chore(deps): update microsoft-packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.Data.SqlClient (source)	7.0.2 → 7.0.3
Microsoft.Extensions.DependencyInjection (source)	10.0.10 → 10.0.12
Microsoft.Extensions.DependencyInjection.Abstractions (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Hosting (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Hosting.Abstractions (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Logging (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Logging.Abstractions (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Logging.Console (source)	10.0.10 → 10.0.12
Microsoft.Extensions.Options (source)	10.0.10 → 10.0.12
Microsoft.SourceLink.GitHub	10.0.301 → 10.0.401

---

Release Notes

dotnet/sqlclient (Microsoft.Data.SqlClient)

v7.0.3

Changed

• Updated the Microsoft.Data.SqlClient.SNI and Microsoft.Data.SqlClient.SNI.runtime dependencies to 6.0.3 (was 6.0.2).
  (#​4599)

Fixed

• Fixed a SqlBulkCopy regression in environments where the application login cannot read sys.all_columns. Bulk copy now falls back to the earlier column-discovery behavior when that permission is unavailable. Support for hidden columns and SQL Graph column aliases still requires access to the metadata view.
  (#​4370, #​4306, #​4402)

• Fixed a memory-allocation regression in connection and command operations caused by formatting diagnostic strings even when tracing was disabled. Also corrected trace messages that reported an incorrect object ID or could throw FormatException when traced values contained braces.
  (#​4528, #​4533)

• Fixed ServerCertificate validation on the managed SNI path so the configured certificate is compared against the server certificate even when the server certificate passes chain and host-name validation. When certificate validation is enabled, a missing, unreadable, or invalid certificate file, a certificate mismatch, or a missing server certificate now causes the TLS handshake to fail instead of bypassing the configured certificate check. (net8.0/net9.0 only)
  (#​4445, #​4583)

• Fixed Always Encrypted VSM/HGS enclave attestation to verify that the enclave public key used to establish a session matches the key committed to by the signed attestation report. Missing, malformed, or mismatched key-binding data now causes attestation to fail before the session secret is derived.
  (#​4532, #​4553)

• Fixed SqlConnection.AccessTokenCallback not disabling Transparent Network IP Resolution by default, making it consistent with SqlConnection.AccessToken. An explicitly configured TransparentNetworkIPResolution connection-string value still takes precedence. (net462 only)
  (#​4520, #​4561)

• Fixed authentication state handling so clearing SqlConnection.AccessToken, AccessTokenCallback, or SspiContextProvider preserves the other authentication values in the connection pool key. Cloning a connection or updating its credential also preserves its SspiContextProvider. Combining a non-null SspiContextProvider with AccessToken or AccessTokenCallback now throws InvalidOperationException instead of silently discarding authentication state; applications must use one authentication mechanism at a time.
  (#​4520, #​4561, #​4644)

• Fixed configurable retry logic installing a permanent, process-wide assembly-resolution handler that could interfere with unrelated assembly loading. The handler is now active only while an explicitly configured custom retry provider is resolved and constructed, and probes AppContext.BaseDirectory instead of the current working directory. Place custom retry assemblies in the application base directory; dependencies loaded after provider construction must be resolvable through normal application dependency resolution or an application-provided handler. (net8.0/net9.0 only)
  (#​2214, #​4547, #​4663)

Companion packages

• Released Microsoft.Data.SqlClient.Extensions.Azure 7.0.3 with the Entra ID authority parsing fix for Dataverse/Dynamics 365 connections. See release notes.
• Released version-aligned Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider, Microsoft.Data.SqlClient.Extensions.Abstractions, and Microsoft.Data.SqlClient.Internal.Logging 7.0.3 with no functional or API changes. See the Azure Key Vault provider, Abstractions, and Logging release notes.

dotnet/dotnet (Microsoft.Extensions.DependencyInjection)

v10.0.12

v10.0.11

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.57%. Comparing base (0bd8ad5) to head (4010b51).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #152      +/-   ##
==========================================
- Coverage   72.85%   72.57%   -0.29%     
==========================================
  Files          65       65              
  Lines        4974     4974              
  Branches      607      607              
==========================================
- Hits         3624     3610      -14     
- Misses       1140     1153      +13     
- Partials      210      211       +1     

see 5 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0bd8ad5...4010b51. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.