chore(deps): bump azure-identity from 1.17.1 to 1.18.0

[dependabot]

Bumps azure-identity from 1.17.1 to 1.18.0.

Release notes

Sourced from azure-identity's releases.

azure-identity_1.18.0

1.18.0 (2024-09-19)

Features Added

• All credentials now implement the SupportsTokenInfo or AsyncSupportsTokenInfo protocol. Each credential now has a get_token_info method which returns an AccessTokenInfo object. The get_token_info method is an alternative method to get_token that improves support for more complex authentication scenarios. (#36882)
  • Information on when a token should be refreshed is now saved in AccessTokenInfo (if available).

Other Changes

• Added identity config validation to ManagedIdentityCredential to avoid non-deterministic states (e.g. both resource_id and object_id are specified). (#36950)
• Additional validation was added for ManagedIdentityCredential in Azure Cloud Shell environments. (#36438)
• Bumped minimum dependency on azure-core to >=1.31.0.

azure-identity_1.18.0b2

1.18.0b2 (2024-08-09)

Features Added

• Added support of send_certificate_chain keyword argument when using certs with the synchronous OnBehalfOfCredential. (#36810)
• AzurePowerShellCredential now supports using secure strings when authenticating with PowerShell. (#36653)

azure-identity_1.18.0b1

1.18.0b1 (2024-07-16)

• Fixed the issue that SharedTokenCacheCredential was not picklable.

Other Changes

• The synchronous ManagedIdentityCredential was updated to use MSAL (Microsoft Authentication Library) for handling most of the underlying managed identity implementations.

Commits

• 7e9ddf8 [Identity] Prepare release (#37439)
• ddd5c27 [Identity] Implement new protocol for all credentials (#36882)
• b2043fa [Identity] Update instance discovery error message (#36932)
• 548ea62 Add cloud shell validation (#37278)
• e74ad46 Edit pass on Azure Identity README (#37274)
• 5ae05fc [Identity] Adjust CI setup script (#37238)
• 828a14d [Identity] Update credential docstrings (#37207)
• 513989e [Identity] Validate identity config for MICredential (#36950)
• 347c625 [Identity] Stop using deprecated datetime methods (#36952)
• 8a6980c Pop client_secret to protect pipeline (#36947)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.

[angela-tran]

Followed steps from #1859 to test this update.

I wasn't able to run steps 6 and 7:

6. Call the helper script again configuring DJANGO_ALLOWED_HOSTS for the dev environment:

    DJANGO_ALLOWED_HOSTS=dev-benefits.calitp.org \
    DJANGO_SETTINGS_MODULE=benefits.settings \
    python benefits/secrets.py testsecret
   

7. Verify output:

    [dev] testsecret: Hello from the dev KeyVault!
   

Even though I ran az login --use-device-code and got through that successfully, I see an error when trying to run the helper script:

calitp@1ca51a1d2453:/calitp/app$  DJANGO_ALLOWED_HOSTS=dev-benefits.calitp.org \
 DJANGO_SETTINGS_MODULE=benefits.settings \
 python benefits/secrets.py testsecret
DefaultAzureCredential failed to retrieve a token from the included credentials.
Attempted credentials:
        EnvironmentCredential: EnvironmentCredential authentication unavailable. Environment variables are not fully configured.
Visit https://aka.ms/azsdk/python/identity/environmentcredential/troubleshoot to troubleshoot this issue.
        ManagedIdentityCredential: ManagedIdentityCredential authentication unavailable, no response from the IMDS endpoint.
        SharedTokenCacheCredential: SharedTokenCacheCredential authentication unavailable. No accounts were found in the cache.
        AzureCliCredential: Failed to invoke the Azure CLI
        AzurePowerShellCredential: Failed to invoke PowerShell.
To mitigate this issue, please refer to the troubleshooting guidelines here at https://aka.ms/azsdk/python/identity/powershellcredential/troubleshoot.
        AzureDeveloperCliCredential: Azure Developer CLI could not be found. Please visit https://aka.ms/azure-dev for installation instructions and then,once installed, authenticate to your Azure account using 'azd auth login'.
To mitigate this issue, please refer to the troubleshooting guidelines here at https://aka.ms/azsdk/python/identity/defaultazurecredential/troubleshoot.
Could not authenticate to Azure KeyVault
[dev] testsecret: None

But I was able to use step 9 and 10 to test this update, and it looks good -- was able to run through a full flow using DJANGO_ALLOWED_HOSTS=localhost,dev-benefits.calitp.org. ✅