Skip to content

Purview Audit Log Processor v1.11.13#79

Merged
Rance9 merged 1 commit into
releasefrom
release-purview-v1.11.13-pr
Jul 6, 2026
Merged

Purview Audit Log Processor v1.11.13#79
Rance9 merged 1 commit into
releasefrom
release-purview-v1.11.13-pr

Conversation

@Rance9

@Rance9 Rance9 commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Purview Audit Log Processor v1.11.13

Bug-fix release for the PAX Purview Audit Log Processor.

Fixes

  • Agent 365 audit enrichment returning 0 rows — corrected a pipeline leak where a token-refresh helper's boolean/Quit return value was folded into the enrichment function's output, coercing the result to an object array and causing every package's enrichment to fail. The helper's return is now suppressed at the three call sites, with a defensive hashtable guard at the enrichment boundary.
  • Rollup append ingesting an already-rolled-up target (0 rows / no new data) — when a non-rollup-shaped remote -AppendFile leaf was supplied, the output path was reused as the download target, so the rollup re-ingested its own prior output. Output-file derivation and the existence check are now keyed off the active rollup state, forcing a fresh timestamped output file. A NOTE is emitted when a rollup runs against a non-rollup-shaped append target without M365 usage.

Housekeeping

  • Corrected two stale Agent 365 parameter comments to match runtime behavior (app-only, including managed identity, is supported).

Contents

  • Updated processor script (root + archived copy), changelog, release notes, documentation header, and versions.json.

The embedded Python processor block is byte-identical to v1.11.12. No breaking changes.

- Fix Microsoft Agent 365 catalog enrichment producing an empty export under app-only
  authentication (an internal enrichment step returned an unexpected value shape, rejecting
  every catalog row). Enrichment now returns the expected result; the adjacent package-listing
  and per-package-detail steps are hardened the same way; a defensive fallback logs a warning
  and continues with blank date-created/created-by rather than dropping rows.
- Fix cross-run -AppendFile reconciliation of the rolled-up interactions file when the remote
  target uses a custom (non-standard) filename: the fresh export and the downloaded target
  could resolve to the same working path, so the rollup ingested the already-rolled-up target
  and appended nothing. Under -Rollup/-RollupPlusRaw the fresh export now always uses a distinct
  timestamped working file; a note is logged for non-standard target names.
- Promote root script to v1.11.13 (archive v1.11.13 copy added); refresh v1.11.x release notes,
  documentation, README, and versions.json.
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

Thanks for the contribution, @Rance9! ✅ This PR is from an approved team member and will be reviewed normally.

@github-actions github-actions Bot added the Team-Contribution PR from Copilot-ROI-Advisors team member label Jul 6, 2026
@Rance9 Rance9 enabled auto-merge July 6, 2026 09:45
@Rance9 Rance9 merged commit 339adef into release Jul 6, 2026
4 checks passed
@Rance9 Rance9 deleted the release-purview-v1.11.13-pr branch July 6, 2026 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Team-Contribution PR from Copilot-ROI-Advisors team member

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants