Merge branch 'release/8.0' => 'release/8.0-staging'#124314
Merged
jkotas merged 33 commits intorelease/8.0-stagingfrom Feb 12, 2026
Merged
Merge branch 'release/8.0' => 'release/8.0-staging'#124314jkotas merged 33 commits intorelease/8.0-stagingfrom
jkotas merged 33 commits intorelease/8.0-stagingfrom
Conversation
CoseMessage's Decode routines say that any failure is a CryptographicException, but some of the validation failures leak out ArgumentException from the validation in CoseHeaderMap.
This pull request updates the following dependencies [marker]: <> (Begin:4ebef09c-22a4-4345-9e95-08db9f47cad7) ## From https://github.com/dotnet/emsdk - **Subscription**: [4ebef09c-22a4-4345-9e95-08db9f47cad7](https://maestro.dot.net/subscriptions?search=4ebef09c-22a4-4345-9e95-08db9f47cad7) - **Build**: [20251226.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2867558) ([295617](https://maestro.dot.net/channel/3073/github:dotnet:emsdk/build/295617)) - **Date Produced**: December 26, 2025 5:58:02 PM UTC - **Commit**: [1898fd1eefc41432cc9f0bb849937b2adc24cc9d](dotnet/emsdk@1898fd1) - **Branch**: [release/8.0](https://github.com/dotnet/emsdk/tree/release/8.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [8.0.23-servicing.25612.6 to 8.0.23-servicing.25626.3][1] - Microsoft.SourceBuild.Intermediate.emsdk - From [8.0.23 to 8.0.23][1] - Microsoft.NET.Workload.Emscripten.Current.Manifest-8.0.100 [1]: dotnet/emsdk@3cbd998...1898fd1 [DependencyUpdate]: <> (End) [marker]: <> (End:4ebef09c-22a4-4345-9e95-08db9f47cad7) Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Jeff Handley <[email protected]>
…-merge-8.0-2026-01-13-1149
There were no OOB packages with `<GeneratePackageOnBuild>` set to `true`, so none needed to be reset to `false`. --------- Co-authored-by: Miha Zupan <[email protected]> Co-authored-by: Nikola Milosavljevic <[email protected]> Co-authored-by: dotnet-maestro[bot] <42748379+dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Copilot <[email protected]> Co-authored-by: elinor-fung <[email protected]> Co-authored-by: Elinor Fung <[email protected]> Co-authored-by: sbomer <[email protected]> Co-authored-by: Sven Boemer <[email protected]> Co-authored-by: Andy Gocke <[email protected]> Co-authored-by: Eric StJohn <[email protected]> Co-authored-by: Matous Kozak <[email protected]> Co-authored-by: Steve Pfister <[email protected]> Co-authored-by: Filip Navara <[email protected]>
This pull request updates the following dependencies [marker]: <> (Begin:4ebef09c-22a4-4345-9e95-08db9f47cad7) ## From https://github.com/dotnet/emsdk - **Subscription**: [4ebef09c-22a4-4345-9e95-08db9f47cad7](https://maestro.dot.net/subscriptions?search=4ebef09c-22a4-4345-9e95-08db9f47cad7) - **Build**: [20260106.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2873152) ([297303](https://maestro.dot.net/channel/3073/github:dotnet:emsdk/build/297303)) - **Date Produced**: January 14, 2026 5:21:21 PM UTC - **Commit**: [8b730da92c2b7c1b200325c7e28965b71759e959](dotnet/emsdk@8b730da) - **Branch**: [release/8.0](https://github.com/dotnet/emsdk/tree/release/8.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [8.0.23-servicing.25626.3 to 8.0.24-servicing.26056.3][1] - Microsoft.SourceBuild.Intermediate.emsdk - From [8.0.23 to 8.0.24][1] - Microsoft.NET.Workload.Emscripten.Current.Manifest-8.0.100 [1]: dotnet/emsdk@1898fd1...8b730da [DependencyUpdate]: <> (End) [marker]: <> (End:4ebef09c-22a4-4345-9e95-08db9f47cad7) Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com>
