Upgrade Azure CLI Key Vault module to support API version 2026-02-01

[isra-fel]

Summary

Azure CLI Key Vault commands currently use ARM API version 2025-05-01 (via azure-mgmt-keyvault v14.0.1). Customers are required to migrate to API version 2026-02-01 before the February 27, 2027 retirement deadline, but Azure CLI does not yet support it — blocking customer migration.

Problem Statement

There is a gap between Azure Key Vault platform requirements and Azure CLI capabilities. The Key Vault team is retiring API versions prior to 2026-02-01, with a deadline of February 27, 2027. Strategic customers (e.g., Amadeus) are already actively remediating (as of June 2026) but are blocked because Azure CLI's Key Vault control plane operations still target API 2025-05-01.

This was raised as IcM Sev 3 incident 815108260 by Dolev Shor (EngOps, Azure Engineering) and is classified as a retirement blocker.

Proposed Solution

• Update the azure-mgmt-keyvault SDK dependency to a version that targets API 2026-02-01.
• Update Azure CLI Key Vault module to use the new SDK and expose any new capabilities from the 2026-02-01 API.
• Coordinate with the Key Vault product group on SDK availability and release timeline.
• Provide a recommended workaround for customers relying on Azure CLI in the interim.

Additional Context

• IcM Incident: 815108260
• Retirement deadline: February 27, 2027
• Current API version in CLI: 2025-05-01
• Required API version: 2026-02-01
• SDK dependency: azure-mgmt-keyvault v14.0.1 (still uses 2025-05-01)

[yonzhan]

Thank you for opening this issue, we will look into it.

[microsoft-github-policy-service]

🔔 Routing this issue to @act-identity-squad.

[isra-fel]

This is prioritized as P0 for the Identity Squad. The Key Vault API version 2026-02-01 retirement deadline is February 27, 2027 — we need to ship the updated SDK and CLI module with enough lead time to give customers at least 3 months to update their Azure CLI installations before the old API versions are retired.

We'll coordinate with the Key Vault product group on SDK availability and target an updated azure-mgmt-keyvault release.