chore(deps): bump azure-core from 1.39.0 to 1.40.0 in /libs/azure-ai in the minor-and-patch group

[dependabot]

Bumps the minor-and-patch group in /libs/azure-ai with 1 update: azure-core.

Updates azure-core from 1.39.0 to 1.40.0

Release notes

Sourced from azure-core's releases.

azure-core_1.40.0

1.40.0 (2026-04-30)

Features Added

• Added support for per-operation http_logging_level overrides in HttpLoggingPolicy. #44115
• Introduced the keyword argument additional_allowed_query_params to DistributedTracingPolicy and HttpLoggingPolicy to allow users to specify additional URL query parameters that should not be redacted in span attributes or logs. #46482
  • Users can specify this at the SDK client level by passing additional_allowed_query_params to the client constructor. For example: client = ServiceClient(..., additional_allowed_query_params={"custom_param"}). This will apply to all operations performed by the client.

Other Changes

• URL attributes in HTTP tracing spans will now have query parameters sanitized by default. To add additional query parameters that should not be redacted, use the additional_allowed_query_params argument in your client constructor. #46482
• Python 3.9 is no longer supported. Please use Python version 3.10 or later.

Commits

• c14e6ba [Core] Prepare release (#46612)
• a08ffff [Core] Set kwarg explicitly in method signatures (#46633)
• 2bdb89e [Core] Prepare release (#46631)
• 73df99a [Core] Add + refactor query param sanitization (#46482)
• 3db7fb5 Update core flask server startup (#46263)
• e18edb6 Swap CI to CFS (#45995)
• bd33baf NO_CI [Doc] Update references to wiki pages (#46169)
• f51d146 Make HttpLoggingPolicy log level configurable (#44115)
• 20f80d9 Add doc for the envs supported in azure-core (#45975)
• e8b2c42 [Core] Make _enforce_https a module level function (#45890)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions