[release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development by MackinnonBuck · Pull Request #59348 · dotnet/aspnetcore

MackinnonBuck · 2024-12-05T21:56:14Z

Avoid caching `index.html` during development

Backport of #59340

Fixes an issue where running a Blazor WebAssembly standalone app with hot reload enabled doesn't work if the app had been previously run with hot reload disabled.

Description

Background

The Microsoft.AspNetCore.Components.WebAssembly.DevServer package provides a server for running Blazor WebAssembly standalone apps in development, and it's what gets used by default in new Blazor WebAssembly standalone projects. One of its responsibilities is serving static files, and this includes the app's index.html.

Hot reload functionality depends on an additional <script /> element being dynamically injected into the response for index.html. A development-only middleware provides this behavior.

The problem

The development server was serving index.html with a Cache-Control header that allowed the browser to cache the response. This meant that if the app was initially run with hot reload disabled, the browser would cache a version of index.html without the injected script. After enabling hot reload, the server would not detect that the cached index.html was invalid, because the file on disk had not changed. As a result, the hot reload script injection middleware would be skipped, and the cached response (without the injected script) would be used. This prevented any hot reload functionality from working.

The fix

The fix is simple: change the development server to serve index.html with a Cache-Control: no-store header, which prevents the browser from caching the response. This always gives the script injection middleware a chance to inject the hot reload script.

Fixes #59276

Customer Impact

Customers relying on the dotnet CLI to run their Blazor WebAssembly standalone app are very likely to encounter this issue. The problem can be reproduced by first running the app using dotnet run, then subsequently with dotnet watch. While less common, the bug can also be reproduced in Visual Studio by explicitly disabling hot reload, running the app, then re-enabling hot reload.

Workarounds do exist:

Make an arbitrary change to index.html so that the server recognizes that the file has changed
Clear the browser cache between runs

However, the user may not be aware of these workarounds, and being forced to manually clear the browser cache creates a frustrating development experience.

Note

Only Blazor WebAssembly standalone apps are affected. The bug does not reproduce on other types of Blazor apps (Web, Server, Hybrid).

Regression?

Yes
No

This bug has existed since .NET 6, and possibly earlier than that.

Risk

High
Medium
Low

The change is small and only impacts how the index.html file is served during development.

Verification

Manual (required)
Automated

Packaging changes reviewed?

Yes
No
N/A

MackinnonBuck · 2024-12-05T22:16:55Z

/backport to release/8.0

github-actions · 2024-12-05T22:17:07Z

Started backporting to release/8.0: https://github.com/dotnet/aspnetcore/actions/runs/12188985946

pavelsavara · 2024-12-09T11:51:34Z

cc @maraf we have another copy of this code, right ?

mkArtakMSFT

Thanks @MackinnonBuck.
Why aren't there any tests for this? Is this one of the We don't have infrastructure for testing this particular area and Manual Testing has better RoI? cases?

MackinnonBuck · 2025-01-09T17:26:16Z

Is this one of the "We don't have infrastructure for testing this particular area and Manual Testing has better RoI" cases?

Right, we currently don't have the infrastructure to automatically test the full E2E hot reload experience, although there were some recent internal discussions around investing in this.

halter73 · 2025-01-09T21:18:55Z

Make an arbitrary change to index.html so that the server recognizes that the file has changed

Is this a complete workaround, or do you still need to clear the browser cache if you do this?

MackinnonBuck · 2025-01-09T21:28:36Z

Make an arbitrary change to index.html so that the server recognizes that the file has changed

Is this a complete workaround, or do you still need to clear the browser cache if you do this?

This is a complete workaround. Since the file on disk changed, the server doesn't get tricked into thinking it can return a 304. This allows the script injection middleware to run and modify the response.

… to 9.0.12 (#851) Updated [Microsoft.AspNetCore.Authentication.MicrosoftAccount](https://github.com/dotnet/aspnetcore) from 8.0.12 to 9.0.12. <details> <summary>Release notes</summary> _Sourced from [Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases](https://github.com/dotnet/aspnetcore/releases)._ ## 9.0.12 [Release](https://github.com/dotnet/core/releases/tag/v9.0.12) ## What's Changed * Update branding to 9.0.12 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64248 * Update `Microsoft.Build` versions to 17.8.43 by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/64277 * [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to `6ec14df` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64230 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065 * [release/9.0] Upgrade to MacOS 15 for CI by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64310 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64312 * [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351 * [release/9.0] AppContext for HttpSys CBT hardening by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64297 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388 * [release/9.0] Delete signalr-daily-tests.yml by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/64589 * [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to `1b96fa1` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64580 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12 ## 9.0.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.11) ## What's Changed * Update branding to 9.0.11 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63950 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678 * [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63894 * [release/9.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/61948 * [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63934 * [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63956 * [release/9.0] Fix nginx install on mac, linux by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63966 * [Hot Reload] Do not attempt to apply empty deltas. by @tmat in https://github.com/dotnet/aspnetcore/pull/63979 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64036 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64091 * Set timeoutInMinutes to 0 for Windows build job by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64126 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11 ## 9.0.10 [Release](https://github.com/dotnet/core/releases/tag/v9.0.10) ## What's Changed * Update branding to 9.0.10 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63510 * [9.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @jkoritzinsky in https://github.com/dotnet/aspnetcore/pull/63249 * [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63465 * [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63501 * [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304 * [release/9.0] [OpenAPI] Use invariant culture for TextWriter by @martincostello in https://github.com/dotnet/aspnetcore/pull/62239 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303 * Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63604 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648 * backport(9.0): Fix runtime architecture detection logic in ANCM. by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10 ## 9.0.9 [Release](https://github.com/dotnet/core/releases/tag/v9.0.9) ## What's Changed * Update branding to 9.0.9 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63107 * [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63035 * [release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702 * [release/9.0] Update Microsoft.Build versions by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62505 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832 * [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63116 * [release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62783 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63151 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9 ## 9.0.7 [Release](https://github.com/dotnet/core/releases/tag/v9.0.7) ## What's Changed * Update branding to 9.0.7 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62242 * [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62199 * Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62118 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945 * [release/9.0] Update Alpine helix references by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62240 * [Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038 * [release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62248 * [release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62283 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62303 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7 ## 9.0.6 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61622](https://github.com/dotnet/aspnetcore/pull/61622)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues. ## Dependency Updates - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61762](https://github.com/dotnet/aspnetcore/pull/61762)) Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project. - **Update dependencies from dotnet/arcade** ([#61714](https://github.com/dotnet/aspnetcore/pull/61714)) Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools. - **Update dependencies from dotnet/extensions** ([#61571](https://github.com/dotnet/aspnetcore/pull/61571)) Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries. - **Update dependencies from dotnet/extensions** ([#61877](https://github.com/dotnet/aspnetcore/pull/61877)) Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes. - **Update dependencies from dotnet/arcade** ([#61892](https://github.com/dotnet/aspnetcore/pull/61892)) Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes. ## Miscellaneous - **Update branding to 9.0.6** ([#61831](https://github.com/dotnet/aspnetcore/pull/61831)) Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase. - **Merging internal commits for release/9.0** ([#61925](https://github.com/dotnet/aspnetcore/pull/61925)) Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. Full Changelog: [v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6) ## 9.0.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.5) ## What's Changed * Update branding to 9.0.5 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61284 * [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61261 * [release/9.0] Upgrade to Ubuntu 22 by @github-actions in https://github.com/dotnet/aspnetcore/pull/61215 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355 * [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @github-actions in https://github.com/dotnet/aspnetcore/pull/60916 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61393 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412 * Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353 * [release/9.0] Fix preserving messages for stateful reconnect with backplane by @github-actions in https://github.com/dotnet/aspnetcore/pull/61374 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483 * [Identity] Fix Identity UI asset definitions by @javiercn in https://github.com/dotnet/aspnetcore/pull/59100 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5 ## 9.0.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.4) ## What's Changed * Update branding to 9.0.4 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60785 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445 * [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60678 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356 * Fix OpenAPI server URLs for Aspire scenarios by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60673 * Fix self-referential schema handling in collection schemas by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60410 * [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/60858 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60880 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4 ## 9.0.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.3) ## What's Changed * Update branding to 9.0.3 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60198 * [release/9.0] Fix branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60029 * [release/9.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60238 * [release/9.0] Revert "Revert "Use the latest available jdk"" by @github-actions in https://github.com/dotnet/aspnetcore/pull/60229 * [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow the `MetadataUpdateHandlerAttribute` contract by @github-actions in https://github.com/dotnet/aspnetcore/pull/59908 * [release/9.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60242 * [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60151 * [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60202 * [release/9.0] Redis distributed cache: add HybridCache usage signal by @github-actions in https://github.com/dotnet/aspnetcore/pull/59886 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951 * [release/9.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60263 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291 * [release/9.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60298 * Revert "[release/9.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60323 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60317 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3 ## 9.0.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.2) ## What's Changed * Update branding to 9.0.2 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59757 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266 * [release/9.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59743 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728 * [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59679 * [release/9.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59578 * [release/9.0] Fix loading dotnet user-jwts config by @github-actions in https://github.com/dotnet/aspnetcore/pull/59473 * [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @github-actions in https://github.com/dotnet/aspnetcore/pull/59422 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59419 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611 * [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @github-actions in https://github.com/dotnet/aspnetcore/pull/59362 * Migrate off of Fedora 38 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59613 * [release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/59348 * [release/9.0] Update to Fedora 41 by @github-actions in https://github.com/dotnet/aspnetcore/pull/59816 * [release/9.0] Don't throw exception for parameters with custom binding source by @github-actions in https://github.com/dotnet/aspnetcore/pull/59533 * [release/9.0] Apply schema transformer to AdditionalProperties by @github-actions in https://github.com/dotnet/aspnetcore/pull/59730 * [release/9.0] Harden schema reference transformer for relative references by @captainsafia in https://github.com/dotnet/aspnetcore/pull/59779 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848 * [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @github-actions in https://github.com/dotnet/aspnetcore/pull/59325 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59871 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2 ## 9.0.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.1) ## What's Changed * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58900 * [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @halter73 in https://github.com/dotnet/aspnetcore/pull/58573 * Hot Reload agent improvements by @tmat in https://github.com/dotnet/aspnetcore/pull/58333 * [release/9.0] Update dependencies from roslyn by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59183 * [release/9.0] Add direct reference to System.Drawing.Common in tools by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189 * [release/9.0] Harden parsing of [Range] attribute values by @github-actions in https://github.com/dotnet/aspnetcore/pull/59077 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024 * [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to `d144031` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59032 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58589 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675 * [release/9.0] Fix SignalR Java POM to include description by @github-actions in https://github.com/dotnet/aspnetcore/pull/58896 * [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @github-actions in https://github.com/dotnet/aspnetcore/pull/58931 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1 ## 9.0.0 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0) ## What's Changed * Update branding to rtm by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57907 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954 * [release/9.0] Fix skip condition for IIS tests by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57999 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048 * [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57975 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052 * Fix up OpenAPI schema handling and support concurrent requests by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58024 * [release/9.0] Mark API from 9 as shipped by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58060 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117 * [release/9.0] Enable TSA/Policheck by @github-actions in https://github.com/dotnet/aspnetcore/pull/58123 * [release/9.0] Add explicit conversion for value-type returning handlers with filters by @github-actions in https://github.com/dotnet/aspnetcore/pull/57967 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58116 * [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from `ecc4e18` to `9511905` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58183 * [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to `6dae7eb` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58184 * [release/9.0] Change usage of "Country" to "CountryRegion" by @github-actions in https://github.com/dotnet/aspnetcore/pull/58280 * Merge RC2 changes into 9.0 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58296 * [release/9.0] Remove ProviderKey from Hosting Bundle by @github-actions in https://github.com/dotnet/aspnetcore/pull/58293 * [release/9.0] [Blazor] Fix template nav menu styling by @github-actions in https://github.com/dotnet/aspnetcore/pull/58277 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58366 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344 * [release/9.0] Fix handling for inert route parameters in MVC endpoints for OpenAPI by @github-actions in https://github.com/dotnet/aspnetcore/pull/58311 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414 * [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58372 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421 * [release/9.0] Stabilize branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58444 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449 * [release/9.0] [Infrastructure] Updated npm packages by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58469 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462 * [release/9.0] bumping ws dependency to fix component vulnerability by @github-actions in https://github.com/dotnet/aspnetcore/pull/58458 * [release/9.0] Improve dev-certs export error message by @github-actions in https://github.com/dotnet/aspnetcore/pull/58471 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475 ... (truncated) ## 9.0.0-rc.2.24474.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2) ## What's Changed * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57420 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366 * [release/9.0] Add references to new 9.0 branches in .yml files by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446 * [release/9.0] Quarantine two CircuitTests by @github-actions in https://github.com/dotnet/aspnetcore/pull/57606 * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57659 * [release/9.0] Fix duplicate error.type on kestrel.connection.duration by @github-actions in https://github.com/dotnet/aspnetcore/pull/57581 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57691 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697 * [release/9.0] [Blazor] Invoke inbound activity handlers on circuit initialization by @github-actions in https://github.com/dotnet/aspnetcore/pull/57678 * Disable launching browser on Web API template by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57682 * [release/9.0] [Static Assets] Improve development experience by @github-actions in https://github.com/dotnet/aspnetcore/pull/57764 * Include Readme.md in packages by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57809 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708 * HybridCache: relocate to dotnet/extensions by @mgravell in https://github.com/dotnet/aspnetcore/pull/57670 * [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to `0953a17` by @dependabot in https://github.com/dotnet/aspnetcore/pull/57643 * Http.Sys: Clean up Request parsing errors by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57531 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835 * [release/9.0] [Identity][Templates] Ensure placeholders don't overlap with text by @github-actions in https://github.com/dotnet/aspnetcore/pull/57789 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858 * Fix mapping for nested schemas and [Produces] attributes in OpenAPI implementation by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57852 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866 * [release/9.0] [Templates] Updates libraries dependencies content by @github-actions in https://github.com/dotnet/aspnetcore/pull/57864 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896 * [release/9.0-rc2] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931 * Add registry search for upgrade policy keys by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57952 * Check for sentinel value when setting HTTP/3 error code by @amcasey in https://github.com/dotnet/aspnetcore/pull/57976 * [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the `Blazor-Environment` header by @github-actions in https://github.com/dotnet/aspnetcore/pull/57974 * Fix IAsyncEnumerable controller methods to allow setting headers by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3 ## 9.0.0-rc.1.24452.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1) ## 9.0.0-preview.7.24406.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7) ## 9.0.0-preview.6.24328.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6) ## 9.0.0-preview.5.24306.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5) ## 9.0.0-preview.4.24267.6 [Release](https://github.com/dotnet/core/releases) ## 9.0.0-preview.3.24172.13 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3) ## 9.0.0-preview.2.24128.4 [Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2) ## 9.0.0-preview.1.24081.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1) ## 8.0.23 [Release](https://github.com/dotnet/core/releases/tag/v8.0.23) ## What's Changed https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs ## 8.0.22 [Release](https://github.com/dotnet/core/releases/tag/v8.0.22) ## What's Changed * Update branding to 8.0.22 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63949 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664 * [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63903 * [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63893 * [release/8.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62080 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63665 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63957 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64035 * Mark productVersion.txt as shipping artifact in 8.0 by @Copilot in https://github.com/dotnet/aspnetcore/pull/64067 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64090 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22 ## 8.0.21 [Release](https://github.com/dotnet/core/releases/tag/v8.0.21) ## What's Changed * Update branding to 8.0.21 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63509 * [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63500 * [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63250 * [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63466 * [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63534 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63261 * [release/8.0] Use wait assert in flaky tests by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63565 * [release/8.0] Update Microsoft.Build versions by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62507 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63603 * backport(8.0): Fix runtime architecture detection logic in ANCM by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21 ## 8.0.20 [Release](https://github.com/dotnet/core/releases/tag/v8.0.20) ## What's Changed * Update branding to 8.0.20 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63106 * [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63038 * [release/8.0] Dispose the certificate chain elements with the chain by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994 * [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63117 * [release/8.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62784 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63152 * [release/8.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20 ## 8.0.18 [Release](https://github.com/dotnet/core/releases/tag/v8.0.18) ## What's Changed * Update branding to 8.0.18 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62241 * [release/8.0] Update Alpine helix references by @github-actions in https://github.com/dotnet/aspnetcore/pull/62243 * [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62201 * [8.0] Delete src/arcade directory by @akoeplinger in https://github.com/dotnet/aspnetcore/pull/61994 * [Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62006 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944 * [release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62247 * [release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62284 * backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62302 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18 ## 8.0.17 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61623](https://github.com/dotnet/aspnetcore/pull/61623)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests. ## Dependency Updates - **Update dependencies from dotnet/arcade** ([#61832](https://github.com/dotnet/aspnetcore/pull/61832)) This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure. - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61761](https://github.com/dotnet/aspnetcore/pull/61761)) The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components. ## Miscellaneous - **Update branding to 8.0.17** ([#61830](https://github.com/dotnet/aspnetcore/pull/61830)) The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation. - **Merging internal commits for release/8.0** ([#61924](https://github.com/dotnet/aspnetcore/pull/61924)) This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17 ## 8.0.16 [Release](https://github.com/dotnet/core/releases/tag/v8.0.16) ## What's Changed * Update branding to 8.0.16 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283 * [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61260 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281 * [release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411 * Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352 * [release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442 * fetch TLS client hello message from HTTP.SYS by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16 ## 8.0.15 [Release](https://github.com/dotnet/core/releases/tag/v8.0.15) ## What's Changed * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355 * Update branding to 8.0.15 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728 * [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60677 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15 ## 8.0.14 [Release](https://github.com/dotnet/core/releases/tag/v8.0.14) ## What's Changed * Update branding to 8.0.14 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197 * [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60150 * [release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922 * [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60203 * [release/8.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60239 * [release/8.0] Use the latest available JDK by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233 * [release/8.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60243 * [release/8.0] Update list of helix queues to skip by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231 * [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in https://github.com/dotnet/aspnetcore/pull/57288 * [release/8.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60264 * [release/8.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299 * Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14 ## 8.0.13 [Release](https://github.com/dotnet/core/releases/tag/v8.0.13) ## What's Changed * [release/8.0] Update dotnetbuilds CDN to new endpoint by @mmitche in https://github.com/dotnet/aspnetcore/pull/59575 * Update branding to 8.0.13 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756 * [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295 * [release/8.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59742 * [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59678 * [release/8.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59579 * [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403 * Migrate off of Debian 11 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59584 * [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777 * [release/8.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @github-actions in https://github.com/dotnet/aspnetcore/pull/59349 * Update to Fedora 41 by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864 * [release/8.0] Fix/update docker tags by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13 Commits viewable in [compare view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Authentication.MicrosoftAccount&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… 9.0.12 (#856) Updated [Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation](https://github.com/dotnet/aspnetcore) from 8.0.12 to 9.0.12. <details> <summary>Release notes</summary> _Sourced from [Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation's releases](https://github.com/dotnet/aspnetcore/releases)._ ## 9.0.12 [Release](https://github.com/dotnet/core/releases/tag/v9.0.12) ## What's Changed * Update branding to 9.0.12 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64248 * Update `Microsoft.Build` versions to 17.8.43 by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/64277 * [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to `6ec14df` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64230 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065 * [release/9.0] Upgrade to MacOS 15 for CI by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64310 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64312 * [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351 * [release/9.0] AppContext for HttpSys CBT hardening by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64297 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388 * [release/9.0] Delete signalr-daily-tests.yml by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/64589 * [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to `1b96fa1` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64580 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12 ## 9.0.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.11) ## What's Changed * Update branding to 9.0.11 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63950 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678 * [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63894 * [release/9.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/61948 * [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63934 * [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63956 * [release/9.0] Fix nginx install on mac, linux by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63966 * [Hot Reload] Do not attempt to apply empty deltas. by @tmat in https://github.com/dotnet/aspnetcore/pull/63979 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64036 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64091 * Set timeoutInMinutes to 0 for Windows build job by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64126 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11 ## 9.0.10 [Release](https://github.com/dotnet/core/releases/tag/v9.0.10) ## What's Changed * Update branding to 9.0.10 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63510 * [9.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @jkoritzinsky in https://github.com/dotnet/aspnetcore/pull/63249 * [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63465 * [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63501 * [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304 * [release/9.0] [OpenAPI] Use invariant culture for TextWriter by @martincostello in https://github.com/dotnet/aspnetcore/pull/62239 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303 * Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63604 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648 * backport(9.0): Fix runtime architecture detection logic in ANCM. by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10 ## 9.0.9 [Release](https://github.com/dotnet/core/releases/tag/v9.0.9) ## What's Changed * Update branding to 9.0.9 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63107 * [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63035 * [release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702 * [release/9.0] Update Microsoft.Build versions by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62505 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832 * [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63116 * [release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62783 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63151 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9 ## 9.0.7 [Release](https://github.com/dotnet/core/releases/tag/v9.0.7) ## What's Changed * Update branding to 9.0.7 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62242 * [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62199 * Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62118 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945 * [release/9.0] Update Alpine helix references by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62240 * [Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038 * [release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62248 * [release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62283 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62303 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7 ## 9.0.6 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61622](https://github.com/dotnet/aspnetcore/pull/61622)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues. ## Dependency Updates - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61762](https://github.com/dotnet/aspnetcore/pull/61762)) Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project. - **Update dependencies from dotnet/arcade** ([#61714](https://github.com/dotnet/aspnetcore/pull/61714)) Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools. - **Update dependencies from dotnet/extensions** ([#61571](https://github.com/dotnet/aspnetcore/pull/61571)) Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries. - **Update dependencies from dotnet/extensions** ([#61877](https://github.com/dotnet/aspnetcore/pull/61877)) Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes. - **Update dependencies from dotnet/arcade** ([#61892](https://github.com/dotnet/aspnetcore/pull/61892)) Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes. ## Miscellaneous - **Update branding to 9.0.6** ([#61831](https://github.com/dotnet/aspnetcore/pull/61831)) Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase. - **Merging internal commits for release/9.0** ([#61925](https://github.com/dotnet/aspnetcore/pull/61925)) Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. Full Changelog: [v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6) ## 9.0.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.5) ## What's Changed * Update branding to 9.0.5 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61284 * [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61261 * [release/9.0] Upgrade to Ubuntu 22 by @github-actions in https://github.com/dotnet/aspnetcore/pull/61215 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355 * [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @github-actions in https://github.com/dotnet/aspnetcore/pull/60916 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61393 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412 * Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353 * [release/9.0] Fix preserving messages for stateful reconnect with backplane by @github-actions in https://github.com/dotnet/aspnetcore/pull/61374 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483 * [Identity] Fix Identity UI asset definitions by @javiercn in https://github.com/dotnet/aspnetcore/pull/59100 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5 ## 9.0.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.4) ## What's Changed * Update branding to 9.0.4 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60785 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445 * [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60678 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356 * Fix OpenAPI server URLs for Aspire scenarios by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60673 * Fix self-referential schema handling in collection schemas by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60410 * [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/60858 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60880 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4 ## 9.0.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.3) ## What's Changed * Update branding to 9.0.3 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60198 * [release/9.0] Fix branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60029 * [release/9.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60238 * [release/9.0] Revert "Revert "Use the latest available jdk"" by @github-actions in https://github.com/dotnet/aspnetcore/pull/60229 * [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow the `MetadataUpdateHandlerAttribute` contract by @github-actions in https://github.com/dotnet/aspnetcore/pull/59908 * [release/9.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60242 * [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60151 * [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60202 * [release/9.0] Redis distributed cache: add HybridCache usage signal by @github-actions in https://github.com/dotnet/aspnetcore/pull/59886 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951 * [release/9.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60263 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291 * [release/9.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60298 * Revert "[release/9.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60323 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60317 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3 ## 9.0.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.2) ## What's Changed * Update branding to 9.0.2 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59757 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266 * [release/9.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59743 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728 * [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59679 * [release/9.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59578 * [release/9.0] Fix loading dotnet user-jwts config by @github-actions in https://github.com/dotnet/aspnetcore/pull/59473 * [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @github-actions in https://github.com/dotnet/aspnetcore/pull/59422 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59419 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611 * [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @github-actions in https://github.com/dotnet/aspnetcore/pull/59362 * Migrate off of Fedora 38 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59613 * [release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/59348 * [release/9.0] Update to Fedora 41 by @github-actions in https://github.com/dotnet/aspnetcore/pull/59816 * [release/9.0] Don't throw exception for parameters with custom binding source by @github-actions in https://github.com/dotnet/aspnetcore/pull/59533 * [release/9.0] Apply schema transformer to AdditionalProperties by @github-actions in https://github.com/dotnet/aspnetcore/pull/59730 * [release/9.0] Harden schema reference transformer for relative references by @captainsafia in https://github.com/dotnet/aspnetcore/pull/59779 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848 * [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @github-actions in https://github.com/dotnet/aspnetcore/pull/59325 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59871 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2 ## 9.0.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.1) ## What's Changed * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58900 * [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @halter73 in https://github.com/dotnet/aspnetcore/pull/58573 * Hot Reload agent improvements by @tmat in https://github.com/dotnet/aspnetcore/pull/58333 * [release/9.0] Update dependencies from roslyn by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59183 * [release/9.0] Add direct reference to System.Drawing.Common in tools by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189 * [release/9.0] Harden parsing of [Range] attribute values by @github-actions in https://github.com/dotnet/aspnetcore/pull/59077 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024 * [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to `d144031` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59032 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58589 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675 * [release/9.0] Fix SignalR Java POM to include description by @github-actions in https://github.com/dotnet/aspnetcore/pull/58896 * [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @github-actions in https://github.com/dotnet/aspnetcore/pull/58931 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1 ## 9.0.0 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0) ## What's Changed * Update branding to rtm by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57907 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954 * [release/9.0] Fix skip condition for IIS tests by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57999 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048 * [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57975 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052 * Fix up OpenAPI schema handling and support concurrent requests by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58024 * [release/9.0] Mark API from 9 as shipped by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58060 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117 * [release/9.0] Enable TSA/Policheck by @github-actions in https://github.com/dotnet/aspnetcore/pull/58123 * [release/9.0] Add explicit conversion for value-type returning handlers with filters by @github-actions in https://github.com/dotnet/aspnetcore/pull/57967 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58116 * [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from `ecc4e18` to `9511905` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58183 * [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to `6dae7eb` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58184 * [release/9.0] Change usage of "Country" to "CountryRegion" by @github-actions in https://github.com/dotnet/aspnetcore/pull/58280 * Merge RC2 changes into 9.0 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58296 * [release/9.0] Remove ProviderKey from Hosting Bundle by @github-actions in https://github.com/dotnet/aspnetcore/pull/58293 * [release/9.0] [Blazor] Fix template nav menu styling by @github-actions in https://github.com/dotnet/aspnetcore/pull/58277 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58366 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344 * [release/9.0] Fix handling for inert route parameters in MVC endpoints for OpenAPI by @github-actions in https://github.com/dotnet/aspnetcore/pull/58311 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414 * [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58372 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421 * [release/9.0] Stabilize branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58444 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449 * [release/9.0] [Infrastructure] Updated npm packages by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58469 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462 * [release/9.0] bumping ws dependency to fix component vulnerability by @github-actions in https://github.com/dotnet/aspnetcore/pull/58458 * [release/9.0] Improve dev-certs export error message by @github-actions in https://github.com/dotnet/aspnetcore/pull/58471 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475 ... (truncated) ## 9.0.0-rc.2.24474.