fix: refresh managed-file and external tool versions

[Jared Holgate (jaredfholgate)]

Summary

• remove the module-lifetime managed-files release cache so every operation observes newly published tags
• refresh Bicep, Conftest, mapotf, terraform-docs, and both TFLint rulesets to their latest stable releases with regenerated SHA256 pins
• derive component-test stub versions from avm.pins.jsonc instead of duplicating release numbers in fixture source
• update the changelog, pin-refresh guidance, and delivery progress records

Validation

• ./build.ps1 pre-commit
• repeated live managed-files lookups both resolved 1.0.10
• every Windows amd64 managed tool installed from the refreshed pins and reported the expected version; mapotf retained a valid Authenticode signature
• TFLint initialized AVM ruleset 0.19.1 and Terraform ruleset 0.15.0 with artifact attestation, then linted the canonical fixture with zero issues

[github-code-quality]

Code Coverage Overview

Languages: PowerShell

PowerShell / code-coverage-agent

The overall coverage in commit 0b60d1a in the jaredfholgate-fix-ma... branch remains at 89%, unchanged from commit 99ed2cf in the main branch.

Show a code coverage summary of the most impacted files.

File	main 99ed2cf	jaredfholgate-fix-ma... 0b60d1a	+/-
src/Avm.Authori...ilesVersion.ps1	97%	100%	+3%

---

_{Updated August 19, 2026 13:43 UTC}

[github-actions]

Test results

   12 files  +  6    594 suites  +36   17m 31s ⏱️ + 12m 6s
1 041 tests + 14  1 039 ✅ + 12   2 💤 +2  0 ❌ ±0 
3 147 runs  +108  3 118 ✅ +102  29 💤 +6  0 ❌ ±0 

Results for commit 0b60d1a. ± Comparison against base commit 99ed2cf.

This pull request removes 26 and adds 40 tests. Note that renamed tests count towards both.

Get-AvmLatestManagedFilesVersion.caches the lookup per repository and refreshes on demand
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_Lock_interface","notice",False)
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_Lock_interface",False,"notice")
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_future_stable_interface","notice",True)
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_future_stable_interface",True,"notice")
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_interface","notice",False)
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_interface",False,"notice")
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_lock_interface","notice",True)
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_lock_interface","warning",False)
Test-AvmDeprecatedInterfaceNotice.matches only notice-level AVM deprecated-interface rule names("deprecated_lock_interface",False,"warning")
…

Get-AvmLatestManagedFilesVersion.queries again so a later command observes newly published tags
Integration: Invoke-AvmHttp against real upstream releases.downloads terraform-docs from GitHub and verifies the locked SHA256
Integration: TFLint AVM plugin attestation.installs and executes the pinned AVM ruleset with artifact attestation
Integration: avm command routes.finds the live PowerShell Gallery package as a module version
Integration: avm command routes.routes avm doctor --json and returns valid diagnostics without warnings
Integration: avm command routes.routes avm tool list with passthrough and returns every managed tool without warnings
Integration: avm command routes.routes avm version and returns the loaded module version without warnings
Integration: avm command routes.routes every help form without warnings("--help")
Integration: avm command routes.routes every help form without warnings("-h")
Integration: avm command routes.routes every help form without warnings("bare")
…

♻️ This comment has been updated with latest results.