Skip to content

Merge main into live - #55358

Merged
gewarren merged 34 commits into
livefrom
main
Aug 13, 2026
Merged

Merge main into live#55358
gewarren merged 34 commits into
livefrom
main

Conversation

@dotnet-policy-service

@dotnet-policy-service dotnet-policy-service Bot commented Aug 11, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Contributor

Please don't squash-merge this PR.

Internal previews

Toggle expand/collapse
File Preview link
docs/architecture/blazor-for-web-forms-developers/app-startup.md Preview published page
docs/architecture/blazor-for-web-forms-developers/config.md Preview published page
docs/architecture/blazor-for-web-forms-developers/data.md Preview published page
docs/architecture/blazor-for-web-forms-developers/state-management.md Preview published page
docs/azure/includes/dotnet-all.md Preview published page
docs/azure/includes/dotnet-new.md Preview published page
docs/core/additional-tools/dotnet-coverage.md Preview published page
docs/core/compatibility/11.md Preview published page
docs/core/compatibility/sdk/11/native-local-container-runtimes.md Preview published page
docs/core/compatibility/toc.yml Preview published page
docs/core/containers/publish-configuration.md Preview published page
docs/core/extensions/create-resource-files.md Preview published page
docs/core/extensions/httpclient-factory.md Preview published page
docs/core/install/upgrade.md Preview published page
docs/core/porting/breaking-changes.md Preview published page
docs/core/porting/porting-approaches.md Preview published page
docs/core/porting/premigration-needed-changes.md Preview published page
docs/core/porting/third-party-deps.md Preview published page
docs/core/whats-new/dotnet-11/libraries.md Preview published page
docs/core/whats-new/dotnet-11/overview.md Preview published page
docs/core/whats-new/dotnet-11/runtime.md Preview published page
docs/core/whats-new/dotnet-11/sdk.md Preview published page
docs/csharp/language-reference/attributes/general.md Preview published page
docs/csharp/language-reference/builtin-types/default-values.md Preview published page
docs/csharp/language-reference/builtin-types/ref-struct.md Preview published page
docs/csharp/language-reference/builtin-types/struct.md Preview published page
docs/csharp/language-reference/builtin-types/union.md Preview published page
docs/csharp/language-reference/compiler-messages/ref-modifiers-errors.md Preview published page
docs/csharp/language-reference/compiler-messages/union-declaration-errors.md Preview published page
docs/csharp/language-reference/keywords/closed.md Preview published page

Note

This table shows the first 30 preview links (sorted alphabetically by file path) found in the OPS build report. For the full list, select OpenPublishing.Build Details within checks.

azure-sdk-automation Bot and others added 3 commits August 10, 2026 10:06
@azure-sdk-automation @azure-sdk
Update package index with latest published versions (#55331)
ce0d256 
Co-authored-by: azure-sdk <azuresdk@microsoft.com>
@gewarren
update to use main branch instead of sha (#55353)
1abf89a
@mangod9 @gewarren
Update TAR guidance for untrusted archives (#54670)
2425fba 
* Add TAR security guidance: link boundary validation, PAX extended attributes

Adds security guidance to the ZIP/TAR best-practices article for handling
untrusted TAR archives:
- A note that destination boundary validation assumes the destination is a
  real directory the app controls; a junction/symlink destination (or parent)
  causes extraction to follow the link, even with TarFile.ExtractToDirectory.
- A new section on PAX extended attributes and link names as untrusted,
  archive-supplied input that can override header fields.
- Updated the untrusted-metadata checklist item to include link names and
  PAX extended attributes.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update docs/standard/io/zip-tar-best-practices.md

Co-authored-by: Genevieve Warren <24882762+gewarren@users.noreply.github.com>

* Apply review feedback: clearer wording for metadata limits

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review: remove ExtractToDirectory reference from untrusted-archive note

The note lives in the streaming/untrusted-input section, but referenced
TarFile.ExtractToDirectory, which the article frames as a trusted-input
convenience API. Reword to keep the note focused on manual boundary
validation and avoid the inconsistency.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: mangod9 <mangod9@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Genevieve Warren <24882762+gewarren@users.noreply.github.com>
@github-advanced-security

github-advanced-security AI commented Aug 11, 2026

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@dotnetrepoman dotnetrepoman Bot added this to the August 2026 milestone Aug 11, 2026
github-advanced-security[bot]
github-advanced-security Bot found potential problems Aug 11, 2026
View reviewed changes
Comment thread .github/workflows/check-for-build-warnings.yml
egress-policy: audit

- uses: dotnet/docs-tools/actions/status-checker@455480c2e1c2fa90ecb711963250f000d66d3251 # main
- uses: dotnet/docs-tools/actions/status-checker@main
Comment thread .github/workflows/docs-verifier.yml

- name: Validate
uses: dotnet/docs-tools/actions/docs-verifier@1397e452fa0b49e9e52bc2443cd9ec6182a05294 # main
uses: dotnet/docs-tools/actions/docs-verifier@main
Comment thread .github/workflows/generate-preview-links.yml
egress-policy: audit

- uses: dotnet/docs-tools/actions/preview-link-generator@455480c2e1c2fa90ecb711963250f000d66d3251 # main
- uses: dotnet/docs-tools/actions/preview-link-generator@main
Copilot AI and others added 23 commits August 11, 2026 10:04
@adegeo
docs: recommend pinning SDK version when using NuGet package lock fil…
761f8e9 
…es (#54846)

* Initial plan

* Add SDK pinning recommendation to package lock files docs

* Edits

* Reformat instructions to make more sense

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Andy De George (from Dev Box) <adegeo@microsoft.com>
@adegeo
Removed .NET framework versioning where appropriate (#55340)
8b2033f 
* Removed .NET framework versioning where appropriate

* Feedback
@dependabot
Bump DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0 (#55363)
8cf5003 
Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 24.1.0 to 24.2.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](DavidAnson/markdownlint-cli2-action@6bf21b0...21c1be1)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 24.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55421)
fcef999 
Bumps Microsoft.Agents.AI.OpenAI from 1.15.0 to 1.17.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI.OpenAI
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55388)
b938ef4 
Bumps ModelContextProtocol from 1.4.1 to 2.1.0

---
updated-dependencies:
- dependency-name: ModelContextProtocol
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55371)
b1878c0 
Bumps Azure.Core from 1.60.0 to 1.61.0

---
updated-dependencies:
- dependency-name: Azure.Core
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 3 updates (#55424)
b2c6b6f 
Bumps Microsoft.Extensions.AI.OpenAI from 10.7.0 to 10.8.3
Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#55402)
552550e 
Bumps Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.10
Bumps OllamaSharp from 5.4.25 to 5.4.30

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OllamaSharp
  dependency-version: 5.4.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#55403)
3e50442 
Bumps Microsoft.Extensions.AI from 10.7.0 to 10.8.3
Bumps OllamaSharp from 5.4.25 to 5.4.30

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OllamaSharp
  dependency-version: 5.4.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 (#55378)
d6f2d22 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.3 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e4fba86...5595cca)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 3 updates (#55420)
506dd2d 
Bumps Microsoft.Extensions.AI.Abstractions from 10.8.0 to 10.8.3
Bumps Microsoft.Extensions.AI.OpenAI from 10.8.0 to 10.8.3
Bumps MSTest from 4.3.2 to 4.3.3

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MSTest
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55387)
85bd79b 
Bumps Azure.Monitor.OpenTelemetry.AspNetCore from 1.5.0 to 1.6.0

---
updated-dependencies:
- dependency-name: Azure.Monitor.OpenTelemetry.AspNetCore
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#55419)
020b1bb 
Bumps Microsoft.Extensions.AI from 10.8.0 to 10.8.3
Bumps Microsoft.Extensions.AI.OpenAI from 10.8.0 to 10.8.3

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump step-security/harden-runner from 2.20.0 to 2.20.1 (#55396)
cc38bab 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.0 to 2.20.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@bf7454d...b09bb98)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#55422)
931ec33 
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#55423)
0469d55 
Bumps Microsoft.Extensions.AmbientMetadata.Build from 10.7.0 to 10.8.0
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AmbientMetadata.Build
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55408)
1aad07a 
Bumps OllamaSharp from 5.4.25 to 5.4.30

---
updated-dependencies:
- dependency-name: OllamaSharp
  dependency-version: 5.4.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55374)
5f201ce 
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 4 updates (#55414)
cc743a5 
Bumps Microsoft.Extensions.AI from 10.7.0 to 10.8.3
Bumps Microsoft.Extensions.AI.OpenAI from 10.7.0 to 10.8.3
Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@azure-sdk-automation @azure-sdk
Update package index with latest published versions (#55361)
b0d2fc3 
Co-authored-by: azure-sdk <azuresdk@microsoft.com>
@BillWagner
Move proposals folder. (#55425)
45ad08c 
* Move proposals folder.

C# 15 is now feature complete.

* warnings, round one

* Warnings, 2nd pass

Generally fixing links
@fhnaseer
Add telemetry section to dotnet-coverage doc, (#55310)
44f51ed
Update .NET 11 “What’s New” docs for Preview 7 across overview, runti…
a59b1dc 
…me, libraries, and SDK (#55426)
gewarren and others added 8 commits August 12, 2026 11:47
@gewarren
Remove invalid authors and one link (#55429)
73b362e
Document .NET 11 SDK local container runtime selection change (#55232)
9d5b67a
@BillWagner
Publish the V12 alpha standard (#55428)
2c76c7e 
* Publish the V12 alpha standard

Update the publishing config to use the V12 alpha branch instead of the V11 branch.

As part of that work, remove the feature speclets for all the version 12 features.

Manage any broken links from those changes.

* fix branch name.

* Fix warnings

Update links to the standard to the updated bookmarks for a given feature.
@azure-sdk-automation @azure-sdk
Update package index with latest published versions (#55427)
49d2bb1 
Co-authored-by: azure-sdk <azuresdk@microsoft.com>
@dependabot
Bump the dotnet group with 2 updates (#55406)
84f377d 
Bumps MSTest.TestAdapter from 4.3.2 to 4.3.3
Bumps MSTest.TestFramework from 4.3.2 to 4.3.3

---
updated-dependencies:
- dependency-name: MSTest.TestAdapter
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MSTest.TestFramework
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#55411)
bd03850 
Bumps Microsoft.ServiceFabric.Services from 8.6.235 to 8.6.239

---
updated-dependencies:
- dependency-name: Microsoft.ServiceFabric.Services
  dependency-version: 8.6.239
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@gewarren
Fix broken xrefs (#55431)
4414072
@azure-sdk-automation @azure-sdk
Update package index with latest published versions (#55432)
d29798b 
Co-authored-by: azure-sdk <azuresdk@microsoft.com>
@gewarren
gewarren merged commit e448503 into live Aug 13, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@github-advanced-security github-advanced-security[bot] github-advanced-security[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

:octocat: auto-merge

Projects

None yet

Milestone

August 2026

Development

Successfully merging this pull request may close these issues.

7 participants

@github-advanced-security @gewarren @mangod9 @adegeo @BillWagner @fhnaseer