@@ -23,6 +23,7 @@ This page documents API and behavior changes that have the potential to break ex
 | **Breaking change**                                                                                             | **Impact** |
 |:--------------------------------------------------------------------------------------------------------------- | -----------|
 | [EF tools now require framework to be specified for multi-targeted projects](#ef-tools-multi-targeting)         | Medium     |
+| [SQL Server: Microsoft.Data.SqlClient adds a broker dependency](#sqlclient-broker-dependency)                   | Low        |
 | [Application Name is now injected into the connection string](#sqlserver-application-name)                      | Low        |
 | [SQL Server json data type used by default on Azure SQL and compatibility level 170](#sqlserver-json-data-type) | Low        |
 | [Parameterized collections now use multiple parameters by default](#parameterized-collections)                  | Low        |
@@ -83,6 +84,28 @@ You'll need to choose one of the frameworks (e.g., `net9.0`) when running the EF
 
 ## Low-impact changes
 
+<a name="sqlclient-broker-dependency"></a>
+
+### SQL Server: Microsoft.Data.SqlClient adds a broker dependency
+
+#### Old behavior
+
+Earlier versions of Microsoft.Data.SqlClient did not depend on Microsoft.Identity.Client.Broker.
+
+#### New behavior
+
+Microsoft.Data.SqlClient 6.1.6 introduces a dependency on Microsoft.Identity.Client.Broker, which is required for Microsoft Entra ID authentication and can drastically increase the size of the published application when using the EF Core SQL Server provider.
+
+#### Why
+
+The additional dependency is introduced by Microsoft.Data.SqlClient, rather than EF Core itself.
+
+#### Mitigations
+
+If your application doesn't use Microsoft Entra ID authentication, explicitly reference Microsoft.Data.SqlClient 7.1.x in your project to override the version used by EF Core. Starting with version 7.0, Microsoft.Data.SqlClient no longer includes Azure/Entra ID authentication dependencies in its core package.
+
+For details, including the additional package required for Entra ID authentication, see [Microsoft.Data.SqlClient has been updated to 7.0](xref:core/what-is-new/ef-core-11.0/breaking-changes#sqlclient-7).
+
 <a name="sqlserver-application-name"></a>
 
 ### Application Name is now injected into the connection string