v3.10.159.1

Highlights

⚠️ Behavior change — Windows OS build version (#1441)

On Windows desktop, DeviceInfo.OsBuild / ext.os.ver is now always a numeric major.minor.build[.ubr] value (e.g. 10.0.26100.4061), sourced from RtlGetVersion() plus the registry UBR. Previously it could be a BuildLabEx-style string (e.g. 26100.1.amd64fre.ge_release.240331-1435).
Action required: dashboards / Kusto queries that parsed the old BuildLabEx form (splitting on ., extracting branch/flavor/date) must be updated. Queries already expecting the four-part numeric form now receive correct, servicing-aware values. (Fixes #1407.)

🔐 Security — vendored dependency updates

• SQLite 3.34.1 → 3.53.1 (#1457) clears a series of public CVEs: CVE-2022-35737, CVE-2023-7104, CVE-2024-0232, CVE-2025-6965, CVE-2025-70873, CVE-2025-7709. Affects builds using the vendored SQLite (e.g. Windows); Android (Room) and consumers using platform/vcpkg SQLite are unaffected.
• Vendored zlib → 1.3.2 (#1443).

⚙️ ABI / source compatibility (#1452)

IOfflineStorage gains a new non-pure virtual GetRemainingRecordCountForShutdown() (default returns GetRecordCount()). Third-party storage implementations remain source-compatible but must be recompiled against this SDK version because the vtable grows.

🆕 New — EVT_DROPPED reason codes (#1452)

EVT_DROPPED dispatches now carry a drop-reason code in DebugEvent.param2, and two values were appended to EventDroppedReason (DROPPED_REASON_TEARDOWN_TIMEOUT, DROPPED_REASON_LATENCY_DISABLED_BY_PROFILE). Purely additive — param2 is 0 for callers that have not been updated.

🍎 Apple — reachability via NWPathMonitor (#1431)

Apple network detection now uses NWPathMonitor, fixing the iOS 18 reachability crash (#1370). The internal ODWReachability helper and the vendored Tony Million Reachability snapshot were removed. On runtimes older than iOS 12 / macOS 10.14, network type/cost is reported as Unknown. build-ios.sh now defaults to iOS 12.0.

🔧 Other notable changes

• libcurl HTTP client now uses poll() instead of select() (#1426), removing the 1024 file-descriptor hard limit in high-FD processes.
• Removed the forced ATL dependency on Windows (#1453).

---

What's Changed

• [HttpClient][Curl] Use poll api to avoid select 1024 FD hard limit by @lucianopa-msft in #1426
• Fix CI workflows, compiler flags, and flaky tests by @bmehta001 in #1415
• Remove dead headers by @bmehta001 in #1427
• Make LLVM install optional in setup-buildtools by @bmehta001 in #1433
• Restore documentation website build by @bmehta001 in #1435
• Document skipSqliteInitAndShutdown for offline storage by @bmehta001 in #1432
• Validate custom build props inputs before starting builds by @bmehta001 in #1434
• Deploy documentation to GitHub Pages by @bmehta001 in #1436
• [Docs] update community meeting status by @ThomsonTan in #1440
• Normalize vendored zlib to upstream 1.2.11 by @bmehta001 in #1442
• Update vendored zlib to 1.3.2 by @bmehta001 in #1443
• Remove stale MSBuild project entries by @bmehta001 in #1444
• CodeQL SM02383: js/incomplete-sanitization by @pablo-msft in #1455
• Remove ATL by @pablo-msft in #1453
• nlohmann to 3.12.0 by @pablo-msft in #1454
• ci: least-privilege permissions for all workflows + harden spellcheck install by @bmehta001 in #1451
• Reduce C++ CodeQL build scope by @bmehta001 in #1448
• Fix Windows desktop OS build version reporting by @bmehta001 in #1441
• Use NWPathMonitor for Apple reachability by @bmehta001 in #1431
• Stabilize iOS SQLite reservation timeout test by @Copilot in #1449
• sqlite: upgrade vendored snapshot 3.34.1 -> 3.53.1 (CVE fixes) by @bmehta001 in #1457
• Added EVT_DROPPED reason codes via param2 by @mogiligarimidi23 in #1452
• Fix cancelAllRequests drain race and spin by @bmehta001 in #1460
• Remove stale MSBuild references by @bmehta001 in #1463
• Extend iOS workflow timeout by @bmehta001 in #1465
• Apply focused CMake build cleanup by @bmehta001 in #1462
• Make Curl CA path ownership safe by @bmehta001 in #1464
• Prepare for new release - 3.10.159.1 by @bmehta001 in #1469

New Contributors

• @bmehta001 made their first contribution in #1415
• @pablo-msft made their first contribution in #1455
• @mogiligarimidi23 made their first contribution in #1452

Full Changelog: v3.10.100.1...v3.10.159.1