Update central package versions

[cheenamalhotra]

Description

This PR updates the centrally managed package versions in Directory.Packages.props for the .NET 9-compatible dependency set and aligns the generated package dependency metadata in src/Microsoft.Data.SqlClient/src/Microsoft.Data.SqlClient.nuspec with those target-framework-specific versions.

The change keeps Microsoft.Extensions.Caching.Memory, Microsoft.Bcl.Cryptography, System.Threading.RateLimiting, System.Configuration.ConfigurationManager, and System.Security.Cryptography.Pkcs aligned on 9.0.18 for net9.0, while preserving the existing 8.0.0/8.0.1 pins for non-net9-compatible target frameworks. It also adds System.Threading.RateLimiting to the nuspec dependency groups so the packaged dependency metadata matches the project references.

Issues

N/A

Testing

• Built Microsoft.Data.SqlClient for net8.0
• Built the functional test project for net8.0
• Validated package restore/build against nuget.org for the updated dependency set

Guidelines

• Contributing
• Code of Conduct
• Best Practices
• Coding Style
• Review Process

[paulmedynski]

There is also Microsoft.Extensions.Hosting in the test CPM.

You will also need to update the SqlClient nuspec to advertise these updated dependencies.

Are we planning to update any other dependencies for 7.1, or just these few 9.0.x deps?

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Note

This error may be related to your runner configuration. You can now configure runners for Copilot code review separately from Copilot cloud agent by creating a copilot-code-review.yml file with your setup steps. Read the docs for details.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

Suppressed comments (1)

Directory.Packages.props:106

• The PR description says the non-net9-compatible TFMs keep an "8.0.0" pin, but this file currently uses a mix of 8.0.0 and 8.0.1 (e.g., Microsoft.Extensions.Caching.Memory is 8.0.1). Please update the PR description to reflect the actual pinned versions (e.g., "8.0.x" / "existing 8.0.* pins") so it matches the change being reviewed.

    <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="9.0.18" />
  </ItemGroup>

  <ItemGroup Condition="!$([MSBuild]::IsTargetFrameworkCompatible('$(TargetFramework)', 'net9.0'))">
    <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />

[cheenamalhotra]

Are we planning to update any other dependencies for 7.1, or just these few 9.0.x deps?

No more updates for 7.1, the next update on Azure deps will be for 8.0 milestone.

[paulmedynski]

I think we still need SqlClient nuspec changes for these updated deps.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.77%. Comparing base (deabcc2) to head (ed512c9).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4507      +/-   ##
==========================================
- Coverage   64.71%   62.77%   -1.95%     
==========================================
  Files         288      283       -5     
  Lines       44088    67041   +22953     
==========================================
+ Hits        28532    42082   +13550     
- Misses      15556    24959    +9403     

Flag	Coverage Δ
CI-SqlClient	?
PR-SqlClient-Project	62.77% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.