Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 23, 2025

Updated Microsoft.Data.SqlClient from 1.1.3 to 2.1.7.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

2.1.7

[Stable release 2.1.7] - 2024-01-09

Fixed

  • Fixed encryption downgrade issue. CVE-2024-0056
  • Fixed certificate chain validation logic flow.

For summary of all changes over v2.1.6, refer to 2.1.7.md

2.1.6

[Stable release 2.1.6] - 2023-04-27

Fixed

  • Fixed TDS RPC error on large queries in SqlCommand.ExecuteReaderAsync. #​1986
  • Fixed Default UTF8 collation conflict. #​1989
  • Fixed async deadlock issue when sending attention fails due to network failure. #​1767

2.1.5

[Stable release 2.1.5] - 2022-08-30

Fixed

  • Added CommandText length validation when using stored procedure command types. #​1726
  • Fixed Kerberos authentication failure when using .NET 6. #​1727
  • Removed union overlay design and used reflection in SqlTypeWorkarounds. #​1729

2.1.4

Fixed

  • Fixed issue with connection encryption to ensure connections fail when encryption is required. #​1232
  • Fixed issue where connection goes to unusable state. #​1239

2.1.3

Fixed

  • Fixed wrong data blended with transactions in .NET Core by marking a connection as doomed if the transaction completes or aborts while there is an open result set #​1051
  • Fixed race condition issues between SinglePhaseCommit and TransactionEnded events #​1049

2.1.2

Fixed

  • Fixed issue connecting with instance name from a Linux/macOS environment #​874
  • Fixed wrong results issues by changing the timeout timer to ensure a correct execution state #​929
  • Fixed a vulnerability by prohibiting DtdProcessing on XmlTextReader instances in .NET Core #​885
  • Fixed Kerberos authentication when an SPN does not contain the port #​935
  • Fixed missing error messages in Managed SNI #​883
  • Fixed missing System.Runtime.Caching dependency for .NET Standard assemblies #​878
  • Fixed event source tracing issues #​941
  • Fixed MARS header contains errors issue against .NET Framework 4.8.1 #​928

2.1.1

Fixed

  • Fixed issue with System-Assigned Managed Identity in Azure Functions #​841
  • Fixed issue with Kerberos Authentication for .NET Core in Unix environments #​848
  • Fixed issue with TCP Keep Alive for .NET Core in Unix environments #​855

2.1.0

Added

  • Microsoft.Data.SqlClient symbols are now source-linked #​789
  • Added an API to clear cached access tokens from the token provider #​800
  • Added SqlFacetAttribute implementation #​757

Fixed

  • Fixed InvalidOperationException and NotSupportedException errors due to WriteAsync collisions #​796
  • Fixed incorrect Settings.Async flag in ExecuteXmlReaderAsync #​782
  • Fixed a regression in Windows Integrated authentication when using managed networking #​777
  • Fixed Bulk Copy Async deadlock issues with custom IDataReader when using SqlDataReader internally #​779
  • Fixed a serialization issue with SqlException in .NET Core #​780

Changes

  • Updated versions of Microsoft.IdentityModel package dependencies #​794

For summary of all changes over v2.0, refer 2.1.0.md

2.1.0-preview2

Added

  • Added support for Azure Active Directory Managed Identity authentication #​730
  • Added support to provide a user-defined application client ID when using Active Directory authentication #​740
  • Added the "Command Timeout" connection string property to set a default timeout for all commands executed with the connection #​722
  • Added support for Always Encrypted on all supported platforms for .NET Standard 2.0 #​756

Fixed

  • Fixed unobserved exception issue when a timeout occurs before a faulted task completes with an exception #​688 #​773
  • Fixed an issue where driver continues to prompt for credentials when using Azure Active Directory authentication #​770

Changes

  • Updated Microsoft.Data.SqlClient.SNI (.NET Framework dependency) and Microsoft.Data.SqlClient.SNI.runtime (.NET Core/Standard dependency) version to v2.1.1 and removed symbols from Microsoft.Data.SqlClient.SNI.runtime, which are now published to Microsoft Symbols Server #​764
  • Updated Microsoft.Identity.Client dependency version to v4.21.1 #​765
  • Performance improvements when establishing an encrypted channel by removing sync over async method calls #​541
  • Performance improvements by replacing heap-allocated arrays with Spans #​667
  • Moved common files to shared folder between .NET Framework and .NET Core implementation #​734 #​753

For detailed release notes, see 2.1.0-preview2.md

2.1.0-preview1

Added

  • Added support for Always Encrypted with secure enclaves on Unix for .NET Core 2.1+ and on all supported platforms for .NET Standard 2.1+ #​676
  • Added support for Azure Active Directory Device Code Flow authentication #​597
  • Added new APIs to enable customizations for "Active Directory Interactive" authentication experience #​597
  • Added Sensitivity Rank support in Sensitivity Classification information #​626
  • Added support to obtain ServerProcessId() (SPID) information on an active SqlConnection instance #​660
  • Added support for a new Configuration Section, SqlClientAuthenticationProviders (duplicate of existing SqlAuthenticationProviders), to allow co-existence of configurations for both drivers, "System.Data.SqlClient" and "Microsoft.Data.SqlClient" #​702
  • Added TraceLogging in Native SNI to extend SqlClientEventSource support #​650
  • Updated Microsoft.Data.SqlClient.SNI (.NET Framework dependency) and Microsoft.Data.SqlClient.SNI.runtime (.NET Core/Standard dependency) version to v2.1.0 with trace logging implementation #​705

Fixed

  • Fixed Enclave session cache issue with Azure Database #​686
  • Fixed pooled connection re-use on access token expiry issue when using Active Directory authentication modes #​635
  • Fixed transient fault handling for Pooled connections #​637
  • Fixed SPN generation issue when no port is provided #​629
  • Fixed missing null checks for SqlErrors in SqlException for .NET Framework implementation #​698

Changes

  • Performance improvements by fixing unnecessary allocations with EventSource implementation #​684
  • Reverted changes to return empty DataTable from GetSchemaTable to return null as before. #​696
  • Removed multiple CacheConnectionStringProperties calls when setting ConnectionString properties #​683
  • Code Improvements by only checking inexact match when no exact match is found for an embedded resource #​668
  • Changed _SqlMetaData to lazy initialize hidden column map #​521
  • Renamed internal string resource file and helpers for .NET Core implementation #​671
  • Performance improvements by reworking ExecuteReaderAsync to minimize allocations #​528
  • Performance improvements by moving DataReader caches to internal connection #​499
  • Moved common files to shared folder between .NET Framework and .NET Core implementation #​618 #​625

2.0.1

Added

  • Added support for a new Configuration Section, SqlClientAuthenticationProviders (duplicate of existing SqlAuthenticationProviders), to allow co-existence of configurations for both drivers, "System.Data.SqlClient" and "Microsoft.Data.SqlClient" #​701

Fixed

  • Fixed pooled connection re-use on access token expiry issue when using Active Directory authentication modes #​639
  • Fixed transient fault handling for Pooled connections #​638
  • Fixed Enclave session cache issue with Azure Database #​628
  • Reverted changes to return empty DataTable from GetSchemaTable to return null as before. #​697
  • Fixed configuration section collision issue with System.Data.SqlClient type #​701
  • Fixed blank error message [HTTP Provider] issues due to unexpected pre-login failures when using Native SNI. Fixed with Microsoft.Data.SqlClient.SNI v2.0.1 and Microsoft.Data.SqlClient.SNI.runtime v2.0.1 release versions.

2.0.0

Added

  • Added internal driver support to provide resiliency to DNS failures #​594
  • Added support for Active Directory Integrated, Active Directory Interactive and Active Directory Service Principal authentication mode for .NET Core and .NET Standard #​560
  • Added support for Active Directory Service Principal authentication mode for .NET Framework #​560
  • Added support for optional ORDER hints in SqlBulkCopy for improved performance #​540

Fixed

  • Fixed SqlSequentialStream multipacket read stalling issue in .NET Core #​603
  • Fixed code page issue for Kazakh collation in SQL Server #​584
  • Fixed stalled application issues when end of stream is reached #​577
  • Fixed driver behavior to not throw exception for invalid configuration file #​573
  • Fixed Object null reference issue when failover partner is set #​588
  • Fixed applicationintent connection string property issue #​585

Changes

  • Raise warning message when insecure TLS protocols are in use #​591

Breaking Changes

  • Modified enclave provider interface SqlColumnEncryptionEnclaveProvider to be internal #​602 - This change is not likely to impact customer applications since secure enclaves is a relatively new feature and they would have had to implement their own enclave provider, which is not a trivial task.
  • Updated SqlClientMetaDataCollectionNames exposed constants by removing non-existing constants and adding new to the metadata collection #​580

For summary of all changes over v1.1, refer 2.0.0.md

2.0.0-preview4

Added

  • Microsoft.Data.SqlClient (.NET Core and .NET Standard) on Windows is now dependent on Microsoft.Data.SqlClient.SNI.runtime, replacing the previous dependency on runtime.native.System.Data.SqlClient.SNI #​570
  • The new Microsoft.Data.SqlClient.SNI.runtime dependency adds support for the ARM platform along with the already supported platforms ARM64, x64 and x86 on Windows #​570
  • Improved driver performance by introducing managed packet recycling #​389

Fixed

  • Fixed SqlBulkCopy to work with database columns containing metadata about data classification #​568
  • Fixed unsafe cast in SqlException for SerializationEntry.Value
  • Fixed null reference exceptions in SqlDelegatedTransaction methods #​563

Changes

  • Standardized connection string properties for enhanced user experience #​534
  • Improved performance by reducing eventsource tracing related to allocations from TVP write methods #​557 #​564

Breaking Changes

  • For .NET Framework applications consuming Microsoft.Data.SqlClient, the SNI.dll files previously downloaded to the bin\x64 and bin\x86 folders are now named Microsoft.Data.SqlClient.SNI.x64.dll and Microsoft.Data.SqlClient.SNI.x86.dll and will be downloaded to the bin directory, to support auto-loading in the application process #​570. This change is not going to impact client applications unless a direct reference has been made to SNI.dll or the x86 and x64 folders.
  • New connection string synonyms replace old inconsistent properties when fetching connection string from SqlConnectionStringBuilder #​534

For detailed release notes, refer 2.0.0-preview4.md

2.0.0-preview3

Added

  • Allow passing username with Active Directory Interactive Authentication in .NET Framework #​492
  • Allow large UDT buffers for .NET Framework #​456
  • Added "Transaction Id" and "Client Version" in Diagnostic Source traces #​515
  • Added new SqlConnectionOverrides APIs to perform SqlConnection.Open() with fail fast option #​463

Fixed

  • Addressed MARS TDS Header errors by reverting changes to make SqlDataReader.ReadAsync() non-blocking #​547
  • Fixed driver behavior to not perform enlistment of pooled connection in aborted transaction #​543
  • Fixed wrong application domain selected when starting SqlDependencyListener #​410
  • Added missing refs for RowCopied property in SqlBulkCopy #​508

Changes

  • Improved performance by removing unwanted method calls in Event Source tracing #​506
  • Removed Diagnostic Source and Configuration Manager dependencies from .NET Standard implementation #​535
  • Removed redundant calls to DbConnectionPoolKey.GetType() #​512

Breaking Changes

  • Updated driver to perform decimal scale rounding to match SQL Server behavior #​470
  • Standardized App Context switch that enables Managed SNI on Windows for .NET Core and .NET Standard (break only applies to 2.0 preview releases that introduced the switch) #​548

For more details and breaking changes, refer here

2.0.0-preview2

Added

  • Added support for capturing EventSource traces in .NET Framework, .NET Core, and .NET Standard applications #​399 #​461 #​479 #​483 #​484
  • Added support for Cross-platform TCP Keep Alive applicable to .NET Core 3.1+ applications #​395
  • Added support for enabling Managed networking implementation on Windows applicable to .NET Core and .NET Standard applications #​477
  • Added RowsCopied property in SqlBulkCopy to expose count of copied rows #​409
  • Added "NeutralResourcesLanguage" attribute for .NET Framework assembly #​433
  • Added caching for invariant culture check result #​376
  • Added cached SqlReferenceCollection.FindLiveReaderContext objects #​380

Fixed

  • Fixed Access Token behavior in connection pool to perform string comparison #​443
  • Fixed concurrent connection speed issues when connecting with Azure Active Directory Authentication modes in .NET Core #​466
  • Fixed issues with Password persistence in Connection String #​453

Changes

  • Updated all driver assemblies to be CLS Compliant #​396
  • Updated Bulk Copy error messages to also include Column, Row and non-encrypted Data information #​437
  • Updated error messages for "Always Encrypted - Secure Enclaves" to handle 'Attestation Protocol' and fixed typos #​421 #​397
  • Removed sync over async in SNINpHandle.EnableSsl #​474
  • Changed non-generic ArrayList to List<T> in SqlBulkCopy #​457
  • Multiple performance improvements #​377 #​378 #​379

Breaking Changes

  • The driver will now perform Server Certificate validation when TLS encryption is enforced by the target Server, which is the default for Azure connections #​391
  • SqlDataReader.GetSchemaTable() now returns an empty DataTable instead of returning null #​419

For more details and breaking changes, refer here

2.0.0-preview1

Added

  • Added support to allow large UDT buffer size (upto Int.MaxValue) as supported by SQL Server starting TDS 7.3 #​340

Fixed

  • Fixed issues with SqlCommandSet not working with Byte Array parameters #​360
  • Fixed Statement command cancellation in Managed SNI #​248 - Ported dotnet/corefx#​38271
  • Fixed zero connection timeout issue in Managed SNI #​332
  • Fixed "DataType" metadata information for TinyInt datatype to be System.Byte #​338
  • Fixed driver behavior to use CancellationTokenResource only for non-infinite timeout and cleanup after usage #​339
  • Fixed ConnectionTime and ClientConnectionId reported by SqlStatistics when connection is closed #​341
  • Fixed deadlock issues by reverting async changes to SNIPacket #​349

Changes

  • Improved performance of Managed SNI by removing double fetch of domain name #​366
  • Improved performance of Async Method Allocations in Managed SNI #​328
  • Improved performance of Managed SNI by enhancing utilization of resources #​173 - Ported dotnet/corefx#​35363 and dotnet/corefx#​40732
  • Improved performance of Managed SNI RPC Parameter Usage #​209 - Ported dotnet/corefx#​34049
  • Changed enclave key map to be lazy initialized #​372
  • Changed Recieve() and ReceiveAsync() implementation to receive null packets on failure #​350
  • Changed EnclaveProviderBase caching implementation to support Async Scenarios (Introduces breaking changes) #​346

For more details and breaking changes, refer here.

1.1.4

Fixed

  • Fixed wrong results issues by changing the timeout timer to ensure a correct execution state #​950
  • Fixed MARS header contains errors issue against .NET Framework 4.8+ #​959

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps Microsoft.Data.SqlClient from 1.1.3 to 2.1.7

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 2.1.7
  dependency-type: direct:production
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant