[dependabot]

Bumps the azure-sdk group with 3 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/Azure/azure-sdk-for-go/sdk/storage/azblob and github.com/Azure/azure-sdk-for-go/sdk/storage/azdatalake.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.2 to 1.23.3

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

• Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

• Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
• Replaced internal default HTTP client with the one from sdk/internal.

Commits

• b0d63ac Prep azcore@v1.23.3 for release (#27681)
• 83e527f [azdatalake] Update azblob to v1.8.2 for service.Client GetSASURL fix (#27657)
• 4e68728 [Service Bus] Stabilize session timeout tests (#27609)
• f3c857e Sync eng/common directory with azure-sdk-tools for PR 17077 (#27678)
• c76d8f0 Fix location parsing for mixed-case resource IDs (#27669)
• 6e5da8b fix: add period to LICENSE.txt (#26886)
• add0a52 Configurations: 'specification/azurefleet/resource-manager/Microsoft.AzureFl...
• 856b379 feat(azcore): add azure-deprecating to default allowed logging headers (#27...
• 50a269f Fix base template. (#27666)
• 3714be0 Sync eng/common directory with azure-sdk-tools for PR 17167 (#27665)
• Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.8.1 to 1.8.2

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.2

1.8.2 (2026-10-01)

Bugs Fixed

• Fixed blob.Client.GetSASURL() generating a SAS that omitted the pinned blob version from the signed string-to-sign when called on a client returned by WithVersionID. The resulting SAS was byte-for-byte identical to an ordinary base-blob (sr=b) SAS and, once corrected to include sr=bv, would still fail to authenticate because the version identifier was never included in the signed payload. Both the resource-type binding and the signed version identifier are now correctly propagated for SignWithSharedKey and SignWithUserDelegation.
• Fixed GetSASURL() on blob.Client, container.Client, and service.Client (and the specialized blob clients blockblob.Client, appendblob.Client, pageblob.Client which delegate to blob.Client) appending a duplicated ? to the resulting URL when called on a client whose URL already contained a query string (e.g. a client returned by WithSnapshot or WithVersionID, or a custom endpoint with pre-existing query parameters), which produced a malformed SAS URL.

Other Changes

• Updated azcore version to 1.23.2

Commits

• 5474626 Prepare azidentity v1.8.2 for release (#24108)
• 4d55b0c [tracing/azotel] Enable span link and propagation support (#24081)
• dc2f507 Increment package version after release of storage/azdatalake (#24105)
• 7efafe4 Increment package version after release of storage/azfile (#24101)
• ae43d8b Increment package version after release of storage/azblob (#24102)
• 03b82ac prep for azdatalake preview (#24103)
• 6ee011a [Storage] Prep for release stg97 - Blob and Files (#24100)
• db0a6cb [Storage] stg97 features (#24080)
• d9d7f1b Support Linux environment (#24095)
• 57bab21 Parameterize test-pipeline version separator (#24094)
• Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azdatalake from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azdatalake's releases.

sdk/storage/azdatalake/v1.7.0

1.7.0 (2026-10-08)

Features Added

• Added structured message (XSM/1.0) CRC64 content validation for azdatalake uploads and downloads via the new TransferValidationTypeComputeStructuredMessageCRC64 transfer validation option.

Bugs Fixed

• Fixed a panic in GetProperties (and DownloadStream) for file and directory clients created via directory.NewFileClient/directory.NewSubdirectoryClient. These clients did not capture the raw HTTP response, so reading the datalake-specific headers dereferenced a nil response. Fixes #25490.
• Fixed Rename on file.Client and directory.Client so source paths containing spaces or non-ASCII characters are percent-encoded in the x-ms-rename-source header instead of being sent decoded, which previously failed with 400 InvalidSourceUri. Fixes #23831 and #24369.
• Fixed GetSASURL() on filesystem.Client, file.Client, directory.Client, and service.Client appending a duplicated ? to the resulting URL when the client's underlying blob URL already contained a query string, which produced a malformed SAS URL.

Other Changes

• Updated azcore version to 1.23.2
• Updated azblob version to 1.8.2

Commits

• 624baba bump azcore version number
• ce7217c Prep for azcore v1.7.0 release (#21149)
• 62a8079 Add support for shallow cloning azcore.Client instances (#21065) (#21098)
• 47286b0 Add flag to enable skipping of dependency checks (#21146)
• ee762d4 Fix populating module name in telemetry policy (#20967) (#20971)
• 0243175 Prep azcore v1.6.1 for release (#20961)
• 9c9d62a Increment package version after release of azcore (#20740)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions