deps: Bump AWSSDK.S3 and 20 others

[dependabot]

Updated AWSSDK.S3 from 4.0.101.3 to 4.0.104.3.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Messaging.ServiceBus from 7.20.2 to 7.21.0.

Release notes

Sourced from Azure.Messaging.ServiceBus's releases.

7.21.0

7.21.0 (2026-10-06)

Features Added

• Added SqlFilterCount and CorrelationFilterCount properties to TopicRuntimeProperties, exposing the total number of SQL filters and correlation filters across all of a topic's subscriptions. These are populated by GetTopicRuntimePropertiesAsync and GetTopicsRuntimePropertiesAsync.
• Added ServiceBusAdministrationClientOptions.ServiceVersion.V2024_05 and made it the default service version. The topic filter counts above are served by the 2024-05 service API version, so the administration client now sends api-version=2024-05 by default.
• Added GetMessageSessionsAsync overloads on ServiceBusClient for queues and subscriptions. The no-filter overload returns the IDs of sessions that have active messages or session state, and the sessionStateUpdatedAfter overload returns session IDs whose session state was updated after the specified timestamp. Implements the com.microsoft:get-message-sessions AMQP management operation. (#​58761)
• Added opt-in support for non-exclusive session locking on ServiceBusSessionReceiver, allowing a session to be cooperatively taken over by another receiver. Set ServiceBusSessionReceiverOptions.EnableNonExclusiveSession to accept a session non-exclusively, then read the token from ServiceBusSessionReceiver.SessionLockToken and pass it as ServiceBusSessionReceiverOptions.SessionLockToken = Guid.Parse(token) to take that session over. ServiceBusSessionReceiver.IsSessionExclusive reports the mode the session was established under. Dispositions for a non-exclusive session are routed over the management link so that settlement keeps working across a takeover, which lowers settlement throughput compared to an exclusive session. This applies to ServiceBusSessionReceiver only; ServiceBusSessionProcessor continues to lock sessions exclusively. Accepting a session with EnableNonExclusiveSession set throws NotSupportedException when the endpoint declines it, either by refusing the request outright or by accepting it without assigning a lock token, which is how a caller detects whether the feature is available for a namespace. An endpoint that declines in some other way surfaces the exception its own error maps to. (#​60060)

Bugs Fixed

• Fixed retry classification for web socket failures with nested causes. On modern .NET, a transient network failure during a web socket connection attempt surfaces as a WebSocketException that wraps an HttpRequestException, which wraps the meaningful IOException or SocketException. The retry policy previously inspected only one level of nesting and treated these failures as terminal. The policy now unwraps nested wrapper exceptions to a bounded depth, so transient failures such as a connection reset use the configured retries. Terminal socket failures, such as host-not-found and host-unreachable, are not retried at any supported depth. A host-unreachable failure on an established connection is now terminal. Earlier versions retried it. (#​61868)

• Fixed a bug where canceling ServiceBusReceiver.CloseAsync left the receiver unable to close its own links. The receiver was marked as closed, and its set of locked messages disposed, before the cancellation was observed, so every later call to CloseAsync returned immediately without doing any work and the links stayed open until the owning ServiceBusClient was disposed. The receiver is now left open and closable when a close does not complete, so the operation can be retried. (#​59309)

Other Changes

• The default ServiceBusAdministrationClient service version is now 2024-05 (previously 2021-05). Existing operations are unaffected in behavior; the change is required to surface the new topic filter count properties.

Commits viewable in compare view.

Updated Confluent.Kafka from 2.15.0 to 2.16.0.

Release notes

Sourced from Confluent.Kafka's releases.

2.16.0

New experimental features

• Serializers and deserializers can now be supplied to a producer, dependent
  producer or consumer as a builder, which the client invokes during its own
  construction and then owns, disposing it (and any Schema Registry client it
  created) when the client itself is disposed. See the AvroGeneric example (#​2661)
• Schema Registry serde builders are now available for each supported format,
  each configurable with a Schema Registry client you own or the
  configuration to build one from. See the AvroGeneric,
  JsonSerialization and Protobuf examples (#​2661)
• Producers, consumers and admin clients can now report the id of the Kafka
  cluster they're connected to (#​2661)
• The Kafka cluster id is now propagated to Schema Registry serializers and
  deserializers automatically, and resolved lazily on first use, so subject
  name strategies based on the cluster no longer need it configured by hand.
  See the AvroGenericAssociation example (#​2661)
• The serializer and deserializer builder APIs (Set*SerializerBuilder and
  Set*DeserializerBuilder on the producer and consumer builders, the Schema
  Registry serde builders), IClusterIdAware, ISerdeDisposable, SerdeExtensions
  and the ClusterId client extension are experimental: they are subject to
  change or removal in a future release (#​2661)

Enhancements

• References librdkafka.redist 2.16.0. Refer to the librdkafka v2.16.0 release notes for more information
• Add support for saving Azure key version with DEK (#​2641)
• Pass context when clients make KEK calls to DEK Registry (#​2642)
• Add support for inline validation rules (#​2651)
• Add Variant, Decimal, and Timestamp CEL functions (#​2653)
• Add support for linux-s390x (IBM Z), with CI coverage on s390x (#​2646)
• Add support for AliCloud KMS provider with CSFLE/CSPE (#​2648)
• Schema Registry examples now use the serde builder API (#​2661)

Fixes

• Fix the CSFLE ciphertext version field being written little-endian on big-endian
  platforms, which made encrypted fields unreadable across architectures
• Fix message Timestamp.Type being read as NotAvailable on big-endian platforms
  (e.g. s390x): librdkafka's rd_kafka_timestamp_type_t out-parameter (a 32-bit enum)
  was marshalled as a pointer-sized IntPtr, so the value landed in the high word and
  was truncated to 0 on big-endian

2.15.1

Enhancements

• References librdkafka.redist 2.15.1. Refer to the librdkafka v2.15.1 release notes for more information.

Fixes

• Fix early return in FindMessageByName (#​2644)
• Preserve HTTP status for retriable SR errors (#​2647)
• Security patch in examples and tests using old NJsonSchema versions, test framework upgrade in Confluent.Kafka tests (#​2656)

Commits viewable in compare view.

Updated Confluent.SchemaRegistry from 2.15.0 to 2.16.0.

Release notes

Sourced from Confluent.SchemaRegistry's releases.

2.16.0

New experimental features

• Serializers and deserializers can now be supplied to a producer, dependent
  producer or consumer as a builder, which the client invokes during its own
  construction and then owns, disposing it (and any Schema Registry client it
  created) when the client itself is disposed. See the AvroGeneric example (#​2661)
• Schema Registry serde builders are now available for each supported format,
  each configurable with a Schema Registry client you own or the
  configuration to build one from. See the AvroGeneric,
  JsonSerialization and Protobuf examples (#​2661)
• Producers, consumers and admin clients can now report the id of the Kafka
  cluster they're connected to (#​2661)
• The Kafka cluster id is now propagated to Schema Registry serializers and
  deserializers automatically, and resolved lazily on first use, so subject
  name strategies based on the cluster no longer need it configured by hand.
  See the AvroGenericAssociation example (#​2661)
• The serializer and deserializer builder APIs (Set*SerializerBuilder and
  Set*DeserializerBuilder on the producer and consumer builders, the Schema
  Registry serde builders), IClusterIdAware, ISerdeDisposable, SerdeExtensions
  and the ClusterId client extension are experimental: they are subject to
  change or removal in a future release (#​2661)

Enhancements

• References librdkafka.redist 2.16.0. Refer to the librdkafka v2.16.0 release notes for more information
• Add support for saving Azure key version with DEK (#​2641)
• Pass context when clients make KEK calls to DEK Registry (#​2642)
• Add support for inline validation rules (#​2651)
• Add Variant, Decimal, and Timestamp CEL functions (#​2653)
• Add support for linux-s390x (IBM Z), with CI coverage on s390x (#​2646)
• Add support for AliCloud KMS provider with CSFLE/CSPE (#​2648)
• Schema Registry examples now use the serde builder API (#​2661)

Fixes

• Fix the CSFLE ciphertext version field being written little-endian on big-endian
  platforms, which made encrypted fields unreadable across architectures
• Fix message Timestamp.Type being read as NotAvailable on big-endian platforms
  (e.g. s390x): librdkafka's rd_kafka_timestamp_type_t out-parameter (a 32-bit enum)
  was marshalled as a pointer-sized IntPtr, so the value landed in the high word and
  was truncated to 0 on big-endian

2.15.1

Enhancements

• References librdkafka.redist 2.15.1. Refer to the librdkafka v2.15.1 release notes for more information.

Fixes

• Fix early return in FindMessageByName (#​2644)
• Preserve HTTP status for retriable SR errors (#​2647)
• Security patch in examples and tests using old NJsonSchema versions, test framework upgrade in Confluent.Kafka tests (#​2656)

Commits viewable in compare view.

Updated Confluent.SchemaRegistry.Serdes.Avro from 2.15.0 to 2.16.0.

Release notes

Sourced from Confluent.SchemaRegistry.Serdes.Avro's releases.

2.16.0

New experimental features

• Serializers and deserializers can now be supplied to a producer, dependent
  producer or consumer as a builder, which the client invokes during its own
  construction and then owns, disposing it (and any Schema Registry client it
  created) when the client itself is disposed. See the AvroGeneric example (#​2661)
• Schema Registry serde builders are now available for each supported format,
  each configurable with a Schema Registry client you own or the
  configuration to build one from. See the AvroGeneric,
  JsonSerialization and Protobuf examples (#​2661)
• Producers, consumers and admin clients can now report the id of the Kafka
  cluster they're connected to (#​2661)
• The Kafka cluster id is now propagated to Schema Registry serializers and
  deserializers automatically, and resolved lazily on first use, so subject
  name strategies based on the cluster no longer need it configured by hand.
  See the AvroGenericAssociation example (#​2661)
• The serializer and deserializer builder APIs (Set*SerializerBuilder and
  Set*DeserializerBuilder on the producer and consumer builders, the Schema
  Registry serde builders), IClusterIdAware, ISerdeDisposable, SerdeExtensions
  and the ClusterId client extension are experimental: they are subject to
  change or removal in a future release (#​2661)

Enhancements

• References librdkafka.redist 2.16.0. Refer to the librdkafka v2.16.0 release notes for more information
• Add support for saving Azure key version with DEK (#​2641)
• Pass context when clients make KEK calls to DEK Registry (#​2642)
• Add support for inline validation rules (#​2651)
• Add Variant, Decimal, and Timestamp CEL functions (#​2653)
• Add support for linux-s390x (IBM Z), with CI coverage on s390x (#​2646)
• Add support for AliCloud KMS provider with CSFLE/CSPE (#​2648)
• Schema Registry examples now use the serde builder API (#​2661)

Fixes

• Fix the CSFLE ciphertext version field being written little-endian on big-endian
  platforms, which made encrypted fields unreadable across architectures
• Fix message Timestamp.Type being read as NotAvailable on big-endian platforms
  (e.g. s390x): librdkafka's rd_kafka_timestamp_type_t out-parameter (a 32-bit enum)
  was marshalled as a pointer-sized IntPtr, so the value landed in the high word and
  was truncated to 0 on big-endian

2.15.1

Enhancements

• References librdkafka.redist 2.15.1. Refer to the librdkafka v2.15.1 release notes for more information.

Fixes

• Fix early return in FindMessageByName (#​2644)
• Preserve HTTP status for retriable SR errors (#​2647)
• Security patch in examples and tests using old NJsonSchema versions, test framework upgrade in Confluent.Kafka tests (#​2656)

Commits viewable in compare view.

Updated Confluent.SchemaRegistry.Serdes.Json from 2.15.0 to 2.16.0.

Release notes

Sourced from Confluent.SchemaRegistry.Serdes.Json's releases.

2.16.0

New experimental features

• Serializers and deserializers can now be supplied to a producer, dependent
  producer or consumer as a builder, which the client invokes during its own
  construction and then owns, disposing it (and any Schema Registry client it
  created) when the client itself is disposed. See the AvroGeneric example (#​2661)
• Schema Registry serde builders are now available for each supported format,
  each configurable with a Schema Registry client you own or the
  configuration to build one from. See the AvroGeneric,
  JsonSerialization and Protobuf examples (#​2661)
• Producers, consumers and admin clients can now report the id of the Kafka
  cluster they're connected to (#​2661)
• The Kafka cluster id is now propagated to Schema Registry serializers and
  deserializers automatically, and resolved lazily on first use, so subject
  name strategies based on the cluster no longer need it configured by hand.
  See the AvroGenericAssociation example (#​2661)
• The serializer and deserializer builder APIs (Set*SerializerBuilder and
  Set*DeserializerBuilder on the producer and consumer builders, the Schema
  Registry serde builders), IClusterIdAware, ISerdeDisposable, SerdeExtensions
  and the ClusterId client extension are experimental: they are subject to
  change or removal in a future release (#​2661)

Enhancements

• References librdkafka.redist 2.16.0. Refer to the librdkafka v2.16.0 release notes for more information
• Add support for saving Azure key version with DEK (#​2641)
• Pass context when clients make KEK calls to DEK Registry (#​2642)
• Add support for inline validation rules (#​2651)
• Add Variant, Decimal, and Timestamp CEL functions (#​2653)
• Add support for linux-s390x (IBM Z), with CI coverage on s390x (#​2646)
• Add support for AliCloud KMS provider with CSFLE/CSPE (#​2648)
• Schema Registry examples now use the serde builder API (#​2661)

Fixes

• Fix the CSFLE ciphertext version field being written little-endian on big-endian
  platforms, which made encrypted fields unreadable across architectures
• Fix message Timestamp.Type being read as NotAvailable on big-endian platforms
  (e.g. s390x): librdkafka's rd_kafka_timestamp_type_t out-parameter (a 32-bit enum)
  was marshalled as a pointer-sized IntPtr, so the value landed in the high word and
  was truncated to 0 on big-endian

2.15.1

Enhancements

• References librdkafka.redist 2.15.1. Refer to the librdkafka v2.15.1 release notes for more information.

Fixes

• Fix early return in FindMessageByName (#​2644)
• Preserve HTTP status for retriable SR errors (#​2647)
• Security patch in examples and tests using old NJsonSchema versions, test framework upgrade in Confluent.Kafka tests (#​2656)

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

• Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
• Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
• Replace legacy .sln files with modern .slnx format #​1966
• coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
• Relax auto-property skip logic and improve coverage for records #​1941

Fixed

• Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
• Fix Regression in branch coverage for lambda expressions #​1938
• Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
• Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
• Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
• Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
• Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
• Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Dapper from 2.1.79 to 2.1.89.

Release notes

Sourced from Dapper's releases.

2.1.89

What's Changed

• Fully sign the StrongName assemblies on every platform by @​mgravell in Fully sign the StrongName assemblies on every platform DapperLib/Dapper#2237
• Suppress trim and AOT diagnostics in Dapper fallback paths by @​JamesNK in Suppress trim and AOT diagnostics in Dapper fallback paths DapperLib/Dapper#2233
• Run the main build on every push to main, not just root-file pushes by @​mgravell in Run the main build on every push to main, not just root-file pushes DapperLib/Dapper#2238

New Contributors

• @​JamesNK made their first contribution in Suppress trim and AOT diagnostics in Dapper fallback paths DapperLib/Dapper#2233

Full Changelog: DapperLib/Dapper@2.1.86...2.1.89

2.1.86

What's Changed

• Point docs links at dapperlib.dev by @​mgravell in Point docs links at dapperlib.dev DapperLib/Dapper#2222
• Point PackageReleaseNotes at GitHub Releases by @​mgravell in Point PackageReleaseNotes at GitHub Releases DapperLib/Dapper#2223
• Pin the docs site config, and give it a favicon by @​mgravell in Pin the docs site config, and give it a favicon DapperLib/Dapper#2224
• DynamicParameters.AddParameters(IDbCommand): identity-free self-apply by @​mgravell in DynamicParameters.AddParameters(IDbCommand): identity-free self-apply DapperLib/Dapper#2225
• Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled by @​mgravell in Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled DapperLib/Dapper#2228
• Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor by @​mgravell in Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor DapperLib/Dapper#2230

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated docfx from 2.78.5 to 2.81.0.

Release notes

Sourced from docfx's releases.

2.81.0

What's Changed

✨ Features & Platform Support

• Allow custom templates to override search.min.js in the modern template by @​filzrev in #​10055.
• Add metadata.sourceLinkExclude to exclude selected source paths from View Source links without removing API documentation by @​vicancy in #​11141.
• Record the DocFX build version in the docfx_version field of manifest.json by @​vicancy in #​11162.
• Add a .NET 11 RC target, including support for the .NET 11 Razor source generator, while retaining .NET 8, 9, and 10 targets by @​vicancy and @​filzrev in #​11176 and #​11182.

⚡ Performance & Reliability

• Reduce JavaScript template processing overhead and memory allocations by reusing parsed scripts and improving model conversion. Add execution limits to prevent runaway scripts from hanging builds by @​lahma in #​11084.
• Avoid unnecessary exceptions and repeated file reads when loading toc.yml by @​filzrev in #​9974.

🐛 Bug Fixes

• Restore source links for partial types extended by source generators by @​vicancy in #​11141.
• Fix local namespace links in managed reference documentation by resolving them through xrefs during site generation by @​vicancy in #​11163.
• Preserve nested XML blocks when inserting Markdown separators, preventing content from incorrectly rendering as code blocks by @​vicancy in #​11175.
• Preserve explicit false and 0 values when overwriting nullable properties by @​vicancy in #​11181.

📦 Dependency Updates

• Update Jint to 4.16.3 in #​11157.
• Update Markdig to 1.4.0 in #​11158 and #​11160.
• Update YamlDotNet to 18.1.0 in #​11167.
• Update PdfPig to 0.1.16 in #​11168.
• Update ICSharpCode.Decompiler to 11.1.0.9782 in #​11184.
• Update System.Composition to 10.0.12 in #​11165.

Upgrade Notes

Custom JavaScript template preprocessors now enforce a 30-second timeout and a 50-million-statement limit for each getOptions or transform invocation. Long-running custom scripts may need adjustment.

Full Changelog: dotnet/docfx@v2.80.1...v2.81.0

2.80.1

What's Changed

💪 Other Changes

• fix: preserve thematic breaks in overwrite Markdown by @​vicancy in fix: preserve thematic breaks in overwrite Markdown dotnet/docfx#11142
• fix: XML comment parse logics for block element that is adjacent to markdown content by @​filzrev in fix: XML comment parse logics for block element that is adjacent to markdown content dotnet/docfx#10966
• chore: Update Roslyn and Microsoft.Build package dependencies by @​filzrev in chore: Update Roslyn and Microsoft.Build package dependencies dotnet/docfx#11124
• fix: preserve indentation around XML comment code blocks by @​vicancy in fix: preserve indentation around XML comment code blocks dotnet/docfx#11143
• fix: stop metadata generation when restore fails by @​vicancy in fix: stop metadata generation when restore fails dotnet/docfx#11146
• fix: clarify empty .NET API diagnostics by @​vicancy in fix: clarify empty .NET API diagnostics dotnet/docfx#11145
• fix: share tool templates across target frameworks by @​vicancy in fix: share tool templates across target frameworks dotnet/docfx#11144
• fix: honor TOC metadata while preserving file metadata overrides by @​vicancy in fix: honor TOC metadata while preserving file metadata overrides dotnet/docfx#11140
• fix(deps): update esbuild to 0.28.1 and tsx to 4.22.4 by @​dependabot[bot] in fix(deps): update esbuild to 0.28.1 and tsx to 4.22.4 dotnet/docfx#11077
• feat(pdf): allow footer and header on cover and toc by @​sergimos in feat(pdf): allow footer and header on cover and toc dotnet/docfx#10958
• chore(deps): bump actions/setup-dotnet from 5 to 6 by @​dependabot[bot] in chore(deps): bump actions/setup-dotnet from 5 to 6 dotnet/docfx#11116
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in chore(deps): bump actions/checkout from 6 to 7 dotnet/docfx#11115
• Bump Markdig from 1.1.0 to 1.1.1 by @​dependabot[bot] in Bump Markdig from 1.1.0 to 1.1.1 dotnet/docfx#11024
• deps: Update JsonSchema.Net dependency to 8.0.5 by @​filzrev in deps: Update JsonSchema.Net dependency to 8.0.5 dotnet/docfx#10964

New Contributors

• @​sergimos made their first contribution in feat(pdf): allow footer and header on cover and toc dotnet/docfx#10958

Full Changelog: dotnet/docfx@v2.78.6...v2.80.1

2.78.6

What's Changed

💪 Other Changes

• chore(deps): bump dependabot/fetch-metadata from 2.3.0 to 2.5.0 by @​dependabot[bot] in chore(deps): bump dependabot/fetch-metadata from 2.3.0 to 2.5.0 dotnet/docfx#10956
• chore(deps): bump paulhatch/semantic-version from 5.4.0 to 6.0.1 by @​dependabot[bot] in chore(deps): bump paulhatch/semantic-version from 5.4.0 to 6.0.1 dotnet/docfx#10978
• chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /templates by @​dependabot[bot] in chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /templates dotnet/docfx#11016
• Bump Jint from 4.6.0 to 4.6.1 by @​dependabot[bot] in Bump Jint from 4.6.0 to 4.6.1 dotnet/docfx#11018
• chore(deps): bump actions/upload-artifact from 6 to 7 by @​dependabot[bot] in chore(deps): bump actions/upload-artifact from 6 to 7 dotnet/docfx#11015
• chore(deps): bump actions/download-artifact from 7 to 8 by @​dependabot[bot] in chore(deps): bump actions/download-artifact from 7 to 8 dotnet/docfx#11014
• Bump Markdig from 1.0.0 to 1.1.0 by @​dependabot[bot] in Bump Markdig from 1.0.0 to 1.1.0 dotnet/docfx#11019
• chore: remove unnecessary using to fix the Lint check by @​lahma in chore: remove unnecessary using to fix the Lint check dotnet/docfx#11085
• Make xref archive download test hermetic by @​vicancy in Make xref archive download test hermetic dotnet/docfx#11092
• fix: treat different ports as external links by @​vicancy in fix: treat different ports as external links dotnet/docfx#11091
• chore: cleanup YamlSerializationTest.cs by @​filzrev in chore: cleanup YamlSerializationTest.cs dotnet/docfx#10974
• chore(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 in /templates by @​dependabot[bot] in chore(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 in /templates dotnet/docfx#11062
• chore(deps): bump postcss from 8.5.6 to 8.5.14 in /templates by @​dependabot[bot] in chore(deps): bump postcss from 8.5.6 to 8.5.14 in /templates dotnet/docfx#11070
• chore(deps): bump uuid and mermaid in /templates by @​dependabot[bot] in chore(deps): bump uuid and mermaid in /templates dotnet/docfx#11073
• chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /templates by @​dependabot[bot] in chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /templates dotnet/docfx#11061
• chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /templates by @​dependabot[bot] in chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /templates dotnet/docfx#11071
• chore(deps): bump mermaid from 11.15.0 to 11.16.1 in /templates by @​dependabot[bot] in chore(deps): bump mermaid from 11.15.0 to 11.16.1 in /templates dotnet/docfx#11093
• chore(deps): bump dompurify from 3.3.1 to 3.4.13 in /templates by @​dependabot[bot] in chore(deps): bump dompurify from 3.3.1 to 3.4.13 in /templates dotnet/docfx#11096
• chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1 in /templates by @​dependabot[bot] in chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1 in /templates dotnet/docfx#11095
• chore(deps): bump postcss from 8.5.14 to 8.5.26 in /templates by @​dependabot[bot] in chore(deps): bump postcss from 8.5.14 to 8.5.26 in /templates dotnet/docfx#11094
• chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /templates by @​dependabot[bot] in chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /templates dotnet/docfx#11097
• chore(deps-dev): bump socket.io-parser from 4.2.5 to 4.2.7 in /templates by @​dependabot[bot] in chore(deps-dev): bump socket.io-parser from 4.2.5 to 4.2.7 in /templates dotnet/docfx#11098
• chore(deps): bump ws, engine.io-client, engine.io and socket.io-adapter in /templates by @​dependabot[bot] in chore(deps): bump ws, engine.io-client, engine.io and socket.io-adapter in /templates dotnet/docfx#11101
• chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18 in /templates by @​dependabot[bot] in chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18 in /templates dotnet/docfx#11099
• deps: Update playwright version to 1.60.0 by @​filzrev in deps: Update playwright version to 1.60.0 dotnet/docfx#11074
• deps: Update roslyn package versions to 5.6.0 by @​filzrev in deps: Update roslyn package versions to 5.6.0 dotnet/docfx#11047
• fix(deps): apply compatible npm security updates by @​vicancy in fix(deps): apply compatible npm security updates dotnet/docfx#11105
• Bump the spectre group with 2 updates by @​dependabot[bot] in Bump the spectre group with 2 updates dotnet/docfx#11102
• Bump the xunit group with 1 update by @​dependabot[bot] in Bump the xunit group with 1 update dotnet/docfx#11107
• Fix typo in Schema Document Processor overview by @​smartcaveman in Fix typo in Schema Document Processor overview dotnet/docfx#11005
• Bump coverlet.collector from 8.0.0 to 8.0.1 by @​dependabot[bot] in Bump coverlet.collector from 8.0.0 to 8.0.1 dotnet/docfx#11045
• chore(deps): bump paulhatch/semantic-version from 6.0.1 to 6.0.2 by @​dependabot[bot] in chore(deps): bump paulhatch/semantic-version from 6.0.1 to 6.0.2 dotnet/docfx#11036
• chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @​dependabot[bot] in chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 dotnet/docfx#11051
• chore(deps): bump actions/deploy-pages from 4 to 5 by @​dependabot[bot] in chore(deps): bump actions/deploy-pages from 4 to 5 dotnet/docfx#11049
• chore(deps): bump azure/login from 2 to 3 by @​dependabot[bot] in chore(deps): bump azure/login from 2 to 3 dotnet/docfx#11035
• Bump Jint from 4.6.1 to 4.6.3 by @​dependabot[bot] in Bump Jint from 4.6.1 to 4.6.3 dotnet/docfx#11032
• chore(deps): bump dorny/test-reporter from 2.5.0 to 3.0.0 by @​dependabot[bot] in chore(deps): bump dorny/test-reporter from 2.5.0 to 3.0.0 dotnet/docfx#11043
• Bump AwesomeAssertions from 9.4.0 to 9.5.0 by @​dependabot[bot] in Bump AwesomeAssertions from 9.4.0 to 9.5.0 dotnet/docfx#11114
• chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @​dependabot[bot] in chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 dotnet/docfx#11110
• chore(deps): bump paulhatch/semantic-version from 6.0.2 to 6.0.3 by @​dependabot[bot] in chore(deps): bump paulhatch/semantic-version from 6.0.2 to 6.0.3 dotnet/docfx#11112
• chore(deps): bump actions/upload-pages-artifact from 4 to 5 by @​dependabot[bot] in chore(deps): bump actions/upload-pages-artifact from 4 to 5 dotnet/docfx#11109
• chore(deps): bump codecov/codecov-action from 5 to 7 by @​dependabot[bot] in chore(deps): bump codecov/codecov-action from 5 to 7 dotnet/docfx#11113
• chore(deps): bump actions/github-script from 8 to 9 by @​dependabot[bot] in chore(deps): bump actions/github-script from 8 to 9 dotnet/docfx#11111
• Bump the xunit group with 1 update by @​dependabot[bot] in Bump the xunit group with 1 update dotnet/docfx#11117
• Bump coverlet.collector from 8.0.1 to 10.0.1 by @​dependabot[bot] in Bump coverlet.collector from 8.0.1 to 10.0.1 dotnet/docfx#11119
• Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.9.0 by @​dependabot[bot] in Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.9.0 dotnet/docfx#11122
  ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 7.0.2 to 7.1.1.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.1.1

This servicing release fixes decimal parameter validation, token expiry handling in connection pool V2, and connection opens that are in progress when a pool is cleared.

Package version alignment: The SqlClient family packages share the 7.1.1 version:

• Microsoft.Data.SqlClient
• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider
• Microsoft.Data.SqlClient.Extensions.Azure
• Microsoft.Data.SqlClient.Extensions.Abstractions
• Microsoft.Data.SqlClient.Internal.Logging

Microsoft.SqlServer.Server is versioned independently and is not part of this release. Applications should use matching 7.1.1 versions of the driver and its companion packages. The aligned assemblies retain AssemblyVersion 7.0.0.0; upgrading from 7.1.0 does not require new .NET Framework strong-name binding redirects.

Companion package release notes

• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.1.1
• Microsoft.Data.SqlClient.Extensions.Azure 7.1.1
• Microsoft.Data.SqlClient.Extensions.Abstractions 7.1.1
• Microsoft.Data.SqlClient.Internal.Logging 7.1.1

Changes Since 7.1.0

Fixed

• Fixed an ArgumentException when sending zero-valued decimal or SqlDecimal parameters whose precision equals their scale. Nonzero precision validation and support for large decimal values are unchanged. (#​4715, #​4721, #​4732)

• Fixed connection pool V2 handing out pooled connections with expired or nearly expired access tokens. The pool now checks token expiry before reuse, matching the default pool's behavior while preserving transaction-affine reuse. This affects only applications that opt in to connection pool V2. (#​4734, #​4739)

• Fixed connection opens failing when ClearPool or ClearAllPools races with an in-flight open. Requests already admitted to the cleared pool can finish, and connections returned to the retired pool are discarded rather than reused. (#​4714, #​4718, #​4740)

Target Platform Support

• .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
• .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

Dependencies

.NET 9.0

• Microsoft.Bcl.Cryptography 9.0.18
• Microsoft.Data.SqlClient.Extensions.Abstractions 7.1.1
• Microsoft.Data.SqlClient.Internal.Logging 7.1.1
• Microsoft.Data.SqlClient.SNI.runtime 7.1.0
• Microsoft.Extensions.Caching.Memory 9.0.18
• Microsoft.IdentityModel.JsonWebTokens 8.16.0
• Microsoft.IdentityModel.Protocols.OpenIdConnect 8.16.0
• Microsoft.SqlServer.Server 1.0.0
• System.Configuration.ConfigurationManager 9.0.18
• System.Security.Cryptography.Pkcs 9.0.18
• System.Threading.RateLimiting 9.0.18

... (truncated)

7.1.0

This is the general availability release of Microsoft.Data.SqlClient 7.1. It closes out the 7.1 preview cycle with application identity reporting for telemetry, the deprecation of TransparentNetworkIPResolution, and a set of connection, transaction, and Named Pipes fixes.

Important — package version alignment: Starting with the 7.0.2 release, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The 7.1.0 GA release continues this alignment; the following packages ship together as 7.1.0:

• Microsoft.Data.SqlClient
• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider
• Microsoft.Data.SqlClient.Extensions.Azure
• Microsoft.Data.SqlClient.Extensions.Abstractions
• Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0 when upgrading Microsoft.Data.SqlClient to 7.1.0.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0. The AssemblyVersion is unchanged from 7.0.2, so upgrading from 7.0.2, 7.0.3, or any 7.1 preview to 7.1.0 does not require any new .NET Framework strong-name binding redirects. Applications upgrading from 7.0.0 or 7.0.1 should note that Extensions.Azure, Extensions.Abstractions, and Internal.Logging raised their AssemblyVersion from 1.0.0.0 to 7.0.0.0 in 7.0.2; see those release notes for the one-time .NET Framework impact.

Companion package release notes

• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.1.0
• Microsoft.Data.SqlClient.Extensions.Azure 7.1.0
• Microsoft.Data.SqlClient.Extensions.Abstractions 7.1.0
• Microsoft.Data.SqlClient.Internal.Logging 7.1.0

Changes Since 7.1.0-preview3

Added

Application Identity in the USERAGENT Payload

What Changed:

• Added a RegisteredApplication enum and a matching SqlConnection.RegisteredApplication property that let a library or tool identify itself to SQL Server through version 2 of the TDS USERAGENT feature extension. The payload also carries a new driver-owned 64-bit Driver Properties flag field; bit 0 reports whether connection pool V2 is enabled for the process. Both fields are emitted as unpadded uppercase hexadecimal. (#​3201, #​4632)

Who Benefits:

• Middleware and tooling built on top of the driver — Entity Framework Core, Semantic Kernel, SQL Server Management Studio, SqlPackage, Data API Builder, and similar — can be distinguished in server-side telemetry without the driver accepting arbitrary user-supplied user-agent text. This originated as a request from the Entity Framework Core team.
• Service operators gain a more accurate picture of which client stacks are connecting, which helps when diagnosing workload-specific behavior.

Impact:

• Purely additive from the application's perspective: a newly created physical connection whose RegisteredApplication is unset reports Unknown (0). On the wire the field itself is new — USERAGENT payload v1 carried no application identifier, while v2 always emits one.
• Set the property before calling Open or OpenAsync. Assigning it while the connection is connecting or open throws InvalidOperationException.

using var connection = new SqlConnection(connectionString);
connection.RegisteredApplication = RegisteredApplication.EntityFrameworkCore;
await connection.OpenAsync();

• The enum is ushort-backed and marked [CLSCompliant(false)]. Values are partitioned by range: 0x0001–0x7FFF for Microsoft-defined large-scale applications, 0x8000–0xBFFF for small-scale use, and 0xC000–0xFFFF for public/developer use. Applications that are not yet registered can cast an unassigned value from the appropriate range.
  ... (truncated)

7.1.0-preview3

This update brings the following changes since the 7.1.0-preview2 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview3. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview3 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview3 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview3

Added

• Asynchronous key store provider APIs for Always Encrypted — four virtual methods on SqlColumnEncryptionKeyStoreProvider with CancellationToken support. Purely additive; defaults delegate to the synchronous methods, so existing providers are unaffected (#​3672, #​3673)
• Connection Pool V2 nears parity with the default pool (opt-in via Switch.Microsoft.Data.SqlClient.UseConnectionPoolV2):
  • Transaction support (#​4487)
  • Broken-connection replacement during command execution (#​4429)
  • Background warmup to Min Pool Size and automatic replenishment (#​4452)
  • Idle pruning driven by Connection Idle Timeout (#​4463)
  • Optional ConcurrencyLimiter rate limiting for new physical connections (#​4395, #​4396)
  • Leaked connection reclamation, including the previously always-zero number-of-reclaimed-connections counter (#​4529)
  • Metrics and tracing parity with the default pool (#​4504)

Changed

• Single cross-platform build — Windows-only native SNI types now trim cleanly on Linux and macOS. Package structure and contents unchanged (#​4207, #​4239, #​4465, #​4474)
• Async read-path allocations restored to baseline via PacketData node reuse — ExecuteReaderAsync goes from +120.9% to +0.1% against 6.1.6 (#​4536)
• SqlBulkCopy skips graph alias mapping when no graph pseudo-columns are present, recovering a regression from #​3677 (#​4535)
• No formatted trace string is allocated when SqlClientEventSource tracing is disabled, recovering a memory regression against 6.1.6. Trace output unchanged (#​4528)
• net9.0 dependencies moved to 9.0.18; System.Threading.RateLimiting added to packaged metadata. Other targets keep their 8.0.x pins (#​4507)
• Microsoft.Data.SqlClient.SNI and .SNI.runtime updated to 7.1.0-preview3.26226.3 (#​4564)

Fixed

• Always Encrypted VSM/HGS attestation now verifies the enclave public key is bound to the signed report, using a fixed-time SHA-256 comparison against EnclaveData (#​4532)
• SqlConnectionFactory no longer wakes the process every 30 seconds when no pools exist — including with Pooling=False and after ClearAllPools() (#​1881, #​4479)
• Connection pool performance counters affecting the default pool as well as pool V2 — active-soft-connects and number-of-active-connections could go negative after a failed activation, and several gauges drifted upward permanently after a broken connection was replaced (#​4504)
• OverflowException when sending large decimal values with explicit Precision and Scale, which primarily affected Always Encrypted (#​1655, #​4443)
• TDS stream error when passing a DateOnly value with SqlDbType.Variant (net8.0/net9.0) (#​3953, #​4294)
• DateOnly in table-valued parameter sql_variant columns sent as datetime instead of date, which overflowed for values valid as date (net8.0/net9.0) (#​3934, #​4439)
• ServerCertificate keyword ignored when the platform reported no TLS policy errors. It is now always compared, and an unloadable certificate fails closed with SSLCertificateAuthenticationException instead of silently falling back to host-name validation (#​4445)
• SqlConnection.AccessTokenCallback not disabling TNIR by default, plus pool-key construction and SspiContextProvider exclusivity with token auth (net462 for the TNIR behavior) (#​4520)
• Fatal exceptions such as OutOfMemoryException captured into faulted Tasks across several SqlBulkCopy, SqlDataReader, and SqlCommand async entry points (#​4437)
• Entra ID authentication failing against multi-segment authorities such as the Dataverse / Dynamics 365 TDS endpoint. Ships in Microsoft.Data.SqlClient.Extensions.Azure (#​4496, #​4521)

Full details: release-notes/7.1/7.1.0-preview3.md

---

Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.1.0-preview3

Added

• SqlColumnEncryptionAzureKeyVaultProvider overrides the four asynchronous key store provider methods introduced in #​3673, calling the Azure SDK's own async APIs and flowing the supplied CancellationToken (#​4540)
• Concurrent cache misses for the same key collapse into a single Key Vault request. The gate is only awaited, so no thread blocks, and misses for different keys still proceed in parallel (#​4540)
  ... (truncated)

7.1.0-preview2

This update brings the following changes since the 7.1.0-preview1 release.

Package version alignment: The Microsoft.Data.SqlClient driver and its companion packages continue the aligned versioning introduced in 7.0.2. All five packages listed below ship together as 7.1.0-preview2. (Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.) Applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.1.0-preview2 when upgrading Microsoft.Data.SqlClient.

Compatibility guarantee: All aligned assemblies ship with FileVersion 7.1.0.x and AssemblyVersion 7.0.0.0 — unchanged from 7.0.2 — so upgrading from 7.0.2 to 7.1.0-preview2 does not require any new .NET Framework strong-name binding redirects.

Packages in this release

Microsoft.Data.SqlClient 7.1.0-preview2

Added

• SqlConnection.GetSchemaAsync overloads with CancellationToken support (#​3005)
• SQL Graph pseudo-column aliases ($node_id, $edge_id, $from_id, $to_id) accepted in SqlBulkCopy mappings (#​3677)
• SqlBatchCommand.CommandBehavior and SqlBatch.ExecuteReader(CommandBehavior) are now honored (#​4125)
• Configurable idle connection timeout via Connection Idle Timeout / SqlConnectionStringBuilder.IdleTimeout (opt-in via Switch.Microsoft.Data.SqlClient.UseLegacyIdleTimeoutBehavior=false) (#​4295)

Changed

• Connect Timeout now propagates through the pool when Switch.Microsoft.Data.SqlClient.UseOverallConnectTimeoutForPoolWait=true is set (default off; introduces a Microsoft.Bcl.TimeProvider dependency) (#​4270)
• SQL Server 2025 json type added to the DataTypes collection returned by SqlConnection.GetSchema (#​3858)
• Internal state-machine hardening via Interlocked.CompareExchange guards (#​4267)
• Internal cleanup of connection-options inheritance and related pool interfaces (#​4237, #​4261, #​4235, #​4415, #​4334)
• LCID hardcoded mappings to avoid repeated culture lookups (#​4212)
• Allocation reductions on SqlErrorCollection and null-return paths (#​4157, #​4099, #​4102)
• Improved EnclaveDiffieHellmanInfo.Size accuracy (#​4346)
• SqlVector<float> serialization is now explicitly little-endian for cross-architecture consistency (#​3861)
• Bundled .NET 10 SDK updated to 10.0.300 (#​4287)

Fixed

• NullReferenceException in SqlCommand.Cancel() when the connection has already been torn down (#​4372)
• Always Encrypted CMK signature verification incorrectly reusing cached results after a prior failure (#​4339)
• Missing TDS token / feature-ack length bounds checks (spoofing server could trigger unbounded allocations) (#​4340)
• SqlBulkCopy failing in least-privilege environments (#​4306)
• Always Encrypted CekMdVersion / EkValueCount reads aligned with the TDS specification (#​4240)
• LoginWithFailover parser-state validation (#​4140)
• SPN during login now uses the resolved port instead of instance name for Protocol=None / Protocol=Admin (#​4180)
• Race in SqlConnection.TryOpenInner that could surface as InvalidCastException now returns a deterministic InvalidOperationException (#​4179)
• Multiple CancellationTokenSource leaks in SqlDataReader, SqlConnection, SqlCommand reconnect paths, and sequential-stream helpers (#​4009)
• Docs fix for server certificate configuration (#​4408)

Removed (breaking)

• SQL Server 7.0 / 2000 code paths removed; Type System Version=SQL Server 2000 now throws ArgumentException at open. Applications should switch to Latest (or another supported value). No change to server-version support — 7.0 / 2000 were already rejected during login version negotiation. (#​4015)

Full details: release-notes/7.1/7.1.0-preview2.md

---

Microsoft.Data.SqlClient.Extensions.Azure 7.1.0-preview2

Added — WAM (Windows Account Manager) broker support for Entra ID authentication (Windows only) (#​4288, #​4388)

• Covers ActiveDirectoryIntegrated, ActiveDirectoryInteractive, ActiveDirectoryDeviceCodeFlow, and the deprecated ActiveDirectoryPassword modes.
  ... (truncated)

7.1.0-preview1

This update brings the following changes since the 7.0.0 release:

Added

SqlBatch Support on .NET Framework

What Changed:

• Added SqlBatch and related batch-command support for the .NET Framework target so the batching API is now available across the full supported platform matrix, including net462. (#​3926)

Who Benefits:

• Applications that target .NET Framework but also want to use the newer batching APIs no longer need a separate implementation strategy from .NET 8/9 applications.
• Libraries that multi-target .NET Framework and modern .NET can use a more consistent data-access surface area.

Impact:

• SqlBatch, SqlBatchCommand, and the related execution methods are now usable on .NET Framework builds in addition to .NET.

Cross-Driver Connection-String Synonym Alignment

What Changed:

• Added additional accepted connection-string synonyms for better compatibility with other SQL Server drivers and existing connection-string conventions. Newly accepted synonyms include ColumnEncryption, ConnectTimeout, FailoverPartner, PacketSize, and WorkstationId. (#​4192)

Who Benefits:

• Applications migrating connection strings from other SQL Server drivers or shared infrastructure can reuse more existing keywords without rewriting them first.

Impact:

• Existing canonical keywords continue to work unchanged; this preview simply accepts more equivalent aliases during parsing.

Changed

Type Forwards for Authentication Abstractions

What Changed:

• Added type forwards from the core Microsoft.Data.SqlClient assembly to public authentication-related types that were moved into Microsoft.Data.SqlClient.Extensions.Abstractions, including SqlAuthenticationMethod, SqlAuthenticationParameters, SqlAuthenticationProvider, SqlAuthenticationProviderException, and SqlAuthenticationToken. (#​4067, #​4117)

Who Benefits:

• Applications and libraries compiled against earlier package layouts retain binary compatibility when those authentication types are resolved from the core assembly name.

Impact:

• No application code changes are required; the type forwards preserve existing compiled references.

User Agent Feature Extension Enabled by Default

... (truncated)

7.0.3

This update brings the following changes since the 7.0.2 release:

The core driver and its companion packages ship together as version 7.0.3. Update the companion packages you use alongside the driver to 7.0.3. Assembly versions remain 7.0.0.0, unchanged from 7.0.2.

Companion package release notes

• Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.0.3
• Microsoft.Data.SqlClient.Extensions.Azure 7.0.3 — includes the Entra ID authority parsing fix for Dataverse/Dynamics 365 connections.
• Microsoft.Data.SqlClient.Extensions.Abstractions 7.0.3
• Microsoft.Data.SqlClient.Internal.Logging 7.0.3

Changed

• Updated the Microsoft.Data.SqlClient.SNI and Microsoft.Data.SqlClient.SNI.runtime dependencies to 6.0.3 (was 6.0.2).
  (#​4599)

Fixed

• Fixed a SqlBulkCopy regression in environments where the application login cannot read sys.all_columns. Bulk copy now falls back to the earlier column-discovery behavior when that permission is unavailable. Support for hidden columns and SQL Graph column aliases still requires access to the metadata view.
  (#​4370, #​4306, #​4402)

• Fixed a memory-allocation regression in connection and command operations caused by formatting diagnostic strings even when tracing was disabled. Also corrected trace messages that reported an incorrect object ID or could throw FormatException when traced values contained braces.
  (#​4528, #​4533)

• Fixed ServerCertificate validation on the managed SNI path so the configured certificate is compared against the server certificate even when the server certificate passes chain and host-name validation. When certificate validation is enabled, a missing, unreadable, or invalid certificate file, a certificate mismatch, or a missing server certificate now causes the TLS handshake to fail instead of bypassing the configured certificate check. (net8.0/net9.0 only)
  (#​4445, #​4583)

• Fixed Always Encrypted VSM/HGS enclave attestation to verify that the enclave public key used to establish a session matches the key committed to by the signed attestation report. Missing, malformed, or mismatched key-binding data now causes attestation to fail before the session secret is derived.
  (#​4532, #​4553)

• Fixed SqlConnection.AccessTokenCallback not disabling Transparent Network IP Resolution by default, making it consistent with SqlConnection.AccessToken. An explicitly configured TransparentNetworkIPResolution connection-string value still takes precedence. (net462 only)
  (#​4520, #​4561)

• Fixed authentication state handling so clearing SqlConnection.AccessToken, AccessTokenCallback, or SspiContextProvider preserves the other authentication values in the connection pool key. Cloning a connection or updating its credential also preserves its SspiContextProvider. Combining a non-null SspiContextProvider with AccessToken or AccessTokenCallback now throws InvalidOperationException instead of silently discarding authentication state; applications must use one authentication mechanism at a time.
  (#​4520, #​4561, #​4644)

• Fixed configurable retry logic installing a permanent, process-wide assembly-resolution handler that could interfere with unrelated assembly loading. The handler is now active only while an explicitly configured custom retry provider is resolved and constructed, and probes AppContext.BaseDirectory instead of the current working directory. Place custom retry assemblies in the application base directory; dependencies loaded after provider construction must be resolvable through normal application dependency resolution or an application-provided handler. (net8.0/net9.0 only)
  (#​2214, #​4547, #​4663)

Contributors

We thank the following public contributors. Their efforts toward this project are very much appreciated.

• edwardneal

Target Platform Support

• .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
• .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

• Fix TRX logger mangling astral-plane (non-BMP) characters by @​azat-msft in Fix TRX logger mangling astral-plane (non-BMP) characters microsoft/vstest#16318
• Disable the MTP testhost by default by @​nohwnd in Disable the MTP testhost by default microsoft/vstest#16337
• Fix OS-blind apphost probe in MTP bridge on Unix (regression from #​16201) by @​azat-msft in Fix OS-blind apphost probe in MTP bridge on Unix (regression from #16201) microsoft/vstest#16336
• Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources by @​nohwnd in https...
  ...

Description has been truncated

[github-actions]

Pipelinez Test Results

Pipelinez Tests passed.

Passed	Failed	Skipped
✅ 131	❌ 0	⚠️ 0

Full check details are available here.