Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.3 to 1.8.2

[dependabot]

Bumps github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.3 to 1.8.2.

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.2

1.8.2 (2026-10-01)

Bugs Fixed

• Fixed blob.Client.GetSASURL() generating a SAS that omitted the pinned blob version from the signed string-to-sign when called on a client returned by WithVersionID. The resulting SAS was byte-for-byte identical to an ordinary base-blob (sr=b) SAS and, once corrected to include sr=bv, would still fail to authenticate because the version identifier was never included in the signed payload. Both the resource-type binding and the signed version identifier are now correctly propagated for SignWithSharedKey and SignWithUserDelegation.
• Fixed GetSASURL() on blob.Client, container.Client, and service.Client (and the specialized blob clients blockblob.Client, appendblob.Client, pageblob.Client which delegate to blob.Client) appending a duplicated ? to the resulting URL when called on a client whose URL already contained a query string (e.g. a client returned by WithSnapshot or WithVersionID, or a custom endpoint with pre-existing query parameters), which produced a malformed SAS URL.

Other Changes

• Updated azcore version to 1.23.2

sdk/storage/azblob/v1.8.1

1.8.1 (2026-09-09)

Known Issues

• The default x-ms-version was updated to 2026-12-06, which is not yet supported by all Azure Storage stamps. Affected storage accounts may return 400 InvalidHeaderValue errors. The rollout is expected to complete across all public regions by early October 2026. In the meantime, either pin to v1.8.0 or inject a per-retry pipeline policy that sets x-ms-version to 2026-10-06.

Breaking Changes

• DownloadBuffer and DownloadFile now use ETag locking to ensure consistency across parallel chunk requests when the blob size is not specified upfront (i.e., Range.Count is zero). If a blob is modified during a multi-chunk download, subsequent requests will fail with ConditionNotMet instead of silently returning data from mixed blob versions.

Bugs Fixed

• Fixed CRLF injection vulnerability in Blob Batch subrequest serialization. Header values containing CR or LF characters are now rejected before serialization, preventing header injection in batch requests.
• Fixed WASM compilation by using heap-allocated buffers on JS targets.
• Fixed Structured Message CRC64 download validation being skipped when the final payload byte exactly fills the caller's read buffer; the trailing segment footer and message trailer CRC64 are now drained and validated in the same Read.
• Fixed transient net.Error/io.ErrUnexpectedEOF failures during a Structured Message download not being retried: the decoder now preserves the error chain with %w and the retry reader classifies retryable errors with errors.Is/errors.As.
• Structured Message download now rejects a response missing the negotiated CRC64 flag instead of silently skipping validation.
• Fixed the Structured Message encoder emitting a valid, complete message when the source returned a non-EOF error exactly on a segment boundary; such errors are now propagated.
• Structured Message decoding now rejects a payload that declares fewer segments and appends unvalidated trailing bytes (SMDecode requires the parsed message to consume the entire input, and the streaming decoder validates the consumed byte count against the declared message length).
• Fixed the Structured Message encoder returning io.EOF when the source ends before the declared content length; a premature EOF is now surfaced as io.ErrUnexpectedEOF so callers do not accept a truncated message.
• Fixed Structured Message decoder discarding errors (including net.Error and io.EOF) when the returned bytes exactly complete a segment; such errors are now propagated so RetryReader can retry transient failures at segment boundaries.
• Premature EOF during Structured Message framing reads (header, segment footer, or message trailer) now wraps io.ErrUnexpectedEOF so RetryReader classifies truncated framing as retryable.

Other Changes

• Optimized DownloadBuffer and DownloadFile to use an initial GET request instead of a HEAD (GetProperties) call for blob size discovery. For small blobs (<=4MB), the entire content is returned in a single request, reducing download latency by ~50%.
• Updated azcore to v1.23.1.

sdk/storage/azblob/v1.8.1-beta.1

1.8.1-beta.1 (2026-07-24)

Features Added

• Added support for Structured Message CRC64 content validation on upload and download operations using TransferValidationTypeComputeStructuredMessageCRC64.
• Added StorageResponseFormat enum (Auto, XML, Arrow) for list blobs operations. Set ResponseFormat on ListBlobsFlatOptions/ListBlobsHierarchyOptions to opt into Apache Arrow format for improved performance. Auto defaults to XML for this release.
• Added AccessTier, AccessTierInferred, AccessTierChangeTime, and SmartAccessTier fields to blob download response.
• Blob put operations now return both ContentMD5 and ContentCRC64 in the response when a Content-MD5 header is provided (service version 2026-10-06+).

Bugs Fixed

• Fixed UploadFile/UploadBuffer responses not including ContentCRC64 when returned by the service.

... (truncated)

Commits

• 5474626 Prepare azidentity v1.8.2 for release (#24108)
• 4d55b0c [tracing/azotel] Enable span link and propagation support (#24081)
• dc2f507 Increment package version after release of storage/azdatalake (#24105)
• 7efafe4 Increment package version after release of storage/azfile (#24101)
• ae43d8b Increment package version after release of storage/azblob (#24102)
• 03b82ac prep for azdatalake preview (#24103)
• 6ee011a [Storage] Prep for release stg97 - Blob and Files (#24100)
• db0a6cb [Storage] stg97 features (#24080)
• d9d7f1b Support Linux environment (#24095)
• 57bab21 Parameterize test-pipeline version separator (#24094)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	[>= 1.3.a, < 1.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.