Bump Azure.Identity, Microsoft.Data.SqlClient and System.Text.Json in /src/webapp01

[dependabot]

Bumps Azure.Identity, Microsoft.Data.SqlClient and System.Text.Json. These dependencies needed to be updated together.
Updates Azure.Identity from 1.13.2 to 1.11.4

Commits

• 2856f9a changelog update
• 7267469 Update azure-sdk-build-tools Repository Resource Refs in Yaml files (#43311)
• 2db9a0f AzureArcManagedIdentitySource fix
• 06dd672 Hotfix for DAC probe request
• ae13ec2 Fix ConfidentialClient's AcquireTokenSilent and AcquireTokenOnBehalfOf claims...
• 1835c8f Sync .github/workflows directory with azure-sdk-tools for PR 8131 (#43535)
• 40ff95a prep release (#43534)
• 70f5c48 [AzureMonitorDistro] Add LiveMetricsActivityProcessor only when live metrics ...
• a6c3e59 Respect SupportsOrdering property (#43531)
• 82cc7cf WCF Client/CoreWCF extension packages to use Azure Queue Storage as transport...
• Additional commits viewable in compare view

Updates Microsoft.Data.SqlClient from 5.1.3 to 6.0.2

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

Stable Release v6.0.2

This update brings the below changes over the previous release:

Fixed

• Fixed possible NullPointerException during socket receive #3283
• Fixed reference assembly definitions for SqlJson APIs #3169
• Fixed an error reading the output parameter of type JSON while executing stored procedure #3173

Changed

• Updated the below dependencies:
  • Updated Microsoft.Bcl.Cryptography from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated Microsoft.Extensions.Caching.Memory from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated System.Configuration.ConfigurationManager from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated System.Security.Cryptography.Pkcs from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281

Stable Release v6.0.1

Released to NuGet.org on 2025-01-23

Breaking Changes

• Removed support for .NET Standard. #2386
• Removed support for .NET 6 #2927
• Removed UWP (UAP) references. #2483
• Removed SQL 2000 client-side debugging support for .NET Framework #2981, #2940

Added

JSON Support

JSON data type support is now available in Microsoft.Data.SqlClient v6.0. This release introduces SqlJson type available as an extension to System.Data.SqlDbTypes:

using System;
using System.Data.SqlTypes;
using System.Text.Json;
namespace Microsoft.Data.SqlTypes
{
/// <summary>
/// Represents the JSON data type in SQL Server.
/// </summary>
public class SqlJson : INullable
{
/// <summary>
/// Parameterless constructor. Initializes a new instance of the SqlJson class which
/// represents a null JSON value.
/// </summary>
public SqlJson() { }
</tr></table>

... (truncated)

Changelog

Sourced from Microsoft.Data.SqlClient's changelog.

[Stable release 6.0.2] - 2025-04-25

This update brings the below changes over the previous release:

Fixed

• Fixed possible NullPointerException during socket receive #3283
• Fixed reference assembly definitions for SqlJson APIs #3169
• Fixed an error reading the output parameter of type JSON while executing stored procedure #3173

Changed

• Updated the below dependencies:
  • Updated Microsoft.Bcl.Cryptography from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated Microsoft.Extensions.Caching.Memory from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated System.Configuration.ConfigurationManager from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281
  • Updated System.Security.Cryptography.Pkcs from 9.0.0 to 9.0.4 for .NET 9 targeted dll. #3281

[Stable release 6.0.1] - 2025-01-23

This update brings the below changes over the previous release:

Fixed

• Fixed reference assembly definitions for SqlClientDiagnostic APIs #3097
• Fixed issue with down-level SSL/TLS version warnings #3126

Changed

• Dependency changes
  • Updated SNI dependency Microsoft.Data.SqlClient.SNI and Microsoft.Data.SqlClient.SNI.runtime to 6.0.2 #3116 #3117

[Stable release 6.0.0] - 2024-12-09

No changes since the last preview release

[Preview Release 6.0.0-preview3.24332.3] - 2024-11-27

This update brings the below changes over the previous release:

Breaking Changes

• Dropped support for .NET 6 #2927
• Removed SQL 2000 client-side debugging support for .NET Framework #2981, #2940

Added

• Enabled NuGet package auditing via NuGet.org audit source #3024
• Added support for .NET 9 #2946
• Added dependency on System.Security.Cryptography.Pkcs:9.0.0 to address SYSLIB0057#2946
• Added dependency on Microsoft.Bcl.Cryptography:9.0.0 #2946
• Added missing SqlCommand_BeginExecuteReader code sample #3009
• Added support for SqlConnectionOverrides in OpenAsync() API #2433

... (truncated)

Commits

• b16dec0 [6.0] Port localization string changes (#3296)
• 7fca8bd [6.0] Replace example password with ******** (#3287)
• d66559a Handle null socket when receiving packets of data (#3270) (#3283)
• e1eeee0 [6.0] CVE-2024-43483 - Update Microsoft.Extensions.Caching.Memory (#3281)
• 5584c44 Trim XML documentation for reference project + fix Note tags (#3233) (#3278)
• b67c321 ESRP federated credential update (move to AME) (#3261) (#3265)
• 83e0d37 Revert "[Port main->6.0] Enhance TDS Login ClientInterfaceName field with cli...
• f3ff3d3 [Port main->6.0] Enhance TDS Login ClientInterfaceName field with client info...
• ef082bc Ignore processing collation for JSON output params and enhance test coverage ...
• dafc5a5 Fix ref assemblies for GetSqlJson (#3154) (#3169)
• Additional commits viewable in compare view

Updates System.Text.Json from 9.0.0 to 9.0.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 4d2a31d.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.Data.SqlClient	6.0.2	🟢 6.7	Details Check Score Reason Code-Review 🟢 9 Found 27/30 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Binary-Artifacts 🟢 10 no binaries found in the repo Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Pinned-Dependencies 🟢 10 all dependencies are pinned SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/System.Text.Json	9.0.0	🟢 5.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 8 2 existing vulnerabilities detected Binary-Artifacts ⚠️ 0 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0

Scanned Files

• src/webapp01/webapp01.csproj