An open index of dependabot pull requests across open source projects.

dependabot python package: bump azure-identity from 1.20.0 to 1.22.0

Merged
Number: #26
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 2
Created: May 07, 2025 at 07:02 AM UTC
(7 months ago)
Updated: May 08, 2025 at 05:16 PM UTC
(7 months ago)
Merged: May 08, 2025 at 05:16 PM UTC
(7 months ago)
by githubofkrishnadhas
Time to Close: 1 day
Labels:
dependencies
Assignees:
githubofkrishnadhas
Description:

Bumps azure-identity from 1.20.0 to 1.22.0.

Release notes

Sourced from azure-identity's releases.

azure-identity_1.22.0

1.22.0 (2025-05-06)

Breaking Changes

  • Previously, if a client_id or identity_config was specified in ManagedIdentityCredential for Service Fabric managed identity, which is not supported, the client_id (or resource_id/object_id specified identity_config) would be silently ignored. Now, an exception will be raised during a token request if a client_id or identity_config is specified for Service Fabric managed identity.

Bugs Fixed

  • Fixed an issue with error handling in MSAL-based credentials when the response content is a string rather than a dictionary. (#40281)

Other Changes

  • Deprecated VisualStudioCodeCredential as the VS Code Azure Account extension on which this credential depends on has been deprecated. See the Azure Account extension deprecation notice. (#40613)
  • Python 3.8 is no longer supported. Please use Python version 3.9 or later.

azure-identity_1.21.0

1.21.0 (2025-03-11)

Other Changes

  • Updated the asynchronous CertificateCredential to use the PS256 algorithm with PSS padding for certificate authentication in non-ADFS tenants. (#39761)
  • Deprecated UsernamePasswordCredential, as it doesn't support multifactor authentication (MFA). MFA will soon be enforced on all Microsoft Entra tenants. For more details, see Planning for mandatory MFA. (#39785)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+155
Deletions:
-149
Package Dependencies
Ecosystem:
pip
Version Change:
1.20.0 → 1.22.0
Update Type:
Minor
Technical Details
ID: 110410
UUID: 2503456930
Node ID: PR_kwDOL3yfos6VN7ii
Host: GitHub
Repository: devwithkrishna/azure-automation-to-remove-policies-using-python
Merge State: Unknown