Skip to content

[automated] Merge branch 'main' => 'release/dnup' - #55622

Open
github-actions[bot] wants to merge 296 commits into
release/dnupfrom
merge/main-to-release/dnup
Open

[automated] Merge branch 'main' => 'release/dnup'#55622
github-actions[bot] wants to merge 296 commits into
release/dnupfrom
merge/main-to-release/dnup

Conversation

@github-actions

@github-actions github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

I detected changes in the main branch which have not been merged yet to release/dnup. I'm a robot and am configured to help you automatically keep release/dnup up to date, so I've opened this PR.

This PR merges commits made on main by the following committers:

  • nagilson
  • Evangelink
  • tannergooding
  • Copilot
  • mthalman
  • baronfel

Instructions for merging from UI

This PR will not be auto-merged. When pull request checks pass, complete this PR by creating a merge commit, not a squash or rebase commit.

merge button instructions

If this repo does not allow creating merge commits from the GitHub UI, use command line instructions.

Instructions for merging via command line

Run these commands to merge this pull request from the command line.

git fetch
git checkout main
git pull --ff-only
git checkout release/dnup
git pull --ff-only
git merge --no-ff main

# If there are merge conflicts, resolve them and then run git merge --continue to complete the merge
# Pushing the changes to the PR branch will re-trigger PR validation.
git push https://github.com/dotnet/sdk HEAD:merge/main-to-release/dnup
or if you are using SSH
git push git@github.com:dotnet/sdk HEAD:merge/main-to-release/dnup

After PR checks are complete push the branch

git push

Instructions for resolving conflicts

⚠️ If there are merge conflicts, you will need to resolve them manually before merging. You can do this using GitHub or using the command line.

Instructions for updating this pull request

Contributors to this repo have permission update this pull request by pushing to the branch 'merge/main-to-release/dnup'. This can be done to resolve conflicts or make other changes to this pull request before it is merged.
The provided examples assume that the remote is named 'origin'. If you have a different remote name, please replace 'origin' with the name of your remote.

git fetch
git checkout -b merge/main-to-release/dnup origin/release/dnup
git pull https://github.com/dotnet/sdk merge/main-to-release/dnup
(make changes)
git commit -m "Updated PR with my changes"
git push https://github.com/dotnet/sdk HEAD:merge/main-to-release/dnup
or if you are using SSH
git fetch
git checkout -b merge/main-to-release/dnup origin/release/dnup
git pull git@github.com:dotnet/sdk merge/main-to-release/dnup
(make changes)
git commit -m "Updated PR with my changes"
git push git@github.com:dotnet/sdk HEAD:merge/main-to-release/dnup

Contact .NET Core Engineering (dotnet/dnceng) if you have questions or issues.
Also, if this PR was generated incorrectly, help us fix it. See https://github.com/dotnet/arcade/blob/main/.github/workflows/scripts/inter-branch-merge.ps1.

ProductConstructionServiceProd and others added 30 commits April 29, 2026 12:03
…dnceng/internal/dotnet-aspnetcore, dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:5ae73aca-14b4-4570-17b0-08dbd53e3897)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [5ae73aca-14b4-4570-17b0-08dbd53e3897](https://maestro.dot.net/subscriptions?search=5ae73aca-14b4-4570-17b0-08dbd53e3897)
- **Build**: [20260429.4](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963011) ([312398](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-aspnetcore/build/312398))
- **Date Produced**: April 29, 2026 11:02:10 AM UTC
- **Commit**: [17022fc6266e6516e4b9e02e518347bec0cadfa6](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GC17022fc6266e6516e4b9e02e518347bec0cadfa6)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27-servicing.26218.9 to 8.0.27-servicing.26229.4][3]
     - dotnet-dev-certs
     - dotnet-user-jwts
     - dotnet-user-secrets
     - Microsoft.AspNetCore.Analyzers
     - Microsoft.AspNetCore.App.Ref.Internal
     - Microsoft.AspNetCore.Components.SdkAnalyzers
     - Microsoft.AspNetCore.DeveloperCertificates.XPlat
     - Microsoft.AspNetCore.Mvc.Analyzers
     - Microsoft.AspNetCore.Mvc.Api.Analyzers
     - VS.Redist.Common.AspNetCore.SharedFramework.x64.8.0
  - From [8.0.27 to 8.0.27][3]
     - Microsoft.AspNetCore.App.Ref
     - Microsoft.AspNetCore.App.Runtime.win-x64
     - Microsoft.AspNetCore.Authorization
     - Microsoft.AspNetCore.Components.Web
     - Microsoft.AspNetCore.TestHost
     - Microsoft.Extensions.FileProviders.Embedded
     - Microsoft.Extensions.ObjectPool
     - Microsoft.JSInterop

[3]: https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore/branches?baseVersion=GC168e721008bf91ced2b6b9989252acc32592b1de&targetVersion=GC17022fc6266e6516e4b9e02e518347bec0cadfa6&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:5ae73aca-14b4-4570-17b0-08dbd53e3897)




[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 8.0.27-servicing.26218.4 to 8.0.27-servicing.26229.1 (parent: Microsoft.WindowsDesktop.App.Ref)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:43ca46dd-3142-499e-f076-08dbd5a5cbe7)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [43ca46dd-3142-499e-f076-08dbd5a5cbe7](https://maestro.dot.net/subscriptions?search=43ca46dd-3142-499e-f07...
…dnceng/internal/dotnet-aspnetcore, dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:1ab2aba6-b648-40a9-9fe8-08dca2920c50)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [1ab2aba6-b648-40a9-9fe8-08dca2920c50](https://maestro.dot.net/subscriptions?search=1ab2aba6-b648-40a9-9fe8-08dca2920c50)
- **Build**: [20260429.4](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963011) ([312398](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-aspnetcore/build/312398))
- **Date Produced**: April 29, 2026 11:02:10 AM UTC
- **Commit**: [17022fc6266e6516e4b9e02e518347bec0cadfa6](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GC17022fc6266e6516e4b9e02e518347bec0cadfa6)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27-servicing.26218.9 to 8.0.27-servicing.26229.4][3]
     - dotnet-dev-certs
     - dotnet-user-jwts
     - dotnet-user-secrets
     - Microsoft.AspNetCore.Analyzers
     - Microsoft.AspNetCore.App.Ref.Internal
     - Microsoft.AspNetCore.Components.SdkAnalyzers
     - Microsoft.AspNetCore.DeveloperCertificates.XPlat
     - Microsoft.AspNetCore.Mvc.Analyzers
     - Microsoft.AspNetCore.Mvc.Api.Analyzers
     - VS.Redist.Common.AspNetCore.SharedFramework.x64.8.0
  - From [8.0.27 to 8.0.27][3]
     - Microsoft.AspNetCore.App.Ref
     - Microsoft.AspNetCore.App.Runtime.win-x64
     - Microsoft.AspNetCore.Authorization
     - Microsoft.AspNetCore.Components.Web
     - Microsoft.AspNetCore.TestHost
     - Microsoft.Extensions.FileProviders.Embedded
     - Microsoft.Extensions.ObjectPool
     - Microsoft.JSInterop

[3]: https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore/branches?baseVersion=GC168e721008bf91ced2b6b9989252acc32592b1de&targetVersion=GC17022fc6266e6516e4b9e02e518347bec0cadfa6&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:1ab2aba6-b648-40a9-9fe8-08dca2920c50)




[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 8.0.27-servicing.26218.4 to 8.0.27-servicing.26229.1 (parent: Microsoft.WindowsDesktop.App.Ref)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:11ffd28b-eb51-469a-d3fb-08dca292067e)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [11ffd28b-eb51-469a-d3fb-08dca292067e](https://maestro.dot.net/subscriptions?search=11ffd28b-eb51-469a-d3f...
…dnceng/internal/dotnet-aspnetcore

