Skip to content

[release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer#58372

Merged
wtgodbe merged 2 commits intorelease/9.0from
safia/backport-tryparse-bugfix
Oct 15, 2024
Merged

[release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer#58372
wtgodbe merged 2 commits intorelease/9.0from
safia/backport-tryparse-bugfix

Conversation

@captainsafia
Copy link
Contributor

Description

This PR fixes the handling for schemas associated with types that implement a custom TryParse and are consumed from either the route or query string.

Fixes #58318

Customer Impact

Without this change, APIs that bind parameters from the query string or URL will produce invalid schemas if the type being bound to implements a TryParse method or the IParsable interface.

There are workarounds for this scenario (using schema transformers) but it requires users add a fair bit of code in their own applications and this fix is small enough to warrant improving the QoL for this.

Example of impacted scenario

app.MapGet("/student/{student}", (Student student) => $"Hi {student.Name}");

public record Student(string Name)
{
    public static bool TryParse(string value, out Student? result)
    {
        if (value is null)
        {
            result = null;
            return false;
        }

        result = new Student(value);
        return true;
    }
}

Regression?

  • Yes
  • No

Risk

  • High
  • Medium
  • Low

Change localized to OpenAPI support + TryParsable parameters in the route query.

Verification

  • Manual (required)
  • Automated

Packaging changes reviewed?

  • Yes
  • No
  • N/A

@captainsafia captainsafia requested a review from a team as a code owner October 11, 2024 20:16
@ghost ghost added the old-area-web-frameworks-do-not-use *DEPRECATED* This label is deprecated in favor of the area-mvc and area-minimal labels label Oct 11, 2024
@captainsafia captainsafia added Servicing-consider Shiproom approval is required for the issue area-mvc Includes: MVC, Actions and Controllers, Localization, CORS, most templates feature-openapi area-minimal Includes minimal APIs, endpoint filters, parameter binding, request delegate generator etc and removed old-area-web-frameworks-do-not-use *DEPRECATED* This label is deprecated in favor of the area-mvc and area-minimal labels labels Oct 11, 2024
@captainsafia captainsafia changed the title [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer (#58350) [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer Oct 11, 2024
@captainsafia
Copy link
Contributor Author

Approved via email.

@captainsafia captainsafia added Servicing-approved Shiproom has approved the issue and removed Servicing-consider Shiproom approval is required for the issue labels Oct 14, 2024
@wtgodbe
Copy link
Member

wtgodbe commented Oct 14, 2024

@captainsafia can you resolve the merge conflict?

* Fix ModelMetadata for TryParse-parameters in ApiExplorer

* Add tests and update code comments

* Update src/OpenApi/src/Services/OpenApiDocumentService.cs
@captainsafia captainsafia force-pushed the safia/backport-tryparse-bugfix branch from cb2c856 to bf2014c Compare October 14, 2024 17:56
@captainsafia
Copy link
Contributor Author

@wtgodbe Done!

@BrennanConroy Can you take a look at this backport? Thanks!

@wtgodbe wtgodbe merged commit 3bcef1a into release/9.0 Oct 15, 2024
@wtgodbe wtgodbe deleted the safia/backport-tryparse-bugfix branch October 15, 2024 15:54
@dotnet-policy-service dotnet-policy-service bot added this to the 9.0.0 milestone Oct 15, 2024
@Phalelashvili
Copy link

Phalelashvili commented Dec 14, 2024

could this be the solution for issue where unbound route parameter changes schema type of other action after caching it? in my sample, it has nothing to do with IParsable. I figure JsonNode reference gets modified after it's cached by OpenApiSchemaStore

using System.Text.Json.Nodes;
using Microsoft.AspNetCore.Mvc;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddControllers();
builder.Services.AddOpenApi();

var app = builder.Build();
app.MapOpenApi();

app.MapControllers();
app.MapDefaultControllerRoute();

app.Run();

[ApiController]
[Route("api/test")]
public class TestController : ControllerBase
{
    /// <summary>
    /// method that's defined properly.
    /// but open api generates parameter value as long (from broken method) instead of string
    /// only AFTER first call to openapi explorer. next time OpenApiSchemaStore returns incorrect cached value
    /// NOTE: if parameter in this method was not a complex object, it would have been fine.
    /// </summary>
    [HttpGet("search")]
    public IActionResult Search([FromQuery] SearchQuery query) => Ok();

    /// <summary>
    /// this is the method that breaks other actions.
    /// it defines a route parameter {id:long} in template but does not have parameter to bind it to.
    /// NOTE: not specifying type of id will not break other actions.
    /// </summary>
    [HttpGet("{id:long}/broken-method")]
    public IActionResult BrokenMethod() => Ok();
}

public class SearchQuery
{
    public string Term { get; init; }
}

@captainsafia
Copy link
Contributor Author

@Phalelashvili I think what you're seeing is a different issue. I believe there's a difference in behavior between MVC and Minimal APIs where route parameters not associated with a method parameter don't materialize in the ApiExplorer model. Can you file an issue for this?

intellitect-bot pushed a commit to IntelliTect/EssentialCSharp.Web that referenced this pull request Feb 9, 2026
… to 9.0.12 (#851)

Updated
[Microsoft.AspNetCore.Authentication.MicrosoftAccount](https://github.com/dotnet/aspnetcore)
from 8.0.12 to 9.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Authentication.MicrosoftAccount's
releases](https://github.com/dotnet/aspnetcore/releases)._

## 9.0.12

[Release](https://github.com/dotnet/core/releases/tag/v9.0.12)

## What's Changed
* Update branding to 9.0.12 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64248
* Update `Microsoft.Build` versions to 17.8.43 by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/64277
* [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to
`6ec14df` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64230
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065
* [release/9.0] Upgrade to MacOS 15 for CI by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/64310
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64312
* [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351
* [release/9.0] AppContext for HttpSys CBT hardening by @​BrennanConroy
in https://github.com/dotnet/aspnetcore/pull/64297
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388
* [release/9.0] Delete signalr-daily-tests.yml by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/64589
* [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to
`1b96fa1` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64580
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12

## 9.0.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.11)

## What's Changed
* Update branding to 9.0.11 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63950
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678
* [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63894
* [release/9.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/61948
* [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63934
* [release/9.0] Re-quarantine
ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63956
* [release/9.0] Fix nginx install on mac, linux by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/63966
* [Hot Reload] Do not attempt to apply empty deltas. by @​tmat in
https://github.com/dotnet/aspnetcore/pull/63979
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64036
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64091
* Set timeoutInMinutes to 0 for Windows build job by @​vseanreesermsft
in https://github.com/dotnet/aspnetcore/pull/64126


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11

## 9.0.10

[Release](https://github.com/dotnet/core/releases/tag/v9.0.10)

## What's Changed
* Update branding to 9.0.10 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63510
* [9.0] Make duplicate deb/rpm packages so we can sign them with the new
PMC key by @​jkoritzinsky in
https://github.com/dotnet/aspnetcore/pull/63249
* [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63465
* [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63501
* [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304
* [release/9.0] [OpenAPI] Use invariant culture for TextWriter by
@​martincostello in https://github.com/dotnet/aspnetcore/pull/62239
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303
* Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by
@​ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63604
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648
* backport(9.0): Fix runtime architecture detection logic in ANCM. by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10

## 9.0.9

[Release](https://github.com/dotnet/core/releases/tag/v9.0.9)

## What's Changed
* Update branding to 9.0.9 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63107
* [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63035
* [release/9.0] Dispose the certificate chain elements with the chain by
@​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702
* [release/9.0] Update Microsoft.Build versions by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62505
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832
* [release/9.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63116
* [release/9.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62783
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63151
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9

## 9.0.7

[Release](https://github.com/dotnet/core/releases/tag/v9.0.7)

## What's Changed
* Update branding to 9.0.7 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62242
* [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62199
* Fix OpenApiJsonSchema array parsing (#​62051) by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/62118
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945
* [release/9.0] Update Alpine helix references by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62240
* [Backport 9.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038
* [release/9.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62248
* [release/9.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62283
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62303


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7

## 9.0.6

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61622](https://github.com/dotnet/aspnetcore/pull/61622))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence forwarded header values, preventing
potential spoofing or misrouting issues.

## Dependency Updates

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61762](https://github.com/dotnet/aspnetcore/pull/61762))
Updates the GoogleTest submodule to a newer commit, bringing in the
latest improvements and bug fixes from the upstream project.
- **Update dependencies from dotnet/arcade**
([#​61714](https://github.com/dotnet/aspnetcore/pull/61714))
Updates internal build and infrastructure dependencies from the
dotnet/arcade repository, ensuring compatibility and access to the
latest build tools.
- **Update dependencies from dotnet/extensions**
([#​61571](https://github.com/dotnet/aspnetcore/pull/61571))
Refreshes dependencies from the dotnet/extensions repository,
incorporating the latest features and fixes from the extensions
libraries.
- **Update dependencies from dotnet/extensions**
([#​61877](https://github.com/dotnet/aspnetcore/pull/61877))
Further updates dependencies from dotnet/extensions, ensuring the
project benefits from recent improvements and bug fixes.
- **Update dependencies from dotnet/arcade**
([#​61892](https://github.com/dotnet/aspnetcore/pull/61892))
Additional updates to build and infrastructure dependencies from
dotnet/arcade, maintaining up-to-date tooling and build processes.

## Miscellaneous

- **Update branding to 9.0.6**
([#​61831](https://github.com/dotnet/aspnetcore/pull/61831))
Updates the project version and branding to 9.0.6, reflecting the new
release and ensuring version consistency across the codebase.
- **Merging internal commits for release/9.0**
([#​61925](https://github.com/dotnet/aspnetcore/pull/61925))
Incorporates various internal commits into the release/9.0 branch,
ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

Full Changelog:
[v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6)

## 9.0.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.5)

## What's Changed
* Update branding to 9.0.5 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61284
* [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61261
* [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61215
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355
* [release/9.0] Caching SERedis critical bugfix; defer HC metadata
detection because of DI cycle by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60916
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61393
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412
* Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353
* [release/9.0] Fix preserving messages for stateful reconnect with
backplane by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61374
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483
* [Identity] Fix Identity UI asset definitions by @​javiercn in
https://github.com/dotnet/aspnetcore/pull/59100


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5

## 9.0.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.4)

## What's Changed
* Update branding to 9.0.4 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60785
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445
* [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60678
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356
* Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/60673
* Fix self-referential schema handling in collection schemas by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/60410
* [release/9.0] [Blazor] Fix custom elements JS assets not being
included in build output by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/60858
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60880


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4

## 9.0.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.3)

## What's Changed
* Update branding to 9.0.3 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60198
* [release/9.0] Fix branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60029
* [release/9.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60238
* [release/9.0] Revert "Revert "Use the latest available jdk"" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60229
* [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow
the `MetadataUpdateHandlerAttribute` contract by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59908
* [release/9.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60242
* [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60151
* [release/9.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60202
* [release/9.0] Redis distributed cache: add HybridCache usage signal by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59886
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951
* [release/9.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60263
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291
* [release/9.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60298
* Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60323
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60317


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3

## 9.0.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.2)

## What's Changed
* Update branding to 9.0.2 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59757
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266
* [release/9.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59743
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728
* [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59679
* [release/9.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59578
* [release/9.0] Fix loading dotnet user-jwts config by @​github-actions
in https://github.com/dotnet/aspnetcore/pull/59473
* [release/9.0] Fix MultipartReaderStream synchronous read when using
buffer offset by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59422
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/59419
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611
* [release/9.0] Fix Kestrel host header mismatch handling when port in
Url by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59362
* Migrate off of Fedora 38 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59613
* [release/9.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/59348
* [release/9.0] Update to Fedora 41 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59816
* [release/9.0] Don't throw exception for parameters with custom binding
source by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59533
* [release/9.0] Apply schema transformer to AdditionalProperties by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59730
* [release/9.0] Harden schema reference transformer for relative
references by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/59779
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848
* [release/9.0] Return 206 Partial Content on Valid Range for Static
Assets by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59325
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59871


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2

## 9.0.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.1)

## What's Changed
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/58900
* [release/9.0] Prevent unnecessary debugger stops for user-unhandled
exceptions in Blazor apps with Just My Code enabled by @​halter73 in
https://github.com/dotnet/aspnetcore/pull/58573
* Hot Reload agent improvements by @​tmat in
https://github.com/dotnet/aspnetcore/pull/58333
* [release/9.0] Update dependencies from roslyn by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59183
* [release/9.0] Add direct reference to System.Drawing.Common in tools
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189
* [release/9.0] Harden parsing of [Range] attribute values by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59077
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024
* [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to
`d144031` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59032
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58589
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675
* [release/9.0] Fix SignalR Java POM to include description by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58896
* [release/9.0] Fix IIS outofprocess to remove WebSocket compression
handshake by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58931


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1

## 9.0.0

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0)

## What's Changed
* Update branding to rtm by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57907
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954
* [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57999
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048
* [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57975
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052
* Fix up OpenAPI schema handling and support concurrent requests by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/58024
* [release/9.0] Mark API from 9 as shipped by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58060
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117
* [release/9.0] Enable TSA/Policheck by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58123
* [release/9.0] Add explicit conversion for value-type returning
handlers with filters by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57967
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58116
* [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from
`ecc4e18` to `9511905` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58183
* [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to
`6dae7eb` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58184
* [release/9.0] Change usage of "Country" to "CountryRegion" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58280
* Merge RC2 changes into 9.0 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58296
* [release/9.0] Remove ProviderKey from Hosting Bundle by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58293
* [release/9.0] [Blazor] Fix template nav menu styling by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58277
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58366
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344
* [release/9.0] Fix handling for inert route parameters in MVC endpoints
for OpenAPI by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58311
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414
* [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer
by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/58372
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421
* [release/9.0] Stabilize branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58444
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449
* [release/9.0] [Infrastructure] Updated npm packages by @​MackinnonBuck
in https://github.com/dotnet/aspnetcore/pull/58469
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462
* [release/9.0] bumping ws dependency to fix component vulnerability by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58458
* [release/9.0] Improve dev-certs export error message by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58471
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475
 ... (truncated)

## 9.0.0-rc.2.24474.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2)

## What's Changed
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57420
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366
* [release/9.0] Add references to new 9.0 branches in .yml files by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446
* [release/9.0] Quarantine two CircuitTests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57606
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57659
* [release/9.0] Fix duplicate error.type on kestrel.connection.duration
by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57581
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/57691
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697
* [release/9.0] [Blazor] Invoke inbound activity handlers on circuit
initialization by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57678
* Disable launching browser on Web API template by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57682
* [release/9.0] [Static Assets] Improve development experience by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57764
* Include Readme.md in packages by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57809
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708
* HybridCache: relocate to dotnet/extensions by @​mgravell in
https://github.com/dotnet/aspnetcore/pull/57670
* [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to
`0953a17` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/57643
* Http.Sys: Clean up Request parsing errors by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/57531
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835
* [release/9.0] [Identity][Templates] Ensure placeholders don't overlap
with text by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57789
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858
* Fix mapping for nested schemas and [Produces] attributes in OpenAPI
implementation by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57852
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866
* [release/9.0] [Templates] Updates libraries dependencies content by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57864
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896
* [release/9.0-rc2] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931
* Add registry search for upgrade policy keys by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57952
* Check for sentinel value when setting HTTP/3 error code by @​amcasey
in https://github.com/dotnet/aspnetcore/pull/57976
* [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the
`Blazor-Environment` header by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57974
* Fix IAsyncEnumerable controller methods to allow setting headers by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3

## 9.0.0-rc.1.24452.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1)

## 9.0.0-preview.7.24406.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7)

## 9.0.0-preview.6.24328.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6)

## 9.0.0-preview.5.24306.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5)

## 9.0.0-preview.4.24267.6

[Release](https://github.com/dotnet/core/releases)

## 9.0.0-preview.3.24172.13

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3)

## 9.0.0-preview.2.24128.4

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

## 9.0.0-preview.1.24081.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1)

## 8.0.23

[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)

## What's Changed


https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

## 8.0.22

[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)

## What's Changed
* Update branding to 8.0.22 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63949
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664
* [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63903
* [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63893
* [release/8.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62080
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63665
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63957
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64035
* Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in
https://github.com/dotnet/aspnetcore/pull/64067
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64090


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22

## 8.0.21

[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)

## What's Changed
* Update branding to 8.0.21 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63509
* [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63500
* [release/8.0] Make duplicate deb/rpm packages so we can sign them with
the new PMC key by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63250
* [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63466
* [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63534
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63261
* [release/8.0] Use wait assert in flaky tests by @​ilonatommy in
https://github.com/dotnet/aspnetcore/pull/63565
* [release/8.0] Update Microsoft.Build versions by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/62507
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63603
* backport(8.0): Fix runtime architecture detection logic in ANCM by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63106
* [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63038
* [release/8.0] Dispose the certificate chain elements with the chain by
@​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994
* [release/8.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63117
* [release/8.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62784
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63152
* [release/8.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20

## 8.0.18

[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)

## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62241
* [release/8.0] Update Alpine helix references by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62243
* [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62201
* [8.0] Delete src/arcade directory by @​akoeplinger in
https://github.com/dotnet/aspnetcore/pull/61994
* [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/62006
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944
* [release/8.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62247
* [release/8.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62284
* backport(net8.0): http.sys on-demand TLS client hello retrieval by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62302


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18

## 8.0.17

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61623](https://github.com/dotnet/aspnetcore/pull/61623))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence the forwarded headers, preventing
potential spoofing or misrouting of requests.

## Dependency Updates

- **Update dependencies from dotnet/arcade**
([#​61832](https://github.com/dotnet/aspnetcore/pull/61832))
This update brings in the latest changes from the dotnet/arcade
repository, ensuring that ASP.NET Core benefits from recent
improvements, bug fixes, and security patches in the shared build
infrastructure.

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61761](https://github.com/dotnet/aspnetcore/pull/61761))
The GoogleTest submodule has been updated to a newer commit, providing
the latest testing features, bug fixes, and performance improvements for
the project's C++ test components.

## Miscellaneous

- **Update branding to 8.0.17**
([#​61830](https://github.com/dotnet/aspnetcore/pull/61830))
The project version branding has been updated to reflect the new 8.0.17
release, ensuring consistency across build outputs and documentation.

- **Merging internal commits for release/8.0**
([#​61924](https://github.com/dotnet/aspnetcore/pull/61924))
This change merges various internal commits into the release/8.0 branch,
incorporating minor fixes, documentation updates, and other
non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61283
* [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61260
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281
* [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/61216
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/60926
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61398
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411
* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352
* [release/8.0] Fix preserving messages for stateful reconnect with
backplane by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61375
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/61442
* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61494


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16

## 8.0.15

[Release](https://github.com/dotnet/core/releases/tag/v8.0.15)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355
* Update branding to 8.0.15 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60784
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728
* [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60677
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60879


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15

## 8.0.14

[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)

## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60197
* [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60150
* [release/8.0] Fix java discovery in IdentityModel pipeline by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59922
* [release/8.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60203
* [release/8.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60239
* [release/8.0] Use the latest available JDK by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60233
* [release/8.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60243
* [release/8.0] Update list of helix queues to skip by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60231
* [release/8.0] [Blazor] Allow cascading value subscribers to get added
and removed during change notification by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57288
* [release/8.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60264
* [release/8.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60299
* Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60324
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60316


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14

## 8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13)

## What's Changed
* [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in
https://github.com/dotnet/aspnetcore/pull/59575
* Update branding to 8.0.13 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59756
* [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295
* [release/8.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59742
* [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59678
* [release/8.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59579
* [release/8.0] Fix Kestrel host header mismatch handling when port in
Url by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59403
* Migrate off of Debian 11 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59584
* [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59777
* [release/8.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59349
* Update to Fedora 41 by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59817
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59825
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864
* [release/8.0] Fix/update docker tags by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59867
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59872


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13

Commits viewable in [compare
view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Authentication.MicrosoftAccount&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
intellitect-bot pushed a commit to IntelliTect/EssentialCSharp.Web that referenced this pull request Feb 10, 2026
… 9.0.12 (#856)

Updated
[Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation](https://github.com/dotnet/aspnetcore)
from 8.0.12 to 9.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation's
releases](https://github.com/dotnet/aspnetcore/releases)._

## 9.0.12

[Release](https://github.com/dotnet/core/releases/tag/v9.0.12)

## What's Changed
* Update branding to 9.0.12 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64248
* Update `Microsoft.Build` versions to 17.8.43 by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/64277
* [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to
`6ec14df` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64230
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065
* [release/9.0] Upgrade to MacOS 15 for CI by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/64310
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64312
* [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351
* [release/9.0] AppContext for HttpSys CBT hardening by @​BrennanConroy
in https://github.com/dotnet/aspnetcore/pull/64297
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388
* [release/9.0] Delete signalr-daily-tests.yml by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/64589
* [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to
`1b96fa1` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64580
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12

## 9.0.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.11)

## What's Changed
* Update branding to 9.0.11 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63950
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678
* [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63894
* [release/9.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/61948
* [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63934
* [release/9.0] Re-quarantine
ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63956
* [release/9.0] Fix nginx install on mac, linux by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/63966
* [Hot Reload] Do not attempt to apply empty deltas. by @​tmat in
https://github.com/dotnet/aspnetcore/pull/63979
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64036
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64091
* Set timeoutInMinutes to 0 for Windows build job by @​vseanreesermsft
in https://github.com/dotnet/aspnetcore/pull/64126


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11

## 9.0.10

[Release](https://github.com/dotnet/core/releases/tag/v9.0.10)

## What's Changed
* Update branding to 9.0.10 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63510
* [9.0] Make duplicate deb/rpm packages so we can sign them with the new
PMC key by @​jkoritzinsky in
https://github.com/dotnet/aspnetcore/pull/63249
* [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63465
* [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63501
* [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304
* [release/9.0] [OpenAPI] Use invariant culture for TextWriter by
@​martincostello in https://github.com/dotnet/aspnetcore/pull/62239
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303
* Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by
@​ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63604
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648
* backport(9.0): Fix runtime architecture detection logic in ANCM. by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10

## 9.0.9

[Release](https://github.com/dotnet/core/releases/tag/v9.0.9)

## What's Changed
* Update branding to 9.0.9 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63107
* [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63035
* [release/9.0] Dispose the certificate chain elements with the chain by
@​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702
* [release/9.0] Update Microsoft.Build versions by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62505
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832
* [release/9.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63116
* [release/9.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62783
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63151
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9

## 9.0.7

[Release](https://github.com/dotnet/core/releases/tag/v9.0.7)

## What's Changed
* Update branding to 9.0.7 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62242
* [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62199
* Fix OpenApiJsonSchema array parsing (#​62051) by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/62118
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945
* [release/9.0] Update Alpine helix references by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62240
* [Backport 9.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038
* [release/9.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62248
* [release/9.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62283
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62303


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7

## 9.0.6

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61622](https://github.com/dotnet/aspnetcore/pull/61622))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence forwarded header values, preventing
potential spoofing or misrouting issues.

## Dependency Updates

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61762](https://github.com/dotnet/aspnetcore/pull/61762))
Updates the GoogleTest submodule to a newer commit, bringing in the
latest improvements and bug fixes from the upstream project.
- **Update dependencies from dotnet/arcade**
([#​61714](https://github.com/dotnet/aspnetcore/pull/61714))
Updates internal build and infrastructure dependencies from the
dotnet/arcade repository, ensuring compatibility and access to the
latest build tools.
- **Update dependencies from dotnet/extensions**
([#​61571](https://github.com/dotnet/aspnetcore/pull/61571))
Refreshes dependencies from the dotnet/extensions repository,
incorporating the latest features and fixes from the extensions
libraries.
- **Update dependencies from dotnet/extensions**
([#​61877](https://github.com/dotnet/aspnetcore/pull/61877))
Further updates dependencies from dotnet/extensions, ensuring the
project benefits from recent improvements and bug fixes.
- **Update dependencies from dotnet/arcade**
([#​61892](https://github.com/dotnet/aspnetcore/pull/61892))
Additional updates to build and infrastructure dependencies from
dotnet/arcade, maintaining up-to-date tooling and build processes.

## Miscellaneous

- **Update branding to 9.0.6**
([#​61831](https://github.com/dotnet/aspnetcore/pull/61831))
Updates the project version and branding to 9.0.6, reflecting the new
release and ensuring version consistency across the codebase.
- **Merging internal commits for release/9.0**
([#​61925](https://github.com/dotnet/aspnetcore/pull/61925))
Incorporates various internal commits into the release/9.0 branch,
ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

Full Changelog:
[v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6)

## 9.0.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.5)

## What's Changed
* Update branding to 9.0.5 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61284
* [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61261
* [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61215
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355
* [release/9.0] Caching SERedis critical bugfix; defer HC metadata
detection because of DI cycle by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60916
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61393
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412
* Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353
* [release/9.0] Fix preserving messages for stateful reconnect with
backplane by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61374
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483
* [Identity] Fix Identity UI asset definitions by @​javiercn in
https://github.com/dotnet/aspnetcore/pull/59100


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5

## 9.0.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.4)

## What's Changed
* Update branding to 9.0.4 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60785
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445
* [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60678
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356
* Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/60673
* Fix self-referential schema handling in collection schemas by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/60410
* [release/9.0] [Blazor] Fix custom elements JS assets not being
included in build output by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/60858
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60880


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4

## 9.0.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.3)

## What's Changed
* Update branding to 9.0.3 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60198
* [release/9.0] Fix branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60029
* [release/9.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60238
* [release/9.0] Revert "Revert "Use the latest available jdk"" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60229
* [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow
the `MetadataUpdateHandlerAttribute` contract by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59908
* [release/9.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60242
* [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60151
* [release/9.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60202
* [release/9.0] Redis distributed cache: add HybridCache usage signal by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59886
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951
* [release/9.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60263
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291
* [release/9.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60298
* Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60323
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60317


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3

## 9.0.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.2)

## What's Changed
* Update branding to 9.0.2 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59757
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266
* [release/9.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59743
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728
* [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59679
* [release/9.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59578
* [release/9.0] Fix loading dotnet user-jwts config by @​github-actions
in https://github.com/dotnet/aspnetcore/pull/59473
* [release/9.0] Fix MultipartReaderStream synchronous read when using
buffer offset by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59422
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/59419
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611
* [release/9.0] Fix Kestrel host header mismatch handling when port in
Url by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59362
* Migrate off of Fedora 38 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59613
* [release/9.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/59348
* [release/9.0] Update to Fedora 41 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59816
* [release/9.0] Don't throw exception for parameters with custom binding
source by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59533
* [release/9.0] Apply schema transformer to AdditionalProperties by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59730
* [release/9.0] Harden schema reference transformer for relative
references by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/59779
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848
* [release/9.0] Return 206 Partial Content on Valid Range for Static
Assets by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59325
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59871


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2

## 9.0.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.1)

## What's Changed
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/58900
* [release/9.0] Prevent unnecessary debugger stops for user-unhandled
exceptions in Blazor apps with Just My Code enabled by @​halter73 in
https://github.com/dotnet/aspnetcore/pull/58573
* Hot Reload agent improvements by @​tmat in
https://github.com/dotnet/aspnetcore/pull/58333
* [release/9.0] Update dependencies from roslyn by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59183
* [release/9.0] Add direct reference to System.Drawing.Common in tools
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189
* [release/9.0] Harden parsing of [Range] attribute values by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59077
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024
* [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to
`d144031` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59032
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58589
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675
* [release/9.0] Fix SignalR Java POM to include description by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58896
* [release/9.0] Fix IIS outofprocess to remove WebSocket compression
handshake by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58931


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1

## 9.0.0

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0)

## What's Changed
* Update branding to rtm by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57907
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954
* [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57999
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048
* [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57975
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052
* Fix up OpenAPI schema handling and support concurrent requests by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/58024
* [release/9.0] Mark API from 9 as shipped by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58060
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117
* [release/9.0] Enable TSA/Policheck by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58123
* [release/9.0] Add explicit conversion for value-type returning
handlers with filters by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57967
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58116
* [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from
`ecc4e18` to `9511905` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58183
* [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to
`6dae7eb` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58184
* [release/9.0] Change usage of "Country" to "CountryRegion" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58280
* Merge RC2 changes into 9.0 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58296
* [release/9.0] Remove ProviderKey from Hosting Bundle by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58293
* [release/9.0] [Blazor] Fix template nav menu styling by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58277
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58366
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344
* [release/9.0] Fix handling for inert route parameters in MVC endpoints
for OpenAPI by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58311
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414
* [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer
by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/58372
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421
* [release/9.0] Stabilize branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58444
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449
* [release/9.0] [Infrastructure] Updated npm packages by @​MackinnonBuck
in https://github.com/dotnet/aspnetcore/pull/58469
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462
* [release/9.0] bumping ws dependency to fix component vulnerability by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58458
* [release/9.0] Improve dev-certs export error message by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58471
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475
 ... (truncated)

## 9.0.0-rc.2.24474.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2)

## What's Changed
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57420
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366
* [release/9.0] Add references to new 9.0 branches in .yml files by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446
* [release/9.0] Quarantine two CircuitTests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57606
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57659
* [release/9.0] Fix duplicate error.type on kestrel.connection.duration
by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57581
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/57691
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697
* [release/9.0] [Blazor] Invoke inbound activity handlers on circuit
initialization by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57678
* Disable launching browser on Web API template by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57682
* [release/9.0] [Static Assets] Improve development experience by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57764
* Include Readme.md in packages by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57809
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708
* HybridCache: relocate to dotnet/extensions by @​mgravell in
https://github.com/dotnet/aspnetcore/pull/57670
* [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to
`0953a17` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/57643
* Http.Sys: Clean up Request parsing errors by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/57531
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835
* [release/9.0] [Identity][Templates] Ensure placeholders don't overlap
with text by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57789
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858
* Fix mapping for nested schemas and [Produces] attributes in OpenAPI
implementation by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57852
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866
* [release/9.0] [Templates] Updates libraries dependencies content by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57864
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896
* [release/9.0-rc2] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931
* Add registry search for upgrade policy keys by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57952
* Check for sentinel value when setting HTTP/3 error code by @​amcasey
in https://github.com/dotnet/aspnetcore/pull/57976
* [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the
`Blazor-Environment` header by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57974
* Fix IAsyncEnumerable controller methods to allow setting headers by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3

## 9.0.0-rc.1.24452.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1)

## 9.0.0-preview.7.24406.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7)

## 9.0.0-preview.6.24328.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6)

## 9.0.0-preview.5.24306.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5)

## 9.0.0-preview.4.24267.6

[Release](https://github.com/dotnet/core/releases)

## 9.0.0-preview.3.24172.13

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3)

## 9.0.0-preview.2.24128.4

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

## 9.0.0-preview.1.24081.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1)

## 8.0.23

[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)

## What's Changed


https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

## 8.0.22

[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)

## What's Changed
* Update branding to 8.0.22 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63949
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664
* [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63903
* [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63893
* [release/8.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62080
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63665
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63957
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64035
* Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in
https://github.com/dotnet/aspnetcore/pull/64067
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64090


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22

## 8.0.21

[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)

## What's Changed
* Update branding to 8.0.21 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63509
* [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63500
* [release/8.0] Make duplicate deb/rpm packages so we can sign them with
the new PMC key by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63250
* [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63466
* [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63534
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63261
* [release/8.0] Use wait assert in flaky tests by @​ilonatommy in
https://github.com/dotnet/aspnetcore/pull/63565
* [release/8.0] Update Microsoft.Build versions by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/62507
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63603
* backport(8.0): Fix runtime architecture detection logic in ANCM by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63106
* [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63038
* [release/8.0] Dispose the certificate chain elements with the chain by
@​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994
* [release/8.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63117
* [release/8.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62784
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63152
* [release/8.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20

## 8.0.18

[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)

## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62241
* [release/8.0] Update Alpine helix references by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62243
* [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62201
* [8.0] Delete src/arcade directory by @​akoeplinger in
https://github.com/dotnet/aspnetcore/pull/61994
* [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/62006
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944
* [release/8.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62247
* [release/8.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62284
* backport(net8.0): http.sys on-demand TLS client hello retrieval by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62302


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18

## 8.0.17

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61623](https://github.com/dotnet/aspnetcore/pull/61623))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence the forwarded headers, preventing
potential spoofing or misrouting of requests.

## Dependency Updates

- **Update dependencies from dotnet/arcade**
([#​61832](https://github.com/dotnet/aspnetcore/pull/61832))
This update brings in the latest changes from the dotnet/arcade
repository, ensuring that ASP.NET Core benefits from recent
improvements, bug fixes, and security patches in the shared build
infrastructure.

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61761](https://github.com/dotnet/aspnetcore/pull/61761))
The GoogleTest submodule has been updated to a newer commit, providing
the latest testing features, bug fixes, and performance improvements for
the project's C++ test components.

## Miscellaneous

- **Update branding to 8.0.17**
([#​61830](https://github.com/dotnet/aspnetcore/pull/61830))
The project version branding has been updated to reflect the new 8.0.17
release, ensuring consistency across build outputs and documentation.

- **Merging internal commits for release/8.0**
([#​61924](https://github.com/dotnet/aspnetcore/pull/61924))
This change merges various internal commits into the release/8.0 branch,
incorporating minor fixes, documentation updates, and other
non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61283
* [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61260
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281
* [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/61216
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/60926
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61398
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411
* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352
* [release/8.0] Fix preserving messages for stateful reconnect with
backplane by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61375
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/61442
* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61494


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16

## 8.0.15

[Release](https://github.com/dotnet/core/releases/tag/v8.0.15)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355
* Update branding to 8.0.15 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60784
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728
* [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60677
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60879


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15

## 8.0.14

[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)

## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60197
* [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60150
* [release/8.0] Fix java discovery in IdentityModel pipeline by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59922
* [release/8.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60203
* [release/8.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60239
* [release/8.0] Use the latest available JDK by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60233
* [release/8.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60243
* [release/8.0] Update list of helix queues to skip by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60231
* [release/8.0] [Blazor] Allow cascading value subscribers to get added
and removed during change notification by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57288
* [release/8.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60264
* [release/8.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60299
* Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60324
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60316


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14

## 8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13)

## What's Changed
* [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in
https://github.com/dotnet/aspnetcore/pull/59575
* Update branding to 8.0.13 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59756
* [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295
* [release/8.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59742
* [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59678
* [release/8.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59579
* [release/8.0] Fix Kestrel host header mismatch handling when port in
Url by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59403
* Migrate off of Debian 11 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59584
* [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59777
* [release/8.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59349
* Update to Fedora 41 by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59817
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59825
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864
* [release/8.0] Fix/update docker tags by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59867
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59872


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13

Commits viewable in [compare
view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
intellitect-bot pushed a commit to IntelliTect/EssentialCSharp.Web that referenced this pull request Feb 10, 2026
Updated
[Microsoft.AspNetCore.Identity.UI](https://github.com/dotnet/aspnetcore)
from 8.0.12 to 9.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Identity.UI's
releases](https://github.com/dotnet/aspnetcore/releases)._

## 9.0.12

[Release](https://github.com/dotnet/core/releases/tag/v9.0.12)

## What's Changed
* Update branding to 9.0.12 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64248
* Update `Microsoft.Build` versions to 17.8.43 by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/64277
* [release/9.0] (deps): Bump src/submodules/googletest from `9706f75` to
`6ec14df` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64230
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64111
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64065
* [release/9.0] Upgrade to MacOS 15 for CI by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/64310
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64312
* [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/64351
* [release/9.0] AppContext for HttpSys CBT hardening by @​BrennanConroy
in https://github.com/dotnet/aspnetcore/pull/64297
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64350
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64388
* [release/9.0] Delete signalr-daily-tests.yml by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/64589
* [release/9.0] (deps): Bump src/submodules/googletest from `6ec14df` to
`1b96fa1` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/64580
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/64503


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.11...v9.0.12

## 9.0.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.11)

## What's Changed
* Update branding to 9.0.11 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63950
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63677
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63678
* [release/9.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63894
* [release/9.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/61948
* [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63934
* [release/9.0] Re-quarantine
ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63956
* [release/9.0] Fix nginx install on mac, linux by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/63966
* [Hot Reload] Do not attempt to apply empty deltas. by @​tmat in
https://github.com/dotnet/aspnetcore/pull/63979
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64036
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64091
* Set timeoutInMinutes to 0 for Windows build job by @​vseanreesermsft
in https://github.com/dotnet/aspnetcore/pull/64126


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.10...v9.0.11

## 9.0.10

[Release](https://github.com/dotnet/core/releases/tag/v9.0.10)

## What's Changed
* Update branding to 9.0.10 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63510
* [9.0] Make duplicate deb/rpm packages so we can sign them with the new
PMC key by @​jkoritzinsky in
https://github.com/dotnet/aspnetcore/pull/63249
* [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63465
* [release/9.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63501
* [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/63533
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63304
* [release/9.0] [OpenAPI] Use invariant culture for TextWriter by
@​martincostello in https://github.com/dotnet/aspnetcore/pull/62239
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63303
* Unquarantine `RadioButtonGetsResetAfterSubmittingEnhancedForm` by
@​ilonatommy in https://github.com/dotnet/aspnetcore/pull/63556
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63577
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63604
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63648
* backport(9.0): Fix runtime architecture detection logic in ANCM. by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63707


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.9...v9.0.10

## 9.0.9

[Release](https://github.com/dotnet/core/releases/tag/v9.0.9)

## What's Changed
* Update branding to 9.0.9 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63107
* [release/9.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63035
* [release/9.0] Dispose the certificate chain elements with the chain by
@​github-actions[bot] in https://github.com/dotnet/aspnetcore/pull/62992
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62702
* [release/9.0] Update Microsoft.Build versions by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62505
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/62832
* [release/9.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63116
* [release/9.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62783
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63151
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63190
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63214


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.8...v9.0.9

## 9.0.7

[Release](https://github.com/dotnet/core/releases/tag/v9.0.7)

## What's Changed
* Update branding to 9.0.7 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62242
* [release/9.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62199
* Fix OpenApiJsonSchema array parsing (#​62051) by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/62118
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61986
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61945
* [release/9.0] Update Alpine helix references by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/62240
* [Backport 9.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62038
* [release/9.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62248
* [release/9.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62283
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62281
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/62282
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62303


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.6...v9.0.7

## 9.0.6

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61622](https://github.com/dotnet/aspnetcore/pull/61622))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence forwarded header values, preventing
potential spoofing or misrouting issues.

## Dependency Updates

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61762](https://github.com/dotnet/aspnetcore/pull/61762))
Updates the GoogleTest submodule to a newer commit, bringing in the
latest improvements and bug fixes from the upstream project.
- **Update dependencies from dotnet/arcade**
([#​61714](https://github.com/dotnet/aspnetcore/pull/61714))
Updates internal build and infrastructure dependencies from the
dotnet/arcade repository, ensuring compatibility and access to the
latest build tools.
- **Update dependencies from dotnet/extensions**
([#​61571](https://github.com/dotnet/aspnetcore/pull/61571))
Refreshes dependencies from the dotnet/extensions repository,
incorporating the latest features and fixes from the extensions
libraries.
- **Update dependencies from dotnet/extensions**
([#​61877](https://github.com/dotnet/aspnetcore/pull/61877))
Further updates dependencies from dotnet/extensions, ensuring the
project benefits from recent improvements and bug fixes.
- **Update dependencies from dotnet/arcade**
([#​61892](https://github.com/dotnet/aspnetcore/pull/61892))
Additional updates to build and infrastructure dependencies from
dotnet/arcade, maintaining up-to-date tooling and build processes.

## Miscellaneous

- **Update branding to 9.0.6**
([#​61831](https://github.com/dotnet/aspnetcore/pull/61831))
Updates the project version and branding to 9.0.6, reflecting the new
release and ensuring version consistency across the codebase.
- **Merging internal commits for release/9.0**
([#​61925](https://github.com/dotnet/aspnetcore/pull/61925))
Incorporates various internal commits into the release/9.0 branch,
ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

Full Changelog:
[v9.0.5...v9.0.6](https://github.com/dotnet/aspnetcore/compare/v9.0.5...v9.0.6)

## 9.0.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.5)

## What's Changed
* Update branding to 9.0.5 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61284
* [release/9.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61261
* [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61215
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355
* [release/9.0] Caching SERedis critical bugfix; defer HC metadata
detection because of DI cycle by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60916
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61393
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412
* Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353
* [release/9.0] Fix preserving messages for stateful reconnect with
backplane by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/61374
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483
* [Identity] Fix Identity UI asset definitions by @​javiercn in
https://github.com/dotnet/aspnetcore/pull/59100


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.4...v9.0.5

## 9.0.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.4)

## What's Changed
* Update branding to 9.0.4 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60785
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445
* [release/9.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60678
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356
* Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/60673
* Fix self-referential schema handling in collection schemas by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/60410
* [release/9.0] [Blazor] Fix custom elements JS assets not being
included in build output by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/60858
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60880


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.3...v9.0.4

## 9.0.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.3)

## What's Changed
* Update branding to 9.0.3 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60198
* [release/9.0] Fix branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60029
* [release/9.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60238
* [release/9.0] Revert "Revert "Use the latest available jdk"" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60229
* [release/9.0] Update `HtmlAttributePropertyHelper` to correctly follow
the `MetadataUpdateHandlerAttribute` contract by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59908
* [release/9.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60242
* [release/9.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60151
* [release/9.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60202
* [release/9.0] Redis distributed cache: add HybridCache usage signal by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59886
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59952
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59951
* [release/9.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60263
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60291
* [release/9.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60298
* Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60323
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60317


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.2...v9.0.3

## 9.0.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.2)

## What's Changed
* Update branding to 9.0.2 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59757
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59267
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59266
* [release/9.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59743
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59728
* [release/9.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59679
* [release/9.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59578
* [release/9.0] Fix loading dotnet user-jwts config by @​github-actions
in https://github.com/dotnet/aspnetcore/pull/59473
* [release/9.0] Fix MultipartReaderStream synchronous read when using
buffer offset by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59422
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/59419
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59611
* [release/9.0] Fix Kestrel host header mismatch handling when port in
Url by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59362
* Migrate off of Fedora 38 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59613
* [release/9.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​MackinnonBuck in
https://github.com/dotnet/aspnetcore/pull/59348
* [release/9.0] Update to Fedora 41 by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59816
* [release/9.0] Don't throw exception for parameters with custom binding
source by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59533
* [release/9.0] Apply schema transformer to AdditionalProperties by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59730
* [release/9.0] Harden schema reference transformer for relative
references by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/59779
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59847
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59848
* [release/9.0] Return 206 Partial Content on Valid Range for Static
Assets by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59325
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59871


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.1...v9.0.2

## 9.0.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.1)

## What's Changed
* Merging internal commits for release/9.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/58900
* [release/9.0] Prevent unnecessary debugger stops for user-unhandled
exceptions in Blazor apps with Just My Code enabled by @​halter73 in
https://github.com/dotnet/aspnetcore/pull/58573
* Hot Reload agent improvements by @​tmat in
https://github.com/dotnet/aspnetcore/pull/58333
* [release/9.0] Update dependencies from roslyn by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59183
* [release/9.0] Add direct reference to System.Drawing.Common in tools
by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59189
* [release/9.0] Harden parsing of [Range] attribute values by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/59077
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59143
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59024
* [release/9.0] (deps): Bump src/submodules/googletest from `6dae7eb` to
`d144031` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59032
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58589
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58675
* [release/9.0] Fix SignalR Java POM to include description by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58896
* [release/9.0] Fix IIS outofprocess to remove WebSocket compression
handshake by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58931


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0...v9.0.1

## 9.0.0

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0)

## What's Changed
* Update branding to rtm by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57907
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57910
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57922
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57954
* [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57999
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58032
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58015
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58033
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58048
* [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57975
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58052
* Fix up OpenAPI schema handling and support concurrent requests by
@​captainsafia in https://github.com/dotnet/aspnetcore/pull/58024
* [release/9.0] Mark API from 9 as shipped by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58060
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58034
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58117
* [release/9.0] Enable TSA/Policheck by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58123
* [release/9.0] Add explicit conversion for value-type returning
handlers with filters by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57967
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58116
* [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from
`ecc4e18` to `9511905` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58183
* [release/9.0] (deps): Bump src/submodules/googletest from `0953a17` to
`6dae7eb` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/58184
* [release/9.0] Change usage of "Country" to "CountryRegion" by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58280
* Merge RC2 changes into 9.0 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58296
* [release/9.0] Remove ProviderKey from Hosting Bundle by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58293
* [release/9.0] [Blazor] Fix template nav menu styling by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58277
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58268
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58159
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58158
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58157
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58182
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58306
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58315
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58355
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/58366
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58344
* [release/9.0] Fix handling for inert route parameters in MVC endpoints
for OpenAPI by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/58311
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58413
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58374
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58414
* [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer
by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/58372
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58421
* [release/9.0] Stabilize branding by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/58444
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58449
* [release/9.0] [Infrastructure] Updated npm packages by @​MackinnonBuck
in https://github.com/dotnet/aspnetcore/pull/58469
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58462
* [release/9.0] bumping ws dependency to fix component vulnerability by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58458
* [release/9.0] Improve dev-certs export error message by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/58471
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/58475
 ... (truncated)

## 9.0.0-rc.2.24474.3

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.2)

## What's Changed
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57420
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57366
* [release/9.0] Add references to new 9.0 branches in .yml files by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/57463
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57526
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57446
* [release/9.0] Quarantine two CircuitTests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57606
* [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57659
* [release/9.0] Fix duplicate error.type on kestrel.connection.duration
by @​github-actions in https://github.com/dotnet/aspnetcore/pull/57581
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57668
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57436
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57527
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57686
* [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro
in https://github.com/dotnet/aspnetcore/pull/57691
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57667
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57528
* [release/9.0] Update dependencies from dotnet/efcore by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57697
* [release/9.0] [Blazor] Invoke inbound activity handlers on circuit
initialization by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57678
* Disable launching browser on Web API template by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57682
* [release/9.0] [Static Assets] Improve development experience by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57764
* Include Readme.md in packages by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57809
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57759
* [release/9.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57760
* [release/9.0] Update dependencies from dotnet/winforms by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57761
* [release/9.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57762
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57708
* HybridCache: relocate to dotnet/extensions by @​mgravell in
https://github.com/dotnet/aspnetcore/pull/57670
* [release/9.0] (deps): Bump src/submodules/googletest from `ff233bd` to
`0953a17` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/57643
* Http.Sys: Clean up Request parsing errors by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/57531
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57835
* [release/9.0] [Identity][Templates] Ensure placeholders don't overlap
with text by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57789
* [release/9.0] Update dependencies from dotnet/runtime by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57858
* Fix mapping for nested schemas and [Produces] attributes in OpenAPI
implementation by @​captainsafia in
https://github.com/dotnet/aspnetcore/pull/57852
* [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57866
* [release/9.0] [Templates] Updates libraries dependencies content by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/57864
* [release/9.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57896
* [release/9.0-rc2] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/57931
* Add registry search for upgrade policy keys by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/57952
* Check for sentinel value when setting HTTP/3 error code by @​amcasey
in https://github.com/dotnet/aspnetcore/pull/57976
* [release/9.0-rc2] [Blazor] Update `WebAssembly.DevServer` to serve the
`Blazor-Environment` header by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57974
* Fix IAsyncEnumerable controller methods to allow setting headers by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57924
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/57997


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v9.0.0-rc.1.24452.1...v9.0.0-rc.2.24474.3

## 9.0.0-rc.1.24452.1

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-rc.1)

## 9.0.0-preview.7.24406.2

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.7)

## 9.0.0-preview.6.24328.4

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.6)

## 9.0.0-preview.5.24306.11

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.5)

## 9.0.0-preview.4.24267.6

[Release](https://github.com/dotnet/core/releases)

## 9.0.0-preview.3.24172.13

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.3)

## 9.0.0-preview.2.24128.4

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

## 9.0.0-preview.1.24081.5

[Release](https://github.com/dotnet/core/releases/tag/v9.0.0-preview.1)

## 8.0.23

[Release](https://github.com/dotnet/core/releases/tag/v8.0.23)

## What's Changed


https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

## 8.0.22

[Release](https://github.com/dotnet/core/releases/tag/v8.0.22)

## What's Changed
* Update branding to 8.0.22 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63949
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63664
* [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed
stream to stream abortion by @​DeagleGross in
https://github.com/dotnet/aspnetcore/pull/63903
* [release/8.0] (deps): Bump src/submodules/googletest from `eb2d85e` to
`9706f75` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63893
* [release/8.0] Fixed devtools url used for debug with chrome and edge
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62080
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63665
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63957
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/64035
* Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in
https://github.com/dotnet/aspnetcore/pull/64067
* Revert log level severity for unknown proxy in
ForwardedHeadersMiddleware by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/64090


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.21...v8.0.22

## 8.0.21

[Release](https://github.com/dotnet/core/releases/tag/v8.0.21)

## What's Changed
* Update branding to 8.0.21 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63509
* [release/8.0] (deps): Bump src/submodules/googletest from `373af2e` to
`eb2d85e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63500
* [release/8.0] Make duplicate deb/rpm packages so we can sign them with
the new PMC key by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63250
* [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly
tests job by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63466
* [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63534
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in
https://github.com/dotnet/aspnetcore/pull/63261
* [release/8.0] Use wait assert in flaky tests by @​ilonatommy in
https://github.com/dotnet/aspnetcore/pull/63565
* [release/8.0] Update Microsoft.Build versions by @​github-actions[bot]
in https://github.com/dotnet/aspnetcore/pull/62507
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63603
* backport(8.0): Fix runtime architecture detection logic in ANCM by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/63706


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.20...v8.0.21

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63106
* [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
https://github.com/dotnet/aspnetcore/pull/63038
* [release/8.0] Dispose the certificate chain elements with the chain by
@​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/62994
* [release/8.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/63117
* [release/8.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
https://github.com/dotnet/aspnetcore/pull/62784
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/63152
* [release/8.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63188
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/aspnetcore/pull/63189


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.19...v8.0.20

## 8.0.18

[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)

## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62241
* [release/8.0] Update Alpine helix references by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62243
* [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/62201
* [8.0] Delete src/arcade directory by @​akoeplinger in
https://github.com/dotnet/aspnetcore/pull/61994
* [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/62037
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/62006
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61944
* [release/8.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62247
* [release/8.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/62284
* backport(net8.0): http.sys on-demand TLS client hello retrieval by
@​DeagleGross in https://github.com/dotnet/aspnetcore/pull/62290
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/62302


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.17...v8.0.18

## 8.0.17

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61623](https://github.com/dotnet/aspnetcore/pull/61623))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence the forwarded headers, preventing
potential spoofing or misrouting of requests.

## Dependency Updates

- **Update dependencies from dotnet/arcade**
([#​61832](https://github.com/dotnet/aspnetcore/pull/61832))
This update brings in the latest changes from the dotnet/arcade
repository, ensuring that ASP.NET Core benefits from recent
improvements, bug fixes, and security patches in the shared build
infrastructure.

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61761](https://github.com/dotnet/aspnetcore/pull/61761))
The GoogleTest submodule has been updated to a newer commit, providing
the latest testing features, bug fixes, and performance improvements for
the project's C++ test components.

## Miscellaneous

- **Update branding to 8.0.17**
([#​61830](https://github.com/dotnet/aspnetcore/pull/61830))
The project version branding has been updated to reflect the new 8.0.17
release, ensuring consistency across build outputs and documentation.

- **Merging internal commits for release/8.0**
([#​61924](https://github.com/dotnet/aspnetcore/pull/61924))
This change merges various internal commits into the release/8.0 branch,
incorporating minor fixes, documentation updates, and other
non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.16...v8.0.17

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61283
* [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/61260
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61281
* [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/61216
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60901
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/60926
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61404
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/61398
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61411
* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60352
* [release/8.0] Fix preserving messages for stateful reconnect with
backplane by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61375
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/61442
* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/61494


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.15...v8.0.16

## 8.0.15

[Release](https://github.com/dotnet/core/releases/tag/v8.0.15)

## What's Changed
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60355
* Update branding to 8.0.15 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60784
* Add partitioned to cookie for SignalR browser testing by
@​BrennanConroy in https://github.com/dotnet/aspnetcore/pull/60728
* [release/8.0] (deps): Bump src/submodules/googletest from `e235eb3` to
`24a9e94` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60677
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60879


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.14...v8.0.15

## 8.0.14

[Release](https://github.com/dotnet/core/releases/tag/v8.0.14)

## What's Changed
* Update branding to 8.0.14 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60197
* [release/8.0] (deps): Bump src/submodules/googletest from `7d76a23` to
`e235eb3` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/60150
* [release/8.0] Fix java discovery in IdentityModel pipeline by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60075
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60199
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59922
* [release/8.0] Readd DiagnosticSource to KestrelServerImpl by
@​github-actions in https://github.com/dotnet/aspnetcore/pull/60203
* [release/8.0] Update to MacOS 15 in Helix by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60239
* [release/8.0] Use the latest available JDK by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60233
* [release/8.0] Fix skip condition for java tests by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/60243
* [release/8.0] Update list of helix queues to skip by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60231
* [release/8.0] [Blazor] Allow cascading value subscribers to get added
and removed during change notification by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/57288
* [release/8.0] Update remnants of azureedge.net by @​sebastienros in
https://github.com/dotnet/aspnetcore/pull/60264
* [release/8.0] Centralize on one docker container by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/60299
* Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe
in https://github.com/dotnet/aspnetcore/pull/60324
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/60316


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.13...v8.0.14

## 8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13)

## What's Changed
* [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in
https://github.com/dotnet/aspnetcore/pull/59575
* Update branding to 8.0.13 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59756
* [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by
@​wtgodbe in https://github.com/dotnet/aspnetcore/pull/59295
* [release/8.0] Update OSX helix queue by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59742
* [release/8.0] (deps): Bump src/submodules/googletest from `d144031` to
`7d76a23` by @​dependabot in
https://github.com/dotnet/aspnetcore/pull/59678
* [release/8.0] Skip tests on internal queues too by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59579
* [release/8.0] Fix Kestrel host header mismatch handling when port in
Url by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59403
* Migrate off of Debian 11 by @​v-firzha in
https://github.com/dotnet/aspnetcore/pull/59584
* [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59777
* [release/8.0] [Blazor WASM standalone] Avoid caching `index.html`
during development by @​github-actions in
https://github.com/dotnet/aspnetcore/pull/59349
* Update to Fedora 41 by @​BrennanConroy in
https://github.com/dotnet/aspnetcore/pull/59817
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59811
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
https://github.com/dotnet/aspnetcore/pull/59825
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/59864
* [release/8.0] Fix/update docker tags by @​wtgodbe in
https://github.com/dotnet/aspnetcore/pull/59867
* Merging internal commits for release/8.0 by @​vseanreesermsft in
https://github.com/dotnet/aspnetcore/pull/59872


**Full Changelog**:
https://github.com/dotnet/aspnetcore/compare/v8.0.12...v8.0.13

Commits viewable in [compare
view](https://github.com/dotnet/aspnetcore/compare/v8.0.12...v9.0.12).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Identity.UI&package-manager=nuget&previous-version=8.0.12&new-version=9.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-minimal Includes minimal APIs, endpoint filters, parameter binding, request delegate generator etc area-mvc Includes: MVC, Actions and Controllers, Localization, CORS, most templates feature-openapi Servicing-approved Shiproom has approved the issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants