Updates to remediate CVE-2024-0056 and CVE-2023-36414

[garyhampson]

See https://techcommunity.microsoft.com/t5/sql-server-blog/released-security-updates-for-microsoft-data-sqlclient-and/ba-p/4024264 for more details.

Essentially:

If you are using Microsoft.Data.SqlClient, anywhere (.NET Core, .NET 6/7/8, .NET Framework) and you are using a version that is vulnerable you must update your NuGet package reference to an updated version: 2.1.7, 3.1.5, 4.0.5, or 5.1.3

An updated version of Microsoft.Data.SqlClient, version 5.1.4, was also released that upgrades the Azure.Identity dependency version to 1.10.3 , which addresses CVE-2023-36414 in that library. (release notes) (download)

[jpomfret]

Hey @potatoqualitee - could you take a look at this one please?

[potatoqualitee]

Oof high severity. Thank you for your PR and using dbatools 😊 I'll work on this tonight or tomorrow morning.

[garyhampson]

Hi @potatoqualitee - Thanks for catching the things that I missed! Appreciate it!

[andreasjordan]

There is a new version of dbatools.library, but this PR is still not merged. How does this work? How I can check if the new version of dbatools.library has the correct new libraries in it?

[potatoqualitee]

it's true, i just forgot to merge it but i used this branch to build it.