Backport of #123450 to release/8.0 /cc @lewing @hoyosjs ## Customer Impact - [ ] Customer reported - [ ] Found internally [Select one or both of the boxes. Describe how this issue impacts customers, citing the expected and actual behaviors and scope of the issue. If customer-reported, provide the issue number.] ## Regression - [ ] Yes - [ ] No [If yes, specify when the regression was introduced. Provide the PR or commit if known.] ## Testing [How was the fix verified? How was the issue missed previously? What tests were added?] ## Risk [High/Medium/Low. Justify the indication by mentioning how risks were measured and addressed.] **IMPORTANT**: If this backport is for a servicing release, please verify that: - For .NET 8 and .NET 9: The PR target branch is `release/X.0-staging`, not `release/X.0`. - For .NET 10+: The PR target branch is `release/X.0` (no `-staging` suffix). ## Package authoring no longer needed in .NET 9 **IMPORTANT**: Starting with .NET 9, you no longer need to edit a NuGet package's csproj to enable building and bump the version. Keep in mind that we still need package authoring in .NET 8 and older versions. --------- Co-authored-by: Juan Hoyos <[email protected]> Co-authored-by: Alexander Köplinger <[email protected]>
This pull request updates the following dependencies [marker]: <> (Begin:4ebef09c-22a4-4345-9e95-08db9f47cad7) ## From https://github.com/dotnet/emsdk - **Subscription**: [4ebef09c-22a4-4345-9e95-08db9f47cad7](https://maestro.dot.net/subscriptions?search=4ebef09c-22a4-4345-9e95-08db9f47cad7) - **Build**: [20260202.2](https://dev.azure.com/dnceng/internal/_build/results?buildId=2893841) ([300038](https://maestro.dot.net/channel/3073/github:dotnet:emsdk/build/300038)) - **Date Produced**: February 3, 2026 2:41:01 PM UTC - **Commit**: [badf9f97aaf4c2166b17bd6475ca73958c11e309](dotnet/emsdk@badf9f9) - **Branch**: [release/8.0](https://github.com/dotnet/emsdk/tree/release/8.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [8.0.24-servicing.26056.3 to 8.0.25-servicing.26102.2][3] - Microsoft.SourceBuild.Intermediate.emsdk - From [8.0.24 to 8.0.25][3] - Microsoft.NET.Workload.Emscripten.Current.Manifest-8.0.100 [3]: dotnet/emsdk@8b730da...badf9f9 [DependencyUpdate]: <> (End) [marker]: <> (End:4ebef09c-22a4-4345-9e95-08db9f47cad7) --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Tomas Weinfurt <[email protected]>
…-merge-8.0-2026-02-10-1100
Contributor
There was a problem hiding this comment.
Pull request overview
This PR merges release/8.0 into release/8.0-staging, bringing forward a set of servicing updates across linker/analyzers, cryptography (COSE) decoding behavior + tests, Mono/CoreCLR/runtime infrastructure, stress-test tooling, and build/pipeline configuration.
Changes:
- Add/adjust ILLink trim analysis behavior and introduce a new analyzer test case for extension-method dataflow.
- Improve COSE header decoding (indefinite-length maps/arrays, critical header validation) and expand test coverage.
- Refactor HttpStress/SslStress container + local-run tooling to shared scripts, update pipelines/queues, and bump various repo/tooling versions.
Reviewed changes
Copilot reviewed 72 out of 81 changed files in this pull request and generated 7 comments.
Show a summary per file
| File | Description |
|---|---|
| src/tools/illink/test/Mono.Linker.Tests.Cases/DataFlow/ExtensionsDataFlow.cs | Adds a new linker dataflow test case focused on extension methods. |
| src/tools/illink/test/ILLink.RoslynAnalyzer.Tests/DataFlowTests.cs | Registers the new ExtensionsDataFlow analyzer test. |
| src/tools/illink/src/ILLink.RoslynAnalyzer/TrimAnalysis/TrimAnalysisVisitor.cs | Updates trim analysis parameter handling via ParameterProxy. |
| src/tools/illink/src/ILLink.RoslynAnalyzer/TrimAnalysis/ParameterProxy.cs | Changes ParameterProxy construction to require an explicit method symbol. |
| src/tools/illink/src/ILLink.RoslynAnalyzer/TrimAnalysis/MethodParameterValue.cs | Removes now-unneeded convenience constructors, relying on ParameterProxy. |
| src/tests/issues.targets | Adds Mono minijit x64 exclusions for Swift ABI stress tests. |
| src/mono/mono/mini/decompose.c | Simplifies a comparison constant to INT_MIN. |
| src/mono/mono/mini/aot-compiler.c | Renames boolean icall signature symbols used by the AOT compiler. |
| src/mono/mono/metadata/icall.c | Cleans up icall signature enum naming (boolean). |
| src/mono/mono/metadata/icall-signatures.h | Updates icall signature macro usage/comments to boolean. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.CustomHeaderMaps.cs | Expands critical header tests to cover definite vs indefinite encodings. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeSign1.cs | Adds additional critical-header decode negative tests. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeMultiSign.cs | Adds additional critical-header decode negative tests for MultiSign. |
| src/libraries/System.Security.Cryptography.Cose/src/System/Security/Cryptography/Cose/CoseMessage.cs | Improves decoding loops for indefinite-length collections and enhances critical-header validation. |
| src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj | Updates servicing metadata and package build settings. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/windows.Dockerfile | Updates Windows stress container base image and entrypoint behavior. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/run-docker-compose.sh | Delegates to shared stress docker-compose runner script. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/run-docker-compose.ps1 | Delegates to shared stress docker-compose runner script. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/entrypoint.sh | Adds Linux container entrypoint with dump collection + artifact copy on failure. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/entrypoint.ps1 | Adds Windows container entrypoint with dump collection + artifact copy on failure. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/docker-compose.yml | Switches env var naming and mounts shared dump volume. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/build-local.sh | Delegates to shared local build script. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/StressOperations.cs | Adds client pre-connect/retry initialization logic and minor formatting fixes. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/SslStress.csproj | Updates System.CommandLine dependency and restore sources. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/SslClientBase.cs | Fixes Lazy initialization and refactors SSL stream establishment signature. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/Program.cs | Updates System.CommandLine usage and adds client initialization call. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/Dockerfile | Updates Linux stress container base image and entrypoint behavior. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/Directory.Build.targets | Uses NetCoreAppCurrentVersion rather than a hardcoded maximum. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/Directory.Build.props | Uses repo versions props and parameterized target RID/versioning. |
| src/libraries/System.Net.Security/tests/StressTests/SslStress/Build-Local.ps1 | Delegates to shared local build script. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/windows.Dockerfile | Updates Windows stress container build args/entrypoint and env var naming. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/run-docker-compose.sh | Delegates to shared stress docker-compose runner script. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/run-docker-compose.ps1 | Delegates to shared stress docker-compose runner script. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/entrypoint.sh | Adds Linux container entrypoint with dump collection + artifact copy on failure. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/entrypoint.ps1 | Adds Windows container entrypoint with dump collection + artifact copy on failure. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/docker-compose.yml | Switches to shared dump mount and standardized STRESS_* variables. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/build-local.sh | Delegates to shared local build script. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/build-local.ps1 | Delegates to shared local build script. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/StressServer.cs | Updates docs link to learn.microsoft.com. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/StressClient.cs | Enables multiple HTTP/2 connections in SocketsHttpHandler. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/Program.cs | Refactors CLI parsing, adds unobserved exception tracking option/output. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/HttpStress.csproj | Updates System.CommandLine dependency and restore sources. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/Dockerfile | Updates base image, msquic build strategy, and adds ASAN settings. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/Directory.Build.targets | Uses NetCoreAppCurrentVersion rather than a hardcoded maximum. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/Directory.Build.props | Uses repo versions props and parameterized target RID/versioning. |
| src/libraries/System.Net.Http/tests/StressTests/HttpStress/Configuration.cs | Adds TrackUnobservedExceptions config property. |
| src/libraries/Common/tests/System/Net/StressTests/run-docker-compose.sh | Introduces shared docker-compose runner for stress tests. |
| src/libraries/Common/tests/System/Net/StressTests/run-docker-compose.ps1 | Introduces shared docker-compose runner for stress tests (PowerShell). |
| src/libraries/Common/tests/System/Net/StressTests/build-local.sh | Introduces shared local build helper for stress tests (bash). |
| src/libraries/Common/tests/System/Net/StressTests/build-local.ps1 | Introduces shared local build helper for stress tests (PowerShell). |
| src/installer/pkg/sfx/installers/dotnet-runtime-deps/dotnet-runtime-deps-sles.12.proj | Updates runtime-deps dependency list for SLES12. |
| src/installer/pkg/sfx/installers/dotnet-runtime-deps/dotnet-runtime-deps-opensuse.42.proj | Updates runtime-deps dependency list for openSUSE 42. |
| src/coreclr/vm/amd64/jithelpers_fastwritebarriers.S | Adjusts labels/macros for write barrier helpers. |
| global.json | Updates MSBuild SDK dependency versions. |
| eng/pipelines/official/jobs/prepare-signed-artifacts.yml | Sets checkout to not fetch tags. |
| eng/pipelines/libraries/stress/ssl.yml | Expands schedules/branch filters, standardizes dumps, uses docker compose v2, disables tag fetching. |
| eng/pipelines/libraries/stress/http.yml | Expands schedules/branch filters, standardizes dumps, uses docker compose v2, disables tag fetching. |
| eng/pipelines/libraries/helix-queues-setup.yml | Updates macOS helix queues and whitespace cleanup. |
| eng/pipelines/libraries/base-job.yml | Sets checkout to not fetch tags. |
| eng/pipelines/installer/jobs/build-job.yml | Sets checkout to not fetch tags. |
| eng/pipelines/coreclr/templates/helix-queues-setup.yml | Updates macOS helix queues. |
| eng/pipelines/common/xplat-setup.yml | Updates hosted macOS image selection and adds queue guidance comments. |
| eng/pipelines/common/templates/runtimes/xplat-job.yml | Sets checkout to not fetch tags. |
| eng/pipelines/common/global-build-job.yml | Sets checkout to not fetch tags. |
| eng/pipelines/common/evaluate-paths-job.yml | Moves evaluate-paths to AzL pools and disables tag fetching. |
| eng/docker/libraries-sdk.windows.Dockerfile | Updates base image and ASP.NET bits handling in the SDK image. |
| eng/docker/libraries-sdk.linux.Dockerfile | Updates base image, SDK install behavior, and ASP.NET bits handling. |
| eng/docker/build-docker-sdk.sh | Passes version build arg and improves argument parsing. |
| eng/docker/build-docker-sdk.ps1 | Passes version build arg and aligns testhost paths with repo versioning. |
| eng/common/tools.ps1 | Removes deprecated -UseBasicParsing usages. |
| eng/common/templates/steps/source-build.yml | Updates internal runtime feed URL. |
| eng/common/templates-official/steps/source-build.yml | Updates internal runtime feed URL. |
| eng/common/templates-official/post-build/setup-maestro-vars.yml | Removes deprecated -UseBasicParsing usage. |
| eng/common/templates-official/job/source-index-stage1.yml | Removes main-branch-only condition defaulting. |
| eng/common/templates-official/job/source-build.yml | Updates internal pool image. |
| eng/common/post-build/post-build-utils.ps1 | Removes deprecated -UseBasicParsing usage. |
| eng/common/post-build/nuget-verification.ps1 | Removes deprecated -UseBasicParsing usage. |
| eng/common/internal-feed-operations.ps1 | Removes deprecated -UseBasicParsing usage. |
| eng/Versions.props | Bumps product/patch versions and updates dependency versions. |
| eng/Version.Details.xml | Updates dependency versions/SHAs for ICU transport, emsdk, arcade toolset, etc. |
| NuGet.config | Updates darc-managed package source key/value. |
src/libraries/System.Net.Security/tests/StressTests/SslStress/StressOperations.cs
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/StressTests/run-docker-compose.ps1
Show resolved
Hide resolved
src/libraries/System.Net.Security/tests/StressTests/SslStress/docker-compose.yml
Show resolved
Hide resolved
src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeSign1.cs
Show resolved
Hide resolved
src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj
Show resolved
Hide resolved
rbhanda
approved these changes
Feb 12, 2026
This was referenced Feb 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.