chore: Update Bicep AVM module versions and Azure Resource API versions

[Abdul-Microsoft]

Purpose

• Update all AVM (Azure Verified Modules) Bicep module versions to latest stable releases across 11 infrastructure files
• Update all Azure Resource API versions to latest GA versions
• Fix breaking changes introduced by newer module versions
• Fix container registry deployment error (NetworkRuleNotSupported) for Standard SKU caused by AVM v0.12.1 behavior change

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• All 42 AVM module references updated to latest stable versions
• All 12 Azure Resource API versions updated to latest GA versions
• Breaking change fix: dailyQuotaGb type changed from int to string in operational-insights/workspace 0.15.0
• Breaking change fix: appLogsConfiguration inner property changed in app/managed-environment 0.13.2 — old logAnalyticsConfiguration (customerId/sharedKey) replaced with logAnalyticsWorkspaceResourceId (module now resolves workspace details internally)
• Breaking change fix: networkRuleSetDefaultAction set to Allow (instead of null) for Standard SKU in container-registry 0.12.1 to prevent NetworkRuleNotSupported error
• Bicep compilation succeeds with zero errors for both main.bicep and main_custom.bicep
• Deployment succeeds for both WAF and non-WAF configurations

Other Information

Resolves AB#40544

Files Changed (11 bicep files):

• infra/main.bicep - 23 AVM module version updates, API version updates, managed-environment breaking change fix
• infra/main_custom.bicep - Mirror of main.bicep changes
• infra/modules/container-registry.bicep - AVM version update + networkRuleSetDefaultAction fix for Standard SKU
• infra/modules/log-analytics-workspace.bicep - AVM version update + dailyQuotaGb type fix
• infra/modules/account/aifoundry.bicep - 7 avm-common-types imports + 4 API version updates
• infra/modules/account/modules/dependencies.bicep - 4 avm-common-types imports + 2 API version updates
• infra/modules/account/modules/keyVaultExport.bicep - 2 avm-common-types imports + 2 API version updates + typo fix
• infra/modules/account/modules/project.bicep - 2 API version updates
• infra/modules/key-vault.bicep - AVM version update
• infra/modules/managed-identity.bicep - AVM version update
• infra/modules/virtualNetwork.bicep - NSG + virtual-network AVM version updates

[Abdul-Microsoft]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit 0c320d6. There was one conflicted file (infra/main.json) with two conflict regions:

1. Bicep compiler version and template hash — kept our branch's newer values (0.42.1.51946 / 14609948803601664660)
2. DNS zone dependency ordering in avmContentUnderstanding — kept our branch's order

All other files merged cleanly without conflicts.

[Copilot]

Pull request overview

Updates the infrastructure layer to newer Azure Verified Modules (AVM) and newer Azure Resource API versions, including adjustments needed to accommodate breaking changes and an ACR deployment behavior change.

Changes:

• Bump AVM module references across core main*.bicep templates and reusable infra modules.
• Update multiple Azure resource API versions from older/preview to newer GA versions.
• Apply targeted parameter changes for module breaking changes (e.g., Log Analytics quota type, Container Apps managed environment logging, ACR network rule defaults).

Reviewed changes

Copilot reviewed 11 out of 12 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
infra/main.bicep	Updates numerous AVM module versions and adjusts managed environment logging configuration for newer AVM module versions.
infra/main_custom.bicep	Mirrors main.bicep AVM/API updates and managed environment logging config changes for custom deployments.
infra/modules/container-registry.bicep	Updates ACR AVM module + common types import; adjusts network rule/export policy params to avoid Standard SKU deployment issues.
infra/modules/log-analytics-workspace.bicep	Updates Log Analytics workspace AVM module version, changes dailyQuotaGb to string, and updates existing workspace API version.
infra/modules/account/aifoundry.bicep	Updates avm-common-types imports and multiple resource API versions used by AI Foundry/Cognitive Services resources.
infra/modules/account/modules/dependencies.bicep	Updates avm-common-types imports, Cognitive Services API versions, and private-endpoint AVM module version.
infra/modules/account/modules/keyVaultExport.bicep	Updates avm-common-types imports and Key Vault API versions for setting secrets.
infra/modules/account/modules/project.bicep	Updates Cognitive Services and AI Project API versions (preview → GA).
infra/modules/key-vault.bicep	Updates Key Vault AVM module version.
infra/modules/managed-identity.bicep	Updates user-assigned identity AVM module version.
infra/modules/virtualNetwork.bicep	Updates NSG and VNet AVM module versions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.