Microsoft 12035 Published by

Microsoft's Azure SDK September 2026 release sent a wave of libraries from preview to stable across AI search, storage, database auth, and code signing. Azure AI Search gained a broader 12.1.0-beta.2 preview, while its first-ever stable Rust SAS crate and PostgreSQL authentication for Npgsql and JavaScript stood out as maturity milestones. Management libraries dominated the stable count, with Code Transparency adding verifiable SCITT-based signing receipts for supply-chain security.



Azure SDK September 2026 roundup pushes Storage SAS, PostgreSQL auth, and code signing to stable

Microsoft's monthly Azure SDK roundup landed on September 29, and its real story is a wave of preview-to-stable milestones rather than a single flagship feature.

Microsoft's Azure SDK program doesn't do big reveals. It does a monthly cadence, and the September 2026 edition dropped on September 29, written by program manager Justin Bettencourt.

What makes this month worth a look isn't one flagship package. It's how many libraries crossed from preview to stable in a single month. The corners that mattered: AI search, storage access signatures, database authentication, and verifiable code signing.

There's a detail that's easy to gloss over but actually shapes how you read this post. Microsoft counts packages by their real availability in the package registries, not by some internal release-data pipeline. So September deliberately folds in releases that went live earlier this year, or even before, but slipped past earlier roundups. There's something almost dependable about the whole exercise, though. While cloud providers churn, rebrand, and quietly adjust their SKUs, the Azure SDK program shows up on the last Monday of the month about as reliably as anything in the space.

Azure SDK Release (September 2026)

Azure SDK releases every month. This post includes the September 2026's highlights and release notes.

Azure SDK Release (September 2026)

Three things got top billing

Azure AI Search picked up a 12.1.0-beta.2 preview that adds the 2026-08-01-preview service API, landing across .NET, Java, JavaScript, and Python. The preview reaches into two areas that matter for RAG and enterprise knowledge work. First, file knowledge-source management, which gives you tighter control over how document sources get ingested and indexed. Second, knowledge base retrieval, with streamed responses now available in JavaScript so you can consume results incrementally instead of waiting on one big bulk dump.

Keep in mind that if you built against an earlier preview, you should look at the changed listing parameters before upgrading. Those preview-only tweaks don't touch the stable Python API surface, so Python teams can upgrade without the same second-guessing.

Then there's Azure Storage SAS. The Rust crate for building shared access signatures just hit 1.0.0, its first stable release. There's a bug fix that corrects SAS generation for blob and directory paths containing backslashes, by normalizing the signed resource path. For Windows-style paths, that's not a detail to shrug off. Existing preview users also have to move an import: UserDelegationKey now comes from azure_storage_common::models instead of the old re-export. Update that on upgrade.

This is a real maturity marker for Rust as a first-class Azure SDK language.

Then comes PostgreSQL Authentication, an extension that hit stability in two languages. On the .NET side, Microsoft.Azure.PostgreSQL.Auth at 1.0.0 adds Entra ID authentication to the Npgsql driver, letting you use managed identities or token-based auth instead of jamming passwords into your connection strings. The JavaScript sibling, @azure/postgresql-auth, reached 1.0.0 at the same time. Note that the minimum Node.js version just jumped to 22. Otherwise the API is unchanged.

The rest of September's stable count is mostly resource-management and control-plane work. You've got a cluster of Resource Management packages crossing the line in .NET alone: Connected Cache, Edge Zones, Enclave, Resources Bicep, Resources Deployments, and Service Groups. Java took Edge Zones, Enclave, Resources Deployments, and Storage Sync. Python grabbed Edge Zones, Enclave, and Service Groups. JavaScript and Go picked up the same two, Edge Zones and Enclave. Two Rust client crates went stable alongside the SAS crate: Storage Common and Storage SAS.

For the app developer flipping through this, most of those 1.0.0s won't set your weekend on fire. They're control-plane packages, and they're exactly the Microsoft strategy: give infrastructure-as-code and automation toolchains language-parity control APIs right alongside Bicep.