azure-network v5.30.3 - Fixed Network Security Group Ingress/Egress Rules Approved controls incorrectly handling bare IP addresses

Apr 16, 2026GuardrailsMods

Bug fixes

  • Fixed Network Security Group Ingress/Egress Rules Approved controls incorrectly handling bare IP addresses (e.g., 8.8.8.8) in sourceAddressPrefix. Bare IPs are now normalized to CIDR notation (8.8.8.8/32) so that bitmaskLength and OCL CIDR comparison operators work correctly.