chore(deps): update microsoft-packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.Data.SqlClient (source)	6.1.5 → 6.1.6
Microsoft.Extensions.DependencyInjection (source)	10.0.7 → 10.0.9
Microsoft.Extensions.DependencyInjection.Abstractions (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Hosting (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Hosting.Abstractions (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Logging (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Logging.Abstractions (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Logging.Console (source)	10.0.7 → 10.0.9
Microsoft.Extensions.Options (source)	10.0.7 → 10.0.9
Microsoft.SourceLink.GitHub	10.0.203 → 10.0.300

---

Release Notes

dotnet/sqlclient (Microsoft.Data.SqlClient)

v6.1.6

This update brings the following changes since the 6.1.5 release.
See the full release notes for detailed descriptions.

Added

• Added Web Account Manager (WAM) broker support for the supported Entra ID authentication modes (Windows only), including the new ActiveDirectoryAuthenticationProviderOptions type with a UseWamBroker property, an ActiveDirectoryAuthenticationProvider(ActiveDirectoryAuthenticationProviderOptions options) constructor overload, and a cross-platform SetParentActivityOrWindowFunc(Func<object>) method.
  (#​4288,
  #​4387)

Changed

• Hardened TDS token parsing with data-length bounds checks to prevent unbounded memory allocation from a server spoofing length fields.
  (#​4340,
  #​4359)

• Updated dependencies (#​4387):

  • Updated Microsoft.Identity.Client to 4.84.2 (was 4.80.0)
  • Added Microsoft.Identity.Client.Broker 4.84.2

Fixed

• Fixed a NullReferenceException in SqlDataReader.GetChars on the PLP + SequentialAccess path when a null buffer was passed with a negative bufferIndex; it now throws ArgumentOutOfRangeException.
  (#​4159,
  #​4205)

• Fixed column master key (CMK) signature verification caching where a cached verification failure could subsequently be reported as a valid signature.
  (#​4339,
  #​4356)

dotnet/dotnet (Microsoft.Extensions.DependencyInjection)

v10.0.9

v10.0.8

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.27%. Comparing base (cf48099) to head (f25f691).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #136      +/-   ##
==========================================
- Coverage   75.36%   75.27%   -0.09%     
==========================================
  Files          36       36              
  Lines        2237     2237              
  Branches      293      293              
==========================================
- Hits         1686     1684       -2     
- Misses        442      443       +1     
- Partials      109      110       +1     

see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cf48099...f25f691. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.