[dependabot]

Bumps the python-azure group with 3 updates in the / directory: azure-identity, azure-mgmt-compute and azure-mgmt-network.

Updates azure-identity from 1.25.3 to 1.27.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.27.0

1.27.0 (2026-10-26)

Features Added

• Added support for WorkloadIdentityCredential identity binding mode in AKS environments. This feature uses an AKS proxy to handle FIC exchanges on behalf of pods, addressing Entra's limit on federated identity credentials per managed identity. Enable it by constructing WorkloadIdentityCredential directly with enable_azure_proxy=True. Identity binding mode isn't supported through DefaultAzureCredential. (#43287, #44147)

Bugs Fixed

• Fixed AzureDeveloperCliCredential to correctly parse error messages from Azure Developer CLI v1.23.7 and later, which previously caused raw JSON to surface in ClientAuthenticationError instead of the underlying error text. (#46711)
• Fixed persistent token cache isolation on macOS when using custom cache names or CAE-enabled caches. (#49314)
• Fixed a regression in 1.26.0 where asynchronous OnBehalfOfCredential instances could not reuse access or refresh tokens cached by another instance with the same user assertion. Cache entries are now isolated by user assertion, allowing safe reuse across instances, including with TokenCachePersistenceOptions. Existing cache entries without assertion binding require a fresh token exchange. (#49533)

Commits

• 8e13b5e Fix azure-identity 1.27.0 changelog release date (#49707)
• e6e5e63 [AgentServer] Prepare Core 2.3.0b2 and Invocations 1.3.0b1 releases (#49704)
• c76f466 [AutoPR azure-mgmt-containerservice]-generated-from-SDK Generation - Python-6...
• a7dd9f3 AgentServer invocation-local original-subject attribution (#49679)
• c17b3ab Skip spec-PR SDK breaking-change flags before first GA release (#49702)
• 762d184 [Identity] Prepare 1.27.0 stable release with AKS identity bindings (#49612)
• 2b95412 Add experimental feature flag (#49682)
• fe53432 Sync eng/common directory with azure-sdk-tools for PR 17391 (#49683)
• 0131b83 [AutoPR azure-mgmt-datatransfer]-generated-from-SDK Generation - Python-69719...
• 335c8fa [AutoPR azure-mgmt-redhatopenshifthcp]-generated-from-SDK Generation - Python...
• Additional commits viewable in compare view

Updates azure-mgmt-compute from 38.2.0 to 39.0.0

Release notes

Sourced from azure-mgmt-compute's releases.

azure-mgmt-compute_39.0.0

39.0.0 (2026-10-15)

Features Added

• Model VirtualMachineNetworkInterfaceIPConfigurationProperties added property private_ip_address_prefix_length
• Model VirtualMachineProperties added property flex_profile
• Model VirtualMachineScaleSetIPConfigurationProperties added property private_ip_address_prefix_length
• Model VirtualMachineScaleSetUpdateIPConfigurationProperties added property private_ip_address_prefix_length
• Added model FlexProfile
• Model CapacityReservationGroupsOperations added method begin_delete

Breaking Changes

• Deleted or renamed method CapacityReservationGroupsOperations.delete

Commits

• 9cff46f [AutoPR azure-mgmt-netapp]-generated-from-SDK Generation - Python-6982798 (#4...
• 84df362 [VoiceLive]Fix Voice Live WebSocket credential forwarding on redirects (#49665)
• eb4f27d Sync .github/skills directory with azure-sdk-tools for PR 17350 (#49671)
• f5a3775 commented out smart tier tests (#49644)
• 5f63265 Sync eng/common directory with azure-sdk-tools for PR 17350 (#49660)
• 1779f04 Sync eng/common directory with azure-sdk-tools for PR 17383 (#49661)
• 1f8bc58 [AutoPR azure-mgmt-hybridconnectivity]-generated-from-SDK Generation - Python...
• 523455d update aiohttp requirement (#49654)
• 615db41 [agentserver] Separate Invocations and Responses task-runtime activation (#49...
• cd8fb94 [ML] Fix registry model get returning None system_metadata (#49620)
• Additional commits viewable in compare view