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2) ## What's Changed * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57420 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366 * [release/9.0] Add references to new 9.0 branches in .yml files by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446 * [release/9.0] Quarantine two CircuitTests by @github-actions in https://github.com/dotnet/aspnetcore/pull/57606 * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57659 * [release/9.0] Fix duplicate error.type on kestrel.connection.duration by @github-actions in https://github.com/dotnet/aspnetcore/pull/57581 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57691 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697 * [release/9.0] [Blazor] Invoke inbound activity handlers on circuit initialization by @github-actions in https://github.com/dotnet/aspnetcore/pull/57678 * Disable launching browser on Web API template by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57682 * [release/9.0] [Static Assets] Improve development experience by @github-actions in https://github.com/dotnet/aspnetcore/pull/57764 * Include Readme.md in packages by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57809 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708 * HybridCache: relocate to dotnet/extensions by @mgravell in https://github.com/dotnet/aspnetcore/pull/57670 * [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to `0953a17` by @dependabot in https://github.com/dotnet/aspnetcore/pull/57643 * Http.Sys: Clean up Request parsing errors by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57531 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835 * [release/9.0] [Identity][Templates] Ensure placeholders don't overlap with text by @github-actions in https://github.com/dotnet/aspnetcore/pull/57789 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858 * Fix mapping for nested schemas and [Produces] attributes in OpenAPI implementation by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57852 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866 * [release/9.0] [Templates] Updates libraries dependencies content by @github-actions in https://github.com/dotnet/aspnetcore/pull/57864 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896 * [release/9.0-rc2] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931 * Add registry search for upgrade policy keys by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57952 * Check for sentinel value when setting HTTP/3 error code by @amcasey in https://github.com/dotnet/aspnetcore/pull/57976 * [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the `Blazor-Environment` header by @github-actions in https://github.com/dotnet/aspnetcore/pull/57974 * Fix IAsyncEnumerable controller methods to allow setting headers by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3 ## 9.0.0-rc.1.24452.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1) ## 9.0.0-preview.7.24406.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7) ## 9.0.0-preview.6.24328.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6) ## 9.0.0-preview.5.24306.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5) ## 9.0.0-preview.4.24267.6 [Release](https://github.com/dotnet/core/releases) ## 9.0.0-preview.3.24172.13 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3) ## 9.0.0-preview.2.24128.4 [Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2) ## 9.0.0-preview.1.24081.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1) ## 8.0.23 [Release](https://github.com/dotnet/core/releases/tag/v8.0.23) ## What's Changed https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs ## 8.0.22 [Release](https://github.com/dotnet/core/releases/tag/v8.0.22) ## What's Changed * Update branding to 8.0.22 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63949 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664 * [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63903 * [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63893 * [release/8.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62080 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63665 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63957 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64035 * Mark productVersion.txt as shipping artifact in 8.0 by @Copilot in https://github.com/dotnet/aspnetcore/pull/64067 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64090 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22 ## 8.0.21 [Release](https://github.com/dotnet/core/releases/tag/v8.0.21) ## What's Changed * Update branding to 8.0.21 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63509 * [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63500 * [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63250 * [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63466 * [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63534 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63261 * [release/8.0] Use wait assert in flaky tests by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63565 * [release/8.0] Update Microsoft.Build versions by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62507 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63603 * backport(8.0): Fix runtime architecture detection logic in ANCM by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21 ## 8.0.20 [Release](https://github.com/dotnet/core/releases/tag/v8.0.20) ## What's Changed * Update branding to 8.0.20 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63106 * [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63038 * [release/8.0] Dispose the certificate chain elements with the chain by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994 * [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63117 * [release/8.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62784 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63152 * [release/8.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20 ## 8.0.18 [Release](https://github.com/dotnet/core/releases/tag/v8.0.18) ## What's Changed * Update branding to 8.0.18 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62241 * [release/8.0] Update Alpine helix references by @github-actions in https://github.com/dotnet/aspnetcore/pull/62243 * [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62201 * [8.0] Delete src/arcade directory by @akoeplinger in https://github.com/dotnet/aspnetcore/pull/61994 * [Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62006 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944 * [release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62247 * [release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62284 * backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62302 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18 ## 8.0.17 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61623](https://github.com/dotnet/aspnetcore/pull/61623)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests. ## Dependency Updates - **Update dependencies from dotnet/arcade** ([#61832](https://github.com/dotnet/aspnetcore/pull/61832)) This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure. - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61761](https://github.com/dotnet/aspnetcore/pull/61761)) The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components. ## Miscellaneous - **Update branding to 8.0.17** ([#61830](https://github.com/dotnet/aspnetcore/pull/61830)) The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation. - **Merging internal commits for release/8.0** ([#61924](https://github.com/dotnet/aspnetcore/pull/61924)) This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17 ## 8.0.16 [Release](https://github.com/dotnet/core/releases/tag/v8.0.16) ## What's Changed * Update branding to 8.0.16 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283 * [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61260 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281 * [release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411 * Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352 * [release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442 * fetch TLS client hello message from HTTP.SYS by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16 ## 8.0.15 [Release](https://github.com/dotnet/core/releases/tag/v8.0.15) ## What's Changed * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355 * Update branding to 8.0.15 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728 * [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60677 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15 ## 8.0.14 [Release](https://github.com/dotnet/core/releases/tag/v8.0.14) ## What's Changed * Update branding to 8.0.14 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197 * [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60150 * [release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922 * [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60203 * [release/8.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60239 * [release/8.0] Use the latest available JDK by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233 * [release/8.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60243 * [release/8.0] Update list of helix queues to skip by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231 * [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in https://github.com/dotnet/aspnetcore/pull/57288 * [release/8.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60264 * [release/8.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299 * Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14 ## 8.0.13 [Release](https://github.com/dotnet/core/releases/tag/v8.0.13) ## What's Changed * [release/8.0] Update dotnetbuilds CDN to new endpoint by @mmitche in https://github.com/dotnet/aspnetcore/pull/59575 * Update branding to 8.0.13 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756 * [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295 * [release/8.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59742 * [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59678 * [release/8.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59579 * [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403 * Migrate off of Debian 11 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59584 * [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777 * [release/8.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @github-actions in https://github.com/dotnet/aspnetcore/pull/59349 * Update to Fedora 41 by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864 * [release/8.0] Fix/update docker tags by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13 Commits viewable in [compare view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updated [Microsoft.AspNetCore.Identity.UI](https://github.com/dotnet/aspnetcore) from 8.0.12 to 9.0.12. <details> <summary>Release notes</summary> _Sourced from [Microsoft.AspNetCore.Identity.UI's releases](https://github.com/dotnet/aspnetcore/releases)._ ## 9.0.12 [Release](https://github.com/dotnet/core/releases/tag/v9.0.12) ## What's Changed * Update branding to 9.0.12 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64248 * Update `Microsoft.Build` versions to 17.8.43 by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/64277 * [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to `6ec14df` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64230 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065 * [release/9.0] Upgrade to MacOS 15 for CI by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64310 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64312 * [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351 * [release/9.0] AppContext for HttpSys CBT hardening by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64297 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388 * [release/9.0] Delete signalr-daily-tests.yml by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/64589 * [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to `1b96fa1` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/64580 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12 ## 9.0.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.11) ## What's Changed * Update branding to 9.0.11 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63950 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678 * [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63894 * [release/9.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/61948 * [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63934 * [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63956 * [release/9.0] Fix nginx install on mac, linux by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63966 * [Hot Reload] Do not attempt to apply empty deltas. by @tmat in https://github.com/dotnet/aspnetcore/pull/63979 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64036 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64091 * Set timeoutInMinutes to 0 for Windows build job by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64126 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11 ## 9.0.10 [Release](https://github.com/dotnet/core/releases/tag/v9.0.10) ## What's Changed * Update branding to 9.0.10 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63510 * [9.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @jkoritzinsky in https://github.com/dotnet/aspnetcore/pull/63249 * [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63465 * [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63501 * [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304 * [release/9.0] [OpenAPI] Use invariant culture for TextWriter by @martincostello in https://github.com/dotnet/aspnetcore/pull/62239 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303 * Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63604 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648 * backport(9.0): Fix runtime architecture detection logic in ANCM. by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10 ## 9.0.9 [Release](https://github.com/dotnet/core/releases/tag/v9.0.9) ## What's Changed * Update branding to 9.0.9 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63107 * [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63035 * [release/9.0] Dispose the certificate chain elements with the chain by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702 * [release/9.0] Update Microsoft.Build versions by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62505 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832 * [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63116 * [release/9.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62783 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63151 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9 ## 9.0.7 [Release](https://github.com/dotnet/core/releases/tag/v9.0.7) ## What's Changed * Update branding to 9.0.7 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62242 * [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62199 * Fix OpenApiJsonSchema array parsing (#62051) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62118 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945 * [release/9.0] Update Alpine helix references by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/62240 * [Backport 9.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038 * [release/9.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62248 * [release/9.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62283 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62303 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7 ## 9.0.6 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61622](https://github.com/dotnet/aspnetcore/pull/61622)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues. ## Dependency Updates - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61762](https://github.com/dotnet/aspnetcore/pull/61762)) Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project. - **Update dependencies from dotnet/arcade** ([#61714](https://github.com/dotnet/aspnetcore/pull/61714)) Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools. - **Update dependencies from dotnet/extensions** ([#61571](https://github.com/dotnet/aspnetcore/pull/61571)) Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries. - **Update dependencies from dotnet/extensions** ([#61877](https://github.com/dotnet/aspnetcore/pull/61877)) Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes. - **Update dependencies from dotnet/arcade** ([#61892](https://github.com/dotnet/aspnetcore/pull/61892)) Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes. ## Miscellaneous - **Update branding to 9.0.6** ([#61831](https://github.com/dotnet/aspnetcore/pull/61831)) Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase. - **Merging internal commits for release/9.0** ([#61925](https://github.com/dotnet/aspnetcore/pull/61925)) Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. Full Changelog: [v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6) ## 9.0.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.5) ## What's Changed * Update branding to 9.0.5 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61284 * [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61261 * [release/9.0] Upgrade to Ubuntu 22 by @github-actions in https://github.com/dotnet/aspnetcore/pull/61215 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355 * [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @github-actions in https://github.com/dotnet/aspnetcore/pull/60916 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61393 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412 * Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353 * [release/9.0] Fix preserving messages for stateful reconnect with backplane by @github-actions in https://github.com/dotnet/aspnetcore/pull/61374 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483 * [Identity] Fix Identity UI asset definitions by @javiercn in https://github.com/dotnet/aspnetcore/pull/59100 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5 ## 9.0.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.4) ## What's Changed * Update branding to 9.0.4 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60785 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445 * [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60678 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356 * Fix OpenAPI server URLs for Aspire scenarios by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60673 * Fix self-referential schema handling in collection schemas by @captainsafia in https://github.com/dotnet/aspnetcore/pull/60410 * [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/60858 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60880 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4 ## 9.0.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.3) ## What's Changed * Update branding to 9.0.3 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60198 * [release/9.0] Fix branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60029 * [release/9.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60238 * [release/9.0] Revert "Revert "Use the latest available jdk"" by @github-actions in https://github.com/dotnet/aspnetcore/pull/60229 * [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow the `MetadataUpdateHandlerAttribute` contract by @github-actions in https://github.com/dotnet/aspnetcore/pull/59908 * [release/9.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60242 * [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60151 * [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60202 * [release/9.0] Redis distributed cache: add HybridCache usage signal by @github-actions in https://github.com/dotnet/aspnetcore/pull/59886 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951 * [release/9.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60263 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291 * [release/9.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60298 * Revert "[release/9.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60323 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60317 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3 ## 9.0.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.2) ## What's Changed * Update branding to 9.0.2 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59757 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266 * [release/9.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59743 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728 * [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59679 * [release/9.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59578 * [release/9.0] Fix loading dotnet user-jwts config by @github-actions in https://github.com/dotnet/aspnetcore/pull/59473 * [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @github-actions in https://github.com/dotnet/aspnetcore/pull/59422 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59419 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611 * [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @github-actions in https://github.com/dotnet/aspnetcore/pull/59362 * Migrate off of Fedora 38 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59613 * [release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/59348 * [release/9.0] Update to Fedora 41 by @github-actions in https://github.com/dotnet/aspnetcore/pull/59816 * [release/9.0] Don't throw exception for parameters with custom binding source by @github-actions in https://github.com/dotnet/aspnetcore/pull/59533 * [release/9.0] Apply schema transformer to AdditionalProperties by @github-actions in https://github.com/dotnet/aspnetcore/pull/59730 * [release/9.0] Harden schema reference transformer for relative references by @captainsafia in https://github.com/dotnet/aspnetcore/pull/59779 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848 * [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @github-actions in https://github.com/dotnet/aspnetcore/pull/59325 * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59871 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2 ## 9.0.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.1) ## What's Changed * Merging internal commits for release/9.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/58900 * [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @halter73 in https://github.com/dotnet/aspnetcore/pull/58573 * Hot Reload agent improvements by @tmat in https://github.com/dotnet/aspnetcore/pull/58333 * [release/9.0] Update dependencies from roslyn by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59183 * [release/9.0] Add direct reference to System.Drawing.Common in tools by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189 * [release/9.0] Harden parsing of [Range] attribute values by @github-actions in https://github.com/dotnet/aspnetcore/pull/59077 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024 * [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to `d144031` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59032 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58589 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675 * [release/9.0] Fix SignalR Java POM to include description by @github-actions in https://github.com/dotnet/aspnetcore/pull/58896 * [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @github-actions in https://github.com/dotnet/aspnetcore/pull/58931 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1 ## 9.0.0 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0) ## What's Changed * Update branding to rtm by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57907 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954 * [release/9.0] Fix skip condition for IIS tests by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57999 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048 * [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57975 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052 * Fix up OpenAPI schema handling and support concurrent requests by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58024 * [release/9.0] Mark API from 9 as shipped by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58060 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117 * [release/9.0] Enable TSA/Policheck by @github-actions in https://github.com/dotnet/aspnetcore/pull/58123 * [release/9.0] Add explicit conversion for value-type returning handlers with filters by @github-actions in https://github.com/dotnet/aspnetcore/pull/57967 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58116 * [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from `ecc4e18` to `9511905` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58183 * [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to `6dae7eb` by @dependabot in https://github.com/dotnet/aspnetcore/pull/58184 * [release/9.0] Change usage of "Country" to "CountryRegion" by @github-actions in https://github.com/dotnet/aspnetcore/pull/58280 * Merge RC2 changes into 9.0 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58296 * [release/9.0] Remove ProviderKey from Hosting Bundle by @github-actions in https://github.com/dotnet/aspnetcore/pull/58293 * [release/9.0] [Blazor] Fix template nav menu styling by @github-actions in https://github.com/dotnet/aspnetcore/pull/58277 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58366 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344 * [release/9.0] Fix handling for inert route parameters in MVC endpoints for OpenAPI by @github-actions in https://github.com/dotnet/aspnetcore/pull/58311 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414 * [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer by @captainsafia in https://github.com/dotnet/aspnetcore/pull/58372 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421 * [release/9.0] Stabilize branding by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/58444 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449 * [release/9.0] [Infrastructure] Updated npm packages by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/58469 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462 * [release/9.0] bumping ws dependency to fix component vulnerability by @github-actions in https://github.com/dotnet/aspnetcore/pull/58458 * [release/9.0] Improve dev-certs export error message by @github-actions in https://github.com/dotnet/aspnetcore/pull/58471 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475 ... (truncated) ## 9.0.0-rc.2.24474.3 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2) ## What's Changed * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57420 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366 * [release/9.0] Add references to new 9.0 branches in .yml files by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446 * [release/9.0] Quarantine two CircuitTests by @github-actions in https://github.com/dotnet/aspnetcore/pull/57606 * [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in https://github.com/dotnet/aspnetcore/pull/57659 * [release/9.0] Fix duplicate error.type on kestrel.connection.duration by @github-actions in https://github.com/dotnet/aspnetcore/pull/57581 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686 * [release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57691 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528 * [release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697 * [release/9.0] [Blazor] Invoke inbound activity handlers on circuit initialization by @github-actions in https://github.com/dotnet/aspnetcore/pull/57678 * Disable launching browser on Web API template by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57682 * [release/9.0] [Static Assets] Improve development experience by @github-actions in https://github.com/dotnet/aspnetcore/pull/57764 * Include Readme.md in packages by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57809 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759 * [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760 * [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761 * [release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708 * HybridCache: relocate to dotnet/extensions by @mgravell in https://github.com/dotnet/aspnetcore/pull/57670 * [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to `0953a17` by @dependabot in https://github.com/dotnet/aspnetcore/pull/57643 * Http.Sys: Clean up Request parsing errors by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57531 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835 * [release/9.0] [Identity][Templates] Ensure placeholders don't overlap with text by @github-actions in https://github.com/dotnet/aspnetcore/pull/57789 * [release/9.0] Update dependencies from dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858 * Fix mapping for nested schemas and [Produces] attributes in OpenAPI implementation by @captainsafia in https://github.com/dotnet/aspnetcore/pull/57852 * [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866 * [release/9.0] [Templates] Updates libraries dependencies content by @github-actions in https://github.com/dotnet/aspnetcore/pull/57864 * [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896 * [release/9.0-rc2] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931 * Add registry search for upgrade policy keys by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/57952 * Check for sentinel value when setting HTTP/3 error code by @amcasey in https://github.com/dotnet/aspnetcore/pull/57976 * [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the `Blazor-Environment` header by @github-actions in https://github.com/dotnet/aspnetcore/pull/57974 * Fix IAsyncEnumerable controller methods to allow setting headers by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3 ## 9.0.0-rc.1.24452.1 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1) ## 9.0.0-preview.7.24406.2 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7) ## 9.0.0-preview.6.24328.4 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6) ## 9.0.0-preview.5.24306.11 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5) ## 9.0.0-preview.4.24267.6 [Release](https://github.com/dotnet/core/releases) ## 9.0.0-preview.3.24172.13 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3) ## 9.0.0-preview.2.24128.4 [Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2) ## 9.0.0-preview.1.24081.5 [Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1) ## 8.0.23 [Release](https://github.com/dotnet/core/releases/tag/v8.0.23) ## What's Changed https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs ## 8.0.22 [Release](https://github.com/dotnet/core/releases/tag/v8.0.22) ## What's Changed * Update branding to 8.0.22 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63949 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664 * [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63903 * [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to `9706f75` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63893 * [release/8.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62080 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63665 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63957 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/64035 * Mark productVersion.txt as shipping artifact in 8.0 by @Copilot in https://github.com/dotnet/aspnetcore/pull/64067 * Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/64090 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22 ## 8.0.21 [Release](https://github.com/dotnet/core/releases/tag/v8.0.21) ## What's Changed * Update branding to 8.0.21 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63509 * [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to `eb2d85e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63500 * [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63250 * [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63466 * [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63534 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63261 * [release/8.0] Use wait assert in flaky tests by @ilonatommy in https://github.com/dotnet/aspnetcore/pull/63565 * [release/8.0] Update Microsoft.Build versions by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62507 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63603 * backport(8.0): Fix runtime architecture detection logic in ANCM by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21 ## 8.0.20 [Release](https://github.com/dotnet/core/releases/tag/v8.0.20) ## What's Changed * Update branding to 8.0.20 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63106 * [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to `373af2e` by @dependabot[bot] in https://github.com/dotnet/aspnetcore/pull/63038 * [release/8.0] Dispose the certificate chain elements with the chain by @MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994 * [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/63117 * [release/8.0] [SignalR] Don't throw for message headers in Java client by @github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62784 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/63152 * [release/8.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20 ## 8.0.18 [Release](https://github.com/dotnet/core/releases/tag/v8.0.18) ## What's Changed * Update branding to 8.0.18 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62241 * [release/8.0] Update Alpine helix references by @github-actions in https://github.com/dotnet/aspnetcore/pull/62243 * [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to `e9092b1` by @dependabot in https://github.com/dotnet/aspnetcore/pull/62201 * [8.0] Delete src/arcade directory by @akoeplinger in https://github.com/dotnet/aspnetcore/pull/61994 * [Backport 8.0] [IIS] Manually parse exe bitness (#61894) by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62006 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944 * [release/8.0] Associate tagged keys with entries so replacements are not evicted by @github-actions in https://github.com/dotnet/aspnetcore/pull/62247 * [release/8.0] Block test that is failing after switching to latest-chrome by @github-actions in https://github.com/dotnet/aspnetcore/pull/62284 * backport(net8.0): http.sys on-demand TLS client hello retrieval by @DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/62302 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18 ## 8.0.17 ## Bug Fixes - **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy** ([#61623](https://github.com/dotnet/aspnetcore/pull/61623)) The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests. ## Dependency Updates - **Update dependencies from dotnet/arcade** ([#61832](https://github.com/dotnet/aspnetcore/pull/61832)) This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure. - **Bump src/submodules/googletest from `52204f7` to `04ee1b4`** ([#61761](https://github.com/dotnet/aspnetcore/pull/61761)) The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components. ## Miscellaneous - **Update branding to 8.0.17** ([#61830](https://github.com/dotnet/aspnetcore/pull/61830)) The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation. - **Merging internal commits for release/8.0** ([#61924](https://github.com/dotnet/aspnetcore/pull/61924)) This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date. --- This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests. **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17 ## 8.0.16 [Release](https://github.com/dotnet/core/releases/tag/v8.0.16) ## What's Changed * Update branding to 8.0.16 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61283 * [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to `52204f7` by @dependabot in https://github.com/dotnet/aspnetcore/pull/61260 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281 * [release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/61216 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60926 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61398 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411 * Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352 * [release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61375 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61442 * fetch TLS client hello message from HTTP.SYS by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/61494 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16 ## 8.0.15 [Release](https://github.com/dotnet/core/releases/tag/v8.0.15) ## What's Changed * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355 * Update branding to 8.0.15 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60784 * Add partitioned to cookie for SignalR browser testing by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728 * [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to `24a9e94` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60677 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60879 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15 ## 8.0.14 [Release](https://github.com/dotnet/core/releases/tag/v8.0.14) ## What's Changed * Update branding to 8.0.14 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60197 * [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to `e235eb3` by @dependabot in https://github.com/dotnet/aspnetcore/pull/60150 * [release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59922 * [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in https://github.com/dotnet/aspnetcore/pull/60203 * [release/8.0] Update to MacOS 15 in Helix by @github-actions in https://github.com/dotnet/aspnetcore/pull/60239 * [release/8.0] Use the latest available JDK by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60233 * [release/8.0] Fix skip condition for java tests by @github-actions in https://github.com/dotnet/aspnetcore/pull/60243 * [release/8.0] Update list of helix queues to skip by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60231 * [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in https://github.com/dotnet/aspnetcore/pull/57288 * [release/8.0] Update remnants of azureedge.net by @sebastienros in https://github.com/dotnet/aspnetcore/pull/60264 * [release/8.0] Centralize on one docker container by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60299 * Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/60324 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60316 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14 ## 8.0.13 [Release](https://github.com/dotnet/core/releases/tag/v8.0.13) ## What's Changed * [release/8.0] Update dotnetbuilds CDN to new endpoint by @mmitche in https://github.com/dotnet/aspnetcore/pull/59575 * Update branding to 8.0.13 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59756 * [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295 * [release/8.0] Update OSX helix queue by @github-actions in https://github.com/dotnet/aspnetcore/pull/59742 * [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to `7d76a23` by @dependabot in https://github.com/dotnet/aspnetcore/pull/59678 * [release/8.0] Skip tests on internal queues too by @github-actions in https://github.com/dotnet/aspnetcore/pull/59579 * [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59403 * Migrate off of Debian 11 by @v-firzha in https://github.com/dotnet/aspnetcore/pull/59584 * [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59777 * [release/8.0] [Blazor WASM standalone] Avoid caching `index.html` during development by @github-actions in https://github.com/dotnet/aspnetcore/pull/59349 * Update to Fedora 41 by @BrennanConroy in https://github.com/dotnet/aspnetcore/pull/59817 * [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811 * [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59825 * [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864 * [release/8.0] Fix/update docker tags by @wtgodbe in https://github.com/dotnet/aspnetcore/pull/59867 * Merging internal commits for release/8.0 by @vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/59872 **Full Changelog**: https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13 Commits viewable in [compare view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Identity.UI&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Don't cache index.html during development (#59340)

