[5.1] Dependency Cleanup #3838

paulmedynski · 2025-12-10T11:46:37Z

Description

Removed unused dependencies across all driver and test projects.
Updated some dependencies, avoiding transitive vulnerabilities.
Updated nuspec files to remove/update dependencies accordingly.

NOTE: Some packages have DOWNGRADED major versions due to migrating from Direct dependencies to Transitive dependencies. This will have no effect on downstream apps, since the intermediate packages were already compatible with the previous Direct dependency versions. If apps were directly using those packages at-or-above the previous versions, NuGet will automatically resolve the transitive dependencies as it was doing before.

Details

MDS

Package	Target Framework	Previous Dependency Type	Previous Version	Current Dependency Type	Current Version
Microsoft.Bcl.AsyncInterfaces	net462	Transitive	6.0.0	Transitive	1.1.1
System.Buffers	net462	Direct	4.5.1	Direct	4.6.1
System.Buffers	netstandard2.0	Direct	4.5.1	Direct	4.6.1
System.Diagnostics.DiagnosticSource	net6.0	Direct	6.0.1	Transitive	6.0.1
System.Text.Encodings.Web	net462	Direct	6.0.1	Transitive	4.7.2
System.Text.Encodings.Web	net6.0	Direct	6.0.1	Transitive	4.7.2
System.Text.Encodings.Web	netstandard2.0	Direct	6.0.1	Transitive	4.7.2
System.Text.Encodings.Web	netstandard2.1	Direct	6.0.1	Transitive	4.7.2
System.Text.Json	net462	Direct	6.0.11	Transitive	4.7.2

AKV

Package	Target Framework	Previous Dependency Type	Previous Version	Current Dependency Type	Current Version
System.Buffers	net462	Direct	4.5.1	Direct	4.6.1
System.Buffers	netstandard2.0	Direct	4.5.1	Direct	4.6.1
System.Text.Encodings.Web	net462	Direct	6.0.1	Transitive	4.7.2
System.Text.Encodings.Web	net6.0	Direct	6.0.1	Transitive	4.7.2
System.Text.Encodings.Web	netstandard2.0	Direct	6.0.1	Transitive	4.7.2

Issues

Resolves #3809.

Testing

CI will validate the changes.
Manually inspected the full package dependency tree for the driver projects to ensure no major version increments.
Manuall inspected CI runs to observe that tests are being executed for the expected target frameworks and architectures.

- Updated some dependencies to avoid transitive vulnerabilities.

Copilot

Pull request overview

This PR removes unused dependencies and updates some dependency versions across the Microsoft.Data.SqlClient driver and test projects to eliminate transitive vulnerabilities without introducing breaking changes.

Key Changes:

Removed unused dependencies (System.Text.Encodings.Web, System.Text.Json, System.Diagnostics.DiagnosticSource, System.Private.Uri, Microsoft.Win32.Registry)
Updated test and common dependency versions (e.g., Microsoft.NET.Test.Sdk, Newtonsoft.Json, System.Buffers, Microsoft.Extensions.Hosting)
Reorganized and improved comments in Versions.props for better clarity

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
tools/specs/add-ons/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.nuspec	Removed `System.Text.Encodings.Web` dependency from all target frameworks
tools/specs/Microsoft.Data.SqlClient.nuspec	Removed multiple unused dependencies across all target frameworks
tools/props/Versions.props	Updated dependency versions, removed obsolete version properties, and reorganized comments for clarity
src/Microsoft.Data.SqlClient/tests/ManualTests/Microsoft.Data.SqlClient.ManualTesting.Tests.csproj	Removed unused package references
src/Microsoft.Data.SqlClient/tests/FunctionalTests/Microsoft.Data.SqlClient.Tests.csproj	Removed unused package references
src/Microsoft.Data.SqlClient/netfx/src/Microsoft.Data.SqlClient.csproj	Removed unused package references
src/Microsoft.Data.SqlClient/netfx/ref/Microsoft.Data.SqlClient.csproj	Removed unused package references
src/Microsoft.Data.SqlClient/netcore/src/Microsoft.Data.SqlClient.csproj	Removed unused package references
src/Microsoft.Data.SqlClient/netcore/ref/Microsoft.Data.SqlClient.csproj	Removed unused package references and conditional ItemGroup
src/Microsoft.Data.SqlClient/add-ons/AzureKeyVaultProvider/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.csproj	Removed unused package reference

paulmedynski

Commentary for reviewers.

paulmedynski · 2025-12-10T12:00:24Z

tools/props/Versions.props

-    <SystemTextEncodingsWebVersion>6.0.1</SystemTextEncodingsWebVersion>
-    <SystemTextJsonVersion>6.0.11</SystemTextJsonVersion>
+    <MicrosoftIdentityModelProtocolsOpenIdConnectVersion>6.35.0</MicrosoftIdentityModelProtocolsOpenIdConnectVersion>
+    <SystemBuffersVersion>4.6.1</SystemBuffersVersion>


Updated from 4.5.1 -> 4.6.1

paulmedynski · 2025-12-10T12:01:12Z

tools/props/Versions.props

+
+  <!-- MDS NetFx project dependencies -->
+  <PropertyGroup>
+    <MicrosoftDataSqlClientSniVersion>5.1.2</MicrosoftDataSqlClientSniVersion>


Moved from line 26 unchanged.

paulmedynski · 2025-12-10T12:01:30Z

tools/props/Versions.props

-    <SystemBuffersVersion>4.5.1</SystemBuffersVersion>
-    <SystemTextEncodingsWebVersion>6.0.1</SystemTextEncodingsWebVersion>
-    <SystemTextJsonVersion>6.0.11</SystemTextJsonVersion>
+    <MicrosoftIdentityModelProtocolsOpenIdConnectVersion>6.35.0</MicrosoftIdentityModelProtocolsOpenIdConnectVersion>


Moved from line 32 unchanged.

paulmedynski · 2025-12-10T12:01:51Z

tools/props/Versions.props

+
+  <!-- MDS NetStandard project dependencies -->
  <PropertyGroup>
+    <MicrosoftWin32RegistryVersion>5.0.0</MicrosoftWin32RegistryVersion>


Moved from line 40 unchanged.

paulmedynski · 2025-12-10T12:02:01Z

tools/props/Versions.props

  <PropertyGroup>
+    <MicrosoftWin32RegistryVersion>5.0.0</MicrosoftWin32RegistryVersion>
    <SystemRuntimeLoaderVersion>4.3.0</SystemRuntimeLoaderVersion>
+    <SystemSecurityCryptographyCngVersion>5.0.0</SystemSecurityCryptographyCngVersion>


Moved from line 47 unchanged.

paulmedynski · 2025-12-10T12:02:22Z

tools/props/Versions.props

    <MicrosoftSqlServerServerVersion>1.0.0</MicrosoftSqlServerServerVersion>
-    <SystemDiagnosticsDiagnosticSourceVersion>6.0.1</SystemDiagnosticsDiagnosticSourceVersion>
-    <SystemDiagnosticsPerformanceCounterVersion>6.0.1</SystemDiagnosticsPerformanceCounterVersion>
+    <SystemConfigurationConfigurationManagerVersion>6.0.1</SystemConfigurationConfigurationManagerVersion>


Moved from line 42 unchanged.

paulmedynski · 2025-12-10T12:03:01Z

tools/props/Versions.props

+
+  <!-- Common Dependencies - Shared by multiple driver or test projects-->
  <PropertyGroup>
+    <AzureCoreVersion>1.41.0</AzureCoreVersion>


Moved from line 58 unchanged.

…sions don't work with xUnit.

codecov · 2025-12-10T14:27:44Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.13%. Comparing base (cc5c81a) to head (a55bdcf).

Additional details and impacted files

@@               Coverage Diff               @@
##           release/5.1    #3838      +/-   ##
===============================================
- Coverage        71.51%   71.13%   -0.39%     
===============================================
  Files              293      293              
  Lines            61928    61928              
===============================================
- Hits             44289    44053     -236     
- Misses           17639    17875     +236

Flag	Coverage Δ
addons	`92.38% <ø> (ø)`
netcore	`74.39% <ø> (-0.64%)`	⬇️
netfx	`69.95% <ø> (+0.03%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copilot

Pull request overview

Copilot reviewed 10 out of 10 changed files in this pull request and generated no new comments.

- Removed unused dependencies across all driver and test projects.

4e6e2f7

- Updated some dependencies to avoid transitive vulnerabilities.

Copilot AI review requested due to automatic review settings December 10, 2025 11:46

paulmedynski added this to the 5.1.9 milestone Dec 10, 2025

paulmedynski linked an issue Dec 10, 2025 that may be closed by this pull request

[5.1] Remove unused dependencies #3809

Open

Copilot started reviewing on behalf of paulmedynski December 10, 2025 11:47 View session

Copilot AI reviewed Dec 10, 2025

View reviewed changes

paulmedynski commented Dec 10, 2025

View reviewed changes

- Reverted the Microsoft.NET.Test.SDK package version since newer ver…

a55bdcf

…sions don't work with xUnit.

paulmedynski marked this pull request as ready for review December 10, 2025 20:27

paulmedynski requested a review from a team as a code owner December 10, 2025 20:27

Copilot AI review requested due to automatic review settings December 10, 2025 20:27

Copilot started reviewing on behalf of paulmedynski December 10, 2025 20:27 View session

Copilot AI reviewed Dec 10, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[5.1] Dependency Cleanup #3838

[5.1] Dependency Cleanup #3838

Uh oh!

paulmedynski commented Dec 10, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

paulmedynski left a comment

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

paulmedynski Dec 10, 2025

Uh oh!

codecov bot commented Dec 10, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[5.1] Dependency Cleanup #3838

Are you sure you want to change the base?

[5.1] Dependency Cleanup #3838

Uh oh!

Conversation

paulmedynski commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Details

MDS

AKV

Issues

Testing

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

paulmedynski left a comment

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

paulmedynski Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

codecov bot commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

paulmedynski commented Dec 10, 2025 •

edited

Loading

codecov bot commented Dec 10, 2025 •

edited

Loading