chore(deps): bump the azure-identity group with 2 updates

[dependabot]

Bumps the azure-identity group with 2 updates: azure-identity and azure-core.

Updates azure-identity from 1.25.1 to 1.25.3

Release notes

Sourced from azure-identity's releases.

azure-identity_1.25.3

1.25.3 (2026-03-12)

Bugs Fixed

• Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (#45496)

Other Changes

• Bumped minimum dependency on msal to >=1.35.1.

Commits

• a989ea4 [Identity] Prep patch release
• 7972883 [Identity] Adjust refresh logic (#45496)
• 04764a9 add psscript to convert apiview json files to md (#45589)
• 50e0165 Sync eng/common directory with azure-sdk-tools for PR 14461 (#45646)
• 5333117 Add Bo to /sdk/ai/azure-ai-projects owner list (#45664)
• 775d694 Doc and automation updates for .github sync directory changes (#45630)
• c6e48b5 [Core] Prepare release (#45656)
• ae769c4 Fix custom Memory Stores LRO poller operation (#45662)
• 6074492 Add asset id none check in dt (#45618)
• e1a986a Bump tar from 7.5.10 to 7.5.11 in /eng/common/tsp-client (#45640)
• Additional commits viewable in compare view

Updates azure-core from 1.38.0 to 1.39.0

Release notes

Sourced from azure-core's releases.

azure-core_1.39.0

1.39.0 (2026-03-18)

Breaking Changes

• Changed the previously undocumented azure_cloud setting environment variable from AZURE_CLOUD to AZURE_SDK_CLOUD_CONF.

azure-core_1.38.3

1.38.3 (2026-03-12)

Bugs Fixed

• Fixed PipelineClient.format_url to preserve trailing slash in the base URL when the URL template is query-string-only (e.g., ?key=value). #45365
• Fixed SensitiveHeaderCleanupPolicy to persist the insecure_domain_change flag across retries after a cross-domain redirect. #45518

Other Changes

• Added jitter to token refresh timing in BearerTokenCredentialPolicy and AsyncBearerTokenCredentialPolicy to prevent simultaneous token refresh attempts across multiple processes. This helps mitigate the thundering herd problem during token refresh operations. #43720

Commits

• dee80a8 Changed the azure_cloud setting environment variable (#45763)
• a2d1170 Increment package version after release of azure-core (#45671)
• c6e48b5 [Core] Prepare release (#45656)
• 079e76b Port data-plane packages in sdk/core/ to pyproject.toml (#45556)
• 2117dfb [Core] Persist cross domain redirect flag (#45518)
• 2d0a9aa [Core] Update pytest fixture scope (#45563)
• 4c4c869 [Core] Add jitter to token refresh intervals (#43720)
• 41391f1 [azure-core] Fix format_url dropping trailing slash when URL template is qu...
• 9fdb4f1 [Corehttp] Changelog update (#45113)
• f40b764 Increment package version after release of azure-core (#45246)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions