dotnet · mdaigle · Sep 9, 2026 · Aug 7, 2026 · Aug 8, 2026 · Aug 10, 2026
diff --git a/eng/pipelines/ci/kerberos/sqlclient-ci-kerberos-pipeline.yml b/eng/pipelines/ci/kerberos/sqlclient-ci-kerberos-pipeline.yml
@@ -294,3 +294,8 @@ stages:
       - template: /eng/pipelines/common/templates/jobs/ci-code-coverage-job.yml@self
         parameters:
           upload: false
+          # This pipeline does not import the CI build variables, so the pool
+          # must be named explicitly. Use a minimal Linux image because merging
+          # coverage does not require SQL Server.
+          poolName: ADO-Trusted-Linux-WestUS2
+          vmImage: ADO-UB24
diff --git a/eng/pipelines/ci/managed-instance/sqlclient-ci-managed-instance-stage.yml b/eng/pipelines/ci/managed-instance/sqlclient-ci-managed-instance-stage.yml
@@ -68,7 +68,7 @@ stages:
           operatingSystem: Windows
           runtime: ${{ runtime }}
           useManagedSNI: false
-          vmImage: ADO-MMS25-SQL25
+          vmImage: ADO-Win25
 
     - ${{ each runtime in parameters.netTestRuntimes }}:
       - template: /eng/pipelines/ci/managed-instance/sqlclient-ci-managed-instance-job.yml@self
@@ -81,7 +81,7 @@ stages:
           operatingSystem: Windows
           runtime: ${{ runtime }}
           useManagedSNI: false
-          vmImage: ADO-MMS25-SQL25
+          vmImage: ADO-Win25
 
       - template: /eng/pipelines/ci/managed-instance/sqlclient-ci-managed-instance-job.yml@self
         parameters:
@@ -93,7 +93,7 @@ stages:
           operatingSystem: Windows
           runtime: ${{ runtime }}
           useManagedSNI: true
-          vmImage: ADO-MMS25-SQL25
+          vmImage: ADO-Win25
 
     # ----------------------------------------------------------------------------------------------
     # Linux: one job per .NET runtime (managed SNI is always used on non-Windows).
@@ -108,4 +108,4 @@ stages:
           dotnetVerbosity: ${{ parameters.dotnetVerbosity }}
           operatingSystem: Linux
           runtime: ${{ runtime }}
-          vmImage: ADO-UB24-SQL25
+          vmImage: ADO-UB24
@@ -83,13 +83,18 @@ parameters:
       - detailed
       - diagnostic
 
+variables:
+  - template: /eng/pipelines/libraries/ci-build-variables.yml@self
+
 # The stages to run.
 stages:
 
   # Generate secrets.  We use these for the local SQL Server 'sa' logins.
   - template: /eng/pipelines/stages/generate-secrets-ci-stage.yml@self
     parameters:
       debug: ${{ parameters.debug }}
+      poolName: $(ci_var_defaultPoolName)
+      vmImage: ADO-UB24
 
   # Run the stress tests.
   - template: /eng/pipelines/ci/stress/sqlclient-ci-stress-stage.yml@self

@@ -19,15 +19,18 @@ parameters:
       # Reference sibling packages as C# projects.
       - Project
 
-  # The name of Azure Pipelines pool to use.
+  # The name of the 1ES pool to use.
+  #
+  # Supplied by the caller so that the pool name flows down from the pipeline
+  # root, rather than being read from a variable group at this depth.
+  #
   - name: poolName
     type: string
-    default: $(ci_var_defaultPoolName)
 
-  # The name of the Azure Pipelines image to use within the pool.
+  # The imageOverride capability required from the 1ES pool.
   - name: imageOverride
     type: string
-    default: ADO-MMS22-SQL19
+    default: ADO-Win25
 
   # The name of the Abstractions pipeline artifact to download when referenceType is 'Package'.
   - name: abstractionsArtifactsName

@@ -19,13 +19,28 @@ parameters:
   - name: upload
     type: boolean
 
+  # The name of the 1ES pool to run in.
+  #
+  # Supplied by the caller so that the pool name flows down from the pipeline
+  # root, rather than being read from a variable group at this depth.
+  #
+  - name: poolName
+    type: string
+
+  # The name of the VM image to run on, within the pool.
+  - name: vmImage
+    type: string
+    default: ADO-UB24
+
 jobs:
   - job: publish_code_coverage
     displayName: Publish Code Coverage
 
     pool:
-      name: Azure Pipelines
-      vmImage: ubuntu-latest
+      name: ${{ parameters.poolName }}
+
+      demands:
+        - imageOverride -equals ${{ parameters.vmImage }}
 
     variables:
       # Use a temp directory that is cleaned up after each job runs.  This helps

@@ -25,6 +25,26 @@ parameters:
     type: object
     default: [net8.0, net9.0, net10.0]
 
+  # The target frameworks to build and run tests for on Windows, for the
+  # primary test configurations (local SQL Server 2025 and Azure SQL).
+  #
+  # These configurations carry the broadest coverage, so newer runtimes are
+  # validated here first before being enabled across every configuration.
+  #
+  # Note: The driver does not ship a net10.0 target framework, so net10.0 test
+  # assemblies resolve the net9.0 driver build.  Including net10.0 here
+  # validates the driver running on the .NET 10 runtime.
+  #
+  - name: primaryTargetFrameworks
+    type: object
+    default: [net462, net8.0, net9.0, net10.0]
+
+  # The target frameworks to build and run tests for on Unix, for the primary
+  # test configurations (local SQL Server 2025 and Azure SQL).
+  - name: primaryTargetFrameworksUnix
+    type: object
+    default: [net8.0, net9.0, net10.0]
+
   # Netcore Version for Test Utilities
   - name: netcoreVersionTestUtils
     type: object
@@ -74,6 +94,18 @@ parameters:
       - Debug
       - Release
 
+  # The name of the 1ES pool that all CI jobs run in.
+  #
+  # This is the single place in the CI pipelines where the pool name is read
+  # from a variable group; every stage and job below receives it as a
+  # parameter so that the value flows down from here.
+  #
+  # 'ci_var_defaultPoolName' is defined in the 'ADO Build properties' variable
+  # group (see /eng/pipelines/libraries/ci-build-variables.yml), for both the
+  # Public and ADO.Net projects.  The PR pipelines are configured from a
+  # different variable group and use '$(PoolNameDefault)' instead; see
+  # /eng/pipelines/pr/sqlclient-pr-pipeline.yml.
+  #
   - name: defaultPoolName
     type: string
     default: $(ci_var_defaultPoolName)
@@ -94,6 +126,15 @@ parameters:
     type: boolean
     default: true
 
+  # If true, run manual tests against SQL Server 2022.
+  #
+  # The primary test configurations run against SQL Server 2025, so SQL Server
+  # 2022 is CI-only coverage.  PR pipelines disable it to keep validation fast.
+  #
+  - name: runSql22Tests
+    type: boolean
+    default: true
+
   # Build suffix appended to the prerelease tag. PR pipelines pass 'pr',
   # CI pipelines pass 'ci'. Official builds leave this empty.
   - name: buildSuffix
@@ -128,23 +169,25 @@ variables:
     value: SqlServer.Artifacts
 
 stages:
-  # Compute all package versions up-front. Downstream stages consume these via
-  # Each build/test stage computes the versions it needs directly from the
-  # compute_versions_ci stage outputs, so no version parameters are passed here.
+  # Compute all package versions up front. Build and test stages consume the
+  # compute_versions_ci outputs directly, so no version parameters are passed here.
   - template: /eng/pipelines/stages/compute-versions-ci-stage.yml@self
     parameters:
+      poolName: ${{ parameters.defaultPoolName }}
       buildSuffix: ${{ parameters.buildSuffix }}
 
   # Generate secrets used throughout the pipeline.
   - template: /eng/pipelines/stages/generate-secrets-ci-stage.yml@self
     parameters:
+      poolName: ${{ parameters.defaultPoolName }}
       debug: ${{ parameters.debug }}
 
