deps: Bump Azure.Extensions.AspNetCore.Configuration.Secrets and Azure.Identity

[dependabot]

Updated Azure.Extensions.AspNetCore.Configuration.Secrets from 1.4.0 to 1.5.0.

Release notes

Sourced from Azure.Extensions.AspNetCore.Configuration.Secrets's releases.

1.5.0

1.5.0 (2026-03-04)

Features Added

• Added AddKeyVaultSecrets extension methods on IConfigurationBuilder that create a SecretClient from configuration using the Azure.Core configuration extensions (built on System.ClientModel).

Bugs Fixed

• Handle OperationCanceledException in PollForSecretChangesAsync so the background polling loop exits cleanly when the provider is disposed.

1.5.0-beta.1

1.5.0-beta.1 (2026-01-23)

Features Added

• Added BicepMetadata class that provides a clean, type-safe way to set Bicep metadata on resources:
  • Description - Adds @​description('...') decorator
  • BatchSize - Adds @​batchSize(n) decorator for loop deployments
  • OnlyIfNotExists - Adds @​onlyIfNotExists() decorator
• Added BicepMetadata property on ProvisionableResource

Bugs Fixed

• Fixed PropertyName in Self reference for IBicepValue instances of collection items to include its index (for list) or its key (for dictionary) to avoid colliding with its enclosing collection's property name. (#​54802)

1.4.1

1.4.1 (2026-02-12)

Other Changes

• Removed show-serialized-names debug configuration to clean up unnecessary serialized name annotations from XML docs.

1.4.1-beta.3

1.4.1-beta.3 (2026-02-17)

Features Added

• Added ConfidentialLedgerRedirectPolicy to automatically follow HTTP 307/308 redirects while preserving the Authorization header. Previously, the SDK did not follow redirects by default, and even when redirects were enabled, the Authorization header was stripped on cross-domain redirects between ACL nodes, causing write operations to fail when routed to non-primary nodes.

Commits viewable in compare view.

Updated Azure.Identity from 1.17.1 to 1.18.0.

Release notes

Sourced from Azure.Identity's releases.

1.18.0

1.18.0 (2026-02-25)

Features Added

• Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

• The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

• AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

1.18.0-beta.3

1.18.0-beta.3 (2026-02-20)

Breaking Changes

• Renamed WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabled to IsAzureProxyEnabled to follow .NET naming conventions for boolean properties.

Bugs Fixed

• Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.

• Disabled MSAL's internal retry logic for ConfidentialClientApplication and PublicClientApplication to prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.