[Key Vault] Added API 2026-01-01-preview with key_size property for oct-HSM keys (#47116)

* Autogenerated Keys SDK

* Added key_size property

* Added and recorded tests

---------

Co-authored-by: Nicola Camillucci <ncamillucci@microsoft.com>

Author: ncamillucci

sdk/keyvault/azure-keyvault-keys/CHANGELOG.md

@@ -1,16 +1,18 @@
 # Release History
 
-## 4.11.2 (Unreleased)
+## 4.12.0b1 (2026-05-26)
 
 ### Features Added
 
-### Breaking Changes
-
-### Bugs Fixed
+- Added support for service API version `2026-01-01-preview` [#47116](https://github.com/Azure/azure-sdk-for-python/pull/47116).
+- Added `KeyProperties.key_size` read-only property.
 
 ### Other Changes
 
-## 4.11.1 (2026-05-18)
+- Key Vault API version `2026-01-01-preview` is now the default.
+- Python 3.9 is no longer supported. Please use Python version 3.10 or later.
+
+## 4.11.1 (2026-05-19)
 
 ### Features Added
 

sdk/keyvault/azure-keyvault-keys/_metadata.json

@@ -1,6 +1,6 @@
 {
-  "apiVersion": "2025-07-01",
+  "apiVersion": "2026-01-01-preview",
   "apiVersions": {
-    "KeyVault": "2025-07-01"
+    "KeyVault": "2026-01-01-preview"
   }
 }

sdk/keyvault/azure-keyvault-keys/apiview-properties.json

@@ -4,6 +4,7 @@
         "azure.keyvault.keys._generated.models.BackupKeyResult": "KeyVault.BackupKeyResult",
         "azure.keyvault.keys._generated.models.DeletedKeyBundle": "KeyVault.DeletedKeyBundle",
         "azure.keyvault.keys._generated.models.DeletedKeyItem": "KeyVault.DeletedKeyItem",
+        "azure.keyvault.keys._generated.models.ExternalKey": "KeyVault.ExternalKey",
         "azure.keyvault.keys._generated.models.GetRandomBytesRequest": "KeyVault.GetRandomBytesRequest",
         "azure.keyvault.keys._generated.models.JsonWebKey": "KeyVault.JsonWebKey",
         "azure.keyvault.keys._generated.models.KeyAttestation": "KeyVault.KeyAttestation",
@@ -30,12 +31,16 @@
         "azure.keyvault.keys._generated.models.LifetimeActionsTrigger": "KeyVault.LifetimeActionsTrigger",
         "azure.keyvault.keys._generated.models.LifetimeActionsType": "KeyVault.LifetimeActionsType",
         "azure.keyvault.keys._generated.models.RandomBytes": "KeyVault.RandomBytes",
+        "azure.keyvault.keys._generated.models.SecureKeyOperationResult": "KeyVault.SecureKeyOperationResult",
+        "azure.keyvault.keys._generated.models.SecureKeyUnWrapOperationParameters": "KeyVault.SecureKeyUnWrapOperationParameters",
+        "azure.keyvault.keys._generated.models.SecureKeyWrapOperationParameters": "KeyVault.SecureKeyWrapOperationParameters",
         "azure.keyvault.keys._generated.models.JsonWebKeyType": "KeyVault.JsonWebKeyType",
         "azure.keyvault.keys._generated.models.JsonWebKeyCurveName": "KeyVault.JsonWebKeyCurveName",
         "azure.keyvault.keys._generated.models.DeletionRecoveryLevel": "KeyVault.DeletionRecoveryLevel",
         "azure.keyvault.keys._generated.models.JsonWebKeyOperation": "KeyVault.JsonWebKeyOperation",
         "azure.keyvault.keys._generated.models.JsonWebKeyEncryptionAlgorithm": "KeyVault.JsonWebKeyEncryptionAlgorithm",
         "azure.keyvault.keys._generated.models.JsonWebKeySignatureAlgorithm": "KeyVault.JsonWebKeySignatureAlgorithm",
+        "azure.keyvault.keys._generated.models.JsonWebKeyWrapAlgorithm": "KeyVault.JsonWebKeyWrapAlgorithm",
         "azure.keyvault.keys._generated.models.KeyEncryptionAlgorithm": "KeyVault.KeyEncryptionAlgorithm",
         "azure.keyvault.keys._generated.models.KeyRotationPolicyAction": "KeyVault.KeyRotationPolicyAction",
         "azure.keyvault.keys._generated.KeyVaultClient.create_key": "KeyVault.createKey",
@@ -68,6 +73,10 @@
         "azure.keyvault.keys._generated.aio.KeyVaultClient.verify": "KeyVault.verify",
         "azure.keyvault.keys._generated.KeyVaultClient.wrap_key": "KeyVault.wrapKey",
         "azure.keyvault.keys._generated.aio.KeyVaultClient.wrap_key": "KeyVault.wrapKey",
+        "azure.keyvault.keys._generated.KeyVaultClient.secure_wrap_key": "KeyVault.secureWrapKey",
+        "azure.keyvault.keys._generated.aio.KeyVaultClient.secure_wrap_key": "KeyVault.secureWrapKey",
+        "azure.keyvault.keys._generated.KeyVaultClient.secure_unwrap_key": "KeyVault.secureUnwrapKey",
+        "azure.keyvault.keys._generated.aio.KeyVaultClient.secure_unwrap_key": "KeyVault.secureUnwrapKey",
         "azure.keyvault.keys._generated.KeyVaultClient.unwrap_key": "KeyVault.unwrapKey",
         "azure.keyvault.keys._generated.aio.KeyVaultClient.unwrap_key": "KeyVault.unwrapKey",
         "azure.keyvault.keys._generated.KeyVaultClient.release": "KeyVault.release",
@@ -88,5 +97,6 @@
         "azure.keyvault.keys._generated.aio.KeyVaultClient.get_random_bytes": "KeyVault.getRandomBytes",
         "azure.keyvault.keys._generated.KeyVaultClient.get_key_attestation": "KeyVault.getKeyAttestation",
         "azure.keyvault.keys._generated.aio.KeyVaultClient.get_key_attestation": "KeyVault.getKeyAttestation"
-    }
+    },
+    "CrossLanguageVersion": "8246843b8f9d"
 }

sdk/keyvault/azure-keyvault-keys/assets.json

@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "python",
   "TagPrefix": "python/keyvault/azure-keyvault-keys",
-  "Tag": "python/keyvault/azure-keyvault-keys_229759aadf"
+  "Tag": "python/keyvault/azure-keyvault-keys_e47dc10e22"
 }

sdk/keyvault/azure-keyvault-keys/azure/keyvault/keys/__init__.py

@@ -2,7 +2,13 @@
 # Copyright (c) Microsoft Corporation.
 # Licensed under the MIT License.
 # -------------------------------------
-from ._enums import KeyCurveName, KeyExportEncryptionAlgorithm, KeyOperation, KeyRotationPolicyAction, KeyType
+from ._enums import (
+    KeyCurveName,
+    KeyExportEncryptionAlgorithm,
+    KeyOperation,
+    KeyRotationPolicyAction,
+    KeyType,
+)
 from ._shared.client_base import ApiVersion
 from ._models import (
     DeletedKey,

sdk/keyvault/azure-keyvault-keys/azure/keyvault/keys/_generated/_client.py

@@ -7,8 +7,8 @@
 # --------------------------------------------------------------------------
 
 from copy import deepcopy
+import sys
 from typing import Any, TYPE_CHECKING
-from typing_extensions import Self
 
 from azure.core import PipelineClient
 from azure.core.pipeline import policies
@@ -18,6 +18,11 @@
 from ._operations import _KeyVaultClientOperationsMixin
 from ._utils.serialization import Deserializer, Serializer
 
+if sys.version_info >= (3, 11):
+    from typing import Self
+else:
+    from typing_extensions import Self  # type: ignore
+
 if TYPE_CHECKING:
     from azure.core.credentials import TokenCredential
 
@@ -30,9 +35,10 @@ class KeyVaultClient(_KeyVaultClientOperationsMixin):
     :type vault_base_url: str
     :param credential: Credential used to authenticate requests to the service. Required.
     :type credential: ~azure.core.credentials.TokenCredential
-    :keyword api_version: The API version to use for this operation. Known values are "2025-07-01".
-     Default value is "2025-07-01". Note that overriding this default value may result in
-     unsupported behavior.
+    :keyword api_version: The API version to use for this operation. Known values are
+     "2026-01-01-preview" and None. Default value is None. If not set, the operation's default API
+     version will be used. Note that overriding this default value may result in unsupported
+     behavior.
     :paramtype api_version: str
     """
 

sdk/keyvault/azure-keyvault-keys/azure/keyvault/keys/_generated/_configuration.py

@@ -26,14 +26,15 @@ class KeyVaultClientConfiguration:  # pylint: disable=too-many-instance-attribut
     :type vault_base_url: str
     :param credential: Credential used to authenticate requests to the service. Required.
     :type credential: ~azure.core.credentials.TokenCredential
-    :keyword api_version: The API version to use for this operation. Known values are "2025-07-01".
-     Default value is "2025-07-01". Note that overriding this default value may result in
-     unsupported behavior.
+    :keyword api_version: The API version to use for this operation. Known values are
+     "2026-01-01-preview" and None. Default value is None. If not set, the operation's default API
+     version will be used. Note that overriding this default value may result in unsupported
+     behavior.
     :paramtype api_version: str
     """
 
     def __init__(self, vault_base_url: str, credential: "TokenCredential", **kwargs: Any) -> None:
-        api_version: str = kwargs.pop("api_version", "2025-07-01")
+        api_version: str = kwargs.pop("api_version", "2026-01-01-preview")
 
         if vault_base_url is None:
             raise ValueError("Parameter 'vault_base_url' must not be None.")