azure-cli-core 2.76.0__tar.gz → 2.77.0__tar.gz

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/HISTORY.rst

@@ -3,9 +3,15 @@
 Release History
 ===============
 
+2.77.0
+++++++
+* Resolve CVE-2025-4517 (#31928)
+* Add global policy arguments `--acquire-policy-token` and `--change-reference` to support Change Safety feature (#31741)
+
 2.76.0
 ++++++
 * Resolve CVE-2024-47081 (#31708)
+* Provide actionable error recommendation when a command fails because of Multi-Factor Authentication (MFA) policy violation (#31699)
 
 2.75.0
 ++++++

{azure_cli_core-2.76.0/azure_cli_core.egg-info → azure_cli_core-2.77.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: azure-cli-core
-Version: 2.76.0
+Version: 2.77.0
 Summary: Microsoft Azure Command-Line Tools Core Module
 Home-page: https://github.com/Azure/azure-cli
 Author: Microsoft Corporation
@@ -15,11 +15,13 @@ Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: License :: OSI Approved :: MIT License
 Requires-Python: >=3.9.0
 License-File: LICENSE.txt
 Requires-Dist: argcomplete~=3.5.2
 Requires-Dist: azure-cli-telemetry==1.1.0.*
+Requires-Dist: azure-core~=1.35.0
 Requires-Dist: azure-mgmt-core<2,>=1.2.0
 Requires-Dist: cryptography
 Requires-Dist: distro; sys_platform == "linux"
@@ -28,8 +30,8 @@ Requires-Dist: jmespath
 Requires-Dist: knack~=0.11.0
 Requires-Dist: microsoft-security-utilities-secret-masker~=1.0.0b4
 Requires-Dist: msal-extensions==1.2.0
-Requires-Dist: msal[broker]==1.33.0b1; sys_platform == "win32"
-Requires-Dist: msal==1.33.0b1; sys_platform != "win32"
+Requires-Dist: msal[broker]==1.34.0b1; sys_platform == "win32"
+Requires-Dist: msal==1.34.0b1; sys_platform != "win32"
 Requires-Dist: packaging>=20.9
 Requires-Dist: pkginfo>=1.5.0.1
 Requires-Dist: psutil>=5.9; sys_platform != "cygwin"

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/__init__.py

@@ -4,7 +4,7 @@
 # --------------------------------------------------------------------------------------------
 # pylint: disable=line-too-long
 
-__version__ = "2.76.0"
+__version__ = "2.77.0"
 
 import os
 import sys
@@ -61,7 +61,7 @@ class AzCli(CLI):
         from azure.cli.core.breaking_change import register_upcoming_breaking_change_info
         from azure.cli.core.commands import register_cache_arguments
         from azure.cli.core.commands.arm import (
-            register_ids_argument, register_global_subscription_argument)
+            register_ids_argument, register_global_subscription_argument, register_global_policy_argument)
         from azure.cli.core.cloud import get_active_cloud
         from azure.cli.core.commands.transform import register_global_transforms
         from azure.cli.core._session import ACCOUNT, CONFIG, SESSION, INDEX, VERSIONS
@@ -90,6 +90,7 @@ class AzCli(CLI):
         register_global_transforms(self)
         register_global_subscription_argument(self)
         register_ids_argument(self)  # global subscription must be registered first!
+        register_global_policy_argument(self)
         register_cache_arguments(self)
         register_upcoming_breaking_change_info(self)
 

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/_profile.py

@@ -172,7 +172,7 @@ class Profile:
                 use_device_code = True
 
             if use_device_code:
-                user_identity = identity.login_with_device_code(scopes=scopes)
+                user_identity = identity.login_with_device_code(scopes=scopes, claims_challenge=claims_challenge)
             else:
                 user_identity = identity.login_with_auth_code(scopes=scopes, claims_challenge=claims_challenge)
         else:
@@ -360,17 +360,20 @@ class Profile:
 
         managed_identity_type, managed_identity_id = Profile._parse_managed_identity_account(account)
 
+        non_current_tenant_template = ("For {} account, getting access token for non-current tenants is not "
+                                       "supported. The specified tenant must be the current tenant "
+                                       f"{account[_TENANT_ID]}")
         if in_cloud_console() and account[_USER_ENTITY].get(_CLOUD_SHELL_ID):
             # Cloud Shell
-            if tenant:
-                raise CLIError("Tenant shouldn't be specified for Cloud Shell account")
+            if tenant and tenant != account[_TENANT_ID]:
+                raise CLIError(non_current_tenant_template.format('Cloud Shell'))
             from .auth.msal_credentials import CloudShellCredential
             cred = CloudShellCredential()
 
         elif managed_identity_type:
             # managed identity
-            if tenant:
-                raise CLIError("Tenant shouldn't be specified for managed identity account")
+            if tenant and tenant != account[_TENANT_ID]:
+                raise CLIError(non_current_tenant_template.format('managed identity'))
             cred = ManagedIdentityAuth.credential_factory(managed_identity_type, managed_identity_id)
             if credential_out:
                 credential_out['credential'] = cred

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/aaz/_client.py

@@ -73,6 +73,9 @@ class AAZBaseClient(PipelineClient):
         base_url = self._build_base_url(ctx, **kwargs)
         if not base_url:
             raise CloudEndpointNotSetException()
+        if not kwargs.get('custom_hook_policy'):
+            from azure.cli.core.sdk.policies import get_custom_hook_policy
+            kwargs['custom_hook_policy'] = get_custom_hook_policy(ctx.cli_ctx)
         super().__init__(
             base_url=base_url,
             config=self._build_configuration(ctx, credential, **kwargs),

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/aaz/_command.py

@@ -327,12 +327,15 @@ def register_command_group(
         helps[name] = yaml.safe_dump(cls.AZ_HELP)
 
         if is_preview:
-            cls.AZ_PREVIEW_INFO = partial(PreviewItem, target=f'az {name}', object_type='command group')
+            cls.AZ_PREVIEW_INFO = staticmethod(partial(PreviewItem,
+                                                       target=f'az {name}', object_type='command group'))
         if is_experimental:
-            cls.AZ_EXPERIMENTAL_INFO = partial(ExperimentalItem, target=f'az {name}', object_type='command group')
+            cls.AZ_EXPERIMENTAL_INFO = staticmethod(partial(ExperimentalItem,
+                                                            target=f'az {name}', object_type='command group'))
         if deprecated_info:
-            cls.AZ_DEPRECATE_INFO = partial(Deprecated, target=f'az {name}', object_type='command group',
-                                            **deprecated_info)
+            cls.AZ_DEPRECATE_INFO = staticmethod(partial(Deprecated,
+                                                         target=f'az {name}', object_type='command group',
+                                                         **deprecated_info))
         return cls
 
     return decorator
@@ -369,11 +372,13 @@ def register_command(
         if confirmation:
             cls.AZ_CONFIRMATION = confirmation
         if is_preview:
-            cls.AZ_PREVIEW_INFO = partial(PreviewItem, target=f'az {name}', object_type='command')
+            cls.AZ_PREVIEW_INFO = staticmethod(partial(PreviewItem, target=f'az {name}', object_type='command'))
         if is_experimental:
-            cls.AZ_EXPERIMENTAL_INFO = partial(ExperimentalItem, target=f'az {name}', object_type='command')
+            cls.AZ_EXPERIMENTAL_INFO = staticmethod(partial(ExperimentalItem,
+                                                            target=f'az {name}', object_type='command'))
         if deprecated_info:
-            cls.AZ_DEPRECATE_INFO = partial(Deprecated, target=f'az {name}', object_type='command', **deprecated_info)
+            cls.AZ_DEPRECATE_INFO = staticmethod(partial(Deprecated, target=f'az {name}',
+                                                         object_type='command', **deprecated_info))
         return cls
 
     return decorator

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/auth/identity.py

@@ -171,14 +171,14 @@ class Identity:  # pylint: disable=too-many-instance-attributes
             claims_challenge=claims_challenge)
         return check_result(result)
 
-    def login_with_device_code(self, scopes):
-        flow = self._msal_app.initiate_device_flow(scopes)
+    def login_with_device_code(self, scopes, claims_challenge=None):
+        flow = self._msal_app.initiate_device_flow(scopes, claims_challenge=claims_challenge)
         if "user_code" not in flow:
             raise ValueError(
                 "Fail to create device flow. Err: %s" % json.dumps(flow, indent=4))
         from azure.cli.core.style import print_styled_text, Style
         print_styled_text((Style.WARNING, flow["message"]), file=sys.stderr)
-        result = self._msal_app.acquire_token_by_device_flow(flow)  # By default it will block
+        result = self._msal_app.acquire_token_by_device_flow(flow, claims_challenge=claims_challenge)
         return check_result(result)
 
     def login_with_username_password(self, username, password, scopes):

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/commands/arm.py

@@ -187,6 +187,52 @@ def resource_exists(cli_ctx, subscription, resource_group, name, namespace, type
     return existing
 
 
+def register_global_policy_argument(cli_ctx):
+
+    def add_global_policy_argument(_, **kwargs):
+        command_table = kwargs.get('commands_loader').command_table
+
+        if not command_table:
+            return
+
+        class ChangeReferenceAction(argparse.Action):  # pylint:disable=too-few-public-methods
+
+            def __call__(self, parser, namespace, value, option_string=None):
+                # save change reference to CLI context
+                cmd = getattr(namespace, 'cmd', None) or getattr(namespace, '_cmd', None)
+                cmd.cli_ctx.data['_change_reference'] = value
+
+        class AcquirePolicyTokenAction(argparse.Action):  # pylint:disable=too-few-public-methods
+
+            def __call__(self, parser, namespace, value, option_string=None):
+                # save change reference to CLI context
+                cmd = getattr(namespace, 'cmd', None) or getattr(namespace, '_cmd', None)
+                cmd.cli_ctx.data['_acquire_policy_token'] = True
+
+        for command in command_table.values():
+            if command.name.split()[-1] in ['list', 'show']:
+                continue
+
+            change_reference_kwargs = {
+                'help': 'The related change reference ID for this resource operation',
+                'arg_group': 'Global Policy',
+                'action': ChangeReferenceAction,
+            }
+            acquire_policy_token_kwargs = {
+                'help': 'Acquiring an Azure Policy token automatically for this resource operation',
+                'arg_group': 'Global Policy',
+                'nargs': 0,
+                'action': AcquirePolicyTokenAction,
+            }
+            command.add_argument('_change_reference', '--change-reference', **change_reference_kwargs)
+            command.add_argument('_acquire_policy_token', '--acquire-policy-token', **acquire_policy_token_kwargs)
+
+    policy_token_feature_enabled = cli_ctx.config.getboolean('core', 'enable_policy_token', False)
+    if policy_token_feature_enabled:
+        from knack import events
+        cli_ctx.register_event(events.EVENT_INVOKER_POST_CMD_TBL_CREATE, add_global_policy_argument)
+
+
 # pylint: disable=too-many-statements
 def register_ids_argument(cli_ctx):
 

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/commands/client_factory.py

@@ -6,7 +6,7 @@
 from azure.cli.core import _debug
 from azure.cli.core.auth.util import resource_to_scopes
 from azure.cli.core.extension import EXTENSIONS_MOD_PREFIX
-from azure.cli.core.profiles import ResourceType, CustomResourceType, get_api_version, get_sdk
+from azure.cli.core.profiles import ResourceType, CustomResourceType, get_api_version
 from azure.cli.core.profiles._shared import get_client_class, SDKProfile
 from azure.cli.core.util import get_az_user_agent, is_track2
 from knack.log import get_logger
@@ -166,6 +166,9 @@ def _prepare_client_kwargs_track2(cli_ctx):
     from azure.cli.core.sdk.policies import RecordTelemetryUserAgentPolicy
     client_kwargs['user_agent_policy'] = RecordTelemetryUserAgentPolicy(**client_kwargs)
 
+    from azure.cli.core.sdk.policies import get_custom_hook_policy
+    client_kwargs['custom_hook_policy'] = get_custom_hook_policy(cli_ctx)
+
     # Replace NetworkTraceLoggingPolicy to redact 'Authorization' and 'x-ms-authorization-auxiliary' headers.
     #   NetworkTraceLoggingPolicy: log raw network trace, with all headers.
     from azure.cli.core.sdk.policies import SafeNetworkTraceLoggingPolicy
@@ -275,8 +278,8 @@ def get_data_service_client(cli_ctx, service_type, account_name, account_key, co
         if location_mode:
             client.location_mode = location_mode
     except ValueError as exc:
-        _ERROR_STORAGE_MISSING_INFO = get_sdk(cli_ctx, ResourceType.DATA_STORAGE,
-                                              'common._error#_ERROR_STORAGE_MISSING_INFO')
+        _ERROR_STORAGE_MISSING_INFO = ('You need to provide an account name and either an account_key or sas_token '
+                                       'when creating a storage service.')
         if _ERROR_STORAGE_MISSING_INFO in str(exc):
             raise ValueError(exc)
         raise CLIError('Unable to obtain data client. Check your connection parameters.')

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/profiles/_shared.py

@@ -89,7 +89,6 @@ class ResourceType(Enum):  # pylint: disable=too-few-public-methods
     # can be provided with "ResourceType.XXX" to initialize the client object. This usually happens
     # when related commands start to support Multi-API
 
-    DATA_COSMOS_TABLE = ('azure.multiapi.cosmosdb', None)
     MGMT_ADVISOR = ('azure.mgmt.advisor', None)
     MGMT_MEDIA = ('azure.mgmt.media', None)
     MGMT_BACKUP = ('azure.mgmt.recoveryservicesbackup', None)
@@ -116,7 +115,6 @@ class ResourceType(Enum):  # pylint: disable=too-few-public-methods
     MGMT_SQLVM = ('azure.mgmt.sqlvirtualmachine', None)
     MGMT_MANAGEDSERVICES = ('azure.mgmt.managedservices', None)
     MGMT_NETAPPFILES = ('azure.mgmt.netappfiles', None)
-    DATA_STORAGE = ('azure.multiapi.storage', None)
     DATA_STORAGE_BLOB = ('azure.multiapi.storagev2.blob', None)
     DATA_STORAGE_FILEDATALAKE = ('azure.multiapi.storagev2.filedatalake', None)
     DATA_STORAGE_FILESHARE = ('azure.multiapi.storagev2.fileshare', None)
@@ -187,10 +185,7 @@ AZURE_API_PROFILES = {
         ResourceType.MGMT_RESOURCE_MANAGEDAPPLICATIONS: '2019-07-01',
         ResourceType.MGMT_NETWORK_PRIVATEDNS: None,
         ResourceType.MGMT_KEYVAULT: None,
-        ResourceType.MGMT_AUTHORIZATION: SDKProfile('2022-04-01', {
-            'role_definitions': '2022-05-01-preview',
-            'provider_operations_metadata': '2018-01-01-preview'
-        }),
+        ResourceType.MGMT_AUTHORIZATION: None,
         ResourceType.MGMT_CONTAINERREGISTRY: SDKProfile('2025-03-01-preview', {
             'agent_pools': '2025-03-01-preview',
             'tasks': '2025-03-01-preview',
@@ -209,12 +204,10 @@ AZURE_API_PROFILES = {
         ResourceType.DATA_KEYVAULT_ADMINISTRATION_SETTING: None,
         ResourceType.DATA_KEYVAULT_ADMINISTRATION_BACKUP: '7.5-preview.1',
         ResourceType.DATA_KEYVAULT_ADMINISTRATION_ACCESS_CONTROL: '7.4',
-        ResourceType.DATA_STORAGE: '2018-11-09',
         ResourceType.DATA_STORAGE_BLOB: '2022-11-02',
         ResourceType.DATA_STORAGE_FILEDATALAKE: '2021-08-06',
         ResourceType.DATA_STORAGE_FILESHARE: '2025-05-05',
         ResourceType.DATA_STORAGE_QUEUE: '2018-03-28',
-        ResourceType.DATA_COSMOS_TABLE: '2017-04-17',
         ResourceType.DATA_STORAGE_TABLE: None,
         ResourceType.MGMT_SERVICEBUS: None,
         ResourceType.MGMT_EVENTHUB: None,
@@ -227,7 +220,7 @@ AZURE_API_PROFILES = {
         ResourceType.MGMT_ARO: '2023-11-22',
         ResourceType.MGMT_DATABOXEDGE: '2021-02-01-preview',
         ResourceType.MGMT_CUSTOMLOCATION: '2021-03-15-preview',
-        ResourceType.MGMT_CONTAINERSERVICE: SDKProfile('2025-05-01'),
+        ResourceType.MGMT_CONTAINERSERVICE: None,
         ResourceType.MGMT_APPCONTAINERS: '2022-10-01',
     }
 }
@@ -236,10 +229,6 @@ AZURE_API_PROFILES = {
 # We should avoid using ad hoc API versions,
 # use the version in a profile as much as possible.
 AD_HOC_API_VERSIONS = {
-    ResourceType.MGMT_IOTHUB: {
-        # src/azure-cli/azure/cli/command_modules/iot/custom.py#iot_hub_devicestream_show
-        'iot_hub_resource': '2019-07-01-preview',
-    },
     ResourceType.MGMT_APPSERVICE: {
         # src/azure-cli/azure/cli/command_modules/appservice/_constants.py:68
         'app_service_certificate_orders': '2022-09-01'

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/sdk/policies.py

@@ -103,3 +103,56 @@ class RecordTelemetryUserAgentPolicy(UserAgentPolicy):
         super().on_request(request)
         from azure.cli.core.telemetry import set_user_agent
         set_user_agent(request.http_request.headers[self._USERAGENT])
+
+
+# pylint: disable=line-too-long
+def get_custom_hook_policy(cli_ctx):
+    def _acquire_policy_token_request_hook(request):
+        http_request = request.http_request
+        if getattr(http_request, 'method', '') == 'GET':
+            return
+        ACQUIRE_POLICY_TOKEN_URL = '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/acquirePolicyToken?api-version=2025-03-01'
+        policy_token = None
+
+        from azure.cli.core.azclierror import ServiceError
+        try:
+            import json
+            from azure.cli.core.util import send_raw_request
+            uri = getattr(http_request, 'url')
+            method = getattr(http_request, 'method')
+            content = getattr(http_request, 'content') if hasattr(http_request, 'content') else getattr(http_request, 'body')
+            if content and isinstance(content, str):
+                try:
+                    content = json.loads(content)
+                except json.decoder.JSONDecodeError:
+                    pass
+
+            acquire_policy_token_body = {
+                "operation": {
+                    "uri": uri,
+                    "httpMethod": method,
+                    "content": content
+                },
+                "changeReference": cli_ctx.data.get('_change_reference', None)
+            }
+            acquire_policy_token_response = send_raw_request(cli_ctx, 'POST',
+                                                             ACQUIRE_POLICY_TOKEN_URL,
+                                                             headers=['Content-Type=application/json',
+                                                                      'x-ms-force-sync=true'],
+                                                             body=json.dumps(acquire_policy_token_body))
+            if acquire_policy_token_response.status_code == 200 and acquire_policy_token_response.content:
+                response_content = json.loads(acquire_policy_token_response.content)
+                policy_token = response_content.get('token', None)
+                if not policy_token:
+                    raise ServiceError(f"No token returned. Response:{acquire_policy_token_response.content}")
+        except Exception as ex:
+            raise ServiceError(f"Failed to acquire policy token, exception: {ex}")
+        if policy_token:
+            request.http_request.headers['x-ms-policy-external-evaluations'] = policy_token
+
+    acquire_policy_token = cli_ctx.data.get('_acquire_policy_token', False)
+    change_reference = cli_ctx.data.get('_change_reference', None)
+    if change_reference or acquire_policy_token:
+        from azure.core.pipeline.policies import CustomHookPolicy
+        return CustomHookPolicy(raw_request_hook=_acquire_policy_token_request_hook)
+    return None

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure/cli/core/util.py

@@ -1164,12 +1164,6 @@ ConfiguredDefaultSetter = ScopedConfig
 
 
 def _ssl_context():
-    if sys.version_info < (3, 4) or (in_cloud_console() and platform.system() == 'Windows'):
-        try:
-            return ssl.SSLContext(ssl.PROTOCOL_TLS)  # added in python 2.7.13 and 3.6
-        except AttributeError:
-            return ssl.SSLContext(ssl.PROTOCOL_TLSv1)
-
     return ssl.create_default_context()
 
 

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0/azure_cli_core.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: azure-cli-core
-Version: 2.76.0
+Version: 2.77.0
 Summary: Microsoft Azure Command-Line Tools Core Module
 Home-page: https://github.com/Azure/azure-cli
 Author: Microsoft Corporation
@@ -15,11 +15,13 @@ Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: License :: OSI Approved :: MIT License
 Requires-Python: >=3.9.0
 License-File: LICENSE.txt
 Requires-Dist: argcomplete~=3.5.2
 Requires-Dist: azure-cli-telemetry==1.1.0.*
+Requires-Dist: azure-core~=1.35.0
 Requires-Dist: azure-mgmt-core<2,>=1.2.0
 Requires-Dist: cryptography
 Requires-Dist: distro; sys_platform == "linux"
@@ -28,8 +30,8 @@ Requires-Dist: jmespath
 Requires-Dist: knack~=0.11.0
 Requires-Dist: microsoft-security-utilities-secret-masker~=1.0.0b4
 Requires-Dist: msal-extensions==1.2.0
-Requires-Dist: msal[broker]==1.33.0b1; sys_platform == "win32"
-Requires-Dist: msal==1.33.0b1; sys_platform != "win32"
+Requires-Dist: msal[broker]==1.34.0b1; sys_platform == "win32"
+Requires-Dist: msal==1.34.0b1; sys_platform != "win32"
 Requires-Dist: packaging>=20.9
 Requires-Dist: pkginfo>=1.5.0.1
 Requires-Dist: psutil>=5.9; sys_platform != "cygwin"

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/azure_cli_core.egg-info/requires.txt

@@ -1,5 +1,6 @@
 argcomplete~=3.5.2
 azure-cli-telemetry==1.1.0.*
+azure-core~=1.35.0
 azure-mgmt-core<2,>=1.2.0
 cryptography
 humanfriendly~=10.0
@@ -18,10 +19,10 @@ requests[socks]
 psutil>=5.9
 
 [:sys_platform != "win32"]
-msal==1.33.0b1
+msal==1.34.0b1
 
 [:sys_platform == "linux"]
 distro
 
 [:sys_platform == "win32"]
-msal[broker]==1.33.0b1
+msal[broker]==1.34.0b1

{azure_cli_core-2.76.0 → azure_cli_core-2.77.0}/setup.py

@@ -8,7 +8,7 @@
 from codecs import open
 from setuptools import setup, find_packages
 
-VERSION = "2.76.0"
+VERSION = "2.77.0"
 
 # If we have source, validate that our version numbers match
 # This should prevent uploading releases with mismatched versions.
@@ -39,12 +39,14 @@ CLASSIFIERS = [
     'Programming Language :: Python :: 3.10',
     'Programming Language :: Python :: 3.11',
     'Programming Language :: Python :: 3.12',
+    'Programming Language :: Python :: 3.13',
     'License :: OSI Approved :: MIT License',
 ]
 
 DEPENDENCIES = [
     'argcomplete~=3.5.2',
     'azure-cli-telemetry==1.1.0.*',
+    'azure-core~=1.35.0',
     'azure-mgmt-core>=1.2.0,<2',
     'cryptography',
     # On Linux, the distribution (Ubuntu, Debian, etc) and version are logged in telemetry
@@ -54,8 +56,8 @@ DEPENDENCIES = [
     'knack~=0.11.0',
     'microsoft-security-utilities-secret-masker~=1.0.0b4',
     'msal-extensions==1.2.0',
-    'msal[broker]==1.33.0b1; sys_platform == "win32"',
-    'msal==1.33.0b1; sys_platform != "win32"',
+    'msal[broker]==1.34.0b1; sys_platform == "win32"',
+    'msal==1.34.0b1; sys_platform != "win32"',
     'packaging>=20.9',
     'pkginfo>=1.5.0.1',
     # psutil can't install on cygwin: https://github.com/Azure/azure-cli/issues/9399