From dc01583fd4b0da42bf9fd9f3113f175709c4c681 Mon Sep 17 00:00:00 2001
From: Victoria Litvinova <73560279+vilit1@users.noreply.github.com>
Date: Thu, 15 Aug 2024 11:32:58 -0700
Subject: [PATCH 1/2] chore: Bump extension version to 0.25.0

---
 HISTORY.rst            | 6 ++++--
 azext_iot/constants.py | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/HISTORY.rst b/HISTORY.rst
index a1450fd5a..16fddbe03 100644
--- a/HISTORY.rst
+++ b/HISTORY.rst
@@ -4,10 +4,12 @@ Release History
 ===============
 
 
-0.24.1
+0.25.0
 +++++++++++++++
 
-** IoT Hub updates **
+**IoT Hub updates**
+
+* Addition of bulk key regeneration for `az iot hub device-identity renew-key` and `az iot hub module-identity renew-key`.
 
 * Fix for `az iot hub monitor-events` when the IoT Hub has no partition Id's populated.
 
diff --git a/azext_iot/constants.py b/azext_iot/constants.py
index 566bf8445..be3cbe583 100644
--- a/azext_iot/constants.py
+++ b/azext_iot/constants.py
@@ -7,7 +7,7 @@
 
 import os
 
-VERSION = "0.24.1"
+VERSION = "0.25.0"
 EXTENSION_NAME = "azure-iot"
 EXTENSION_ROOT = os.path.dirname(os.path.abspath(__file__))
 EXTENSION_CONFIG_ROOT_KEY = "iotext"

From 5f2db6ea5122300ac38ff2000e7f23d30128daf1 Mon Sep 17 00:00:00 2001
From: Ryan K <ryan.k@outlook.com>
Date: Mon, 19 Aug 2024 17:26:57 -0700
Subject: [PATCH 2/2] feat(CI): Update pipelines (#713)

* update security workflow to run sheduled and on push

* Add switch to release pipeline to run/skip int tests

* bump codeql action versions
---
 .github/workflows/codeql.yml           |  6 +++---
 .github/workflows/release_workflow.yml |  6 ++++++
 .github/workflows/security_checks.yml  | 10 ++++++++--
 3 files changed, 17 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6438fcf5e..551db118d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,5 +1,5 @@
 name: "[auto] CodeQL-Nightly"
-
+permissions: {}
 on:
   schedule:
     - cron: '0 6 * * *'
@@ -21,9 +21,9 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: python
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
diff --git a/.github/workflows/release_workflow.yml b/.github/workflows/release_workflow.yml
index 47125f211..48dd76765 100644
--- a/.github/workflows/release_workflow.yml
+++ b/.github/workflows/release_workflow.yml
@@ -14,6 +14,11 @@ on:
         type: boolean
         required: false
         default: false
+      run_int_tests:
+        description: Run integration test step
+        type: boolean
+        required: false
+        default: true
 jobs:
   security:
     permissions:
@@ -36,6 +41,7 @@ jobs:
       continue-on-error: ${{ github.event.inputs.continue-on-error == 'true' }}
   int_test:
     needs: [build]
+    if:  always() && !cancelled() && !failure() && (github.event.inputs.run_int_tests == 'true')
     uses: ./.github/workflows/trigger_ado_int_tests.yml
     secrets: inherit
   approval:
diff --git a/.github/workflows/security_checks.yml b/.github/workflows/security_checks.yml
index 8677bea07..8ac00e8b5 100644
--- a/.github/workflows/security_checks.yml
+++ b/.github/workflows/security_checks.yml
@@ -1,15 +1,21 @@
 name: "[auto] Security Checks"
 on:
+  schedule:
+    - cron: '0 6 * * *'
+  push:
+    branches:
+      - dev
+      - feature/*
   workflow_call:
     inputs:
       continue-on-error:
         type: boolean
         required: false
         default: false
-
+permissions: {}
 jobs:
   sdl:
-    continue-on-error: ${{ inputs.continue-on-error }}
+    continue-on-error: ${{ inputs.continue-on-error || false }}
     name: SDL Compliance Checks
     runs-on: windows-latest
     permissions: