chore(deps): update azure-sdk-for-python monorepo

[dreadnode-renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
azure-identity	1.19.0 → 1.25.3
azure-mgmt-compute	33.0.0 → 33.1.0
azure-mgmt-network	28.0.0 → 28.1.0

---

Release Notes

Azure/azure-sdk-for-python (azure-identity)

v1.25.3

Compare Source

1.25.3 (2026-03-12)

Bugs Fixed

• Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (#​45496)

Other Changes

• Bumped minimum dependency on msal to >=1.35.1.

v1.25.2

Compare Source

1.25.2 (2026-02-10)

Bugs Fixed

• Fixed an issue with certain credentials not bypassing the token cache when claims are provided in get_token or get_token_info calls. (#​44552) (#​44815)
• Fixed an issue where an unhelpful TypeError was raised during Entra ID token requests that returned empty responses. Now, a ClientAuthenticationError is raised with the full response for better troubleshooting. (#​44258)

Other Changes

• Bumped minimum dependency on msal to >=1.31.0.
• Added debug logging of access token cache hits in several credentials to improve troubleshooting of token cache behavior. (#​44963)
• Replace instances of azure.core.pipeline.transport.HttpRequest with azure.core.rest.HttpRequest. (#​44993)

v1.25.1

Compare Source

1.25.1 (2025-10-06)

Other Changes

• When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential now skips the IMDS endpoint probe request and directly attempts token acquisition with full retry logic, matching the behavior of using ManagedIdentityCredential standalone. (#​43080)
• Improved error messages from ManagedIdentityCredential to include the full error response from managed identity endpoints for better troubleshooting. (#​43231)

v1.25.0

Compare Source

1.25.0 (2025-09-11)

Features Added

• AzureDeveloperCliCredential now supports claims in get_token and get_token_info. (#​42568)
• Added new keyword argument require_envvar to DefaultAzureCredential to enforce the presence of the AZURE_TOKEN_CREDENTIALS environment variable. (#​42660)

Bugs Fixed

• Fixed an issue where AzureDeveloperCliCredential would time out during token requests when azd prompts for user interaction. This issue commonly occurred in environments where the AZD_DEBUG environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. (#​42535)
• Fixed an issue where credentials configured with a default tenant ID of "organizations" (such as InteractiveBrowserCredential and DeviceCodeCredential) would fail authentication when a specific tenant ID was provided in get_token or get_token_info method calls. (#​42721)

Other Changes

• Updated SharedTokenCacheCredential to raise CredentialUnavailableError instead of ClientAuthenticationError during token refresh failures when within the context of DefaultAzureCredential. (#​42934)

v1.24.0

Compare Source

1.24.0 (2025-08-07)

Bugs Fixed

• Fixed an issue where CAE (Continuous Access Evaluation) caches were not properly used by AuthorizationCodeCredential and the asynchronous OnBehalfOfCredential. (#​42145)

Other Changes

• ManagedIdentityCredential now retries IMDS 410 status responses for at least 70 seconds total duration as required by Azure IMDS documentation. (#​42330)
• Improved DefaultAzureCredential diagnostics when WorkloadIdentityCredential initialization fails. If DAC fails to find a successful credential in the chain, the reason WorkloadIdentityCredential failed will be included in the error message. (#​42346)

v1.23.1

Compare Source

1.23.1 (2025-07-15)

Bugs Fixed

• Fixed an issue with AzurePowerShellCredential not working correctly for users still using older versions of PowerShell (e.g., Windows PowerShell 5.1) where -AsPlainText is not supported in the ConvertFrom-SecureString cmdlet. (#​41675)
• Fixed an issue with AzureCliCredential being unable to find the correct az executable for certain Python versions on Windows. (#​41806)

v1.23.0

Compare Source

1.23.0 (2025-05-13)

Features Added

• Added AZURE_TOKEN_CREDENTIALS environment variable to DefaultAzureCredential to allow for choosing groups of credentials.
  • prod for EnvironmentCredential, WorkloadIdentityCredential, and ManagedIdentityCredential.
  • dev for SharedTokenCacheCredential, AzureCliCredential, AzurePowershellCredential, and AzureDeveloperCliCredential.

v1.22.0

Compare Source

1.22.0 (2025-05-06)

Breaking Changes

• Previously, if a client_id or identity_config was specified in ManagedIdentityCredential for Service Fabric managed identity, which is not supported, the client_id (or resource_id/object_id specified identity_config) would be silently ignored. Now, an exception will be raised during a token request if a client_id or identity_config is specified for Service Fabric managed identity.

Bugs Fixed

• Fixed an issue with error handling in MSAL-based credentials when the response content is a string rather than a dictionary. (#​40281)

Other Changes

• Deprecated VisualStudioCodeCredential as the VS Code Azure Account extension on which this credential depends on has been deprecated. See the Azure Account extension deprecation notice. (#​40613)
• Python 3.8 is no longer supported. Please use Python version 3.9 or later.

v1.21.0

Compare Source

1.21.0 (2025-03-11)

Other Changes

• Updated the asynchronous CertificateCredential to use the PS256 algorithm with PSS padding for certificate authentication in non-ADFS tenants. (#​39761)
• Deprecated UsernamePasswordCredential, as it doesn't support multifactor authentication (MFA). MFA will soon be enforced on all Microsoft Entra tenants. For more details, see Planning for mandatory MFA. (#​39785)

v1.20.0

Compare Source

1.20.0 (2025-02-11)

Features Added

• Added subscription parameter to AzureCliCredential to specify the subscription to use when authenticating with the Azure CLI. (#​37994)

Bugs Fixed

• A bug in the error handling for AzureCliCredentials and AzureDeveloperCliCredential which would result in the unexpected error 'NoneType' object has no attribute 'startswith' has been fixed (#​39176)

Other Changes

• AzureCliCredential and AzureDeveloperCliCredential will now call their corresponding executables directly instead of going through the shell. (#​38606)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.