chore: bump the all group across 1 directory with 2 updates

[dependabot]

Bumps the all group with 2 updates in the /examples/msal-python directory: azure-keyvault-secrets and msal.

Updates azure-keyvault-secrets from 4.7.0 to 4.9.0

Release notes

Sourced from azure-keyvault-secrets's releases.

azure-keyvault-secrets_4.9.0

4.9.0 (2024-10-17)

Features Added

• Added support for Continuous Access Evaluation (CAE). enable_cae=True is passed to all get_token requests.

Bugs Fixed

• Typing errors from using Key Vault clients as context managers have been fixed (#34744)

Other Changes

• Updated minimum azure-core version to 1.31.0

Commits

• 30518a7 [Key Vault] Prepare CAE support release (#37945)
• e4573de [Key Vault] Support CAE in challenge auth policy (#37358)
• c759481 Update test configs to use new TME tenant (#37667)
• e923189 [Key Vault] Linting updates for pylint 3.2.5 (#37241)
• 526dca6 [Core] Add new token class and protocols (#36565)
• bda3dfb [Key Vault] Enable type checking in samples (#37073)
• 372fd7d [Key Vault] Federated auth in test pipelines (#36766)
• db31db6 set-pyproject (#36794)
• 4b50745 [Key Vault] Update tests to work with missing SP credentials (#36679)
• 85eb9ee Update various credential mocks (#36620)
• Additional commits viewable in compare view

Updates msal from 1.22.0 to 1.31.1

Release notes

Sourced from msal's releases.

1.31.1

• Bugfix: The Managed Identity detection logic on Arc (#731) had a bug #762, now fixed in PR #763 

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.31.0...1.31.1

1.31.0

Highlight

The Broker-on-Mac feature is also blogged here

What's Changed

• Integration with Broker-on-Mac in AzureAD/microsoft-authentication-library-for-python#596
• Change Managed Identity detection logic on Arc in AzureAD/microsoft-authentication-library-for-python#731
• Managed Identity supports CAE in AzureAD/microsoft-authentication-library-for-python#730
• Support Managed Identity on Azure Container Instance (ACI) with Resource id in AzureAD/microsoft-authentication-library-for-python#741
• Other refactoring in AzureAD/microsoft-authentication-library-for-python#740

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.30.0...1.31.0

1.30.0

What's Changed

• New feature: Support Subject Name/Issuer authentication when using .pfx certificate file. Documentation available in one of the recent purple boxes here. AzureAD/microsoft-authentication-library-for-python#718
• New feature: Automatically use SHA256 and PSS padding when using .pfx certificate on non-ADFS, non-OIDC authorities. AzureAD/microsoft-authentication-library-for-python#722
• New feature: Expose refresh_on (if any) to fresh or cached response, so that caller may choose to proactively call acquire_token_silent() early. AzureAD/microsoft-authentication-library-for-python#723
• Bugfix for token cache search. MSAL 1.27+ customers please upgrade to MSAL 1.30+. AzureAD/microsoft-authentication-library-for-python#717

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.29.0...1.30.0

MSAL Python 1.29.0

Highlight

The Managed Identity feature is also blogged here

What's Changed

• New feature: Supports Managed Identity for Azure VM, App Service (including Azure Functions, Azure Automation), Service Fabric, Azure Machine Learning, Arc, etc.. Comes with a sample, its configuration via ENV VAR, and its API documentation. (#58, #480, #634, #674)
• New feature: Support reading ConfidentialClientApplication's cert from a pfx file (#684, #699)
• New feature: TokenCache class has a new search() method which will return a generator of tokens. The old find() method still exists and returns a list, but MSAL 1.27+ will not call find() anymore. (#693, #644)
• Change: Re-enable the username password flow to go through broker, if available. (#712)

New Contributors

• @​fengga made their first contribution in AzureAD/microsoft-authentication-library-for-python#712

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.28.1...1.29.0

MSAL Python 1.28.1

• Change: pip install msal[broker] will now pick up the latest PyMsalRuntime 0.16.x which contains a bugfix for being run as administrator. This release fixes #707.

MSAL Python 1.28.0

... (truncated)

Commits

• 69a96fe Release MSAL Python 1.31.1
• f0218b3 Merge branch 'mi-arc-detection' into release-1.31.1
• e9b3913 Fix incorrect arc detection and add test cases
• 866e4ce Release MSAL Python 1.31.0
• 28fbf7c Resource id adjustments
• 0a756e9 Error out on invalid ManagedIdentity dict
• 85c93f8 Merge branch 'broker-refactor' into dev
• 4ce6646 ADFS and B2C shall not invoke broker
• fd0335f Explicitly test current broker fallback behaviors
• 828b419 parent_window_handle is also needed on Mac
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.