Release

What's Changed

• Unskip BindAsync test for body binding by @BrennanConroy in #64955
• Update BL0007 diagnostic to provide clearer guidance on component parameter patterns by @Copilot in #63812
• fix FIPS enabled context header creation in ManagedAuthenticatedEncryptor by @DeagleGross in #65186
• Avoid re-throwing exception in bad request handling path by @adityamandaleeka in #65221
• Antiforgery perf improvements (includes new DataProtection API usage) by @DeagleGross in #64751
• Document MinResponseDataRate transport buffer limitation by @Copilot in #64743
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65267
• Add OTEL semantic conventions tags to HTTP server activity by @JamesNK in #64851
• [main] (deps): Bump dotnet/arcade/.github/workflows/inter-branch-merge-base.yml from 238bb95905161ba32b49ed7b8d6964e578652c19 to a91f694d9a060b90dec9fc775fb404433a0200f4 by @dependabot[bot] in #65276
• [main] (deps): Bump dotnet/arcade/.github/workflows/backport-base.yml from 238bb95905161ba32b49ed7b8d6964e578652c19 to a91f694d9a060b90dec9fc775fb404433a0200f4 by @dependabot[bot] in #65275
• Disable parallel restore for WindowsHostingBundle by @wtgodbe in #65279
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65223
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65282
• [main] (deps): Bump src/submodules/googletest from 8508785 to 56efe39 by @dependabot[bot] in #65274
• [main] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #65225
• Update milestones for March by @wtgodbe in #65302
• Update minimum certificate version check behavior to support certs from as far back as the 10.0.100 SDK. by @danegsta in #65151
• TempData support for Blazor by @dariatiurina in #64749
• Fix PasskeySignInAsync to enforce email/phone confirmation and lockout checks by @Copilot in #65024
• Pool ResponseBufferingStream in HttpLoggingMiddleware by @adityamandaleeka in #65147
• Fix BlazorUnitedApp sample missing shared framework references by @ilonatommy in #65292
• Fix milestones for p1, p2 by @wtgodbe in #65324
• Update HttpSys shutdown logic by @BrennanConroy in #65217
• Remove unsupported blazorserver sample by @ilonatommy in #65320
• Fix IdAttributeValue generation in interactive mode by @ilonatommy in #65263
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65334
• [main] Add internal/release/10.0 to pipeline trigger branches by @Copilot in #65329
• Add non-throwing parser path for bad request handling by @adityamandaleeka in #65256
• [main] (deps): Bump dotnet/arcade/.github/workflows/backport-base.yml from a91f694d9a060b90dec9fc775fb404433a0200f4 to 656bdecfc772fca7eba40c0c6983b58b21bbe4be by @dependabot[bot] in #65350
• [main] (deps): Bump dotnet/arcade/.github/workflows/inter-branch-merge-base.yml from a91f694d9a060b90dec9fc775fb404433a0200f4 to 656bdecfc772fca7eba40c0c6983b58b21bbe4be by @dependabot[bot] in #65351
• [main] (deps): Bump src/submodules/googletest from 56efe39 to 5a9c3f9 by @dependabot[bot] in #65349
• Add new webworker template project by @ilonatommy in #65037
• Deflake HttpStream pooling tests by @BrennanConroy in #65356
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65362
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65363
• Run the issue-labeler over pull requests using polling by @Copilot in #65358
• Disable parallel restore for linker tests by @wtgodbe in #65372
• Updated npm packages 2026-02-09 by @wtgodbe in #65377
• Localized file check-in by OneLocBuild Task: Build definition ID 1159: Build ID 2898520 by @dotnet-bot in #65354
• Fix IIS recycle regressions by @BrennanConroy in #59998
• Set SignalR WebSocketFactory for all environments by @BekAllaev in #65359
• Use pre-allocated static responses for fast-path bad request handling by @adityamandaleeka in #65345
• Infer passkey display name from AAGUID by @MackinnonBuck in #65343
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65379
• Run Helix tests on VS2026 by @wtgodbe in #65162
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65400
• Add test helper and test cases to validate EventSource IDs by @danegsta in #65408
• Fix memory leaks in CertificateManager by improving certificate disposal patterns by @Copilot in #63321
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65414
• [main] AppContext for HttpSys CBT hardening by @github-actions[bot] in #65387
• [main] (deps): Bump dotnet/arcade/.github/workflows/backport-base.yml from 656bdecfc772fca7eba40c0c6983b58b21bbe4be to ab22aeec12730f321addeb11568f0213b23ac3f4 by @dependabot[bot] in #65422
• [main] (deps): Bump dotnet/arcade/.github/workflows/inter-branch-merge-base.yml from 656bdecfc772fca7eba40c0c6983b58b21bbe4be to ab22aeec12730f321addeb11568f0213b23ac3f4 by @dependabot[bot] in #65423
• fix SignalR http2 SkipNegotiation error by @WeihanLi in #62940
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65428
• Unquarantine HealthCheckPublisherHostedServiceTest.RunAsync_WaitsForCompletion_Single_RegistrationParameters by @Copilot in #65404
• [main] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #65441
• [main] (deps): Bump src/submodules/googletest from 5a9c3f9 to 77f6bd3 by @dependabot[bot] in #65421
• Add E2E tests for webworker template by @ilonatommy in #65405
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65431
• Make report-green.yml run on agentless server job by @akoeplinger in #65444
• Update browser testing dependencies: Selenium 4.40.0, Playwright 1.57.0 by @Copilot in #65304
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65437
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65448
• Securely overwrite X-Content-Length for mitigating request smuggling via TransferEncoding & ContentLength headers by @DeagleGross in #65445
• Fix race in RST_STREAM_IncompleteRequest HTTP/2 tests by @adityamandaleeka in #65454
• Skip indexer properties in validation source generator by @adityamandaleeka in #65432
• Fix Http3 connection close metric sometimes remaining Unset by @BrennanConroy in #65398
• Port CI analysis Copilot skill and default it to aspnetcore by @Copilot in #65464
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65455
• Fix flaky Http2 test by using consistent ConnectionEndReason for closed streams by @adityamandaleeka in #65456
• feat: adds support for OpenAPI 3.2.0 by @baywet in #65415
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65467
• [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in https://github.com/dotnet/asp...

Release

What's Changed

• [release/9.0] Update branding to 9.0.16 by @vseanreesermsft in #66206
• [release/9.0] Update NPM dependencies by @wtgodbe in #66051
• [release/9.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in #66219
• [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in #66088
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65906
• [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in #66224
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65907
• [release/9.0] Update azure/msal-browser by @github-actions[bot] in #66234
• [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @wtgodbe in #66235
• [release/9.0] Use source-build-assets repo by @NikolaMilosavljevic in #66278
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #66288
• Merging internal commits for release/9.0 by @vseanreesermsft in #66316

Full Changelog: v9.0.15...v9.0.16

Release

What's Changed

• [release/8.0] Update branding to 8.0.27 by @vseanreesermsft in #66205
• [release/8.0] Update NPM dependencies by @wtgodbe in #66052
• [release/8.0] Move off of dead-lettered Windows preview helix queue by @wtgodbe in #66220
• [release/8.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @dependabot[bot] in #66087
• [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @missymessa in #66115
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro[bot] in #66216
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #66081
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in #66131
• [release/8.0] Update @azure/msal-browser from 2.x to 4.x by @wtgodbe in #66236
• [release/8.0] Use source-build-assets repo by @NikolaMilosavljevic in #66276
• Merging internal commits for release/8.0 by @vseanreesermsft in #66317

Full Changelog: v8.0.26...v8.0.27

Release

What's Changed

• [release/10.0] Update npm dependencies by @wtgodbe in #65831
• [release/10.0] Fix ManagedAuthenticatedEncryptor calculations (#65890) by @BrennanConroy in #65934
• [release/10.0] Disable parallel restore for pass-2 projects by @wtgodbe in #65955
• [release/10.0] [test-quarantine] Quarantine XmlKeyManagerTests.DeleteKeys by @github-actions[bot] in #66053
• [release/10.0] Update NPM dependencies by @wtgodbe in #66050
• [release/10.0] Switch to non-preview 2022 Windows queue by @wtgodbe in #65952
• [release/10.0] Stop overriding a couple Arcade default package versions by @github-actions[bot] in #66101
• [release/10.0] Update azure/msal-browser by @github-actions[bot] in #66094
• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #66169
• [release/10.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65908
• [release/10.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @missymessa in #66113
• [release/10.0] Run tests on VS2026 queue by @wtgodbe in #66233
• [release/10.0] Fix lodash CVE by adding npm override for >=4.18.0 by @wtgodbe in #66223
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #66225
• [release/10.0] [test-quarantine] Quarantine ResponseBodyTests.ResponseBody_WriteContentLength_PassedThrough by @github-actions[bot] in #66247
• [release/10.0] Refactor param binding failure handling in RequestDelegate by @github-actions[bot] in #66221
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #66257
• [release/10.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #66289
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #66305
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #66320
• [release/10.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #66372
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #66341
• [release/10.0] Suppress NuGet vulnerability audit warnings in RepoTasks by @github-actions[bot] in #66424

Full Changelog: v10.0.6...v10.0.8

Release

What's Changed

• infra(release/10.0): proper branch name for mirroring within azdo by @DeagleGross in #65473
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65401
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65495
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65499
• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #65506
• [release/10.0] [Blazor] Fix metadata comments incorrectly being processed as logical elements by @github-actions[bot] in #64530
• [release/10.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65604
• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #65602
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65533
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65649
• [release/10.0] Use Wix5 in SharedFx/Targeting Pack .msi's by @github-actions[bot] in #65651
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65654
• [release/10.0] Suppress MSB3026 warnings by @github-actions[bot] in #65672
• [release/10.0] Fix intermittent circular dependency build failure by @github-actions[bot] in #65669
• [release/10.0] Revert IEndpointParameterMetadataProvider on Newtonsoft JsonPatchDocument by @Copilot in #65674
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65687
• [release/10.0] Fix HelixTestRunner using the wrong version of dotnet-ef by @github-actions[bot] in #65688
• [release/10.0] Fix double-publish ILLink error in BasicTestApp by @github-actions[bot] in #65691
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65695
• [release/10.0] Fix migration ID mismatch in Blazor template app.db by @MackinnonBuck in #65532
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65713
• [release/10.0] Fix race in RST_STREAM_IncompleteRequest HTTP/2 tests by @github-actions[bot] in #65717
• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization by @dotnet-maestro[bot] in #65707
• [release/10.0] Fix race in RST_STREAM_IncompleteRequest_AdditionalResetFrame test by @github-actions[bot] in #65718
• [release/10.0] Fixing JsonPatchDocument bug by @github-actions[bot] in #65736
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65721
• [release/10.0] Fix Blazor WASM template tests NU1603 with DevServer version pinning by @lewing in #65781
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65739
• [release/10.0] Fix shutdown hang with IIS by @github-actions[bot] in #65761
• [release/10.0] Disable parallel restore for WindowsHostingBundle by @github-actions[bot] in #65796
• [release/10.0] Restore trimming test projects serially by @wtgodbe in #65798
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #65799

Full Changelog: v10.0.5...v10.0.6

Release

What's Changed

• [release/9.0] Update branding to 9.0.15 by @vseanreesermsft in #65634
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65439
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65438
• [release/9.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea by @dependabot[bot] in #65587
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65706
• Merging internal commits for release/9.0 by @vseanreesermsft in #65731

Full Changelog: v9.0.14...v9.0.15

Release

What's Changed

• [release/8.0] Update branding to 8.0.26 by @vseanreesermsft in #65635
• [release/8.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea by @dependabot[bot] in #65586
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65581
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro[bot] in #65621
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro[bot] in #65615
• Merging internal commits for release/8.0 by @vseanreesermsft in #65730

Full Changelog: v8.0.25...v8.0.26

https://github.com/dotnet/core/releases/tag/v11.0.0-preview.2

Release

What's Changed

• Update branding to 9.0.14 by @vseanreesermsft in #65294
• [release/9.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 by @dependabot[bot] in #65290
• [release/9.0] Remove package baseline by @Copilot in #65208
• [release/9.0] Set network isolation policy for aspnetcore-ci by @github-actions[bot] in #65172
• [release/9.0] Package dotnet-getdocument from current TFM into top-level by @wtgodbe in #65164
• [release/9.0] Fix URL format for JDK download on linux by @github-actions[bot] in #65075
• [release/9.0] Disable parallel restore for Grpc JsonTranscoding by @github-actions[bot] in #65072
• [release/9.0] Update Ubuntu queue to 22.04 by @wtgodbe in #65298
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65117
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65089
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #65365
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in #65364
• [release/9.0] Disable parallel restore for linker tests by @github-actions[bot] in #65374
• Merging internal commits for release/9.0 by @vseanreesermsft in #65381
• [release/9.0] Switch to non-preview 2022 queue by @github-actions[bot] in #65412

Full Changelog: v9.0.13...v9.0.14

Release

Full Changelog: v10.0.4...v10.0.5