Release list

0.12.0 Latest

Latest

hectorvent released this 01 Sep 05:04

0.12.0

f6f0292

0.12.0 (2026-09-01)

Bug Fixes

blob: default unusable blob content types to application/octet-stream (#210) (4fdbb7a)
blob: honor user delegation SAS signing layouts by version (#202) (8ca73e8)
blob: preserve ADLS list directory identity (#201) (2a3635b)
cosmos: enable .NET SDK queries (#220) (8bde4d5), closes #216
cosmos: support .NET transactional batch (#222) (5efd630), closes #217
eventhub: make the AMQP data plane usable from the Azure SDKs (CBS + library patches) (#237) (5c8806e), closes #128
eventhub: route sends addressed the way the Azure SDKs address them (#241) (0d04662)
functions: support Python v2 app-root packages (#200) (09d6a7c)
honor Cosmos patch filter predicates (#230) (10dd22c), closes #217
honor X-Forwarded-Proto in /metadata/endpoints so URLs are https behind a TLS proxy (#253) (37aa829), closes #252
return ARM errors for failed SQL operations (#229) (7519c7d), closes #138
servicebus: reap orphaned sidecars (#219) (c9f3915), closes #218
servicebus: report runtime counts (#225) (e869661), closes #214
servicebus: route .NET admin requests (#221) (c0e003f), closes #215
servicebus: support session DLQ access (#223) (5036cad)
servicebus: unpack AMQP batches (#224) (bc01cee)
table: wrap error responses in the OData error envelope (#182) (96a0f6a), closes #181

Features

aci: add Azure Container Instances emulation (mocked ARM CRUD) (#208) (1377f74), closes #59
add ADLS list paths support (#198) (7c47687)
blob: blob lease support for the Azure Functions storage backplane (#183) (e82139f), closes #182 #136
compatibility-tests: add Azure SDK for C++ compatibility suite (#186) (3c69159), closes #184
servicebus: add duplicate detection (#171) (413a65a)
servicebus: add entity message expiration (#172) (0648e1a)
servicebus: honor per-entity MaxDeliveryCount and LockDuration (#207) (4d39b93)
servicebus: start the default namespace on boot for a deterministic AMQP endpoint (#250) (69d3600)
servicebus: support non-destructive message peeking (#203) (93f3b6d), closes #137 #137
sql: add data-plane providers (#204) (d789831), closes #138
sql: provision managed servers async (#205) (aff2aca), closes #138

Assets 2

0.11.0

hectorvent released this 18 Aug 05:13

0.11.0

112d1f7

🎉 Highlights

This release brings Entra ID Phase 2 with auth-code + PKCE and Microsoft Graph, adds Service Bus message sessions, lands Cosmos DB TTL and scoped ADLS SAS authorization, and continues the cross-repo convergence with the floci-aws baseline. Also lands release parity infrastructure matching the floci-aws 1.6.0 pattern.

🔐 Entra ID Phase 2: auth-code + PKCE + Microsoft Graph

Entra ID moves to Phase 2 (#143), adding the authorization-code + PKCE grant flow and a Microsoft Graph slice. Combined with the OIDC token issuance from 0.7.0 and Managed Identity from 0.9.0, the Azure identity stack is now genuinely complete for local testing:

Machine-to-machine auth (Managed Identity + IMDS)
OIDC token issuance
User-facing auth flows (auth-code + PKCE)
Microsoft Graph API surface

Applications that authenticate users via Entra ID and query Graph for profile or organization data can now complete their flows locally, without a real Azure tenant.

🚌 Service Bus: message sessions

Message sessions support lands (#190). Real Service Bus patterns using session-based ordering — one of the most-requested Service Bus features for enterprise messaging — now work locally. Combined with the subscription rules and topic filters from 0.10.0, Service Bus covers the fan-out, filtering, and session-based ordering patterns real workloads use.

🗃️ Cosmos DB: TTL + ETag conditions + correlated EXISTS

Three coordinated Cosmos DB improvements:

Container DefaultTimeToLive (TTL) with per-document overrides (#141)
Item ETag conditions enforced for optimistic concurrency (#167)
Correlated EXISTS queries evaluated correctly (#168)

Between these and the custom indexing policies from 0.10.0, Cosmos DB conformance is meaningfully better for real-world workloads.

🔒 Scoped ADLS SAS authorization

Scoped ADLS SAS authorization is now enforced (#158). Applications relying on SAS tokens to grant scoped access — a common pattern for secure inter-service data sharing — now behave correctly.

🔄 Cross-repo convergence continues

Four convergence PRs align floci-az with the floci-aws baseline 0142dc4:

DNS and TLS clusters (#177)
Docker cluster (#178)
Storage cluster (#180)

Matches the same convergence work done in floci-gcp 0.6.0. Groundwork for the shared floci-core extraction across the emulator family.

🚀 Release infrastructure

Release parity, one-button release cut, and the -compat image (#188) match the floci-aws 1.6.0 release infrastructure. All three emulators now share consistent release automation.

🪣 Storage conformance pass

Three coordinated storage improvements:

Service-properties XML served for table, queue, and blob (#134)
Upload HTTP properties persisted (#166)
Azure SQL image replaced after Microsoft retired the SQL Edge image (#139)

The SQL Edge replacement is particularly worth noting — Microsoft's retirement of the image was blocking new Azure SQL deployments in floci-az, and this restores functionality.

🐘 PostgreSQL: azurerm 3.x and 4.x compatibility

PostgreSQL returns 202 with Location headers so both azurerm 3.x and 4.x Terraform providers apply correctly (#135). Closes a Terraform-provider-version-specific compatibility gap.

🌐 Functions and Entra: quality-of-life

Functions: deployment packages larger than 20 MB now accepted (#196)
Entra: EntraStore participates in /_admin/reset (#195), so global reset actually wipes identity state

✨ New Features

Entra ID / Service Bus / Cosmos DB / ADLS

feat(entra): Entra ID Phase 2 — auth-code + PKCE grant + Microsoft Graph slice by @hectorvent in #143
feat(servicebus): support message sessions by @hectorvent in #190
feat(cosmos): container DefaultTimeToLive (TTL) with per-document overrides by @thomhurst in #141
feat(adls): enforce scoped ADLS SAS authorization by @snazy in #158

Release infrastructure

feat(release): release parity, one-button release cut, and the -compat image by @hectorvent in #188

🐛 Bug Fixes

Cosmos DB

fix(cosmos): enforce item ETag conditions by @thomhurst in #167
fix(cosmos): evaluate correlated EXISTS queries by @thomhurst in #168

Blob / Storage

fix(blob): persist upload HTTP properties by @hectorvent in #166
fix(storage): serve service-properties XML for table, queue, and blob by @hectorvent in #134

PostgreSQL / SQL / Functions / Entra

fix(postgres): answer 202 with Location so azurerm 3.x and 4.x both apply by @Ali-Shaikh in #135
fix(sql): replace retired Azure SQL Edge image by @hectorvent in #139
fix(functions): accept deployment packages larger than 20 MB by @hectorvent in #196
fix(entra): make EntraStore participate in /_admin/reset by @hectorvent in #195

Convergence

fix(dns, tls): converge DNS and TLS clusters on floci-aws baseline 0142dc4 by @hectorvent in #177
fix(docker): converge Docker cluster on floci-aws baseline 0142dc4 by @hectorvent in #178
fix(storage): converge storage cluster on floci-aws baseline 0142dc4 by @hectorvent in #180

Core

fix(core): omit Content-Type on bodyless error responses by @hectorvent in #185

🚀 Performance

perf(docker): stop duplicating the native binary into a second image layer by @hectorvent in #187

Full Changelog: 0.10.0...0.11.0

Contributors

snazy, hectorvent, and 2 other contributors

Assets 2

0.10.0

hectorvent released this 31 Jul 05:55

0.10.0

7f58dad

🎉 Highlights

This release adds MySQL, MariaDB, and diagnostic settings, expands Cosmos DB with custom indexing policies and composite-index enforcement, brings Service Bus subscription rules and topic filters, and lands ADLS user delegation key vending. Blob storage sees a coordinated conformance pass and the ARM plumbing gets a substantial refactor for cleaner service dispatch. Welcome to the 5 first-time contributors.

🆕 New: MySQL and MariaDB

Azure Database for MySQL and MariaDB support lands (#150), extending the PostgreSQL Flexible Server story from 0.9.0. All three major open-source database engines are now emulated on the Azure side, matching what real Azure PaaS offers.

📊 New: Diagnostic settings

Diagnostic settings emulation ships alongside MySQL/MariaDB (#150). IaC and applications that wire up log routing to Log Analytics, Storage, or Event Hubs can now be tested locally.

