[main] Source code updates from dotnet/dotnet - #67642
Conversation
Updated Dependencies: Microsoft.NET.Runtime.WebAssembly.Sdk, Microsoft.NETCore.BrowserDebugHost.Transport, Microsoft.NET.Runtime.MonoAOTCompiler.Task, dotnet-ef, Microsoft.Bcl.AsyncInterfaces, Microsoft.Bcl.TimeProvider, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.InMemory, Microsoft.EntityFrameworkCore.Relational, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Tools, Microsoft.Extensions.Caching.Abstractions, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.CommandLine, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration.FileExtensions, Microsoft.Extensions.Configuration.Ini, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.Configuration.Xml, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.DependencyModel, Microsoft.Extensions.Diagnostics, Microsoft.Extensions.Diagnostics.Abstractions, Microsoft.Extensions.FileProviders.Abstractions, Microsoft.Extensions.FileProviders.Composite, Microsoft.Extensions.FileProviders.Physical, Microsoft.Extensions.FileSystemGlobbing, Microsoft.Extensions.HostFactoryResolver.Sources, Microsoft.Extensions.Hosting, Microsoft.Extensions.Hosting.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Configuration, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.Logging.Debug, Microsoft.Extensions.Logging.EventLog, Microsoft.Extensions.Logging.EventSource, Microsoft.Extensions.Logging.TraceSource, Microsoft.Extensions.Options, Microsoft.Extensions.Options.ConfigurationExtensions, Microsoft.Extensions.Options.DataAnnotations, Microsoft.Extensions.Primitives, Microsoft.Internal.Runtime.AspNetCore.Transport, Microsoft.NETCore.App.Ref, Microsoft.NETCore.Platforms, System.Collections.Immutable, System.Composition, System.Configuration.ConfigurationManager, System.Diagnostics.DiagnosticSource, System.Diagnostics.EventLog, System.Diagnostics.PerformanceCounter, System.DirectoryServices.Protocols, System.Formats.Asn1, System.Formats.Cbor, System.IO.Hashing, System.IO.Pipelines, System.Memory.Data, System.Net.Http.Json, System.Net.Http.WinHttpHandler, System.Net.ServerSentEvents, System.Numerics.Tensors, System.Reflection.Metadata, System.Resources.Extensions, System.Runtime.Caching, System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml, System.Security.Permissions, System.ServiceProcess.ServiceController, System.Text.Encodings.Web, System.Text.Json, System.Threading.AccessControl, System.Threading.Channels, System.Threading.RateLimiting (Version 11.0.0-preview.6.26322.110 -> 11.0.0-preview.7.26357.101) Microsoft.DotNet.Arcade.Sdk, Microsoft.DotNet.Build.Tasks.Archives, Microsoft.DotNet.Build.Tasks.Installers, Microsoft.DotNet.Build.Tasks.Templating, Microsoft.DotNet.Helix.Sdk, Microsoft.DotNet.RemoteExecutor, Microsoft.DotNet.SharedFramework.Sdk (Version 11.0.0-beta.26322.110 -> 11.0.0-beta.26357.101) Microsoft.Web.Xdt (Version 3.3.0-preview.6.26322.110 -> 3.3.0-preview.7.26357.101) NuGet.Frameworks, NuGet.Packaging, NuGet.Versioning (Version 7.9.0-rc.32310 -> 7.9.0-rc.35801) [[ commit created by automation ]]
Added NoWarn property to suppress NuGet audit warnings.
The backflowed source-build gating change makes dotnet-dev-certs / user-jwts / user-secrets / aspnetcoretools publish NativeAOT in CoreCLR source-only builds, which requires clang. The Managed source-build leg ran in the build-amd64 prereqs image (no clang), failing with "No compatible version of clang was found". Run it in the azurelinux cross-amd64 prereq image (clang + sysroot) and pass ROOTFS_DIR + /p:CrossBuild=true, mirroring the ARM/ARM64/musl AOT legs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
@DeagleGross I think the template failures here are related to #67488 and #67119, PTAL |
|
Important While this PR was open, the source repository has received code changes from this repository (an opposite codeflow merged). You can continue with one of the following options:
💡 You may consult the FAQ for more information or tag @dotnet/prodconsvcs for assistance. |
Should be fixed by #67618. I'll update this branch once fix is merged |
template tests passed. |
Added comment to disable NuGet audit warnings.
|
Components failure unrelated, being fixed by #67680 |
…WebSite Ports #67898 (AngleSharp 0.9.9 -> 1.5.2, fixing GHSA-pgww-w46g-26qg) and the NoWarn NU1903/NU1904 change from #67642 to unblock the NuGet audit failures on this codeflow PR: - NU1902 (AngleSharp 0.9.9) in Mvc.FunctionalTests, Identity.Test, Identity.FunctionalTests, AuthSamples.FunctionalTests - NU1903 (Newtonsoft.Json 11.0.2) and NU1904 (Kestrel.Core 2.2.0) in InProcessNewShimWebSite (a forward-compat test asset intentionally pinned to old package versions) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Ports the remaining piece of #67642: InteropClient.csproj transitively pulls Newtonsoft.Json 12.0.3 via Grpc.Auth, tripping NU1903 (GHSA-5crp-9r3c-p9vr). This is unrelated to the central NewtonsoftJsonVersion (already 13.0.3, above the 13.0.1 patched threshold) bumped on main in #66334; that bump does not touch this transitively-pinned copy. Suppress the same way main did, since this is a test-only project. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Note
This is a codeflow update. It may contain both source code changes from
the VMR
as well as dependency updates. Learn more here.
This pull request brings the following source code changes
From https://github.com/dotnet/dotnet
Updated Dependencies
Associated changes in source repos
Diff the source with this PR branch