unstale

pypi / azure-core

azure-core

What changed in azure-core 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-17.

4 breaking2 security5 new APIs and options1 performance4 behavior and defaults4 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.1.0 on npm

azure-core 120 changes

Breaking changes 4

  • Python 3.9 is no longer supported; applications must use Python 3.10 or later.

    1.40.0release notes

  • Query parameters in URL attributes are now sanitized by default; additional parameters require explicit allowance.

    1.40.0release notes

  • The environment variable for the previously undocumented azure_cloud setting changed from AZURE_CLOUD to AZURE_SDK_CLOUD_CONF.

    1.39.0release notes

  • Continuation tokens generated by previous azure-core versions are incompatible with this version.

    1.38.0release notes

Security 2

  • Persists the insecure-domain change flag across retries after a cross-domain redirect.

    1.38.3release notes

  • Azure Core is vulnerable to deserialization of untrusted data

    1.38.0security advisory

New APIs and options 5

  • Accepts VERBOSE, case-insensitively, as an alias for DEBUG.

    1.41.0release notes

  • Policies and SDK clients can allow specified URL query parameters to remain unredacted in span attributes or logs.

    1.40.0release notes

  • Per-operation http_logging_level overrides are now supported in HttpLoggingPolicy.

    1.40.0release notes

  • Adds a serialization helper that gets an attribute's backcompat name using backcompat attribute access.

    1.37.0release notes

  • Added a registry for custom serializers and deserializers for specific types or conditions.

    1.36.0release notes

Performance 1

  • Added caching to tracing implementation detection to prevent potential performance issues from repeated import attempts.

    1.36.0release notes

Behavior and default changes 4

  • Invalid values log a warning and use INFO instead of raising errors.

    1.41.0release notes

  • Invalid values log a warning and use the default value instead of raising errors.

    1.41.0release notes

  • Invalid values log a warning and use the default value instead of raising errors.

    1.41.0release notes

  • Adds jitter to token refresh timing to prevent simultaneous refresh attempts across multiple processes and mitigate the thundering herd problem.

    1.38.3release notes

Fixes and other changes 4

  • Preserves a trailing slash in the base URL when the URL template contains only a query string.

    1.38.3release notes

  • Preserves the leading slash when the URL template starts with /?.

    1.38.2release notes

  • Avoids adding trailing slashes when the URL template contains only query parameters.

    1.38.1release notes

  • Fixed repeated import attempts of cchardet and chardet when charset_normalizer is used.

    1.36.0release notes