Suppressed CodeQL alerts related to tainted SQL command text.

[paulmedynski]

Description

Suppressed CodeQL alerts related to tainted SQL command text. Accepting T-SQL from an app and executing it is a core feature of the driver.

Testing

No testing concerns. I will watch the CodeQL dashboard to see if these suppressions work as intended.

[Copilot]

Pull request overview

This PR aims to suppress CodeQL findings that flag assigning potentially tainted SQL text into SqlCommand.CommandText, on the basis that executing caller-provided T-SQL is expected behavior for a SQL client driver.

Changes:

• Added inline comments intended to suppress CodeQL alerts on CommandText assignments in SqlCommand constructors (including the copy constructor).
• Minor whitespace/formatting cleanup in the touched regions.

---

You can also share your feedback on Copilot code review. Take the survey.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.03%. Comparing base (326a242) to head (9141a22).
⚠️ Report is 2 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (326a242) and HEAD (9141a22). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (326a242)	HEAD (9141a22)
CI-SqlClient	1	0

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4028      +/-   ##
==========================================
- Coverage   72.65%   65.03%   -7.62%     
==========================================
  Files         287      282       -5     
  Lines       43134    66043   +22909     
==========================================
+ Hits        31337    42953   +11616     
- Misses      11797    23090   +11293     

Flag	Coverage Δ
CI-SqlClient	?
PR-SqlClient-Project	65.03% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.