[KeyVault] Addresses API View comments and prepare release for Keys (#50926)

* Change KeyAttestation properties from `byte[]` to `ReadOnlyMemory<byte>`

* Export API

* Ran the prepare release script

* Remove empty section in CHANGELOG

Author: JonathanCrd

sdk/keyvault/Azure.Security.KeyVault.Keys/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Release History
 
-## 4.8.0-beta.2 (Unreleased)
+## 4.8.0 (2025-06-27)
 
 ### Acknowledgments
 
@@ -15,8 +15,6 @@ Thank you to our developer community members who helped to make the Key Vault cl
 - Added Attestation property for Keys in Managed HSM Key Vaults.
 - Adde new `GetKeyAttestation` operation to get the public part of a stored key along with its attestation blob.
 
-### Breaking Changes
-
 ### Bugs Fixed
 
 - Removed additional forward slash in `RestoreKeyBackup` and `RestoreKeyBackupAsync`.

sdk/keyvault/Azure.Security.KeyVault.Keys/api/Azure.Security.KeyVault.Keys.net8.0.cs

@@ -106,9 +106,9 @@ public JsonWebKey(System.Security.Cryptography.RSA rsaProvider, bool includePriv
     public partial class KeyAttestation
     {
         public KeyAttestation() { }
-        public byte[] CertificatePemFile { get { throw null; } set { } }
-        public byte[] PrivateKeyAttestation { get { throw null; } set { } }
-        public byte[] PublicKeyAttestation { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> CertificatePemFile { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> PrivateKeyAttestation { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> PublicKeyAttestation { get { throw null; } set { } }
         public string Version { get { throw null; } set { } }
     }
     public partial class KeyClient

sdk/keyvault/Azure.Security.KeyVault.Keys/api/Azure.Security.KeyVault.Keys.netstandard2.0.cs

@@ -106,9 +106,9 @@ public JsonWebKey(System.Security.Cryptography.RSA rsaProvider, bool includePriv
     public partial class KeyAttestation
     {
         public KeyAttestation() { }
-        public byte[] CertificatePemFile { get { throw null; } set { } }
-        public byte[] PrivateKeyAttestation { get { throw null; } set { } }
-        public byte[] PublicKeyAttestation { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> CertificatePemFile { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> PrivateKeyAttestation { get { throw null; } set { } }
+        public System.ReadOnlyMemory<byte> PublicKeyAttestation { get { throw null; } set { } }
         public string Version { get { throw null; } set { } }
     }
     public partial class KeyClient

sdk/keyvault/Azure.Security.KeyVault.Keys/src/Azure.Security.KeyVault.Keys.csproj

@@ -3,7 +3,7 @@
   <PropertyGroup>
     <Description>This is the Microsoft Azure Key Vault Keys client library</Description>
     <AssemblyTitle>Microsoft Azure.Security.KeyVault.Keys client library</AssemblyTitle>
-    <Version>4.8.0-beta.2</Version>
+    <Version>4.8.0</Version>
     <!--The ApiCompatVersion is managed automatically and should not generally be modified manually.-->
     <ApiCompatVersion>4.7.0</ApiCompatVersion>
     <PackageTags>Microsoft Azure Key Vault Keys;$(PackageCommonTags)</PackageTags>

sdk/keyvault/Azure.Security.KeyVault.Keys/src/KeyAttestation.cs

@@ -20,18 +20,18 @@ public KeyAttestation()
         /// <summary>
         /// Gets or sets a base64url-encoded string containing certificates in PEM format, used for attestation validation.
         /// </summary>
-        public byte[] CertificatePemFile { get; set; }
+        public ReadOnlyMemory<byte> CertificatePemFile { get; set; }
 
         /// <summary>
         /// Gets or sets the attestation blob bytes encoded as a base64 URL string corresponding to the private key value.
         /// </summary>
-        public byte[] PrivateKeyAttestation { get; set; }
+        public ReadOnlyMemory<byte> PrivateKeyAttestation { get; set; }
 
         /// <summary>
         /// Gets or sets the attestation blob bytes encoded as a base64 URL string.
         /// In the case of an asymmetric key, this corresponds to the public key value.
         /// </summary>
-        public byte[] PublicKeyAttestation { get; set; }
+        public ReadOnlyMemory<byte> PublicKeyAttestation { get; set; }
 
         /// <summary>
         /// Gets or sets the version of the attestation.

sdk/keyvault/Azure.Security.KeyVault.Keys/src/KeyAttributes.cs

@@ -143,17 +143,17 @@ internal void WriteProperties(Utf8JsonWriter json)
             if (Attestation != null)
             {
                 json.WriteStartObject(s_keyAttestationPropertyNameBytes);
-                if (Attestation.CertificatePemFile != null)
+                if (!Attestation.CertificatePemFile.IsEmpty)
                 {
-                    json.WriteString("certificatePemFile", Convert.ToBase64String(Attestation.CertificatePemFile));
+                    json.WriteString("certificatePemFile", Convert.ToBase64String(Attestation.CertificatePemFile.ToArray()));
                 }
-                if (Attestation.PrivateKeyAttestation != null)
+                if (!Attestation.PrivateKeyAttestation.IsEmpty)
                 {
-                    json.WriteString("privateKeyAttestation", Convert.ToBase64String(Attestation.PrivateKeyAttestation));
+                    json.WriteString("privateKeyAttestation", Convert.ToBase64String(Attestation.PrivateKeyAttestation.ToArray()));
                 }
-                if (Attestation.PublicKeyAttestation != null)
+                if (!Attestation.PublicKeyAttestation.IsEmpty)
                 {
-                    json.WriteString("publicKeyAttestation", Convert.ToBase64String(Attestation.PublicKeyAttestation));
+                    json.WriteString("publicKeyAttestation", Convert.ToBase64String(Attestation.PublicKeyAttestation.ToArray()));
                 }
                 if (Attestation.Version != null)
                 {