Skip to content

fix: merging dev to main#440

Open
Priyanka-Microsoft wants to merge 18 commits into
mainfrom
dev
Open

fix: merging dev to main#440
Priyanka-Microsoft wants to merge 18 commits into
mainfrom
dev

Conversation

@Priyanka-Microsoft
Copy link
Copy Markdown
Collaborator

Purpose

  • ...
    This pull request updates role assignment naming from "Azure AI User" to "Foundry User" across documentation and infrastructure code, and also upgrades the Bicep template version used to generate the main infrastructure JSON. Additionally, it reorders some dependencies in the generated ARM templates for improved clarity and consistency.

Role naming updates:

  • Changed the assigned role name from "Azure AI User" to "Foundry User" in both the documentation (LocalDevelopmentSetup.md) and infrastructure Bicep files (main.bicep, main_custom.bicep). The role definition ID remains the same, but the label/comment and documentation now consistently use "Foundry User". [1] [2] [3]

Infrastructure and template updates:

  • Upgraded the Bicep compiler version from 0.42.1.51946 to 0.43.8.12551 throughout the generated main.json ARM template, resulting in updated template hashes and minor formatting changes. [1] [2] [3] [4] [5] [6] [7] [8] [9]

ARM template dependency improvements:

  • Reordered the dependsOn arrays for certain resources in main.json to improve logical ordering and clarity (e.g., swapping the order of private DNS zone dependencies). [1] [2]

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

dependabot Bot and others added 16 commits May 2, 2026 00:22
Bumps the all-frontend-deps group in /src/frontend with 21 updates:

| Package | From | To |
| --- | --- | --- |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.73.6` | `9.73.8` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.323` | `2.0.325` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.2` | `4.2.4` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.0` |
| [axios](https://github.com/axios/axios) | `1.15.0` | `1.15.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.7.0` | `1.14.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.8` | `8.5.13` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.2.2` | `4.2.4` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.2` | `7.14.2` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.2` | `4.2.4` |
| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.0` |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.6.2` | `5.9.0` |
| [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.2.0` | `5.3.2` |
| [eslint](https://github.com/eslint/eslint) | `10.1.0` | `10.2.1` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.1` | `7.1.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.5.0` |
| [rollup](https://github.com/rollup/rollup) | `4.60.1` | `4.60.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.3` | `8.0.10` |
| [vite-plugin-svgr](https://github.com/pd4d10/vite-plugin-svgr) | `5.0.0` | `5.2.0` |


Updates `@fluentui/react-components` from 9.73.6 to 9.73.8
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-icons` from 2.0.323 to 2.0.325
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@tailwindcss/vite` from 4.2.2 to 4.2.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.4/packages/@tailwindcss-vite)

Updates `autoprefixer` from 10.4.27 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.0)

Updates `axios` from 1.15.0 to 1.15.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.15.2)

Updates `lucide-react` from 1.7.0 to 1.14.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.14.0/packages/lucide-react)

Updates `postcss` from 8.5.8 to 8.5.13
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.13)

Updates `@tailwindcss/postcss` from 4.2.2 to 4.2.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.4/packages/@tailwindcss-postcss)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `react-router-dom` from 7.13.2 to 7.14.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.2/packages/react-router-dom)

Updates `tailwindcss` from 4.2.2 to 4.2.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.4/packages/tailwindcss)

Updates `uuid` from 13.0.0 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v13.0.0...v14.0.0)

Updates `@azure/msal-browser` from 5.6.2 to 5.9.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.6.2...msal-browser-v5.9.0)

Updates `@azure/msal-react` from 5.2.0 to 5.3.2
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-react-v5.2.0...msal-react-v5.3.2)

Updates `eslint` from 10.1.0 to 10.2.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.1.0...v10.2.1)

Updates `eslint-plugin-react-hooks` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `globals` from 17.4.0 to 17.5.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.4.0...v17.5.0)

Updates `rollup` from 4.60.1 to 4.60.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.1...v4.60.2)

Updates `vite` from 8.0.3 to 8.0.10
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite)

Updates `vite-plugin-svgr` from 5.0.0 to 5.2.0
- [Release notes](https://github.com/pd4d10/vite-plugin-svgr/releases)
- [Commits](pd4d10/vite-plugin-svgr@v5.0.0...v5.2.0)

---
updated-dependencies:
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.73.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.325
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: lucide-react
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: postcss
  dependency-version: 8.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: react-router-dom
  dependency-version: 7.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: tailwindcss
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: "@azure/msal-react"
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: globals
  dependency-version: 17.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: rollup
  dependency-version: 4.60.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: vite
  dependency-version: 8.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: vite-plugin-svgr
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the all-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [microsoft/template-validation-action](https://github.com/microsoft/template-validation-action) | `0.4.3` | `0.4.4` |
| [azure/login](https://github.com/azure/login) | `2` | `3` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.5` | `47.0.6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `microsoft/template-validation-action` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/microsoft/template-validation-action/releases)
- [Commits](microsoft/template-validation-action@v0.4.3...v0.4.4)

Updates `azure/login` from 2 to 3
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@v2...v3)

Updates `tj-actions/changed-files` from 47.0.5 to 47.0.6
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@22103cc...9426d40)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: microsoft/template-validation-action
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: azure/login
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the all-backend-deps group in /src/backend with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [semantic-kernel](https://github.com/microsoft/semantic-kernel) | `1.41.1` | `1.41.3` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| azure-ai-projects | `2.0.1` | `2.1.0` |


Updates `semantic-kernel` from 1.41.1 to 1.41.3
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.41.1...python-1.41.3)

Updates `opentelemetry-sdk` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-api` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `azure-ai-projects` from 2.0.1 to 2.1.0

---
updated-dependencies:
- dependency-name: semantic-kernel
  dependency-version: 1.41.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
- Enable infrastructure encryption (double encryption) for storage account
- Add Security solution to Log Analytics workspace for SecurityEvent table
- Add Windows Security Audit Event Logs (EventID 4624/4625) to data collection rules
- Route Microsoft-SecurityEvent stream to Log Analytics in both main.bicep and main_custom.bicep

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Revert the Microsoft.OperationsManagement/solutions 'Security' resource and the Microsoft-SecurityEvent data source/dataflow added in the previous commit. The SecurityEvent table is not provisioned by OMSGallery/Security in modern subscriptions and this workload has no Windows VMs to source the events, which was causing 'InvalidOutputTable' deployment failures. Retain only the storage account double-encryption change.
Address PR review: keep the Windows Security event DCR but use the always-available 'Microsoft-Event' stream (Event table) instead of 'Microsoft-SecurityEvent' (which requires Sentinel). Apply the reviewer-suggested xPathQueries filter 'Security!*[System[(band(Keywords,13510798882111488)) and (EventID != 4624)]]' in both main.bicep and main_custom.bicep, and add the matching dataflow.
refactor: Updated Foundry Roles name
Resolves conflicts:
- requirements.txt: keep higher OT 1.41.1/0.62b1 & azure-ai-projects 2.1.0, add fastapi instrumentation at 0.62b1
- package.json: keep higher eslint v10, msal, uuid; add overrides block from dev
- package-lock.json: regenerated with overrides via npm install --legacy-peer-deps

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Resolves pip ResolutionImpossible errors in lint, backend_tests, and
docker-build jobs:

- semantic-kernel 1.41.3 requires azure-ai-projects~=1.0.0b12 (cannot use 2.1.0)
- azure-monitor-opentelemetry 1.8.7 pins opentelemetry-sdk==1.40 (cannot use 1.41.1)

Reverted to versions compatible with both umbrella packages. The 2.1.0
azure-ai-projects pin in dependabotchanges was incompatible with the
semantic-kernel version present in the repo and was previously masked
because CI didn't run on that branch.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Docker build fails (npm install, no --legacy-peer-deps) because
eslint-plugin-react@7.37.5 only supports eslint up to v9.7.

Downgrade eslint and @eslint/js back to ^9.39.2 (matches dev) to allow
clean install. Per known-issues table: keep eslint at v9 until
eslint-plugin-react supports v10.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Addresses Copilot review feedback on PR #438:
- Add engines.node: >=20 (uuid@14 and msal-react@5 require Node 20+;
  Dockerfile uses node:22 so this codifies the intended minimum)
- npm update @babel/helpers @babel/runtime to bring transitives back
  to 7.29.2 (avoid unintended transitive downgrades from clean install)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
react-router-dom@7 ships its own TypeScript types (./dist/index.d.ts),
making @types/react-router-dom (v5-era) obsolete and a potential source
of type conflicts. Codebase doesn't use any v5-only types
(RouteComponentProps, withRouter, etc.). Frontend build verified.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- Set ingressAllowInsecure: false on backend and frontend container apps in main.bicep and main_custom.bicep (SFI: disallow plain HTTP at public ingress).
- Extract DCR Log Analytics destination name into a new variable 'dcrLogAnalyticsDestinationName' and use it across the destination definition and dataflows in both bicep files.
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request aligns “Foundry User” role naming across the documentation and Bicep templates, and refreshes the generated ARM template (main.json) with a newer Bicep compiler output (including minor ordering/formatting changes).

Changes:

  • Renamed the role label/comment from “Azure AI User” to “Foundry User” in infra/main.bicep and infra/main_custom.bicep.
  • Updated docs/LocalDevelopmentSetup.md to instruct assigning the “Foundry User” role via az role assignment create.
  • Regenerated infra/main.json with Bicep 0.43.8.12551, updating template hashes and reordering some dependsOn entries.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
infra/main.json Regenerated ARM template with updated Bicep version metadata and minor dependency ordering/formatting changes.
infra/main.bicep Updates the role assignment comment/label to “Foundry User” while keeping the same role definition GUID.
infra/main_custom.bicep Mirrors the same role label/comment change as main.bicep.
docs/LocalDevelopmentSetup.md Updates role assignment instructions to reference “Foundry User”.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +256 to 260
# Assign Foundry User role
az role assignment create \
--assignee <aad-user-upn> \
--role "Azure AI User" \
--role "Foundry User" \
--scope /subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.CognitiveServices/accounts/<azure-openai-name>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 21, 2026

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL222138582% 
report-only-changed-files is enabled. No files were changed during this commit :)

Tests Skipped Failures Errors Time
282 0 💤 0 ❌ 0 🔥 9.322s ⏱️

fix: address SFI security compliance issues
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 19 out of 20 changed files in this pull request and generated 1 comment.

Comment thread infra/main.json
Comment on lines 6 to +9
"_generator": {
"name": "bicep",
"version": "0.42.1.51946",
"templateHash": "1333265003476738511"
"templateHash": "18156607440911418905"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants