Skip to content

fix: Add new ZIA and ZPA endpoints, AI Guard OneAPI support (1.9.39) - #554

Merged
willguibr merged 2 commits into
masterfrom
zia-zpa-aiguard-1.9.39-new-endpoints
Jul 27, 2026
Merged

fix: Add new ZIA and ZPA endpoints, AI Guard OneAPI support (1.9.39)#554
willguibr merged 2 commits into
masterfrom
zia-zpa-aiguard-1.9.39-new-endpoints

Conversation

@willguibr

@willguibr willguibr commented Jul 27, 2026

Copy link
Copy Markdown
Member

Summary

Release 1.9.39, adding new ZIA and ZPA endpoints and full OneAPI support for Zscaler AI Guard.

ZIA

New Endpoint DLP coverage — applications, custom applications, application groups, resources, resource groups, rules, and exception (sub) rules — plus DLP Advanced Settings, Outbound Email DLP rule actions, DNS application groups, End User Notification templates, IPS categories, and NSS collectors.

ZPA

New Policy Group, Policy Group Rule, and Policy Group Set resources.

AI Guard

Full OneAPI support via client.aiguard, covering detection policies, policy match rules, LLM providers and provider types, LLM provider credentials, LLM applications, and LLM application credentials.

  • The service package was renamed from zaiguard to aiguard; client.zguard is kept as a deprecated alias for backward compatibility.
  • Policy detection (/v1/detection/execute-policy and /v1/detection/resolve-and-execute-policy) is not exposed through OneAPI, so it remains available through LegacyAIGuardClient via client.aiguard.policy_detection.

Docs and versioning

Version bumped to 1.9.39, with the changelog, release notes, and reference documentation updated for the new resources.

Test plan

  • poetry run black --check zscaler tests — clean
  • poetry run ruff check . and ruff check . --select I — all checks passed
  • poetry run pytest tests/unit — 594 passed
  • Verified all new ZIA, ZPA, and AI Guard resources are wired and importable from their service entry points, including the client.zguard deprecated alias
  • Confirmed new VCR cassettes contain only redacted credentials
  • Review the new AI Guard integration tests against a live tenant
  • Confirm the Sphinx docs build (make docs) renders the new reference pages

ZIA: added Endpoint DLP coverage (applications, custom applications,
application groups, resources, resource groups, rules, and exception
sub-rules), DLP Advanced Settings, Outbound Email DLP rule actions,
DNS application groups, End User Notification templates, IPS
categories, and NSS collectors.

ZPA: added Policy Group, Policy Group Rule, and Policy Group Set
resources.

AI Guard: added full OneAPI support via client.aiguard for detection
policies, policy match rules, LLM providers and provider types, LLM
provider credentials, LLM applications, and LLM application
credentials. The package was renamed from zaiguard to aiguard, with
client.zguard kept as a deprecated alias. Policy detection stays on
LegacyAIGuardClient because those endpoints are not exposed through
OneAPI.

Bumped version to 1.9.39 and updated the changelog, release notes, and
reference documentation for the new resources.
The dev dependency allowed any ruff >=0.15.0 and the lock file had picked
up 0.16.0, which significantly expands the set of rules enabled by
default. Because no explicit rule selection is configured, that upgrade
silently turned on several new rule families and caused the lint job to
report over 15,000 findings across the repository, nearly all of them in
files unrelated to any recent change.

Cap the dependency at <0.16 and relock, which returns ruff to the 0.15
series used on master. Both lint steps pass again with no source changes.
@willguibr willguibr self-assigned this Jul 27, 2026
@willguibr willguibr added 🐛 type/bug :bug: type/bug documentation Improvements or additions to documentation type/enhancement New feature or request dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ⚙️ In development ⚙️ Under active development 🆕 new-acceptance-tests New acceptance tests new-attributes ZPA API Added New Parameters ZIA New API Resources ZIA New API Resources ZPA New API Resources ZPA New API Resources labels Jul 27, 2026
@willguibr willguibr moved this to ⚙️ In development in Zscaler Automation Dashboard 🛣 Jul 27, 2026
@willguibr
willguibr merged commit d2eb809 into master Jul 27, 2026
72 of 73 checks passed
@github-project-automation github-project-automation Bot moved this from ⚙️ In development to 🚀 Shipped in Zscaler Automation Dashboard 🛣 Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🐛 type/bug :bug: type/bug dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation github_actions Pull requests that update GitHub Actions code ⚙️ In development ⚙️ Under active development 🆕 new-acceptance-tests New acceptance tests new-attributes ZPA API Added New Parameters type/enhancement New feature or request ZIA New API Resources ZIA New API Resources ZPA New API Resources ZPA New API Resources

Projects

Status: 🚀 Shipped

Development

Successfully merging this pull request may close these issues.

1 participant