{
  "generated_at": "2026-11-13T14:30:20.489Z",
  "as_of": "2026-11-13",
  "site": {
    "name": "EOL Watch",
    "url": "https://eolwatch.dev"
  },
  "license": {
    "name": "Not decided yet",
    "url": null,
    "note": "The license for these exports has not been chosen yet, so no reuse terms are stated. Ask the site owner before you redistribute the data. Version dates taken from or cross-checked with endoflife.date remain subject to the license of that project."
  },
  "query": {
    "cloud": [
      "azure"
    ],
    "type": [],
    "category": null,
    "service": "avm",
    "q": null,
    "from": null,
    "to": null,
    "within_days": null,
    "status": "all",
    "sort": "date",
    "dir": "asc",
    "limit": 20,
    "offset": 0,
    "detail": "full"
  },
  "total": 14,
  "status_counts": {
    "upcoming": 0,
    "ended": 0,
    "in_effect": 14
  },
  "count": 14,
  "limit": 20,
  "offset": 0,
  "next_offset": null,
  "next_url": null,
  "items": [
    {
      "slug": "azure-avm-web-site-0-23-0-breaking-change",
      "title": "avm-res-web-site 0.23.0: breaking changes",
      "summary": "Release date of version 0.23.0 of the Azure Verified Module avm-res-web-site: 15 Sep 2026. Breaking changes listed in the release notes: 6.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-09-15",
      "effective_date": "2026-09-15",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Logic App Node.js default: Logic Apps that do not set WEBSITE_NODE_DEFAULT_VERSION move from Node.js ~18 to ~22. Validate workflows before applying, or set logic_app_node_version = \"~18\" to retain the old runtime. (#344)\n- Logic App worker runtime: The module now sends Microsoft's documented FUNCTIONS_WORKER_RUNTIME = \"dotnet\" instead of \"node\". Microsoft says this should not affect workflow execution. To retain the old value, set app_settings = { FUNCTIONS_WORKER_RUNTIME = \"node\" } using that casing. (#379)\n- Removed outputs: Unused whole-resource outputs were removed from the certificate and configuration submodules. The root deployment_slot_locks, resource_lock, and resource_private_endpoints outputs were removed, and deployment_slots now exposes only each slot's name and resource_id. The root resource and private_endpoints compatibility outputs remain. Replace references with the available discrete outputs. (#369)\n- Output sensitivity: custom_domain_verification_id is now sensitive. Mark downstream outputs as sensitive, or use nonsensitive() when publishing it to the public asuid.<hostname> DNS TXT record. Resource and managed-identity IDs are no longer marked sensitive; existing downstream sensitive = true declarations remain valid. (#371)\n- Explicit null collection inputs: always_ready, backup, connection_strings, site_config, slots_storage_shares_to_mount_sensitive_values, sticky_settings, and storage_shares_to_mount now treat explicit null as absent and use their declared defaults. Remove explicit null assignments when upgrading. retry = null remains supported and continues to disable retries. (#374)\n- Flex Consumption app settings: New FC1 deployments no longer receive module-supplied FUNCTIONS_EXTENSION_VERSION or WEBSITE_CONTENTSHARE. Existing apps may retain previously written values because the underlying update resource merges settings; FC1 ignores them. Explicit caller-supplied app settings still pass through. (#380)",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.23.0) for 0.23.0: 6. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-web-site from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-web-site). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.23.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.23.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.23.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.23.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-web-site"
      ],
      "vendor_ref": "v0.23.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/o",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-networksecuritygroup-0-6-0-breaking-change",
      "title": "avm-res-network-networksecuritygroup 0.6.0: breaking changes",
      "summary": "Release date of version 0.6.0 of the Azure Verified Module avm-res-network-networksecuritygroup: 7 Oct 2026. Breaking changes listed in the release notes: 6.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-07",
      "effective_date": "2026-10-07",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- This release moves the module from the AzureRM provider to AzAPI. Existing deployments are adopted in place through moved blocks, and nothing is destroyed or recreated. Read the upgrade steps below before you upgrade.\n- Requires Terraform 1.11 or later (was 1.9).\n- Replaces the resource_group_name input with parent_id, the resource ID of the resource group.\n- Manages every resource with AzAPI. The module no longer requires the AzureRM provider, and it now requires the hashicorp/time provider (~> 0.13).\n- The security_rules output no longer includes timeouts.\n- Role names are looked up in the resource group, so a custom role that can only be assigned on the network security group itself must be given by ID.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-networksecuritygroup/releases/tag/v0.6.0) for 0.6.0: 6. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-networksecuritygroup from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-networksecuritygroup). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.6.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.6.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-networksecuritygroup/releases/tag/v0.6.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-networksecuritygroup"
      ],
      "vendor_ref": "v0.6.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/1m",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-web-site-0-24-0-breaking-change",
      "title": "avm-res-web-site 0.24.0: breaking changes",
      "summary": "Release date of version 0.24.0 of the Azure Verified Module avm-res-web-site: 12 Oct 2026. Breaking changes listed in the release notes: 1.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-12",
      "effective_date": "2026-10-12",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Breaking, only if you call modules/site_config_helpers directly: it now requires is_function_app (bool). Pass true for Function Apps and false otherwise. Callers of the root module are unaffected.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.24.0) for 0.24.0: 1. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-web-site from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-web-site). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.24.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.24.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.24.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.24.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-web-site"
      ],
      "vendor_ref": "v0.24.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/1o",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-privateendpoint-0-3-0-breaking-change",
      "title": "avm-res-network-privateendpoint 0.3.0: breaking changes",
      "summary": "Release date of version 0.3.0 of the Azure Verified Module avm-res-network-privateendpoint: 22 Oct 2026. Breaking changes listed in the release notes: 5.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-22",
      "effective_date": "2026-10-22",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Provider and Terraform requirements: Terraform >= 1.16, < 2.0 and Azure/azapi ~> 2.12 are now required.\n- Parent scope: Replace resource_group_name with parent_id, containing the resource group's full Azure resource ID.\n- Outputs: The whole-resource resource output has been removed. Use name, resource_id, network_interface_ids, private_ip_addresses, and application_security_group_association_ids instead.\n- Role assignments: Remove role_assignment_name_use_random_uuid from module inputs. Existing assignment GUIDs are preserved through the supported migration path.\n- DNS zone group ownership: Private DNS zone groups now have an independently managed child-module state address and require the managed migration flag when upgrading an existing configured group.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-privateendpoint/releases/tag/v0.3.0) for 0.3.0: 5. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-privateendpoint from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-privateendpoint). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.3.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.3.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.3.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-privateendpoint/releases/tag/v0.3.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-privateendpoint"
      ],
      "vendor_ref": "v0.3.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/1w",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change",
      "title": "avm-res-managedidentity-userassignedidentity 0.6.0: breaking changes",
      "summary": "Release date of version 0.6.0 of the Azure Verified Module avm-res-managedidentity-userassignedidentity: 27 Oct 2026. Breaking changes listed in the release notes: 4.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-27",
      "effective_date": "2026-10-27",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Rename role_assignments to outbound_role_assignments in every module call; the old argument is no longer accepted. Preserve the existing map keys and values. These remain outbound grants to the created identity at each supplied scope, not grants to other principals on the identity. The resource block remains azurerm_role_assignment.this, so the input rename alone does not require state moves.\n- Outbound role assignment description is now applied instead of ignored. AzureRM treats description changes as replacement, so existing non-null descriptions can replace assignments on upgrade. Inspect the plan for resulting access changes. Other role attributes and their existing null defaults remain unchanged.\n- enable_telemetry remains true by default. Enabled telemetry creates an empty Incremental Microsoft.Resources/deployments resource at the AzAPI provider subscription, using the existing required real region. Subscription deployment-management permissions are required; resource-group-only permissions may be insufficient. Owner is not specifically required. Configure the intended AzAPI subscription or set enable_telemetry=false. Deployment-history records and plan-timestamp updates are new behavior.\n- ModTM and telemetry-only root random requirements are removed. removed blocks with destroy=false request forgetting the old telemetry resources without destruction. Workload addresses are preserved; historical-state migration has not been exercised. Back up state and inspect the upgrade plan, especially outbound assignment descriptions, before applying.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-managedidentity-userassignedidentity/releases/tag/v0.6.0) for 0.6.0: 4. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-managedidentity-userassignedidentity from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-managedidentity-userassignedidentity). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.6.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.6.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-managedidentity-userassignedidentity/releases/tag/v0.6.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-managedidentity-userassignedidentity"
      ],
      "vendor_ref": "v0.6.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/1y",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-routetable-0-6-0-breaking-change",
      "title": "avm-res-network-routetable 0.6.0: breaking changes",
      "summary": "Release date of version 0.6.0 of the Azure Verified Module avm-res-network-routetable: 27 Oct 2026. Breaking changes listed in the release notes: 5.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-27",
      "effective_date": "2026-10-27",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Direct users of modules/route must now supply a non-null real Azure location even when enable_telemetry=false. Root callers already supply location; the root forwards it and enable_telemetry to each route child. No new required root input is added.\n- Default-enabled telemetry now creates empty Incremental subscription deployments for the root and every instantiated non-legacy route child. Subscription deployment-management permissions are required; resource-group-only routing permissions may be insufficient. Owner is not specifically required. Configure the intended AzAPI subscription or explicitly disable telemetry. Expect additional deployment-history records per child and plan-timestamp updates. Existing routes_legacy_mode selection is unchanged.\n- AzAPI now requires~>2.12 instead of~>2.4 in root and direct route child. Terraform>=1.9,<2.0 and AzureRM~>4.0 remain unchanged. Refresh provider locks as appropriate.\n- ModTM and telemetry-only root Random requirements are removed. Non-destructive removed blocks request forgetting old root telemetry resources. Workload addresses and map keys are preserved, but an actual historical-state upgrade has not been exercised; back up state and inspect the plan.\n- Route-table/route request bodies, route outputs, subnet associations, locks and role assignments retain their existing contract. Examples use exact certified Naming0.2.0 and legacy Regions0.8.2.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-routetable/releases/tag/v0.6.0) for 0.6.0: 5. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-routetable from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-routetable). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.6.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.6.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-routetable/releases/tag/v0.6.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-routetable"
      ],
      "vendor_ref": "v0.6.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/1z",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-containerregistry-registry-0-9-0-breaking-change",
      "title": "avm-res-containerregistry-registry 0.9.0: breaking changes",
      "summary": "Release date of version 0.9.0 of the Azure Verified Module avm-res-containerregistry-registry: 29 Oct 2026. Breaking changes listed in the release notes: 5.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-10-29",
      "effective_date": "2026-10-29",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Direct users of modules/cache-rule, modules/credential-set and modules/scope-map must now supply a non-null location, including when enable_telemetry=false. Root calls already forward the existing root location.\n- Direct modules/scope-map users now require Terraform >= 1.5.0, < 2.0.0 instead of >= 1.3.0, because telemetry uses plantimestamp() and terraform_data. The root, cache-rule and credential-set minima remain >= 1.8.\n- Root AzAPI changes from ~> 2.4 to ~> 2.12; cache-rule and credential-set change from >= 2.0, < 3.0 to ~> 2.12; scope-map newly requires AzAPI ~> 2.12. Refresh incompatible lockfiles. Root AzureRM remains >= 4.81.0, < 5.0.0.\n- Root and all three children enable subscription-scope deployment telemetry by default. Configure the intended AzAPI subscription and grant appropriate subscription-deployment lifecycle permissions, or disable telemetry. Root enable_telemetry is forwarded to its children; direct child callers must configure their own flag. Deployments contain no workload resources, but add deployment-history and plan-timestamp updates.\n- Root ModTM and telemetry-only Random requirements are removed. removed blocks request forgetting the old telemetry resources without destruction; actual historical-state migration was not exercised. Back up state and inspect the upgrade plan. Naming examples still legitimately consume Random through the ModTM-free Naming module.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-containerregistry-registry/releases/tag/v0.9.0) for 0.9.0: 5. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-containerregistry-registry from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-containerregistry-registry). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.9.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.9.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.9.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-containerregistry-registry/releases/tag/v0.9.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-containerregistry-registry"
      ],
      "vendor_ref": "v0.9.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/20",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-virtualnetwork-0-23-0-breaking-change",
      "title": "avm-res-network-virtualnetwork 0.23.0: breaking changes",
      "summary": "Release date of version 0.23.0 of the Azure Verified Module avm-res-network-virtualnetwork: 4 Nov 2026. Breaking changes listed in the release notes: 2.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-04",
      "effective_date": "2026-11-04",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Standalone modules/subnet and modules/peering now enable telemetry by default and require a non-null location when telemetry is enabled. Existing direct callers must supply location or explicitly set enable_telemetry = false. The root module passes its existing location to these children.\n- Enabled telemetry now creates Azure subscription-scope deployments through AzAPI, including for the root module and enabled children. Identities must have the necessary subscription-scope deployment permissions; alternatively disable telemetry. Terraform state forgets legacy ModTM telemetry and telemetry UUID objects without destroying them and tracks the new telemetry deployment resources.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-virtualnetwork/releases/tag/v0.23.0) for 0.23.0: 2. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-virtualnetwork from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-virtualnetwork). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.23.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.23.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.23.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-virtualnetwork/releases/tag/v0.23.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-virtualnetwork"
      ],
      "vendor_ref": "v0.23.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2f",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-storage-storageaccount-0-11-0-breaking-change",
      "title": "avm-res-storage-storageaccount 0.11.0: breaking changes",
      "summary": "Release date of version 0.11.0 of the Azure Verified Module avm-res-storage-storageaccount: 4 Nov 2026. Breaking changes listed in the release notes: 5.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-04",
      "effective_date": "2026-11-04",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- The tracing_tags_header input was removed from the blob_service, container, data_lake_filesystem, diagnostic_setting, file_service, local_user, management_policy, private_endpoint, queue, queue_service, role_assignments, share, table, and table_service child modules. The static_website child retains this input.\n- Direct callers must now supply location to container, diagnostic_setting, local_user, queue, role_assignments, share, and table. Direct callers of blob_service, data_lake_filesystem, file_service, management_policy, queue_service, static_website, and table_service must supply location when telemetry is enabled (the default).\n- The minimum Azure AzAPI provider version increases to 2.12 for the root and all child modules.\n- Enabled telemetry now creates subscription-scope ARM deployments. The caller needs subscription-scope deployment read, write, and delete permissions. The root and instrumented children honor enable_telemetry = false; root input and output contracts are unchanged.\n- The root and its updated Interfaces dependencies retire legacy ModTM and random telemetry state with destroy = false. Upgrading existing state may still require the legacy providers during initialization. Review the plan before applying.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-storage-storageaccount/releases/tag/v0.11.0) for 0.11.0: 5. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-storage-storageaccount from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-storage-storageaccount). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.11.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.11.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.11.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-storage-storageaccount/releases/tag/v0.11.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-storage-storageaccount"
      ],
      "vendor_ref": "v0.11.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2g",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-privatednszone-0-6-0-breaking-change",
      "title": "avm-res-network-privatednszone 0.6.0: breaking changes",
      "summary": "Release date of version 0.6.0 of the Azure Verified Module avm-res-network-privatednszone: 5 Nov 2026. Breaking changes listed in the release notes: 4.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-05",
      "effective_date": "2026-11-05",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Root and directly consumed child modules require location when telemetry is enabled (the default). Set a valid Azure region, or explicitly disable telemetry.\n- The minimum Azure AzAPI provider version is now 2.12 for the root and child modules.\n- Enabled telemetry now creates subscription-scope ARM deployments and requires permissions to manage those deployments. Previous telemetry state entries are retired without destruction, and new telemetry resources enter state.\n- The root name output now uses the configured resource name instead of the name returned in the API response.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-privatednszone/releases/tag/v0.6.0) for 0.6.0: 4. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-privatednszone from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-privatednszone). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.6.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.6.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-privatednszone/releases/tag/v0.6.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-privatednszone"
      ],
      "vendor_ref": "v0.6.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2h",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-resources-resourcegroup-0-5-0-breaking-change",
      "title": "avm-res-resources-resourcegroup 0.5.0: breaking changes",
      "summary": "Release date of version 0.5.0 of the Azure Verified Module avm-res-resources-resourcegroup: 6 Nov 2026. Breaking changes listed in the release notes: 8.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-06",
      "effective_date": "2026-11-06",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Back up state and inspect the complete plan before applying. These changes are not a guarantee of a safe or replacement-free upgrade.\n- Resource-group state now uses a counted AzAPI address. The move chain is azurerm_resource_group.this → azapi_resource.this → azapi_resource.this[0]; the last step also covers v0.4.0's unkeyed AzAPI address. Cross-provider conversion requires supported provider versions and usable Azure resource IDs. If conversion cannot be performed, explicit migration or import may be required.\n- The new ignore_tag_changes input defaults to false. Do not toggle it on an existing group without a reviewed migration: switching resource definitions can plan a delete and create of the resource group, with potential loss of its contents.\n- Lock configuration now includes notes = null; v0.4.0 omitted notes and older AzureRM-based versions supplied notes. Azure's handling of the explicit null has not been verified. Review existing notes and the plan.\n- For AzureRM-era role assignments, explicitly set role_assignments[*].name to the existing assignment GUID before migration and inspect the plan; otherwise a new UUID can result in a different assignment name.\n- The full resource output changes shape: a resource attribute is added (null in the default synthetic fixture). With ignore_tag_changes = true, reported tags are null. Consumers relying on the exact output object should review their use.\n- AzAPI changes from ~> 2.4 to ~> 2.12; Terraform remains >= 1.9, < 2.0. Interfaces changes from 0.6.0 to 0.10.0. Active ModTM telemetry is replaced by subscription-scope AzAPI deployments. When telemetry is enabled, deployment read, write and delete permissions are required at subscription scope. Old telemetry state may need its old providers for a final initialization; removed telemetry resources are forgotten without destruction. Telemetry can be disabled with enable_telemetry = false.\n- Offline synthetic-state/mock-provider plans covered the v0.4.0 and older AzureRM address chains; they do not prove live Azure behavior or all provider/Terraform version combinations. No live upgrade was performed.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-resources-resourcegroup/releases/tag/v0.5.0) for 0.5.0: 8. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-resources-resourcegroup from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-resources-resourcegroup). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.5.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.5.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.5.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-resources-resourcegroup/releases/tag/v0.5.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-resources-resourcegroup"
      ],
      "vendor_ref": "v0.5.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2i",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-loadbalancer-0-6-0-breaking-change",
      "title": "avm-res-network-loadbalancer 0.6.0: breaking changes",
      "summary": "Release date of version 0.6.0 of the Azure Verified Module avm-res-network-loadbalancer: 9 Nov 2026. Breaking changes listed in the release notes: 9.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-09",
      "effective_date": "2026-11-09",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- Read the v0.5.0 upgrade guide before upgrading. This is not a drop-in provider replacement.\n- Requirements: Terraform >= 1.16, < 2.0 and effective AzAPI provider minimum 2.13.\n- Parent scope: replace resource_group_name with the existing resource group's parent_id.\n- Public IP ownership: bundled public IP creation and extension management are removed. Manage and adopt existing public IPs and their extensions in the consumer configuration, then supply their resource IDs.\n- Native NIC associations: backend_address_pool_network_interfaces is removed. Manage complete native membership lists exclusively through the NIC/compute owner, using the module's keyed backend pool IDs.\n- Backend pool defaults: omitted or null backend_address_type now means \"NIC\". Explicit IP pools must select \"IP\"; Global regional-frontend pools must select \"Frontend\". These modes do not automatically convert existing pools.\n- Diagnostic settings: replace legacy category arrays with canonical logs and metrics objects.\n- Outputs: replace removed whole-resource objects with discrete IDs, keyed child-ID maps and name. Legacy AzureRM object shapes are not preserved.\n- Authoritative collections: configure all intended children and explicit members; omitted entries can be removed.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-loadbalancer/releases/tag/v0.6.0) for 0.6.0: 9. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-loadbalancer from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-loadbalancer). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.6.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.6.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-loadbalancer/releases/tag/v0.6.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-loadbalancer"
      ],
      "vendor_ref": "v0.6.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2j",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-cognitiveservices-account-0-12-0-breaking-change",
      "title": "avm-res-cognitiveservices-account 0.12.0: breaking changes",
      "summary": "Release date of version 0.12.0 of the Azure Verified Module avm-res-cognitiveservices-account: 11 Nov 2026. Breaking changes listed in the release notes: 7.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-11",
      "effective_date": "2026-11-11",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- AzAPI now requires ~> 2.12 (previously ~> 2.5).\n- Enabled telemetry creates empty subscription-scoped Azure deployments and requires Microsoft.Resources/deployments/read, write, and delete permissions at the active subscription. Set enable_telemetry = false to disable these deployments.\n- Direct callers of modules/deployment and modules/rai_policy must supply location when telemetry is enabled. The parent module forwards its location and telemetry opt-out automatically.\n- Previously ignored private endpoint fields are now honored. An explicit role-assignment name can replace its assignment; non-default subresource names can change generated endpoint/NIC/connection names and replace resources. Lock notes and IP member names are now sent to ARM. Review the plan before upgrading.\n- Deployment and RAI-policy tags supplied per item now take effect; omitted/null tags retain provider defaults and do not inherit account tags.\n- The private-endpoint example replaces legacy VNet module 5.0.1 with AVM VNet 0.23.0, changing example VNet/subnet state addresses. Use fresh disposable example infrastructure or explicitly review and migrate existing example state before applying.\n- Legacy telemetry state is forgotten with destroy = false. Terraform can still require the retired providers during the first initialization of an existing state.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-cognitiveservices-account/releases/tag/v0.12.0) for 0.12.0: 7. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-cognitiveservices-account from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-cognitiveservices-account). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.12.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.12.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.12.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-cognitiveservices-account/releases/tag/v0.12.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-cognitiveservices-account"
      ],
      "vendor_ref": "v0.12.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2r",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change.json",
      "estate_check": null
    },
    {
      "slug": "azure-avm-network-publicipaddress-0-3-0-breaking-change",
      "title": "avm-res-network-publicipaddress 0.3.0: breaking changes",
      "summary": "Release date of version 0.3.0 of the Azure Verified Module avm-res-network-publicipaddress: 11 Nov 2026. Breaking changes listed in the release notes: 6.",
      "cloud": "azure",
      "service": "Azure Verified Modules",
      "service_slug": "avm",
      "category": "iac_module",
      "type": "breaking_change",
      "announced_date": "2026-11-11",
      "effective_date": "2026-11-11",
      "effective_precision": "day",
      "impact": "Breaking changes listed in the release notes:\n\n- This release moves the module from AzureRM to AzAPI. In-module moved blocks adopt the public IP, lock, role assignments and diagnostic settings in place. Read Upgrading from v0.2.1 and earlier before you upgrade.\n- Replaces the resource_group_name input with parent_id, the resource ID of the resource group.\n- Requires Terraform 1.9 or later and AzAPI ~> 2.12. The module no longer requires the AzureRM provider.\n- public_ip_address is null instead of \"\" while a dynamic public IP has no address.\n- tags = null no longer clears tags. Set tags = {} to clear them.\n- An existing domain_name_label or reverse_fqdn can't be removed, or switched to the other, in place.",
      "migration_path": "1. Breaking changes listed in the [release notes](https://github.com/Azure/terraform-azurerm-avm-res-network-publicipaddress/releases/tag/v0.3.0) for 0.3.0: 6. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.\n2. Check the `version` argument of the module block that installs avm-res-network-publicipaddress from the [Terraform Registry](https://registry.terraform.io/modules/Azure/avm-res-network-publicipaddress). Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.3.0 can bring in this release. A module block with no `version` argument defaults to the latest version available from the source.\n3. The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.\n4. To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.\n5. To adopt 0.3.0, set the `version` argument to it, then run `terraform init` so that Terraform can update the local code.",
      "replacement": null,
      "affected_versions": [
        "0.3.0"
      ],
      "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-publicipaddress/releases/tag/v0.3.0",
      "extra_source_urls": [
        "https://registry.terraform.io/modules/Azure/avm-res-network-publicipaddress"
      ],
      "vendor_ref": "v0.3.0",
      "last_checked_at": "2026-11-12T09:56:15.145Z",
      "created_at": "2026-11-13T13:36:44.208Z",
      "updated_at": "2026-11-13T13:36:44.208Z",
      "url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change",
      "short_url": "https://eolwatch.dev/i/2s",
      "markdown_url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change.md",
      "json_url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change.json",
      "estate_check": null
    }
  ],
  "sections": [
    {
      "id": "upcoming",
      "heading": "Upcoming",
      "total": 0,
      "url": "https://eolwatch.dev/data/items.json?cloud=azure&service=avm",
      "items": []
    },
    {
      "id": "in-effect",
      "heading": "Breaking changes in effect",
      "total": 14,
      "url": "https://eolwatch.dev/data/items.json?cloud=azure&service=avm&status=in_effect&dir=desc",
      "items": [
        {
          "slug": "azure-avm-cognitiveservices-account-0-12-0-breaking-change",
          "title": "avm-res-cognitiveservices-account 0.12.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-11",
          "effective_date": "2026-11-11",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -2,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-cognitiveservices-account/releases/tag/v0.12.0",
          "url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-cognitiveservices-account-0-12-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-publicipaddress-0-3-0-breaking-change",
          "title": "avm-res-network-publicipaddress 0.3.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-11",
          "effective_date": "2026-11-11",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -2,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-publicipaddress/releases/tag/v0.3.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-publicipaddress-0-3-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-loadbalancer-0-6-0-breaking-change",
          "title": "avm-res-network-loadbalancer 0.6.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-09",
          "effective_date": "2026-11-09",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -4,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-loadbalancer/releases/tag/v0.6.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-loadbalancer-0-6-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-resources-resourcegroup-0-5-0-breaking-change",
          "title": "avm-res-resources-resourcegroup 0.5.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-06",
          "effective_date": "2026-11-06",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -7,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-resources-resourcegroup/releases/tag/v0.5.0",
          "url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-resources-resourcegroup-0-5-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-privatednszone-0-6-0-breaking-change",
          "title": "avm-res-network-privatednszone 0.6.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-05",
          "effective_date": "2026-11-05",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -8,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-privatednszone/releases/tag/v0.6.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-privatednszone-0-6-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-virtualnetwork-0-23-0-breaking-change",
          "title": "avm-res-network-virtualnetwork 0.23.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-04",
          "effective_date": "2026-11-04",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -9,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-virtualnetwork/releases/tag/v0.23.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-virtualnetwork-0-23-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-storage-storageaccount-0-11-0-breaking-change",
          "title": "avm-res-storage-storageaccount 0.11.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-11-04",
          "effective_date": "2026-11-04",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -9,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-storage-storageaccount/releases/tag/v0.11.0",
          "url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-storage-storageaccount-0-11-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-containerregistry-registry-0-9-0-breaking-change",
          "title": "avm-res-containerregistry-registry 0.9.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-29",
          "effective_date": "2026-10-29",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -15,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-containerregistry-registry/releases/tag/v0.9.0",
          "url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-containerregistry-registry-0-9-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change",
          "title": "avm-res-managedidentity-userassignedidentity 0.6.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-27",
          "effective_date": "2026-10-27",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -17,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-managedidentity-userassignedidentity/releases/tag/v0.6.0",
          "url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-managedidentity-userassignedidentity-0-6-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-routetable-0-6-0-breaking-change",
          "title": "avm-res-network-routetable 0.6.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-27",
          "effective_date": "2026-10-27",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -17,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-routetable/releases/tag/v0.6.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-routetable-0-6-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-privateendpoint-0-3-0-breaking-change",
          "title": "avm-res-network-privateendpoint 0.3.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-22",
          "effective_date": "2026-10-22",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -22,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-privateendpoint/releases/tag/v0.3.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-privateendpoint-0-3-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-web-site-0-24-0-breaking-change",
          "title": "avm-res-web-site 0.24.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-12",
          "effective_date": "2026-10-12",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -32,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.24.0",
          "url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-web-site-0-24-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-network-networksecuritygroup-0-6-0-breaking-change",
          "title": "avm-res-network-networksecuritygroup 0.6.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-10-07",
          "effective_date": "2026-10-07",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -37,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-network-networksecuritygroup/releases/tag/v0.6.0",
          "url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-network-networksecuritygroup-0-6-0-breaking-change.json"
        },
        {
          "slug": "azure-avm-web-site-0-23-0-breaking-change",
          "title": "avm-res-web-site 0.23.0: breaking changes",
          "cloud": "azure",
          "service": "Azure Verified Modules",
          "service_slug": "avm",
          "category": "iac_module",
          "type": "breaking_change",
          "announced_date": "2026-09-15",
          "effective_date": "2026-09-15",
          "effective_precision": "day",
          "state": "in_effect",
          "days": -59,
          "source_url": "https://github.com/Azure/terraform-azurerm-avm-res-web-site/releases/tag/v0.23.0",
          "url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change",
          "markdown_url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change.md",
          "json_url": "https://eolwatch.dev/items/azure-avm-web-site-0-23-0-breaking-change.json"
        }
      ]
    }
  ]
}