[keyvault] Fix azure-mgmt-keyvault vaults.list() api-version for next-link pagination (#45955)

* Fix azure-mgmt-keyvault vaults.list() api-version for next-link pagination

The legacy vaults.list() API requires api-version=2015-11-01 for both
initial and next-link requests. After SDK regeneration, the next-link
handler was using self._config.api_version (2026-02-01) instead of the
hardcoded 2015-11-01. Fixed in both sync and async operations.

Added mock unit tests to catch this regression in CI.

* Update test_key_vault_management_vaults_operations_test.py

Author: msyyc

sdk/keyvault/azure-mgmt-keyvault/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+## 14.0.1 (2026-03-27)
+
+### Bugs Fixed
+
+  - Fix wrong replacement about api-version for `next_link` of API `VaultsOperations.list`
+
 ## 14.0.0 (2026-03-18)
 
 ### Breaking Changes

sdk/keyvault/azure-mgmt-keyvault/azure/mgmt/keyvault/_version.py

@@ -6,4 +6,4 @@
 # Changes may cause incorrect behavior and will be lost if the code is regenerated.
 # --------------------------------------------------------------------------
 
-VERSION = "14.0.0"
+VERSION = "14.0.1"

sdk/keyvault/azure-mgmt-keyvault/azure/mgmt/keyvault/aio/operations/_operations.py

@@ -1462,7 +1462,7 @@ def prepare_request(next_link=None):
                         for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items()
                     }
                 )
-                _next_request_params["api-version"] = self._config.api_version
+                _next_request_params["api-version"] = api_version
                 _request = HttpRequest(
                     "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params
                 )

sdk/keyvault/azure-mgmt-keyvault/azure/mgmt/keyvault/operations/_operations.py

@@ -2808,7 +2808,7 @@ def prepare_request(next_link=None):
                         for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items()
                     }
                 )
-                _next_request_params["api-version"] = self._config.api_version
+                _next_request_params["api-version"] = api_version
                 _request = HttpRequest(
                     "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params
                 )

sdk/keyvault/azure-mgmt-keyvault/tests/test_unittest.py

@@ -5,7 +5,15 @@
 # Code generated by Microsoft (R) AutoRest Code Generator.
 # Changes may cause incorrect behavior and will be lost if the code is regenerated.
 # --------------------------------------------------------------------------
+import json
+from unittest.mock import AsyncMock, Mock
+
+import pytest
+
+from azure.mgmt.keyvault import KeyVaultManagementClient
+from azure.mgmt.keyvault.aio import KeyVaultManagementClient as AsyncKeyVaultManagementClient
 from azure.mgmt.keyvault.models import Key, KeyAttributes, KeyProperties, PrivateLinkResource
+from azure.core.pipeline.transport import HttpTransport, AsyncHttpTransport
 from azure.core.serialization import attribute_list
 
 
@@ -52,3 +60,149 @@ def test_private_link_resource_initialization():
     )
     assert plr.group_id == "vault"
     assert plr.properties.group_id == "vault"
+
+
+def test_vaults_list_api_version():
+    """Verify vaults.list() uses api-version=2015-11-01 for both initial and next-link requests.
+
+    This API is a legacy paging API where api-version must be "2015-11-01" for all requests.
+    After SDK regeneration, 2 lines need to be customized per:
+    https://github.com/Azure/azure-sdk-for-python/pull/43559/commits/6e09d1d513da26c55c7960442f0f20f5e59e149a
+    """
+    captured_urls = []
+    call_count = 0
+
+    class MockTransport(HttpTransport):
+        def open(self):
+            pass
+
+        def close(self):
+            pass
+
+        def __exit__(self, *args):
+            pass
+
+        def send(self, request, **kwargs):
+            nonlocal call_count
+            call_count += 1
+            captured_urls.append(request.url)
+
+            response = Mock()
+            response.status_code = 200
+            response.headers = {"Content-Type": "application/json"}
+            response.content_type = "application/json"
+
+            if call_count == 1:
+                # First response includes a nextLink WITHOUT api-version,
+                # simulating real service behavior
+                body = {
+                    "value": [{"id": "1", "name": "vault1", "type": "Microsoft.KeyVault/vaults", "location": "eastus"}],
+                    "nextLink": "https://management.azure.com/subscriptions/fake-sub-id/resources"
+                    "?$filter=resourceType+eq+%27Microsoft.KeyVault%2Fvaults%27&$skiptoken=page2",
+                }
+            else:
+                body = {
+                    "value": [{"id": "2", "name": "vault2", "type": "Microsoft.KeyVault/vaults", "location": "eastus"}],
+                }
+
+            response.json.return_value = body
+            response.text.return_value = json.dumps(body)
+            content = json.dumps(body).encode("utf-8")
+            response.read.return_value = content
+            response.content = content
+            response.is_closed = False
+            response.is_stream_consumed = False
+            return response
+
+    mock_credential = Mock()
+    mock_credential.get_token.return_value = Mock(token="fake-token", expires_on=9999999999)
+
+    client = KeyVaultManagementClient(
+        credential=mock_credential,
+        subscription_id="fake-sub-id",
+        base_url="https://management.azure.com",
+        transport=MockTransport(),
+        policies=[],
+    )
+
+    result = list(client.vaults.list())
+    assert len(result) == 2
+    assert call_count == 2
+
+    for url in captured_urls:
+        assert (
+            url.count("api-version=2015-11-01") == 1
+        ), f"api-version=2015-11-01 must appear exactly once in URL: {url}"
+        assert url.count("api-version") == 1, f"api-version query parameter is duplicated in URL: {url}"
+
+
+@pytest.mark.asyncio
+async def test_vaults_list_api_version_async():
+    """Verify async vaults.list() uses api-version=2015-11-01 for both initial and next-link requests."""
+    captured_urls = []
+    call_count = 0
+
+    class MockAsyncTransport(AsyncHttpTransport):
+        async def open(self):
+            pass
+
+        async def close(self):
+            pass
+
+        async def __aexit__(self, *args):
+            pass
+
+        async def send(self, request, **kwargs):
+            nonlocal call_count
+            call_count += 1
+            captured_urls.append(request.url)
+
+            response = Mock()
+            response.status_code = 200
+            response.headers = {"Content-Type": "application/json"}
+            response.content_type = "application/json"
+
+            if call_count == 1:
+                body = {
+                    "value": [{"id": "1", "name": "vault1", "type": "Microsoft.KeyVault/vaults", "location": "eastus"}],
+                    "nextLink": "https://management.azure.com/subscriptions/fake-sub-id/resources"
+                    "?$filter=resourceType+eq+%27Microsoft.KeyVault%2Fvaults%27&$skiptoken=page2",
+                }
+            else:
+                body = {
+                    "value": [{"id": "2", "name": "vault2", "type": "Microsoft.KeyVault/vaults", "location": "eastus"}],
+                }
+
+            response.json.return_value = body
+            response.text.return_value = json.dumps(body)
+            content = json.dumps(body).encode("utf-8")
+            response.read = AsyncMock(return_value=content)
+            response.content = content
+            response.is_closed = False
+            response.is_stream_consumed = False
+            return response
+
+    mock_credential = Mock()
+    mock_credential.get_token = AsyncMock(return_value=Mock(token="fake-token", expires_on=9999999999))
+
+    client = AsyncKeyVaultManagementClient(
+        credential=mock_credential,
+        subscription_id="fake-sub-id",
+        base_url="https://management.azure.com",
+        transport=MockAsyncTransport(),
+        policies=[],
+    )
+
+    result = []
+    async for item in client.vaults.list():
+        result.append(item)
+    await client.close()
+
+    assert len(result) == 2
+    assert call_count == 2
+
+    for url in captured_urls:
+        assert (
+            url.count("api-version=2015-11-01") == 1
+        ), f"api-version=2015-11-01 must appear exactly once in URL: {url}"
+        assert url.count("api-version") == 1, f"api-version query parameter is duplicated in URL: {url}"