🌐 New: LB, NSG, Application Gateway shapes

Synthesized network resource shapes for Load Balancers, Network Security Groups, and Application Gateway (#153), unblocking azurerm Terraform patterns that provision these resources. Combined with the Private Endpoint / Private DNS work from 0.9.0, the Azure networking IaC story is meaningfully more complete.

🗃️ Cosmos DB: custom indexing policies

Cosmos DB gains custom indexing policies with composite-index ORDER BY enforcement (#129). Applications with real-world query patterns that depend on composite indexes for correctness now behave the way real Cosmos does — enforcing index requirements rather than silently ignoring them.

🚌 Service Bus: subscription rules and topic filters

Subscription rules with CorrelationFilter, SqlFilter, and $Default filters support (#130). Real Service Bus fan-out patterns using content-based routing are now testable end to end.

🔐 ADLS user delegation keys

User delegation key vending for Azure Data Lake Storage (#122). Applications that use user delegation SAS instead of account keys — the recommended pattern for Entra ID-authenticated access — now work locally.

🪣 Blob storage conformance pass

Four coordinated Blob storage improvements this cycle:

Service properties XML serialized properly instead of returning toString() (@thomhurst, #133)
Service properties XML returned (@aniketshukla1, #144)
Mandatory Get Blob and container response headers returned (@mcarvalho-singlestore, #146)
Unimplemented comp operations no longer route to putBlob (#155)

🧱 ARM plumbing refactor

Two coordinated internals improvements:

Handlers describe their own routes and enablement (#115)
ARM provider dispatch unified with strict ARM body parsing (#118)

Groundwork for consistent behavior as the service catalog continues to grow. Also lands: bare Key Vault deleted- collections* correctly routed, and disabled services report 503 instead of confusing fall-through errors (#114).

🐳 Docker labeling

Emulator containers and volumes are now labeled with a centralized floci-az prefix (#157). Easier cleanup, debugging, and multi-tenant orchestration.

🪟 Windows TLS fix

TLS certificate paths now use forward slashes so TLS starts on Windows (#142). Windows users can now use HTTPS locally without the path-separator mismatch that previously broke certificate loading.

📧 ACS Email SDK contract fix

ACS Email operation contract now matches what the SDKs expect (#148), so real SDKs can complete a send end to end rather than getting stuck partway through the operation.

✨ New Features

New services

feat(mysql, mariadb, diagnostic-settings): add MySQL, MariaDB, and diagnostic settings emulation by @hectorvent in #150
feat(network): synthesize LB, NSG, and Application Gateway shapes for azurerm by @hectorvent in #153

Service expansions

feat(cosmos): custom indexing policies with composite-index ORDER BY enforcement by @thomhurst in #129
feat(servicebus): subscription rules and topic filters (CorrelationFilter, SqlFilter, $Default) by @thomhurst in #130
feat(adls): add user delegation key vending by @snazy in #122

Docker

feat(docker): label emulator containers and volumes, centralize the floci-az name prefix by @hectorvent in #157

🐛 Bug Fixes

Blob storage

fix(storage): serialize service properties XML instead of returning toString by @thomhurst in #133
fix(storage): return service properties XML by @aniketshukla1 in #144
fix(blob): return mandatory Get Blob and container response headers by @mcarvalho-singlestore in #146
fix(blob): stop routing unimplemented comp operations to putBlob by @hectorvent in #155

Service Bus / Email / TLS

fix(servicebus): stop the CBS responder from exhausting file descriptors by @hectorvent in #154
fix(email): match the ACS operation contract so the SDKs can complete a send by @jogerj in #148
fix(tls): emit forward-slash certificate paths so TLS starts on Windows by @Ali-Shaikh in #142

Core

fix(core): route bare Key Vault deleted-* collections and report disabled services as 503 by @hectorvent in #114
fix(core): unify ARM provider dispatch and parse ARM bodies strictly by @hectorvent in #118

🧰 Refactors

chore(core): let handlers describe their own routes and enablement by @hectorvent in #115

🧪 Tests

chore(test): merge duplicate service-properties test methods from #133 / #144 by @hectorvent in #152
chore(test): compare delegation-key expiry as instants, not strings by @hectorvent in #156

🧰 CI

chore(ci): welcome first-time contributors on their first issue or PR by @hectorvent in #151

📚 Documentation

docs(services): flesh out blob / queue / table docs and add ARM reference by @hectorvent in #117
chore(config): document Postgres and SQL storage defaults in application.yml by @hectorvent in #116