[main] Bump the azure-sdk-dependencies group with 3 updates

[dependabot]

Updated Azure.Core from 1.57.0 to 1.59.0.

Release notes

Sourced from Azure.Core's releases.

1.59.0

1.59.0 (2026-06-09)

Features Added

• Added experimental (AZID0004) mTLS Proof-of-Possession token binding support for managed identity scenarios, including dynamic host capability detection via MSAL and transport certificate rotation APIs on BearerTokenAuthenticationPolicy.

Bugs Fixed

• Fixed BearerTokenAuthenticationPolicy so that the Authorization header is no longer re-attached to a request that has been redirected to a different host. Previously, RedirectPolicy would strip the Authorization header before following a redirect, but the per-retry BearerTokenAuthenticationPolicy would re-add the cached bearer token to the redirected request — including when the redirect target was a different host. The policy now detects when the request URI authority has changed since it last authorized the message, defensively strips any Authorization header, and skips both re-authorization and the WWW-Authenticate (CAE) 401 handler so that no bearer token is sent to — or fetched in response to a challenge from — the redirect target. Same-host redirects, normal (non-redirected) requests, and CAE handling against the original host are unchanged. Callers who explicitly enabled auto-redirect (via HttpPipelineTransportOptions.IsClientRedirectEnabled = true or RedirectPolicy.SetAllowAutoRedirect(message, true)) and depended on the bearer token being re-attached on cross-host redirects should construct a separate client targeting the redirect-target host with a credential bound to that host's resource.

Other Changes

• Updated Microsoft.Identity.Client dependency to 4.84.2.

1.58.0

1.58.0 (2026-06-04)

Features Added

• Adopt System.ClientModel 1.14.0

Bugs Fixed

• Fixed NullReferenceException thrown by Operation.RehydrateAsync / ArmOperation.RehydrateAsync (and the resulting operation's UpdateStatusAsync / Value) when the rehydrated long-running operation has completed with a failure. OperationState.Failure and OperationState<T>.Failure now honor their documented contract and materialize a default RequestFailedException from the raw response when the caller passes null, matching the behavior of the non-rehydration polling path.
• Fixed DiagnosticScope to mark the parent ActivityContext as remote (IsRemote = true) when a traceparent is provided via SetTraceContext or AddLink. The traceparent in these paths is always extracted from an external source (e.g. a messaging broker's application properties), so samplers that distinguish local vs. remote parents — such as the RateLimitedSampler used by the Azure Monitor OpenTelemetry exporter — can now make correct decisions for activities started from incoming messages.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.28.0 to 12.29.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.29.1

12.29.1 (2026-06-23)

Bugs Fixed

• Fixed an issue where the GenerateSasUri and GenerateUserDelegationSasUri convenience methods on blob clients did not honor the RequestHeaders and RequestQueryParameters properties, and where GenerateUserDelegationSasUri did not honor DelegatedUserObjectId, set on the supplied BlobSasBuilder.
• Fixed an issue where structured-message Uploads with checksum validation could fail with a ArgumentOutOfRangeException for empty content

12.29.0

12.29.0 (2026-06-04)

Features Added

• Includes all features from 12.29.0-beta.1

Bugs Fixed

• Added validation for length-prefixed fields when parsing Blob Query responses to prevent excessive memory allocation from malformed or untrusted payloads.

Commits viewable in compare view.

Updated Azure.Storage.Queues from 12.26.0 to 12.27.1.

Release notes

Sourced from Azure.Storage.Queues's releases.

12.27.1

12.27.1 (2026-06-23)

Bugs Fixed

• Fixed an issue where the GenerateSasUri and GenerateUserDelegationSasUri convenience methods on Data Lake clients did not honor the RequestHeaders and RequestQueryParameters properties, and where GenerateUserDelegationSasUri did not honor DelegatedUserObjectId, set on the supplied DataLakeSasBuilder.

12.27.0

12.27.0 (2026-06-04)

Features Added

• Includes all features from 12.27.0-beta.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot received an unexpected response from a private package registry. Because of this, Dependabot cannot update this pull request.

[wiktork]

Dependency update; build checks passing after re-running the flaky ClearlyDefined verification. Approving and squash-merging.