v0.8.82: UpdateLastAttempt audit tag + Step.05 Last Updated column + Step.08 attempts-without-run reconciliation

[NeilBird]

Summary

Ships Item 5 from the post-v0.7.76 backlog: a per-cluster UpdateLastAttempt ARM tag stamped by Start-AzLocalClusterUpdate and an in-flight Step.08 reconciliation pass that compares those audit tags to the observed updateRun list. Also lands the Step.05 Last Updated readiness column + UpdateRing sort that was discussed alongside it.

What's new

Step.05 - readiness report

• Get-AzLocalClusterUpdateReadiness now emits LastUpdated on every row shape (success / NotFound / Error), computed from the max packageVersions[].lastUpdated across all four package types.
• Export-AzLocalClusterUpdateReadinessReport renders a new Last Updated column between Status and Recommended update, and sorts the detail table by UpdateRing -> Status priority -> ClusterName so each ring cohort stays grouped with its in-flight / remediation rows at the top.

UpdateLastAttempt audit tag (new)

• Format: <UTC>;<Outcome>;<UpdateName>;<Reason> truncated to the 256-char Azure tag-value limit (reason truncated first with a trailing ~ sentinel).
• Stamped by Start-AzLocalClusterUpdate at every outcome (HealthCheckBlocked, UpdateStarted, Failed). Writes swallow ARM errors and log a warning - the audit tag must NEVER block the apply flow.
• Auto-cleared by Invoke-AzLocalSideloadedAutoResetForCluster (independent block, separate from the sideloaded-reset logic) when the latest update run is Succeeded AND either UpdateName matches the recorded attempt OR the attempt was a HealthCheckBlocked / Failed outcome more than 1h old.
• New private helpers: Format-AzLocalUpdateLastAttemptTagValue, ConvertFrom-AzLocalUpdateLastAttemptTagValue, Write-AzLocalUpdateLastAttemptTag. New script-scoped constant = 'UpdateLastAttempt'.

Step.08 - in-flight monitor reconciliation

• New Recent update attempts with no observable updateRun section. Joins the per-cluster UpdateLastAttempt tag against the observed updateRun list and surfaces any attempt within the last -RecentAttemptWindowHours (default 72) whose matching updateRun is missing or has a StartTimeUtc before attempt - 5min.
• Captures URP package-internal pre-install health-check failures (cluster activity log shows Allows to apply updates: Succeeded but no updateRun resource is ever persisted - confirmed via ARG against Portland in the design pass: 10 updateRuns across 5 versions, none for the version recorded in its UpdateVersionInProgress tag).
• Scope=by-update-ring path now ALWAYS calls Get-AzLocalClusterInventory -ScopeByUpdateRingTag so per-cluster tags are available for the reconciliation pass. The all-clusters path already had inventory. This is a behavior change vs. v0.8.81 (documented in CHANGELOG).
• New parameter: [ValidateRange(0,8760)][int] = 72.
• New pipeline output: attempts_without_run.
• New -PassThru fields: AttemptWithoutRunCount + AttemptGaps.
• Each gap emits a JUnit testcase with Type='AttemptWithoutRun', ClassName='UpdateMonitor'.

Tests

1248 tests, 0 failures (Pester v5.7.1 / Windows PowerShell 5.1).

New Describe blocks cover: Format / Convert tag helpers (round-trip, truncation, semicolon stripping, whitespace collapse, malformed -> ), the script-scoped tag-name constant, `LastUpdated` on all three row shapes, Step.05 column + sort, the three `Write-AzLocalUpdateLastAttemptTag` call sites in `Start-AzLocalClusterUpdate`, the auto-clear logic in `Invoke-AzLocalSideloadedAutoResetForCluster`, and Step.08 reconciliation (param, builder, 5-min slack, by-update-ring inventory, pipeline output, markdown section, JUnit Type, PassThru shape, empty-fleet PassThru).

Pre-existing Scope=by-update-ring test updated to assert Get-AzLocalClusterInventory IS called (was asserting it must NOT be called - intentional behavior change for the reconciliation pass).

Implementation notes

• AttemptGaps in the -PassThru output uses .ToArray() rather than @(). Reason: @() around an EMPTY System.Collections.Generic.List[object] throws ArgumentException: Argument types do not match in Windows PowerShell 5.1 with no inner exception. .ToArray() returns T[0] cleanly. Saved to /memories/powershell-patterns.md.
• All 22 ADO + GHA pipeline YAML templates have GENERATED_AGAINST_MODULE_VERSION bumped to '0.8.82'.
• Module export count unchanged (60). No public-surface deletions.

Files touched

• AzLocal.UpdateManagement.psd1 (ModuleVersion + 3 new Private dot-source entries)
• AzLocal.UpdateManagement.psm1 (`` constant)
• Private/Format-AzLocalUpdateLastAttemptTagValue.ps1 (new)
• Private/ConvertFrom-AzLocalUpdateLastAttemptTagValue.ps1 (new)
• Private/Write-AzLocalUpdateLastAttemptTag.ps1 (new)
• Private/Invoke-AzLocalSideloadedAutoResetForCluster.ps1 (auto-clear block)
• Public/Get-AzLocalClusterUpdateReadiness.ps1 (LastUpdated)
• Public/Export-AzLocalClusterUpdateReadinessReport.ps1 (column + sort)
• Public/Export-AzLocalUpdateRunMonitorReport.ps1 (reconciliation)
• Public/Export-AzLocalFleetHealthStatusReport.ps1 (residual v0.8.81 polish)
• Public/Start-AzLocalClusterUpdate.ps1 (3 tag-write call sites)
• Tests/AzLocal.UpdateManagement.Tests.ps1 (+ Tests/test-run-timings.csv)
• CHANGELOG.md / README.md / docs/release-history.md
• 22 pipeline template YAMLs in Automation-Pipeline-Examples/