Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (#45496)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/23292
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 4/1/2026
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dependabot/uv/dev/azure-identity-1.25.3`
---
### 📝 Commits (1)
- [`f8920ad`](https://github.com/open-webui/open-webui/commit/f8920ad932b81239115df776072a243aecb92f6f) build(deps): bump azure-identity from 1.25.2 to 1.25.3
### 📊 Changes
**3 files changed** (+1660 additions, -1208 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+1 -1)
📝 `pyproject.toml` (+1 -1)
📝 `uv.lock` (+1658 -1206)
</details>
### 📄 Description
Bumps [azure-identity](https://github.com/Azure/azure-sdk-for-python) from 1.25.2 to 1.25.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Azure/azure-sdk-for-python/releases">azure-identity's releases</a>.</em></p>
<blockquote>
<h2>azure-identity_1.25.3</h2>
<h2>1.25.3 (2026-03-12)</h2>
<h3>Bugs Fixed</h3>
<ul>
<li>Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/pull/45496">#45496</a>)</li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Bumped minimum dependency on <code>msal</code> to <code>>=1.35.1</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/a989ea467731265fdf097b622ba254703187746b"><code>a989ea4</code></a> [Identity] Prep patch release</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/79728834e7f38018d372860cf9117bf51d9ed417"><code>7972883</code></a> [Identity] Adjust refresh logic (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45496">#45496</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/04764a9a8a0cb59aab6421b41152246853dfcfe8"><code>04764a9</code></a> add psscript to convert apiview json files to md (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45589">#45589</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/50e01659d7204865dfa07c5ece1019ed9a229b4f"><code>50e0165</code></a> Sync eng/common directory with azure-sdk-tools for PR 14461 (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45646">#45646</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/5333117e0e181404ff4deaa757e9b6ef86dabf8b"><code>5333117</code></a> Add Bo to /sdk/ai/azure-ai-projects owner list (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45664">#45664</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/775d6942e4335422fc69da8e997a6069e356b104"><code>775d694</code></a> Doc and automation updates for .github sync directory changes (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45630">#45630</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/c6e48b5cd71adf5728a5e2f33bc9f62fb221221f"><code>c6e48b5</code></a> [Core] Prepare release (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45656">#45656</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/ae769c4e9379c8d309bffa5ccb76dcfba64e1f71"><code>ae769c4</code></a> Fix custom Memory Stores LRO poller operation (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45662">#45662</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/6074492844d670316eb171756483f1394a6c94c7"><code>6074492</code></a> Add asset id none check in dt (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45618">#45618</a>)</li>
<li><a href="https://github.com/Azure/azure-sdk-for-python/commit/e1a986aeb7a8001bd3a4f336cf096c2b050aa480"><code>e1a986a</code></a> Bump tar from 7.5.10 to 7.5.11 in /eng/common/tsp-client (<a href="https://redirect.github.com/Azure/azure-sdk-for-python/issues/45640">#45640</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.25.2...azure-identity_1.25.3">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/23292
Author: @dependabot[bot]
Created: 4/1/2026
Status: ❌ Closed
Base:
dev← Head:dependabot/uv/dev/azure-identity-1.25.3📝 Commits (1)
f8920adbuild(deps): bump azure-identity from 1.25.2 to 1.25.3📊 Changes
3 files changed (+1660 additions, -1208 deletions)
View changed files
📝
backend/requirements.txt(+1 -1)📝
pyproject.toml(+1 -1)📝
uv.lock(+1658 -1206)📄 Description
Bumps azure-identity from 1.25.2 to 1.25.3.
Release notes
Sourced from azure-identity's releases.
Commits
a989ea4[Identity] Prep patch release7972883[Identity] Adjust refresh logic (#45496)04764a9add psscript to convert apiview json files to md (#45589)50e0165Sync eng/common directory with azure-sdk-tools for PR 14461 (#45646)5333117Add Bo to /sdk/ai/azure-ai-projects owner list (#45664)775d694Doc and automation updates for .github sync directory changes (#45630)c6e48b5[Core] Prepare release (#45656)ae769c4Fix custom Memory Stores LRO poller operation (#45662)6074492Add asset id none check in dt (#45618)e1a986aBump tar from 7.5.10 to 7.5.11 in /eng/common/tsp-client (#45640)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.