azdocs v0.2.0: Closing the gaps

This release closes the gaps a review of the whole application found: the store and CLI now tell the truth about what a collect did, snapshots can be compared field by field and cancelled, the query pack and relationship extraction reach the edge services, every export format carries the same diagrams and a changes chapter, the desktop stays responsive on large estates, and the build is gated on its dependencies and licences.

Highlights

• Honest collection. Abandoned collects are reconciled, cancelled is a status, latest never resolves to a failed run, and collect --fail-on, --dry-run and --format json on check, snapshots and query list make pipelines scriptable. Bounded retries with jitter and sovereign clouds (cloud = "usgov" | "china").
• Field-level history. snapshots diff reports added, removed and changed resources with before/after values, new and resolved findings and relationships, ignoring the properties Azure rewrites on every read. A running collect can be stopped from the CLI or the desktop.
• A wider query pack. 34 new queries (148 in all) and relationships for NAT gateways, firewalls, VPN gateways, container apps, flexible servers, disk encryption sets, scale sets and backup vaults; tag audits at group and subscription scope.
• Reports that say what changed. Scoping by subscription, group or severity; diagrams with legends in Markdown and HTML; a dark palette derived from each theme; a “changes since the previous snapshot” chapter and trend; website evidence in the assessment; every printed cap stated; broader CSV and XLSX exports; the workbook no longer fails on very long cells.
• A faster, fuller desktop. Reads off the main thread, on-demand comparison and resource detail, cancel and scope for collection, cancel and reveal for exports, findings multi-select with copy and CSV, field-level history, a tag facet, remembered filters, About and keyboard shortcuts, text scaling, single instance and window state.
• Gated supply chain. cargo-deny, frontend audit, licence notices, a minimum Rust version of 1.89, musl tests and coverage in CI; pinned actions; SBOMs and build-provenance attestations on every release asset.

The Windows installers in this release are unsigned: Azure Trusted Signing credentials are not configured, so SmartScreen warns on first run. Verify the checksum or attestation and choose More info › Run anyway; see the installation guide.

Install or upgrade

Upgrade the command-line application with Homebrew:

brew upgrade russmckendrick/tap/azdocs

On Apple Silicon macOS, upgrade the signed and notarized desktop app with:

brew upgrade --cask russmckendrick/tap/azdocs-desktop

Portable CLI archives and desktop installers for macOS, Windows and Linux are attached to this release, each with an SBOM or a build-provenance attestation. Verify direct downloads against azdocs-checksums.sha256 or with gh attestation verify <file> --repo russmckendrick/azdocs.