build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.4.0 to 1.5.0

[dependabot]

Bumps github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets's releases.

sdk/data/azcosmos/v1.5.0

1.5.0 (2026-07-13)

Breaking Changes

• Removed the external query engine integration from QueryOptions and deleted the sdk/data/azcosmos/queryengine package for the 1.5.0 GA release. This feature will return in the upcoming 1.6.0 preview release. See PR 27134.
• Renamed ChangeFeedResponse.GetContRanges() to ChangeFeedResponse.GetContinuationRange(). This API was previously only present in a beta release. See PR 27148.
• Renamed ChangeFeedResponse.Documents to ChangeFeedResponse.Items and changed its type from []json.RawMessage to [][]byte. This API was previously only present in a beta release. See PR 27175.
• Renamed ContainerClient.GetFeedRanges and ContainerClient.GetChangeFeed to ContainerClient.ReadFeedRanges and ContainerClient.ReadChangeFeed, respectively. This API was previously only present in a beta release. See PR 27183.
• Renamed the ReadManyOptions type to ReadManyItemsOptions to align with the ReadManyItems method. This API was previously only present in a beta release. See PR 27183.
• Added a *FeedRangesOptions parameter to ContainerClient.ReadFeedRanges. This API was previously only present in a beta release. See PR 27175.
• Renamed ChangeFeedRangeOptions.EpkMinHeader and ChangeFeedRangeOptions.EpkMaxHeader to EPKMinHeader and EPKMaxHeader. These fields were previously only present in a beta release. See PR 27166.
• Diagnostics.StartTimeUTC() now returns a time.Time (zero value when no diagnostics are present) instead of a *time.Time. This API was previously only present in a beta release. See PR 27166.
• Removed the NewFeedRange constructor. Construct a FeedRange directly using a struct initializer instead. This API was previously only present in a beta release. See PR 27166.
• Removed the PriorityLevel.ToPtr method. Use to.Ptr from azcore instead. This API was previously only present in a beta release. See PR 27166.

Other Changes

• The per-account metadata caches (the shared container-properties and partition-key-range caches, see PR 26723) are now held in the process-wide registry via weak references. This lets the garbage collector reclaim a Client's caches once the client is discarded, greatly reducing the memory retained when a Client is dropped without calling Close. See PR 27166.

Commits

• f4ab3aa Remove arm/ClientOptions.AuxiliaryTenants (#20573)
• a554ef0 Remove azcore multitenant auth API (#20572)
• 0a42300 PutBlobFromURL/UploadBlobFromURL API (#20558)
• be3f449 Fix azcore changelog entry (#20569)
• 380d05a Fix regression - base name overrides in CI (#20563)
• 4bdfb89 Modified challenge policy test (#20554)
• 5ab558f Added support for copy source authorization to append block from url (#20557)
• d2534f7 [Azquery][Readme] Edit pass (#20382)
• e9c77a5 Bump credscan to 2.3.12.23 (#20562)
• dd74ea3 Transaction Validation - Blob Client (#20550)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)