This pull request updates the following dependencies

[marker]: <> (Begin:7c429c14-b12b-40f6-ae9e-395f98f369df)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [7c429c14-b12b-40f6-ae9e-395f98f369df](https://maestro.dot.net/subscriptions?search=7c429c14-b12b-40f6-ae9e-395f98f369df)
- **Build**: [20260429.1](https://dev.azure.com/dnceng/internal/_build/results?buildId=2962961) ([312385](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-aspnetcore/build/312385))
- **Date Produced**: April 29, 2026 9:46:53 AM UTC
- **Commit**: [f9193be90fe1dd6348e8525bdbd7a359a6bf008b](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GCf9193be90fe1dd6348e8525bdbd7a359a6bf008b)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16-servicing.26218.8 to 9.0.16-servicing.26229.1][1]
     - dotnet-dev-certs
     - dotnet-user-jwts
     - dotnet-user-secrets
     - Microsoft.AspNetCore.Analyzers
     - Microsoft.AspNetCore.App.Ref.Internal
     - Microsoft.AspNetCore.Components.SdkAnalyzers
     - Microsoft.AspNetCore.DeveloperCertificates.XPlat
     - Microsoft.AspNetCore.Mvc.Analyzers
     - Microsoft.AspNetCore.Mvc.Api.Analyzers
     - VS.Redist.Common.AspNetCore.SharedFramework.x64.9.0
     - Microsoft.SourceBuild.Intermediate.aspnetcore
  - From [9.0.16 to 9.0.16][1]
     - Microsoft.AspNetCore.App.Ref
     - Microsoft.AspNetCore.App.Runtime.win-x64
     - Microsoft.AspNetCore.Authorization
     - Microsoft.AspNetCore.Components.Web
     - Microsoft.AspNetCore.TestHost
     - Microsoft.Extensions.FileProviders.Embedded
     - Microsoft.Extensions.ObjectPool
     - Microsoft.JSInterop

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore/branches?baseVersion=GCdb9d9da4dedbeca6c6fedb2dd67506d8857f413c&targetVersion=GCf9193be90fe1dd6348e8525bdbd7a359a6bf008b&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:7c429c14-b12b-40f6-ae9e-395f98f369df)
…dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 9.0.16-rtm.26218.3 to 9.0.16-rtm.26229.3 (parent: Microsoft.WindowsDesktop.App.Ref)
    - **Microsoft.Dotnet.WinForms.ProjectTemplates**: from 9.0.16-servicing.26218.2 to 9.0.16-servicing.26229.1 (parent: Microsoft.WindowsDesktop.App.Runtime.win-x64)
    - **Microsoft.DotNet.Wpf.ProjectTemplates**: from 9.0.16-rtm.26218.3 to 9.0.16-rtm.26229.3 (parent: Microsoft.WindowsDesktop.App.Runtime.win-x64)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:87db4525-6885-42da-8dd0-7ce296d7fd1a)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [87db4525-6885-42da-8dd0-7ce296d7fd1a](https://maestro.dot.net/subscriptions?search=87db4525-6885-42da-8dd0-7ce296d7fd1a)
- **Build**: [20260429.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963095) ([312393](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-windowsdesktop/build/312393))
- **Date Produced**: April 29, 2026 10:36:31 AM UTC
- **Commit**: [e9deaa40dbdc20ce818f1d96397265a9736869d5](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?_a=history&version=GCe9deaa40dbdc20ce818f1d96397265a9736869d5)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16 to 9.0.16][1]
     - Microsoft.WindowsDesktop.App.Ref
     - Microsoft.WindowsDesktop.App.Runtime.win-x64
  - From [9.0.16-servicing.26218.2 to 9.0.16-servicing.26229.3][1]
     - VS.Redist.Common.WindowsDesktop.SharedFramework.x64.9.0
     - VS.Redist.Common.WindowsDesktop.TargetingPack.x64.9.0

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop/branches?baseVersion=GC7707679f76d1ac95793f1f0c27f9fcec80fc8402&targetVersion=GCe9deaa40dbdc20ce818f1d96397265a9736869d5&_a=files

[DependencyUpdate]: <> (End)

[marker]: <> (End:87db4525-6885-42da-8dd0-7ce296d7fd1a)
…dnceng/internal/dotnet-aspnetcore

This pull request updates the following dependencies

[marker]: <> (Begin:7c429c14-b12b-40f6-ae9e-395f98f369df)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [7c429c14-b12b-40f6-ae9e-395f98f369df](https://maestro.dot.net/subscriptions?search=7c429c14-b12b-40f6-ae9e-395f98f369df)
- **Build**: [20260429.11](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963304) ([312444](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-aspnetcore/build/312444))
- **Date Produced**: April 29, 2026 5:30:48 PM UTC
- **Commit**: [07a496738e36552857af89c1ea94f6b47780a47d](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GC07a496738e36552857af89c1ea94f6b47780a47d)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16-servicing.26229.1 to 9.0.16-servicing.26229.11][2]
     - dotnet-dev-certs
     - dotnet-user-jwts
     - dotnet-user-secrets
     - Microsoft.AspNetCore.Analyzers
     - Microsoft.AspNetCore.App.Ref.Internal
     - Microsoft.AspNetCore.Components.SdkAnalyzers
     - Microsoft.AspNetCore.DeveloperCertificates.XPlat
     - Microsoft.AspNetCore.Mvc.Analyzers
     - Microsoft.AspNetCore.Mvc.Api.Analyzers
     - VS.Redist.Common.AspNetCore.SharedFramework.x64.9.0
     - Microsoft.SourceBuild.Intermediate.aspnetcore
  - From [9.0.16 to 9.0.16][2]
     - Microsoft.AspNetCore.App.Ref
     - Microsoft.AspNetCore.App.Runtime.win-x64
     - Microsoft.AspNetCore.Authorization
     - Microsoft.AspNetCore.Components.Web
     - Microsoft.AspNetCore.TestHost
     - Microsoft.Extensions.FileProviders.Embedded
     - Microsoft.Extensions.ObjectPool
     - Microsoft.JSInterop

[2]: https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore/branches?baseVersion=GCf9193be90fe1dd6348e8525bdbd7a359a6bf008b&targetVersion=GC07a496738e36552857af89c1ea94f6b47780a47d&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:7c429c14-b12b-40f6-ae9e-395f98f369df)
…dnceng/internal/dotnet-runtime

This pull request updates the following dependencies

[marker]: <> (Begin:dd95552e-72fb-4363-9b59-08dbd5a5c3e7)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-runtime
- **Subscription**: [dd95552e-72fb-4363-9b59-08dbd5a5c3e7](https://maestro.dot.net/subscriptions?search=dd95552e-72fb-4363-9b59-08dbd5a5c3e7)
- **Build**: [20260429.22](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963666) ([312505](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-runtime/build/312505))
- **Date Produced**: April 30, 2026 4:07:59 AM UTC
- **Commit**: [a6bde67c455f2ac219988c7a66171631090b6f65](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?_a=history&version=GCa6bde67c455f2ac219988c7a66171631090b6f65)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27-servicing.26228.15 to 8.0.27-servicing.26229.22][1]
     - Microsoft.NET.HostModel
     - Microsoft.NETCore.Platforms
     - VS.Redist.Common.NetCore.SharedFramework.x64.8.0
     - VS.Redist.Common.NetCore.TargetingPack.x64.8.0
  - From [8.0.27 to 8.0.27][1]
     - Microsoft.NET.ILLink.Tasks
     - Microsoft.NETCore.App.Host.win-x64
     - Microsoft.NETCore.App.Ref
     - Microsoft.NETCore.App.Runtime.win-x64
     - Microsoft.NETCore.DotNetHostResolver
  - From [8.0.3 to 8.0.3][1]
     - System.Security.Cryptography.Xml

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC81020d99b8f723bf453ffabc50bcc871c2f4415d&targetVersion=GCa6bde67c455f2ac219988c7a66171631090b6f65&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:dd95552e-72fb-4363-9b59-08dbd5a5c3e7)
…dnceng/internal/dotnet-runtime

This pull request updates the following dependencies

[marker]: <> (Begin:82bc8158-ef88-4a27-3f7b-08dca299e604)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-runtime
- **Subscription**: [82bc8158-ef88-4a27-3f7b-08dca299e604](https://maestro.dot.net/subscriptions?search=82bc8158-ef88-4a27-3f7b-08dca299e604)
- **Build**: [20260429.22](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963666) ([312505](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-runtime/build/312505))
- **Date Produced**: April 30, 2026 4:07:59 AM UTC
- **Commit**: [a6bde67c455f2ac219988c7a66171631090b6f65](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?_a=history&version=GCa6bde67c455f2ac219988c7a66171631090b6f65)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27-servicing.26228.15 to 8.0.27-servicing.26229.22][1]
     - Microsoft.NET.HostModel
     - Microsoft.NETCore.Platforms
     - VS.Redist.Common.NetCore.SharedFramework.x64.8.0
     - VS.Redist.Common.NetCore.TargetingPack.x64.8.0
  - From [8.0.27 to 8.0.27][1]
     - Microsoft.NET.ILLink.Tasks
     - Microsoft.NETCore.App.Host.win-x64
     - Microsoft.NETCore.App.Ref
     - Microsoft.NETCore.App.Runtime.win-x64
     - Microsoft.NETCore.DotNetHostResolver
  - From [8.0.3 to 8.0.3][1]
     - System.Security.Cryptography.Xml

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC81020d99b8f723bf453ffabc50bcc871c2f4415d&targetVersion=GCa6bde67c455f2ac219988c7a66171631090b6f65&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:82bc8158-ef88-4a27-3f7b-08dca299e604)
…dnceng/internal/dotnet-runtime

This pull request updates the following dependencies

[marker]: <> (Begin:57bb26e6-6f64-40cf-a4ea-5b973f41bc22)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-runtime
- **Subscription**: [57bb26e6-6f64-40cf-a4ea-5b973f41bc22](https://maestro.dot.net/subscriptions?search=57bb26e6-6f64-40cf-a4ea-5b973f41bc22)
- **Build**: [20260429.23](https://dev.azure.com/dnceng/internal/_build/results?buildId=2963667) ([312507](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-runtime/build/312507))
- **Date Produced**: April 30, 2026 4:19:01 AM UTC
- **Commit**: [a1e6809fb8318884882ceff057000654f558738a](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?_a=history&version=GCa1e6809fb8318884882ceff057000654f558738a)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16 to 9.0.16][1]
     - Microsoft.Bcl.AsyncInterfaces
     - Microsoft.Extensions.DependencyModel
     - Microsoft.Extensions.FileProviders.Abstractions
     - Microsoft.Extensions.FileSystemGlobbing
     - Microsoft.Extensions.Logging
     - Microsoft.Extensions.Logging.Abstractions
     - Microsoft.Extensions.Logging.Console
     - Microsoft.NET.ILLink.Tasks
     - Microsoft.NETCore.App.Host.win-x64
     - Microsoft.NETCore.App.Ref
     - Microsoft.NETCore.App.Runtime.win-x64
     - Microsoft.Win32.SystemEvents
     - System.CodeDom
     - System.Composition.AttributedModel
     - System.Composition.Convention
     - System.Composition.Hosting
     - System.Composition.Runtime
     - System.Composition.TypedParts
     - System.Configuration.ConfigurationManager
     - System.Formats.Asn1
     - System.Reflection.MetadataLoadContext
     - System.Resources.Extensions
     - System.Security.Cryptography.Pkcs
     - System.Security.Cryptography.ProtectedData
     - System.Security.Cryptography.Xml
     - System.Security.Permissions
     - System.ServiceProcess.ServiceController
     - System.Text.Encoding.CodePages
     - System.Text.Json
     - System.Windows.Extensions
  - From [9.0.16-servicing.26228.17 to 9.0.16-servicing.26229.23][1]
     - Microsoft.NET.HostModel
     - Microsoft.NETCore.Platforms
     - VS.Redist.Common.NetCore.SharedFramework.x64.9.0
     - VS.Redist.Common.NetCore.TargetingPack.x64.9.0
     - Microsoft.SourceBuild.Intermediate.runtime.linux-x64

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC2a90773a6f08116292accdc493b970ef3c7ed2c0&targetVersion=GCa1e6809fb8318884882ceff057000654f558738a&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:57bb26e6-6f64-40cf-a4ea-5b973f41bc22)
…dnceng/internal/dotnet-aspnetcore, dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 8.0.27-servicing.26229.1 to 8.0.27-servicing.26230.2 (parent: Microsoft.WindowsDesktop.App.Ref)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:11ffd28b-eb51-469a-d3fb-08dca292067e)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [11ffd28b-eb51-469a-d3fb-08dca292067e](https://maestro.dot.net/subscriptions?search=11ffd28b-eb51-469a-d3fb-08dca292067e)
- **Build**: [20260430.1](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964096) ([312553](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-windowsdesktop/build/312553))
- **Date Produced**: April 30, 2026 10:45:54 AM UTC
- **Commit**: [f219383822edeeaf58b32c4808576cf4b159ba71](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?_a=history&version=GCf219383822edeeaf58b32c4808576cf4b159ba71)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27 to 8.0.27][1]
     - Microsoft.WindowsDesktop.App.Ref
     - Microsoft.WindowsDesktop.App.Runtime.win-x64
  - From [8.0.27-servicing.26229.2 to 8.0.27-servicing.26230.1][1]
     - VS.Redist.Common.WindowsDesktop.SharedFramework.x64.8.0
     - VS.Redist.Common.WindowsDesktop.TargetingPack.x64.8.0

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop/branches?baseVersion=GC863402af9cd6418ea730f359a6b21db7550dc2e5&targetVersion=GCf219383822edeeaf58b32c4808576cf4b159ba71&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:11ffd28b-eb51-469a-d3fb-08dca292067e)



[marker]: <> (Begin:1ab2aba6-b648-40a9-9fe8-08dca2920c50)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [1ab2aba6-b648-40a9-9fe8-08dca2920c50](https://maestro.dot.net/subscriptions?search=1ab2aba6-b648-40a9-9fe8-08dca2920c50)
- **Build**: [20260430.8](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964092) ([312566](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-aspnetcore/build/312566))
- **Date Produced**: April 30, 2026 12:34:58 PM UTC
- **Commit**: [be2530c3035e4bfa7670c6b18f5a64ef89e0e80d](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GCbe2530c3035e4bfa7670c6b18f5a64ef89e0e80d)
- **Branch**: [refs/heads/internal/release/8.0](https://dev...
…dnceng/internal/dotnet-aspnetcore, dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 8.0.27-servicing.26229.1 to 8.0.27-servicing.26230.2 (parent: Microsoft.WindowsDesktop.App.Ref)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:43ca46dd-3142-499e-f076-08dbd5a5cbe7)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [43ca46dd-3142-499e-f076-08dbd5a5cbe7](https://maestro.dot.net/subscriptions?search=43ca46dd-3142-499e-f076-08dbd5a5cbe7)
- **Build**: [20260430.1](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964096) ([312553](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-windowsdesktop/build/312553))
- **Date Produced**: April 30, 2026 10:45:54 AM UTC
- **Commit**: [f219383822edeeaf58b32c4808576cf4b159ba71](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?_a=history&version=GCf219383822edeeaf58b32c4808576cf4b159ba71)
- **Branch**: [refs/heads/internal/release/8.0](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?version=GBrefs/heads/internal/release/8.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [8.0.27 to 8.0.27][1]
     - Microsoft.WindowsDesktop.App.Ref
     - Microsoft.WindowsDesktop.App.Runtime.win-x64
  - From [8.0.27-servicing.26229.2 to 8.0.27-servicing.26230.1][1]
     - VS.Redist.Common.WindowsDesktop.SharedFramework.x64.8.0
     - VS.Redist.Common.WindowsDesktop.TargetingPack.x64.8.0

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop/branches?baseVersion=GC863402af9cd6418ea730f359a6b21db7550dc2e5&targetVersion=GCf219383822edeeaf58b32c4808576cf4b159ba71&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:43ca46dd-3142-499e-f076-08dbd5a5cbe7)



[marker]: <> (Begin:5ae73aca-14b4-4570-17b0-08dbd53e3897)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [5ae73aca-14b4-4570-17b0-08dbd53e3897](https://maestro.dot.net/subscriptions?search=5ae73aca-14b4-4570-17b0-08dbd53e3897)
- **Build**: [20260430.8](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964092) ([312566](https://maestro.dot.net/channel/3880/azdo:dnceng:internal:dotnet-aspnetcore/build/312566))
- **Date Produced**: April 30, 2026 12:34:58 PM UTC
- **Commit**: [be2530c3035e4bfa7670c6b18f5a64ef89e0e80d](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GCbe2530c3035e4bfa7670c6b18f5a64ef89e0e80d)
- **Branch**: [refs/heads/internal/release/8.0](https://dev...
…dnceng/internal/dotnet-windowsdesktop

This pull request updates the following dependencies

[marker]: <> (Begin:Coherency Updates)
## Coherency Updates

The following updates ensure that dependencies with a *CoherentParentDependency*
attribute were produced in a build used as input to the parent dependency's build.
See [Dependency Description Format](https://github.com/dotnet/arcade/blob/master/Documentation/DependencyDescriptionFormat.md#dependency-description-overview)

[DependencyUpdate]: <> (Begin)

- **Coherency Updates**:
    - **Microsoft.NET.Sdk.WindowsDesktop**: from 9.0.16-rtm.26229.3 to 9.0.16-rtm.26230.4 (parent: Microsoft.WindowsDesktop.App.Ref)
    - **Microsoft.Dotnet.WinForms.ProjectTemplates**: from 9.0.16-servicing.26229.1 to 9.0.16-servicing.26230.2 (parent: Microsoft.WindowsDesktop.App.Runtime.win-x64)
    - **Microsoft.DotNet.Wpf.ProjectTemplates**: from 9.0.16-rtm.26229.3 to 9.0.16-rtm.26230.4 (parent: Microsoft.WindowsDesktop.App.Runtime.win-x64)

[DependencyUpdate]: <> (End)

[marker]: <> (End:Coherency Updates)

[marker]: <> (Begin:87db4525-6885-42da-8dd0-7ce296d7fd1a)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop
- **Subscription**: [87db4525-6885-42da-8dd0-7ce296d7fd1a](https://maestro.dot.net/subscriptions?search=87db4525-6885-42da-8dd0-7ce296d7fd1a)
- **Build**: [20260430.2](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964185) ([312571](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-windowsdesktop/build/312571))
- **Date Produced**: April 30, 2026 1:12:51 PM UTC
- **Commit**: [7bad09c6a7b024bc98987a9fe2c66a79332bf8c5](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?_a=history&version=GC7bad09c6a7b024bc98987a9fe2c66a79332bf8c5)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16 to 9.0.16][1]
     - Microsoft.WindowsDesktop.App.Ref
     - Microsoft.WindowsDesktop.App.Runtime.win-x64
  - From [9.0.16-servicing.26229.3 to 9.0.16-servicing.26230.2][1]
     - VS.Redist.Common.WindowsDesktop.SharedFramework.x64.9.0
     - VS.Redist.Common.WindowsDesktop.TargetingPack.x64.9.0

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-windowsdesktop/branches?baseVersion=GCe9deaa40dbdc20ce818f1d96397265a9736869d5&targetVersion=GC7bad09c6a7b024bc98987a9fe2c66a79332bf8c5&_a=files

[DependencyUpdate]: <> (End)


[marker]: <> (End:87db4525-6885-42da-8dd0-7ce296d7fd1a)
…dnceng/internal/dotnet-aspnetcore

This pull request updates the following dependencies

[marker]: <> (Begin:7c429c14-b12b-40f6-ae9e-395f98f369df)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore
- **Subscription**: [7c429c14-b12b-40f6-ae9e-395f98f369df](https://maestro.dot.net/subscriptions?search=7c429c14-b12b-40f6-ae9e-395f98f369df)
- **Build**: [20260430.9](https://dev.azure.com/dnceng/internal/_build/results?buildId=2964093) ([312565](https://maestro.dot.net/channel/5128/azdo:dnceng:internal:dotnet-aspnetcore/build/312565))
- **Date Produced**: April 30, 2026 12:29:48 PM UTC
- **Commit**: [4d825aeb5e5023588c036709c7914008b625b0eb](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?_a=history&version=GC4d825aeb5e5023588c036709c7914008b625b0eb)
- **Branch**: [refs/heads/internal/release/9.0](https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore?version=GBrefs/heads/internal/release/9.0)

[DependencyUpdate]: <> (Begin)

- **Dependency Updates**:
  - From [9.0.16-servicing.26229.11 to 9.0.16-servicing.26230.9][1]
     - dotnet-dev-certs
     - dotnet-user-jwts
     - dotnet-user-secrets
     - Microsoft.AspNetCore.Analyzers
     - Microsoft.AspNetCore.App.Ref.Internal
     - Microsoft.AspNetCore.Components.SdkAnalyzers
     - Microsoft.AspNetCore.DeveloperCertificates.XPlat
     - Microsoft.AspNetCore.Mvc.Analyzers
     - Microsoft.AspNetCore.Mvc.Api.Analyzers
     - VS.Redist.Common.AspNetCore.SharedFramework.x64.9.0
     - Microsoft.SourceBuild.Intermediate.aspnetcore
  - From [9.0.16 to 9.0.16][1]
     - Microsoft.AspNetCore.App.Ref
     - Microsoft.AspNetCore.App.Runtime.win-x64
     - Microsoft.AspNetCore.Authorization
     - Microsoft.AspNetCore.Components.Web
     - Microsoft.AspNetCore.TestHost
     - Microsoft.Extensions.FileProviders.Embedded
     - Microsoft.Extensions.ObjectPool
     - Microsoft.JSInterop

