deps: Bump the patch-and-minor group with 9 updates by dependabot[bot] · Pull Request #539 · erikdarlingdata/PerformanceStudio

This is the general availability release of Microsoft.Data.SqlClient 7.1. It closes out the 7.1 preview cycle with application identity reporting for telemetry, the deprecation of TransparentNetworkIPResolution, and a set of connection, transaction, and Named Pipes fixes.

Important — package version alignment: Starting with the 7.0.2 release, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The 7.1.0 GA release continues this alignment; the following packages ship together as 7.1.0:

Microsoft.Data.SqlClient

Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider

Microsoft.Data.SqlClient.Extensions.Azure

Microsoft.Data.SqlClient.Extensions.Abstractions

Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0 when upgrading Microsoft.Data.SqlClient to 7.1.0.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0. The AssemblyVersion is unchanged from 7.0.2, so upgrading from 7.0.2, 7.0.3, or any 7.1 preview to 7.1.0 does not require any new .NET Framework strong-name binding redirects. Applications upgrading from 7.0.0 or 7.0.1 should note that Extensions.Azure, Extensions.Abstractions, and Internal.Logging raised their AssemblyVersion from 1.0.0.0 to 7.0.0.0 in 7.0.2; see those release notes for the one-time .NET Framework impact.

Companion package release notes

Changes Since 7.1.0-preview3

Added

Application Identity in the USERAGENT Payload

What Changed:

Added a RegisteredApplication enum and a matching SqlConnection.RegisteredApplication property that let a library or tool identify itself to SQL Server through version 2 of the TDS USERAGENT feature extension. The payload also carries a new driver-owned 64-bit Driver Properties flag field; bit 0 reports whether connection pool V2 is enabled for the process. Both fields are emitted as unpadded uppercase hexadecimal. (#3201, #4632)

Who Benefits:

Middleware and tooling built on top of the driver — Entity Framework Core, Semantic Kernel, SQL Server Management Studio, SqlPackage, Data API Builder, and similar — can be distinguished in server-side telemetry without the driver accepting arbitrary user-supplied user-agent text. This originated as a request from the Entity Framework Core team.
Service operators gain a more accurate picture of which client stacks are connecting, which helps when diagnosing workload-specific behavior.

Impact:

Purely additive from the application's perspective: a newly created physical connection whose RegisteredApplication is unset reports Unknown (0). On the wire the field itself is new — USERAGENT payload v1 carried no application identifier, while v2 always emits one.
Set the property before calling Open or OpenAsync. Assigning it while the connection is connecting or open throws InvalidOperationException.

using var connection = new SqlConnection(connectionString);
connection.RegisteredApplication = RegisteredApplication.EntityFrameworkCore;
await connection.OpenAsync();

The enum is ushort-backed and marked [CLSCompliant(false)]. Values are partitioned by range: 0x0001–0x7FFF for Microsoft-defined large-scale applications, 0x8000–0xBFFF for small-scale use, and 0xC000–0xFFFF for public/developer use. Applications that are not yet registered can cast an unassigned value from the appropriate range.
... (truncated)

7.1.0-preview3

This update brings the following changes since the 7.1.0-preview2 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview3. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview3 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview3 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

`Microsoft.Data.SqlClient` 7.1.0-preview3

Added

Asynchronous key store provider APIs for Always Encrypted — four virtual methods on SqlColumnEncryptionKeyStoreProvider with CancellationToken support. Purely additive; defaults delegate to the synchronous methods, so existing providers are unaffected (#3672, #3673)
Connection Pool V2 nears parity with the default pool (opt-in via Switch.Microsoft.Data.SqlClient.UseConnectionPoolV2):
- Transaction support (#4487)
- Broken-connection replacement during command execution (#4429)
- Background warmup to Min Pool Size and automatic replenishment (#4452)
- Idle pruning driven by Connection Idle Timeout (#4463)
- Optional ConcurrencyLimiter rate limiting for new physical connections (#4395, #4396)
- Leaked connection reclamation, including the previously always-zero number-of-reclaimed-connections counter (#4529)
- Metrics and tracing parity with the default pool (#4504)

Changed

Single cross-platform build — Windows-only native SNI types now trim cleanly on Linux and macOS. Package structure and contents unchanged (#4207, #4239, #4465, #4474)
Async read-path allocations restored to baseline via PacketData node reuse — ExecuteReaderAsync goes from +120.9% to +0.1% against 6.1.6 (#4536)
SqlBulkCopy skips graph alias mapping when no graph pseudo-columns are present, recovering a regression from #3677 (#4535)
No formatted trace string is allocated when SqlClientEventSource tracing is disabled, recovering a memory regression against 6.1.6. Trace output unchanged (#4528)
net9.0 dependencies moved to 9.0.18; System.Threading.RateLimiting added to packaged metadata. Other targets keep their 8.0.x pins (#4507)
Microsoft.Data.SqlClient.SNI and .SNI.runtime updated to 7.1.0-preview3.26226.3 (#4564)

Fixed

Always Encrypted VSM/HGS attestation now verifies the enclave public key is bound to the signed report, using a fixed-time SHA-256 comparison against EnclaveData (#4532)
SqlConnectionFactory no longer wakes the process every 30 seconds when no pools exist — including with Pooling=False and after ClearAllPools() (#1881, #4479)
Connection pool performance counters affecting the default pool as well as pool V2 — active-soft-connects and number-of-active-connections could go negative after a failed activation, and several gauges drifted upward permanently after a broken connection was replaced (#4504)
OverflowException when sending large decimal values with explicit Precision and Scale, which primarily affected Always Encrypted (#1655, #4443)
TDS stream error when passing a DateOnly value with SqlDbType.Variant (net8.0/net9.0) (#3953, #4294)
DateOnly in table-valued parameter sql_variant columns sent as datetime instead of date, which overflowed for values valid as date (net8.0/net9.0) (#3934, #4439)
ServerCertificate keyword ignored when the platform reported no TLS policy errors. It is now always compared, and an unloadable certificate fails closed with SSLCertificateAuthenticationException instead of silently falling back to host-name validation (#4445)
SqlConnection.AccessTokenCallback not disabling TNIR by default, plus pool-key construction and SspiContextProvider exclusivity with token auth (net462 for the TNIR behavior) (#4520)
Fatal exceptions such as OutOfMemoryException captured into faulted Tasks across several SqlBulkCopy, SqlDataReader, and SqlCommand async entry points (#4437)
Entra ID authentication failing against multi-segment authorities such as the Dataverse / Dynamics 365 TDS endpoint. Ships in Microsoft.Data.SqlClient.Extensions.Azure (#4496, #4521)

Full details: release-notes/7.1/7.1.0-preview3.md

`Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider` 7.1.0-preview3

Added

SqlColumnEncryptionAzureKeyVaultProvider overrides the four asynchronous key store provider methods introduced in #3673, calling the Azure SDK's own async APIs and flowing the supplied CancellationToken (#4540)
Concurrent cache misses for the same key collapse into a single Key Vault request. The gate is only awaited, so no thread blocks, and misses for different keys still proceed in parallel (#4540)
... (truncated)

7.1.0-preview2

This update brings the following changes since the 7.1.0-preview1 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview2. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview2 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview2 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

`Microsoft.Data.SqlClient` 7.1.0-preview2

Added

SqlConnection.GetSchemaAsync overloads with CancellationToken support (#3005)
SQL Graph pseudo-column aliases ($node_id, $edge_id, $from_id, $to_id) accepted in SqlBulkCopy mappings (#3677)
SqlBatchCommand.CommandBehavior and SqlBatch.ExecuteReader(CommandBehavior) are now honored (#4125)
Configurable idle connection timeout via Connection Idle Timeout / SqlConnectionStringBuilder.IdleTimeout (opt-in via Switch.Microsoft.Data.SqlClient.UseLegacyIdleTimeoutBehavior=false) (#4295)

Changed

Connect Timeout now propagates through the pool when Switch.Microsoft.Data.SqlClient.UseOverallConnectTimeoutForPoolWait=true is set (default off; introduces a Microsoft.Bcl.TimeProvider dependency) (#4270)
SQL Server 2025 json type added to the DataTypes collection returned by SqlConnection.GetSchema (#3858)
Internal state-machine hardening via Interlocked.CompareExchange guards (#4267)
Internal cleanup of connection-options inheritance and related pool interfaces (#4237, #4261, #4235, #4415, #4334)
LCID hardcoded mappings to avoid repeated culture lookups (#4212)
Allocation reductions on SqlErrorCollection and null-return paths (#4157, #4099, #4102)
Improved EnclaveDiffieHellmanInfo.Size accuracy (#4346)
SqlVector<float> serialization is now explicitly little-endian for cross-architecture consistency (#3861)
Bundled .NET 10 SDK updated to 10.0.300 (#4287)

Fixed

NullReferenceException in SqlCommand.Cancel() when the connection has already been torn down (#4372)
Always Encrypted CMK signature verification incorrectly reusing cached results after a prior failure (#4339)
Missing TDS token / feature-ack length bounds checks (spoofing server could trigger unbounded allocations) (#4340)
SqlBulkCopy failing in least-privilege environments (#4306)
Always Encrypted CekMdVersion / EkValueCount reads aligned with the TDS specification (#4240)
LoginWithFailover parser-state validation (#4140)
SPN during login now uses the resolved port instead of instance name for Protocol=None / Protocol=Admin (#4180)
Race in SqlConnection.TryOpenInner that could surface as InvalidCastException now returns a deterministic InvalidOperationException (#4179)
Multiple CancellationTokenSource leaks in SqlDataReader, SqlConnection, SqlCommand reconnect paths, and sequential-stream helpers (#4009)
Docs fix for server certificate configuration (#4408)

Removed (breaking)

SQL Server 7.0 / 2000 code paths removed; Type System Version=SQL Server 2000 now throws ArgumentException at open. Applications should switch to Latest (or another supported value). No change to server-version support — 7.0 / 2000 were already rejected during login version negotiation. (#4015)

Full details: release-notes/7.1/7.1.0-preview2.md

`Microsoft.Data.SqlClient.Extensions.Azure` 7.1.0-preview2

Added — WAM (Windows Account Manager) broker support for Entra ID authentication (Windows only) (#4288, #4388)

Covers ActiveDirectoryIntegrated, ActiveDirectoryInteractive, ActiveDirectoryDeviceCodeFlow, and the deprecated ActiveDirectoryPassword modes.
... (truncated)

7.1.0-preview1

This update brings the following changes since the 7.0.0 release:

Added

`SqlBatch` Support on .NET Framework

What Changed:

Added SqlBatch and related batch-command support for the .NET Framework target so the batching API is now available across the full supported platform matrix, including net462. (#3926)

Who Benefits:

Applications that target .NET Framework but also want to use the newer batching APIs no longer need a separate implementation strategy from .NET 8/9 applications.
Libraries that multi-target .NET Framework and modern .NET can use a more consistent data-access surface area.

Impact:

SqlBatch, SqlBatchCommand, and the related execution methods are now usable on .NET Framework builds in addition to .NET.

Cross-Driver Connection-String Synonym Alignment

What Changed:

Added additional accepted connection-string synonyms for better compatibility with other SQL Server drivers and existing connection-string conventions. Newly accepted synonyms include ColumnEncryption, ConnectTimeout, FailoverPartner, PacketSize, and WorkstationId. (#4192)

Who Benefits:

Applications migrating connection strings from other SQL Server drivers or shared infrastructure can reuse more existing keywords without rewriting them first.

Impact:

Existing canonical keywords continue to work unchanged; this preview simply accepts more equivalent aliases during parsing.

Changed

Type Forwards for Authentication Abstractions

What Changed:

Added type forwards from the core Microsoft.Data.SqlClient assembly to public authentication-related types that were moved into Microsoft.Data.SqlClient.Extensions.Abstractions, including SqlAuthenticationMethod, SqlAuthenticationParameters, SqlAuthenticationProvider, SqlAuthenticationProviderException, and SqlAuthenticationToken. (#4067, #4117)

Who Benefits:

Applications and libraries compiled against earlier package layouts retain binary compatibility when those authentication types are resolved from the core assembly name.

Impact:

No application code changes are required; the type forwards preserve existing compiled references.

User Agent Feature Extension Enabled by Default

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient.Extensions.Azure from 7.0.3 to 7.1.0.

Release notes

Sourced from Microsoft.Data.SqlClient.Extensions.Azure's releases.

7.1.0

This is the general availability release of Microsoft.Data.SqlClient 7.1. It closes out the 7.1 preview cycle with application identity reporting for telemetry, the deprecation of TransparentNetworkIPResolution, and a set of connection, transaction, and Named Pipes fixes.

Important — package version alignment: Starting with the 7.0.2 release, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The 7.1.0 GA release continues this alignment; the following packages ship together as 7.1.0:

Microsoft.Data.SqlClient

Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider

Microsoft.Data.SqlClient.Extensions.Azure

Microsoft.Data.SqlClient.Extensions.Abstractions

Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0 when upgrading Microsoft.Data.SqlClient to 7.1.0.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0. The AssemblyVersion is unchanged from 7.0.2, so upgrading from 7.0.2, 7.0.3, or any 7.1 preview to 7.1.0 does not require any new .NET Framework strong-name binding redirects. Applications upgrading from 7.0.0 or 7.0.1 should note that Extensions.Azure, Extensions.Abstractions, and Internal.Logging raised their AssemblyVersion from 1.0.0.0 to 7.0.0.0 in 7.0.2; see those release notes for the one-time .NET Framework impact.

Companion package release notes

Changes Since 7.1.0-preview3

Added

Application Identity in the USERAGENT Payload

What Changed:

Added a RegisteredApplication enum and a matching SqlConnection.RegisteredApplication property that let a library or tool identify itself to SQL Server through version 2 of the TDS USERAGENT feature extension. The payload also carries a new driver-owned 64-bit Driver Properties flag field; bit 0 reports whether connection pool V2 is enabled for the process. Both fields are emitted as unpadded uppercase hexadecimal. (#3201, #4632)

Who Benefits:

Middleware and tooling built on top of the driver — Entity Framework Core, Semantic Kernel, SQL Server Management Studio, SqlPackage, Data API Builder, and similar — can be distinguished in server-side telemetry without the driver accepting arbitrary user-supplied user-agent text. This originated as a request from the Entity Framework Core team.
Service operators gain a more accurate picture of which client stacks are connecting, which helps when diagnosing workload-specific behavior.

Impact:

Purely additive from the application's perspective: a newly created physical connection whose RegisteredApplication is unset reports Unknown (0). On the wire the field itself is new — USERAGENT payload v1 carried no application identifier, while v2 always emits one.
Set the property before calling Open or OpenAsync. Assigning it while the connection is connecting or open throws InvalidOperationException.

using var connection = new SqlConnection(connectionString);
connection.RegisteredApplication = RegisteredApplication.EntityFrameworkCore;
await connection.OpenAsync();

The enum is ushort-backed and marked [CLSCompliant(false)]. Values are partitioned by range: 0x0001–0x7FFF for Microsoft-defined large-scale applications, 0x8000–0xBFFF for small-scale use, and 0xC000–0xFFFF for public/developer use. Applications that are not yet registered can cast an unassigned value from the appropriate range.
... (truncated)

7.1.0-preview3

This update brings the following changes since the 7.1.0-preview2 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview3. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview3 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview3 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

`Microsoft.Data.SqlClient` 7.1.0-preview3

Added

Asynchronous key store provider APIs for Always Encrypted — four virtual methods on SqlColumnEncryptionKeyStoreProvider with CancellationToken support. Purely additive; defaults delegate to the synchronous methods, so existing providers are unaffected (#3672, #3673)
Connection Pool V2 nears parity with the default pool (opt-in via Switch.Microsoft.Data.SqlClient.UseConnectionPoolV2):
- Transaction support (#4487)
- Broken-connection replacement during command execution (#4429)
- Background warmup to Min Pool Size and automatic replenishment (#4452)
- Idle pruning driven by Connection Idle Timeout (#4463)
- Optional ConcurrencyLimiter rate limiting for new physical connections (#4395, #4396)
- Leaked connection reclamation, including the previously always-zero number-of-reclaimed-connections counter (#4529)
- Metrics and tracing parity with the default pool (#4504)

Changed

Single cross-platform build — Windows-only native SNI types now trim cleanly on Linux and macOS. Package structure and contents unchanged (#4207, #4239, #4465, #4474)
Async read-path allocations restored to baseline via PacketData node reuse — ExecuteReaderAsync goes from +120.9% to +0.1% against 6.1.6 (#4536)
SqlBulkCopy skips graph alias mapping when no graph pseudo-columns are present, recovering a regression from #3677 (#4535)
No formatted trace string is allocated when SqlClientEventSource tracing is disabled, recovering a memory regression against 6.1.6. Trace output unchanged (#4528)
net9.0 dependencies moved to 9.0.18; System.Threading.RateLimiting added to packaged metadata. Other targets keep their 8.0.x pins (#4507)
Microsoft.Data.SqlClient.SNI and .SNI.runtime updated to 7.1.0-preview3.26226.3 (#4564)

Fixed

Always Encrypted VSM/HGS attestation now verifies the enclave public key is bound to the signed report, using a fixed-time SHA-256 comparison against EnclaveData (#4532)
SqlConnectionFactory no longer wakes the process every 30 seconds when no pools exist — including with Pooling=False and after ClearAllPools() (#1881, #4479)
Connection pool performance counters affecting the default pool as well as pool V2 — active-soft-connects and number-of-active-connections could go negative after a failed activation, and several gauges drifted upward permanently after a broken connection was replaced (#4504)
OverflowException when sending large decimal values with explicit Precision and Scale, which primarily affected Always Encrypted (#1655, #4443)
TDS stream error when passing a DateOnly value with SqlDbType.Variant (net8.0/net9.0) (#3953, #4294)
DateOnly in table-valued parameter sql_variant columns sent as datetime instead of date, which overflowed for values valid as date (net8.0/net9.0) (#3934, #4439)
ServerCertificate keyword ignored when the platform reported no TLS policy errors. It is now always compared, and an unloadable certificate fails closed with SSLCertificateAuthenticationException instead of silently falling back to host-name validation (#4445)
SqlConnection.AccessTokenCallback not disabling TNIR by default, plus pool-key construction and SspiContextProvider exclusivity with token auth (net462 for the TNIR behavior) (#4520)
Fatal exceptions such as OutOfMemoryException captured into faulted Tasks across several SqlBulkCopy, SqlDataReader, and SqlCommand async entry points (#4437)
Entra ID authentication failing against multi-segment authorities such as the Dataverse / Dynamics 365 TDS endpoint. Ships in Microsoft.Data.SqlClient.Extensions.Azure (#4496, #4521)

Full details: release-notes/7.1/7.1.0-preview3.md

`Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider` 7.1.0-preview3

Added

SqlColumnEncryptionAzureKeyVaultProvider overrides the four asynchronous key store provider methods introduced in #3673, calling the Azure SDK's own async APIs and flowing the supplied CancellationToken (#4540)
Concurrent cache misses for the same key collapse into a single Key Vault request. The gate is only awaited, so no thread blocks, and misses for different keys still proceed in parallel (#4540)
... (truncated)

7.1.0-preview2

This update brings the following changes since the 7.1.0-preview1 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview2. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview2 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview2 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

`Microsoft.Data.SqlClient` 7.1.0-preview2

Added

SqlConnection.GetSchemaAsync overloads with CancellationToken support (#3005)
SQL Graph pseudo-column aliases ($node_id, $edge_id, $from_id, $to_id) accepted in SqlBulkCopy mappings (#3677)
SqlBatchCommand.CommandBehavior and SqlBatch.ExecuteReader(CommandBehavior) are now honored (#4125)
Configurable idle connection timeout via Connection Idle Timeout / SqlConnectionStringBuilder.IdleTimeout (opt-in via Switch.Microsoft.Data.SqlClient.UseLegacyIdleTimeoutBehavior=false) (#4295)

Changed

Connect Timeout now propagates through the pool when Switch.Microsoft.Data.SqlClient.UseOverallConnectTimeoutForPoolWait=true is set (default off; introduces a Microsoft.Bcl.TimeProvider dependency) (#4270)
SQL Server 2025 json type added to the DataTypes collection returned by SqlConnection.GetSchema (#3858)
Internal state-machine hardening via Interlocked.CompareExchange guards (#4267)
Internal cleanup of connection-options inheritance and related pool interfaces (#4237, #4261, #4235, #4415, #4334)
LCID hardcoded mappings to avoid repeated culture lookups (#4212)
Allocation reductions on SqlErrorCollection and null-return paths (#4157, #4099, #4102)
Improved EnclaveDiffieHellmanInfo.Size accuracy (#4346)
SqlVector<float> serialization is now explicitly little-endian for cross-architecture consistency (#3861)
Bundled .NET 10 SDK updated to 10.0.300 (#4287)

Fixed

NullReferenceException in SqlCommand.Cancel() when the connection has already been torn down (#4372)
Always Encrypted CMK signature verification incorrectly reusing cached results after a prior failure (#4339)
Missing TDS token / feature-ack length bounds checks (spoofing server could trigger unbounded allocations) (#4340)
SqlBulkCopy failing in least-privilege environments (#4306)
Always Encrypted CekMdVersion / EkValueCount reads aligned with the TDS specification (#4240)
LoginWithFailover parser-state validation (#4140)
SPN during login now uses the resolved port instead of instance name for Protocol=None / Protocol=Admin (#4180)
Race in SqlConnection.TryOpenInner that could surface as InvalidCastException now returns a deterministic InvalidOperationException (#4179)
Multiple CancellationTokenSource leaks in SqlDataReader, SqlConnection, SqlCommand reconnect paths, and sequential-stream helpers (#4009)
Docs fix for server certificate configuration (#4408)

Removed (breaking)

SQL Server 7.0 / 2000 code paths removed; Type System Version=SQL Server 2000 now throws ArgumentException at open. Applications should switch to Latest (or another supported value). No change to server-version support — 7.0 / 2000 were already rejected during login version negotiation. (#4015)

Full details: release-notes/7.1/7.1.0-preview2.md

`Microsoft.Data.SqlClient.Extensions.Azure` 7.1.0-preview2

Added — WAM (Windows Account Manager) broker support for Entra ID authentication (Windows only) (#4288, #4388)

Covers ActiveDirectoryIntegrated, ActiveDirectoryInteractive, ActiveDirectoryDeviceCodeFlow, and the deprecated ActiveDirectoryPassword modes.
... (truncated)

7.1.0-preview1

This update brings the following changes since the 7.0.0 release:

Added

`SqlBatch` Support on .NET Framework

What Changed:

Added SqlBatch and related batch-command support for the .NET Framework target so the batching API is now available across the full supported platform matrix, including net462. (#3926)

Who Benefits:

Applications that target .NET Framework but also want to use the newer batching APIs no longer need a separate implementation strategy from .NET 8/9 applications.
Libraries that multi-target .NET Framework and modern .NET can use a more consistent data-access surface area.

Impact:

SqlBatch, SqlBatchCommand, and the related execution methods are now usable on .NET Framework builds in addition to .NET.

Cross-Driver Connection-String Synonym Alignment

What Changed:

Added additional accepted connection-string synonyms for better compatibility with other SQL Server drivers and existing connection-string conventions. Newly accepted synonyms include ColumnEncryption, ConnectTimeout, FailoverPartner, PacketSize, and WorkstationId. (#4192)

Who Benefits:

Applications migrating connection strings from other SQL Server drivers or shared infrastructure can reuse more existing keywords without rewriting them first.

Impact:

Existing canonical keywords continue to work unchanged; this preview simply accepts more equivalent aliases during parsing.

Changed

Type Forwards for Authentication Abstractions

What Changed:

Added type forwards from the core Microsoft.Data.SqlClient assembly to public authentication-related types that were moved into Microsoft.Data.SqlClient.Extensions.Abstractions, including SqlAuthenticationMethod, SqlAuthenticationParameters, SqlAuthenticationProvider, SqlAuthenticationProviderException, and SqlAuthenticationToken. (#4067, #4117)

Who Benefits:

Applications and libraries compiled against earlier package layouts retain binary compatibility when those authentication types are resolved from the core assembly name.

Impact:

No application code changes are required; the type forwards preserve existing compiled references.

User Agent Feature Extension Enabled by Default

... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.0 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1 What's Changed

Isolate code coverage files in published output by @azat-msft in [rel/18.10] Isolate code coverage files in published output microsoft/vstest#16476

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.HangDump from 2.4.0 to 2.4.1.

Release notes

Sourced from Microsoft.Testing.Extensions.HangDump's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Avalonia from 11.3.20 to 11.3.22 Bumps Avalonia.Desktop from 11.3.20 to 11.3.22 Bumps Avalonia.Fonts.Inter from 11.3.20 to 11.3.22 Bumps Avalonia.Headless from 11.3.20 to 11.3.22 Bumps Avalonia.Themes.Fluent from 11.3.20 to 11.3.22 Bumps Microsoft.Data.SqlClient from 7.0.3 to 7.1.0 Bumps Microsoft.Data.SqlClient.Extensions.Azure from 7.0.3 to 7.1.0 Bumps Microsoft.NET.Test.Sdk from 18.10.0 to 18.10.1 Bumps Microsoft.Testing.Extensions.HangDump from 2.4.0 to 2.4.1 --- updated-dependencies: - dependency-name: Avalonia dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Desktop dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Fonts.Inter dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Themes.Fluent dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient.Extensions.Azure dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient.Extensions.Azure dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient.Extensions.Azure dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Avalonia dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Desktop dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Fonts.Inter dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Headless dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Avalonia.Themes.Fluent dependency-version: 11.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.Data.SqlClient.Extensions.Azure dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: Microsoft.Testing.Extensions.HangDump dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-21T10:13:37Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

erikdarlingdata · 2026-09-21T10:15:01Z

Review — Dependabot group bump (patch-and-minor)

What it does. Three .csproj files, dependency version bumps only, no code changes.

src/PlanViewer.App/PlanViewer.App.csproj: Avalonia + Avalonia.Desktop + Avalonia.Themes.Fluent + Avalonia.Fonts.Inter 11.3.20 → 11.3.22 (patch).
src/PlanViewer.Core/PlanViewer.Core.csproj: Microsoft.Data.SqlClient and Microsoft.Data.SqlClient.Extensions.Azure 7.0.3 → 7.1.0 (minor).
tests/PlanViewer.Core.Tests/PlanViewer.Core.Tests.csproj: Avalonia.Headless 11.3.20 → 11.3.22, Microsoft.NET.Test.Sdk 18.10.0 → 18.10.1, Microsoft.Testing.Extensions.HangDump 2.4.0 → 2.4.1.

Good.

Base branch is dev. ✓
All Avalonia 11.3.x runtime packages move together to 11.3.22 (App and test project both). ✓
Microsoft.Data.SqlClient and Microsoft.Data.SqlClient.Extensions.Azure move together to 7.1.0, which the 7.1 release notes explicitly require ("Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0 when upgrading Microsoft.Data.SqlClient to 7.1.0"). ✓
No AvaloniaEdit surface changes, no new brushes, no PlanAnalyzer rule/scoring changes, no src/ logic changes — so no App.axaml include, contrast, cross-repo sync, or test-coverage concerns triggered.

Attention.

Microsoft.Data.SqlClient 7.1 has one breaking change carried in from 7.1.0-preview2: Type System Version=SQL Server 2000 now throws ArgumentException at Open. Grepped the repo — nothing sets Type System Version on a connection string, and no code references TransparentNetworkIPResolution (deprecated in 7.1), so this codebase is unaffected. The five SqlConnectionStringBuilder construction sites (Models/ServerConnection.cs:64, Services/EstimatedPlanExecutor.cs:28, Services/ActualPlanExecutor.cs:62, Services/QueryStoreOverviewService.cs:216, Cli/ConnectionHelper.cs:11) only set standard keywords (DataSource, InitialCatalog, credentials, MARS, trust).
Pre-existing (not introduced here, but worth noting while you're touching the file): PlanViewer.App.csproj now has three co-existing Avalonia minor lines — 11.3.22 on the core packages, 11.4.1 on Avalonia.AvaloniaEdit/AvaloniaEdit.TextMate (PlanViewer.App.csproj:13,21), and 11.3.13 on Avalonia.Controls.DataGrid (PlanViewer.App.csproj:14). Dependabot's patch-and-minor group didn't cover those this round. Not a blocker for this PR, but the DataGrid pin is now two patch releases behind the rest of the 11.3 line.
Recommend running the connection/query-store integration flow once locally before merge, since the SqlClient bump is a minor, not a patch.

Not approving / not requesting changes — leaving the call to the maintainer.

Generated by Claude Code

erikdarlingdata merged commit 4640b74 into dev Sep 21, 2026
3 checks passed

erikdarlingdata deleted the dependabot/nuget/src/PlanViewer.App/dev/patch-and-minor-4858b7243e branch September 21, 2026 21:19

Navigation Menu

deps: Bump the patch-and-minor group with 9 updates - #539

deps: Bump the patch-and-minor group with 9 updates#539
erikdarlingdata merged 1 commit into
devfrom
dependabot/nuget/src/PlanViewer.App/dev/patch-and-minor-4858b7243e

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

erikdarlingdata commented Sep 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

7.1.0

Companion package release notes

Changes Since 7.1.0-preview3

Added

Application Identity in the USERAGENT Payload

7.1.0-preview3

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview3

Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.1.0-preview3

7.1.0-preview2

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview2

Microsoft.Data.SqlClient.Extensions.Azure 7.1.0-preview2

7.1.0-preview1

Added

SqlBatch Support on .NET Framework

Cross-Driver Connection-String Synonym Alignment

Changed

Type Forwards for Authentication Abstractions

User Agent Feature Extension Enabled by Default

7.1.0

Companion package release notes

Changes Since 7.1.0-preview3

Added

Application Identity in the USERAGENT Payload

7.1.0-preview3

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview3

Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.1.0-preview3

7.1.0-preview2

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview2

Microsoft.Data.SqlClient.Extensions.Azure 7.1.0-preview2

7.1.0-preview1

Added

SqlBatch Support on .NET Framework

Cross-Driver Connection-String Synonym Alignment

Changed

Type Forwards for Authentication Abstractions

User Agent Feature Extension Enabled by Default

18.10.1

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Labels

Uh oh!

erikdarlingdata commented Sep 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`Microsoft.Data.SqlClient` 7.1.0-preview3

`Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider` 7.1.0-preview3

`Microsoft.Data.SqlClient` 7.1.0-preview2

`Microsoft.Data.SqlClient.Extensions.Azure` 7.1.0-preview2

`SqlBatch` Support on .NET Framework

`Microsoft.Data.SqlClient` 7.1.0-preview3

`Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider` 7.1.0-preview3

`Microsoft.Data.SqlClient` 7.1.0-preview2

`Microsoft.Data.SqlClient.Extensions.Azure` 7.1.0-preview2

`SqlBatch` Support on .NET Framework