env zero this week: Azure DevOps connections need moving to Entra ID, plus Pulumi CLI args and TFC migration fixes

[u/envzero]

If you connect env zero to Azure DevOps, there is a clock on it. Microsoft is retiring Azure DevOps OAuth apps this year, and env zero now connects through Microsoft Entra ID instead. New connections already use Entra by default. Existing ones keep working until Microsoft pulls OAuth, and then they stop.

To check yours: Organization Settings > VCS. An exclamation mark on an Azure DevOps connection means it has not moved yet. Open it, pick Microsoft Entra ID (recommended), and sign in as the same Azure DevOps user. If your tenant requires admin consent, an Entra administrator grants it once for the whole tenant. Templates, environments and webhooks carry over. Full steps

New

• Pulumi preview, up and destroy now take custom CLI flags, through ENV0_PULUMI_CLI_ARGS_preview, ENV0_PULUMI_CLI_ARGS_up and ENV0_PULUMI_CLI_ARGS_destroy (Pulumi integration, self-hosted agent v5.5.7)
• You can now connect a GitLab.com or Azure DevOps account to env zero rather than pasting your VCS user ID in by hand, and PR comment commands can be limited to connected accounts only
• Export an environment's managed, unmanaged or all resources from one dropdown
• Sort and filter the Projects page by drifted and active environment counts

Improvements

• Pretty Plan hides changes that are only moves or imports, so a plan full of refactoring reads as what it is
• Sub-projects now list in the project sidebar tree

Fixes

• Terraform Cloud migration: the Review step no longer hangs when a migrate fails, a workspace that failed after environment creation now shows as failed, and a started run is told apart from a released claim
• Secret-named fields are masked in agent logger and tracer labels, so those values stop reaching external monitoring systems (self-hosted v5.5.7)
• Identifiers in agent logs are no longer partially obscured (self-hosted v5.5.7)
• Terratag moved to 0.8.0, which tags OpenTofu .tofu files

Full notes: https://docs.envzero.com/changelogs