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-aspnetcore/branches?baseVersion=GC07a496738e36552857af89c1ea94f6b47780a47d&targetVersion=GC4d825aeb5e5023588c036709c7914008b625b0eb&_a=files

[DependencyUpdate]: <> (End)

[marker]: <> (End:7c429c14-b12b-40f6-ae9e-395f98f369df)
--client-temp must be passed because:
1. user process client may have a terminal with a different  TEMP env var or TMP setting
2. sever may try to resolve TEMP to sever TEMP that does not grant reading to client (needed for manifest path)
3. user process under local only privlleges is still is a concern even if SIDs match  after the point in time UAC and consolidating the --client-temp to be included within the UAC time window removes this concern
4. it is not possible to observe client temp from the server process with 100% authenticity
5. log temp resolution may fallback but falling back for the manifest path will cause a failure
6. the client and server should both always know about --client-temp because the same host is used to launch both
 7. confirmed with workloads code author no further risks we could consider adding it as an optional arg to elevate
Restrict Workloads Pipe Access

backport of https://dev.azure.com/dnceng/internal/_git/dotnet-sdk/pullrequest/60602?path=%2Fsrc%2FCli%2Fdotnet%2FInstaller%2FWindows%2FWindowsUtils.cs

file paths are slightly different but code changes should remain identical.

----
#### AI description  (iteration 1)
#### PR Classification
Security enhancement to restrict workload pipe access by implementing user-specific access controls and path validation to prevent unauthorized access and directory traversal attacks.

#### PR Summary
This PR enhances security for the workload installer by restricting IPC pipe access to the specific invoking user and adding comprehensive path validation to prevent traversal attacks.

- `WindowsUtils.cs`: Added `GetPipeClientIdentifier()` and `CreatePipeSecurity()` methods to restrict pipe access to the parent process's user SID instead of all authenticated users, plus added `ValidateLogFilePath()`, `ValidatePackagePath()`, and `ValidatePathComponent()` methods to prevent directory traversal attacks
- `NetSdkMsiInstallerServer.cs`: Updated pipe security configuration to use the new restricted access controls that limit connections to only the parent process's user
- `MsiPackageCache.cs`: Added path component validation for package IDs and versions to prevent path traversal when caching payloads
- `WindowsInstallerTests.cs`: Added 15 new test cases covering pipe security restrictions, path validation against traversal attacks, and sibling-prefix attacks
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->
…0260512.3

On relative base path root
Microsoft.SourceBuild.Intermediate.templating , Microsoft.TemplateEngine.Mocks From Version 8.0.128-servicing.26255.2 -> To Version 8.0.128-servicing.26262.3
Microsoft.TemplateEngine.Abstractions From Version 8.0.128 -> To Version 8.0.128
nagilson and others added 11 commits August 5, 2026 16:44
Reset patterns:
- CODEOWNERS
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: e05d5996-f5a3-444d-bd9c-1bd2a661b3ef
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: e05d5996-f5a3-444d-bd9c-1bd2a661b3ef
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: e05d5996-f5a3-444d-bd9c-1bd2a661b3ef
Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com>
Co-authored-by: Matt Thalman <mthalman@microsoft.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 1c24c9e6-a8d5-480a-ab2a-30fe04e79e0d
@mthalman

mthalman commented Aug 6, 2026

Copy link
Copy Markdown
Member

@copilot resolve the merge conflicts in this pull request

@mthalman

mthalman commented Aug 6, 2026

Copy link
Copy Markdown
Member

@copilot resolve the merge conflicts in this pull request

Copilot AI and others added 6 commits August 6, 2026 17:54
…-release/dnup

# Conflicts:
#	.github/copilot-instructions.md

Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>
…/dnup

# Conflicts:
#	eng/common/cross/build-rootfs.sh
#	eng/common/tools.sh

Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>
Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>
Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>
Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>
Co-authored-by: mthalman <15789599+mthalman@users.noreply.github.com>

Copilot AI commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Resolved the merge conflicts and pushed the updated branch. The resolving tip commit is 29ecdf9.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@mthalman

mthalman commented Aug 7, 2026

Copy link
Copy Markdown
Member

/ba-g #55636

@mthalman
mthalman enabled auto-merge August 7, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.