What's Changed

• feat: integrate MQTT 5 custom-topic support into 1.1 preview by Yuelin Zhao (@cheatsheet1999) in #907
• feat: block direct DPS links to MQTT v5 Hubs by Yuelin Zhao (@cheatsheet1999) in #909
• chore: sync release/1.0.0-preview into 1.1.0-preview by Yuelin Zhao (@cheatsheet1999) in #915
• chore: sync 1.1.0 preview by Yuelin Zhao (@cheatsheet1999) in #916
• fix: quote ARM endpoint links in help messages by Hangyi (@HangyiWang) in #919
• test: re-enable verified preview integration tests by Hangyi (@HangyiWang) in #918
• feat: add advisory linter compatibility checks to CI and release by Hangyi (@HangyiWang) in #920
• perf: parallel unit tests (20m → 6m) by Hangyi (@HangyiWang) in #917
• chore: merge semantic models into 1.1.0-preview branch by Yuelin Zhao (@cheatsheet1999) in #923
• fix: fail generic wait commands on timeout by Hangyi (@HangyiWang) in #922
• fix(adr): protect namespace unlink with response ETags by Hangyi (@HangyiWang) in #925
• refactor: use native SDK pollers and align SDKs by Yuelin Zhao (@cheatsheet1999) in #924
• fix(adr): restore polling for namespace link removal by Hangyi (@HangyiWang) in #927
• docs(adr): correct active job run deletion help by Hangyi (@HangyiWang) in #930
• fix(dps): fetch certificate etags and inherit allocation policies by Hangyi (@HangyiWang) in #931
• fix: harden ADR linking and Hub/DPS readiness for 1.1.0 preview by Hangyi (@HangyiWang) in #945
• fix: ADR linking recovery and bounded integration tests by Hangyi (@HangyiWang) in #948
• chore: prepare 1.1.0-preview  by Yuelin Zhao (@cheatsheet1999) in #953
• fix: Fix Mooncake DPS Entra audience mapping - Preview by Yuelin Zhao (@cheatsheet1999) in #956
• fix(adr): handle deleted or stale linked Hub/DPS (1.1.0-preview) by Hangyi (@HangyiWang) in #955

Full Changelog: v1.0.0b2...v1.1.0b1

What's Changed

• ci: pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #883
• chore(deps-dev): bump wheel from 0.30.0 to 0.38.1 by Dependabot (@dependabot)[bot] in #884
• chore(deps): update pinned actions and harden integration result checks by Dependabot (@dependabot)[bot] in #895
• fix(iot edge devices create): validate device Id used as file system path by ZZ (@zzcodework) in #876
• chore(deps): bump the github-actions group with 6 updates by Dependabot (@dependabot)[bot] in #926
• chore(deps): bump the github-actions group with 3 updates by Dependabot (@dependabot)[bot] in #938
• chore(deps): bump the github-actions group with 3 updates by Dependabot (@dependabot)[bot] in #944
• feat: release 1.0.0 GA (sync preview into dev) by Hangyi (@HangyiWang) in #951

New Contributors

• Dan Fiedler (@danfiedler-msft) made their first contribution in #883
• Dependabot (@dependabot)[bot] made their first contribution in #884

Full Changelog: v0.31.0...v1.0.0

🚀 1.0.0b2 Preview

The 1.0 preview brings device identity, provisioning, and fleet updates closer
together—all from your terminal.

• 🗂️ A home for every device. 112 preview commands under az iot adr cover
  namespaces, Registry Devices, identities, certificates, groups, jobs, and reports.
• 🔗 Connect the pieces. Link namespaces to IoT Hub, DPS, and Software Updates,
  with prerequisite checks and automatic role assignments when authorized.
• 🔐 Certificate-aware onboarding. Manage certificate authorities and policies,
  register devices through DPS with a CSR, and retrieve issued certificate chains.
• 📦 Manage fleet updates. Generate v5 manifests, stream artifacts to storage,
  organize device groups, and manage update jobs and compliance reports.

⚙️ Refreshed APIs

Updated SDKs power the new workflows and existing Hub/DPS commands:

📝 Before upgrading

Namespace linking now lives under az iot adr ns link; Hub/DPS and namespace
create/update commands no longer accept link inputs.

This is a preview, not a GA release. Preview APIs support Azure public cloud
only. Requires Azure CLI 2.73.0+ and Python 3.10+.

What's Changed

• feat: adr ns by Hangyi (@HangyiWang) in #840
• fix: run release integration tests in Australia East by Hangyi (@HangyiWang) in #903
• perf: parallel universe (4h → 1.5h) by Hangyi (@HangyiWang) in #904
• fix(adr): allow certificate policy validity from 1 to 90 days by Hangyi (@HangyiWang) in #910
• fix(adr): keep service failure as cause when link recovery stops by Hangyi (@HangyiWang) in #908
• chore: prepare 1.0.0b2 preview release by Hangyi (@HangyiWang) in #914

Full Changelog: v0.33.0b1...v1.0.0b2

What's Changed

• chore: add Azure IoT CLI maintainer agent and TypeSpec SDK skill by Yuelin Zhao (@cheatsheet1999) in #877
• fix: backfill hostName on dps linked hub update  by Yuelin Zhao (@cheatsheet1999) in #878
• chore: Generate SDK for IoT DPS 2026-08-31 API by Yuelin Zhao (@cheatsheet1999) in #879
• feat: add --disable-local-auth to az iot dps create/update by Yuelin Zhao (@cheatsheet1999) in #880
• chore: merge dev into preview by Yuelin Zhao (@cheatsheet1999) in #881
• feat: add --disable-local-auth to az iot dps create/update  by Yuelin Zhao (@cheatsheet1999) in #882
• chore(release): prepare v0.31.0 by Yuelin Zhao (@cheatsheet1999) in #887
• test(ADU): skip private endpoint connection test blocked by eastus2euap service regression by Yuelin Zhao (@cheatsheet1999) in #888
• feat: adr ns September release API alignment by Hangyi (@HangyiWang) in #892
• feat: merge dev into preview and add DPS RBAC by Yuelin Zhao (@cheatsheet1999) in #893
• fix: stabilize IoT Hub integration tests against query lag by Yuelin Zhao (@cheatsheet1999) in #894
• test: Stabilize ADR namespace integration tests by Yuelin Zhao (@cheatsheet1999) in #896

Full Changelog: v0.32.0b1...v0.33.0b1

What's Changed

• chore: add Azure IoT CLI maintainer agent and TypeSpec SDK skill by Yuelin Zhao (@cheatsheet1999) in #877
• chore: Generate SDK for IoT DPS 2026-08-31 API by Yuelin Zhao (@cheatsheet1999) in #879
• feat: add --disable-local-auth to az iot dps create/update by Yuelin Zhao (@cheatsheet1999) in #880
• feat: add --disable-local-auth to az iot dps create/update  by Yuelin Zhao (@cheatsheet1999) in #882
• chore(release): prepare v0.31.0 by Yuelin Zhao (@cheatsheet1999) in #887
• test(ADU): skip private endpoint connection test blocked by eastus2euap service regression by Yuelin Zhao (@cheatsheet1999) in #888

Full Changelog: v0.30.0...v0.31.0

What's Changed

• ci: update preview branch with integration test workflow and security fixes by Hangyi (@HangyiWang) in #817
• ci: fix Python 3.10 cryptography import error and split scheduler workflow by Hangyi (@HangyiWang) in #818
• fix: tweak ADR BYOR int tests by Hangyi (@HangyiWang) in #821
• chore: merge dev into preview by Yuelin Zhao (@cheatsheet1999) in #830
• chore: merge tls13 support into preview by Yuelin Zhao (@cheatsheet1999) in #831
• fix: hostname routing in module/device by Yuelin Zhao (@cheatsheet1999) in #833
• feat: support switching on dps linked-hub update by Yuelin Zhao (@cheatsheet1999) in #835
• fix: set hostName when creating KeyBased linked hub by Yuelin Zhao (@cheatsheet1999) in #841
• test: 99% unit test coverage by Hangyi (@HangyiWang) in #843
• test: Integration Test Fixes by Hangyi (@HangyiWang) in #844
• ci: upgrade NodeJS 24 for IoT CLI extension workflows by Hangyi (@HangyiWang) in #845
• fix: bump wheel version to fix CI linter by Hangyi (@HangyiWang) in #853
• ci: add read-after-create retries to iot hub integration test by Hangyi (@HangyiWang) in #855
• test: fix iothub identity fixtures reading principalId from empty hub create response by Hangyi (@HangyiWang) in #857
• feat: remove --hostname-type option from linked-hub update by Yuelin Zhao (@cheatsheet1999) in #856
• chore: Merge dev into preview by Yuelin Zhao (@cheatsheet1999) in #859
• chore: merge fabric eventstream feature branch into preview by Yuelin Zhao (@cheatsheet1999) in #867
• chore: merge dev into preview for 0.32.0b1 release prep by Yuelin Zhao (@cheatsheet1999) in #869
• fix: route data-plane operations to the correct GWv2 endpoint by Yuelin Zhao (@cheatsheet1999) in #873
• fix: add preview flag to az iot adr ns commands by Hangyi (@HangyiWang) in #870
• chore: add preview label for TLS1.3+MI feature by Yuelin Zhao (@cheatsheet1999) in #874

Full Changelog: v0.30.0...v0.32.0b1

Device Update (ADU) updates

• Added --download-security parameter to az iot du device deployment create to select the protocol used for update payload downloads. Defaults to https (TLS); use http only when the target environment does not support TLS.

• Updated the Device Update data plane SDK to API version 2026-06-01.

• Fixed az iot du device import where the import_type payload did not match the service expectation.

• Fixed az iot du storage access to support newer azure-mgmt-storage releases (v25+) when retrieving storage account keys.

IoT Hub updates

• Fixed az iot hub state export to preserve routing endpoint resource names (Event Hub / Service Bus namespaces, Cosmos DB / Storage accounts) whose names begin with characters found in the URI scheme. Endpoints are no longer dropped or corrupted during export.

General updates

• [Breaking Change] Minimum supported Python version bumped from 3.9 to 3.10.

• Updated jsonschema dependency to >=4.25,<5.

• Added aiohttp>=3.9,<4.0 as a required dependency to support AMQP over WebSocket transport for event monitoring.

• Removed remaining uamqp references from help text and documentation.

• Replaced deprecated datetime.utcnow() and codecs.open calls with timezone-aware equivalents.

IoT Hub / IoT Central monitoring updates

• az iot hub monitor-events and az iot central diagnostics monitor-events / validate-messages now automatically route traffic through an HTTP proxy when the HTTPS_PROXY or HTTP_PROXY environment variable is set, using AMQP over WebSocket transport.

• Added --transport (--tr) parameter to az iot hub monitor-events, az iot central diagnostics monitor-events, and az iot central diagnostics validate-messages to explicitly select the underlying transport protocol (amqp or amqp_ws). Defaults to amqp; amqp_ws (AMQP over WebSocket) is required when routing through an HTTP proxy or when port 5671 is blocked.

• az iot hub monitor-events --login now accepts an Event Hub connection string (e.g. the built-in endpoint connection string from the Azure portal) in addition to an IoT Hub connection string.

What's Changed

• chore: sync dev branch with release/cms_public_preview by Ketki Naik (@ketkimnaik) in #785

• fix: pass cloud-specific credential_scopes by Yuelin Zhao (@cheatsheet1999) in #786

• feat(adr): add policy revoke-issuer & device CRUD/revoke by Hangyi (@HangyiWang) in #788

• chore: merge dev into cms_public_preview_refresh by Yuelin Zhao (@cheatsheet1999) in #794

• chore: replace hardcoded canary ARM endpoint with dynamic cloud endpoint by Hangyi (@HangyiWang) in #796

• chore: remove LRO workarounds for policy revokeIssuer and activateBYOR by Hangyi (@HangyiWang) in #797

• chore: rename --enable-certificate-management parameter by Hangyi (@HangyiWang) in #798

• fix: send non-nullable disable property in device revoke request by Hangyi (@HangyiWang) in #799

• chore: increase cms dev version number for internal testing by Hangyi (@HangyiWang) in #801

• chore: adjust CMS device integration test by Hangyi (@HangyiWang) in #802

• chore: CMS preview refresh version update by Hangyi (@HangyiWang) in #804

• fix: cleanup helper message format by Hangyi (@HangyiWang) in #807

• policy revoke-issuer (az iot adr ns policy revoke-issuer): revokes the current CA (issuer) certificate for a namespace policy and triggers the service to generate a new one. Use this when the CA certificate is compromised or needs rotation.

• bring your own root / BYOR (--enable-byor / az iot adr ns policy activate-byor): enables customers to use their own root CA instead of a service-managed one.

• device revoke (az iot adr ns device revoke): revokes all active credentials for a specified device in a namespace. The device must re-authenticate and obtain new credentials. Use --disable to also prevent the device from obtaining new credentials (sets device enabled state to false).

Full Changelog: v0.30.0b1...v0.30.0b2

General updates

• Updated azure-iot-device dependency to >=2.15.0rc1,<3.0.0dev0 for Windows platform compatibility.