azure-keyvault-secrets
Microsoft Corporation Key Vault Secrets Client Library for Python
Description
# Azure Key Vault Secrets client library for Python Azure Key Vault helps solve the following problems: - Secrets management (this library) - securely store and control access to tokens, passwords, certificates, API keys, and other secrets - Cryptographic key management ([azure-keyvault-keys](https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/keyvault/azure-keyvault-keys)) - create, store, and control access to the keys used to encrypt your data - Certificate management ([azure-keyvault-certificates](https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/keyvault/azure-keyvault-certificates)) - create, manage, and deploy public and private SSL/TLS certificates - Vault administration ([azure-keyvault-administration](https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/keyvault/azure-keyvault-administration)) - role-based access control (RBAC), and vault-level backup and restore options [Source code][library_src] | [Package (PyPI)][pypi_package_secrets] | [Package (Conda)](https://anaconda.org/microsoft/azure-keyvault/) | [API reference documentation][reference_docs] | [Product documentation][azure_keyvault] | [Samples][secret_samples] ## _Disclaimer_ _Azure SDK Python packages support for Python 2.7 has ended 01 January 2022. For more information and questions, please refer to https://github.com/Azure/azure-sdk-for-python/issues/20691_. _Python 3.9 or later is required to use this package. For more details, please refer to [Azure SDK for Python version support policy](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/python_version_support_policy.md)._ ## Getting started ### Install packages Install [azure-keyvault-secrets][pypi_package_secrets] and [azure-identity][azure_identity_pypi] with [pip][pip]: ```Bash pip install azure-keyvault-secrets azure-identity ``` [azure-identity][azure_identity] is used for Azure Active Directory authentication as demonstrated below. ### Prerequisites * An [Azure subscription][azure_sub] * Python 3.9 or later * An existing [Azure Key Vault][azure_keyvault]. If you need to create one, you can do so using the Azure CLI by following the steps in [this document][azure_keyvault_cli]. ### Authenticate the client In order to interact with the Azure Key Vault service, you will need an instance of a [SecretClient][secret_client_docs], as well as a **vault url** and a credential object. This document demonstrates using a [DefaultAzureCredential][default_cred_ref], which is appropriate for most scenarios, including local development and production environments. We recommend using a [managed identity][managed_identity] for authentication in production environments. See [azure-identity][azure_identity] documentation for more information about other methods of authentication and their corresponding credential types. #### Create a client After configuring your environment for the [DefaultAzureCredential][default_cred_ref] to use a suitable method of authentication, you can do the following to create a secret client (replacing the value of `VAULT_URL` with your vault's URL): <!-- SNIPPET:hello_world.create_secret_client --> ```python VAULT_URL = os.environ["VAULT_URL"] credential = DefaultAzureCredential() client = SecretClient(vault_url=VAULT_URL, credential=credential) ``` <!-- END SNIPPET --> > **NOTE:** For an asynchronous client, import `azure.keyvault.secrets.aio`'s `SecretClient` instead. ## Key concepts ### Secret A secret consists of a secret value and its associated metadata and management information. This library handles secret values as strings, but Azure Key Vault doesn't store them as such. For more information about secrets and how Key Vault stores and manages them, see the [Key Vault documentation](https://learn.microsoft.com/azure/key-vault/general/about-keys-secrets-certificates). [SecretClient][secret_client_docs] can set secret values in the vault, update secret metadata, and delete secrets, as shown in the [examples](#examples) below. ## Examples This section contains code snippets covering common tasks: * [Set a secret](#set-a-secret) * [Retrieve a secret](#retrieve-a-secret) * [Update secret metadata](#update-secret-metadata) * [Delete a secret](#delete-a-secret) * [List secrets](#list-secrets) * [Async API](#async-api) * [Asynchronously create a secret](#asynchronously-create-a-secret) * [Asynchronously list secrets](#asynchronously-list-secrets) ### Set a secret [set_secret](https://aka.ms/azsdk/python/keyvault-secrets/docs#azure.keyvault.secrets.SecretClient.set_secret) creates new secrets and changes the values of existing secrets. If no secret with the given name exists, `set_secret` creates a new secret with that name and the given value. If the given name is in use, `set_secret` creates a new version of that secret, with the given value. ```python from azure.identity import DefaultAzureCredential from azure.keyvault.secrets import SecretClient credential = DefaultAzureCredential() secret_client = SecretClient
Release History
| Version | Changes | Urgency | Date |
|---|---|---|---|
| azure-ai-evaluation_1.18.10 | ## 1.18.10 (2026-10-22) ### Features Added - Added shared model runners and evaluation strategies for asset evaluators using Decision models in Microsoft Foundry, including Output Quality and Tool Use Quality aggregate and member metrics. - Decision authentication uses an explicit `api_key` or caller-owned credential with a callable `get_token`. Reuse a synchronous `azure.identity.DefaultAzureCredential` for synchronous or batch calls and close it afterward; async credentials require the same | High | 10/23/2026 |
| azure-mgmt-compute_39.0.0 | ## 39.0.0 (2026-10-15) ### Features Added - Model `VirtualMachineNetworkInterfaceIPConfigurationProperties` added property `private_ip_address_prefix_length` - Model `VirtualMachineProperties` added property `flex_profile` - Model `VirtualMachineScaleSetIPConfigurationProperties` added property `private_ip_address_prefix_length` - Model `VirtualMachineScaleSetUpdateIPConfigurationProperties` added property `private_ip_address_prefix_length` - Added model `FlexProfile` - Model `Capa | High | 10/19/2026 |
| azure-mgmt-containerservice_41.8.0 | ## 41.8.0 (2026-10-19) ### Features Added - Model `GPUProfile` added property `nvidia` - Added enum `ManagementMode` - Added model `NvidiaGPUProfile` | High | 10/19/2026 |
| azure-ai-projects_2.9.0 | ## 2.9.0 (2026-10-16) ### Features Added * Added experimental Voice Agents REST and realtime tracing through `AIProjectInstrumentor`, including correlated session, connection and response spans, tool/lifecycle events, aggregate audio sizes and existing GenAI response metrics. Existing tracing and content-recording settings apply; message content is not captured by default. * Added an optional `transport` keyword on synchronous and asynchronous realtime `connect()` using `VoiceAgentTransport.WE | High | 10/17/2026 |
| azure-mgmt-azurestackhci_8.2.0 | ## 8.2.0 (2026-10-15) ### Features Added - Client `AzureStackHCIClient` added operation group `cluster_jobs` - Client `AzureStackHCIClient` added operation group `edge_machine_deployment_settings` - Client `AzureStackHCIClient` added operation group `edge_machine_disk_jobs` - Client `AzureStackHCIClient` added operation group `edge_machine_disk_privileged_jobs` - Client `AzureStackHCIClient` added operation group `edge_machine_disks` - Client `AzureStackHCIClient` added operation g | High | 10/16/2026 |
| azure-ai-evaluation_1.18.9 | ## 1.18.9 (2026-10-12) ### Bugs Fixed - Hardened multimodal evaluation image handling. The output file name is now derived from a validated allow-list of known image types rather than the raw `data:image/<subtype>;` value, and decoded image bytes are confined to the intended `images/` folder. - Added Microsoft-scoped evaluation status and boolean pass/fail attributes to Application Insights result events. | High | 10/14/2026 |
| azure-mgmt-commvaultcontentstore_1.0.0 | ## 1.0.0 (2026-10-09) ### Features Added - Model `CloudAccountProperties` added property `company` - Model `CloudAccountProperties` added property `role_assignments_on_cca_create` - Model `StorageProperties` added property `compliance_lock_status` - Added model `ActivateSaaSRequestParam` - Added model `CompanyProfile` - Added enum `ComplianceLockStatus` - Operation group `StoragesOperations` added method `disable_compliance_lock` - Operation group `StoragesOperations` added met | High | 10/13/2026 |
| azure-mgmt-network_33.1.0 | ## 33.1.0 (2026-10-09) ### Features Added - Client `NetworkManagementClient` added operation group `express_route_lag_authorizations` - Client `NetworkManagementClient` added operation group `virtual_network_appliance_capabilities` - Model `DdosCustomPolicyPropertiesFormat` added property `mitigation_rules` - Model `ExpressRouteLagPropertiesFormat` added property `authorizations` - Model `VirtualNetworkAppliancePropertiesFormat` added property `capacity_provider` - Added model `Arm | High | 10/12/2026 |
| azure-mgmt-resiliencemanagement_1.0.0 | ## 1.0.0 (2026-10-09) ### Features Added - Model `AttentionReason` added property `drill_rbac_on_goal_assignment` - Model `AttentionReason` added property `goal_assignment` - Model `AttentionReason` added property `health_model_associated_with_service_group` - Model `AttentionReason` added property `rbac_needed_for_drill_on_goal_assignment` - Model `AttentionReason` added property `recovery_plan` - Model `DrillProperties` added property `goal_assignment_properties` - Model `Drill | High | 10/11/2026 |
| azure-ai-evaluation_1.18.8 | ## 1.18.8 (2026-10-08) ### Bugs Fixed - Fixed legacy safety annotation polling retrying terminal HTTP 400 errors until timeout. Both workspace and project polling paths now preserve the original service error immediately and log the operation ID, poll count, and elapsed time without response content or credentials; pending responses and other retry behavior are unchanged. - Fixed multi-turn evaluations failing during Azure OpenAI result conversion when per-turn token-count lists were routed in | High | 10/9/2026 |
| azure-appconfiguration_1.10.0 | ## 1.10.0 (2026-10-08) ### Other Changes - Improved Microsoft Entra ID authentication audience detection for sovereign clouds. When `audience` is not set, the client now derives it from the App Configuration endpoint hostname. An explicitly configured audience continues to override detection. | High | 10/9/2026 |
| azure-monitor-opentelemetry_1.8.11 | ## 1.8.11 (2026-10-07) ### Other Changes - Corrected the package metadata to require Python 3.10 or later, matching the existing support policy ([#49200](https://github.com/Azure/azure-sdk-for-python/pull/49200)) | High | 10/7/2026 |
| azure-ai-projects_2.8.0 | ## 2.8.0 (2026-10-02) ### Features Added * Agent Optimization APIs are now GA, including job management, cost estimation, candidate retrieval, and candidate promotion. * Added typed Agent Optimization models for agent and prompt optimization, configuration, evaluation, candidate search and mutations, cost estimates, latency, token usage, and termination details. * Data generation job APIs are now GA. * Added scenario-specific data generation models for evaluation, supervised fine-tuning, reinf | High | 10/5/2026 |
| azure-mgmt-computefleet_2.0.0 | ## 2.0.0 (2026-09-29) ### Features Added - Client `ComputeFleetMgmtClient` added parameter `cloud_setting` in method `__init__` - Model `FleetProperties` added property `capacity_type` - Model `FleetProperties` added property `mode` - Model `FleetProperties` added property `vm_name_prefix` - Enum `ManagedServiceIdentityType` added member `SYSTEM_ASSIGNED_USER_ASSIGNED` - Model `VirtualMachineScaleSet` added property `name` - Added enum `CapacityType` - Added enum `FleetMode` | High | 10/3/2026 |
| azure-identity_1.26.0 | ## 1.26.0 (2026-09-30) ### Features Added - `ManagedIdentityCredential` now supports user-assigned managed identities on Azure Arc-enabled servers. An identity can be selected by client ID, object ID, or resource ID. Token responses that do not confirm the requested identity are rejected. ([#48967](https://github.com/Azure/azure-sdk-for-python/pull/48967)) ### Bugs Fixed - Fixed synchronous Service Fabric managed identity authentication with MSAL 1.39.0 and later. Service Fabric now uses the | High | 10/1/2026 |
| azure-mgmt-storagecache_4.1.0 | ## 4.1.0 (2026-09-02) ### Features Added - Client `StorageCacheManagementClient` added operation group `rebalance_jobs` - Model `ExpansionJobProperties` added property `rebalance_job_id` - Model `ExpansionJobProperties` added property `run_rebalance_job` - Added model `RebalanceJob` - Added enum `RebalanceJobAdminStatus` - Added model `RebalanceJobProperties` - Added enum `RebalanceJobPropertiesProvisioningState` - Added model `RebalanceJobPropertiesStatus` - Added enum `Reba | High | 10/1/2026 |
| azure-ai-ml_1.35.1 | ## 1.35.1 (2026-09-30) ### Bugs Fixed - Fixed artifact cache path validation, wildcard version handling across supported Python versions, and concurrent downloads for component `additional_includes`. - Fixed artifact cache reads failing on transient Windows checksum-sharing errors during initial validation. - Improved the missing Azure CLI error reported when initializing the artifact cache. - Fixed `MLClient.jobs.download(..., output_name=...)` returning without downloading named data outputs | High | 9/30/2026 |
| azure-mgmt-containerservice_41.7.0 | ## 41.7.0 (2026-09-29) ### Features Added - Model `ManagedClusterProperties` added property `enable_fips` - Model `ManagedClusterSecurityProfile` added property `kubernetes_resource_object_encryption_profile` - Added enum `InfrastructureEncryption` - Added model `KubernetesResourceObjectEncryptionProfile` | High | 9/29/2026 |
| azure-ai-evaluation_1.18.7 | ## 1.18.7 (2026-09-25) ### Breaking Changes - Removed the `aoai_output_items_page_size` option from `evaluate` and its input validation. Callers using this option must remove it; it no longer configures native Azure OpenAI grader output retrieval. Output-item requests again use a fixed page size of 100 and the existing OpenAI client's configured retry policy, without adaptive page-size reduction or a separate SDK-level retry budget. All cursor pages are still retrieved, and result orde | High | 9/25/2026 |
| azure-ai-agentserver-core_2.2.0 | ## 2.2.0 (2026-09-23) ### Other Changes - Stable release promoting the 2.2.0 preview series. No functional changes since 2.2.0b2. | High | 9/24/2026 |
| azure-mgmt-storage_25.2.0 | ## 25.2.0 (2026-09-22) ### Features Added - Client `StorageManagementClient` added operation group `context_cache_containers` - Client `StorageManagementClient` added operation group `context_caches` - Model `SasPolicy` added property `require_user_bound_user_delegation_sas` - Model `SasPolicy` added property `require_user_bound_user_delegation_sas_action` - Model `StorageAccountProperties` added property `allow_cross_tenant_delegation_sas` - Model `StorageAccountPropertiesCreatePa | High | 9/24/2026 |
| azure-storage-blob_12.30.3 | ## 12.30.3 (2026-09-22) ### Bugs Fixed - Async clients now reject header names and values containing a `\r` or `\n` when sending a batch request, matching the behavior of the sync clients. | High | 9/22/2026 |
| azure-mgmt-resource-policy_1.0.0 | ## 1.0.0 (2026-09-16) ### Features Added - Model `Selector` added property `progress` - Enum `SelectorKind` added member `RESOURCE_ROLLOUT_PERCENTAGE` ### Breaking Changes - Deleted or renamed client operation group `PolicyClient.policy_enrollments` - Deleted or renamed client operation group `PolicyClient.policy_exemptions` - Deleted or renamed client operation group `PolicyClient.variable_values` - Deleted or renamed client operation group `PolicyClient.variables` - Deleted o | High | 9/21/2026 |
| azure-ai-projects_2.7.0 | ## 2.7.0 (2026-09-18) ### Features Added * Added preview Voice Agent support, including voice agent definitions, realtime sessions and events, conversations, audio, and telephony models. * Added `.beta.agents.create_from_prompt()` to generate and create a Voice Agent from high-level inputs. * Added the `.beta.voice_agents.conversations` sub-client for managing voice conversations and retrieving their responses, conversation items, and audio. * Added `.beta.voice_agents.realtime.connect()` for | High | 9/18/2026 |
| azure-mgmt-network_33.0.0 | ## 33.0.0 (2026-09-17) ### Features Added - Client `NetworkManagementClient` added operation group `authentication_policies` - Model `ApplicationGatewayFirewallManifestRuleSet` added property `display_name` - Model `ApplicationGatewayFirewallRule` added property `paranoia_level` - Model `ApplicationGatewayFirewallRuleSetPropertiesFormat` added property `display_name` - Model `ApplicationGatewayPropertiesFormat` added property `advanced_routing_condition_sets` - Model `ApplicationGa | High | 9/18/2026 |
| azure-mgmt-weightsandbiases_1.0.2 | ## 1.0.2 (2026-09-16) ### Other Changes - This package has been deprecated and will no longer be maintained after 09-30-2026. This package will only receive security fixes until 09-30-2026. There is no replacement package or migration path. | High | 9/17/2026 |
| azure-mgmt-relay_2.1.0 | ## 2.1.0 (2026-09-16) ### Features Added - Model `RelayNamespaceProperties` added property `minimum_tls_version` - Added enum `TlsVersion` | High | 9/16/2026 |
| azure-ai-projects_2.6.1 | ## 2.6.1 (2026-09-14) ### Sample updates * Added `sample_agent_insights_on_demand.py` and `sample_agent_insights_scheduled.py` under `samples/agent_insights/` to demonstrate on-demand analysis, insight lifecycle updates, and scheduled monitor setup with temporary external agents, fictional traces, and owned-resource cleanup. * Added `sample_agent_web_iq.py` under `samples/agents/tools/`, demonstrating a Prompt Agent using the `WebIQPreviewTool`. ### Bugs Fixed * Fixed Agent Insights run poll | High | 9/14/2026 |
| azure-mgmt-iothubprovisioningservices_2.0.0 | ## 2.0.0 (2026-08-26) ### Features Added - Client `IotDpsClient` added parameter `api_version` in method `__init__` - Client `IotDpsClient` added parameter `cloud_setting` in method `__init__` - Client `IotDpsClient` added method `send_request` - Model `GroupIdInformation` added property `system_data` - Model `IotDpsPropertiesDescription` added property `disable_local_auth` - Model `IotDpsPropertiesDescription` added property `portal_operations_host_name` - Model `IotHubDefinitio | High | 9/10/2026 |
| azure-mgmt-enclave_1.0.0 | ## 1.0.0 (2026-08-27) ### Other Changes - First GA | High | 8/27/2026 |
| azure-mgmt-hybridcompute_10.0.0 | ## 10.0.0 (2026-07-24) ### Features Added - Client `HybridComputeManagementClient` added parameter `cloud_setting` in method `__init__` - Client `HybridComputeManagementClient` added method `begin_setup_extensions` - Client `HybridComputeManagementClient` added method `send_request` - Client `HybridComputeManagementClient` added operation group `extension_metadata_v2` - Client `HybridComputeManagementClient` added operation group `extension_publisher` - Client `HybridComputeManagem | High | 8/14/2026 |
| azure-mgmt-discovery_1.0.0 | ## 1.0.0 (2026-07-29) ### Features Added - First GA | High | 7/31/2026 |
| azure-mgmt-consumption_11.0.0 | ## 11.0.0 (2026-07-20) ### Features Added - Client `ConsumptionManagementClient` added parameter `cloud_setting` in method `__init__` - Client `ConsumptionManagementClient` added parameter `polling_interval` in method `__init__` - Client `ConsumptionManagementClient` added method `send_request` - Model `Balance` added property `system_data` - Model `Budget` added property `system_data` - Model `ChargeSummary` added property `etag` - Model `ChargeSummary` added property `system_da | High | 7/20/2026 |
| azure-mgmt-peering_2.0.0 | ## 2.0.0 (2026-07-07) ### Features Added - Client `PeeringManagementClient` added method `send_request` - Client `PeeringManagementClient` added operation group `connection_monitor_tests` - Client `PeeringManagementClient` added operation group `registered_asns` - Client `PeeringManagementClient` added operation group `received_routes` - Client `PeeringManagementClient` added operation group `rp_unbilled_prefixes` - Client `PeeringManagementClient` added operation group `registered | High | 7/7/2026 |
| azure-mgmt-monitorworkspaces_1.0.0 | ## 1.0.0 (2026-06-23) ### Other Changes - First GA | High | 6/26/2026 |
| azure-mgmt-managednetworkfabric_2.0.0 | ## 2.0.0 (2026-06-08) ### Features Added - Client `ManagedNetworkFabricMgmtClient` added parameter `cloud_setting` in method `__init__` - Client `ManagedNetworkFabricMgmtClient` added method `send_request` - Client `ManagedNetworkFabricMgmtClient` added operation group `network_monitors` - Client `ManagedNetworkFabricMgmtClient` added operation group `network_bootstrap_devices` - Client `ManagedNetworkFabricMgmtClient` added operation group `network_bootstrap_interfaces` - Model `A | High | 6/16/2026 |
| azure-storage-queue_12.17.0 | ## 12.17.0 (2026-06-08) ### Features Added - Stable release of features from 12.17.0b1 | High | 6/8/2026 |
| azure-mgmt-computelimit_1.1.0 | ## 1.1.0 (2026-05-26) ### Features Added - Client `ComputeLimitMgmtClient` added operation group `vm_families` - Added model `FeatureEnableRequest` - Added model `VmFamily` - Added model `VmFamilyProperties` - Operation group `FeaturesOperations` added method `begin_disable` - Added operation group `VmFamiliesOperations` | High | 6/2/2026 |
| azure-appconfiguration-provider_2.5.0 | ## 2.5.0 (2026-05-22) ### Features Added - Added `refresh_enabled` parameter to the `load` method. Defaults to `True` if `refresh_on` is set. When set to `True` without `refresh_on` keys, all selected key-values are monitored for changes. When set to `False`, calling `refresh` will be a no-op. - Added the ability to monitor all selected key-values for refresh with the `refresh_enabled` kwarg. When this kwarg is set to `True`, and `refresh_on` is not specified, changes to any selected key-value | High | 5/26/2026 |
| azure-mgmt-storage_25.0.0 | ## 25.0.0 (2026-05-19) ### Features Added - Client `StorageManagementClient` added method `send_request` - Client `StorageManagementClient` added operation group `connectors` - Client `StorageManagementClient` added operation group `data_shares` - Enum `AccessTier` added member `SMART` - Enum `AllowedCopyScope` added member `ALL` - Enum `TriggerType` added member `MOCK_RUN` - Model `AzureEntityResource` added property `system_data` - Model `BlobContainer` added property `system | High | 5/20/2026 |
| azure-mgmt-storagesync_1.0.1 | ## 1.0.1 (2026-05-14) ### Other Changes - Regenerated with latest code generator tool | High | 5/14/2026 |
| azure-mgmt-attestation_2.0.0 | ## 2.0.0 (2026-05-08) ### Features Added - Client `AttestationManagementClient` added parameter `cloud_setting` in method `__init__` - Client `AttestationManagementClient` added method `send_request` - Client `AttestationManagementClient` added operation group `private_link_resources` - Model `AttestationServiceCreationSpecificParams` added property `public_network_access` - Model `AttestationServiceCreationSpecificParams` added property `tpm_attestation_authentication` - Model `At | High | 5/8/2026 |
| azure-batch_15.1.0 | ## 15.1.0 (2026-03-06) ### Other Changes - This is the GA release of the features introduced in the 15.0.0 and 15.1.0 beta versions, including LRO support, job-level FIFO scheduling, CMK support on pools, IPv6 support, metadata security protocol support, IP tag support, and confidential VM enhancements. ### Breaking Changes - Renamed `BatchNodeUserUpdateOptions` to `BatchNodeUserReplaceOptions`. - Renamed `OutputFileUploadConfig` to `OutputFileUploadConfiguration`. - Removed Models: - Rem | High | 5/1/2026 |
| azure-postgresql-auth_1.0.2 | ## 1.0.2 (2026-04-28) ### Bugs Fixed - Removed dependency on `DefaultAzureCredential` in source library - Fixed `get_entra_conninfo_async` and `get_entra_token_async` closing the credential by using it as a context manager ### Other Changes - Bumped minimum dependency on `azure-core` to `>=1.31.0` | High | 4/29/2026 |
| azure-mgmt-hybridkubernetes_1.2.0 | ## 1.2.0 (2026-04-23) ### Other Changes - Regenerate SDK code with latest code generator tool | High | 4/23/2026 |
| azure-template_0.1.0b6187637 | ## 0.1.0b6187637 (2026-04-21) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | High | 4/21/2026 |
| 4.11.0 | Imported from PyPI (4.11.0) | Low | 4/21/2026 |
| azure-mgmt-kubernetesconfiguration-extensions_1.0.0 | ## 1.0.0 (2026-03-26) ### Features Added - Enum `AKSIdentityType` added member `WORKLOAD` - Model `Extension` added property `managed_by` - Model `ExtensionProperties` added property `auto_upgrade_mode` - Model `ExtensionProperties` added property `management_details` - Model `ExtensionProperties` added property `additional_details` - Model `ExtensionProperties` added property `extension_state` - Model `ExtensionPropertiesAksAssignedIdentity` added property `object_id` - Model | High | 4/21/2026 |
| azure-ai-contentunderstanding_1.1.0 | ## 1.1.0 (2026-04-20) ### Features Added - Added `usage` property on `AnalyzeLROPoller` and `AnalyzeAsyncLROPoller` to surface billing and token consumption details (`UsageDetails`) returned by the REST API. | High | 4/20/2026 |
| azure-ai-projects_2.1.0 | ## 2.1.0 (2026-04-20) ### Features Added * `get_openai_client()` on `AIProjectClient` now takes an optional input argument `agent_name`. If provided, the returned OpenAI client will use a base URL of Agent endpoint instead of Foundry Project endpoint. As Agent endpoints are a preview feature, you need to set `allow_preview=True` on the `AIProjectClient` constructor. * New `.beta.agents` sub-client added, with Session operations (those only work with Hosted Agents) * `create_session()` * `d | High | 4/20/2026 |
| azure-ai-agentserver-responses_1.0.0b4 | ## 1.0.0b4 (2026-04-19) ### Bugs Fixed - `DELETE /responses/{id}` no longer returns intermittent 404 when the background task's eager eviction races with the delete handler. Previously, `try_evict` could remove the record from in-memory state between the handler's `get()` and `delete()` calls, causing `delete()` to return `False` and producing a spurious 404. The handler now falls through to the durable provider when the in-memory delete fails due to a concurrent eviction. - `POST /responses` | High | 4/20/2026 |
| azure-mgmt-containerservice_41.1.0 | ## 41.1.0 (2026-04-20) ### Features Added - Model `ManagedClusterAzureMonitorProfile` added property `app_monitoring` - Model `ManagedClusterIngressProfile` added property `gateway_api` - Model `ManagedClusterIngressProfileWebAppRouting` added property `gateway_api_implementations` - Model `ManagedClusterProperties` added property `hosted_system_profile` - Enum `OSSKU` added member `WINDOWS2025` - Added enum `GatewayAPIIstioEnabled` - Added model `ManagedClusterAppRoutingIstio` | High | 4/20/2026 |
| azure-ai-agentserver-responses_1.0.0b3 | ## 1.0.0b3 (2026-04-19) ### Bugs Fixed - Background non-stream finalization now passes isolation keys to `update_response` â previously the `isolation=` kwarg was missing, causing Foundry storage to return 404 when isolation headers were present (the response was created in a scoped partition but the update targeted the unscoped partition). This left responses permanently stuck at `in_progress`. | High | 4/19/2026 |
| azure-ai-agentserver-responses_1.0.0b2 | ## 1.0.0b2 (2026-04-17) ### Features Added - Startup configuration logging â `ResponsesAgentServerHost` logs storage provider type, default model, default fetch history count, and shutdown grace period at INFO level during construction. - `InboundRequestLoggingMiddleware` moved to `azure-ai-agentserver-core` â pure-ASGI middleware that logs every inbound HTTP request at INFO level (start) and at INFO or WARNING level (completion). Now wired automatically by `AgentServerHost` so all protocol ho | High | 4/19/2026 |
| azure-ai-agentserver-invocations_1.0.0b2 | ## 1.0.0b2 (2026-04-17) ### Features Added - Startup configuration logging â `InvocationAgentServerHost` logs whether an OpenAPI spec is configured at INFO level during construction. - Inbound request logging â `InboundRequestLoggingMiddleware` from `azure-ai-agentserver-core` is now wired automatically by `AgentServerHost`. All inbound HTTP requests are logged at INFO level (start) and at INFO or WARNING level (completion) with method, path, status code, duration, and correlation headers. | High | 4/19/2026 |
| azure-ai-agentserver-core_2.0.0b2 | ## 2.0.0b2 (2026-04-17) ### Features Added - Startup configuration logging â `AgentServerHost` lifespan now emits three INFO-level log lines at startup: platform environment (agent name, version, port, session ID, SSE keep-alive), connectivity (project endpoint and OTLP endpoint masked to scheme://host, Application Insights configured flag), and host options (shutdown timeout, registered protocols). Sensitive values (Application Insights connection string) are never logged. - `InboundRequestLo | High | 4/19/2026 |
| azure-keyvault-certificates_4.11.0 | ## 4.11.0 (2026-03-27) ### Features Added - Added support for service API version `2025-07-01` - Added `uris` and `ip_addresses` properties to `SubjectAlternativeNames` ### Bugs Fixed - When creating a certificate with an unknown issuer, `CertificateClient.(begin_)create_certificate` now returns a `CertificateOperation` instead of `None` - When a certificate operation's error doesn't have an inner error, `CertificateOperationError` will be correctly serialized instead of raising an excep | High | 4/17/2026 |
| azure-mgmt-compute_38.0.0b1 | ## 38.0.0b1 (2026-04-16) ### Features Added - Client `ComputeManagementClient` added method `send_request` - Model `CommunityGallery` added property `identifier` - Model `CommunityGalleryImageVersion` added property `identifier` - Model `SharedGallery` added property `identifier` - Model `SharedGalleryImageVersion` added property `identifier` - Model `Usage` added property `unit` - Added model `CloudError` - Added enum `ComponentNames` - Added enum `PassNames` - Operation g | High | 4/17/2026 |
| azure-keyvault-secrets_4.11.0 | ## 4.11.0 (2026-03-26) ### Features Added - Added support for service API version `2025-07-01` - Added support for retrieving secrets with `out_content_type` - Added the `previous_version` property to `SecretProperties` ### Other Changes - Key Vault API version `2025-07-01` is now the default | High | 4/17/2026 |
| azure-ai-agentserver-invocations_1.0.0b1 | ## 1.0.0b1 (2026-04-14) ### Features Added - Initial release of `azure-ai-agentserver-invocations`. - `InvocationAgentServerHost` â a Starlette-based host subclass for the invocations protocol. - Decorator-based handler registration (`@app.invoke_handler`, `@app.get_invocation_handler`, `@app.cancel_invocation_handler`). - Optional `GET /invocations/{id}` and `POST /invocations/{id}/cancel` endpoints. - `GET /invocations/docs/openapi.json` for OpenAPI spec serving. - Invocation ID tracking and | High | 4/15/2026 |
| azure-ai-agentserver-responses_1.0.0b1 | ## 1.0.0b1 (2026-04-14) ### Features Added - Initial release of `azure-ai-agentserver-responses`. - `ResponsesAgentServerHost` â Starlette-based host with Responses protocol endpoints (`POST /responses`, `GET /responses/{id}`, `POST /responses/{id}/cancel`, `DELETE /responses/{id}`, `GET /responses/{id}/input_items`). - `TextResponse` â high-level convenience for text-only responses with automatic SSE lifecycle. Accepts a plain string, sync/async callable, or async iterable via the `text` para | High | 4/15/2026 |
| azure-ai-agentserver-core_2.0.0b1 | ## 2.0.0b1 (2026-04-14) This is a major architectural rewrite. The package has been redesigned as a lightweight hosting foundation. Protocol implementations that were previously bundled in this package have moved to dedicated protocol packages (`azure-ai-agentserver-responses`, `azure-ai-agentserver-invocations`). See the [Migration Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/agentserver/azure-ai-agentserver-core/MigrationGuide.md) for upgrading from 1.x versions. ### Br | High | 4/15/2026 |
| azure-template_0.1.0b6153055 | ## 0.1.0b6153055 (2026-04-14) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/14/2026 |
| azure-template_0.1.0b6148749 | ## 0.1.0b6148749 (2026-04-14) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/14/2026 |
| azure-template_0.1.0b6132347 | ## 0.1.0b6132347 (2026-04-09) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/9/2026 |
| azure-ai-evaluation_1.16.5 | ## 1.16.5 (2026-04-08) ### Bugs Fixed - Fixed Jinja2 Server-Side Template Injection (SSTI) vulnerability by replacing unsandboxed `jinja2.Template` with `jinja2.sandbox.SandboxedEnvironment` across all template rendering paths (CWE-1336). - Fixed `sensitive_data_leakage` risk category producing 0% attack success rate (false negatives) in the Foundry execution path. Agent-specific tool context (e.g., `document_client_smode`, `email_client_smode`) was stored in `SeedObjective.metadata` but never | Medium | 4/9/2026 |
| azure-template_0.1.0b6127339 | ## 0.1.0b6127339 (2026-04-08) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/9/2026 |
| azure-template_0.1.0b6126561 | ## 0.1.0b6126561 (2026-04-08) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/8/2026 |
| azure-ai-voicelive_1.2.0b5 | ## 1.2.0b5 (2026-04-06) ### Features Added - **OpenTelemetry Tracing Support**: Added `VoiceLiveInstrumentor` for opt-in OpenTelemetry-based tracing of VoiceLive WebSocket connections, following Azure SDK and GenAI semantic conventions (v1.34.0). Instrumentation covers connection lifecycle (`connect`, `close`), message send/receive, and captures voice-specific attributes (`gen_ai.voice.session_id`, `gen_ai.voice.event_type`). - Enable via `AZURE_EXPERIMENTAL_ENABLE_GENAI_TRACING=true` | Medium | 4/6/2026 |
| azure-monitor-opentelemetry-exporter_1.0.0b51 | ## 1.0.0b51 (2026-04-07) ### Bugs Fixed - Added credential authentication support for customer sdkstats ([#46143](https://github.com/Azure/azure-sdk-for-python/pull/46143)) | Medium | 4/6/2026 |
| azure-template_0.1.0b6113352 | ## 0.1.0b6113352 (2026-04-06) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/6/2026 |
| azure-template_0.1.0b6112900 | ## 0.1.0b6112900 (2026-04-06) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/6/2026 |
| azure-template_0.1.0b6112363 | ## 0.1.0b6112363 (2026-04-06) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/6/2026 |
| azure-mgmt-playwright_1.1.0b1 | ## 1.1.0b1 (2026-04-06) ### Features Added - Model `PlaywrightMgmtClient` added parameter `cloud_setting` in method `__init__` - Model `PlaywrightWorkspace` added property `identity` - Model `PlaywrightWorkspaceProperties` added property `reporting` - Model `PlaywrightWorkspaceProperties` added property `storage_uri` - Model `PlaywrightWorkspaceUpdate` added property `identity` - Model `PlaywrightWorkspaceUpdateProperties` added property `reporting` - Model `PlaywrightWorkspaceUp | Medium | 4/6/2026 |
| azure-cosmos_4.16.0b2 | ### 4.16.0b2 (2026-04-04) #### Bugs Fixed * Fixed bug where container-focused requests using name-based addressing did not consistently populate the `x-ms-cosmos-intended-collection-rid` header. See [PR 44080](https://github.com/Azure/azure-sdk-for-python/pull/44080) #### Other Changes * Updated partition key range routing map refresh to use change-feed-based refresh flow instead of feed-range reads, improving internal refresh behavior for split/stale routing scenarios. See [PR 44080](https:// | Medium | 4/5/2026 |
| azure-template_0.1.0b6108165 | ## 0.1.0b6108165 (2026-04-04) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/4/2026 |
| azure-template_0.1.0b6107547 | ## 0.1.0b6107547 (2026-04-03) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/3/2026 |
| azure-template_0.1.0b6107538 | ## 0.1.0b6107538 (2026-04-03) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/3/2026 |
| azure-ai-evaluation_1.16.4 | ## 1.16.4 (2026-04-03) ### Features Added - Added support for evaluator `properties` passthrough in AOAI evaluation results. When an evaluator returns a `properties` dict, it is included alongside `score`, `label`, `reason`, `threshold`, and `passed` in the result object. ### Bugs Fixed - Fixed stray space in `_eval_metric.value` attribute access in `_base_rai_svc_eval.py`. | Medium | 4/3/2026 |
| azure-template_0.1.0b6102863 | ## 0.1.0b6102863 (2026-04-03) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/3/2026 |
| azure-mgmt-maps_3.0.0b1 | ## 3.0.0b1 (2026-04-03) ### Features Added - Client `AzureMapsManagementClient` added parameter `cloud_setting` in method `__init__` - Client `AzureMapsManagementClient` added method `send_request` - Client `AzureMapsManagementClient` added operation group `private_link_resources` - Client `AzureMapsManagementClient` added operation group `private_endpoint_connections` - Client `AzureMapsManagementClient` added operation group `operation_result` - Client `AzureMapsManagementClient` | Medium | 4/3/2026 |
| azure-mgmt-purview_1.1.0b2 | ## 1.1.0b2 (2026-04-01) ### Features Added - Client `PurviewManagementClient` added parameter `cloud_setting` in method `__init__` - Client `PurviewManagementClient` added method `send_request` - Client `PurviewManagementClient` added operation group `kafka_configurations` - Client `PurviewManagementClient` added operation group `features` - Client `PurviewManagementClient` added operation group `ingestion_private_endpoint_connections` - Client `PurviewManagementClient` added opera | Medium | 4/3/2026 |
| azure-mgmt-networkcloud_3.0.0b1 | ## 3.0.0b1 (2026-04-02) ### Features Added - Client `NetworkCloudMgmtClient` added method `send_request` - Added enum `ExtendedLocationType` - Added model `ProxyResource` ### Breaking Changes - This version introduces new hybrid models which have dual dictionary and model nature. Please follow https://aka.ms/azsdk/python/migrate/hybrid-models for migration. - For the method breakings, please refer to https://aka.ms/azsdk/python/migrate/operations for migration. - Model `AgentPool | Medium | 4/3/2026 |
| azure-template_0.1.0b6102477 | ## 0.1.0b6102477 (2026-04-03) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/3/2026 |
| azure-monitor-opentelemetry-exporter_1.0.0b50 | ## 1.0.0b50 (2026-04-03) ### Bugs Fixed - Fix duplicate authentication policy in live metrics exporter causing Unauthorized errors for authenticated Application Insights resources ([#46024](https://github.com/Azure/azure-sdk-for-python/pull/46024)) - Suppress internal sdkstats HTTP pipeline logs from appearing in user's logs ([#45966](https://github.com/Azure/azure-sdk-for-python/pull/45966)) - Kubernetes pod name takes precedence when populating `cloud_RoleInstance` ([#45884](https://g | Medium | 4/2/2026 |
| azure-mgmt-managementgroups_2.0.0b1 | ## 2.0.0b1 (2026-04-02) ### Features Added - Model `HierarchySettings` added property `system_data` - Model `ManagementGroup` added property `system_data` - Enum `ManagementGroupChildType` added member `SUBSCRIPTIONS` - Model `Operation` added property `is_data_action` - Model `Operation` added property `origin` - Model `Operation` added property `action_type` - Model `SubscriptionUnderManagementGroup` added property `system_data` - Added enum `ActionType` - Added enum `Creat | Medium | 4/2/2026 |
| azure-mgmt-confluent_3.0.0b1 | ## 3.0.0b1 (2026-03-16) ### Features Added - Model `ConfluentManagementClient` added parameter `cloud_setting` in method `__init__` - Client `ConfluentManagementClient` added method `send_request` - Client `ConfluentManagementClient` added operation group `environment` - Client `ConfluentManagementClient` added operation group `cluster` - Client `ConfluentManagementClient` added operation group `connector` - Client `ConfluentManagementClient` added operation group `topics` - Mode | Medium | 4/2/2026 |
| azure-template_0.1.0b6095631 | ## 0.1.0b6095631 (2026-04-01) ### Features Added - Some feature ### Breaking Changes - Some breaking change ### Bugs Fixed - Some bug fix ### Other Changes - Some other change | Medium | 4/1/2026 |
| azure-ai-evaluation_1.16.3 | ## 1.16.3 (2026-04-01) ### Features Added - Added `extra_headers` support to `OpenAIModelConfiguration` to allow passing custom HTTP headers. ### Bugs Fixed - Fixed attack success rate (ASR) always reporting 0% because the sync eval API's `passed` field indicates task completion, not content safety. Replaced `passed`-based logic with score-based threshold comparison matching `_evaluation_processor.py`. - Fixed partial red team results being discarded when some objectives fail. Previously, if | Medium | 4/1/2026 |
| azure-storage-file-datalake_12.25.0b1 | ## 12.25.0b1 (2026-04-01) ### Features Added - Added support for service version 2026-06-06. - Added support for connection strings and `account_url`s to accept URLs with `-ipv6` and `-dualstack` suffixes for `DataLakeServiceClient`, `FileSystemClient`, `DataLakeDirectoryClient`, and `DataLakeFileClient`. - Added support for `DataLakeDirectoryClient` and `DataLakeFileClient`'s `set_tags` and `get_tags` APIs to conditionally set and get tags associated with a directory or file client, respectiv | Medium | 4/1/2026 |
| azure-storage-queue_12.17.0b1 | ## 12.17.0b1 (2026-04-01) ### Features Added - Added support for service version 2026-06-06. - Added support for connection strings and `account_url`s to accept URLs with `-ipv6` and `-dualstack` suffixes for `QueueServiceClient` and `QueueClient`. | Medium | 4/1/2026 |
| azure-storage-file-share_12.26.0b1 | ## 12.26.0b1 (2026-04-01) ### Features Added - Added support for service version 2026-06-06. - Added support for the keyword `file_property_semantics` in `ShareClient`'s `create_directory` and `DirectoryClient`'s `create_directory` APIs, which specifies permissions to be configured upon directory creation. - Added support for the keyword `data` to `FileClient`'s `create_file` API, which specifies the optional initial data to be uploaded (up to 4MB). - Added support for connection strings and `a | Medium | 4/1/2026 |
| azure-storage-blob_12.30.0b1 | ## 12.30.0b1 (2026-04-01) ### Features Added - Added support for service version 2026-06-06. - Added support for connection strings and `account_url`s to accept URLs with `-ipv6` and `-dualstack` suffixes for `BlobServiceClient`, `ContainerClient`, and `BlobClient`. - Added support for `create` permission in `BlobSasPermissions` for `stage_block`, `stage_block_from_url`, and `commit_block_list`. - Added support for a new `Smart` access tier to `StandardBlobTier` used in `BlobClient.set_standa | Medium | 4/1/2026 |
| azure-mgmt-azurestackhci_8.0.0 | ## 8.0.0 (2026-03-31) ### Features Added - Client `AzureStackHCIClient` added parameter `cloud_setting` in method `__init__` - Client `AzureStackHCIClient` added method `send_request` - Client `AzureStackHCIClient` added operation group `edge_device_jobs` - Client `AzureStackHCIClient` added operation group `validated_solution_recipes` - Model `Cluster` added property `identity` - Model `ClusterPatch` added property `identity` - Model `ClusterReportedProperties` added property `m | Medium | 4/1/2026 |
| azure-mgmt-billingbenefits_1.0.0b2 | ## 1.0.0b2 (2026-03-31) ### Features Added - Enum `CommitmentGrain` added member `FULL_TERM` - Enum `CommitmentGrain` added member `UNKNOWN` - Model `Sku` added property `tier` - Model `Sku` added property `size` - Model `Sku` added property `family` - Model `Sku` added property `capacity` - Enum `Term` added member `P1M` - Added model `ApplicableMacc` - Added enum `ApplyDiscountOn` - Added model `AutomaticShortfallSuppressReason` - Added model `Award` - Added enum `Ben | Medium | 4/1/2026 |
| azure-ai-voicelive_1.1.0 | ## 1.1.0 (2025-11-03) ### Features Added - Added support for Agent configuration through the new `AgentConfig` model - Added `agent` field to `ResponseSession` model to support agent-based conversations - The `AgentConfig` model includes properties for agent type, name, description, agent_id, and thread_id | Low | 11/4/2025 |
