[release/8.0] Switch Microsoft.Data.Sqlite and EFCore.Sqlite to SQLite3MC.PCLRaw.bundle#38534
Open
ViveliDuCh wants to merge 5 commits into
Open
[release/8.0] Switch Microsoft.Data.Sqlite and EFCore.Sqlite to SQLite3MC.PCLRaw.bundle#38534ViveliDuCh wants to merge 5 commits into
ViveliDuCh wants to merge 5 commits into
Conversation
There was a problem hiding this comment.
Pull request overview
Backports the SQLite bundle swap on release/8.0 so the shipped Microsoft.Data.Sqlite and Microsoft.EntityFrameworkCore.Sqlite packages depend on SQLite3MC.PCLRaw.bundle (instead of SQLitePCLRaw.bundle_e_sqlite3), addressing reported SQLite vulnerability concerns.
Changes:
- Update
Microsoft.Data.Sqliteto referenceSQLite3MC.PCLRaw.bundlev2.3.5. - Update
EFCore.Sqliteto referenceSQLite3MC.PCLRaw.bundlev2.3.5.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| src/Microsoft.Data.Sqlite/Microsoft.Data.Sqlite.csproj | Switch default bundled SQLite dependency to SQLite3MC.PCLRaw.bundle v2.3.5. |
| src/EFCore.Sqlite/EFCore.Sqlite.csproj | Switch default bundled SQLite dependency to SQLite3MC.PCLRaw.bundle v2.3.5. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
24
to
28
| </PropertyGroup> | ||
|
|
||
| <ItemGroup> | ||
| <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="2.1.6" /> | ||
| <PackageReference Include="SQLite3MC.PCLRaw.bundle" Version="2.3.5" /> | ||
| </ItemGroup> |
AndriySvyryd
approved these changes
Jun 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #38257
Backports #38402
Backports the SQLite bundle swap (
SQLitePCLRaw.bundle_e_sqlite32.1.6 toSQLite3MC.PCLRaw.bundle2.3.5) torelease/8.0. See #38402 for the full rationale and dotnet/EntityFramework.Docs#5385 for the breaking-change docs.8.0-specific notes
SQLitePCLRaw3.x prerequisite migration is needed: release/8.0 does not use Central Package Management, so the new bundle's transitiveSQLitePCLRaw.core3.0.2 simply coexists with the unchanged 2.1.6 references in the sibling test projects, with no central version pins to update..csprojedits (Microsoft.Data.SqliteandEFCore.Sqlite). No benchmark csproj edit is needed on this branch (no explicit bundle reference exists there).Risk
Low to medium. Two-file servicing change. Opt-out remains available via the
.Corepackages.Testing
The existing suites plus the new
sqlite3mc.Testsproject now exerciseSQLite3MC.PCLRaw.bundle(including the encryption paths that previously failed at runtime); one functional test (Parameter_collection_Concat_column_collection) is skipped under #32561, and the branch builds clean with the suites passing.