[alexweininger]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines. The released source currently fails the required Agent Plugins v1 manifest gate, so this draft is not ready for review.
• I have read and followed the Guidance for submissions involving paid services.
• N/A — this updates an existing external canvas plugin entry; it does not add a new repository file.
• N/A — the existing plugin name and catalog location are unchanged.
• The existing customer content remains technical, neutral, and clearly structured.
• I tested the exact Prepare Azure Resources Query 0.1.7 production package microsoft/azure-dev-tools#44 extension with GitHub Copilot and opened the Azure Resources Query canvas.
• I ran npm start; generated marketplace content is current and README.md did not change.
• I am targeting the main branch for this pull request.

---

Description

Updates Azure Resources Query from 0.1.5 to 0.1.7 and pins production commit 17ab2a69f841a1a252c4bee750505b7c4b9e7abf. Version 0.1.6 did not reach the catalog.

This draft is blocked. The immutable 0.1.7 package uses .github/plugin/plugin.json with the GitHub Copilot skills extension. Current Awesome Copilot policy requires an Agent Plugins v1 plugin.json at the plugin root and treats the existing layout as a blocking error. A new conforming source and production release is required before this catalog update can pass.

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• New canvas extension.
• Update to existing instruction, prompt, agent, plugin, skill, workflow, or canvas extension.
• Other (please specify):

---

Additional Notes

• Supersedes Update Azure Resources Query to 0.1.6 #5392.
• Production PR: Prepare Azure Resources Query 0.1.7 production package microsoft/azure-dev-tools#44.
• Production package verification and all 109 protected checksums pass.
• Catalog generation, standard plugin validation, skill lint, install smoke, version match, and canvas structure pass.
• Blocking gate: Agent Plugins v1 manifest compliance.
• The 0.1.7 immutable tag is not published, and azure-resources-query-latest still points to 0.1.6.
• Usage data is disclosed in the released README. The saved-file opt-out is ~/.copilot/canvases/telemetry.json, or the COPILOT_HOME equivalent, with {"enabled":false}.

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🚦 Submission status: ✅ Approved

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	✅ Passed	Passed · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 1/1 (aaronpowell)
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for 702792b · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

🛑 External plugin PR checks failed (submitter fixes required)

• Changed entries detected: 1
• Workflow state label: requires-submitter-fixes
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
azure-resources-query	🛑 fail	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	🛑 fail	17ab2a69f841a1a252c4bee750505b7c4b9e7abf

Gate output details

azure-resources-query - spec compliance (🛑 fail)

Agent Plugins v1.0.0 manifest errors:
- manifest location is ".github/plugin/plugin.json"; expected "plugin.json" at plugin root
- top-level field "skills" is not part of Agent Plugins v1.0.0
- schema validation: manifest must NOT have additional properties

azure-resources-query - vally lint (✅ pass)

✅ azure-resources-query (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

azure-resources-query - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-yNP3fH/copilot-home/.copilot/installed-plugins/external-plugin-intake/azure-resources-query/.github/plugin/plugin.json.

azure-resources-query - version match (pass)

- 17ab2a69f841a1a252c4bee750505b7c4b9e7abf: matched version "0.1.7" at "canvases/azure-resources-query/.github/plugin/plugin.json".

azure-resources-query - ref/sha consistency (not_run)

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

azure-resources-query - canvas structure (pass)

- 17ab2a69f841a1a252c4bee750505b7c4b9e7abf: found "canvases/azure-resources-query/com.github.copilot/extensions" with entry point "canvases/azure-resources-query/com.github.copilot/extensions/azure-resources-query/extension.mjs".

- azure-resources-query: spec=fail, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=not_run, canvas-structure=pass, overall=fail

[Copilot]

🟡 Changes recommended

The catalog entry pins an upstream SHA whose manifest fails the required blocking Agent Plugins v1 compliance check, so the change cannot merge until a conforming production commit is pinned and the entry regenerated.

1 open issue

• Pin a production commit with a conforming root plugin manifest · New

What changed in this PR

Updates the Azure Resources Query external plugin listing from version 0.1.5 to 0.1.7, pinned to commit 17ab2a69f841a1a252c4bee750505b7c4b9e7abf. The pinned upstream source fails the required Agent Plugins v1 manifest compliance gate.

Changes:

• Updates the catalog version to 0.1.7.
• Pins the external source to the specified production commit.
• Regenerates the marketplace metadata.

This pull request requires changes.

File	Description
plugins/​external.json	Updates the Azure Resources Query version and immutable source commit. The pinned source requires a conforming root plugin.json before it can merge.
.github/​plugin/​marketplace.json	Mirrors the updated external plugin metadata in the generated marketplace manifest.

_{Review effort: Lite (auto)}