Skip to content

Bump the dotnet-dependencies group with 21 updates#170

Closed
dependabot[bot] wants to merge 8 commits into
vNextfrom
dependabot/nuget/benchmarks/Wolfgang.AuditTrail.EntityFrameworkCore.Benchmarks/dotnet-dependencies-3df10f6e17
Closed

Bump the dotnet-dependencies group with 21 updates#170
dependabot[bot] wants to merge 8 commits into
vNextfrom
dependabot/nuget/benchmarks/Wolfgang.AuditTrail.EntityFrameworkCore.Benchmarks/dotnet-dependencies-3df10f6e17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Updated coverlet.collector from 6.0.4 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated FsCheck.Xunit from 2.16.6 to 3.3.3.

Release notes

Sourced from FsCheck.Xunit's releases.

3.3.3

Add Gen.pick and Gen.tryPick functions.
Fill NullReferenceException when using Replay with an Implies combinator.
Improve behavior of stamps and labels when using And/Or property combinators.

3.3.2

Fixed FsCheck.NUnit failure reporting. (by Brian Rourke Boll)
Added a replay hint to failure message. (by Brian Rourke Boll)

3.3.1

Update xunit.v3.extensibility.core to v3.0.1 to fix a test discovery issue. (by Hyogeol Lee)

3.3.0

Added FsCheck.Xunit.v3. (by JohSand)

3.2.0

Support C# struct record generation. (by Brian Rourke Boll)
Xunit Property respects IAsyncLifetime. (by Arialdo Martini)

3.1.0

Support Async<'Testable> & Task<'Testable>. Slight behavior change: an explicit upcast to non-generic Task (:> Task) is now needed for tests involving Task<'T> where 'T is not itself a testable type. (by Brian Rourke Boll)

3.0.1

  • FsCheck.Xunit: target net462 explicitly, so xunit picks the right runner on .NET Framework.

3.0.0

  • Fix stamp missing for final test. (by Calum Sieppert)

  • FsCheck.NUnit: updated to NUnit 4. (with David Naylor)

  • FsCheck.NUnit: implement PropertiesAttribute. (by Oleksandr Bogomaz)

  • FsCheck.NUnit: handle NUnit's signalling exceptions. (by Oleksandr Bogomaz)

  • FsCheck.Xunit: fixed MissingMethodException caused by integration issue with xunit 2.9.x.

3.0.0-rc3

  • Breaking change: confusingly named StringNoNnulls is renamed to StringNoNullChar.
  • Breaking change: The operators |@, @| and %> are removed. Please use Prop.label instead.
  • Added more ForAll overloads for various Task types.
  • The collections types NonEmptySet, NonEmptyArray and FixedLengthArray now implement IEnnumerable to avoid a call to Get in common scenarios.
  • Enabled source linking and deterministic builds. (by Patrick Stevens)

3.0.0-rc2

  • Negative decimals are now also generated. (by Stephen Smith)

  • Relax FsCheck.Xunit's restriction on xUnit versions. (by Tom Rijnbeek)

  • Made Gen.choose64 public.

  • Remove dependency on FAKE and paket in favor of standard .NET tools. (by Patrick Stevens)cription of the release

3.0.0-rc1

  • Enable properties that return Task<T>. (by Mark Seemann)

  • Includes all changes up to 2.16.6.

3.0.0-beta2

Fixed bug that caused exceptions not to be propagated to output correctly.
Added a few missing methods in Fluent.Arbitrary.
Add a few missing Prop.ForAll overloads.
Includes changes in 2.16.4.

3.0.0-beta1

Backwards incompatible*: Refactor and split of the Gen and Arbitrary APIs into FsCheck.FSharp and FsCheck.Fluent. This is a first step in splitting the entire API into a functional (for F# consumers) and fluent (for C# and VB.NET consumers) interface. This should be clearer for both kinds of consumers.
By and large, if you are an F# user, now open FsCheck.FSharp in addition to open FsCheck. If you are a C# or VB.NET user, add using FsCheck.Fluent.
Backwards incompatible*: redesigned API for per-type Arbitrary instance discovery and lookup. There is no longer a single global, mutable map of type to Arbitrary instances, instead there are any number of immutable IArbMaps that can be configured at your leisure, and set via Config.WithArbitrary on the test.
Detailed changes to FsCheck.FSharp.Gen: Added RequireQualifiedAccess. Added apply and bind. Renamed collect and sequence to collect/sequenceToList/Array/Seq for clarity. Removed unzip and unzip3 - their implementation is problematic, and it's hard to see a use case for them. Removed subListOfToIlist, subListOfArr - these returned IList<'T> types. Untupled rows,cols arguments in array2DOfDim.
Detailed changes to FsCheck.Fluent.Gen: Split into non-extension methods on Gen and extension methods on Gen<T> type in GenExtensions. Removed Gen.Apply - not useful without partial application. Two, Three, Four and Zip now output ValueTuples, which is idiomatic in modern C#, and are only visible as extension methods on Gen<T>. Removed the overloads of Zip with arity 3. Changed the return type of methods that returned IList<T> previously to List<T>. Split the Sample method with optional arguments in three overloads, this is better for backwards compatibilty going forward.
Detailed changes to FsCheck.FSharp.Arb: Removed fromGenShrinkFunc. Removed register, registerByType, from, generate and shrink - these are replaced by functions on ArbMap, resp. mergeWith, mergeWithType, arbitrary and generate. Made Arb.Default internal. Default types should now be looked up using ArbMap, e.g. ArbMap.defaults |> ArbMap.arbitrary<list<int>>.
Detailed changes to FsCheck.Fluent.Arb: Removed extension method ToArbitrary that took an F# function as argument for the shrinker. Renamad Arb.From methods to Arbitrary.From - C# does not tolerate ambiguity between using two types of the same name in the same namespace. Removed Register, RegisterByType, From, Generate and Shrink - these are replaced by methods on ArbMap, resp. Merge<'T>, Merge, ArbFor and GeneratorFor. Made Arb.Default internal. Default Arbitrary types should now be looked up using ArbMap, e.g. ArbMap.Default.ArbFor<int[]>().
First pass at improving XML docs for Gen API.
Fixed bug in try..with computation expression builder.
Added support for let!...and!... syntax in computation expression builder.

3.0.0-alpha4

Propagate thread-local arbitraries to thread pool threads that are executing tests.

3.0.0-alpha3

NuGet packaging: relax FSharp.Core constraint to 4.0 and higher for .NET Desktop.

3.0.0-alpha2

Remove PCL builds. NET Standard is the way forward. Latest FSharp.Core builds don't even include PCL versions. As a result of the FSharp.Core dependency, FsCheck targets NET Standard 1.6.
Remove Prop.within.
Remove tuple and list testables.
Bug fix: Tasks that were faulted or canceled were not detected as test failures (by chrisoverzero)

3.0.0-alpha1

Update random number generator to SplitMix algorithm. (with thanks to Jack Pappas for making it fast)
Add support for parallel and async testing. (by Sergey - great effort!)
Simplify sampling data: Gen.sample et al.

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.58 to 3.0.117.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.117

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.117

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.116...3.0.117

3.0.116

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.116

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.115...3.0.116

3.0.115

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.115

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.114...3.0.115

3.0.114

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.114

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.113...3.0.114

3.0.113

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.113

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.112...3.0.113

3.0.112

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.112

Full Changelog: meziantou/Meziantou.Analyzer@3.0.111...3.0.112

3.0.111

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.111

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.110...3.0.111

3.0.110

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.110

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.109...3.0.110

3.0.109

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.109

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.108...3.0.109

3.0.108

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.108

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.107...3.0.108

3.0.107

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.107

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.106...3.0.107

3.0.106

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.106

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.105...3.0.106

3.0.105

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.105

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.104...3.0.105

3.0.104

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.104

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.103...3.0.104

3.0.103

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.103

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.102...3.0.103

3.0.102

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.102

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.101...3.0.102

3.0.101

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.101

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.100...3.0.101

3.0.100

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.100

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.99...3.0.100

3.0.99

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.99

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.98...3.0.99

3.0.98

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.98

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.97...3.0.98

3.0.97

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.97

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.96...3.0.97

3.0.96

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.96

Full Changelog: meziantou/Meziantou.Analyzer@3.0.95...3.0.96

3.0.95

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.95

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.94...3.0.95

3.0.94

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.94

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.93...3.0.94

3.0.93

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.93

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.92...3.0.93

3.0.92

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.92

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.91...3.0.92

3.0.91

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.91

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.90...3.0.91

3.0.90

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.90

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.89...3.0.90

3.0.89

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.89

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.88...3.0.89

3.0.88

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.88

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.87...3.0.88

3.0.87

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.87

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.86...3.0.87

3.0.86

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.86

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.85...3.0.86

3.0.85

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.85

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.84...3.0.85

3.0.84

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.84

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.83...3.0.84

3.0.83

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.83

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.82...3.0.83

3.0.82

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.82

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.81...3.0.82

3.0.81

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.81

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.80...3.0.81

3.0.80

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.80

Full Changelog: meziantou/Meziantou.Analyzer@3.0.79...3.0.80

3.0.79

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.79

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.78...3.0.79

3.0.78

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.78

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.77...3.0.78

3.0.77

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.77

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.76...3.0.77

3.0.76

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.76

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.75...3.0.76

3.0.75

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.75

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.74...3.0.75

3.0.74

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.74

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.73...3.0.74

3.0.73

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.73

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.72...3.0.73

3.0.72

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.72

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.71...3.0.72

3.0.71

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.71

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.70...3.0.71

3.0.70

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.70

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.69...3.0.70

3.0.69

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.69

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.68...3.0.69

3.0.68

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.68

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.67...3.0.68

3.0.67

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.67

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.66...3.0.67

3.0.66

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.66

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.65...3.0.66

3.0.65

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.65

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.64...3.0.65

3.0.64

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.64

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.63...3.0.64

3.0.63

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.63

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.62...3.0.63

3.0.62

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.62

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.61...3.0.62

3.0.61

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.61

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.60...3.0.61

3.0.60

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.60

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.59...3.0.60

3.0.59

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.59

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.58...3.0.59

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 6.1.1 to 7.0.2.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.2

This update brings the following changes since the 7.0.1 release:

Important — package version alignment: Starting with 7.0.2, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The following packages now ship together as 7.0.2:

  • Microsoft.Data.SqlClient
  • Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider
  • Microsoft.Data.SqlClient.Extensions.Azure
  • Microsoft.Data.SqlClient.Extensions.Abstractions
  • Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.0.2 when upgrading Microsoft.Data.SqlClient to 7.0.2.

Breaking change (.NET Framework only): As part of this alignment, the AssemblyVersion of Microsoft.Data.SqlClient.Extensions.Azure, Microsoft.Data.SqlClient.Extensions.Abstractions, and Microsoft.Data.SqlClient.Internal.Logging changed from 1.0.0.0 to 7.0.0.0 (the Microsoft.Data.SqlClient and Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider assembly versions are unchanged). On .NET Framework, AssemblyVersion is part of the strong-name identity, so applications that drop these assemblies into an existing deployment without rebuilding must rebuild against the 7.0.2 packages (or add binding redirects). Applications on .NET / .NET Core are not affected.

Companion package release notes

The following companion packages ship aligned as 7.0.2. See their individual release notes for package-specific changes (including the Microsoft.Data.SqlClient.Extensions.Azure WAM broker support):

Fixed

  • Fixed a NullReferenceException in SqlCommand.Cancel(). The diagnostic message built during cancellation dereferenced the active connection directly; it now uses a null-conditional access so cancellation no longer throws when the connection has already been torn down.
    (#​4372,#​4373)

  • Fixed a NullReferenceException in SqlDataReader when calling GetBytes/GetChars with a null destination buffer. The argument-validation path that constructs the InvalidDestinationBufferIndex exception now guards against the null buffer so the correct ArgumentException is surfaced instead of an NRE.
    (#​4159,#​4206)

  • Fixed Always Encrypted column master key signature verification incorrectly reusing cached results. The SignatureVerificationCache lookup logic was corrected so signature verification outcomes are cached and retrieved against the correct key, preventing stale or mismatched verification results.
    (#​4339,#​4343)

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

  • Added bounds checking when parsing TDS token and feature-extension-acknowledgment data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
    (#​4340,#​4358)

Who Benefits:

  • All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

7.0.1

This update brings the following changes since the 7.0.0 release:

Fixed

  • Fixed SqlBulkCopy failing on SQL Server 2016 with Invalid column name 'graph_type' error. The column metadata query now uses dynamic SQL so that references to the graph_type column (introduced in SQL Server 2017) are not compiled on older versions that lack the column. (#​3714, #​4092, #​4147)

  • Fixed SqlBulkCopy failing on Azure Synapse Analytics dedicated SQL pools. The column-list query previously used a variable-assignment pattern that Synapse does not support; it now uses STRING_AGG when targeting Synapse (engine edition 6) and falls back to the variable-assignment approach for SQL Server 2016 compatibility. (#​4149, #​4176, #​4182)

  • Fixed SqlDataReader.GetFieldType() and GetProviderSpecificFieldType() returning typeof(byte[]) instead of typeof(SqlVector<float>) for vector float32 columns. The methods now follow the same type-determination logic as GetValue(). (#​4104, #​4105, #​4152)

  • Added missing System.Data.Common (v4.3.0) NuGet package dependency for .NET Framework consumers. The inbox System.Data.Common assembly on .NET Framework predates APIs such as IDbColumnSchemaGenerator; without the explicit NuGet dependency, consumers encountered CS0012 compilation errors when using these types through Microsoft.Data.SqlClient. (#​4063, #​4074)

Changed

  • Enabled the User Agent TDS feature extension unconditionally. The Switch.Microsoft.Data.SqlClient.EnableUserAgent AppContext switch has been removed; the driver now always sends User Agent information during login. (#​4124, #​4154)

  • Added type forwards from the core Microsoft.Data.SqlClient assembly to public types that were moved to the Microsoft.Data.SqlClient.Extensions.Abstractions package: SqlAuthenticationMethod, SqlAuthenticationParameters, SqlAuthenticationProvider, SqlAuthenticationProviderException, and SqlAuthenticationToken. This ensures binary compatibility for assemblies compiled against earlier versions of Microsoft.Data.SqlClient where these types lived in the core assembly. (#​4067, #​4117)

  • Fixed API documentation include paths and duplicate doc snippets. (#​4084, #​4086, #​4107, #​4161)

Contributors

We thank the following public contributors. Their efforts toward this project are very much appreciated.

Target Platform Support

  • .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
  • .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

Dependencies

.NET 9.0

  • Microsoft.Bcl.Cryptography 9.0.13
  • Microsoft.Data.SqlClient.Extensions.Abstractions 1.0.0
  • Microsoft.Data.SqlClient.Internal.Logging 1.0.0
  • Microsoft.Data.SqlClient.SNI.runtime 6.0.2
  • Microsoft.Extensions.Caching.Memory 9.0.13
  • Microsoft.IdentityModel.JsonWebTokens 8.16.0
  • Microsoft.IdentityModel.Protocols.OpenIdConnect 8.16.0
  • Microsoft.SqlServer.Server 1.0.0
  • System.Configuration.ConfigurationManager 9.0.13
  • System.Security.Cryptography.Pkcs 9.0.13

.NET 8.0

  • Microsoft.Bcl.Cryptography 8.0.0
  • Microsoft.Data.SqlClient.Extensions.Abstractions 1.0.0
    ... (truncated)

7.0.0

This is the general availability release of Microsoft.Data.SqlClient 7.0, a major milestone for the .NET data provider for SQL Server. This release addresses the most upvoted issue in the repository's history — extracting Azure dependencies from the core package — introduces pluggable SSPI authentication, adds enhanced routing for Azure SQL Hyperscale, and delivers async read performance improvements.

Also released as part of this milestone:

  • Released Microsoft.Data.SqlClient.Extensions.Abstractions 1.0.0. See release notes.
  • Released Microsoft.Data.SqlClient.Extensions.Azure 1.0.0. See release notes.
  • Released Microsoft.Data.SqlClient.Internal.Logging 1.0.0. See release notes.
  • Released Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider 7.0.0. See release notes.

Changes Since 7.0.0-preview4

Added

  • Added actionable error message when Entra ID authentication methods are used without the Microsoft.Data.SqlClient.Extensions.Azure package installed, guiding users to install the correct package. (#​3962, #​4046)
  • Added Azure authentication sample application. (#​3988)

Changed

Other changes

  • Renamed the Microsoft.Data.SqlClient.Extensions.Logging package to Microsoft.Data.SqlClient.Internal.Logging to indicate it is for internal use only and should not be referenced directly by application code. (#​4038)
  • Fixed non-localized exception strings. (#​4022)
  • Codebase merge and cleanup: (#​3997, #​4052)
  • Various test improvements: (#​3891, #​3996, #​4002, #​4034, #​4041, #​4044)
  • Documentation improvements (including Entra ID branding updates): (#​4021, #​4047, #​4049)
  • Updated Dependencies (#​4045):
    • Updated Azure.Core to v1.51.1
    • Updated Azure.Identity to v1.18.0
    • Updated Azure.Security.KeyVault.Keys to v4.9.0
    • Updated Microsoft.Extensions.Caching.Memory to v9.0.13 (.NET 9.0)
    • Updated Microsoft.IdentityModel.JsonWebTokens to v8.16.0
    • Updated Microsoft.IdentityModel.Protocols.OpenIdConnect to v8.16.0
    • Updated Microsoft.Bcl.Cryptography to v9.0.13 (.NET 9.0)
    • Updated System.Configuration.ConfigurationManager to v9.0.13 (.NET 9.0)
    • Updated System.Diagnostics.DiagnosticSource to v10.0.3
    • Updated System.Security.Cryptography.Pkcs to v9.0.13 (.NET 9.0)
    • Updated System.Text.Json to v10.0.3
    • Updated System.Threading.Channels to v10.0.3
    • Updated System.ValueTuple to v4.6.2

Cumulative Changes Since 6.1

This section summarizes all changes across the 7.0 preview cycle for users upgrading from the latest 6.1 stable release.

Changed

Azure Dependencies Removed from Core Package

What Changed:

  • The core Microsoft.Data.SqlClient package no longer depends on Azure.Core, Azure.Identity, or their transitive dependencies (e.g., Microsoft.Identity.Client, Microsoft.Web.WebView2). Azure Active Directory / Entra ID authentication functionality (ActiveDirectoryAuthenticationProvider and related types) has been extracted into a new Microsoft.Data.SqlClient.Extensions.Azure package. (#​1108, #​3680, #​3902, #​3904, #​3908, #​3917, #​3982, #​3978, #​3986)
    ... (truncated)

7.0.0-preview4

Changed

Azure Dependencies Removed from Core Package

What Changed:

  • The core Microsoft.Data.SqlClient package no longer depends on Azure.Core, Azure.Identity, or their transitive dependencies (e.g., Microsoft.Identity.Client, Microsoft.Web.WebView2). Azure Active Directory / Entra authentication functionality (ActiveDirectoryAuthenticationProvider and related types) has been extracted into a new Microsoft.Data.SqlClient.Extensions.Azure package that can be installed separately when needed. (#​1108, #​3680, #​3902, #​3904, #​3908, #​3917, #​3982, #​3978, #​3986)
  • To support this separation, two additional packages were introduced: Microsoft.Data.SqlClient.Extensions.Abstractions (shared types between the core driver and extensions) and Microsoft.Data.SqlClient.Extensions.Logging (shared ETW tracing infrastructure). (#​3626, #​3628, #​3967)

Who Benefits:

  • All users benefit from a significantly lighter core package. Previously, the Azure dependency chain pulled in numerous assemblies (including Azure.Core, Azure.Identity, Microsoft.Identity.Client, and Microsoft.Web.WebView2) even for applications that only needed basic SQL Server connectivity. This was the most upvoted open issue in the repository (#​1108).
  • Users who do not use Azure AD authentication no longer carry Azure-related assemblies in their build output, reducing deployment size and eliminating confusion about unexpected dependencies.
  • Users who do use Azure AD authentication can now manage Azure dependency versions independently from the core driver.

Impact:

  • Applications using Azure AD authentication (e.g., ActiveDirectoryPassword, ActiveDirectoryInteractive, ActiveDirectoryDefault, etc.) must now install the Microsoft.Data.SqlClient.Extensions.Azure NuGet package separately. No code changes are required beyond adding the package reference.

Added

Expose SSPI Context Provider as Public API

What Changed:

  • Added the SspiContextProvider abstract class and a public SspiContextProvider property on SqlConnection, allowing applications to supply a custom SSPI context provider for integrated authentication. This enables custom Kerberos ticket negotiation and NTLM username/password authentication scenarios that the driver does not natively support. (#​2253, #​2494)

Who Benefits:

  • Users authenticating across untrusted domains, non-domain-joined machines, or cross-platform environments where configuring integrated authentication on the client is difficult or impossible.
  • Users running in containers who need manual Kerberos negotiation without deploying sidecars or external ticket-refresh mechanisms.
  • Users who need NTLM username/password authentication to SQL Server, which the driver does not provide natively.

Impact:

  • Applications can set a custom SspiContextProvider on SqlConnection before opening the connection. The provider handles the authentication token exchange during integrated authentication. This is an additive API — existing authentication behavior is unchanged when no custom provider is set. See SspiContextProvider_CustomProvider.cs for a sample implementation.
  • Note: The SspiContextProvider is a part of the connection pool key. Care should be taken when using this property to ensure the implementation returns a stable identity per resource.

Expose Default Transient Error List

What Changed:

  • Exposed the default transient error codes list via the new SqlConfigurableRetryFactory.BaselineTransientErrors static property (returns a ReadOnlyCollection<int>), making it easier to extend the set of transient errors without copy-pasting from the repository source. (#​3903)

Who Benefits:

  • Developers implementing custom retry logic who want to extend the built-in transient error list rather than replacing it.

Impact:

... (truncated)

7.0.0-preview3

Preview Release 7.0.0-preview3.25342.7 - December 8, 2025

Added

Support for .NET 10

What Changed:

  • Updated pipelines and test suites to compile the driver using the .NET 10 SDK. Cleaned up unnecessary dependency references.
    (#​3686)

Who Benefits:

  • Developers targeting .NET 10.

Impact:

  • Addressed .NET 10 warnings regarding unused/unnecessary dependencies.

Enable SqlClientDiagnosticListener in SqlCommand on .NET Framework

What Changed:

  • Enabled SqlClientDiagnosticListener functionality on SqlCommand for .NET Framework.
    (#​3658)

Who Benefits:

  • Developers requiring diagnostic information on .NET Framework.

Impact:

  • Improved observability and diagnostics for SqlCommand on .NET Framework.

Enable User Agent Extension

What Changed:

  • Enabled User Agent Feature Extension.
    (#​3606)

Who Benefits:

  • Telemetry and diagnostics consumers.

Impact:

  • When the Switch.Microsoft.Data.SqlClient.EnableUserAgent app context switch is enabled, the driver sends more detailed user agent strings. This switch is disabled by default. This change will assist with troubleshooting and quantifying driver usage by version and operating system.

Fixed

... (truncated)

7.0.0-preview2

This update brings the following changes since the 7.0.0-preview1 release:

Bug Fixes

  • Fixed a debug assertion in connection pool (no impact to production code) (#​3587)
  • Prevent uninitialized performance counters escaping CreatePerformanceCounters (#​3623)
  • Fix SetProvider to return immediately if user-defined authentication provider found (#​3620)
  • Allow SqlBulkCopy to operate on hidden columns (#​3590)
  • Fix connection pool concurrency issue (#​3632)

Added

App Context Switch for Ignoring Server-Provided Failover Partner

What Changed:

  • A new app context switch Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner was introduced to let the client ignore server-provided failover partner info in Basic Availability Groups (BAGs). When the switch is enabled, only the failover partner specified in the connection string is used; server-supplied partner values are skipped. This context switch was introduced in PR #​3625.

Who Benefits:

  • Applications connecting to SQL Server BAGs using TCP and custom ports, especially where the server's provided partner name lacks the protocol, host, or port. This avoids connection failures when the server-provided partner is incompatible or incomplete.
  • Teams who manage availability groups and rely on client-side control of failover behavior in heterogeneous networking environments.

Impact:

  • If your environment might be affected (i.e., you operate a BAG with custom ports, or have experienced failures after failover), you can enable the new switch in your application:
AppContext.SetSwitch("Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner", true);
  • Then, ensure your connection string includes your preferred failover partner (with correct tcp:host,port) so that the client uses that instead of the server's suggestion.
  • Without enabling this, by default, the client continues to prefer the server-provided partner, maintaining backwards compatibility.

Other Additions

  • Add app context switch for enabling asynchronous multi-packet improvements (#​3605)

Changed

Deprecation of SqlAuthenticationMethod.ActiveDirectoryPassword

What Changed:

  • Username/Password authentication for Microsoft Entra (formerly Active Directory) has been deprecated. SqlAuthenticationMethod.ActiveDirectoryPassword is now marked as [Obsolete]. This change occurred in PR #​3671

Who benefits:

... (truncated)

7.0.0-preview1

Changes Since 6.1.0

This update brings the following changes since the 6.1.0 release:

Breaking Changes

  • Removed Constrained Execution Region error handling blocks and associated SqlConnection cleanup which may affect how potentially-broken connections are expunged from the pool. (#​3535)

Bug Fixes

  • Packet multiplexing disabled by default, and several bug fixes. (#​3534, #​3537)

Added

  • SqlColumnEncryptionCertificateStoreProvider now works on Windows, Linux, and macOS. (#​3014)

Changed

Changes Since 6.0.2

This update brings the following changes since the 6.0.2 release. Changes already noted above are omitted:

Additions

Added dedicated SQL Server vector datatype support

What Changed:

  • Optimized vector communications between MDS and SQL Server 2025, employing a custom binary format over the TDS protocol. (#​3433, #​3443)
  • Reduced processing load compared to existing JSON-based vector support.
  • Initial support for 32-bit single-precision floating point vectors.

Who Benefits:

  • Applications moving large vector data sets will see beneficial improvements to processing times and memory requirements.
  • Vector-specific APIs are ready to support future numeric representations with a consistent look-and-feel.

Impact:
... (truncated)

6.1.6

This update brings the following changes since the 6.1.5 release:

Added

WAM broker support for the supported Entra ID authentication modes (Windows only)

What Changed:

  • Added support for the Web Account Manager (WAM) broker for the supported Microsoft Entra ID authentication modes. A new ActiveDirectoryAuthenticationProviderOptions options bag and a corresponding ActiveDirectoryAuthenticationProvider(ActiveDirectoryAuthenticationProviderOptions options) constructor were introduced, exposing a UseWamBroker property (alongside ApplicationClientId and DeviceCodeFlowCallback).
    (#​4288, #​4387)
  • Added a cross-platform SetParentActivityOrWindowFunc(Func<object> parentActivityOrWindowFunc) method so callers can supply a parent window handle on Windows or a parent Activity/UIViewController on Android/iOS/MAUI.

Who Benefits:

  • Applications using ActiveDirectoryInteractive and other supported Entra ID authentication modes on Windows benefit from the WAM broker's improved security (tokens are brokered by the OS), single sign-on with the logged-in Windows account, and support for Conditional Access and Windows Hello.

Impact:

  • When you supply your ApplicationClientId, WAM is opt-in via ActiveDirectoryAuthenticationProviderOptions.UseWamBroker. Consider enabling it when you want OS-brokered tokens, single sign-on with the signed-in Windows account, Windows Hello, and Conditional Access support.
  • UseWamBroker is a Windows-only setting and has no effect on non-Windows platforms, where interactive Entra ID flows always use the system browser.
  • Prefer the new options-bag constructor over the positional-argument overloads in new code.
var options = new ActiveDirectoryAuthenticationProviderOptions
{
    ApplicationClientId = "<your-app-client-id>",
    // Enable WAM (Windows only) for OS-brokered tokens, SSO, Windows Hello, and Conditional Access.
    UseWamBroker = true,
};
var provider = new ActiveDirectoryAuthenticationProvider(options);
// Supply the parent window/activity that owns the interactive sign-in prompt.
provider.SetParentActivityOrWindowFunc(() => parentWindowHandle);
SqlAuthenticationProvider.SetProvider(SqlAuthenticationMethod.ActiveDirectoryInteractive, provider);

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

  • Added bounds checking when parsing TDS token data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
    (#​4340, #​4359)

Who Benefits:

  • All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

6.1.5

This update brings the following changes since the 6.1.4 release:

Fixed

  • Fixed a connection performance regression where SPN (Service Principal Name) generation was triggered for non-integrated authentication modes (e.g., SQL authentication) on the native SNI path, causing unnecessary DNS lookups and significantly slower connection times. Only affects .NET on Windows (not .NET Framework). (#​3523, #​3946)
  • Fixed ExecuteScalar to properly propagate errors when the server sends data followed by an error token. Previously, errors such as conversion failures during WHERE clause evaluation were silently consumed during SqlDataReader.Close() instead of being thrown to the caller, which could result in transactions being unexpectedly zombied. (#​3736, #​3947)
  • Fixed SqlDataReader.GetFieldType and SqlDataReader.GetProviderSpecificFieldType to return the correct type (SqlVector<float>) for vector float32 columns. Previously, these methods did not follow the same type-resolution logic as GetValue, returning an incorrect type for vector columns. (#​4104, #​4151)

Target Platform Support

  • .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
  • .NET 8.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)
  • .NET Standard 2.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)

Dependencies

.NET Framework 4.6.2

  • Azure.Core 1.50.0
  • Azure.Identity 1.17.1
  • Microsoft.Data.SqlClient.SNI 6.0.2
  • Microsoft.Extensions.Caching.Memory 8.0.1
  • Microsoft.Identity.Client 4.80.0
  • Microsoft.IdentityModel.JsonWebTokens 7.7.1
  • Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
  • System.Buffers 4.6.1
  • System.Data.Common 4.3.0
  • System.Diagnostics.DiagnosticSource 8.0.1
  • System.IdentityModel.Tokens.Jwt 7.7.1
  • System.Memory 4.6.3
  • System.Security.Cryptography.Pkcs 8.0.1
  • System.Text.Json 8.0.6
  • System.Text.RegularExpressions 4.3.1

.NET 8.0

  • Azure.Core 1.50.0
  • Azure.Identity 1.17.1
  • Microsoft.Data.SqlClient.SNI.runtime 6.0.2
  • Microsoft.Extensions.Caching.Memory 8.0.1
  • Microsoft.Identity.Client 4.80.0
  • Microsoft.IdentityModel.JsonWebTokens 7.7.1
  • Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
  • Microsof....

Description has been truncated

dependabot Bot added 2 commits June 30, 2026 15:54
@dependabot
Bump the github-actions group with 2 updates
e5781ca 
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump the dotnet-dependencies group with 21 updates
de8cc25 
Bumps coverlet.collector from 6.0.4 to 10.0.1
Bumps FsCheck.Xunit from 2.16.6 to 3.3.3
Bumps Meziantou.Analyzer from 3.0.58 to 3.0.117
Bumps Microsoft.Data.SqlClient from 6.1.1 to 7.0.2
Bumps Microsoft.EntityFrameworkCore.SqlServer from 8.0.11 to 9.0.17
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 8.0.2 to 10.0.9
Bumps Microsoft.Extensions.Hosting from 10.0.5 to 10.0.9
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.5 to 10.0.9
Bumps Microsoft.SourceLink.GitHub from 8.0.0 to 10.0.300
Bumps Microsoft.VisualStudio.Threading.Analyzers from 17.14.15 to 18.7.23
Bumps Npgsql from 10.0.2 to 10.0.3
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.10 to 9.0.4
Bumps Pomelo.EntityFrameworkCore.MySql from 8.0.3 to 9.0.0
Bumps Serilog.Settings.Configuration from 10.0.0 to 10.0.1
Bumps SonarAnalyzer.CSharp from 10.25.0.139117 to 10.27.0.140913
Bumps System.Configuration.ConfigurationManager from 10.0.5 to 10.0.9
Bumps System.Memory from 4.5.5 to 4.6.3
Bumps Testcontainers.MsSql from 4.0.0 to 4.12.0
Bumps Testcontainers.MySql from 4.0.0 to 4.12.0
Bumps Testcontainers.PostgreSql from 4.0.0 to 4.12.0
Bumps xunit.runner.visualstudio to 3.0.2

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: FsCheck.Xunit
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.117
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 9.0.17
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.300
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.VisualStudio.Threading.Analyzers
  dependency-version: 18.7.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Npgsql
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Pomelo.EntityFrameworkCore.MySql
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Serilog.Settings.Configuration
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.27.0.140913
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: System.Configuration.ConfigurationManager
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: System.Memory
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.MySql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dotnet .NET related changes labels Jun 30, 2026
@dependabot dependabot Bot requested a review from Chris-Wolfgang as a code owner June 30, 2026 16:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dotnet .NET related changes labels Jun 30, 2026
Chris-Wolfgang and others added 6 commits June 30, 2026 16:52
@Chris-Wolfgang @claude
ADR-0004: note keyless entity types are out of scope by EF design
63e374e 
Document that HasNoKey entity types (views, raw-SQL query types) are read-only
in EF Core and never reach the audit pipeline, plus the null-safe degradation
(FindPrimaryKey() == null -> empty key list -> Serialize([]) == "").

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@Chris-Wolfgang
Merge pull request #169 from Chris-Wolfgang/dependabot/github_actions…
6fb2ade 
…/github-actions-3e14a33e79

Bump the github-actions group with 2 updates
@Chris-Wolfgang
Merge branch 'main' into docs/adr-migrations-threatmodel
df58b79
@Chris-Wolfgang
Merge branch 'main' into dependabot/nuget/benchmarks/Wolfgang.AuditTr…
0b47cfb 
…ail.EntityFrameworkCore.Benchmarks/dotnet-dependencies-3df10f6e17
@Chris-Wolfgang
Merge pull request #172 from Chris-Wolfgang/docs/adr-migrations-threa…
5e85723 
…tmodel

Docs/adr migrations threatmodel
@Chris-Wolfgang
Merge branch 'main' into dependabot/nuget/benchmarks/Wolfgang.AuditTr…
33c26f4 
…ail.EntityFrameworkCore.Benchmarks/dotnet-dependencies-3df10f6e17
@Chris-Wolfgang Chris-Wolfgang changed the base branch from main to vNext June 30, 2026 22:10
This was referenced Jun 30, 2026
Merged
Open
Open
@Chris-Wolfgang

Chris-Wolfgang commented Jun 30, 2026

Copy link
Copy Markdown
Owner

Superseded. This 21-package group bump was stale (predated the entire merged vNext line), conflicting, and mixed safe bumps with breaking members.

Resolution:

Closing in favor of #174 + #175 + #176.

@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/nuget/benchmarks/Wolfgang.AuditTrail.EntityFrameworkCore.Benchmarks/dotnet-dependencies-3df10f6e17 branch June 30, 2026 22:40
Chris-Wolfgang added a commit that referenced this pull request Jun 30, 2026
@Chris-Wolfgang
Merge pull request #174 from Chris-Wolfgang/deps/safe-bumps
45472f5 
deps: cherry-pick safe bumps from Dependabot #170
@Chris-Wolfgang Chris-Wolfgang mentioned this pull request Jul 1, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Chris-Wolfgang Chris-Wolfgang Awaiting requested review from Chris-Wolfgang Chris-Wolfgang is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file dotnet .NET related changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Chris-Wolfgang