.NET 9.0.7

Release

What's Changed

• Update branding to 9.0.7 by @vseanreesermsft in #62242
• [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in #62199
• Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in #62118
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #61986
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61945
• [release/9.0] Update Alpine helix references by @wtgodbe in #62240
• [Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in #62038
• [release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in #62248
• [release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in #62283
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #62281
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #62282
• Merging internal commits for release/9.0 by @vseanreesermsft in #62303

Full Changelog: v9.0.6...v9.0.7

.NET 8.0.18

Release

What's Changed

• Update branding to 8.0.18 by @vseanreesermsft in #62241
• [release/8.0] Update Alpine helix references by @github-actions in #62243
• [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @dependabot in #62201
• [8.0] Delete src/arcade directory by @akoeplinger in #61994
• [Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in #62037
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #62006
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61944
• [release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in #62247
• [release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in #62284
• backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in #62290
• Merging internal commits for release/8.0 by @vseanreesermsft in #62302

Full Changelog: v8.0.17...v8.0.18

v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

.NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @vseanreesermsft in #61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in #61261
• [release/9.0] Upgrade to Ubuntu 22 by @github-actions in #61215
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #60964
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60902
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @github-actions in #60916
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #61354
• Merging internal commits for release/9.0 by @vseanreesermsft in #61393
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @wtgodbe in #60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @github-actions in #61374
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #61483
• [Identity] Fix Identity UI asset definitions by @javiercn in #59100

Full Changelog: v9.0.4...v9.0.5

.NET 8.0.16

Release

What's Changed

• Update branding to 8.0.16 by @vseanreesermsft in #61283
• [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in #61260
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #61281
• [release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in #61216
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60901
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60926
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61404
• Merging internal commits for release/8.0 by @vseanreesermsft in #61398
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61411
• Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in #60352
• [release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in #61375
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #61442
• fetch TLS client hello message from HTTP.SYS by @BrennanConroy in #61494

Full Changelog: v8.0.15...v8.0.16

.NET 10.0 Preview 3

What's Changed

• Update branding to preview3 by @wtgodbe in #60508
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60510
• Update milestones for Preview2/3 by @wtgodbe in #60521
• Revert "Revert "Revert "Update .NET build URLs""" by @wtgodbe in #60519
• Limit types that get converted to null for empty/null input in NullableConverter by @oroztocil in #60498
• Avoid logging bad requests as application errors if the connection was aborted by @adityamandaleeka in #60359
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60511
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60531
• Issue #60416 - Correction of BufferedReadStream 's Position by @nidaca in #60529
• Simplify PublicTopLevelProgramGenerator by @Youssef1313 in #60222
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60549
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60444
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60443
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60579
• Enable arm64 DEBs by @NikolaMilosavljevic in #60565
• Fix: Mark catch-all route parameters as optional (#60392) by @mapedersen in #60544
• Add module initializer for Verify.SourceGenerators by @captainsafia in #60547
• [main] [release/10.0-preview1] Do not remove wixpacks from items to sign by @github-actions in #60524
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60580
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60559
• Add support for AddOpenApiOperationTransformer API by @captainsafia in #60566
• update area owners by @danmoseley in #60421
• Upgrade Facebook Graph API version to v22.0 by @NSTom in #59387
• Fix incorrect path to included script file in Blazor project template by @oroztocil in #60607
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60623
• Fix MD linting in area-owners.md by @sebastienros in #60632
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60637
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60639
• Scroll in enhanced navigation behaves same as in client side routing by @ilonatommy in #60296
• Support resolving OpenAPI server URLs from HttpRequest by @captainsafia in #60617
• Only build BuildAfterTargeting pack on win-x64 by @wtgodbe in #60658
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60661
• Update xcopy-msbuild to latest available version by @benhopkinstech in #60666
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60702
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60703
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60676
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60701
• Add support for ServerSentEventsResult and extension methods by @captainsafia in #60616
• 1es-ify Localization pipeline by @wtgodbe in #60720
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60730
• Suppress CS1591 warnings for PublicTopLevelProgram.Generated.g.cs by @benhopkinstech in #60727
• Fix: Inconsistent certificate chain handling between endpoint and default configuration by @jnjudge1 in #60710
• Fix use of ReconnectModal in Blazor templates with auto mode and global interactivity by @oroztocil in #60735
• Fix for: Minimal APIs and controllers treat header arrays differently by @smnsht in #58251
• Update Selenium versions by @JamesNK in #60744
• Unquarantine EventCountersAndMetricsValues and VerifyCountersFireWithCorrectValues by @SteveSandersonMS in #60651
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60746
• Add location.reload on rejected Blazor reconnection to ReconnectModal… by @oroztocil in #60753
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60601
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60771
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60772
• Don't send body in HEAD response when using PipeWriter.Advance before headers flushed by @BrennanConroy in #59725
• Update to Microsoft.OpenApi v2.0.0-preview.11 by @captainsafia in #60761
• Add avif MIME type by @xt0rted in #60790
• [main] (deps): Bump src/submodules/googletest from 2b6b042 to 7218908 by @dependabot in #60664
• Localized file check-in by OneLocBuild Task: Build definition ID 1159: Build ID 2656907 by @dotnet-bot in #60736
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60793
• Sync shared code from runtime by @github-actions in #60782
• Clarify DefaultPolicy and FallbackPolicy Behavior in XML Docs by @shethaadit in #60619
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60821
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60839
• [Blazor] Flow the WebAssembly options from Server to client through SSR marker by @maraf in #60714
• Refactoring DiagnosticDescriptors.cs files by @benhopkinstech in #60832
• Update milestones for April by @wtgodbe in #60853
• Deduplicate assets produced on multiple build legs in the VMR to only be produced on the 'primary' build leg by @jkoritzinsky in #60792
• Add doc link for policybot by @wtgodbe in #60856
• Update Playwright version in Versions.props by @sebastienros in #60854
• Fix punctuation of documentation in AuthenticationHandler.cs by @alexbeeston in #60814
• Descriptive Error for Improper Use of [AsParameters] by @smnsht in #58218
• Check length of TypeArguments before accessing via index by @benhopkinstech in #60742
• Add more schema tests by @captainsafia in #60822
• Fix apostrophes in ReconnectModal.razor.js by @danroth27 in #60816
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60838
• Setting the Description in a ProducesResponseTypeAttribute works correctly for Minimal API by @sander1095 in #60539
• Add Microsoft.AspNetCore.OpenApi to the webapiaot template (with an optional flag to disable it) by @sander1095 in #60337
• Update .NET SDK to 10.0.100-preview.3.25122.1 by @github-actions in #60564
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60861
• Quarantine RadioButtonGetsResetAfterSubmittingEnhancedForm test by @captainsafia in #60874
• Update project templates use primary constructors and collection expressions by @Varorbc in https://github.com/dotnet/aspnetcore/pul...

.NET 8.0.15

Release

What's Changed

• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60355
• Update branding to 8.0.15 by @vseanreesermsft in #60784
• Add partitioned to cookie for SignalR browser testing by @BrennanConroy in #60728
• [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in #60677
• Merging internal commits for release/8.0 by @vseanreesermsft in #60879

Full Changelog: v8.0.14...v8.0.15

.NET 10.0 Preview 2

What's Changed

• Update branding to preview2 by @wtgodbe in #60057
• Compute dates in DefaultKeyResolver once by @martincostello in #60051
• Fix remarks tag structure in xml documentation comment of IRazorViewE… by @gekka in #60040
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60058
• Better implementation of EventCallback.Equals by @JelleHissink in #53395
• Add public method to QuickGrid to close column options UI by @matthetherington in #57904
• use GeneratedRegex property by @WeihanLi in #58710
• Nested Editor Null Reference Exception. Fix a bug in the HtmlFieldPrefix.cs:23 by @sgarnovsky in #58888
• Dispose CTS when the Stream is claimed or timeout occurs by @clegoz in #59652
• no dispatchGlobalEventToAllElements when no renderer attached by @zuizuihao in #58667
• Update .NET SDK to 10.0.100-alpha.1.25077.1 by @github-actions in #60050
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60062
• Quarantine CanUseAntiforgeryAfterInitialRender by @BrennanConroy in #57767
• Update CODEOWNERS to include doc writers and reduce duplication by @halter73 in #60017
• Add info about Darc web UI by @wtgodbe in #60069
• Clarify meaning of the group name specified in WithGroupName by @mikekistler in #59784
• Add AuthN/AuthZ metrics by @MackinnonBuck in #59557
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60079
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60081
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60046
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60044
• [Infrastructure] Updated npm packages 2025-01-29 by @javiercn in #60090
• [Infrastructure] Fixes the dependency update script for selenium and playwright by @javiercn in #60089
• Update Selenium and Playwright dependencies 2025-01-29 by @javiercn in #60088
• Quarantine SubmitButtonFormactionAttributeOverridesEnhancedFormAction by @captainsafia in #60068
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60032
• Update IIS link in Hosting Bundle by @wtgodbe in #60080
• Add route string syntax for pattern in RouteHandlerServices.Map by @murshex in #59940
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60102
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60101
• Refactor private PushAuthorizationRequest by @marcusber in #59990
• Quarantine test ResponseTests.AppCanHandleClientAbortingConnectionMidResponse. by @shethaadit in #60121
• Quarantine test ControllerEndpointFiltersTest.CanCaptureMethodInfoFromControllerAction. by @shethaadit in #60122
• Use the latest available jdk by @ViktorHofer in #59788
• Revert "Use the latest available jdk" by @wtgodbe in #60143
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60126
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60157
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60166
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60168
• Quarantine Http2ConnectionTests.IgnoreNewStreamsDuringClosedConnection test. by @shethaadit in #60120
• [main] (deps): Bump src/submodules/googletest from 2b6b042 to b4aae50 by @dependabot in #60135
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60167
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60173
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #60165
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60177
• Fix SkipOnHelix skipping tests that had ';' at the end of the Queues list by @BrennanConroy in #60183
• Update .NET SDK to 10.0.100-preview.2.25102.3 by @github-actions in #60172
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60130
• Fixed the issue by @mkArtakMSFT in #60096
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60187
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60192
• Readd DiagnosticSource to KestrelServerImpl by @BrennanConroy in #60129
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60201
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60188
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60206
• Update servicing milestones by @wtgodbe in #60220
• NavigateTo does not scroll to the top in internal navigation to same url by @ilonatommy in #60190
• Revert "Revert "Use the latest available jdk"" by @ViktorHofer in #60227
• Quarantine Microsoft.AspNetCore.Server.HttpSys.FunctionalTests.DelegateTests.DelegateAfterReceiverRestart by @DeagleGross in #60142
• Update to MacOS 15 in Helix by @wtgodbe in #60232
• Hot Reload agent improvements by @tmat in #60030
• Fix skip condition for java tests by @wtgodbe in #60240
• Quarantining InteropTests.InteropTests.SpecialStatusMessage by @sebastienros in #60246
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60214
• Remove signing opt-out for MSIs by @github-actions in #60257
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60267
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60270
• Only build MSIs that aren't also built in BuildPass2 during BuildPass1 by @jkoritzinsky in #60268
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #60287
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60290
• Ignore query/fragment in ShouldMatch of NavLink by default but allow overriding ShouldMatch by @ilonatommy in #59903
• React to NuGet package pruning warnings by @ViktorHofer in #60297
• Centralize on one container by @wtgodbe in #60260
• Support multi-version snapshot tests for OpenAPI by @captainsafia in #60278
• Fix condition for BuildAfterTargetingPack by @wtgodbe in #60147
• Update .NET build URLs by @MackinnonBuck in #60265
• Revert "Update .NET build URLs" by @wtgodbe in #60321
• Treating empty string in form post as null for nullable value types by @nvmkpk in #52499
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60207
• [main] (deps): Bump src/submodules/googletest from b4aae50 to 445e9bd by @dependabot in #60254
• Revert "Revert "Update .NET build URLs"" by @wtgodbe in #60354
• [main...

.NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @vseanreesermsft in #60785
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in #60678
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60356
• Fix OpenAPI server URLs for Aspire scenarios by @captainsafia in #60673
• Fix self-referential schema handling in collection schemas by @captainsafia in #60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @MackinnonBuck in #60858
• Merging internal commits for release/9.0 by @vseanreesermsft in #60880

Full Changelog: v9.0.3...v9.0.4