputMode(StrEnum):

tests/golden/acr.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "acr",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/aks.json

@@ -79,7 +79,7 @@
   "metadata": {
     "command": "aks",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/api-mgmt.json

@@ -56,7 +56,7 @@
   "metadata": {
     "command": "api-mgmt",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/app-services.json

@@ -56,7 +56,7 @@
   "metadata": {
     "command": "app-services",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/application-gateway.json

@@ -118,7 +118,7 @@
   "metadata": {
     "command": "application-gateway",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/arm-deployments.json

@@ -120,7 +120,7 @@
     "command": "arm-deployments",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/auth-policies.json

@@ -107,7 +107,7 @@
   "metadata": {
     "command": "auth-policies",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/automation.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "automation",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/container-apps.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "container-apps",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/container-instances.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "container-instances",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/cross-tenant.json

@@ -71,7 +71,7 @@
     "command": "cross-tenant",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/databases.json

@@ -118,7 +118,7 @@
   "metadata": {
     "command": "databases",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/devops.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "devops",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/dns.json

@@ -2,7 +2,7 @@
   "metadata": {
     "command": "dns",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "token_source": null

tests/golden/endpoints.json

@@ -108,7 +108,7 @@
     "command": "endpoints",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/env-vars.json

@@ -110,7 +110,7 @@
     "command": "env-vars",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/functions.json

@@ -40,7 +40,7 @@
   "metadata": {
     "command": "functions",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/inventory.json

@@ -4,7 +4,7 @@
     "command": "inventory",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/keyvault.json

@@ -108,7 +108,7 @@
     "command": "keyvault",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/lighthouse.json

@@ -124,7 +124,7 @@
     "command": "lighthouse",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/managed-identities.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "managed-identities",
     "generated_at": "2026-04-12T04:41:01.427084Z",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/network-effective.json

@@ -50,7 +50,7 @@
     "command": "network-effective",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/network-ports.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "network-ports",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/nics.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "nics",
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/permissions.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "permissions",
     "generated_at": "2026-04-13T04:16:02.407341Z",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/principals.json

@@ -5,7 +5,7 @@
     "command": "principals",
     "devops_organization": null,
     "generated_at": "2026-04-12T18:56:06.240867Z",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/privesc.json

@@ -5,7 +5,7 @@
     "command": "privesc",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/rbac.json

@@ -4,7 +4,7 @@
     "command": "rbac",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/resource-trusts.json

@@ -51,7 +51,7 @@
     "command": "resource-trusts",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/role-trusts.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "role-trusts",
     "generated_at": "2026-04-13T04:32:36.867098Z",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/snapshots-disks.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "command": "snapshots-disks",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/storage.json

@@ -24,7 +24,7 @@
     "command": "storage",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/tokens-credentials.json

@@ -168,7 +168,7 @@
     "command": "tokens-credentials",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/vms.json

@@ -16,7 +16,7 @@
     "command": "vms",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/vmss.json

@@ -5,7 +5,7 @@
     "command": "vmss",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/whoami.json

@@ -12,7 +12,7 @@
     "command": "whoami",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": "fixture"

tests/golden/workloads.json

@@ -6,7 +6,7 @@
     "command": "workloads",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.4.0",
+    "schema_version": "1.5.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/test_models.py

@@ -29,7 +29,7 @@
 
 
 def test_schema_version() -> None:
-    assert SCHEMA_VERSION == "1.4.0"
+    assert SCHEMA_VERSION == "1.5.0"
 
 
 def test_collection_issue_scope_defaults_from_context_collector() -> None: