Azure/azure-sdk-for-python azure-keyvault-keys_4.12.0

on GitHub

4.12.0 (2026-11-12)

Features Added

• Added support for service API version 2026-04-01 #49751.
• (From 4.12.0b1) Added KeyProperties.key_size read-only property.
• (From 4.12.0b2) Added the ExternalKey model and the new KeyClient.create_external_key method
  for registering a Key Vault key whose material is held in an external HSM #47200.
• (From 4.12.0b2) Added the KeyProperties.external_key read-only property.
• (From 4.12.0b3) Added secure_wrap_key and secure_unwrap_key methods for wrap/unwrap operations on keys #47591.
• (From 4.12.0b3) Added the KeySecureWrapAlgorithm enum, listing the algorithms supported by the secure wrap/unwrap operations.
• (From 4.12.0b3) Added the SecureWrapResult and SecureUnwrapResult model classes wrapping the results of secure_wrap_key and secure_unwrap_key, respectively.

Breaking Changes

These changes do not impact the API of stable versions such as 4.11.3. Only code written against a beta version such as 4.12.0b3 may be affected.

• Removed ApiVersion.V2026_01_01_PREVIEW; use ApiVersion.V2026_04_01 instead.

Bugs Fixed

• (From 4.12.0b3) Fixed a replay bug in challenge authentication policy. The original request is now stored at the request level instead of the client level #47742.

Other Changes

• Key Vault API version 2026-04-01 is now the default.
• (From 4.12.0b1) Python 3.9 is no longer supported. Please use Python version 3.10 or later.