Updates azure-mgmt-network from 31.0.1 to 33.1.0

Release notes

Sourced from azure-mgmt-network's releases.

azure-mgmt-network_33.1.0

33.1.0 (2026-10-09)

Features Added

• Client NetworkManagementClient added operation group express_route_lag_authorizations
• Client NetworkManagementClient added operation group virtual_network_appliance_capabilities
• Model DdosCustomPolicyPropertiesFormat added property mitigation_rules
• Model ExpressRouteLagPropertiesFormat added property authorizations
• Model VirtualNetworkAppliancePropertiesFormat added property capacity_provider
• Added model ArmProxyResource
• Added model ArmResource
• Added enum DdosContinent
• Added model DdosGeoMatch
• Added model DdosMitigationRule
• Added model DdosMitigationRulePropertiesFormat
• Added enum DdosMitigationTrafficScope
• Added model DdosSourceMatchConditions
• Added model DdosSourcePolicyAction
• Added enum DdosSourcePolicyActionType
• Added model DdosSourcePolicyOverride
• Added model DdosTcpDefaultMitigations
• Added model DdosTcpPerSourceConnectionRateLimitPolicy
• Added model DdosTcpPerSourceRateLimitPolicy
• Added model DdosUdpDefaultMitigations
• Added model DdosUdpPerSourceRateLimitPolicy
• Added model ExpressRouteLagAuthorization
• Added model ExpressRouteLagAuthorizationPropertiesFormat
• Added enum ExpressRouteLagAuthorizationUseStatus
• Added model Nat64Capability
• Added model PLGatewayCapability
• Added model PLGatewayFastpathCapability
• Added model PLIPForwardersCapability
• Added model ProxyResourceVirtualNetworkApplianceCapabilityProperties
• Added model VirtualNetworkApplianceCapability
• Added enum VirtualNetworkApplianceCapabilityIpVersion
• Added enum VirtualNetworkApplianceCapabilityKind
• Added model VirtualNetworkApplianceCapabilityProperties
• Added operation group ExpressRouteLagAuthorizationsOperations
• Added operation group VirtualNetworkApplianceCapabilitiesOperations

Commits

• 49dc32c Configurations: 'specification/network/resource-manager/Microsoft.Network/Ne...
• 460fdec Bound management SDK breaking-change review requests (#49466)
• afec8fa [AutoPR azure-mgmt-resiliencemanagement]-generated-from-SDK Generation - Pyth...
• 9ecc261 [Evaluation] Export result status and pass state to App Insights (#49451)
• 12feba1 Increment package version after release of azure-ai-evaluation (#49459)
• dc45c10 [azure-ai-evaluation] Release 1.18.8 (#49449)
• 990e0be [AutoPR azure-mgmt-keyvault]-generated-from-SDK Generation - Python-6930784 (...
• 3619511 fix(agentserver): partition in-memory response state by user (#49025)
• 1fb1b6f Fix Activity claims compatibility with Microsoft Agents 1.8.0 (#49377)
• ab5c4cf Configurations: 'specification/sql/resource-manager/Microsoft.Sql/SQL/tspcon...
• Additional commits viewable in compare view

[dguido]

The Azure update needs to follow the Ansible collection’s SDK requirements. This PR selects compute 39 and network 33, while the reviewed azure.azcollection 4.2.0 release requires compute 33 and network 28; the existing resource SDK range is also incompatible with the collection’s imports. #15080 replaces these ranges with the collection’s tested SDK set, adds the missing imports, and keeps cryptography 50.0.2 through the updated Azure CLI core. It also adds required CI checks using the real pinned collection and SDKs. I’ll close this PR as superseded once that replacement passes CI and merges.

[dguido]

Superseded by #15080, now merged after every required CI check, CodeQL, and all three VPN deployment variants passed. The replacement pins the Azure collection and its compatible SDK set together, includes the missing imports, and verifies those exact versions in CI. Closing this incompatible update.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml