Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Updated Microsoft.Data.SqlClient from 3.0.0 to 3.1.5.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

3.1.5

[Stable release 3.1.5] - 2024-01-09

Fixed

  • Fixed encryption downgrade issue. CVE-2024-0056
  • Fixed certificate chain validation logic flow.

For summary of all changes over v3.1.4, refer to 3.1.5.md

3.1.4

[Stable release 3.1.4] - 2023-10-31

Fixed

  • Fixed Always Encrypted secure enclave retry logic for async queries. #​1988
  • Fixed LocalDb and managed SNI by improving the error messages and avoid falling back to the local service. #​2129
  • Fixed .NET and .NET Standard file version. 2093
  • Fixed activity correlator to continue use of same GUID for connection activity. #​1997
  • Fixed FormatException when event source tracing is enabled. #​1291

For summary of all changes over v3.1.3, refer to 3.1.4.md

3.1.3

[Stable release 3.1.3] - 2023-03-10

Fixed

  • Fixed throttling of token requests by calling AcquireTokenSilent in AAD Integrated/Password flows when the account is already cached.#​1926
  • Fixed TDS RPC error on large queries in SqlCommand.ExecuteReaderAsync.#​1939

For summary of all changes over v3.1.2, refer to 3.1.3.md

3.1.2

[Stable release 3.1.2] - 2023-02-03

Added

  • Added Windows ARM64 support when targeting .NET Framework. #​1908

Fixed

  • Fixed thread safety of transient error list in configurable retry logic. #​1911
  • Fixed deadlock when using SinglePhaseCommit with distributed transactions. #​1912
  • Fixed Default UTF8 collation conflict. #​1910
  • Added CommandText length validation when using stored procedure command types. #​1909

For summary of all changes over v3.1.1, refer to 3.1.2.md

3.1.1

[Stable release 3.1.1] - 2022-08-12

Fixed

  • Fixed null SqlBinary as rowversion. #​1700
  • Fixed Kerberos authentication failure when using .NET 6. #​1696
  • Fixed NullReferenceException during Azure Active Directory authentication. #​1695
  • Removed union overlay design and use reflection in SqlTypeWorkarounds. #​1699

3.1.0

Added

  • Added new Attestation Protocol None for VBS enclave types. This protocol will allow users to forgo enclave attestation for VBS enclaves. #​1539
  • Included 42108 and 42109 error codes to retriable transient errors list. #​1560

Fixed

  • Changed EnclaveDelegate.Crypto GetEnclaveProvider to use a thread safe concurrent dictionary. #​1564

For detailed release notes, refer to 3.1.0.md

3.0.1

Fixed

  • Fixed async thread blocking issues on SqlConnection.Open() for active directory authentication modes. #​1270
  • Fixed unknown transaction state issues when promoting delegated transaction. 1247
  • Fixed issue with connection encryption to ensure connections fail when encryption is required. #​1233 Read more
  • Fixed bug with LegacyRowVersionNullBehavior App Context switch. #​1246
  • Fixed recursive calls to RetryLogicProvider when calling SqlCommand.ExecuteScalarAsync. #​1245
  • Fixed async deadlock scenarios in web contexts with configurable retry logic provider. #​1245
  • Fixed deadlock in transaction using .NET Framework. #​1243
  • Fixed issue where connection goes to unusable state. #​1238

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps Microsoft.Data.SqlClient from 3.0.0 to 3.1.5

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 3.1.5
  dependency-type: direct:production
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Nov 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant