chore(deps): update dotnet monorepo to v9 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.AspNetCore.Components.WebAssembly (source)	6.0.8 -> 9.0.6
Microsoft.AspNetCore.Components.WebAssembly.DevServer (source)	6.0.8 -> 9.0.6
Microsoft.Extensions.Configuration.Binder (source)	6.0.0 -> 9.0.6
Microsoft.Extensions.Configuration.UserSecrets (source)	6.0.1 -> 9.0.6
System.Net.Http.Json (source)	6.0.0 -> 9.0.6

---

Release Notes

dotnet/aspnetcore (Microsoft.AspNetCore.Components.WebAssembly)

v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#​61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#​61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#​61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#​61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#​61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#​61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v9.0.5: .NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/61261
• [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in https://github.com/dotnet/aspnetcore/pull/61215
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60916
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61393
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @​github-actions in https://github.com/dotnet/aspnetcore/pull/61374
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483
• [Identity] Fix Identity UI asset definitions by @​javiercn in https://github.com/dotnet/aspnetcore/pull/59100

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

v9.0.4: .NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60785
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60678
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356
• Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/60673
• Fix self-referential schema handling in collection schemas by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/60858
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60880

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

v9.0.3: .NET 9.0.3

Release

What's Changed

• Update branding to 9.0.3 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60198
• [release/9.0] Fix branding by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60029
• [release/9.0] Update to MacOS 15 in Helix by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60238
• [release/9.0] Revert "Revert "Use the latest available jdk"" by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60229
• [release/9.0] Update HtmlAttributePropertyHelper to correctly follow the MetadataUpdateHandlerAttribute contract by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59908
• [release/9.0] Fix skip condition for java tests by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60242
• [release/9.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60151
• [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60202
• [release/9.0] Redis distributed cache: add HybridCache usage signal by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59886
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951
• [release/9.0] Update remnants of azureedge.net by @​sebastienros in https://github.com/dotnet/aspnetcore/pull/60263
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291
• [release/9.0] Centralize on one docker container by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60298
• Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60323
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60317

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

v9.0.2: .NET 9.0.2

Release

What's Changed

• Update branding to 9.0.2 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59757
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266
• [release/9.0] Update OSX helix queue by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59743
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728
• [release/9.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59679
• [release/9.0] Skip tests on internal queues too by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59578
• [release/9.0] Fix loading dotnet user-jwts config by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59473
• [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59422
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59419
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611
• [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59362
• Migrate off of Fedora 38 by @​v-firzha in https://github.com/dotnet/aspnetcore/pull/59613
• [release/9.0] [Blazor WASM standalone] Avoid caching index.html during development by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/59348
• [release/9.0] Update to Fedora 41 by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59816
• [release/9.0] Don't throw exception for parameters with custom binding source by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59533
• [release/9.0] Apply schema transformer to AdditionalProperties by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59730
• [release/9.0] Harden schema reference transformer for relative references by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/59779
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848
• [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59325
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59871

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

v9.0.1: .NET 9.0.1

Release

What's Changed

• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58900
• [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @​halter73 in https://github.com/dotnet/aspnetcore/pull/58573
• Hot Reload agent improvements by @​tmat in https://github.com/dotnet/aspnetcore/pull/58333
• [release/9.0] Update dependencies from roslyn by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59183
• [release/9.0] Add direct reference to System.Drawing.Common in tools by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189
• [release/9.0] Harden parsing of [Range] attribute values by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59077
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024
• [release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59032
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58589
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675
• [release/9.0] Fix SignalR Java POM to include description by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58896
• [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58931

