Update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
azure-identity (source)	==1.19.0 -> ==1.25.1
azure-mgmt-resource	==23.2.0 -> ==24.0.0
azure-mgmt-servicebus	==8.2.1 -> ==9.0.0
requests (source, changelog)	==2.32.3 -> ==2.32.5

---

Release Notes

Azure/azure-sdk-for-python (azure-identity)

v1.25.1

Compare Source

1.25.1 (2025-10-06)

Other Changes

• When AZURE_TOKEN_CREDENTIALS is set to ManagedIdentityCredential, DefaultAzureCredential now skips the IMDS endpoint probe request and directly attempts token acquisition with full retry logic, matching the behavior of using ManagedIdentityCredential standalone. (#​43080)
• Improved error messages from ManagedIdentityCredential to include the full error response from managed identity endpoints for better troubleshooting. (#​43231)

v1.25.0

Compare Source

1.25.0 (2025-09-11)

Features Added

• AzureDeveloperCliCredential now supports claims in get_token and get_token_info. (#​42568)
• Added new keyword argument require_envvar to DefaultAzureCredential to enforce the presence of the AZURE_TOKEN_CREDENTIALS environment variable. (#​42660)

Bugs Fixed

• Fixed an issue where AzureDeveloperCliCredential would time out during token requests when azd prompts for user interaction. This issue commonly occurred in environments where the AZD_DEBUG environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. (#​42535)
• Fixed an issue where credentials configured with a default tenant ID of "organizations" (such as InteractiveBrowserCredential and DeviceCodeCredential) would fail authentication when a specific tenant ID was provided in get_token or get_token_info method calls. (#​42721)

Other Changes

• Updated SharedTokenCacheCredential to raise CredentialUnavailableError instead of ClientAuthenticationError during token refresh failures when within the context of DefaultAzureCredential. (#​42934)

v1.24.0

Compare Source

1.24.0 (2025-08-07)

Bugs Fixed

• Fixed an issue where CAE (Continuous Access Evaluation) caches were not properly used by AuthorizationCodeCredential and the asynchronous OnBehalfOfCredential. (#​42145)

Other Changes

• ManagedIdentityCredential now retries IMDS 410 status responses for at least 70 seconds total duration as required by Azure IMDS documentation. (#​42330)
• Improved DefaultAzureCredential diagnostics when WorkloadIdentityCredential initialization fails. If DAC fails to find a successful credential in the chain, the reason WorkloadIdentityCredential failed will be included in the error message. (#​42346)

v1.23.1

Compare Source

1.23.1 (2025-07-15)

Bugs Fixed

• Fixed an issue with AzurePowerShellCredential not working correctly for users still using older versions of PowerShell (e.g., Windows PowerShell 5.1) where -AsPlainText is not supported in the ConvertFrom-SecureString cmdlet. (#​41675)
• Fixed an issue with AzureCliCredential being unable to find the correct az executable for certain Python versions on Windows. (#​41806)

v1.23.0

Compare Source

1.23.0 (2025-05-13)

Features Added

• Added AZURE_TOKEN_CREDENTIALS environment variable to DefaultAzureCredential to allow for choosing groups of credentials.
  • prod for EnvironmentCredential, WorkloadIdentityCredential, and ManagedIdentityCredential.
  • dev for SharedTokenCacheCredential, AzureCliCredential, AzurePowershellCredential, and AzureDeveloperCliCredential.

v1.22.0

Compare Source

1.22.0 (2025-05-06)

Breaking Changes

• Previously, if a client_id or identity_config was specified in ManagedIdentityCredential for Service Fabric managed identity, which is not supported, the client_id (or resource_id/object_id specified identity_config) would be silently ignored. Now, an exception will be raised during a token request if a client_id or identity_config is specified for Service Fabric managed identity.

Bugs Fixed

• Fixed an issue with error handling in MSAL-based credentials when the response content is a string rather than a dictionary. (#​40281)

Other Changes

• Deprecated VisualStudioCodeCredential as the VS Code Azure Account extension on which this credential depends on has been deprecated. See the Azure Account extension deprecation notice. (#​40613)
• Python 3.8 is no longer supported. Please use Python version 3.9 or later.

v1.21.0

Compare Source

1.21.0 (2025-03-11)

Other Changes

• Updated the asynchronous CertificateCredential to use the PS256 algorithm with PSS padding for certificate authentication in non-ADFS tenants. (#​39761)
• Deprecated UsernamePasswordCredential, as it doesn't support multifactor authentication (MFA). MFA will soon be enforced on all Microsoft Entra tenants. For more details, see Planning for mandatory MFA. (#​39785)

v1.20.0

Compare Source

1.20.0 (2025-02-11)

Features Added

• Added subscription parameter to AzureCliCredential to specify the subscription to use when authenticating with the Azure CLI. (#​37994)

Bugs Fixed

• A bug in the error handling for AzureCliCredentials and AzureDeveloperCliCredential which would result in the unexpected error 'NoneType' object has no attribute 'startswith' has been fixed (#​39176)

Other Changes

• AzureCliCredential and AzureDeveloperCliCredential will now call their corresponding executables directly instead of going through the shell. (#​38606)

psf/requests (requests)

v2.32.5

Compare Source

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created
  a new class of issues in Requests that have had negative impact across a number
  of use cases. The Requests team has decided to revert this feature as long term
  maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

v2.32.4

Compare Source

Security

• CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
  environment will retrieve credentials for the wrong hostname/machine from a
  netrc file.

Improvements

• Numerous documentation improvements

Deprecations

• Added support for pypy 3.11 for Linux and macOS.
• Dropped support for pypy 3.9 following its end of support.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.