fix(schema): only advance extension status

Prevent schema extension updates from attempting invalid status rollbacks by applying status changes only when moving forward in Graph’s lifecycle (InDevelopment -> Available -> Deprecated). Also refresh the schema from Graph after PATCH so subsequent persistence uses the latest values.

Author: Zacgoose

Modules/CIPPCore/Public/Get-CIPPSchemaExtensions.ps1

@@ -8,6 +8,9 @@ function Get-CIPPSchemaExtensions {
     # Get definitions file
     $SchemaDefinitionsPath = Join-Path $env:CIPPRootPath 'Config\schemaDefinitions.json'
 
+    # Graph only allows the status to move forward through this lifecycle
+    $StatusOrder = @{ InDevelopment = 0; Available = 1; Deprecated = 2 }
+
     # check CustomData table for schema extensions
     $CustomDataTable = Get-CippTable -tablename 'CustomData'
     try {
@@ -47,7 +50,7 @@ function Get-CIPPSchemaExtensions {
                 if (Compare-Object -ReferenceObject ($SchemaDefinition.properties | Sort-Object name | Select-Object name, type) -DifferenceObject ($Schema.properties | Sort-Object name | Select-Object name, type)) {
                     $Patch.properties = $SchemaDefinition.properties
                 }
-                if ($Schema.status -ne $SchemaDefinition.status) {
+                if ($StatusOrder[$SchemaDefinition.status] -gt $StatusOrder[$Schema.status]) {
                     $Patch.status = $SchemaDefinition.status
                 }
                 if ($Schema.targetTypes -ne $SchemaDefinition.targetTypes) {
@@ -84,6 +87,7 @@ function Get-CIPPSchemaExtensions {
                 }
                 $PatchJson = ConvertTo-Json -Depth 5 -InputObject $Patch
                 $null = New-GraphPOSTRequest -type PATCH -Uri "https://graph.microsoft.com/v1.0/schemaExtensions/$($Schema.id)" -Body $PatchJson -AsApp $true -NoAuthCheck $true
+                $Schema = New-GraphGETRequest -uri "https://graph.microsoft.com/v1.0/schemaExtensions/$($Schema.id)" -AsApp $true -NoAuthCheck $true
             }
             try {
                 $OldSchema = $SchemaExtensions | Where-Object { $Schema.id -match $_.RowKey }