Update dependency Microsoft.Data.SqlClient to 5.1.3 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.Data.SqlClient (source)	5.1.1 → 5.1.3

GitHub Vulnerability Alerts

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

---

Release Notes

dotnet/sqlclient (Microsoft.Data.SqlClient)

v5.1.3

This update brings the below changes over the previous release:

Fixed

• Fixed encryption downgrade issue. CVE-2024-0056
• Fixed certificate chain validation logic flow.

v5.1.2

This update brings the following changes since the 5.1.6 release:

Fixed

• Fixed possible NullPointerException during socket receive (PR #​3285)
• Fixed inconsistencies between source and reference projects (PR #​3180)

Changed

• Updated the following dependencies:
  • Microsoft.Data.SqlClient.SNI 5.1.1 to 5.1.2 for .NET Framework on Windows (PR #​3294)
  • Microsoft.Data.SqlClient.SNI.runtime 5.1.1 to 5.1.2 for .NET on Windows (PR #​3294)
  • Microsoft.Extensions.Caching.Memory 6.0.1 to 6.0.3 - Avoid CVE-2024-43483 (PR #​3068)
  • Microsoft.Extensions.Hosting 6.0.0 to 6.0.1 - Avoid transitive dependency on vulnerable System.Text.Json 6.0.0 (PR #​3207)
  • System.Private.Uri 4.3.2 - Avoid transitive CVE-2019-0820 (PR #​3077)
  • System.Text.Encodings.Web 6.0.0 to 6.0.1 - Avoid transitive downgrade for .NET Framework targets (PR #​3279)
  • System.Text.Json 6.0.11 - Avoid transitive dependencies on older vulnerable versions for .NET Framework targets (PR #​3279)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.