Key Vault 2025-07-01 (#52916)

* Upgrade service version in all libraries.

Add 2025-07-01 API version to CHANGELOG files.
Update LatestVersion in ClientOptions and autogenerated files.

* Add support for URIs and IP addresses in SAN properties.

Includes updated autogenerated API files.

* Add the outContentType to GetSecret and DownloadCertificate operations.

Includes updated autogenerated API files.

* Add the PreviousVersion property to SecretProperties.

Includes updated autogenerated API files.

* Update tests.

* Update assets.

* Fix KeyVaultAdministrationClientOptions autogenerated code.

* Record MHSM tests.

Author: melissamserv

sdk/keyvault/Azure.Security.KeyVault.Administration/CHANGELOG.md

@@ -10,6 +10,8 @@
 
 ### Other Changes
 
+- The default service version is now `2025-07-01`.
+
 ## 4.6.0 (2025-06-16)
 
 ### Other Changes

sdk/keyvault/Azure.Security.KeyVault.Administration/api/Azure.Security.KeyVault.Administration.net8.0.cs

@@ -60,7 +60,7 @@ public KeyVaultAccessControlClient(System.Uri vaultUri, Azure.Core.TokenCredenti
     }
     public partial class KeyVaultAdministrationClientOptions : Azure.Core.ClientOptions
     {
-        public KeyVaultAdministrationClientOptions(Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion version = Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion.V7_6) { }
+        public KeyVaultAdministrationClientOptions(Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion version = Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion.V2025_07_01) { }
         public bool DisableChallengeResourceVerification { get { throw null; } set { } }
         public Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion Version { get { throw null; } }
         public enum ServiceVersion
@@ -70,6 +70,7 @@ public enum ServiceVersion
             V7_4 = 3,
             V7_5 = 4,
             V7_6 = 5,
+            V2025_07_01 = 6,
         }
     }
     public static partial class KeyVaultAdministrationModelFactory

sdk/keyvault/Azure.Security.KeyVault.Administration/api/Azure.Security.KeyVault.Administration.netstandard2.0.cs

@@ -60,7 +60,7 @@ public KeyVaultAccessControlClient(System.Uri vaultUri, Azure.Core.TokenCredenti
     }
     public partial class KeyVaultAdministrationClientOptions : Azure.Core.ClientOptions
     {
-        public KeyVaultAdministrationClientOptions(Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion version = Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion.V7_6) { }
+        public KeyVaultAdministrationClientOptions(Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion version = Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion.V2025_07_01) { }
         public bool DisableChallengeResourceVerification { get { throw null; } set { } }
         public Azure.Security.KeyVault.Administration.KeyVaultAdministrationClientOptions.ServiceVersion Version { get { throw null; } }
         public enum ServiceVersion
@@ -70,6 +70,7 @@ public enum ServiceVersion
             V7_4 = 3,
             V7_5 = 4,
             V7_6 = 5,
+            V2025_07_01 = 6,
         }
     }
     public static partial class KeyVaultAdministrationModelFactory

sdk/keyvault/Azure.Security.KeyVault.Administration/assets.json

@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "net",
   "TagPrefix": "net/keyvault/Azure.Security.KeyVault.Administration",
-  "Tag": "net/keyvault/Azure.Security.KeyVault.Administration_3a90d36e6a"
+  "Tag": "net/keyvault/Azure.Security.KeyVault.Administration_01fb71fd89"
 }

sdk/keyvault/Azure.Security.KeyVault.Administration/src/Generated/KeyVaultAdministrationClientOptions.cs

@@ -14,6 +14,8 @@ public partial class KeyVaultAdministrationClientOptions : ClientOptions
     {
         internal const string CallerShouldAuditReason = "https://aka.ms/azsdk/callershouldaudit/security-keyvault-administration";
 
+        private const ServiceVersion LatestVersion = ServiceVersion.V2025_07_01;
+
         /// <summary>
         /// Gets the <see cref="KeyVaultAdministrationClientOptions.ServiceVersion"/> of the service API used when
         /// making requests. For more information, see
@@ -60,9 +62,14 @@ public enum ServiceVersion
             V7_5 = 4,
 
             /// <summary>
-            /// Service version "7.6-preview.1".
+            /// The Key Vault API version 7.6.
             /// </summary>
             V7_6 = 5,
+
+            /// <summary>
+            /// The Key Vault API version 2025-07-01.
+            /// </summary>
+            V2025_07_01 = 6,
 #pragma warning restore CA1707 // Identifiers should not contain underscores
         }
 
@@ -80,6 +87,7 @@ internal string GetVersionString()
                 ServiceVersion.V7_4 => "7.4",
                 ServiceVersion.V7_5 => "7.5",
                 ServiceVersion.V7_6 => "7.6",
+                ServiceVersion.V2025_07_01 => "2025-07-01",
                 _ => throw new ArgumentOutOfRangeException(nameof(Version), Version, null)
             };
         }

sdk/keyvault/Azure.Security.KeyVault.Administration/src/Generated/KeyVaultRestClientOptions.cs

@@ -16,6 +16,7 @@ namespace Azure.Security.KeyVault.Administration.Tests
     /// Base class for recorded Administration tests.
     /// </summary>
     [ClientTestFixture(
+        KeyVaultAdministrationClientOptions.ServiceVersion.V2025_07_01,
         KeyVaultAdministrationClientOptions.ServiceVersion.V7_6,
         KeyVaultAdministrationClientOptions.ServiceVersion.V7_5,
         KeyVaultAdministrationClientOptions.ServiceVersion.V7_4,

sdk/keyvault/Azure.Security.KeyVault.Administration/src/KeyVaultAdministrationClientOptions.cs

@@ -1,5 +1,5 @@
 directory: specification/keyvault/Security.KeyVault.Administration
-commit: 05584a1019e75159b0dc70a6751afaa2c77868e6
+commit: 520e1f6bc250b4ce51a22eaa7583cc0b24564b71
 repo: Azure/azure-rest-api-specs
 emitterPackageJsonPath: eng/azure-typespec-http-client-csharp-emitter-package.json
 

sdk/keyvault/Azure.Security.KeyVault.Administration/tests/AdministrationTestBase.cs

@@ -6,10 +6,15 @@
 
 ### Breaking Changes
 
+- Added `UniformResourceIdentifiers` and `IpAddresses` collection properties in `SubjectAlternativeNames`.
+- Added the `OutContentType` option to `DownloadCertificateOptions` and as a parameter for `CertificateClient.DownloadCertificate` and `CertificateClient.DownloadCertificateAsync` methods to specify the format in which the certificate will be returned.
+
 ### Bugs Fixed
 
 ### Other Changes
 
+- The default service version is now `2025-07-01`.
+
 ## 4.8.0 (2025-06-16)
 
 ### Acknowledgments