Repository navigation
This update brings the following changes since the 6.1.7 release:
Changed
-
Updated the
System.Security.Cryptography.Pkcsdependency to 8.0.2 (was 8.0.1) for .NET Framework 4.6.2, .NET 8.0, and .NET Standard 2.0, and updated theMicrosoft.Extensions.Caching.Memory,System.Configuration.ConfigurationManager, andSystem.Security.Cryptography.Pkcsdependencies to 9.0.21 (was 9.0.11) for .NET 9.0.
(#4842, #4862, #4870) -
Improved the error reported when
Active Directory Interactiveauthentication through the Windows Web Account Manager (WAM) broker fails because the host has no parent window, such as a service or Azure Functions host. The resulting error now explains the supported alternatives: supply a parent window withSetParentActivityOrWindowFunc, useActive Directory Defaultwith a configured non-interactive credential, or supply a customApplicationClientIdwithUseWamBrokerdisabled. The original MSAL error code and inner exception are preserved, and authentication selection, retry behavior, and other failures are unchanged. (Windows only)
(#4854, #4858, #4918)
Fixed
-
Fixed the managed SNI path ignoring
HostNameInCertificateduring server certificate validation. WhenHostNameInCertificateis set, it is now the only host name the server certificate is validated against, and certificates that do not match it are rejected. Default host-name selection when the property is not set, certificate chain validation,ServerCertificatematching, and the connection destination are unchanged. (net8.0/net9.0 only)
(#4905, #4909) -
Fixed Always Encrypted enclave session caching so that cached enclave sessions are isolated by attestation protocol. A session established with one
Attestation Protocolsetting is no longer reused by a connection to the same server, database, and attestation URL that uses a different protocol.
(#4829, #4868) -
Fixed
SqlDataReader.HasRowsreturningfalsewhen a result set contains rows but the server sends multiple informational messages, or an informational message before anORDERtoken, ahead of the first row. Empty results still reportfalse, andInfoMessagedelivery is unchanged.
(#3018, #4773, #4898) -
Fixed an intermittent
InvalidOperationException("Nullable object must have a value") from statistics bookkeeping when commands complete concurrently on a MARS connection. This issue was reported as a regression starting with 6.1.4.
(#4778, #4875, #4896) -
Fixed Entra ID authentication when the server supplies an authority URL with an OAuth endpoint suffix, such as
https://login.microsoftonline.com/<tenant>/oauth2/authorizereturned by the Dataverse/Dynamics 365 TDS endpoint. The provider now extracts the tenant from the first path segment and uses the normalized authority for Azure.Identity credentials, MSAL, and their cache keys. An authority URL that cannot be parsed now fails with a clear, localizedArgumentExceptionnaming the authority. Bare tenant authority URLs used by Azure SQL and Fabric retain their existing behavior.
(#4496, #4521, #4791, #4807)
Target Platform Support
- .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
- .NET 8.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)
- .NET Standard 2.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)
Full details: release-notes/6.1/6.1.8.md