From 8f88172a13f6ac6f3ef7b113598721038ff0511a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Cant=C3=BA?= Date: Wed, 11 Feb 2026 20:18:57 -0600 Subject: [PATCH 1/6] Disable GeneratePackageOnBuild --- .../src/System.Security.Cryptography.Cose.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj b/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj index 1b411e3ce4f158..71b7a09b0286b3 100644 --- a/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj +++ b/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj @@ -5,7 +5,7 @@ true true 2 - true + false Provides support for CBOR Object Signing and Encryption (COSE). From 3b39d749062ab2d58c6a7c5b0bcbcdf76d98dcd1 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 3 Mar 2026 09:40:25 -0800 Subject: [PATCH 2/6] [release/8.0] Disable ResolveLinkTarget_Succeeds returnFinalTarget=true for UNC paths (#124906) Backport of #124867 to release/8.0 /cc @jozkee @Copilot ResolveLinkTarget_Succeeds fails with IOException: The specified network name is no longer available on Windows versions that have UNC access disabled, because SymbolicLink_ResolveLinkTarget_PathToTarget_Data was yielding UNC paths with returnFinalTarget=true, causing Windows to actually attempt to resolve \\LOCALHOST\share\path. Test only change for 8.0 (and 9.0), for 10.0 we backported the fix: https://github.com/dotnet/runtime/pull/124869. --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jozkee <16040868+jozkee@users.noreply.github.com> --- .../tests/Base/SymbolicLinks/BaseSymbolicLinks.cs | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/libraries/System.IO.FileSystem/tests/Base/SymbolicLinks/BaseSymbolicLinks.cs b/src/libraries/System.IO.FileSystem/tests/Base/SymbolicLinks/BaseSymbolicLinks.cs index adaec2b9094f00..f08d4a0ce2dcc2 100644 --- a/src/libraries/System.IO.FileSystem/tests/Base/SymbolicLinks/BaseSymbolicLinks.cs +++ b/src/libraries/System.IO.FileSystem/tests/Base/SymbolicLinks/BaseSymbolicLinks.cs @@ -57,11 +57,18 @@ public static IEnumerable SymbolicLink_ResolveLinkTarget_PathToTarget_ { get { - foreach (string path in PathToTargetData.Union(PathToTargetUncData)) + foreach (string path in PathToTargetData) { yield return new object[] { path, false }; yield return new object[] { path, true }; } + // UNC paths are excluded from the returnFinalTarget=true case since + // they throw "The specified network name is no longer available" in + // various Windows versions. https://github.com/dotnet/runtime/issues/120380 + foreach (string path in PathToTargetUncData) + { + yield return new object[] { path, false }; + } } } From 39a233467f8824345ff5890a166d61dfb8fe2949 Mon Sep 17 00:00:00 2001 From: vseanreesermsft <78103370+vseanreesermsft@users.noreply.github.com> Date: Tue, 3 Mar 2026 14:33:50 -0800 Subject: [PATCH 3/6] [release/8.0] Update branding to 8.0.26 (#125133) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR updates version branding on branch `release/8.0`. **Changes:** - Repository: runtime - PatchVersion: `25` → `26` **Files Modified:** - eng/Versions.props (+2 -2) --- eng/Versions.props | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/eng/Versions.props b/eng/Versions.props index 9f3768ffab74f1..bed3f79325a193 100644 --- a/eng/Versions.props +++ b/eng/Versions.props @@ -1,11 +1,11 @@ - 8.0.25 + 8.0.26 8 0 - 25 + 26 8.0.100 7.0.20 6.0.36 From adb7b4789454b36c3b58c530ae9d78571375560d Mon Sep 17 00:00:00 2001 From: "dotnet-maestro[bot]" <42748379+dotnet-maestro[bot]@users.noreply.github.com> Date: Wed, 11 Mar 2026 09:27:00 -0700 Subject: [PATCH 4/6] [release/8.0] Update dependencies from dotnet/emsdk (#124756) This pull request updates the following dependencies [marker]: <> (Begin:4ebef09c-22a4-4345-9e95-08db9f47cad7) ## From https://github.com/dotnet/emsdk - **Subscription**: [4ebef09c-22a4-4345-9e95-08db9f47cad7](https://maestro.dot.net/subscriptions?search=4ebef09c-22a4-4345-9e95-08db9f47cad7) - **Build**: [20260310.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2922893) ([305456](https://maestro.dot.net/channel/3073/github:dotnet:emsdk/build/305456)) - **Date Produced**: March 10, 2026 1:04:46 PM UTC - **Commit**: [050048d77141e904449880ff47a38da3a7f515b6](https://github.com/dotnet/emsdk/commit/050048d77141e904449880ff47a38da3a7f515b6) - **Branch**: [release/8.0](https://github.com/dotnet/emsdk/tree/release/8.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [8.0.25-servicing.26102.2 to 8.0.26-servicing.26160.3][7] - Microsoft.SourceBuild.Intermediate.emsdk - From [8.0.25 to 8.0.26][7] - Microsoft.NET.Workload.Emscripten.Current.Manifest-8.0.100 [7]: https://github.com/dotnet/emsdk/compare/badf9f97aa...050048d771 [DependencyUpdate]: <> (End) [marker]: <> (End:4ebef09c-22a4-4345-9e95-08db9f47cad7) --------- Co-authored-by: dotnet-maestro[bot] --- NuGet.config | 2 +- eng/Version.Details.xml | 8 ++++---- eng/Versions.props | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/NuGet.config b/NuGet.config index d74fa2a4c62854..978d89e38470ee 100644 --- a/NuGet.config +++ b/NuGet.config @@ -9,7 +9,7 @@ - + diff --git a/eng/Version.Details.xml b/eng/Version.Details.xml index 81b9dc541bcf8e..d6d38dd59e5073 100644 --- a/eng/Version.Details.xml +++ b/eng/Version.Details.xml @@ -90,13 +90,13 @@ 8bb0f2d5f3b6b9dff32e2643642bea09bf6ae38d - + https://github.com/dotnet/emsdk - badf9f97aaf4c2166b17bd6475ca73958c11e309 + 050048d77141e904449880ff47a38da3a7f515b6 - + https://github.com/dotnet/emsdk - badf9f97aaf4c2166b17bd6475ca73958c11e309 + 050048d77141e904449880ff47a38da3a7f515b6 diff --git a/eng/Versions.props b/eng/Versions.props index bed3f79325a193..d12c08161dceb4 100644 --- a/eng/Versions.props +++ b/eng/Versions.props @@ -254,7 +254,7 @@ Note: when the name is updated, make sure to update dependency name in eng/pipelines/common/xplat-setup.yml like - DarcDependenciesChanged.Microsoft_NET_Workload_Emscripten_Current_Manifest-8_0_100_Transport --> - 8.0.25 + 8.0.26 $(MicrosoftNETWorkloadEmscriptenCurrentManifest80100Version) 1.1.87-gba258badda From 8fe0f1c125d8e74a78444e429844d68bd812db69 Mon Sep 17 00:00:00 2001 From: Ahmet Ibrahim Aksoy Date: Fri, 13 Mar 2026 04:43:35 +0300 Subject: [PATCH 5/6] [release/8.0-staging] Deny unmasked frame receive for WebSocket Server (#123662) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Backport of #123485 to release/8.0-staging Increasing RFC compliance for WebSocket ## Customer Impact RFC compliance ## Regression No ## Testing Manual verification + automated tests ## Risk Low, the change only affects non‑compliant WebSocket clients sending unmasked frames, which is explicitly disallowed by RFC 6455. No behavior change is expected for compliant clients. --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Tomas Weinfurt --- .../src/Resources/Strings.resx | 3 +++ .../src/System/Net/WebSockets/ManagedWebSocket.cs | 5 +++++ .../System.Net.WebSockets/tests/WebSocketTests.cs | 15 +++++++++++++++ 3 files changed, 23 insertions(+) diff --git a/src/libraries/System.Net.WebSockets/src/Resources/Strings.resx b/src/libraries/System.Net.WebSockets/src/Resources/Strings.resx index 8e01fce49ad888..fdf7ea01987c61 100644 --- a/src/libraries/System.Net.WebSockets/src/Resources/Strings.resx +++ b/src/libraries/System.Net.WebSockets/src/Resources/Strings.resx @@ -117,6 +117,9 @@ The WebSocket server sent a masked frame. + + The WebSocket client sent an unmasked frame. + The WebSocket received a continuation frame from a previous final message. diff --git a/src/libraries/System.Net.WebSockets/src/System/Net/WebSockets/ManagedWebSocket.cs b/src/libraries/System.Net.WebSockets/src/System/Net/WebSockets/ManagedWebSocket.cs index bcf6500a8a6306..ff4c7935aa2dc2 100644 --- a/src/libraries/System.Net.WebSockets/src/System/Net/WebSockets/ManagedWebSocket.cs +++ b/src/libraries/System.Net.WebSockets/src/System/Net/WebSockets/ManagedWebSocket.cs @@ -1204,6 +1204,11 @@ private async ValueTask CloseWithReceiveErrorAndThrowAsync( // Consume the mask bytes ConsumeFromBuffer(4); } + else if (_isServer) + { + resultHeader = default; + return SR.net_Websockets_ServerReceivedUnmaskedFrame; + } // Do basic validation of the header switch (header.Opcode) diff --git a/src/libraries/System.Net.WebSockets/tests/WebSocketTests.cs b/src/libraries/System.Net.WebSockets/tests/WebSocketTests.cs index 3d0b54bd8ea5b5..fd852f03710924 100644 --- a/src/libraries/System.Net.WebSockets/tests/WebSocketTests.cs +++ b/src/libraries/System.Net.WebSockets/tests/WebSocketTests.cs @@ -2,6 +2,7 @@ // The .NET Foundation licenses this file to you under the MIT license. using System.IO; +using System.Threading; using System.Threading.Tasks; using Xunit; @@ -184,6 +185,20 @@ public async Task ThrowWhenContinuationWithDifferentCompressionFlags() client.SendAsync(Memory.Empty, WebSocketMessageType.Binary, WebSocketMessageFlags.EndOfMessage, default)); } + [Fact] + public async Task ReceiveAsync_ServerUnmaskedFrame_ThrowsWebSocketException() + { + byte[] frame = { 0x81, 0x05, 0x48, 0x65, 0x6C, 0x6C, 0x6F }; + using var stream = new MemoryStream(); + stream.Write(frame, 0, frame.Length); + stream.Position = 0; + using WebSocket websocket = WebSocket.CreateFromStream(stream, new WebSocketCreationOptions { IsServer = true }); + WebSocketException exception = await Assert.ThrowsAsync(() => + websocket.ReceiveAsync(new byte[5], CancellationToken.None)); + Assert.Equal("The WebSocket client sent an unmasked frame.", exception.Message); + Assert.Equal(WebSocketState.Aborted, websocket.State); + } + public abstract class ExposeProtectedWebSocket : WebSocket { public static new bool IsStateTerminal(WebSocketState state) => From 917b296a172c734cf5ea646a54ba1f0a27042f9a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Cant=C3=BA?= Date: Fri, 13 Mar 2026 02:41:16 +0000 Subject: [PATCH 6/6] Disable GeneratePackageOnBuild --- .../src/System.Security.Cryptography.Cose.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj b/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj index 1b411e3ce4f158..71b7a09b0286b3 100644 --- a/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj +++ b/src/libraries/System.Security.Cryptography.Cose/src/System.Security.Cryptography.Cose.csproj @@ -5,7 +5,7 @@ true true 2 - true + false Provides support for CBOR Object Signing and Encryption (COSE).