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

v9.0.0: .NET 9.0.0

Release

What's Changed

• Update branding to rtm by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/57907
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954
• [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/57999
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048
• [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57975
• [release/9.0] Update dependencies from dotnet/efcore by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052
• Fix up OpenAPI schema handling and support concurrent requests by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/58024
• [release/9.0] Mark API from 9 as shipped by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58060
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117
• [release/9.0] Enable TSA/Policheck by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58123
• [release/9.0] Add explicit conversion for value-type returning handlers with filters by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57967
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58116
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58183
• [release/9.0] (deps): Bump src/submodules/googletest from 0953a17 to 6dae7eb by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58184
• [release/9.0] Change usage of "Country" to "CountryRegion" by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58280
• Merge RC2 changes into 9.0 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58296
• [release/9.0] Remove ProviderKey from Hosting Bundle by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58293
• [release/9.0] [Blazor] Fix template nav menu styling by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58277
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182
• [release/9.0] Update dependencies from dotnet/efcore by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58366
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344
• [release/9.0] Fix handling for inert route parameters in MVC endpoints for OpenAPI by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58311
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414
• [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/58372
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421
• [release/9.0] Stabilize branding by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58444
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449
• [release/9.0] [Infrastructure] Updated npm packages by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58469
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462
• [release/9.0] bumping ws dependency to fix component vulnerability by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58458
• [release/9.0] Improve dev-certs export error message by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58471
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58479
• Add scope for internal npm packages (#​58476) by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/58511
• [release/9.0] Use MacOS-13 in CI by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58546
• [release/9.0] Turn non-stable dependency warning back on by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58548
• [release/9.0] Update Messagepack dependency by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58556
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58544

Full Changelog: dotnet/aspnetcore@v9.0.0-rc.2.24474.3...v9.0.0

v8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

v8.0.16: .NET 8.0.16

Release

What's Changed

• Update branding to 8.0.16 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283
• [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/61260
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281
• [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404
• Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411
• Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352
• [release/8.0] Fix preserving messages for stateful reconnect with backplane by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442
• fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

v8.0.15: .NET 8.0.15

Release

What's Changed

• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355
• Update branding to 8.0.15 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784
• Add partitioned to cookie for SignalR browser testing by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728
• [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60677
• Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

v8.0.14: .NET 8.0.14

Release

What's Changed

• Update branding to 8.0.14 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197
• [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60150
• [release/8.0] Fix java discovery in IdentityModel pipeline by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922
• [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60203
• [release/8.0] Update to MacOS 15 in Helix by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60239
• [release/8.0] Use the latest available JDK by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233
• [release/8.0] Fix skip condition for java tests by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60243
• [release/8.0] Update list of helix queues to skip by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231
• [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57288
• [release/8.0] Update remnants of azureedge.net by @​sebastienros in https://github.com/dotnet/aspnetcore/pull/60264
• [release/8.0] Centralize on one docker container by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299
• Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324
• Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

v8.0.13: .NET 8.0.13

Release

What's Changed

• [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in https://github.com/dotnet/aspnetcore/pull/59575
• Update branding to 8.0.13 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756
• [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295
• [release/8.0] Update OSX helix queue by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59742
• [release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59678
• [release/8.0] Skip tests on internal queues too by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59579
• [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403
• Migrate off of Debian 11 by @​v-firzha in https://github.com/dotnet/aspnetcore/pull/59584
• [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777
• [release/8.0] [Blazor WASM standalone] Avoid caching index.html during development by @​github-actions in https://github.com/dotnet/aspnetcore/pull/59349
• Update to Fedora 41 by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864
• [release/8.0] Fix/update docker tags by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867
• Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

v8.0.12: .NET 8.0.12

Release

What's Changed

• Update branding to 8.0.12 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58800
• [release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58741
• Add scope for internal npm packages by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/58512
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58477
• [release/8.0] Upgrade serialize-javascript transient dependency by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58466
• [release/8.0] Update Messagepack dependency by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58676
• Merging internal commits for release/8.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58898
• [release/8.0] Use MacOS-13 in CI by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58549
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59065
• [release/8.0] Fix java discovery in helix-matrix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59181
• [release/8.0] Update dependencies from dotnet/roslyn by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59184
• [release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/59033

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

v8.0.11: .NET 8.0.11

Release

What's Changed

• Update branding to 8.0.11 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58198
• [release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58180
• [release/8.0] Add explicit conversion for value-type returning handlers with filters by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/57966
• [release/8.0] Stop using Mac 11 in Helix by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/58063
• [release/8.0] Enable TSA/Policheck by @​github-actions in https://github.com/dotnet/aspnetcore/pull/58124
• [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/58179
• [Backport] Http.Sys: Clean up Request parsing errors by @​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57819
• [release/8.0] Update the Microsoft.Identity.Web versions used by project templates by @​halter73 in [https://github.com/[release/8.0] Update the Microsoft.Identity.Web versions used by project templates dotnet/aspnetcore#58229](https://github.com/dotnet/aspn

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.