v0.5.1-alpha

Aim for speeding tickets

September 2026

Changelog

Maintenance Release - no new features

Major performance improvement by breaking evaluation cycle and bringing terragrunt >=1.1.4 support.

• version pinning: move versions of pinned tools, modules etc. to dedicated file root-versions.hcl && add pinning of terragrunt and terraform (was latest)
• bump terraform provider versions:
  • alz: ~> 0.22
  • azurerm: ~> 5.3 / ~> 4.81
  • azapi: ~> 2.12
  • msgraph: ~> 0.5
• bump ALZ library versions:
  • alz: 2026.08.1
  • slz: 2016.08.1
  • amba: 2026.06.1
• bump AVM module versions:
  • avm-ptn-alz-connectivity-virtual-wan: 0.17.1
  • avm-ptn-alz-connectivity-hub-and-spoke-vnet: 0.17.5
  • avm-ptn-alz-sub-vending: 0.3.1
  • avm-res-storage-storageaccount: 0.10.0
• terragrunt improve performance by breaking unit-eval-cycle (introduce unit-config.hcl) and allow support beyond v1.1.1

Bug Fixes

• Azure DevOps Managed Pool: default agent schedule && image name were invalid

Notes

Terragrunt 1.1.x is supported with an important caveat. There is still a fix missing that allows full support for the ECP unit stack structure. Meanwhile both "apply" and "destroy" have been added to mock_outputs_allowed_terraform_commands. Those need to be removed as soon as github.com/gruntwork-io/terragrunt/issues/5993 is fixed.

---

Plenty of stuff still missing so a strong advice:
DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD!
📨

v0.5.0-alpha

Opening the doors of the supermarket

July 2026

Changelog

Landing Zone Vending Support

adds vending of landing zones (currently with re-using existing subscriptions

• entra role model (with optional PIM support)
• Azure DevOps project complete with Service Connection to LZ
• Storage Account (to be used as terraform backend
• vnet/subnets with vWAN connection
• NAT gateway support
• full private endpoint support

Bastion Support

adds Azure Bastion in level2/communication

• link bastion to LZ

Notes

Terragrunt 1.1.x is supported with an important caveat. There is still a fix missing that allows full support for the ECP unit stack structure. Meanwhile both "apply" and "destroy" have been added to mock_outputs_allowed_terraform_commands. Those need to be removed as soon as github.com/gruntwork-io/terragrunt/issues/5993 is fixed.

---

Plenty of stuff still missing so a strong advice:
DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD!
🎄

v0.4.1-alpha

Evolving and growing °2

June 2026

Changelog

• use terraform >= 1.15
• terraform module versions have moved to tgcommon (as parameters)
• add single-stack deployment ADO pipeline

Notes

Terragrunt 1.x is now supported with an important caveat. There is still a fix missing that allows full support for the ECP unit stack structure. Meanwhile both "apply" and "destroy" have been added to mock_outputs_allowed_terraform_commands. Those need to be removed as soon as github.com/gruntwork-io/terragrunt/issues/5993 is fixed.

---

Plenty of stuff still missing so a strong advice:
DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD!
🎄

v0.4.0-alpha

Evolving and growing

June 2026

Changelog

• added level2 - Azure vWAN networking
• support for terragrunt 1.x enabled
• Azure Local management group (by ALZ 2026.04)
• ADO agent pool now running on ubuntu-24.04-g2
• disable key vault purge protection DINE guardrail policy on dev stage
• latest versions on
  • terraform 1.15
  • terraform providers
  • alz library references (2026.04.2)
  • AVM modules
    • avm-ptn-alz: 0.19.1
    • avm-utl-regions: 0.12.0
• add ADO Pool analysis pipeline

level 0

• bootstrap helper checks if backend blob endpoints have been created and DSN resolution is working

level 1

• ALZ management group "local" (Azure Local resources)

level 2

• adds az-alz-connectivity-virtual-wan
• adds az-connectivity-management

Chores

• Move bootstrap helper scripts to dedicated files for easier code maintenance
• standardise Windows vs. Linux path names (use forward slashes on both platforms)
• stabilize PIM assignments when deployed from MAC
• subnet privateEndpointNetworkPolicies and privateLinkServiceNetworkPolicies support in artefact

Notes

Terragrunt 1.x is now supported with an important caveat. There is still a fix missing that allows full support for the ECP unit stack structure. Meanwhile both "apply" and "destroy" have been added to mock_outputs_allowed_terraform_commands. Those need to be removed as soon as github.com/gruntwork-io/terragrunt/issues/5993 is fixed.

---

Plenty of stuff still missing so a strong advise:
DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD!
🎄

v0.3.0-alpha

Won the first battle. Still not done yet. The Dark Contoso is rising

Changelog:

• Done a lot of testing and stability improvements
• Documentation is evolving
• GitHub Copilot custom agents and instructions

level 0

• launchpad with worker agent && terraform backend

level 1

• parent management group access model
• alz private DNS zones
• alz management infrastructure
• alz base (management groups, policies)

---

Plenty of stuff still missing so a strong advise:
DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD!
🎄

v0.2.0-alpha

alpha peak climbing

level 0

• launchpad with worker agent && terraform backend

level 1

• parent management group access model
• alz private DNS zones
• alz management infrastructure
• alz base (management groups, policies)

Plenty of stuff still missing so a strong advise:

DONT EVER COME UP WITH THE IDEA OF USING THIS IN PROD

😸

v0.1.0-alpha

baby steps on level 0 (launchpad) completed. However,

DONT EVER COME UP WITH THE IDEA TO USE THIS IN PROD

:-)