Changelog v3.2.2 (2025-12-24)
Version 3.2.2 (2025-12-24)
Bug Fixes
- Fixed sensitive data exposure in command logs for auth endpoints. When
ObfuscateAuthParameterLogValuesis enabled (default), query string parameters are now stripped from the logged URL to prevent credentials from appearing in logs. - Fixed
traceIdbeing included in ProblemDetails error responses whenErrorHandlingOptionsconfig section is missing. Now correctly removestraceIdby default to match the behavior when the config section exists. - Fixed SSL config key mismatch: renamed
HttpsRedirectiontoUseHttpsRedirectionfor consistency withUseHsts. - Fixed missing
TokensPerPeriodproperty in TokenBucket rate limiter configuration. - Fixed
MetadataQuerySchemacomment to accurately describe behavior (when null, no search path is set).
Performance Improvements
- Replaced
TaskwithValueTaskfor frequently-called private async methods to reduce heap allocations in hot paths:PrepareCommand- called before every query executionOpenConnectionAsync- often completes synchronously when connection is already openReturnErrorAsync- error handling pathChallenge(BasicAuthHandler) - authentication challenge response