[mdaigle]

Description

Update every eligible direct shipping-package dependency to the latest listed stable minor/patch release within its current major version. All 11 selected versions are available in the configured governed feed.

Dependency	Previous	Updated
Azure.Core	1.62.0	1.63.0
Microsoft.Identity.Client	4.84.2	4.91.1
Microsoft.Identity.Client.Broker	4.84.2	4.91.1
Azure.Security.KeyVault.Keys	4.9.0	4.10.2
Microsoft.Extensions.Caching.Memory	10.0.12	10.0.13
System.Diagnostics.DiagnosticSource	10.0.12	10.0.13
System.Text.Json	10.0.12	10.0.13
System.Threading.Channels	10.0.12	10.0.13
Microsoft.Bcl.TimeProvider	10.0.12	10.0.13
System.Threading.RateLimiting	10.0.12	10.0.13
System.Configuration.ConfigurationManager	10.0.12	10.0.13

Update the root central versions and synchronize the seven affected .NET dependency floors in every applicable SqlClient nuspec group, including netstandard2.0. MSAL and its broker stay aligned; 4.91.1 also satisfies Azure.Core 1.63.0's MSAL minimum of 4.90.0.

Both SNI packages, both IdentityModel packages, Buffers, Data.Common, Memory, RuntimeInformation, ValueTuple, Bcl.Cryptography, and Pkcs already use the newest stable release within their current major and remain unchanged. No eligible shipping updates were deferred.

Test-only, tooling-only, sample-only, SDK, and analyzer versions are out of scope. No public API, target framework, driver behavior, localization, product version, sibling/SNI range, asset-exclusion, or package-source changes. No transitive pinning or new direct dependencies.

Suggested release note: Update shipping NuGet dependencies to the latest compatible stable minor and servicing releases.

Issues

Fixes #4797

Testing

Validated on Windows with .NET SDK 10.0.402. No test source changes were needed: existing framework/dependency metadata tests and driver/extension tests exercise the changed dependencies.

Build and packaging passed:

dotnet tool restore
dotnet build build.proj -t:BuildDriver -p:Configuration=Release -v:minimal
dotnet build build.proj -t:Pack -p:Configuration=Release -p:PackBuild=false -v:minimal

The shipping build and pack completed with zero warnings/errors. Inspected all six generated nupkgs, ten framework groups, and 43 external dependency entries: all 11 updates are present; driver dependency sets, asset exclusions, and sibling/SNI ranges are preserved. Checked shipping restore graphs for the implementation, reference, unsupported-platform, Azure, and AKV projects: declared external dependencies resolve to the intended central versions, with no restore warnings/errors. git diff --check passed.

Runtime test results:

Suite	Framework	Passed	Skipped	Failed
SqlClient unit	net10.0	1,500	9	0
SqlClient unit	net462	1,480	9	0
SqlClient functional	net10.0	1,341	15	2
SqlClient functional, corrected PowerShell environment	net462	1,330	12	2
Azure extension	net10.0	48	10	0
Azure extension	net462	48	10	0
AKV Provider	net10.0	10	0	0
AKV Provider	net462	10	0	0

Commands and outcomes:

dotnet build build.proj "-t:TestSqlClientUnit;TestSqlClientFunctional;TestAzure;TestAkvProvider" -p:Configuration=Release -p:TestFramework=net10.0 -v:minimal

Failed at functional tests on two administrator-only certificate cases; unit tests passed. Because the aggregate stopped there, the remaining targets were run separately:

dotnet build build.proj "-t:TestAzure;TestAkvProvider" -p:Configuration=Release -p:TestFramework=net10.0 -v:minimal

Passed.

dotnet build build.proj "-t:TestAzure;TestAkvProvider;TestSqlClientUnit;TestSqlClientFunctional" -p:Configuration=Release -p:TestFramework=net462 -v:minimal

Azure, AKV, and unit tests passed. Functional tests initially had 85 failures from the certificate fixture's child Windows PowerShell process not finding the Cert: provider. Correcting only the process-local module path removed that fixture failure:

$env:PSModulePath = "$env:ProgramFiles\WindowsPowerShell\Modules;$env:WINDIR\System32\WindowsPowerShell\v1.0\Modules"
dotnet build build.proj -t:TestSqlClientFunctional -p:Configuration=Release -p:TestFramework=net462 -v:minimal

Result: 1,330 passed, 12 skipped, and the same two administrator-only failures as net10.0. No repository or machine-wide configuration was changed.

Baseline confirmation: both remaining failures are SqlColumnEncryptionCertificateStoreProviderShould.TestValidCertificatePaths, for the empty and my/ store paths. Both require LocalMachine certificate access unavailable to this non-elevated process. In a temporary archive of unchanged HEAD 2ea42d6afa26ee17a073d5d67be664c001667809, the following commands each reproduced exactly those two failures, with the CurrentUser case passing:

dotnet test src\Microsoft.Data.SqlClient\tests\FunctionalTests\Microsoft.Data.SqlClient.FunctionalTests.csproj --no-build --no-restore --filter 'FullyQualifiedName~SqlColumnEncryptionCertificateStoreProviderShould.TestValidCertificatePaths' --framework net10.0 -p:Configuration=Release -v:minimal
dotnet test src\Microsoft.Data.SqlClient\tests\FunctionalTests\Microsoft.Data.SqlClient.FunctionalTests.csproj --framework net462 -p:Configuration=Release --filter 'FullyQualifiedName~SqlColumnEncryptionCertificateStoreProviderShould.TestValidCertificatePaths' -v:minimal

Metadata tests (Pester 5.9.1):

Import-Module Pester -MinimumVersion 5.0
Invoke-Pester -Path .\eng\pipelines\scripts\tests\Build-Orchestration.Tests.ps1 -CI

Full suite: 83 passed, 12 failed. The identical 12 failures reproduce on unchanged HEAD and involve Windows command-stub argument parsing/path handling. The relevant framework/dependency subset passes all 53 selected tests:

$config = New-PesterConfiguration
$config.Run.Path = '.\eng\pipelines\scripts\tests\Build-Orchestration.Tests.ps1'
$config.Run.PassThru = $true
$config.Filter.FullName = 'supported target frameworks*'
$config.Output.Verbosity = 'None'
$result = Invoke-Pester -Configuration $config

No update-induced failures were identified. The full local suites are not claimed green. Default test exclusions were preserved; conditional SQL/Azure cases skipped according to existing prerequisites. Live-server manual tests and Linux/macOS execution were not performed.

Guidelines

Please review the contribution guidelines before submitting a pull request:

• Contributing

• Code of Conduct

• Best Practices

• Coding Style

• Review Process

• Tests added or updated — no source changes; existing coverage exercised as documented above.

• Public API changes documented — N/A; no public API changes.

• Verified against customer repro (if applicable) — N/A; dependency maintenance task.

• Ensure no breaking changes introduced — same-major stable updates; framework support and package structure preserved.

[Copilot]

🔵 Needs a closer look

Reported shipping checks remain pending and milestone validation is failing, leaving merge readiness unverified.

No open issues 🎉

What changed in this PR

Updates shipping dependencies for 8.0.0-preview1 while preserving target frameworks, package structure, and public APIs.

Changes:

• Raises 11 central dependency versions within their existing major versions, keeping MSAL and its broker aligned.
• Synchronizes seven dependency floors across applicable SqlClient nuspec framework groups.

File	Description
src/​Microsoft.Data.SqlClient/​src/​Microsoft.Data.SqlClient.nuspec	Aligns packaged dependency floors with central versions.
Directory.Packages.props	Updates 11 shipping dependency versions.

_{Review effort: Balanced}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.42%. Comparing base (c7ab087) to head (2ea402d).
⚠️ Report is 16 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (c7ab087) and HEAD (2ea402d). Click for more details.

HEAD has 2 uploads less than BASE

Flag	BASE (c7ab087)	HEAD (2ea402d)
CI-SqlClient	2	0

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4880      +/-   ##
==========================================
- Coverage   72.40%   65.42%   -6.98%     
==========================================
  Files         292      286       -6     
  Lines       45471    68621   +23150     
==========================================
+ Hits        32924    44897   +11973     
- Misses      12547    23724   +11177     

Flag	Coverage Δ
CI-SqlClient	?
PR-SqlClient-Project	65.42% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.