Update dependency azure-identity to v1.25.3 - autoclosed #28

Closed
renovate[bot] wants to merge 1 commit from renovate/azure-sdk-for-python-monorepo into master
renovate[bot] commented 2025-07-16 01:05:00 +01:00 (Migrated from github.com)

This PR contains the following updates:

Package Change Age Confidence
azure-identity 1.23.01.25.3 age confidence

Release Notes

Azure/azure-sdk-for-python (azure-identity)

v1.25.3

Compare Source

1.25.3 (2026-03-12)

Bugs Fixed
  • Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (#​45496)
Other Changes
  • Bumped minimum dependency on msal to >=1.35.1.

v1.25.2

Compare Source

1.25.2 (2026-02-10)

Bugs Fixed
  • Fixed an issue with certain credentials not bypassing the token cache when claims are provided in get_token or get_token_info calls. (#​44552) (#​44815)
  • Fixed an issue where an unhelpful TypeError was raised during Entra ID token requests that returned empty responses. Now, a ClientAuthenticationError is raised with the full response for better troubleshooting. (#​44258)
Other Changes
  • Bumped minimum dependency on msal to >=1.31.0.
  • Added debug logging of access token cache hits in several credentials to improve troubleshooting of token cache behavior. (#​44963)
  • Replace instances of azure.core.pipeline.transport.HttpRequest with azure.core.rest.HttpRequest. (#​44993)

v1.25.1

Compare Source

1.25.1 (2025-10-06)

Other Changes
  • When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential now skips the IMDS endpoint probe request and directly attempts token acquisition with full retry logic, matching the behavior of using ManagedIdentityCredential standalone. (#​43080)
  • Improved error messages from ManagedIdentityCredential to include the full error response from managed identity endpoints for better troubleshooting. (#​43231)

v1.25.0

Compare Source

1.25.0 (2025-09-11)

Features Added
  • AzureDeveloperCliCredential now supports claims in get_token and get_token_info. (#​42568)
  • Added new keyword argument require_envvar to DefaultAzureCredential to enforce the presence of the AZURE_TOKEN_CREDENTIALS environment variable. (#​42660)
Bugs Fixed
  • Fixed an issue where AzureDeveloperCliCredential would time out during token requests when azd prompts for user interaction. This issue commonly occurred in environments where the AZD_DEBUG environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. (#​42535)
  • Fixed an issue where credentials configured with a default tenant ID of "organizations" (such as InteractiveBrowserCredential and DeviceCodeCredential) would fail authentication when a specific tenant ID was provided in get_token or get_token_info method calls. (#​42721)
Other Changes
  • Updated SharedTokenCacheCredential to raise CredentialUnavailableError instead of ClientAuthenticationError during token refresh failures when within the context of DefaultAzureCredential. (#​42934)

v1.24.0

Compare Source

1.24.0 (2025-08-07)

Bugs Fixed
  • Fixed an issue where CAE (Continuous Access Evaluation) caches were not properly used by AuthorizationCodeCredential and the asynchronous OnBehalfOfCredential. (#​42145)
Other Changes
  • ManagedIdentityCredential now retries IMDS 410 status responses for at least 70 seconds total duration as required by Azure IMDS documentation. (#​42330)
  • Improved DefaultAzureCredential diagnostics when WorkloadIdentityCredential initialization fails. If DAC fails to find a successful credential in the chain, the reason WorkloadIdentityCredential failed will be included in the error message. (#​42346)

v1.23.1

Compare Source

1.23.1 (2025-07-15)

Bugs Fixed
  • Fixed an issue with AzurePowerShellCredential not working correctly for users still using older versions of PowerShell (e.g., Windows PowerShell 5.1) where -AsPlainText is not supported in the ConvertFrom-SecureString cmdlet. (#​41675)
  • Fixed an issue with AzureCliCredential being unable to find the correct az executable for certain Python versions on Windows. (#​41806)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [azure-identity](https://redirect.github.com/Azure/azure-sdk-for-python) | `1.23.0` → `1.25.3` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/azure-identity/1.25.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/azure-identity/1.23.0/1.25.3?slim=true) | --- ### Release Notes <details> <summary>Azure/azure-sdk-for-python (azure-identity)</summary> ### [`v1.25.3`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.25.3) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.25.2...azure-identity_1.25.3) #### 1.25.3 (2026-03-12) ##### Bugs Fixed - Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. ([#&#8203;45496](https://redirect.github.com/Azure/azure-sdk-for-python/pull/45496)) ##### Other Changes - Bumped minimum dependency on `msal` to `>=1.35.1`. ### [`v1.25.2`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.25.2) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.25.1...azure-identity_1.25.2) #### 1.25.2 (2026-02-10) ##### Bugs Fixed - Fixed an issue with certain credentials not bypassing the token cache when claims are provided in `get_token` or `get_token_info` calls. ([#&#8203;44552](https://redirect.github.com/Azure/azure-sdk-for-python/pull/44552)) ([#&#8203;44815](https://redirect.github.com/Azure/azure-sdk-for-python/pull/44815)) - Fixed an issue where an unhelpful TypeError was raised during Entra ID token requests that returned empty responses. Now, a ClientAuthenticationError is raised with the full response for better troubleshooting. ([#&#8203;44258](https://redirect.github.com/Azure/azure-sdk-for-python/pull/44258)) ##### Other Changes - Bumped minimum dependency on `msal` to `>=1.31.0`. - Added debug logging of access token cache hits in several credentials to improve troubleshooting of token cache behavior. ([#&#8203;44963](https://redirect.github.com/Azure/azure-sdk-for-python/pull/44963)) - Replace instances of `azure.core.pipeline.transport.HttpRequest` with `azure.core.rest.HttpRequest`. ([#&#8203;44993](https://redirect.github.com/Azure/azure-sdk-for-python/pull/44993)) ### [`v1.25.1`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.25.1) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.25.0...azure-identity_1.25.1) #### 1.25.1 (2025-10-06) ##### Other Changes - When `AZURE_TOKEN_CREDENTIALS` is set to `ManagedIdentityCredential`, `DefaultAzureCredential` now skips the IMDS endpoint probe request and directly attempts token acquisition with full retry logic, matching the behavior of using `ManagedIdentityCredential` standalone. ([#&#8203;43080](https://redirect.github.com/Azure/azure-sdk-for-python/pull/43080)) - Improved error messages from `ManagedIdentityCredential` to include the full error response from managed identity endpoints for better troubleshooting. ([#&#8203;43231](https://redirect.github.com/Azure/azure-sdk-for-python/pull/43231)) ### [`v1.25.0`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.25.0) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.24.0...azure-identity_1.25.0) #### 1.25.0 (2025-09-11) ##### Features Added - `AzureDeveloperCliCredential` now supports `claims` in `get_token` and `get_token_info`. ([#&#8203;42568](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42568)) - Added new keyword argument `require_envvar` to `DefaultAzureCredential` to enforce the presence of the `AZURE_TOKEN_CREDENTIALS` environment variable. ([#&#8203;42660](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42660)) ##### Bugs Fixed - Fixed an issue where `AzureDeveloperCliCredential` would time out during token requests when `azd` prompts for user interaction. This issue commonly occurred in environments where the `AZD_DEBUG` environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. ([#&#8203;42535](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42535)) - Fixed an issue where credentials configured with a default tenant ID of "organizations" (such as `InteractiveBrowserCredential` and `DeviceCodeCredential`) would fail authentication when a specific tenant ID was provided in `get_token` or `get_token_info` method calls. ([#&#8203;42721](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42721)) ##### Other Changes - Updated `SharedTokenCacheCredential` to raise `CredentialUnavailableError` instead of `ClientAuthenticationError` during token refresh failures when within the context of `DefaultAzureCredential`. ([#&#8203;42934](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42934)) ### [`v1.24.0`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.24.0) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.23.1...azure-identity_1.24.0) #### 1.24.0 (2025-08-07) ##### Bugs Fixed - Fixed an issue where CAE (Continuous Access Evaluation) caches were not properly used by `AuthorizationCodeCredential` and the asynchronous `OnBehalfOfCredential`. ([#&#8203;42145](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42145)) ##### Other Changes - `ManagedIdentityCredential` now retries IMDS 410 status responses for at least 70 seconds total duration as required by [Azure IMDS documentation](https://learn.microsoft.com/azure/virtual-machines/instance-metadata-service?tabs=windows#errors-and-debugging). ([#&#8203;42330](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42330)) - Improved `DefaultAzureCredential` diagnostics when `WorkloadIdentityCredential` initialization fails. If DAC fails to find a successful credential in the chain, the reason `WorkloadIdentityCredential` failed will be included in the error message. ([#&#8203;42346](https://redirect.github.com/Azure/azure-sdk-for-python/pull/42346)) ### [`v1.23.1`](https://redirect.github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.23.1) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.23.0...azure-identity_1.23.1) #### 1.23.1 (2025-07-15) ##### Bugs Fixed - Fixed an issue with `AzurePowerShellCredential` not working correctly for users still using older versions of PowerShell (e.g., Windows PowerShell 5.1) where `-AsPlainText` is not supported in the `ConvertFrom-SecureString` cmdlet. ([#&#8203;41675](https://redirect.github.com/Azure/azure-sdk-for-python/pull/41675)) - Fixed an issue with `AzureCliCredential` being unable to find the correct `az` executable for certain Python versions on Windows. ([#&#8203;41806](https://redirect.github.com/Azure/azure-sdk-for-python/pull/41806)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cpressland/kv-to-kube). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4yMy4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Pull request closed

Sign in to join this conversation.
No description provided.