From e91820b91981660c82044b21d7b311dd60f015e0 Mon Sep 17 00:00:00 2001 From: James Voong Date: Mon, 23 Mar 2026 23:45:42 -0700 Subject: [PATCH 1/2] Add DnsResolver breaking change announcements to ChangeLog Announce upcoming breaking changes for the 2025-10-01-preview API migration: - Removed ActionBlockResponseCode parameter from DnsSecurityRule cmdlets - DnsResolverDomainList parameter no longer mandatory (ManagedDomainList alternative) - Domain parameter no longer mandatory (bulk upload alternative) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- src/DnsResolver/DnsResolver/ChangeLog.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/DnsResolver/DnsResolver/ChangeLog.md b/src/DnsResolver/DnsResolver/ChangeLog.md index f16ca63608b8..0244c55aa491 100644 --- a/src/DnsResolver/DnsResolver/ChangeLog.md +++ b/src/DnsResolver/DnsResolver/ChangeLog.md @@ -18,6 +18,9 @@ - Additional information about change #1 --> ## Upcoming Release +* [Breaking Change] Removed parameter `ActionBlockResponseCode` from `New-AzDnsResolverPolicyDnsSecurityRule` and `Update-AzDnsResolverPolicyDnsSecurityRule`. The block response code is no longer configurable. +* [Breaking Change] Parameter `DnsResolverDomainList` is no longer mandatory on `New-AzDnsResolverPolicyDnsSecurityRule`. DNS security rules now support `ManagedDomainList` as an alternative. +* [Breaking Change] Parameter `Domain` is no longer mandatory on `New-AzDnsResolverDomainList`. Domain lists now support bulk upload via `Invoke-AzDnsResolverBulkDnsResolverDomainList`. ## Version 1.2.1 * Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229 From 49f121a6391b7ae7c478553bafe1bb3e4f2baa44 Mon Sep 17 00:00:00 2001 From: James Voong Date: Tue, 24 Mar 2026 00:07:10 -0700 Subject: [PATCH 2/2] Add breaking-change directives and upcoming-breaking-changes entry - Add 3 breaking-change directives to README.md for runtime warnings: * ActionBlockResponseCode parameter removed from DnsSecurityRule cmdlets * DnsResolverDomainList parameter no longer mandatory * Domain parameter no longer mandatory - Add Az.DnsResolver section to upcoming-breaking-changes.md - All changes target Az v16.0.0 / module v2.0.0 / effective 2026/05/01 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../upcoming-breaking-changes.md | 36 +++++++++++++++++++ .../DnsResolver.Autorest/README.md | 30 ++++++++++++++++ 2 files changed, 66 insertions(+) diff --git a/documentation/breaking-changes/upcoming-breaking-changes.md b/documentation/breaking-changes/upcoming-breaking-changes.md index 6413ad5f8bbf..4c8871ce3f40 100644 --- a/documentation/breaking-changes/upcoming-breaking-changes.md +++ b/documentation/breaking-changes/upcoming-breaking-changes.md @@ -310,6 +310,42 @@ Preview modules are not included in this list. Read more about [module version t - This change will take effect on '5/1/2026'- The change is expected to take effect from Az version : '16.0.0' - The change is expected to take effect from version : '2.0.0' +## Az.DnsResolver + +### `New-AzDnsResolverPolicyDnsSecurityRule` + +- Cmdlet breaking-change will happen to all parameter sets + - The parameter 'ActionBlockResponseCode' is being removed. + - Change description: The block response code is no longer configurable in API version 2025-10-01-preview. + - This change will take effect on '05/01/2026' + - The change is expected to take effect from Az version : '16.0.0' + - The change is expected to take effect from version : '2.0.0' + +- Cmdlet breaking-change will happen to all parameter sets + - The parameter 'DnsResolverDomainList' will no longer be mandatory. + - Change description: DNS security rules now support 'ManagedDomainList' as an alternative to user-defined domain lists. + - This change will take effect on '05/01/2026' + - The change is expected to take effect from Az version : '16.0.0' + - The change is expected to take effect from version : '2.0.0' + +### `Update-AzDnsResolverPolicyDnsSecurityRule` + +- Cmdlet breaking-change will happen to all parameter sets + - The parameter 'ActionBlockResponseCode' is being removed. + - Change description: The block response code is no longer configurable in API version 2025-10-01-preview. + - This change will take effect on '05/01/2026' + - The change is expected to take effect from Az version : '16.0.0' + - The change is expected to take effect from version : '2.0.0' + +### `New-AzDnsResolverDomainList` + +- Cmdlet breaking-change will happen to all parameter sets + - The parameter 'Domain' will no longer be mandatory. + - Change description: Domain lists now support bulk upload via 'Invoke-AzDnsResolverBulkDnsResolverDomainList' as an alternative to inline domain specification. + - This change will take effect on '05/01/2026' + - The change is expected to take effect from Az version : '16.0.0' + - The change is expected to take effect from version : '2.0.0' + ## Az.KeyVault ### `Get-AzKeyVaultKey` diff --git a/src/DnsResolver/DnsResolver.Autorest/README.md b/src/DnsResolver/DnsResolver.Autorest/README.md index 2f35d1f85eed..baa3b6ac945a 100644 --- a/src/DnsResolver/DnsResolver.Autorest/README.md +++ b/src/DnsResolver/DnsResolver.Autorest/README.md @@ -129,4 +129,34 @@ directive: set: preview-announcement: preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released in May 2026. *\\r\\n* At least one change applies to this cmdlet. *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486 *\\r\\n**************************************************************************************************" + - where: + verb: New|Update + subject: PolicyDnsSecurityRule + set: + breaking-change: + deprecated-cmdlet-output-type: '' + change-description: The parameter 'ActionBlockResponseCode' has been removed. The block response code is no longer configurable in API version 2025-10-01-preview. + deprecated-by-version: 2.0.0 + deprecated-by-azversion: 16.0.0 + change-effective-date: 2026/05/01 + - where: + verb: New + subject: PolicyDnsSecurityRule + set: + breaking-change: + deprecated-cmdlet-output-type: '' + change-description: The parameter 'DnsResolverDomainList' is no longer mandatory. DNS security rules now support 'ManagedDomainList' as an alternative to user-defined domain lists. + deprecated-by-version: 2.0.0 + deprecated-by-azversion: 16.0.0 + change-effective-date: 2026/05/01 + - where: + verb: New + subject: DnsResolverDomainList + set: + breaking-change: + deprecated-cmdlet-output-type: '' + change-description: The parameter 'Domain' is no longer mandatory. Domain lists now support bulk upload via 'Invoke-AzDnsResolverBulkDnsResolverDomainList' as an alternative to inline domain specification. + deprecated-by-version: 2.0.0 + deprecated-by-azversion: 16.0.0 + change-effective-date: 2026/05/01 ```