40fa16f

MackinnonBuck added area-blazor Includes: Blazor, Razor Components feature-blazor-wasm This issue is related to and / or impacts Blazor WebAssembly feature-hot-reload This issue is related to the Hot Reload feaature labels Dec 5, 2024

MackinnonBuck requested a review from a team as a code owner December 5, 2024 21:56

dotnet-policy-service bot added this to the 9.0.x milestone Dec 5, 2024

MackinnonBuck added the ask-mode This issue / PR is a patch candidate which we will bar-check internally before patching it. label Dec 5, 2024

github-actions bot mentioned this pull request Dec 5, 2024

[release/8.0] [Blazor WASM standalone] Avoid caching index.html during development #59349

Merged

10 tasks

mkArtakMSFT added Servicing-approved Shiproom has approved the issue and removed ask-mode This issue / PR is a patch candidate which we will bar-check internally before patching it. labels Dec 12, 2024

dotnet-policy-service bot added the pending-ci-rerun When assigned to a PR indicates that the CI checks should be rerun label Dec 19, 2024

guardrex mentioned this pull request Jan 6, 2025

Blazor .NET 10 Tracking Issue dotnet/AspNetCore.Docs#34437

Closed

mkArtakMSFT approved these changes Jan 9, 2025

View reviewed changes

wtgodbe merged commit 0df9366 into release/9.0 Jan 9, 2025

wtgodbe deleted the mbuck/backport-hot-reload-fix-to-9.0 branch January 9, 2025 23:51

dotnet-policy-service bot modified the milestones: 9.0.x, 9.0.2 Jan 9, 2025

renovate bot mentioned this pull request May 25, 2025

[deps]: Update nuget minor bitwarden/passwordless-server#802

Merged

1 task

This was referenced Feb 9, 2026

Bump Microsoft.AspNetCore.Authentication.MicrosoftAccount from 8.0.12 to 9.0.12 IntelliTect/EssentialCSharp.Web#851

Merged

Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.12 to 9.0.12 IntelliTect/EssentialCSharp.Web#852

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development#59348

[release/9.0] [Blazor WASM standalone] Avoid caching `index.html` during development#59348
wtgodbe merged 1 commit intorelease/9.0from
mbuck/backport-hot-reload-fix-to-9.0

MackinnonBuck commented Dec 5, 2024 •

edited

Loading

Uh oh!

MackinnonBuck commented Dec 5, 2024

Uh oh!

github-actions bot commented Dec 5, 2024

Uh oh!

pavelsavara commented Dec 9, 2024

Uh oh!

mkArtakMSFT left a comment

Uh oh!

MackinnonBuck commented Jan 9, 2025 •

edited

Loading

Uh oh!

halter73 commented Jan 9, 2025

Uh oh!

MackinnonBuck commented Jan 9, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

MackinnonBuck commented Dec 5, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Avoid caching index.html during development

Description

Background

The problem

The fix

Customer Impact

Regression?

Risk

Verification

Packaging changes reviewed?

Uh oh!

MackinnonBuck commented Dec 5, 2024

Uh oh!

github-actions bot commented Dec 5, 2024

Uh oh!

pavelsavara commented Dec 9, 2024

Uh oh!

mkArtakMSFT left a comment

Choose a reason for hiding this comment

Uh oh!

MackinnonBuck commented Jan 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

halter73 commented Jan 9, 2025

Uh oh!

MackinnonBuck commented Jan 9, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

MackinnonBuck commented Dec 5, 2024 •

edited

Loading

Avoid caching `index.html` during development

MackinnonBuck commented Jan 9, 2025 •

edited

Loading