apache · baha-bouali · Aug 2, 2026 · Aug 4, 2026
diff --git a/docs/spelling_wordlist.txt b/docs/spelling_wordlist.txt
@@ -175,7 +175,9 @@ baseoperatorlink
 BaseView
 BaseXCom
 bashrc
+BatchClient
 batchGet
+BatchNodeState
 BatchServiceClient
 bc
 bcc

diff --git a/generated/known_airflow_exceptions.txt b/generated/known_airflow_exceptions.txt
@@ -351,7 +351,7 @@ providers/microsoft/azure/src/airflow/providers/microsoft/azure/hooks/data_facto
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/hooks/data_lake.py::1
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/hooks/msgraph.py::3
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/hooks/wasb.py::2
-providers/microsoft/azure/src/airflow/providers/microsoft/azure/operators/batch.py::9
+providers/microsoft/azure/src/airflow/providers/microsoft/azure/operators/batch.py::8
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/operators/container_instances.py::10
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/operators/data_factory.py::1
 providers/microsoft/azure/src/airflow/providers/microsoft/azure/operators/msgraph.py::1

@@ -41,6 +41,7 @@ Features
 
 * ``Implement bulk authorization methods in KeycloakAuthManager (#70647)``
 * ``Move keycloak JWT tokens to separate cookies (#70550)``
+* ``Add KeycloakJWTMiddleware to KeycloakAuthManager (#70800)``
 * ``Add IMPORT_ERRORS_ALL permission for import errors of files with no registered Dag (#69790)``
 
 .. Below changes are excluded from the changelog. Move them to

diff --git a/providers/microsoft/azure/README.rst b/providers/microsoft/azure/README.rst
@@ -57,7 +57,7 @@ PIP package                                 Version required
 ``apache-airflow-providers-common-compat``  ``>=1.13.0``
 ``adlfs``                                   ``>=2023.10.0``
 ``aiohttp``                                 ``>=3.14.0``
-``azure-batch``                             ``<15.0.0,>=8.0.0``
+``azure-batch``                             ``>=15.0.0``
 ``azure-ai-projects``                       ``>=2.2.0``
 ``azure-cosmos``                            ``>=4.6.0``
 ``azure-mgmt-cosmosdb``                     ``>=3.0.0``

diff --git a/providers/microsoft/azure/docs/changelog.rst b/providers/microsoft/azure/docs/changelog.rst
@@ -27,6 +27,32 @@
 Changelog
 ---------
 
+.. warning::
+  The ``AzureBatchHook`` and ``AzureBatchOperator`` have been migrated to the ``azure-batch`` 15.x
+  SDK (track 2). This is a breaking change and requires ``azure-batch>=15.0.0``.
+
+  The following changes were introduced:
+
+* Hooks
+  * ``AzureBatchHook.get_conn`` and ``AzureBatchHook.connection`` now return an ``azure.batch.BatchClient``
+    instead of an ``azure.batch.BatchServiceClient``.
+  * Shared key authentication now uses ``azure.core.credentials.AzureNamedKeyCredential`` instead of
+    ``azure.batch.batch_auth.SharedKeyCredentials``.
+  * Managed identity / workload identity authentication now uses
+    ``azure.identity.DefaultAzureCredential`` (via ``get_sync_default_azure_credential``) instead of
+    ``AzureIdentityCredentialAdapter``, since the track 2 client requires a credential implementing
+    ``get_token()``.
+  * ``AzureBatchHook.configure_pool`` no longer accepts the ``os_family`` and ``os_version`` parameters.
+    Cloud service configuration is not supported by the track 2 SDK; use a virtual machine configuration
+    (``vm_publisher``, ``vm_offer``, ``vm_sku``, ``vm_version`` or ``use_latest_image_and_sku``) instead.
+  * The Batch model classes were renamed by the SDK: ``PoolAddParameter`` is now ``BatchPoolCreateOptions``,
+    ``JobAddParameter`` is now ``BatchJobCreateOptions``, ``TaskAddParameter`` is now ``BatchTaskCreateOptions``,
+    and ``CloudTask`` is now ``BatchTask``.
+
+* Operators
+  * ``AzureBatchOperator`` no longer accepts the ``os_family`` parameter. A ``vm_publisher`` must now be
+    provided to configure the pool's virtual machine image.
+
 14.1.0
 ......
 

diff --git a/providers/microsoft/azure/docs/index.rst b/providers/microsoft/azure/docs/index.rst
@@ -111,7 +111,7 @@ PIP package                                 Version required
 ``apache-airflow-providers-common-compat``  ``>=1.13.0``
 ``adlfs``                                   ``>=2023.10.0``
 ``aiohttp``                                 ``>=3.14.0``
-``azure-batch``                             ``<15.0.0,>=8.0.0``
+``azure-batch``                             ``>=15.0.0``
 ``azure-ai-projects``                       ``>=2.2.0``
 ``azure-cosmos``                            ``>=4.6.0``
 ``azure-mgmt-cosmosdb``                     ``>=3.0.0``

diff --git a/providers/microsoft/azure/pyproject.toml b/providers/microsoft/azure/pyproject.toml
@@ -63,9 +63,7 @@ dependencies = [
     "apache-airflow-providers-common-compat>=1.13.0",
     "adlfs>=2023.10.0",
     "aiohttp>=3.14.0",
-    # azure-batch 15.x is a full rewrite of the Azure SDK (track 2) that removes BatchServiceClient, batch_auth,
-    # and the other references in AzureBatchHook. Lifting the upper bound cap needs a full hook rewrite.
-    "azure-batch>=8.0.0,<15.0.0",
+    "azure-batch>=15.0.0",
     # 2.2.0 adds force deletion support for Hosted agents and agent versions.
     "azure-ai-projects>=2.2.0",
     "azure-cosmos>=4.6.0",