Bump the nuget-minor-patch group with 14 updates by dependabot[bot] · Pull Request #127 · rhamenator/ai-scraping-defense-iis

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Update branding to 8.0.16 by @vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
[release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
[release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
[release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
fetch TLS client hello message from HTTP.SYS by @BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 6.1.5 to 6.1.6.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

6.1.6

This update brings the following changes since the 6.1.5 release:

Added

WAM broker support for the supported Entra ID authentication modes (Windows only)

What Changed:

Added support for the Web Account Manager (WAM) broker for the supported Microsoft Entra ID authentication modes. A new ActiveDirectoryAuthenticationProviderOptions options bag and a corresponding ActiveDirectoryAuthenticationProvider(ActiveDirectoryAuthenticationProviderOptions options) constructor were introduced, exposing a UseWamBroker property (alongside ApplicationClientId and DeviceCodeFlowCallback).
(#4288, #4387)
Added a cross-platform SetParentActivityOrWindowFunc(Func<object> parentActivityOrWindowFunc) method so callers can supply a parent window handle on Windows or a parent Activity/UIViewController on Android/iOS/MAUI.

Who Benefits:

Applications using ActiveDirectoryInteractive and other supported Entra ID authentication modes on Windows benefit from the WAM broker's improved security (tokens are brokered by the OS), single sign-on with the logged-in Windows account, and support for Conditional Access and Windows Hello.

Impact:

When you supply your ApplicationClientId, WAM is opt-in via ActiveDirectoryAuthenticationProviderOptions.UseWamBroker. Consider enabling it when you want OS-brokered tokens, single sign-on with the signed-in Windows account, Windows Hello, and Conditional Access support.
UseWamBroker is a Windows-only setting and has no effect on non-Windows platforms, where interactive Entra ID flows always use the system browser.
Prefer the new options-bag constructor over the positional-argument overloads in new code.

var options = new ActiveDirectoryAuthenticationProviderOptions
{
    ApplicationClientId = "<your-app-client-id>",
    // Enable WAM (Windows only) for OS-brokered tokens, SSO, Windows Hello, and Conditional Access.
    UseWamBroker = true,
};
var provider = new ActiveDirectoryAuthenticationProvider(options);
// Supply the parent window/activity that owns the interactive sign-in prompt.
provider.SetParentActivityOrWindowFunc(() => parentWindowHandle);
SqlAuthenticationProvider.SetProvider(SqlAuthenticationMethod.ActiveDirectoryInteractive, provider);

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

Added bounds checking when parsing TDS token data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
(#4340, #4359)

Who Benefits:

All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 8.0.29 to 8.0.30.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

8.0.30

Release

What's Changed

[release/8.0] Update Windows CI images to 2022 by @AndriySvyryd in [release/8.0] Update Windows CI images to 2022 dotnet/efcore#38526
[release/8.0] Update branding to 8.0.30 by @dotnet-bot in [release/8.0] Update branding to 8.0.30 dotnet/efcore#38563
[release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 by @dependabot[bot] in [release/8.0]: Bump Microsoft.Data.SqlClient from 5.1.7 to 5.1.9 dotnet/efcore#38525
[release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 by @dependabot[bot] in [release/8.0]: Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.21 to 8.0.28 dotnet/efcore#38519
[release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 by @dependabot[bot] in [release/8.0]: Bump Grpc.AspNetCore from 2.71.0 to 2.80.0 dotnet/efcore#38517
[release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 by @dependabot[bot] in [release/8.0]: Bump Azure.Identity from 1.17.0 to 1.21.0 dotnet/efcore#38510
Merging internal commits for release/8.0 by @dotnet-bot in Merging internal commits for release/8.0 dotnet/efcore#38624
[release/8.0] Update SQLitePCLRaw package versions by @AndriySvyryd with @Copilot in [release/8.0] Update SQLitePCLRaw package versions dotnet/efcore#38605

Full Changelog: dotnet/efcore@v8.0.29...v8.0.30

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.WindowsServices from 9.0.0 to 9.0.19.

Release notes

Sourced from Microsoft.Extensions.Hosting.WindowsServices's releases.

9.0.19

Release

What's Changed

[release/9.0-staging] Wait to complete the test before releasing the agile reference. by @github-actions[bot] in [release/9.0-staging] Wait to complete the test before releasing the agile reference. dotnet/runtime#129430
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#129208
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#129407
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#129377
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#129453
[release/9.0-staging] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-assets dotnet/runtime#129620
[release/9.0-staging] Sve: Fix Gather/Scatter tests by @github-actions[bot] in [release/9.0-staging] Sve: Fix Gather/Scatter tests dotnet/runtime#129870
[release/9.0] Surface scheduled outerloop Helix work item failures (backport of #129049, #129629) by @mmitche in [release/9.0] Surface scheduled outerloop Helix work item failures (backport of #129049, #129629) dotnet/runtime#129908
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#129441
[release/9.0] Update branding to 9.0.19 by @dotnet-bot in [release/9.0] Update branding to 9.0.19 dotnet/runtime#130262
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#130235
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#130194
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#130063
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#129357
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#130392
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#130195
[release/9.0-staging] Disable failing iOS device tests by @vitek-karas in [release/9.0-staging] Disable failing iOS device tests dotnet/runtime#130471
[release/9.0-staging] [QUIC] Update MsQuic to the latest 2.5 version by @ManickaP in [release/9.0-staging] [QUIC] Update MsQuic to the latest 2.5 version dotnet/runtime#130355
Fix failing symlink tests (9.0) by @alinpahontu2912 in Fix failing symlink tests (9.0) dotnet/runtime#130343
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#130345
[manual] Merge release/9.0-staging into release/9.0 by @mrek-msft in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#130652
Merging internal commits for release/9.0 by @dotnet-bot in Merging internal commits for release/9.0 dotnet/runtime#130722

Full Changelog: dotnet/runtime@v9.0.18...v9.0.19

9.0.18

Release

What's Changed

[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#125099
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#125410
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#125816
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#126200
[backport/9.0-staging] Disable WASI CI by @maraf with @Copilot in [backport/9.0-staging] Disable WASI CI dotnet/runtime#128775
Replace OSX.14.Arm64.Open with OSX.15.Arm64.Open queues by @akoeplinger in Replace OSX.14.Arm64.Open with OSX.15.Arm64.Open queues dotnet/runtime#128853
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#128312
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#128618
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#128794
Update branding to 9.0.18 by @vseanreesermsft in Update branding to 9.0.18 dotnet/runtime#128915
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#128880
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#128934
[release/9.0-staging] [TestOnly] Fix NumberFormatInfoGroupSize test by @svick in [release/9.0-staging] [TestOnly] Fix NumberFormatInfoGroupSize test dotnet/runtime#128578
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#126341
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#129194
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#129116
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#128224
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#129150
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#128216
Merge release/9.0-staging into release/9.0 by @steveisok in Merge release/9.0-staging into release/9.0 dotnet/runtime#129251

Full Changelog: dotnet/runtime@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

[release/9.0-staging] Deny unmasked frame receive for WebSocket Server by @github-actions[bot] in [release/9.0-staging] Deny unmasked frame receive for WebSocket Server dotnet/runtime#123661
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#125603
[release/9.0-staging] use AZL3 instead of Ubuntu for builds by @github-actions[bot] in [release/9.0-staging] use AZL3 instead of Ubuntu for builds dotnet/runtime#125715
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#125151
[release/9.0-staging] JIT: fix bug in loop cloning with down-counting loops by @github-actions[bot] in [release/9.0-staging] JIT: fix bug in loop cloning with down-counting loops dotnet/runtime#126913
[release/9.0-staging] [QUIC] Update MsQuic by @ManickaP in [release/9.0-staging] [QUIC] Update MsQuic dotnet/runtime#126999
[release/9.0-staging] Update dependencies from dotnet/roslyn-analyzers by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn-analyzers dotnet/runtime#123609
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#124027
Use source-build-assets repo by @NikolaMilosavljevic in Use source-build-assets repo dotnet/runtime#126804
[release/9.0-staging] Add an in-memory cache for CRLs on Linux by @bartonjs in [release/9.0-staging] Add an in-memory cache for CRLs on Linux dotnet/runtime#127625
Update branding to 9.0.17 by @vseanreesermsft in Update branding to 9.0.17 dotnet/runtime#127833
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#125097
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#127837
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#127901
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#125945
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#128092
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#126136
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#128153
[release/9.0][browser] Disable debugger tests on CI (#108178) by @akoeplinger in [release/9.0][browser] Disable debugger tests on CI (#108178) dotnet/runtime#128132
[manual] Merge release/9.0-staging into release/9.0 by @svick in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#128183

Full Changelog: dotnet/runtime@v9.0.16...v9.0.17

9.0.16

Release

9.0.15

Release

9.0.14

Release

9.0.13

Release

What's Changed

[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122508
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122747
Update branding to 9.0.13 by @vseanreesermsft in Update branding to 9.0.13 dotnet/runtime#122888
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#122941
[manual] Merge release/9.0-staging into release/9.0 by @jeffhandley in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#123113

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

9.0.12

Release

9.0.11

Release

What's Changed

[release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices by @github-actions[bot] in [release/9.0-staging] Fix DefaultIfEmptyIterator.TryGetElementAt returning default value for out-of-bounds indices dotnet/runtime#119844
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#119981
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#119978
[release/9.0-staging] Add acquire barrier to populate bit reading by @github-actions[bot] in [release/9.0-staging] Add acquire barrier to populate bit reading dotnet/runtime#119967
[release/9.0-staging] Bump System.Text.Json toolset version by @github-actions[bot] in [release/9.0-staging] Bump System.Text.Json toolset version dotnet/runtime#113385
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120034
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120033
[release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120020
[release/9.0-staging] UnsafeAccessor - ambiguous name and signature match by @AaronRobinsonMSFT in [release/9.0-staging] UnsafeAccessor - ambiguous name and signature match dotnet/runtime#120011
[release/9.0] Bump OSX.12 helix queues to OSX.13 by @steveisok in [release/9.0] Bump OSX.12 helix queues to OSX.13 dotnet/runtime#119814
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120128
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120129
[release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#120106
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120057
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120240
[release/9.0] [mono] Make the compressed interface bitmap feature usable by @BrzVlad in [release/9.0] [mono] Make the compressed interface bitmap feature usable dotnet/runtime#120154
[release/9.0-staging] Remove an STJ deep nested object test causing occasional failures by @github-actions[bot] in [release/9.0-staging] Remove an STJ deep nested object test causing occasional failures dotnet/runtime#120265
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120331
[release/9.0-staging] Detect if RSA-384 is supported on the platform by @vcsjones in [release/9.0-staging] Detect if RSA-384 is supported on the platform dotnet/runtime#120382
[release/9.0-staging] Load Standalone GC correctly in component scenarios. by @github-actions[bot] in [release/9.0-staging] Load Standalone GC correctly in component scenarios. dotnet/runtime#120236
[release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one by @github-actions[bot] in [release/9.0-staging] [mono][hotreload] Make the runtime ignore an update if it is an empty one dotnet/runtime#120335
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120349
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#120397
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#120418
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#120425
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#120404
[release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file by @jkoritzinsky in [release/9.0-staging] Prevent format injection in hosting Windows PAL printf functions when redirected to file dotnet/runtime#119786
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#120417
Update branding to 9.0.11 by @vseanreesermsft in Update branding to 9.0.11 dotnet/runtime#120474
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#120586
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120409
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120396
[release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods by @BrzVlad in [release/9.0-staging] [mono][interp] Fix various leaks, primarily around dynamic methods dotnet/runtime#120600
[release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection by @github-actions[bot] in [release/9.0-staging] [mono][sgen] Fix incorrect condition when checking if we should do a major collection dotnet/runtime#120533
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#120570
[manual] Merge release/9.0-staging into release/9.0 by @PranavSenthilnathan in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#120615
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#120719
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120765
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120779
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#120814
[release/9.0] Update Microsoft.Build.* versions to 17.8.43 by @PranavSenthilnathan in [release/9.0] Update Microsoft.Build.* versions to 17.8.43 dotnet/runtime#120820

Full Changelog: dotnet/runtime@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

[release/9.0-staging] Disable release assert on disallowed thread re-initialization for managed C++ by @github-actions[bot] in [release/9.0-staging] Disable release assert on disallowed thread re-initialization for managed C++ dotnet/runtime#118842
[release/9.0-staging] [wasm][AOT] fix codegen for small structs on stack by @github-actions[bot] in [release/9.0-staging] [wasm][AOT] fix codegen for small structs on stack dotnet/runtime#118416
Update branding to 9.0.10 by @vseanreesermsft in Update branding to 9.0.10 dotnet/runtime#119280
[release/9.0-staging] Don't use vfork on android by @github-actions[bot] in [release/9.0-staging] Don't use vfork on android dotnet/runtime#118331
[release/9.0-staging] [mono][debugger] Fix assertion when stepping by @github-actions[bot] in [release/9.0-staging] [mono][debugger] Fix assertion when stepping dotnet/runtime#118459
[release/9.0-staging][maccatalyst] Check for -Wno-overriding-option for compatibility with clang in Xcode 16.3+ by @akoeplinger in [release/9.0-staging][maccatalyst] Check for -Wno-overriding-option for compatibility with clang in Xcode 16.3+ dotnet/runtime#119301
[release/9.0-staging][HTTP] Stress fix for docker compose by @ManickaP in [release/9.0-staging][HTTP] Stress fix for docker compose dotnet/runtime#119455
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#119505
[9.0] Preserve Lock ID Members by @jkoritzinsky in [9.0] Preserve Lock ID Members dotnet/runtime#119281
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#118940
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#118151
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#118372
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#118423
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#118193
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#118758
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119619
[release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#119598
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#119620
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#119051
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#118492
[release/9.0-staging] [H/3] Fix interop tests. by @github-actions[bot] in [release/9.0-staging] [H/3] Fix interop tests. dotnet/runtime#119522
[release/9.0-staging] Disable tests parallelization in flaky OleDB tests by @github-actions[bot] in [release/9.0-staging] Disable tests parallelization in flaky OleDB tests dotnet/runtime#119626
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119690
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#118224
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#119677
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#119635
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#119669
[release/9.0-staging] Fix recursion issue found in PROCCreateCrashDump by @github-actions[bot] in [release/9.0-staging] Fix recursion issue found in PROCCreateCrashDump dotnet/runtime#119128
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#119742
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#119721
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#119753
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119793
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#119809
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119832
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#119830
Backport macOS 26 Tahoe test fixes to release/9.0-staging by @vcsjones in Backport macOS 26 Tahoe test fixes to release/9.0-staging dotnet/runtime#119716
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#119871
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119872
[release/9.0-staging] Disable Multicast SocketOption test by @github-actions[bot] in [release/9.0-staging] Disable Multicast SocketOption test dotnet/runtime#119889
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#119932
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#119900
[manual] Merge release/9.0-staging into release/9.0 by @tarekgh in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#119966
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120025
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/runtime#120111

Full Changelog: dotnet/runtime@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#117671
[release/9.0-staging] [Test Only] Fix BuildChainCustomTrustStore test by @github-actions[bot] in [release/9.0-staging] [Test Only] Fix BuildChainCustomTrustStore test dotnet/runtime#117761
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#117742
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#117872
[release/9.0-staging] Update dependencies from dotnet/sdk by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/sdk dotnet/runtime#117873
Revert "[release/9.0-staging] Update dependencies from dotnet/sdk" by @lewing in Revert "[release/9.0-staging] Update dependencies from dotnet/sdk" dotnet/runtime#118001
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#117910
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#117962
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#118080
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#118114
[release/9.0-staging] Fix broken debugger/debuggee startup handshake protocol on macOS26. by @github-actions[bot] in [release/9.0-staging] Fix broken debugger/debuggee startup handshake protocol on macOS26. dotnet/runtime#118212
[release/9.0-staging] [NRBF] Allow the users to decode System.Nullable by @github-actions[bot] in [release/9.0-staging] [NRBF] Allow the users to decode System.Nullable<UserStruct> dotnet/runtime#118328
[release/9.0-staging] [Test Only] Disable/modify some TimeZoneInfoTests on Android by @github-actions[bot] in [release/9.0-staging] [Test Only] Disable/modify some TimeZoneInfoTests on Android dotnet/runtime#118455
Update branding to 9.0.9 by @vseanreesermsft in Update branding to 9.0.9 dotnet/runtime#118349
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#118451
[release/9.0-staging] Revert "Remove custom allocator." by @github-actions[bot] in [release/9.0-staging] Revert "Remove custom allocator." dotnet/runtime#118279
[release/9.0] Merge release/9.0-staging changes by @krwq in [release/9.0] Merge release/9.0-staging changes dotnet/runtime#118764
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#117879

Full Changelog: dotnet/runtime@v9.0.8...v9.0.9

9.0.8

Release

What's Changed

[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#116514
[release/9.0] Disable all MT tests on CI by @ilonatommy in [release/9.0] Disable all MT tests on CI dotnet/runtime#116747
[9.0] Revert squash commit and pulls release/9.0 again by @jozkee in [9.0] Revert squash commit and pulls release/9.0 again dotnet/runtime#116764
[release/9.0-staging] Backport "Dispose Xunit ToolCommand" by @ilonatommy in [release/9.0-staging] Backport "Dispose Xunit ToolCommand" dotnet/runtime#116685
[release/9.0-staging] Skip SSL key log test for OpenSSL 3.5+ by @github-actions[bot] in [release/9.0-staging] Skip SSL key log test for OpenSSL 3.5+ dotnet/runtime#116687
[release/9.0-staging] Fix absolute path check when loading hostfxr/hostpolicy/coreclr by @elinor-fung in [release/9.0-staging] Fix absolute path check when loading hostfxr/hostpolicy/coreclr dotnet/runtime#116775
Update openssl dependency for SLES by @NikolaMilosavljevic in Update openssl dependency for SLES dotnet/runtime#116922
[9.0] Backport 115546 FLS initialization fix to 9. by @mangod9 in [9.0] Backport 115546 FLS initialization fix to 9. dotnet/runtime#116872
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#117137
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#116681
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#116455
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#116948
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#115596
[release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/source-build-reference-packages dotnet/runtime#115588
[release/9.0-staging] Map version for Tahoe compatibility. by @github-actions[bot] in [release/9.0-staging] Map version for Tahoe compatibility. dotnet/runtime#116641
[9.0] Update CI OSes by @richlander in [9.0] Update CI OSes dotnet/runtime#115503
Update branding to 9.0.8 by @vseanreesermsft in Update branding to 9.0.8 dotnet/runtime#117283
[release/9.0-staging] Update dependencies from dotnet/sdk by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/sdk dotnet/runtime#116683
Disable odbc tests on net9 interpreter by @BrzVlad in Disable odbc tests on net9 interpreter dotnet/runtime#117245
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#117228
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#117257
[release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/hotreload-utils dotnet/runtime#117184
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#116664
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#116908
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#116626
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#117296
[release/9.0-staging][wbt] Prevent InvalidOperationException on TestOutputHelper logging. by @ilonatommy in [release/9.0-staging][wbt] Prevent InvalidOperationException on TestOutputHelper logging. dotnet/runtime#116916
[release/9.0-staging] Harden Ping_TimedOut_* tests by @github-actions[bot] in [release/9.0-staging] Harden Ping_TimedOut_* tests dotnet/runtime#116630
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#117442
[release/9.0-staging] Fix ILogB for subnormal values by @github-actions[bot] in [release/9.0-staging] Fix ILogB for subnormal values dotnet/runtime#116973
[release/9.0-staging] Fix ordering issue in interface trimming by @github-actions[bot] in [release/9.0-staging] Fix ordering issue in interface trimming dotnet/runtime#114509
[release/9.0-staging][mono][gc] Fix gc descriptor computation for InlineArray structs by @BrzVlad in [release/9.0-staging][mono][gc] Fix gc descriptor computation for InlineArray structs dotnet/runtime#116951
[release/9.0-staging] Fix few RandomAccess.Write edge case bugs by @adamsitnik in [release/9.0-staging] Fix few RandomAccess.Write edge case bugs dotnet/runtime#109646
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions[bot] in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#117471
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#117594
[release/9.0-staging] Update dependencies from dotnet/sdk by @dotnet-maestro[bot] in [release/9.0-staging] Update dependencies from dotnet/sdk dotnet/runtime#117595
[manual] Merge release/9.0-staging into release/9.0 by @tarekgh in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#117634

Full Changelog: dotnet/runtime@v9.0.7...v9.0.8

9.0.7

Release

What's Changed

[release/9.0-staging] Fix crash during Async Break when APC and CET are enabled by @thaystg in [release/9.0-staging] Fix crash during Async Break when APC and CET are enabled dotnet/runtime#114932
[release/9.0-staging] [STJ] Account for F# CompilationMappingAttribute now supporting multiple declarations. by @github-actions in [release/9.0-staging] [STJ] Account for F# CompilationMappingAttribute now supporting multiple declarations. dotnet/runtime#115076
[release/9.0-staging][wasm][interpreter] Fix PackedSimd interpreter intrinsics by @lewing in [release/9.0-staging][wasm][interpreter] Fix PackedSimd interpreter intrinsics dotnet/runtime#114218
[release/9.0-staging] JIT: Fix invalid removal of explicit zeroing in methods without .localsinit by @jakobbotsch in [release/9.0-staging] JIT: Fix invalid removal of explicit zeroing in methods without .localsinit dotnet/runtime#115568
[release/9.0-staging] throw an exception instead of infinite loop in sort_mark_list by @github-actions in [release/9.0-staging] throw an exception instead of infinite loop in sort_mark_list dotnet/runtime#115529
[release/9.0-staging] [DNS] Ignore ObjectDisposedException on CancellationToken Callback by @github-actions in [release/9.0-staging] [DNS] Ignore ObjectDisposedException on CancellationToken Callback dotnet/runtime#115840
Revert "[release/9.0-staging] Fix crash during Async Break when APC and CET are enabled" by @thaystg in Revert "[release/9.0-staging] Fix crash during Async Break when APC and CET are enabled" dotnet/runtime#116015
[release/9.0-staging] Fix SysV first/second return register GC info mismatch by @jakobbotsch in [release/9.0-staging] Fix SysV first/second return register GC info mismatch dotnet/runtime#116206
[release/9.0-staging] Fix PipeStream leak on Windows when pipe is disposed with a pending operation by @github-actions in [release/9.0-staging] Fix PipeStream leak on Windows when pipe is disposed with a pending operation dotnet/runtime#116188
[release/9.0] Fix edge cases in Tarjan GC bridge (Android) by @filipnavara in [release/9.0] Fix edge cases in Tarjan GC bridge (Android) dotnet/runtime#114682
[release/9.0-staging] Revert change to follow symlinks of dotnet host by @github-actions in [release/9.0-staging] Revert change to follow symlinks of dotnet host dotnet/runtime#116244
Update branding to 9.0.7 by @vseanreesermsft in Update branding to 9.0.7 dotnet/runtime#116312
[release/9.0-staging] Fix generation of minidump by @github-actions in [release/9.0-staging] Fix generation of minidump dotnet/runtime#115738
[release/9.0-staging] fix: in rsa signatures, configure digest before padding mode by @github-actions in [release/9.0-staging] fix: in rsa signatures, configure digest before padding mode dotnet/runtime#115695
[release/9.0-staging] JIT: Fix possible heap corruption in outlined composite SSA storage by @github-actions in [release/9.0-staging] JIT: Fix possible heap corruption in outlined composite SSA storage dotnet/runtime#116132
[release/9.0-staging] Update dependencies from dotnet/roslyn by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/roslyn dotnet/runtime#115984
[release/9.0-staging] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/arcade dotnet/runtime#115855
[release/9.0-staging] Update dependencies from dotnet/icu by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/icu dotnet/runtime#115597
[release/9.0-staging] Update dependencies from dotnet/sdk by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/sdk dotnet/runtime#115710
[release/9.0-staging] Update dependencies from dotnet/cecil by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/cecil dotnet/runtime#115504
[release/9.0-staging] Update dependencies from dotnet/xharness by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/xharness dotnet/runtime#115589
[release/9.0] Update dependencies from dotnet/emsdk by @dotnet-maestro in [release/9.0] Update dependencies from dotnet/emsdk dotnet/runtime#115537
Bump SDK version used by WASM since it was broken by dotnet/arcade codeflow by @jozkee in Bump SDK version used by WASM since it was broken by dotnet/arcade codeflow dotnet/runtime#116450
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @github-actions in [automated] Merge branch 'release/9.0' => 'release/9.0-staging' dotnet/runtime#115576
[release/9.0-staging] Link peer's X509 stack handle to parent SSL safe handle by @github-actions in [release/9.0-staging] Link peer's X509 stack handle to parent SSL safe handle dotnet/runtime#115380
[release/9.0-staging] [mono][interp] Minor SSA fixes by @BrzVlad in [release/9.0-staging] [mono][interp] Minor SSA fixes dotnet/runtime#116428
[release/9.0-staging] Update dependencies from dotnet/runtime-assets by @dotnet-maestro in [release/9.0-staging] Update dependencies from dotnet/runtime-assets dotnet/runtime#115677
[release/9.0-staging] Disable the UTFStringConversionFailures test on CI runs by @github-actions in [release/9.0-staging] Disable the UTFStringConversionFailures test on CI runs dotnet/runtime#116460
[manual] Merge release/9.0-staging into release/9.0 by @jozkee in [manual] Merge release/9.0-staging into release/9.0 dotnet/runtime#116459
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/runtime#116499
[release/9.0] Delete s390x and ppc64le helix queues by @github-actions in [release/9.0] Delete s390x and ppc64le helix queues dotnet/runtime#116537

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

9.0.6 Bug Fixes

Read messages from binlog if process output is missing build finished message (#114676)
Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.
Fix debugger app hangs related to thread exit (#114917)
Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.
[Mono] Workaround MSVC miscompiling sgen_clz (#114903)
Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.
Do not set the salt or info if they are NULL for OpenSSL HKDF (#114877)
Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.
[Test Only] Fix Idn tests (#115032)
Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.
JIT: revised fix for fp division issue in profile synthesis (#115026)
Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.
Handle OSSL 3.4 change to SAN:othername formatting (#115361)
Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.
[Mono] Fix c11 ARM64 atomics to issue full memory barrier (#115635)
Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.

Performance Improvements

[WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#114678)
Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.
Improve distribute_free_regions (#115167)
Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.

Technical Improvements

Strip trailing slash from source dir for cmake4 (#114905)
Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.
Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#114995)
Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.
Add support for more libicu versions (#115376)
Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

Run outerloop pipeline only for release branches, not staging/preview (#115011)
Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.

... (truncated)

9.0.5

Release

What's Changed

[release/9.0-staging] [HttpStress] [SslStress] Run stress tests nightly against staging branches by @github-actions in [release/9.0-staging] [HttpStress] [SslStress] Run stress tests nightly against staging branches dotnet/runtime#113476
[release/9.0] [browser][http] mute JS exceptions about network errors + HEAD verb by @github-actions in [release/9.0] [browser][http] mute JS exceptions about network errors + HEAD verb dotnet/runtime#113261
[release/9.0-staging] Fix double dispose of GCHandle in BrowserWebSocket by @github-actions in [release/9.0-staging] Fix double dispose of GCHandle in BrowserWebSocket dotnet/runtime#113541
[release/9.0-staging] [HttpStress] Fix Linux HttpStress build by @antonfirsov in [release/9.0-staging] [HttpStress] Fix Linux HttpStress build dotnet/runtime#113617
[release/9.0-staging] Use minipal_getcpufeatures to detect for AVX (#113032) by @cshung in [release/9.0-staging] Use minipal_getcpufeatures to detect for AVX (#113032) dotnet/runtime#113489
[release/9.0-staging] Backport "Use FLS detach callback as a thread termination notification. Another try." by @VSadov in [release/9.0-staging] Backport "Use FLS detach callback as a thread termination notification. Another try." dotnet/runtime#113055
[release/9.0-staging] [Json] Avoid writing to PipeWriter if IAsyncEnumerable throws before first item by @github-actions in [release/9.0-staging] [Json] Avoid writing to PipeWriter if IAsyncEnumerable throws before first item dotnet/runtime#113699
[browser] Remove experimental args from NodeJS WBT runner (part2) by @maraf in [browser] Remove experimental args from NodeJS WBT runner (part2) dotnet/runtime#113753
[9.0] Update openssl dependency for openSUSE by @NikolaMilosavljevic in [9.0] Update openssl dependency for openSUSE dotnet/runtime#113548
[release/9.0-staging] JIT: avoid fp divide by zero in profile synthesis by @github-actions in [release/9.0-staging] JIT: avoid fp divide by zero in profile synthesis dotnet/runtime#113418
[release/9.0-staging] Do not substitute return values of constrained calls by @github-actions in [release/9.0-staging] Do not substitute return values of constrained calls dotnet/runtime#113462
[release/9.0] Test failure - SendAsync_RequestVersion20_ResponseVersion20 by @github-actions in [master] Update dependencies from dotnet/core-setup dotnet/runtime#11...

Description has been truncated

Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.5 to 10.0.11 Bumps Microsoft.AspNetCore.OpenApi from 8.0.15 to 8.0.30 Bumps Microsoft.Data.SqlClient from 6.1.5 to 6.1.6 Bumps Microsoft.Data.Sqlite from 8.0.29 to 8.0.30 Bumps Microsoft.Extensions.Hosting.WindowsServices from 9.0.0 to 9.0.19 Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.8.1 Bumps Npgsql from 10.0.2 to 10.0.3 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.17.0 Bumps OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.17.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.17.0 Bumps StackExchange.Redis from 2.8.31 to 2.13.17 Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 8.0.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Data.SqlClient dependency-version: 6.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Data.Sqlite dependency-version: 8.0.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.Extensions.Hosting.WindowsServices dependency-version: 9.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Npgsql dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: StackExchange.Redis dependency-version: 2.13.17 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: StackExchange.Redis dependency-version: 2.13.17 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: Swashbuckle.AspNetCore dependency-version: 6.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-08-12T18:12:21Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nuget/microsoft.data.sqlclient@6.1.5 ⏵ 6.1.6
	nuget/microsoft.extensions.hosting.windowsservices@9.0.0 ⏵ 9.0.19
	nuget/opentelemetry.exporter.opentelemetryprotocol@1.16.0 ⏵ 1.17.0
	nuget/opentelemetry.extensions.hosting@1.16.0 ⏵ 1.17.0
	nuget/stackexchange.redis@2.8.31 ⏵ 2.13.17	⁺²
	nuget/microsoft.aspnetcore.mvc.testing@10.0.5 ⏵ 10.0.11
	nuget/microsoft.net.test.sdk@18.3.0 ⏵ 18.8.1
	nuget/npgsql@8.0.9 ⏵ 10.0.3	^-2
	nuget/microsoft.aspnetcore.openapi@8.0.15 ⏵ 8.0.30
	nuget/microsoft.data.sqlite@8.0.29 ⏵ 8.0.30
	nuget/opentelemetry.instrumentation.aspnetcore@1.15.2 ⏵ 1.17.0
	nuget/opentelemetry.instrumentation.http@1.15.1 ⏵ 1.17.0
	nuget/opentelemetry.instrumentation.runtime@1.15.1 ⏵ 1.17.0
	nuget/swashbuckle.aspnetcore@6.6.2 ⏵ 6.9.0

View full report

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 12, 2026

rhamenator merged commit 0fbd938 into main Aug 13, 2026
10 checks passed

rhamenator deleted the dependabot/nuget/AiScrapingDefense.EscalationEngine/nuget-minor-patch-a51dcf53b5 branch August 13, 2026 22:00

Navigation Menu

Bump the nuget-minor-patch group with 14 updates - #127

Bump the nuget-minor-patch group with 14 updates#127
rhamenator merged 1 commit into
mainfrom
dependabot/nuget/AiScrapingDefense.EscalationEngine/nuget-minor-patch-a51dcf53b5

dependabot Bot commented on behalf of github Aug 12, 2026

Uh oh!

socket-security Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 12, 2026

8.0.30

What's Changed

New Contributors

8.0.29

What's Changed

8.0.28

What's Changed

8.0.27

What's Changed

8.0.26

What's Changed

8.0.25

What's Changed

8.0.24

8.0.23

What's Changed

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

6.1.6

Added

WAM broker support for the supported Entra ID authentication modes (Windows only)

Changed

Hardened TDS token parsing with data-length bounds checks

8.0.30

What's Changed

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

9.0.15

9.0.14

9.0.13

What's Changed

9.0.12

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.8

What's Changed

9.0.7

What's Changed

9.0.6

Bug Fixes

Performance Improvements

Technical Improvements

Infrastructure

9.0.5

What's Changed

Uh oh!

socket-security Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant