[main] Source code updates from dotnet/dotnet - #67642
Merged
Merged
Conversation
Diff: https://github.com/dotnet/dotnet/compare/d2b36583a7243f813a402f9f8379ab01f5068e93..80e087c8b2cc246015c7fdb081da6417895ff68c From: dotnet/dotnet@d2b3658 To: dotnet/dotnet@80e087c [[ commit created by automation ]]
Updated Dependencies: Microsoft.NET.Runtime.WebAssembly.Sdk, Microsoft.NETCore.BrowserDebugHost.Transport, Microsoft.NET.Runtime.MonoAOTCompiler.Task, dotnet-ef, Microsoft.Bcl.AsyncInterfaces, Microsoft.Bcl.TimeProvider, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.InMemory, Microsoft.EntityFrameworkCore.Relational, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Tools, Microsoft.Extensions.Caching.Abstractions, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.CommandLine, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration.FileExtensions, Microsoft.Extensions.Configuration.Ini, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.Configuration.Xml, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.DependencyModel, Microsoft.Extensions.Diagnostics, Microsoft.Extensions.Diagnostics.Abstractions, Microsoft.Extensions.FileProviders.Abstractions, Microsoft.Extensions.FileProviders.Composite, Microsoft.Extensions.FileProviders.Physical, Microsoft.Extensions.FileSystemGlobbing, Microsoft.Extensions.HostFactoryResolver.Sources, Microsoft.Extensions.Hosting, Microsoft.Extensions.Hosting.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Configuration, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.Logging.Debug, Microsoft.Extensions.Logging.EventLog, Microsoft.Extensions.Logging.EventSource, Microsoft.Extensions.Logging.TraceSource, Microsoft.Extensions.Options, Microsoft.Extensions.Options.ConfigurationExtensions, Microsoft.Extensions.Options.DataAnnotations, Microsoft.Extensions.Primitives, Microsoft.Internal.Runtime.AspNetCore.Transport, Microsoft.NETCore.App.Ref, Microsoft.NETCore.Platforms, System.Collections.Immutable, System.Composition, System.Configuration.ConfigurationManager, System.Diagnostics.DiagnosticSource, System.Diagnostics.EventLog, System.Diagnostics.PerformanceCounter, System.DirectoryServices.Protocols, System.Formats.Asn1, System.Formats.Cbor, System.IO.Hashing, System.IO.Pipelines, System.Memory.Data, System.Net.Http.Json, System.Net.Http.WinHttpHandler, System.Net.ServerSentEvents, System.Numerics.Tensors, System.Reflection.Metadata, System.Resources.Extensions, System.Runtime.Caching, System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml, System.Security.Permissions, System.ServiceProcess.ServiceController, System.Text.Encodings.Web, System.Text.Json, System.Threading.AccessControl, System.Threading.Channels, System.Threading.RateLimiting (Version 11.0.0-preview.6.26322.110 -> 11.0.0-preview.7.26357.101) Microsoft.DotNet.Arcade.Sdk, Microsoft.DotNet.Build.Tasks.Archives, Microsoft.DotNet.Build.Tasks.Installers, Microsoft.DotNet.Build.Tasks.Templating, Microsoft.DotNet.Helix.Sdk, Microsoft.DotNet.RemoteExecutor, Microsoft.DotNet.SharedFramework.Sdk (Version 11.0.0-beta.26322.110 -> 11.0.0-beta.26357.101) Microsoft.Web.Xdt (Version 3.3.0-preview.6.26322.110 -> 3.3.0-preview.7.26357.101) NuGet.Frameworks, NuGet.Packaging, NuGet.Versioning (Version 7.9.0-rc.32310 -> 7.9.0-rc.35801) [[ commit created by automation ]]
Contributor
Author
dotnet-maestro
Bot
requested review from
a team,
BrennanConroy,
halter73 and
wtgodbe
as code owners
July 7, 2026 16:37
dotnet-policy-service
Bot
added
area-infrastructure
![dotnet-policy-service[bot]](https://avatars.githubusercontent.com/in/285228?s=60&v=4){kind=small}
wtgodbe
approved these changes
Jul 7, 2026
Added NoWarn property to suppress NuGet audit warnings.
The backflowed source-build gating change makes dotnet-dev-certs / user-jwts / user-secrets / aspnetcoretools publish NativeAOT in CoreCLR source-only builds, which requires clang. The Managed source-build leg ran in the build-amd64 prereqs image (no clang), failing with "No compatible version of clang was found". Run it in the azurelinux cross-amd64 prereq image (clang + sysroot) and pass ROOTFS_DIR + /p:CrossBuild=true, mirroring the ARM/ARM64/musl AOT legs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
BrennanConroy
approved these changes
Jul 7, 2026
Member
|
@DeagleGross I think the template failures here are related to #67488 and #67119, PTAL |
Contributor
Author
|
Important While this PR was open, the source repository has received code changes from this repository (an opposite codeflow merged). You can continue with one of the following options:
💡 You may consult the FAQ for more information or tag @dotnet/prodconsvcs for assistance. |
Member
Should be fixed by #67618. I'll update this branch once fix is merged |
akoeplinger
approved these changes
Jul 8, 2026
Member
template tests passed. |
Added comment to disable NuGet audit warnings.
Member
|
Components failure unrelated, being fixed by #67680 |
wtgodbe
pushed a commit
that referenced
this pull request
Jul 27, 2026
…WebSite Ports #67898 (AngleSharp 0.9.9 -> 1.5.2, fixing GHSA-pgww-w46g-26qg) and the NoWarn NU1903/NU1904 change from #67642 to unblock the NuGet audit failures on this codeflow PR: - NU1902 (AngleSharp 0.9.9) in Mvc.FunctionalTests, Identity.Test, Identity.FunctionalTests, AuthSamples.FunctionalTests - NU1903 (Newtonsoft.Json 11.0.2) and NU1904 (Kestrel.Core 2.2.0) in InProcessNewShimWebSite (a forward-compat test asset intentionally pinned to old package versions) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
wtgodbe
pushed a commit
that referenced
this pull request
Jul 28, 2026
Ports the remaining piece of #67642: InteropClient.csproj transitively pulls Newtonsoft.Json 12.0.3 via Grpc.Auth, tripping NU1903 (GHSA-5crp-9r3c-p9vr). This is unrelated to the central NewtonsoftJsonVersion (already 13.0.3, above the 13.0.1 patched threshold) bumped on main in #66334; that bump does not touch this transitively-pinned copy. Suppress the same way main did, since this is a test-only project. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
wtgodbe
pushed a commit
that referenced
this pull request
Jul 28, 2026
* Backflow from https://github.com/dotnet/dotnet / e0c9b3f build 324500 Diff: https://github.com/dotnet/dotnet/compare/4c953a1fd4fe2a8952826ad3a2d69dce9042ee32..e0c9b3f934e7b97b360f4ce3692ab45b9634ae1d From: dotnet/dotnet@4c953a1 To: dotnet/dotnet@e0c9b3f [[ commit created by automation ]] * Update dependencies from build 324500 Updated Dependencies: Microsoft.NET.Runtime.WebAssembly.Sdk, Microsoft.NET.Runtime.MonoAOTCompiler.Task, dotnet-ef, Microsoft.Bcl.AsyncInterfaces, Microsoft.Bcl.TimeProvider, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.InMemory, Microsoft.EntityFrameworkCore.Relational, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Tools, Microsoft.Extensions.Caching.Abstractions, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.CommandLine, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration.FileExtensions, Microsoft.Extensions.Configuration.Ini, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.Configuration.Xml, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.DependencyModel, Microsoft.Extensions.Diagnostics, Microsoft.Extensions.Diagnostics.Abstractions, Microsoft.Extensions.FileProviders.Abstractions, Microsoft.Extensions.FileProviders.Composite, Microsoft.Extensions.FileProviders.Physical, Microsoft.Extensions.FileSystemGlobbing, Microsoft.Extensions.Hosting, Microsoft.Extensions.Hosting.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Configuration, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.Logging.Debug, Microsoft.Extensions.Logging.EventLog, Microsoft.Extensions.Logging.EventSource, Microsoft.Extensions.Logging.TraceSource, Microsoft.Extensions.Options, Microsoft.Extensions.Options.ConfigurationExtensions, Microsoft.Extensions.Options.DataAnnotations, Microsoft.Extensions.Primitives, Microsoft.NETCore.App.Ref, System.Collections.Immutable, System.Composition, System.Configuration.ConfigurationManager, System.Diagnostics.DiagnosticSource, System.Diagnostics.EventLog, System.Diagnostics.PerformanceCounter, System.DirectoryServices.Protocols, System.Formats.Asn1, System.Formats.Cbor, System.IO.Hashing, System.IO.Pipelines, System.Memory.Data, System.Net.Http.Json, System.Net.Http.WinHttpHandler, System.Net.ServerSentEvents, System.Numerics.Tensors, System.Reflection.Metadata, System.Resources.Extensions, System.Runtime.Caching, System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml, System.Security.Permissions, System.ServiceProcess.ServiceController, System.Text.Encodings.Web, System.Text.Json, System.Threading.AccessControl, System.Threading.Channels, System.Threading.RateLimiting (Version 10.0.10 -> 10.0.12) Microsoft.NETCore.BrowserDebugHost.Transport, Microsoft.Extensions.HostFactoryResolver.Sources, Microsoft.Internal.Runtime.AspNetCore.Transport, Microsoft.NETCore.Platforms (Version 10.0.10-servicing.26359.121 -> 10.0.12-servicing.26376.103) Microsoft.DotNet.Arcade.Sdk, Microsoft.DotNet.Build.Tasks.Archives, Microsoft.DotNet.Build.Tasks.Installers, Microsoft.DotNet.Build.Tasks.Templating, Microsoft.DotNet.Helix.Sdk, Microsoft.DotNet.RemoteExecutor, Microsoft.DotNet.SharedFramework.Sdk (Version 10.0.0-beta.26359.121 -> 10.0.0-beta.26376.103) Microsoft.Web.Xdt (Version 3.2.10 -> 3.2.12) NuGet.Frameworks, NuGet.Packaging, NuGet.Versioning (Version 7.0.3-rc.36021 -> 7.0.3-rc.37703) [[ commit created by automation ]] * Bump AngleSharp to 1.5.2 and disable NuGet audit for InProcessNewShimWebSite Ports #67898 (AngleSharp 0.9.9 -> 1.5.2, fixing GHSA-pgww-w46g-26qg) and the NoWarn NU1903/NU1904 change from #67642 to unblock the NuGet audit failures on this codeflow PR: - NU1902 (AngleSharp 0.9.9) in Mvc.FunctionalTests, Identity.Test, Identity.FunctionalTests, AuthSamples.FunctionalTests - NU1903 (Newtonsoft.Json 11.0.2) and NU1904 (Kestrel.Core 2.2.0) in InProcessNewShimWebSite (a forward-compat test asset intentionally pinned to old package versions) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Disable NuGet audit NU1903 for InteropClient test project Ports the remaining piece of #67642: InteropClient.csproj transitively pulls Newtonsoft.Json 12.0.3 via Grpc.Auth, tripping NU1903 (GHSA-5crp-9r3c-p9vr). This is unrelated to the central NewtonsoftJsonVersion (already 13.0.3, above the 13.0.1 patched threshold) bumped on main in #66334; that bump does not touch this transitively-pinned copy. Suppress the same way main did, since this is a test-only project. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Will Godbe <willgodbe@Wills-MacBook-Pro.local> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This is a codeflow update. It may contain both source code changes from
the VMR
as well as dependency updates. Learn more here.
This pull request brings the following source code changes
From https://github.com/dotnet/dotnet
Updated Dependencies
Associated changes in source repos
Diff the source with this PR branch