   # Build the SqlServer package, and publish it to the pipeline artifacts
   # under the given artifact name.  This runs in parallel with the Secrets
   # generation stage since it has no package dependencies.
   - template: /eng/pipelines/stages/build-sqlserver-package-ci-stage.yml@self
     parameters:
+      adoPoolName: ${{ parameters.defaultPoolName }}
       sqlServerArtifactsName: $(sqlServerArtifactsName)
       buildConfiguration: ${{ parameters.buildConfiguration }}
       debug: ${{ parameters.debug }}
@@ -155,6 +198,7 @@ stages:
   # generation stage since it has no package dependencies.
   - template: /eng/pipelines/stages/build-logging-package-ci-stage.yml@self
     parameters:
+      adoPoolName: ${{ parameters.defaultPoolName }}
       loggingArtifactsName: $(loggingArtifactsName)
       buildConfiguration: ${{ parameters.buildConfiguration }}
       debug: ${{ parameters.debug }}
@@ -167,6 +211,7 @@ stages:
   # Abstractions has a package dependency on Logging.
   - template: /eng/pipelines/stages/build-abstractions-package-ci-stage.yml@self
     parameters:
+      adoPoolName: ${{ parameters.defaultPoolName }}
       abstractionsArtifactsName: $(abstractionsArtifactsName)
       buildConfiguration: ${{ parameters.buildConfiguration }}
       debug: ${{ parameters.debug }}
@@ -185,6 +230,7 @@ stages:
   #
   - template: /eng/pipelines/stages/build-sqlclient-package-ci-stage.yml@self
     parameters:
+      adoPoolName: ${{ parameters.defaultPoolName }}
       abstractionsArtifactsName: $(abstractionsArtifactsName)
       buildConfiguration: ${{ parameters.buildConfiguration }}
       loggingArtifactsName: $(loggingArtifactsName)
@@ -205,6 +251,7 @@ stages:
   # given artifact name.
   - template: /eng/pipelines/stages/build-azure-package-ci-stage.yml@self
     parameters:
+      adoPoolName: ${{ parameters.defaultPoolName }}
       abstractionsArtifactsName: $(abstractionsArtifactsName)
       azureArtifactsName: $(azureArtifactsName)
       buildConfiguration: ${{ parameters.buildConfiguration }}
@@ -228,6 +275,7 @@ stages:
   # published as pipeline artifacts.
   - template: /eng/pipelines/stages/verify-nuget-packages-ci-stage.yml@self
     parameters:
+      poolName: ${{ parameters.defaultPoolName }}
       abstractionsArtifactsName: $(abstractionsArtifactsName)
       azureArtifactsName: $(azureArtifactsName)
       loggingArtifactsName: $(loggingArtifactsName)
@@ -275,6 +323,7 @@ stages:
           - template: /eng/pipelines/common/templates/jobs/ci-code-coverage-job.yml@self
             parameters:
               debug: ${{ parameters.debug }}
+              poolName: ${{ parameters.defaultPoolName }}
               # We only want to upload coverage results to CodeCov from certain
               # pipelines.  We use the pipeline name (Build.DefinitionName) to
               # choose.  This is a predefined variable that is available at
@@ -412,7 +461,7 @@ stages:
           pool: ${{parameters.defaultPoolName }}
           images:
             Win25_Sql25: ADO-MMS25-SQL25
-          TargetFrameworks: ${{parameters.targetFrameworks }}
+          TargetFrameworks: ${{parameters.primaryTargetFrameworks }}
           netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
           buildPlatforms: ${{parameters.buildPlatforms }}
           testSets: ${{parameters.testSets }}
@@ -479,13 +528,13 @@ stages:
             SQLRootPath: $(SQL25RootPath)
             instanceName: $(NamedInstance)
 
-        # Windows Server 2022 and Windows 11, x64 build platform, with Azure SQL Server.
+        # Windows Server 2025 and Windows 11, x64 build platform, with Azure SQL Server.
         windows_azure_sql:
           pool: ${{parameters.defaultPoolName }}
           images:
-            Win22_Azure_Sql: ADO-MMS22-SQL19
+            Win22_Azure_Sql: ADO-Win25
             Win11_Azure_Sql: ADO-CI-Win11
-          TargetFrameworks: ${{parameters.targetFrameworks }}
+          TargetFrameworks: ${{parameters.primaryTargetFrameworks }}
           netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
           buildPlatforms: ${{parameters.buildPlatforms }}
           testSets: ${{parameters.testSets }}
@@ -542,7 +591,7 @@ stages:
           pool: ${{parameters.defaultPoolName }}
           images:
             Ubuntu24_Sql25: ADO-UB24-SQL25
-          TargetFrameworks: ${{parameters.targetFrameworksUnix }}
+          TargetFrameworks: ${{parameters.primaryTargetFrameworksUnix }}
           netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
           buildPlatforms: [AnyCPU]
           testSets: ${{parameters.testSets }}
@@ -560,12 +609,68 @@ stages:
             LocalDbSharedInstanceName: $(LocalDbSharedInstanceName)
             AliasName: $(SQLAliasName)
 
+        # SQL Server 2022 coverage, on Windows and Linux.
+        #
+        # The primary configurations run against SQL Server 2025, so these keep
+        # SQL Server 2022 in the matrix.  They are grouped under a single
+        # conditional so that PR pipelines can opt out of them as a unit.
+        ${{ if eq(parameters.runSql22Tests, true) }}:
+          # Windows Server 22 with local SQL Server 2022, x64 build platform.
+          windows_sql_22_x64:
+            pool: ${{parameters.defaultPoolName }}
+            images:
+              Win22_Sql22: ADO-MMS22-SQL22
+            TargetFrameworks: ${{parameters.targetFrameworks }}
+            netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
+            buildPlatforms: ${{parameters.buildPlatforms }}
+            testSets: ${{parameters.testSets }}
+            useManagedSNI: ${{parameters.useManagedSNI }}
+            configSqlFor: local
+            operatingSystem: Windows
+            # config.jsonc properties
+            configProperties:
+              TCPConnectionString: $(SQL_TCP_CONN_STRING)
+              NPConnectionString: $(SQL_NP_CONN_STRING)
+              AzureKeyVaultUrl: $(AzureKeyVaultUrl)
+              AzureKeyVaultTenantId: $(AzureKeyVaultTenantId)
+              SupportsIntegratedSecurity: true
+              UserManagedIdentityClientId: $(UserManagedIdentityClientId)
+              FileStreamDirectory: $(FileStreamDirectory)
+              LocalDbAppName: $(LocalDbAppName)
+              LocalDbSharedInstanceName: $(LocalDbSharedInstanceName)
+              AliasName: $(SQLAliasName)
+              SQLRootPath: $(SQL22RootPath)
+              enableLocalDB: true
+
+          # Linux Ubuntu 22 with local SQL Server 2022, x64 build platform.
+          linux_ub22_sql_22:
+            pool: ${{parameters.defaultPoolName }}
+            images:
+              Ubuntu22_Sql22: ADO-UB22-SQL22
+            TargetFrameworks: ${{parameters.targetFrameworksUnix }}
+            netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
+            buildPlatforms: [AnyCPU]
+            testSets: ${{parameters.testSets }}
+            useManagedSNI: [true]
+            configSqlFor: local
+            operatingSystem: Linux
+            configProperties:
+              TCPConnectionString: $(SQL_TCP_CONN_STRING)
+              NPConnectionString: $(SQL_NP_CONN_STRING)
+              AzureKeyVaultUrl: $(AzureKeyVaultUrl)
+              AzureKeyVaultTenantId: $(AzureKeyVaultTenantId)
+              SupportsIntegratedSecurity: false
+              UserManagedIdentityClientId: $(UserManagedIdentityClientId)
+              LocalDbAppName: $(LocalDbAppName)
+              LocalDbSharedInstanceName: $(LocalDbSharedInstanceName)
+              AliasName: $(SQLAliasName)
+
         # Linux Ubuntu 24 with Azure SQL Server, x64 build platform.
         linux_azure_sql:
           pool: ${{parameters.defaultPoolName }}
           images:
-            Ubuntu24_Azure_Sql: ADO-UB24-SQL25
-          TargetFrameworks: ${{parameters.targetFrameworksUnix }}
+            Ubuntu24_Azure_Sql: ADO-UB24
+          TargetFrameworks: ${{parameters.primaryTargetFrameworksUnix }}
           netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
           buildPlatforms: [AnyCPU]
           testSets: ${{parameters.testSets }}
@@ -617,7 +722,7 @@ stages:
           windows_enclave_sql:
             pool: ADO-CI-AE-1ES-Pool
             images:
-              Win22_Enclave_Sql19: ADO-MMS22-SQL19
+              Win22_Enclave_Sql19: ADO-Win25
             TargetFrameworks: ${{parameters.targetFrameworks }}
             netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
             buildPlatforms: ${{parameters.buildPlatforms }}
@@ -650,7 +755,7 @@ stages:
               # deliberately left unchanged.  The 'Sql19' suffix remains
               # accurate: these tests target a remote Enclave-enabled SQL Server
               # 2019.  Only the agent image has moved to Ubuntu 24.
-              Ubuntu20_Enclave_Sql19: ADO-UB24-SQL25
+              Ubuntu20_Enclave_Sql19: ADO-UB24
             TargetFrameworks: ${{parameters.targetFrameworksUnix }}
             netcoreVersionTestUtils: ${{parameters.netcoreVersionTestUtils }}
             buildPlatforms: [AnyCPU]

diff --git a/eng/pipelines/dotnet-sqlclient-ci-package-reference-pipeline.yml b/eng/pipelines/dotnet-sqlclient-ci-package-reference-pipeline.yml
@@ -175,6 +175,11 @@ extends:
     dotnetVerbosity: ${{ parameters.dotnetVerbosity }}
     targetFrameworks: ${{ parameters.targetFrameworks }}
     targetFrameworksUnix: ${{ parameters.targetFrameworksUnix }}
+    # Keep the primary (SQL 2025 / Azure SQL) configurations on the same set of
+    # target frameworks as everything else.  Only the CI-SqlClient pipeline
+    # opts in to the broader .NET 10.0 coverage on those configurations.
+    primaryTargetFrameworks: ${{ parameters.targetFrameworks }}
+    primaryTargetFrameworksUnix: ${{ parameters.targetFrameworksUnix }}
     testJobTimeout: ${{ parameters.testJobTimeout }}
     testSets: ${{ parameters.testSets }}
     useManagedSNI: ${{ parameters.useManagedSNI }}