Skip to content

[pull] dev from KelvinTegelaar:dev#93

Open
pull[bot] wants to merge 24 commits intoisgq-github01:devfrom
KelvinTegelaar:dev
Open

[pull] dev from KelvinTegelaar:dev#93
pull[bot] wants to merge 24 commits intoisgq-github01:devfrom
KelvinTegelaar:dev

Conversation

@pull
Copy link

@pull pull bot commented Mar 20, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

kris6673 and others added 7 commits March 16, 2026 19:51
…itations, cancel meetings)

Add support for Exchange cloud-only Set-MailboxAutoReplyConfiguration
parameters: CreateOOFEvent, OOFEventSubject, AutoDeclineFutureRequestsWhenOOF,
DeclineEventsForScheduledOOF, DeclineAllEventsForScheduledOOF, and
DeclineMeetingMessage.

These are plumbed through all 3 OOO entry points:
- Set-CIPPOutOfOffice: 6 new [bool]/[string] params with PSBoundParameters guards
- Get-CIPPOutOfOffice: returns new fields + fixes null-safe StartTime/EndTime
- Invoke-ExecSetOoO: extracts calendar params from request body (Scheduled only)
- Set-CIPPVacationOOO: accepts StartTime/EndTime + calendar params; uses
  Scheduled state when dates are provided for Exchange calendar option support
- Invoke-ExecScheduleOOOVacation: converts epoch to datetime for Scheduled mode,
  conditionally attaches calendar params to the Add task

All changes are backwards compatible — callers that omit the new parameters
get identical behavior via $PSBoundParameters.ContainsKey() guards.
The previous implementation batched all MFA method deletions into a single Graph bulk request, which introduced two problems:

1. Duplicate method types (e.g. two phone numbers) could collide within the same batch, causing one of the requests to fail silently.
2. The success/failure check only inspected a single status code from the bulk response. If one method was removed but another failed, the function logged full success — leaving the user's MFA partially intact despite the log stating otherwise.

Switching to a sequential foreach loop eliminates the collision window and tracks successes and failures independently, so partial failures are reported accurately.
- Improved condition handling in Test-DeltaQueryConditions to sanitize inputs and prevent invalid conditions from being processed.
- Added validation for dynamic rules in Invoke-ExecTenantGroup to prevent code injection by restricting allowed operators and properties.
- Implemented error handling and validation for conditions in Invoke-AddAlert, ensuring only safe operators and properties are processed.
- Updated New-CIPPAlertTemplate to include a CustomSubject parameter for more flexible alert titles.
- Refactored Update-CIPPDynamicTenantGroups to utilize a safer evaluation method for dynamic group rules, ensuring only valid conditions are processed.
- Enhanced webhook processing in Invoke-CIPPWebhookProcessing to include custom subjects from webhook rules for better context in alerts.
@pull pull bot locked and limited conversation to collaborators Mar 20, 2026
@pull pull bot added the ⤵️ pull label Mar 20, 2026
TecharyJames and others added 17 commits March 20, 2026 15:02
Added CIPP variable replacement to custom app powershell script block
This reverts commit 121a2cb.
Replace bulk deletion of MFA methods with individual requests to improve
error handling and avoid silent failures.

Tested with removing 2 software OTP, 1 TAP, 1 QR and 1 SMS method at the
same time successfully.
- Implements KelvinTegelaar/CIPP#5552
- Add `Invoke-ListMDEOnboarding` endpoint to check MDE connector status
via Graph API
- Add `Set-CIPPDBCacheMDEOnboarding` and `Get-CIPPMDEOnboardingReport`
for ReportDB caching
- Add `MDEOnboarding` to Intune cache collection for automatic updates
Added CIPP variable replacement to custom app powershell script block
Use OMA-URI decryption to compare existing policy
Fix issue with detecting if policy is deployed
- Added `detectionScript` parameter to `Add-CIPPW32ScriptApplication` function, allowing for PowerShell detection scripts that take priority over file detection.
- Updated detection rules to prioritize detection scripts, followed by file detection and marker file fallback.
- Modified `Push-UploadApplication` to include `detectionScript` in application properties.
- Updated `Invoke-AddWin32ScriptApp` to handle `detectionScript` when creating Win32 applications.
- Refactored `Invoke-CIPPStandardDeployCheckChromeExtension` to implement Win32 script app deployment for Chrome and Edge extensions, replacing legacy OMA-URI policies.
- Introduced install, uninstall, and detection scripts for managing Chrome and Edge extension settings via registry keys.
- Enhanced logging and alerting mechanisms for deployment status and errors.
Introduce new Out of Office (OOO) calendar options, including the
ability to block calendar events, decline invitations, and cancel
meetings. Enhance the Set-MailboxAutoReplyConfiguration command with
parameters for managing OOO events, ensuring backward compatibility for
existing functionality.

Frontend PR: KelvinTegelaar/CIPP#5623
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants