Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2024

Bumps Microsoft.Data.SqlClient from 5.1.4 to 5.1.5.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

Stable Release v5.1.5

[Stable release 5.1.5] - 2024-01-29

This update brings the below changes over the previous release:

Fixed

  • Fixed connection to unsubscribe from transaction completion events before returning it to the connection pool #2321
  • Fixed InvalidCastException when reading an Always Encrypted date or time column #2324

Changed

  • Changed Microsoft.IdentityModel.JsonWebTokens and Microsoft.IdentityModel.Protocols.OpenIdConnect version 6.24.0 to 6.35.0 #2320 to address CVE-2024-21319
Changelog

Sourced from Microsoft.Data.SqlClient's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog

[Preview Release 5.2.0-preview5.24024.3] - 2024-01-24

This update brings the below changes over the previous release:

Added

  • Added .NET 8 support #2230
  • Added explicit version for major .NET version dependencies on System.Runtime.Caching 8.0.0, System.Configuration.ConfigurationManager 8.0.0, and System.Diagnostics.DiagnosticSource 8.0.0 #2303
  • Added the ability to generate debugging symbols in a separate package file #2137

Changed

  • Changed Microsoft.IdentityModel.JsonWebTokens and Microsoft.IdentityModel.Protocols.OpenIdConnect version 6.24.0 to 6.35.0 #2290 to address CVE-2024-21319

Fixed

  • Fixed connection to unsubscribe from transaction completion events before returning it to the connection pool #2301
  • Fixed InvalidCastException when reading an Always Encrypted date or time column #2275
  • Fixed token caching to prevent expired access tokens from being reused in a connection pool #2273
  • Code health improvements: #2288, #2305, #2254, #2317

[Preview Release 5.2.0-preview4.23342.2] - 2023-12-08

This update brings the below changes over the previous release:

Added

  • Added SqlBatch support on .NET 6+ #1825, #2223
  • Added Workload Identity authentication support #2159, #2264
  • Added Localization support on .NET #2210
  • Added support for Georgian collation #2194
  • Added support for Big Endian systems #2170

Changed

  • Updated Microsoft.Data.SqlClient.SNI (.NET Framework dependency) and Microsoft.Data.SqlClient.SNI.runtime (.NET/.NET Standard dependency) version to v5.2.0-preview1.23340.1. #2257, which includes removing dead code and addressing static analysis warnings
  • Improved CPU usage when AppContext switches are in use #2227
  • Upgraded Azure.Identity dependency version to 1.10.3 to address CVE-2023-36414, #2188
  • Improved error messages when validating server certificates in managed SNI (Linux/macOS) #2060

Fixed

  • Fixed an issue when using the Authentication option, but not encrypting on .NET Framework where the server certificate was being incorrectly validated #2224
  • Fixed a deadlock problem for distributed transactions when on .NET #2161

... (truncated)

Commits
  • 01a589e [5.1.5] Fix | Enable reading AE date as DateOnly (#2275) (#2324)
  • 759dc69 Fix | Minor fixes to support different test environments (#2045) (#2325)
  • f8520c7 Fix | Invalid transaction exception against the connections and distributed t...
  • b92637e [5.1.5] CVE | Version bump Microsoft.IdentityModel.JsonWebTokens to 6.35.0 (#...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [Microsoft.Data.SqlClient](https://github.com/dotnet/sqlclient) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/dotnet/sqlclient/releases)
- [Changelog](https://github.com/dotnet/SqlClient/blob/main/CHANGELOG.md)
- [Commits](dotnet/SqlClient@v5.1.4...v5.1.5)

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from roji as a code owner January 29, 2024 21:04
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jan 29, 2024
@dependabot dependabot bot requested a review from vonzshik as a code owner January 29, 2024 21:04
@roji roji merged commit 02b8726 into main Jan 29, 2024
@roji roji deleted the dependabot/nuget/Microsoft.Data.SqlClient-5.1.5 branch January 29, 2024 21:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant