Release

What's Changed

• [release/9.0] Update branding to 9.0.21 by @vseanreesermsft in #68962
• [release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #68967
• [release/9.0] (deps): Bump src/submodules/googletest from 3940de9 to 36ba75f by @dependabot[bot] in #68919
• [release/9.0] Update OpenApi to 1.6.31 by @Youssef1313 in #68837
• [release/9.0] Extract IsAuthenticated helper method by @Youssef1313 with @Copilot in #68659
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #68570
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #69085
• [release/9.0] Fix h3 connection-level and stream-level abort locking by @BrennanConroy in #69151
• Merging internal commits for release/9.0 by @dotnet-bot in #69179
• [release/9.0] [SignalR] [Java] Fix hang when reading an HTTP response body fails by @github-actions[bot] in #69208
• [release/9.0] Fix: hardening http2 to refuse newline chars on trailers and dynamic HPACK table by @BrennanConroy in #69249
• [release/9.0] Scope sections E2E assertions to mounted app by @wtgodbe in #69252
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #69268
• Update MessagePack to 2.5.303 by @BrennanConroy in #69369

Full Changelog: v9.0.20...v9.0.21

Release

What's Changed

• [release/8.0] Update branding to 8.0.32 by @vseanreesermsft in #68963
• [release/8.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #68968
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro[bot] in #68958
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #68940
• [release/8.0] Update OpenApi to 1.6.31 by @Youssef1313 in #68838
• [release/8.0] Extract IsAuthenticated helper method by @Youssef1313 with @Copilot in #68657
• [release/8.0] (deps): Bump src/submodules/googletest from 3940de9 to 36ba75f by @dependabot[bot] in #68922
• [release/8.0] Fix ResponseCompressionMiddleware tests by @wtgodbe in #60884
• [release/8.0] Fix h3 connection-level and stream-level abort locking by @BrennanConroy in #69152
• Merging internal commits for release/8.0 by @dotnet-bot in #69178
• [release/8.0] [SignalR] [Java] Fix hang when reading an HTTP response body fails by @github-actions[bot] in #69209
• [release/8.0] Fix: hardening http2 to refuse newline chars on trailers and dynamic HPACK table by @BrennanConroy in #69250
• [release/8.0] Scope sections E2E assertions to mounted app by @wtgodbe in #69253
• Update MessagePack to 2.5.303 by @BrennanConroy in #69370

Full Changelog: v8.0.31...v8.0.32

Release

What's Changed

• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68601
• [release/10.0] Enable CFG for ARM64X ANCM forwarders by @github-actions[bot] in #68758
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68767
• [release/10.0] Fix installer background for bundles by @wtgodbe in #68932
• [release/10.0] Extract IsAuthenticated helper method by @Youssef1313 with @Copilot in #68656
• [release/10.0] Update OpenApi to 2.12.2 by @Youssef1313 in #68836
• [release/10.0] (deps): Bump src/submodules/googletest from 49495ea to 36ba75f by @dependabot[bot] in #68918
• [release/10.0] Don't cache truncated/aborted responses in OutputCacheMiddleware by @DeagleGross in #68770
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68966
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69009
• [release/10.0] Fix JsonIgnore validation bypass for write-only conditions by @halter73 in #68762
• Backport UseNode@1 pipeline fix for release/10.0 by @akoeplinger with @Copilot in #69047
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69013
• [release/10.0] Enable Helix Job Monitor by @wtgodbe in #69036
• Fix certificate manager process deadlocks in .NET 10 by @Youssef1313 with @Copilot in #69051
• [release/10.0] Fix h3 connection-level and stream-level abort locking by @BrennanConroy in #69150
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69066
• [release/10.0] [SignalR] [Java] Fix hang when reading an HTTP response body fails by @github-actions[bot] in #69207
• [release/10.0] Fix: hardening http2 to refuse newline chars on trailers and dynamic HPACK table by @BrennanConroy in #69248
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69255
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69301
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69353
• [release/10.0] (deps): Bump src/submodules/googletest from 49495ea to 8eff9e3 by @dependabot[bot] in #69333
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69357
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #69403
• Update MessagePack to 2.5.303 by @BrennanConroy in #69368

Full Changelog: v10.0.12...v10.0.13

Release

What's Changed

• [release/8.0] Update branding to 8.0.31 by @dotnet-bot in #68235
• [release/8.0] Backport FormsInputDateTest fixes by @ilonatommy in #68125
• [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @dependabot[bot] in #68173
• [release/8.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #68189
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro[bot] in #67801
• [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore by @wtgodbe in #68242
• [8.0] Fix Debian package descriptions by @wtgodbe in #68255
• Remove Publish-Build-Assets variable group from release/8.0 by @missymessa in #68265
• [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @Youssef1313 with @Copilot in #67955
• Merging internal commits for release/8.0 by @dotnet-bot in #68361
• [release/8.0] Update OpenAPI to latest by @Youssef1313 in #68491

Full Changelog: v8.0.30...v8.0.31

Release

What's Changed

• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68033
• [release/10.0] [Infrastructure] Updated npm packages 2026-07-29 by @wtgodbe in #68092
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68120
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68186
• [release/10.0] Backport FormsInputDateTest fixes by @ilonatommy in #68124
• [release/10.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @dependabot[bot] in #68175
• [release/10.0] Update vulnerable npm dependencies by @wtgodbe in #68232
• [.NET 10] Update Model Context Protocol to 2.1.0 by @jeffhandley in #68213
• [release/10.0] Fix KeyRingProvider thread pool starvation on forced refresh by @DeagleGross in #68001
• Remove Publish-Build-Assets variable group from release/10.0 by @missymessa in #68261
• [release/10.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @Youssef1313 with @Copilot in #67952
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68368
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #68466
• [release/10.0] Update OpenApi to 2.12 by @Youssef1313 in #68468
• [release/10.0] (deps): Bump src/submodules/googletest from 3940de9 to 49495ea by @dependabot[bot] in #68598

Full Changelog: v10.0.11...v10.0.12

Release

What's Changed

• [release/9.0] Update branding to 9.0.20 by @dotnet-bot in #68236
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #67897
• [release/9.0] Backport FormsInputDateTest fixes by @ilonatommy in #68126
• [release/9.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @dependabot[bot] in #68172
• [release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #68188
• [release/9.0] Quarantine System_UsesProvidedCertificateNotFromStore by @wtgodbe in #68243
• [release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #68245
• [release/9.0] Update RepoTasksSystemSecurityCryptographyXmlVersion to 8.0.4 by @wtgodbe in #68231
• [9.0] Fix Debian package descriptions by @wtgodbe in #68256
• Remove Publish-Build-Assets variable group from release/9.0 by @missymessa in #68266
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #68308
• [release/9.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @Youssef1313 with @Copilot in #67954
• Merging internal commits for release/9.0 by @dotnet-bot in #68362
• [release/9.0] Update OpenAPI to latest by @Youssef1313 in #68492

Full Changelog: v9.0.19...v9.0.20

Release

What's Changed

• [release/8.0] Update branding to 8.0.30 by @dotnet-bot in #67621
• [release/8.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @dependabot[bot] in #67525
• [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @dependabot[bot] in #67524
• Update ws package version to 7.5.11 by @birarroshan in #67408
• [release/8.0] Update CI pipeline to use Windows 2022 image by @github-actions[bot] in #67289
• [release/8.0] Update Selenium and Playwright versions to match main by @wtgodbe in #67273
• [release/8.0] improve CI flakiness by @wtgodbe in #67645
• [release/8.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @dependabot[bot] in #67654
• Merging internal commits for release/8.0 by @dotnet-bot in #67796
• Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @missymessa in #67854
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #67943

New Contributors

• @birarroshan made their first contribution in #67408

Full Changelog: v8.0.29...v8.0.30

Release

What's Changed

• [release/9.0] Update branding to 9.0.19 by @dotnet-bot in #67623
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @dependabot[bot] in #67527
• [release/9.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @dependabot[bot] in #67526
• [release/9.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #67328
• [release/9.0] Update CI pipeline to use Windows 2022 image by @github-actions[bot] in #67287
• [release/9.0] Update npm dependencies by @wtgodbe in #67277
• [release/9.0] Update Selenium and Playwright versions to match main by @wtgodbe in #67274
• [release/9.0] Update Node.js version from 20.x to 24.x by @wtgodbe in #67242
• [release/9.0] improve CI flakiness by @wtgodbe in #67646
• [release/9.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @dependabot[bot] in #67652
• Merging internal commits for release/9.0 by @dotnet-bot in #67795
• Use build identity for internal feeds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/9.0) by @missymessa in #67853
• Use System.AccessToken for internal feed auth on release/9.0 by @missymessa in #67859

Full Changelog: v9.0.18...v9.0.19

Release

What's Changed

• [release/10.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @dependabot[bot] in #67528
• [release/10.0] Update OpenApi to 2.7.5 by @Youssef1313 in #67464
• [release/10.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @dependabot[bot] in #67529
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #67643
• [release/10.0] Backport fix for handling of expired client-persisted circuit state by @oroztocil in #67453
• [release/10.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @dependabot[bot] in #67653
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #67658
• [release/10.0] Fix flaky CanElevateEffectiveMaxItemCount_WhenOverscanExceedsMax by @wtgodbe in #67705
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #67708
• [release/10.0] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in #67728
• [release/10.0] Move Linux CI jobs off Microsoft-hosted pools (backport #64842, #65867) by @mmitche in #67797
• [release/10.0] Update Microsoft.Data.SqlClient reference version to 6.1.1 by @SparshGarg999 in #67811
• [release/10.0] Limit Microsoft.OpenApi to disallow next major by @Youssef1313 in #67772

Full Changelog: v10.0.10...v10.0.11

Release

What's Changed

• Update branding to 8.0.29 by @vseanreesermsft in #66982
• [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @dependabot[bot] in #66973
• [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @wtgodbe in #66766
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro[bot] in #66699
• [release/8.0] Update dependencies from dotnet/source-build-assets by @dotnet-maestro[bot] in #66664
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #66946
• [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @wtgodbe in #66989
• Merging internal commits for release/8.0 by @vseanreesermsft in #67105
• [release/8.0] Update npm dependencies by @wtgodbe in #67144
• [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @wtgodbe in #67164
• [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @dependabot[bot] in #67222
• [release/8.0] Backport docker image fix by @wtgodbe in #67279
• [release/8.0] Reject ASCII control characters in cookie auth return URLs by @github-actions[bot] in #67157

Full Changelog: v8.0.28...v8.0.29