Skip to content

Bump the dotnet-dependencies group with 7 updates - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/ContactRelay.Tests/dotnet-dependencies-c247b6be0e
Closed

Bump the dotnet-dependencies group with 7 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/ContactRelay.Tests/dotnet-dependencies-c247b6be0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown

Updated Microsoft.Data.SqlClient from 7.0.1 to 7.0.2.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.2

This update brings the following changes since the 7.0.1 release:

Important — package version alignment: Starting with 7.0.2, the Microsoft.Data.SqlClient driver and its companion packages share a single aligned version. The following packages now ship together as 7.0.2:

  • Microsoft.Data.SqlClient
  • Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider
  • Microsoft.Data.SqlClient.Extensions.Azure
  • Microsoft.Data.SqlClient.Extensions.Abstractions
  • Microsoft.Data.SqlClient.Internal.Logging

(Microsoft.SqlServer.Server continues to version independently and remains at 1.0.0.)

Applications must reference the same versions of Microsoft.Data.SqlClient and its extensions for best compatibility. In particular, applications that reference Microsoft.Data.SqlClient.Extensions.Azure must upgrade it to 7.0.2 when upgrading Microsoft.Data.SqlClient to 7.0.2.

Breaking change (.NET Framework only): As part of this alignment, the AssemblyVersion of Microsoft.Data.SqlClient.Extensions.Azure, Microsoft.Data.SqlClient.Extensions.Abstractions, and Microsoft.Data.SqlClient.Internal.Logging changed from 1.0.0.0 to 7.0.0.0 (the Microsoft.Data.SqlClient and Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider assembly versions are unchanged). On .NET Framework, AssemblyVersion is part of the strong-name identity, so applications that drop these assemblies into an existing deployment without rebuilding must rebuild against the 7.0.2 packages (or add binding redirects). Applications on .NET / .NET Core are not affected.

Companion package release notes

The following companion packages ship aligned as 7.0.2. See their individual release notes for package-specific changes (including the Microsoft.Data.SqlClient.Extensions.Azure WAM broker support):

Fixed

  • Fixed a NullReferenceException in SqlCommand.Cancel(). The diagnostic message built during cancellation dereferenced the active connection directly; it now uses a null-conditional access so cancellation no longer throws when the connection has already been torn down.
    (#​4372,#​4373)

  • Fixed a NullReferenceException in SqlDataReader when calling GetBytes/GetChars with a null destination buffer. The argument-validation path that constructs the InvalidDestinationBufferIndex exception now guards against the null buffer so the correct ArgumentException is surfaced instead of an NRE.
    (#​4159,#​4206)

  • Fixed Always Encrypted column master key signature verification incorrectly reusing cached results. The SignatureVerificationCache lookup logic was corrected so signature verification outcomes are cached and retrieved against the correct key, preventing stale or mismatched verification results.
    (#​4339,#​4343)

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

  • Added bounds checking when parsing TDS token and feature-extension-acknowledgment data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
    (#​4340,#​4358)

Who Benefits:

  • All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.WindowsServices from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting.WindowsServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Graph from 6.1.0 to 6.5.0.

Release notes

Sourced from Microsoft.Graph's releases.

6.5.0

6.5.0 (2026-08-05)

Features

Bug Fixes

6.4.0

6.4.0 (2026-07-21)

Features

  • generation: update request builders and models (1688dbc)

6.3.0

6.3.0 (2026-07-10)

Features

  • generation: update request builders and models (23ebe4d)
  • generation: update request builders and models (9ce59b4)
  • generation: update request builders and models (21088d5)

Bug Fixes

6.2.0

6.2.0 (2026-06-05)

Features

  • generation: update request builders and models (802d755)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Sentry.Extensions.Logging from 6.6.0 to 6.8.0.

Release notes

Sourced from Sentry.Extensions.Logging's releases.

6.8.0

Features ✨

Logs

  • feat(logs): add log4net integration by @​Flash0ver in #​5172
  • feat(logs): add NLog integration by @​Flash0ver in #​5176

Other

  • feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @​jamescrosswell in #​5181
  • Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #​5182 by @​jamescrosswell in #​5182
  • Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #​5333 by @​jamescrosswell in #​5333
  • The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @​bitsandfoxes in #​5365

Fixes 🐛

  • fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @​Ermabo in #​5393
  • The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @​jamescrosswell in #​5412
  • fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @​jamescrosswell in #​5330
  • fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @​jamescrosswell in #​5381

Dependencies ⬆️

Deps

  • chore(deps): update CLI to v3.6.1 by @​github-actions in #​5417
  • chore(deps): update Native SDK to v0.15.4 by @​github-actions in #​5416
  • chore(deps): update Cocoa SDK to v9.22.0 by @​github-actions in #​5395
  • chore(deps): update Java SDK to v8.49.0 by @​github-actions in #​5398

Other

  • ci: drop install-zstd workaround by @​jpnurmi in #​5391
  • docs: add Sentry.OpenTelemetry.Exporter to README.md by @​Flash0ver in #​5194
  • meta: Update CODEOWNERS by @​Flash0ver in #​5386

6.7.0

Features ✨

  • feat(android): expose tombstone options via SentryOptions.Native by @​jamescrosswell in #​5226
  • Add IgnoreTransactions option to filter out transactions by name, matching substrings or regular expressions against the transaction name (#​5377) by @​Adham-Kiwan in #​5377
  • feat: Add BeforeSendFeedback callback to inspect, modify, or drop user feedback before it's sent by @​vladbrincoveanu in #​5361
  • Add public API for checking unhandled exceptions (SentryEventExtensions.IsFromUnhandledException) and terminal exceptions (SentryEventExtensions.IsFromTerminalException) by @​jamescrosswell in #​5177
  • feat: Add PreferTransactionNameProvider option by @​jamescrosswell in #​5159
  • feat: Add exponential backoff and log deduplication to Spotlight by @​mattico in #​5025

Fixes 🐛

  • fix(otel): only set Scope.Transaction in SentrySpanProcessor when null by @​tsushanth in #​5337
  • fix: LNK4291 on Native AOT WinExe with Control Flow Guard by @​jamescrosswell in #​5298
  • fix: OpenTelemetry transactions for failed requests keep their route name and otel context by @​jamescrosswell in #​5310
  • fix: populate Default attributes on structured logs from current scope by @​jamescrosswell in #​5216
  • fix: [.NET 10] PageNavigationExtensions updated for public Page properties by @​nor0x in #​5278

Dependencies ⬆️

Deps

  • chore(deps): update Java SDK to v8.48.0 by @​github-actions in #​5360
  • chore(deps): update Cocoa SDK to v9.21.0 by @​github-actions in #​5359
  • chore(deps): update Native SDK to v0.15.3 by @​github-actions in #​5353
  • chore(deps): update Cocoa SDK to v9.20.0 by @​github-actions in #​5354
  • chore(deps): update Java SDK to v8.47.0 by @​github-actions in #​5338
  • chore(deps): update Cocoa SDK to v9.19.1 by @​github-actions in #​5336
  • chore(deps): update CLI to v3.6.0 by @​github-actions in #​5329
  • chore(deps): update Cocoa SDK to v9.19.0 by @​github-actions in #​5316
  • chore(deps): update Java SDK to v8.46.0 by @​github-actions in #​5321
  • chore(deps): update Java SDK to v8.45.0 by @​github-actions in #​5315
  • chore(deps): update Native SDK to v0.15.2 by @​github-actions in #​5309
  • chore(deps): update Cocoa SDK to v9.18.0 by @​github-actions in #​5264
  • chore(deps): update Java SDK to v8.44.1 by @​github-actions in #​5263
  • chore(deps): update CLI to v3.5.1 by @​github-actions in #​5279
  • chore(deps): update Native SDK to v0.15.1 by @​github-actions in #​5282

Other

  • Added Sentry.Samples.OpenTelemetry.MongoDB by @​jamescrosswell in #​5335
  • docs: add XML comments for boolean return of Sentry.Extensions.Logging Filters by @​Flash0ver in #​5297
  • LatestWindowsTfm added to Directory.Build.props by @​nor0x in #​5277

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Data.SqlClient from 7.0.1 to 7.0.2
Bumps Microsoft.Extensions.Configuration from 10.0.8 to 10.0.10
Bumps Microsoft.Extensions.Hosting from 10.0.8 to 10.0.10
Bumps Microsoft.Extensions.Hosting.WindowsServices from 10.0.8 to 10.0.10
Bumps Microsoft.Graph from 6.1.0 to 6.5.0
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1
Bumps Sentry.Extensions.Logging from 6.6.0 to 6.8.0

---
updated-dependencies:
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Hosting.WindowsServices
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Graph
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Sentry.Extensions.Logging
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 6, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 13, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/ContactRelay.Tests/dotnet-dependencies-c247b6be0e branch August 13, 2026 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants