Dev sentinel securityinsights microsoft.security insights 2025 07 01 preview#35645
Merged
xuhumsft merged 8 commits intoJul 25, 2025
openapi-pipeline-app / Breaking Change(Cross-Version)
succeeded
Jul 25, 2025 in 8m 29s
Check `Breaking Change(Cross-Version)` succeeded
CrossVersionBreakingChange
View Azure DevOps build log for more details.
Important
To see the full list of breaking changes messages, with all the details available:
In the relevant ADO build (see the link above), find the job CrossVersionBreakingChange, then the task within, also called CrossVersionBreakingChange.
In the task's build log, search for Full list of messages.
Details
| Compared specs (v0.10.13) | new version | base version |
|---|---|---|
| AlertRules.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| AlertRules.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| AutomationRules.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| AutomationRules.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| BillingStatistics.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Bookmarks.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| Bookmarks.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| BusinessApplicationAgents.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ContentPackages.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ContentPackages.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ContentProductPackages.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ContentProductPackages.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ContentProductTemplates.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ContentProductTemplates.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ContentTemplates.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ContentTemplates.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| EnrichmentWithWorkspace.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Entities.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| EntityQueries.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| EntityQueryTemplates.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| FileImports.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Hunts.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Incidents.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| Incidents.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Metadata.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| Metadata.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| OfficeConsents.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| OnboardingStates.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| OnboardingStates.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Recommendations.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| SecurityMLAnalyticsSettings.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| SecurityMLAnalyticsSettings.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Settings.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| SourceControls.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| SourceControls.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ThreatIntelligence.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ThreatIntelligence.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ThreatIntelligenceCount.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ThreatIntelligenceQuery.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| TriggeredAnalyticsRuleRuns.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| Watchlists.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| Watchlists.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| WorkspaceManagerAssignments.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| WorkspaceManagerConfigurations.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| WorkspaceManagerGroups.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| WorkspaceManagerMembers.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| AlertTypes.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| AlertTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ContentCommonTypes.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| ContentCommonTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| EntityTypes.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| EntityTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| IncidentTypes.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| IncidentTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| RelationTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| ThreatIntelligenceTypes.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| dataConnectorDefinitions.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| dataConnectorDefinitions.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| dataConnectors.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
| operations.json | 2025-07-01-preview(ce7aea7) | 2025-06-01(main) |
| operations.json | 2025-07-01-preview(ce7aea7) | 2025-04-01-preview(main) |
The following breaking changes have been detected in comparison to the latest stable version
⚠️ 1017 - ReferenceRedirection
Displaying 3 out of 3 occurrences.
| Index | Description |
|---|---|
| 1 | The '$ref' property points to different models in the old and new versions. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1271:9 definitions.IncidentProperties.properties.statusOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1465:9 |
| 2 | The '$ref' property points to different models in the old and new versions. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1274:9 definitions.IncidentProperties.properties.classificationOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1311:9 |
| 3 | The '$ref' property points to different models in the old and new versions. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1278:9 definitions.IncidentProperties.properties.classificationReasonOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1347:9 |
⚠️ 1032 - DifferentAllOf
Displaying 9 out of 9 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L1583:9 definitions.MicrosoftSecurityIncidentCreationAlertRuleTemplate.properties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L1053:9 |
| 2 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L1600:5 definitions.MicrosoftSecurityIncidentCreationAlertRuleTemplatePropertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L1070:5 |
| 3 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L2383:5 definitions.ActionResponseOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L579:5 |
| 4 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L2424:11 definitions.ActionsList.properties.value.itemsOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L533:11 |
| 5 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L326:13 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}'].get.responses.200.schemaOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L317:13 |
| 6 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L375:13 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}'].put.responses.200.schemaOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L366:13 |
| 7 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json#L381:13 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}'].put.responses.201.schemaOld: Microsoft.SecurityInsights/stable/2025-06-01/AlertRules.json#L372:13 |
| 8 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Metadata.json#L250:9 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName}'].patch.parametersOld: Microsoft.SecurityInsights/stable/2025-06-01/Metadata.json#L250:9 |
| 9 | The new version has a different 'allOf' property than the previous one. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Metadata.json#L325:5 definitions.metadataPatchOld: Microsoft.SecurityInsights/stable/2025-06-01/Metadata.json#L325:5 |
⚠️ 1038 - AddedPath
Displaying 3 out of 3 occurrences.
| Index | Description |
|---|---|
| 1 | The new version is adding a path that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L222:5 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}/relations'] |
| 2 | The new version is adding a path that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L283:5 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}/expand'] |
| 3 | The new version is adding a path that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L331:5 paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}/relations/{relationName}'] |
⚠️ 1040 - AddedReadOnlyPropertyInResponse
Displaying 3 out of 3 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a new read-only property 'mergedIncidentNumber' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1034:7 definitions.IncidentAdditionalData.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1090:7 |
| 2 | The new version has a new read-only property 'mergedIncidentUrl' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1034:7 definitions.IncidentAdditionalData.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1090:7 |
| 3 | The new version has a new read-only property 'techniques' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1034:7 definitions.IncidentAdditionalData.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1090:7 |
💬 1020 - AddedEnumValue
Displaying 10 out of 50 occurrences.
| Index | Description |
|---|---|
| 1 | The new version is adding enum value(s) 'AllItems' from the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AutomationRules.json#L625:5 definitions.AutomationRulePropertyArrayConditionSupportedArrayConditionTypeOld: Microsoft.SecurityInsights/stable/2025-06-01/AutomationRules.json#L630:5 |
| 2 | The new version is adding enum value(s) 'AllItems' from the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AutomationRules.json#L680:9 definitions.AutomationRulePropertyArrayValuesCondition.properties.arrayConditionTypeOld: Microsoft.SecurityInsights/stable/2025-06-01/AutomationRules.json#L678:9 |
| 3 | The new version is adding enum value(s) 'CustomDetection' from the old version. New: preview/2025-07-01-preview/common/ContentCommonTypes.json#L282:9 definitions.metadataDependencies.properties.kindOld: stable/2025-06-01/common/ContentCommonTypes.json#L281:9 |
| 4 | The new version is adding enum value(s) 'CustomDetection' from the old version. New: preview/2025-07-01-preview/common/ContentCommonTypes.json#L45:5 definitions.metadataKindOld: stable/2025-06-01/common/ContentCommonTypes.json#L45:5 |
| 5 | The new version is adding enum value(s) 'CustomDetection' from the old version. New: preview/2025-07-01-preview/common/ContentCommonTypes.json#L484:9 definitions.productTemplateProperties.properties.contentKindOld: stable/2025-06-01/common/ContentCommonTypes.json#L483:9 |
| 6 | The new version is adding enum value(s) 'CustomDetection' from the old version. New: preview/2025-07-01-preview/common/ContentCommonTypes.json#L484:9 definitions.templateBaseProperties.properties.contentKindOld: stable/2025-06-01/common/ContentCommonTypes.json#L483:9 |
| 7 | The new version is adding enum value(s) 'CustomDetection' from the old version. New: preview/2025-07-01-preview/common/ContentCommonTypes.json#L484:9 definitions.templateProperties.properties.contentKindOld: stable/2025-06-01/common/ContentCommonTypes.json#L483:9 |
| 8 | The new version is adding enum value(s) 'IncidentCustomDetectionRuleIds, IncidentAlertTitle' from the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AutomationRules.json#L1130:9 definitions.AutomationRulePropertyValuesCondition.properties.propertyNameOld: Microsoft.SecurityInsights/stable/2025-06-01/AutomationRules.json#L1118:9 |
| 9 | The new version is adding enum value(s) 'IncidentCustomDetectionRuleIds, IncidentAlertTitle' from the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AutomationRules.json#L794:5 definitions.AutomationRulePropertyConditionSupportedPropertyOld: Microsoft.SecurityInsights/stable/2025-06-01/AutomationRules.json#L792:5 |
| 10 | The new version is adding enum value(s) 'IncidentLabels' from the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/AutomationRules.json#L647:5 definitions.AutomationRulePropertyArrayConditionSupportedArrayTypeOld: Microsoft.SecurityInsights/stable/2025-06-01/AutomationRules.json#L648:5 |
💬 1041 - AddedPropertyInResponse
Displaying 4 out of 4 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a new property 'entityMappings' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L602:7 definitions.BookmarkProperties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Bookmarks.json#L263:7 |
| 2 | The new version has a new property 'tactics' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L602:7 definitions.BookmarkProperties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Bookmarks.json#L263:7 |
| 3 | The new version has a new property 'teamInformation' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1259:7 definitions.IncidentProperties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1304:7 |
| 4 | The new version has a new property 'techniques' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L602:7 definitions.BookmarkProperties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Bookmarks.json#L263:7 |
💬 1045 - AddedOptionalProperty
Displaying 10 out of 32 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a new optional property 'deviceSubType' that was not found in the old version. New: preview/2025-07-01-preview/common/EntityTypes.json#L917:7 definitions.IoTDeviceEntityProperties.propertiesOld: stable/2025-06-01/common/EntityTypes.json#L783:7 |
| 2 | The new version has a new optional property 'entityMappings' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Bookmarks.json#L602:7 definitions.BookmarkProperties.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Bookmarks.json#L263:7 |
| 3 | The new version has a new optional property 'etag' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Metadata.json#L333:7 definitions.metadataPatch.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Metadata.json#L328:7 |
| 4 | The new version has a new optional property 'id' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Metadata.json#L333:7 definitions.metadataPatch.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Metadata.json#L328:7 |
| 5 | The new version has a new optional property 'importance' that was not found in the old version. New: preview/2025-07-01-preview/common/EntityTypes.json#L917:7 definitions.IoTDeviceEntityProperties.propertiesOld: stable/2025-06-01/common/EntityTypes.json#L783:7 |
| 6 | The new version has a new optional property 'isAuthorized' that was not found in the old version. New: preview/2025-07-01-preview/common/EntityTypes.json#L917:7 definitions.IoTDeviceEntityProperties.propertiesOld: stable/2025-06-01/common/EntityTypes.json#L783:7 |
| 7 | The new version has a new optional property 'isProgramming' that was not found in the old version. New: preview/2025-07-01-preview/common/EntityTypes.json#L917:7 definitions.IoTDeviceEntityProperties.propertiesOld: stable/2025-06-01/common/EntityTypes.json#L783:7 |
| 8 | The new version has a new optional property 'isScanner' that was not found in the old version. New: preview/2025-07-01-preview/common/EntityTypes.json#L917:7 definitions.IoTDeviceEntityProperties.propertiesOld: stable/2025-06-01/common/EntityTypes.json#L783:7 |
| 9 | The new version has a new optional property 'mergedIncidentNumber' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1034:7 definitions.IncidentAdditionalData.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1090:7 |
| 10 | The new version has a new optional property 'mergedIncidentUrl' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/Incidents.json#L1034:7 definitions.IncidentAdditionalData.propertiesOld: Microsoft.SecurityInsights/stable/2025-06-01/Incidents.json#L1090:7 |
The following breaking changes have been detected in comparison to the latest preview version
⚠️ 1040 - AddedReadOnlyPropertyInResponse
Displaying 1 out of 1 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a new read-only property 'workloadIdentityFederation' in response that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json#L369:7 definitions.SourceControlProperties.propertiesOld: Microsoft.SecurityInsights/preview/2025-04-01-preview/SourceControls.json#L369:7 |
💬 1045 - AddedOptionalProperty
Displaying 1 out of 1 occurrences.
| Index | Description |
|---|---|
| 1 | The new version has a new optional property 'workloadIdentityFederation' that was not found in the old version. New: Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json#L369:7 definitions.SourceControlProperties.propertiesOld: Microsoft.SecurityInsights/preview/2025-04-01-preview/SourceControls.json#L369:7 |
Loading