chore: prepare v1.4.0 release

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [1.4.0] - 2026-04-12
+
+### Added
+- Shipped the new `compute-control` chain family so AzureFox can join compute footholds to
+  defended Azure-control follow-on paths in one operator-facing view.
+- Added first-class `container-apps` and `container-instances` flat commands so those runtime
+  surfaces are visible directly instead of only through shared compute follow-on logic.
+
+### Changed
+- Tightened `compute-control` admission, mixed-identity handling, terminal wording, and fixture
+  coverage so live output stays truthful while still surfacing the strongest defended control path.
+- Refreshed help text, README chain guidance, fixtures, and golden outputs to match the shipped
+  chain and container-runtime surface.
+- Bumped the published package and output schema version to `1.4.0` for the completed minor
+  release boundary.
+
 ## [1.3.0] - 2026-04-08
 
 ### Added

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "azurefox"
-version = "1.3.0"
+version = "1.4.0"
 description = "AzureFox - offensive-focused Azure situational awareness CLI"
 readme = "README.md"
 requires-python = ">=3.11"

src/azurefox/__init__.py

@@ -2,4 +2,4 @@
 
 __all__ = ["__version__"]
 
-__version__ = "1.3.0"
+__version__ = "1.4.0"

src/azurefox/models/common.py

@@ -6,7 +6,7 @@
 
 from pydantic import BaseModel, Field, model_validator
 
-SCHEMA_VERSION = "1.3.0"
+SCHEMA_VERSION = "1.4.0"
 
 
 class OutputMode(StrEnum):

tests/golden/acr.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "acr",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/aks.json

@@ -79,7 +79,7 @@
   "metadata": {
     "command": "aks",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/api-mgmt.json

@@ -56,7 +56,7 @@
   "metadata": {
     "command": "api-mgmt",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/app-services.json

@@ -56,7 +56,7 @@
   "metadata": {
     "command": "app-services",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/application-gateway.json

@@ -118,7 +118,7 @@
   "metadata": {
     "command": "application-gateway",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/arm-deployments.json

@@ -120,7 +120,7 @@
     "command": "arm-deployments",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/auth-policies.json

@@ -107,7 +107,7 @@
   "metadata": {
     "command": "auth-policies",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/automation.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "command": "automation",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/cross-tenant.json

@@ -71,7 +71,7 @@
     "command": "cross-tenant",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/databases.json

@@ -118,7 +118,7 @@
   "metadata": {
     "command": "databases",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/devops.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "command": "devops",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/dns.json

@@ -2,7 +2,7 @@
   "metadata": {
     "command": "dns",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "token_source": null

tests/golden/endpoints.json

@@ -108,7 +108,7 @@
     "command": "endpoints",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/env-vars.json

@@ -110,7 +110,7 @@
     "command": "env-vars",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/functions.json

@@ -40,7 +40,7 @@
   "metadata": {
     "command": "functions",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/inventory.json

@@ -4,7 +4,7 @@
     "command": "inventory",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/keyvault.json

@@ -108,7 +108,7 @@
     "command": "keyvault",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/lighthouse.json

@@ -124,7 +124,7 @@
     "command": "lighthouse",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/managed-identities.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "command": "managed-identities",
     "generated_at": "2026-04-12T04:41:01.427084Z",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/network-effective.json

@@ -50,7 +50,7 @@
     "command": "network-effective",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/network-ports.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "network-ports",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/nics.json

@@ -4,7 +4,7 @@
   "metadata": {
     "command": "nics",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/permissions.json

@@ -5,7 +5,7 @@
     "command": "permissions",
     "devops_organization": null,
     "generated_at": "2026-04-12T18:56:06.241502Z",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/principals.json

@@ -5,7 +5,7 @@
     "command": "principals",
     "devops_organization": null,
     "generated_at": "2026-04-12T18:56:06.240867Z",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/privesc.json

@@ -5,7 +5,7 @@
     "command": "privesc",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/rbac.json

@@ -4,7 +4,7 @@
     "command": "rbac",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/resource-trusts.json

@@ -51,7 +51,7 @@
     "command": "resource-trusts",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/role-trusts.json

@@ -3,7 +3,7 @@
   "metadata": {
     "command": "role-trusts",
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/snapshots-disks.json

@@ -1,6 +1,6 @@
 {
   "metadata": {
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "command": "snapshots-disks",
     "generated_at": "<generated_at>",
     "tenant_id": "11111111-1111-1111-1111-111111111111",

tests/golden/storage.json

@@ -24,7 +24,7 @@
     "command": "storage",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/tokens-credentials.json

@@ -168,7 +168,7 @@
     "command": "tokens-credentials",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/vms.json

@@ -16,7 +16,7 @@
     "command": "vms",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/vmss.json

@@ -5,7 +5,7 @@
     "command": "vmss",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/golden/whoami.json

@@ -12,7 +12,7 @@
     "command": "whoami",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": "fixture"

tests/golden/workloads.json

@@ -6,7 +6,7 @@
     "command": "workloads",
     "devops_organization": null,
     "generated_at": "<generated_at>",
-    "schema_version": "1.3.0",
+    "schema_version": "1.4.0",
     "subscription_id": "22222222-2222-2222-2222-222222222222",
     "tenant_id": "11111111-1111-1111-1111-111111111111",
     "token_source": null

tests/test_models.py

@@ -29,7 +29,7 @@
 
 
 def test_schema_version() -> None:
-    assert SCHEMA_VERSION == "1.3.0"
+    assert SCHEMA_VERSION == "1.4.0"
 
 
 def test_collection_issue_scope_defaults_from_context_collector() -> None: