v2.6.0

[almenscorner]

New features

• Drift compare command, new IntuneCD-startcompare subcommand to analyze drift between two backup directories including the option to generate a HTML view of the drift using --html flag. (fb3db32)
• Improved base64 documentation rendering, base64 values in markdown docs are now wrapped in collapsible <details> blocks with newline-aware decoding, so large decoded payloads no longer break table layout. (93cfa96)

Bug fixes

• Duplicate policy creation when repo contains same-named files (Duplicate policies created on every deploy when repo has multiple files with the same policy name #255), IntuneCD used to create a new tenant policy on every deploy when two repo files resolved to the same policy name (e.g. a hand-authored MyPolicy_mdm.json alongside a backup-generated MyPolicy_mdm__.json). The update path now matches by ID-from-filename first and detects duplicate name groups pre-flight, skipping ambiguous files with a logged warning. Applied across every Intune update module. (8caa5ff)
• Compliance update aborted on 'NoneType' object is not iterable (IntuneCD crashes on every compliance policy deploy: 'NoneType' object is not iterable on scheduledActionsForRule #256), Compliance and DeviceCompliance modules crashed when policy JSON had scheduledActionsForRule, scheduledActionConfigurations, or settings set to null. Iteration sites now coerce None to an empty list. (753891b)
• AppConfiguration backup aborted on a single missing app ([BUG] Abort of all AppConfiguration backups if 404 error #257), a single mobileApps lookup failing with "Request failed after 5 retries with no response" would terminate the entire AppConfigurations module. The per-app request is now wrapped in a try/except so one bad app is logged and skipped, and the remaining configurations are still backed up. (03a51e9)
• Dev/installed import mismatch, update_intune.py and backup_intune.py hardcoded package="IntuneCD" when dynamically importing modules, so launching from a local checkout (src.IntuneCD.run_update) silently loaded the installed package's children. Now uses package=package so the same entry-point file loads consistently in both modes. (f5dfb55)
• Fixed proactive remediation scripts being compared against the wrong files when backups are taken without --append-id, which caused false "Detection/Remediation Script changed" drift for all but one policy. Scripts are now matched to their own policy by filename. ([BUG] ProactiveRemediation update module uses wrong PS1 files when YAML filenames don't contain __id (multiple remediations) #261, Fix proactive remediation script matching without append-id #262), thanks @david6983
• Fixed backup filenames containing line breaks and control characters (e.g. from Intune app names or version numbers), which caused errors on Windows. Control and zero-width characters are now stripped from generated filenames. ([BUG] Filename error in Windows when using linebreaks in Intune appname or version #259, Sanitize control characters in backup filenames #260), thanks @akmhatey-ai

Maintenance

• deepdiff bumped to 9.1.0. [FEATURE] Update deepdiff from 8.4.2 to 8.6.1 #258
• pytest / pytest-cov bumped to >=8.3 / >=5.0 for Python 3.14 compatibility (ast.Str was removed). (601051c)
• Test fixtures updated to match the new base64 documentation formatting. (0d13791)

closes #262
closes #260
closes #261
closes #257
closes #259
closes #256
closes #255