fix: add .python-version to rat-excludes and mock DefaultAzureCredential in test

- Add .python-version to dev/.rat-excludes to fix Apache RAT license check
  (config files like .python-version don't carry ASF headers)
- Fix Entra edge-case test: mock DefaultAzureCredential so it doesn't attempt
  real auth during catalog construction; DefaultAzureCredential does not accept
  explicit client_id/client_secret/tenant_id kwargs in all library versions

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

dev/.rat-excludes

@@ -1,6 +1,7 @@
 .github/**
 dev/.rat-excludes
 uv.lock
+.python-version
 .ruff_cache/**
 .pytest_cache/**
 .mypy_cache/**

tests/catalog/test_rest.py

@@ -20,6 +20,7 @@
 import base64
 import json
 import os
+import time
 from collections.abc import Callable
 from typing import Any, cast
 from unittest import mock
@@ -3390,11 +3391,17 @@ def test_rest_catalog_with_flat_properties_edge_cases(
             mock_load_creds.assert_called_with("/fake/path.json", scopes=expected_scopes)
     elif catalog_properties["auth.type"] == "entra":
         pytest.importorskip("azure.identity", reason="azure-identity is required for Entra auth tests")
-        # Just check that the catalog can be constructed and scopes are passed
-        rest_mock.get(
-            f"{TEST_URI}v1/config",
-            json={"defaults": {}, "overrides": {}},
-            status_code=200,
-        )
-        catalog = RestCatalog("rest", **catalog_properties)
-        assert catalog.uri == TEST_URI
+        # Mock DefaultAzureCredential so we don't try to authenticate for real;
+        # DefaultAzureCredential does not accept explicit client_id/secret/tenant kwargs.
+        with mock.patch("azure.identity.DefaultAzureCredential") as mock_cred:
+            mock_token = mock.MagicMock()
+            mock_token.token = "entra_token"
+            mock_token.expires_on = time.time() + 3600
+            mock_cred.return_value.get_token.return_value = mock_token
+            rest_mock.get(
+                f"{TEST_URI}v1/config",
+                json={"defaults": {}, "overrides": {}},
+                status_code=200,
+            )
+            catalog = RestCatalog("rest", **catalog_properties)
+            assert catalog.uri == TEST_URI