{KeyVault} Upgrade azure-keyvault-administration to 4.8.0b2

[MaddyMicrosoft]

Related command*
az keyvault backup start, az keyvault backup restore (Azure Managed HSM)

Description
Fixes [ICM 757505017]
az keyvault backup start --use-managed-identity true against Azure Managed HSM fails
with 409 Conflict: Another backup operation is in progress, even though the backup
was accepted by the service.

Root cause is a client-side replay bug in azure-keyvault-administration's
ChallengeAuthPolicy

The SDK fix (Azure/azure-sdk-for-python#47742)
moves the request copy to per-request pipeline context so it can't leak into subsequent
requests on the same client. It shipped in azure-keyvault-administration 4.8.0b2 on
2026-07-08. This PR picks up that fix.

Affected CLI versions: 2.77.0 – 2.88.0 (2.77–2.87 pinned 4.4.0, 2.88 pinned 4.8.0b1;
both contain the bug).

Testing Guide
Manual verification against Managed HSM with managed identity:

# Prereqs: an MHSM, a storage account, a user-assigned managed identity with
# 'Managed HSM Crypto Officer' role on the MHSM and 'Storage Blob Data Contributor'
# on the storage account.

az keyvault backup start \
  --hsm-name <mhsm-name> \
  --blob-container-name <container> \
  --storage-account-name <storage-account> \
  --use-managed-identity true

[azure-client-tools-bot-prd]

Hi @MaddyMicrosoft,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[a0x1ab]

/azp run

[azure-pipelines]

Azure Pipelines:
Successfully started running 3 pipeline(s).

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

This PR updates Azure CLI’s pinned azure-keyvault-administration dependency to pick up an upstream fix for a client-side replay issue in ChallengeAuthPolicy that can cause false 409 Conflict: Another backup operation is in progress errors during Managed HSM backup operations (notably when using managed identity).

Changes:

• Bump azure-keyvault-administration from 4.8.0b1 to 4.8.0b2 in the CLI’s Python package dependencies.
• Keep the pin consistent across setup.py and the per-OS Python 3 requirements files.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
src/azure-cli/setup.py	Updates the pinned azure-keyvault-administration version used by the main CLI package.
src/azure-cli/requirements.py3.windows.txt	Updates Windows pinned dependency list to 4.8.0b2.
src/azure-cli/requirements.py3.Linux.txt	Updates Linux pinned dependency list to 4.8.0b2.
src/azure-cli/requirements.py3.Darwin.txt	Updates macOS pinned dependency list to 4.8.0b2.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.