Security update for storageURL field of ApplicationPackage

[wiboris]

Description

Mandatory Checklist

• Please choose the target release of Azure PowerShell. (⚠️Target release is a different concept from API readiness. Please click below links for details.)

  • General release
  • Public preview
  • Private preview
  • Engineering build
  • No need for a release

• Check this box to confirm: I have read the Submitting Changes section of CONTRIBUTING.md and reviewed the following information:

• SHOULD update ChangeLog.md file(s) appropriately
  • Update src/{{SERVICE}}/{{SERVICE}}/ChangeLog.md.
    • A snippet outlining the change(s) made in the PR should be written under the ## Upcoming Release header in the past tense.
  • Should not change ChangeLog.md if no new release is required, such as fixing test case only.
• SHOULD regenerate markdown help files if there is cmdlet API change. Instruction
• SHOULD have proper test coverage for changes in pull request.
• SHOULD NOT adjust version of module manually in pull request

[azure-client-tools-bot-prd]

Thanks for your contribution! The pull request validation has started. Please revisit this comment for updated status.

[isra-fel]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 3 pipeline(s).

[Copilot]

Pull request overview

This PR implements a security update to prevent exposing the storageUrl field (which contains SAS tokens) in the PSApplicationPackage object returned to users. The code refactors the application package upload workflow by separating the existence check from the storage URL retrieval, and comments out the StorageUrl assignment in the response converter.

Key changes:

• Refactored GetStorageUrl method to remove the out parameter and split existence checking into a separate AppPackageExists method
• Commented out StorageUrl assignment in ConvertGetApplicationPackageResponseToApplicationPackage to prevent exposing SAS tokens
• Updated test to use -FilePath parameter instead of -ActivateOnly flag

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

File	Description
src/Batch/Batch/Models/BatchClient.ApplicationPackages.cs	Refactored application package upload logic; split existence check and storage URL retrieval; commented out StorageUrl field assignment
src/Batch/Batch.Test/ScenarioTests/BatchApplicationPackageTests.ps1	Changed test parameter from -ActivateOnly to -FilePath to match updated API
src/Batch/Batch.Test/SessionRecords/*.json	Updated test recordings with new timestamps, request IDs, and API version 4.0.0 reflecting the code changes

[isra-fel]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 3 pipeline(s).

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.

[isra-fel]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 3 pipeline(s).