1.38.0

What's Changed

• Fix ESRP client ID typo in release pipeline by Ryan Auld (@RyAuld) in #924
• Add OneBranch pipeline templates for CI and Release by Ryan Auld (@RyAuld) in #925
• Fix benchmark cache path and add forceBenchmarks pipeline variable by Ryan Auld (@RyAuld) in #927
• Validate region string format before use in URL construction by Bogdan Gavril (@bgavrilMS) in #921
• Fix Python 3.14 test timeout: replace utcnow() and remove tee pipe by Ryan Auld (@RyAuld) in #934
• Remove pytest-azurepipelines plugin to fix Python 3.14 stall by Ryan Auld (@RyAuld) in #936
• Migrate region discovery to IMDS /compute JSON endpoint by Robbie-Microsoft in #929
• Remove redundant GitHub Actions unit-test job by Gladwin Johnson (@gladjohn) with @Copilot in #942
• Add test coverage for past expires_on in Managed Identity by Gladwin Johnson (@gladjohn) in #940
• Add forwarded_client_claims support to confidential client flows by Robbie-Microsoft in #937
• Deprecate decode_id_token and stop validating ID tokens (#911) by Nilesh Choudhary (@4gust) in #943
• Add managed identity E2E tests + self-hosted CI stages (MSAL Go #641 parity) by Gladwin Johnson (@gladjohn) in #948
• Fix cache key hash collision: length-prefix extended cache key components by Nilesh Choudhary (@4gust) in #946
• Allow Azure Arc managed identity requests to forward user-assigned identity selectors by Gladwin Johnson (@gladjohn) with @Copilot in #944
• Harden regional authority validation by Nilesh Choudhary (@4gust) in #951
• fix(security): pin Service Fabric managed identity TLS by Nilesh Choudhary (@4gust) in #952
• Add WindowsContainerImage definition by Avery-Dunn in #953
• Avdunn/pipeline fix by Avery-Dunn in #954

New Contributors

• Robbie-Microsoft made their first contribution in #929

Full Changelog: 1.37.0...1.38.0