v0.6.0

Highlights. Governance arrives: policy assignments, exemptions, definitions, resource locks and a management groups sub-tab, with policy checks in @audit. Identity goes deeper:

• search finds app registrations and service principals by redirect URI, identifier URI and similar fields
• service principals gain Single sign-on (SAML entity id, ACS URL, signing certificate and its expiry) and Claims (the portal's Attributes & Claims, plus any claims mapping policy)
• app registrations gain Token configuration (group claims, optional claims per token)

Reading claims needs the Global Reader or Application Administrator directory role, and uses one beta Graph path (ADR 0004 amendment).

What's Changed

Security

• Governance: policy assignments, exemptions, definitions, locks (#155) by @sneboto in #163
• Governance: management groups sub-tab and policy audit checks (#155) by @sneboto in #164

Service depth

• Identity: search app registrations and service principals by their URIs by @sneboto in #167
• Identity: a Single sign-on section on service principals by @sneboto in #168
• Identity: a Claims section on service principals by @sneboto in #169
• Identity: a Token configuration section on app registrations by @sneboto in #170

Documentation

• ADR 0009: governance is read from the subscription (#155) by @sneboto in #162

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

Security

• Audit: network and hybrid checks; route next hops match the firewalls by @sneboto in #142

New services

• Network: Bastion, DDoS plans, appliance next hops (#137) by @sneboto in #139
• Hybrid: ExpressRoute circuits, VNet gateways, connections, local gateways (#135) by @sneboto in #140
• Firewall: Azure Firewall, policies, IP groups, Palo Alto Cloud NGFW (#136) by @sneboto in #141
• VM scale sets: a Scale sets sub-tab in Virtual Machines (#30) by @sneboto in #144
• Network: Private Link services, Traffic Manager, flow logs (#143) by @sneboto in #145
• Backup: Recovery Services and Backup vaults, items, policies, jobs (#32) by @sneboto in #146

UX

• Navigation: history forward (Ctrl-F) and clickable ← → buttons by @sneboto in #147

Documentation

• Demo: a quiet backdrop, undimmed; render.sh --composite-only by @sneboto in #134

Other changes

• Demo: Dracula over a generated backdrop; chip text through the palette by @sneboto in #132
• Service picker and help overlay: fit the content, keep clear of the edge by @sneboto in #133

Full Changelog: v0.4.0...v0.5.0

v0.4.0

Highlights

Try it without Azure: nebaz --demo. A made-up, offline tenant (contoso-prod, contoso-dev) with no az, no login and no network calls. It has a Power Platform VNet-injection outage to track down (@changes → W → N) and over 30 planted misconfigurations for @audit. Every screen and the headless commands work in it. See docs/DEMO.md and the clips in the README.

New since v0.3.0

• Services: Redis, Service Bus and Event Hubs, PostgreSQL and MySQL flexible servers, and Edge (application gateways, Front Door, WAF).
• @audit: security findings from what's loaded, with zero API calls. nebaz audit --fail-on gives a CI gate.
• Multi-subscription lists: P row counts and ls --subscriptions.
• Recording and updates: --show-keys for recordings, and a daily update check that you can turn off.

Fixes

• The User Access Administrator audit check never fired: its role id was wrong.
• App Service rows vanished under a location filter.
• The cursor kept its row index across a service switch.
• Audit rows named service principals by object id instead of name.

Security

• rustls, rustls-webpki and webpki-root-certs are patched for six advisories.

What's Changed

Fixes

• Splash fits a short terminal instead of panicking (#103) by @sneboto in #107
• smoke.sh polls for expected text instead of fixed sleeps (#106) by @sneboto in #112
• Fix lens hint separators, cursor on service switch, audit principal names, stray ‹; re-record demo by @sneboto in #130

Security

• @Audit: security findings from warm caches, zero API calls (#60) by @sneboto in #117
• Audit: Foundry, WAF mode, broad SP/guest roles; demo follow-ups (#45) by @sneboto in #127

New services

• Redis: Azure Cache for Redis and Managed Redis, network posture and firewall lazy (#29) by @sneboto in #113
• Messaging: Service Bus and Event Hubs namespaces, entities lazy (#27) by @sneboto in #114
• PostgreSQL & MySQL: flexible servers, network-first, lazy firewall, admins, TLS (#28) by @sneboto in #115
• Edge: application gateways, Front Door and WAF policies (#31) by @sneboto in #120

UX

• Multi-subscription: config subscriptions, row counts in P, ls --subscriptions (#62) by @sneboto in #116
• Keycast: --show-keys / show_keys names each key and what it did (#43) by @sneboto in #118
• Update check: a daily "newer release is out" chip, the one non-Azure GET (#53) by @sneboto in #119

Platform

• Demo mode core: nebaz --demo, an offline made-up tenant (#45) by @sneboto in #121
• Demo dataset: identity (#45) by @sneboto in #122
• Demo dataset: compute (#45) by @sneboto in #123
• Demo dataset: data (#45) by @sneboto in #124
• Demo dataset: network (#45) by @sneboto in #125
• Demo dataset: core (#45) by @sneboto in #126

Documentation

• Demo recordings: hero GIF and scenes (#45) by @sneboto in #129
• README: restructure around the demo, a services table and key tables by @sneboto in #128

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

Security

• Repo and runtime hygiene parity with neboto (#54) by @sneboto in #99

New services

• Power Platform: enterprise policies, linked from delegated subnets (#77) by @sneboto in #80
• Container Apps: apps, environments and jobs, revisions and auth lazy (#26) by @sneboto in #83
• Read-only Microsoft Graph: ADR 0004, transport, guard, Access names (#78) by @sneboto in #81
• Identity: Service principals and App registrations from Microsoft Graph (#78) by @sneboto in #85
• DNS tab: public zones, Private Resolver, forwarding rulesets and DNS security policies (#37) by @sneboto in #84

UX

• Pickers: one fuzzy filter for P, S and R (#59) by @sneboto in #79
• Offline wiring harness: the real App, no network, no az (#46) by @sneboto in #82
• Abort superseded list loads, not just drop their events (#57) by @sneboto in #86
• Network access lens (N): NSG rules from NIC + subnet, computed client-side (#50) by @sneboto in #87
• UX polish: list summaries, search history, back-to hint, pinned services (#58) by @sneboto in #90
• Detail pane: body filter, [[ / ]] group jumps, Ctrl-W wrap, H/L sub-tab step (#41) by @sneboto in #91
• @*: fuzzy search across every warm list cache (#38) by @sneboto in #93
• Metrics view (m): Azure Monitor platform metrics in the detail pane (#51) by @sneboto in #96
• Export: X waits for lazy sections; same data in every format; export_formats / export_dir (#40) by @sneboto in #94
• List visual selection: multi-row copy and deep export (#39) by @sneboto in #95
• Headless CLI: nebaz services / ls / get for scripts and agents (#44) by @sneboto in #97
• Mouse parity: double-click, right-click back, drag-select, clickable modals and hints (#42) by @sneboto in #102
• C: copy operational az commands — picker with Inspect / Connect / Change tiers (#47) by @sneboto in #98
• Referenced-by lens (U): which loaded resources point at this one (#49) by @sneboto in #104
• Ownership ribbon: who owns this resource, from tags, managedBy and deployments (#48) by @sneboto in #108
• Change timeline (W): Activity Log + Resource Health + alerts, merged per resource (#52) by @sneboto in #105
• @changes: what changed recently, subscription-wide (#61) by @sneboto in #110

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• Foundry service: AI accounts, deployments and projects lazy by @sneboto in #13
• Overlays: Ctrl-N / Ctrl-P move down / up, as in neboto by @sneboto in #14
• Network: public IPs, load balancers, route tables, NAT gateways by @sneboto in #15
• Identity: user-assigned managed identities, linked from VMs and AKS by @sneboto in #16
• Network: private endpoints and private DNS zones by @sneboto in #17
• App Service: apps, function apps and plans by @sneboto in #18
• SQL: servers, with databases and firewall rules lazy by @sneboto in #19
• Container Registry: registries, with replications and webhooks lazy (#7) by @sneboto in #20
• Cosmos DB: accounts, with databases lazy per API (#9) by @sneboto in #21
• Monitor: Log Analytics workspaces and App Insights, linked from AKS (#10) by @sneboto in #22
• Access (RBAC): role assignments on every type, and what an identity can do (#24) by @sneboto in #34
• All resources: every resource in the subscription, routed to its typed tab (#23) by @sneboto in #35
• Activity log: recent operations on every resource, group and subscription (#25) by @sneboto in #36
• Backlog to issues: drop docs/BACKLOG.md, point docs at GitHub by @sneboto in #76
• Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #56

New Contributors

• @sneboto made their first contribution in #13
• @dependabot[bot] made their first contribution in #56

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Full Changelog: https://github.com/neboto/nebaz/commits/v0.1.0