Drupal 10.3.9 → has been released to address advisory SA-CORE-2024-008 → . This introduces a change where sites are required to allow list a 3rd party database driver if that driver makes use of the `Drupal\Core\Database\StatementPrefetch` class.
As stated in the 10.3.9 release notes, sqlsrv does not require the additional configuration. This is because the current version of the driver does not make use of this class. Should this change in the future, the issue responsible for the change will be required to publish a change notice. Any such issue should reference this issue.
Add exlanatory note to project README.
Active
4.4
Documentation
Add SA-CORE-2024-008 explanatory note to README (issue #3488910)