fix: enable use-recent-api-versions bicep lint rule#11
Merged
Conversation
- Change use-recent-api-versions from off to warning in bicepconfig.json - Warning (not error) avoids a first-time hard-fail surface since there is no CI gate yet to enforce it
- az bicep build --file infra/main.bicep emits a compiled ARM template that was previously untracked; ignore it as generated build output
3 tasks
OgeonX-Ai
added a commit
that referenced
this pull request
Jul 8, 2026
…13) - README: document bicepconfig.json lint rules and the in-progress (PR #11) use-recent-api-versions rule; state the bicep-ready/NO-AZURE-deploy-lock posture; freshness footer - wiki: Home, Architecture (module graph + explicit deploy-lock statement), Operations, Decisions - Adds codex:generate-image placeholder per docs/VISION.md house style Co-authored-by: Kim Harjamäki <kim.harjamaki@prosimo.fi>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
use-recent-api-versionsBicep lint rule was present inbicepconfig.jsonbut forced tooff, so the linting story it implied was only half-real.use-recent-api-versionsfromofftowarning(noterror, since this repo has no CI gate yet to enforce a hard failure without a rollback path).publicNetworkAccessparameterization, merged in fix: secure observability public network access by default #7) is intact and unmodified on this branch — no changes were needed there.az bicep lint --diagnostics-format sarifagainst every module (main.bicep,observability.bicep,container-apps.bicep,foundry-rbac.bicep,budget.bicep) with the rule enabled: zerouse-recent-api-versionsfindings. Every currently pinned API version is inside the linter's freshness window.#disable-next-line use-recent-api-versionssuppression above theMicrosoft.Insights/diagnosticSettings@2021-05-01-previewresource incontainer-apps.bicepremains in place — it is now load-bearing rather than a no-op, and no newer non-preview API version was confirmed available to swap it out safely (a swap would be deployment-affecting and out of scope for this local-validation-only plan).infra/main.jsonto.gitignore—az bicep buildwas emitting this compiled ARM template as an untracked file with no repo config to suppress it.Test plan
az bicep build --file infra/main.bicepexits 0az bicep lint --file infra/main.bicepexits 0, no warnings/errorsaz bicep lint --diagnostics-format sarifagainst all 5 module files: zerouse-recent-api-versionsfindingspython -c "import json; json.load(open('bicepconfig.json'))"— valid JSONgit diff origin/main -- infra/modules/observability.bicep infra/main.bicep infra/parameters/— empty (P1 unaffected)./scripts/validate.ps1per CONTRIBUTING.md — this script does not exist in the repo today (onlyscripts/what-if.ps1); out of scope for this plan per phase constraints (local Bicep build/lint validation only, noaz deployment/what-if run)No
az deploymentcommand of any kind was run. Not merging — opening for review per phase constraints.🤖 Generated with Claude Code