Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Microsoft.Data.SqlClient and Microsoft.Identity.Client #2084

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 26, 2024

Bumps Microsoft.Data.SqlClient and Microsoft.Identity.Client. These dependencies needed to be updated together.
Updates Microsoft.Data.SqlClient from 4.1.0 to 5.2.1

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

Stable release v5.2.1

[Stable release 5.2.1] - 2024-05-31

Changed

  • Upgraded Azure.Identity version from 1.10.3 to 1.11.3 #2492, #2528
  • Upgraded Microsoft.Identity.Client version from 4.56.0 to 4.60.3 #2492
  • Code Health improvements: #2467

Fixed

  • Fixed connection errors on Linux when Data Source property contains both named instance and port #2436
  • Fixed SqlConnection.FireInfoMessageEventOnUserErrors when set to true throws an exception #2505
  • Fixed exception when using DATETIMEOFFSET(n) in a TVP if n is 1, 2, 3, or 4 #2506
  • Reverted PR #1983 which caused connection failure delays when using OpenAsync #2507
  • Fixed SqlConnection.Clone() to include AccessTokenCallback #2527

Stable release v5.2.0

[Stable release 5.2.0] - 2024-02-28

Added

  • Added a new AccessTokenCallBack API to SqlConnection. #1260
  • Added SqlBatch support on .NET 6+ #1825, #2223,#2371, #2373
  • Added support of SqlDiagnosticListener on .NET Standard. #1931
  • Added new property RowsCopied64 to SqlBulkCopy. #2004
  • Added support for the SuperSocketNetLib registry option for Encrypt on .NET on Windows. #2047
  • Added the ability to generate debugging symbols in a separate package file #2137
  • Added Workload Identity authentication support #2159, #2264
  • Added support for Big Endian systems #2170
  • Added support for Georgian collation #2194
  • Added Localization support on .NET #2210
  • Added .NET 8 support #2230
  • Added explicit version for major .NET version dependencies on System.Runtime.Caching 8.0.0, System.Configuration.ConfigurationManager 8.0.0, and System.Diagnostics.
  • DiagnosticSource 8.0.0 #2303

Changed

  • Improved parsing buffered characters in TdsParser. #1544
  • Added Microsoft.SqlServer.Types to verify support for SqlHierarchyId and Spatial for .NET Core. #1848
  • Moved to new System.Data.SqlTypes APIs on .NET 7 and up. #1934 and #1981
  • Removed reference to Microsoft.Win32.Registry since it's shipped starting with .NET 6.0. #1974
  • Changed UseOneSecFloorInTimeoutCalculationDuringLogin App Context switch default to true and extended its effect to .NET and .NET Standard. #2012
  • Updated Microsoft.Identity.Client version from 4.47.2 to 4.53.0. #2031, #2055
  • Switched to the new .NET NegotiateAuthentication API on .NET 7.0 and above for SSPI token negotiation using Managed SNI. #2063
  • Removed ignoreSniOpenTimeout in open connection process on Windows. #2067
  • Enforce explicit ordinal for internal StringComparison operations. #2068
  • Improved error messages when validating server certificates in managed SNI (Linux/macOS) #2060
  • Improved CPU usage when AppContext switches are in use #2227
  • Upgraded Azure.Identity dependency version to 1.10.3 to address CVE-2023-36414, #2189

... (truncated)

Changelog

Sourced from Microsoft.Data.SqlClient's changelog.

[Stable release 5.2.1] - 2024-05-31

This update brings the below changes over the previous release:

Changed

  • Upgraded Azure.Identity version from 1.10.3 to 1.11.3 #2492, #2528
  • Upgraded Microsoft.Identity.Client version from 4.56.0 to 4.60.3 #2492
  • Code Health improvements: #2467

Fixed

  • Fixed connection errors on Linux when Data Source property contains both named instance and port #2436
  • Fixed SqlConnection.FireInfoMessageEventOnUserErrors when set to true throws an exception #2505
  • Fixed exception when using DATETIMEOFFSET(n) in a TVP if n is 1, 2, 3, or 4 #2506
  • Reverted PR #1983 which caused connection failure delays when using OpenAsync #2507
  • Fixed SqlConnection.Clone() to include AccessTokenCallback #2527

[Stable release 5.2.0] - 2024-02-28

Added

  • Added a new AccessTokenCallBack API to SqlConnection. #1260
  • Added SqlBatch support on .NET 6+ #1825, #2223,#2371, #2373
  • Added support of SqlDiagnosticListener on .NET Standard. #1931
  • Added new property RowsCopied64 to SqlBulkCopy. #2004
  • Added support for the SuperSocketNetLib registry option for Encrypt on .NET on Windows. #2047
  • Added the ability to generate debugging symbols in a separate package file #2137
  • Added Workload Identity authentication support #2159, #2264
  • Added support for Big Endian systems #2170
  • Added support for Georgian collation #2194
  • Added Localization support on .NET #2210
  • Added .NET 8 support #2230
  • Added explicit version for major .NET version dependencies on System.Runtime.Caching 8.0.0, System.Configuration.ConfigurationManager 8.0.0, and System.Diagnostics.
  • DiagnosticSource 8.0.0 #2303

Changed

  • Improved parsing buffered characters in TdsParser. #1544
  • Added Microsoft.SqlServer.Types to verify support for SqlHierarchyId and Spatial for .NET Core. #1848
  • Moved to new System.Data.SqlTypes APIs on .NET 7 and up. #1934 and #1981
  • Removed reference to Microsoft.Win32.Registry since it's shipped starting with .NET 6.0. #1974
  • Changed UseOneSecFloorInTimeoutCalculationDuringLogin App Context switch default to true and extended its effect to .NET and .NET Standard. #2012
  • Updated Microsoft.Identity.Client version from 4.47.2 to 4.53.0. #2031, #2055
  • Switched to the new .NET NegotiateAuthentication API on .NET 7.0 and above for SSPI token negotiation using Managed SNI. #2063
  • Removed ignoreSniOpenTimeout in open connection process on Windows. #2067
  • Enforce explicit ordinal for internal StringComparison operations. #2068
  • Improved error messages when validating server certificates in managed SNI (Linux/macOS) #2060
  • Improved CPU usage when AppContext switches are in use #2227
  • Upgraded Azure.Identity dependency version to 1.10.3 to address CVE-2023-36414, #2189

... (truncated)

Commits
  • 7af2438 Fix | Enhance certificate validation (#2487)
  • 808d4c3 Change | Separate tests for NetFx and NetCore - NetFx-Only Connection String ...
  • 815e5ab Doc | Fix SNI dependencies of 5.1 and 5.2 release notes (#2537)
  • b7c4007 Enhancement | Add trace logs for packet size (#2522)
  • b178ba5 Fix | Clone of SqlConnection should include AccessTokenCallback (#2525)
  • cd7a3d1 Updating Azure.Identity version to 1.11.3 (#2526)
  • 5cb73fd Merged SqlClientFactory between .NET Core and Framework (#2369)
  • cc6ea21 Streamline conditional compilation symbols (#2486)
  • 9a71c94 Update build guide for Linux (#2499)
  • 4c0f013 Remove UWP (uap) references and special cased code (#2483)
  • Additional commits viewable in compare view

Updates Microsoft.Identity.Client from 4.42.0 to 4.60.3

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.60.3

Bug Fixes

Updated Android webview attribute.

4.60.2

Bug Fixes

When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Addressed an issue where attempts to acquire a token via certificate authentication resulted in a Microsoft.Identity.Client.MsalServiceException (Error code: AADSTS5002730), signaling an "Invalid JWT token. Unsupported key for the signing algorithm." This was due to a known bug in Microsoft Entra ID (Azure AD) that affects the handling of JWT tokens signed with certain algorithms, specifically SHA2 and PSS. See 4690

4.60.0

New Features

  • AAD client assertions are computed using SHA 256 and PSS padding. See 4428
  • CorrelationId is available in MsalException. See 4187
  • Open telemetry records telemetry for proactive token refresh background process. See 4492
  • MSAL.Net now supports generic authorities with query parameters. See 4631

Bug Fixes

  • MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606
  • MSAL.Net now handles the v2.0 authorization endpoint. See 4416
  • Improved logging and error message when the web api received claims challenge. See 4496
  • Cloud shell error message from the managed identity endpoint is parsed correctly. See 4402
  • Improved error message when CCA certificate is disposed before MSAL can use it. See 4602
  • Client id is now accepted as a scope. See 4652

4.59.1

Bug Fixes

Updated Android webview attribute.

4.59.0

New Features

  • Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
  • Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

  • When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
  • Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
  • MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
  • Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
  • Fixed SemaphoreFullException happening in managed identity flows. See 4472.
  • Improved exception messages when using non-RSA certificates. See 4407.
  • Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

  • Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

Bug Fixes

  • Fixed a bug when a x-ms-pkeyauth HTTP header was incorrectly sent on Mac and Linux platforms. See 4445.

... (truncated)

Changelog

Sourced from Microsoft.Identity.Client's changelog.

4.60.3

Bug Fixes

  • Updated Android webview attribute.

4.60.2

Bug Fixes

  • When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Bug Fixes

  • Resolved an issue where MSAL attempts to acquire a token via certificate authentication using SHA2 and PSS resulting in a `MsalServiceException' (Error code: AADSTS5002730). See 4690.

4.60.0

New Features

  • AAD client assertions are computed using SHA 256 and PSS padding. See 4428.
  • CorrelationId is available in MsalException. See 4187.
  • Open telemetry records telemetry for proactive token refresh background process. See 4492.
  • MSAL.Net now supports generic authorities with query parameters. See 4631.

Bug Fixes

  • MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606.
  • MSAL.Net now handles the v2.0 authorization endpoint. See 4416.
  • Improved logging and error message when the web api receives a claims challenge. See 4496.
  • Cloud shell error message from the managed identity endpoint is now parsed correctly. See 4402.
  • Improved error message when CCA certificate is disposed before MSAL can use it. See 4602.
  • Client id is now accepted as a scope. See 4652.

4.59.0

New Features

  • Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
  • Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

  • When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
  • Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
  • MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
  • Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
  • Fixed SemaphoreFullException happening in managed identity flows. See 4472.
  • Improved exception messages when using non-RSA certificates. See 4407.
  • Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

  • Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [Microsoft.Data.SqlClient](https://github.com/dotnet/sqlclient) and [Microsoft.Identity.Client](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet). These dependencies needed to be updated together.

Updates `Microsoft.Data.SqlClient` from 4.1.0 to 5.2.1
- [Release notes](https://github.com/dotnet/sqlclient/releases)
- [Changelog](https://github.com/dotnet/SqlClient/blob/main/CHANGELOG.md)
- [Commits](dotnet/SqlClient@v4.1.0...v5.2.1)

Updates `Microsoft.Identity.Client` from 4.42.0 to 4.60.3
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md)
- [Commits](AzureAD/microsoft-authentication-library-for-dotnet@4.42.0...4.60.3)

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Identity.Client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants