Release dates/notes are inconsistent

[cremor]

URL(s)

https://dotnet.microsoft.com/en-us/download/dotnet/8.0
https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.6/8.0.6.md
https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.6/8.0.302.md
https://github.com/dotnet/core/blob/main/release-notes/8.0/README.md

Description

The download page currently shows:

8.0.6 Security patch
Release notes
Latest release date June 11, 2024

Problems I found:

• The linked release notes say ".NET 8.0.6 - May 28, 2024". This doesn't match the "June 11, 2024" from the downloads page.
• The version actually released on "June 11, 2024" was .NET 8.0.302 -June 11, 2024, but it looks like this is not linked from the download page (which makes sense, because it look like it doesn't actually contain any information on what changed in that version).
• Both release notes files say "The latest 8.0 release is always listed at .NET 8.0 Releases." But the linked page doesn't contain version 8.0.6.
• The downloads page doesn't explain what the difference between SDK 8.0.3xx, SDK 8.0.2xx and SDK 8.0.1xx is. The release notes files do explain it (if you can spot the minor difference), but as noted above they are not linked on the downloads page.

[Falco20019]

I assume this is related to the out-of-order May (5D) release from May 28, 2024 that happend for .NET 6, 7 and 8.

https://dotnet.microsoft.com/en-us/download/dotnet/6.0 also states that it was released on May 28, 2024 and not June 11, 2024. https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.6/8.0.6.md seems to be related to 8.0.302 which seem to be the only part of 8.0.6 that released in June. All other parts (8.0.106, 8.0.206 and 8.0.301) also state a release on May 28, 2024. From the notes I assume this out-of-order update was necessary to fix CVE-2024-20672 according to the release notes.

Sadly the CVE pages (6.0, 7.0 and 8.0) had not been updated yet as well.

The 8.0.6 tag on this repo also seem to have been created end of May and was not updated yesterday as it's also missing the 8.0.302: https://github.com/dotnet/core/tree/v8.0.6/release-notes/8.0/8.0.6

So I assume that just nothing needed to be changed since May 28th and therefore the last update dates for .NET 6 and .NET 7 (which got the update although EoL) are correct and that mostly the 8.0.302 part is missing in the README together with the CVEs. I was also wondering that there is no issue like #9309 nor a blog post like https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-may-2024-servicing-updates/ (which strangely did not appear on https://devblogs.microsoft.com/dotnet/ but only on https://devblogs.microsoft.com/dotnet/category/dotnet/) yet. They will most probably come today then?

/CC @rbhanda @leecow

[rbhanda]

#9356 to fix the dates in readme files and adding cve informaiton

[reduckted]

There was also no "monthly update" post for June over in the announcements repository. Should there have been one?

[Falco20019]

Yep, neither here nor the blog post on https://devblogs.microsoft.com/dotnet/

[leecow]

@reduckted and @Falco20019 - There was no June monthly update release so nothing to report.

[reduckted]

@reduckted and @Falco20019 - There was no June monthly update release so nothing to report.

😕 But 8.0.302 SDK was released in June.

[Falco20019]

Yes, 8.0.302 was the only June update but also dotnet/announcements#306 is not linking the versions of #9362 although mentioning that it should if there are more updates the month. The link to the blog post is broken there as well. And the line above the links is still mentioning the April versions while the links mention the May versions correctly.

[cremor]

The downloads page doesn't explain what the difference between SDK 8.0.3xx, SDK 8.0.2xx and SDK 8.0.1xx is. The release notes files do explain it (if you can spot the minor difference), but as noted above they are not linked on the downloads page.

I just found https://learn.microsoft.com/en-us/dotnet/core/versions/#versioning-details which explains this. That should be linked on the downloads page!

[mairaw]

@Falco20019 @cremor what would you like to see on the downloads page to help with that? A link to versioning details somewhere inside the table for each version?

[cremor]

I'd like to see a note that says something like the following:

"See the versioning documentation to understand the different SDK versions. See [the release notes] for the feature differences."

"[the release notes]" should then link to a page that provides a nice overview of the feature changes between SDK 8.0.3xx, SDK 8.0.2xx and SDK 8.0.1xx.

[Falco20019]

I meant those mismatches on dotnet/announcements#306:

#9362

So the first is mentioning 8.0.4 and 8.0.5 while it should mention (and link) 8.0.6 instead.

[mairaw]

I meant those mismatches on dotnet/announcements#306:...

Tagging @rbhanda for the announcements descriptions that are incorrect.