Update dependency Microsoft.Data.SqlClient to 5.1.3 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.Data.SqlClient (source)	5.1.1 -> 5.1.3

GitHub Vulnerability Alerts

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

---

Release Notes

dotnet/sqlclient (Microsoft.Data.SqlClient)

v5.1.3

This update brings the below changes over the previous release:

Fixed

• Fixed encryption downgrade issue. CVE-2024-0056
• Fixed certificate chain validation logic flow.

v5.1.2

This update brings the below changes over the previous release:

Fixed

• Fixed access violation when using SQL Express user instance. #​2101
• Fixed Always Encrypted secure enclave retry logic for async queries. #​1988
• Fixed LocalDb and managed SNI by improving the error messages and avoid falling back to the local service. #​2129
• Fixed .NET and .NET Standard file version. 2093
• Fixed non-string values and SqlConnectionStringBuilder property indexer issue. #​2018
• Fixed SqlConnectionEncryptOption type conversion by introducing the SqlConnectionEncryptOptionConverter attribute when using appsettings.json files. #​2057
• Fixed Transient fault handling issue with OpenAsync. #​1983
• Fixed activity correlator to continue use of same GUID for connection activity. #​1997

Changed

• Updated Microsoft.Data.SqlClient.SNI (.NET Framework dependency) and Microsoft.Data.SqlClient.SNI.runtime (.NET Core/Standard dependency) version to 5.1.1. #​2123

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.