[manual] Merge release/9.0-staging to release/9.0#125467
Merged
wfurt merged 9 commits intodotnet:release/9.0from Mar 13, 2026
Merged
[manual] Merge release/9.0-staging to release/9.0#125467wfurt merged 9 commits intodotnet:release/9.0from
wfurt merged 9 commits intodotnet:release/9.0from
Conversation
…et#124245) I detected changes in the release/9.0 branch which have not been merged yet to release/9.0-staging. I'm a robot and am configured to help you automatically keep release/9.0-staging up to date, so I've opened this PR. This PR merges commits made on release/9.0 by the following committers: * wfurt * vseanreesermsft * bartonjs ## Instructions for merging from UI This PR will not be auto-merged. When pull request checks pass, complete this PR by creating a merge commit, *not* a squash or rebase commit. <img alt="merge button instructions" src="https://i.imgur.com/GepcNJV.png" width="300" /> If this repo does not allow creating merge commits from the GitHub UI, use command line instructions. ## Instructions for merging via command line Run these commands to merge this pull request from the command line. ``` sh git fetch git checkout release/9.0 git pull --ff-only git checkout release/9.0-staging git pull --ff-only git merge --no-ff release/9.0 # If there are merge conflicts, resolve them and then run git merge --continue to complete the merge # Pushing the changes to the PR branch will re-trigger PR validation. git push https://github.com/dotnet/runtime HEAD:merge/release/9.0-to-release/9.0-staging ``` <details> <summary>or if you are using SSH</summary> ``` git push git@github.com:dotnet/runtime HEAD:merge/release/9.0-to-release/9.0-staging ``` </details> After PR checks are complete push the branch ``` git push ``` ## Instructions for resolving conflicts :warning: If there are merge conflicts, you will need to resolve them manually before merging. You can do this [using GitHub][resolve-github] or using the [command line][resolve-cli]. [resolve-github]: https://help.github.com/articles/resolving-a-merge-conflict-on-github/ [resolve-cli]: https://help.github.com/articles/resolving-a-merge-conflict-using-the-command-line/ ## Instructions for updating this pull request Contributors to this repo have permission update this pull request by pushing to the branch 'merge/release/9.0-to-release/9.0-staging'. This can be done to resolve conflicts or make other changes to this pull request before it is merged. The provided examples assume that the remote is named 'origin'. If you have a different remote name, please replace 'origin' with the name of your remote. ``` git fetch git checkout -b merge/release/9.0-to-release/9.0-staging origin/release/9.0-staging git pull https://github.com/dotnet/runtime merge/release/9.0-to-release/9.0-staging (make changes) git commit -m "Updated PR with my changes" git push https://github.com/dotnet/runtime HEAD:merge/release/9.0-to-release/9.0-staging ``` <details> <summary>or if you are using SSH</summary> ``` git fetch git checkout -b merge/release/9.0-to-release/9.0-staging origin/release/9.0-staging git pull git@github.com:dotnet/runtime merge/release/9.0-to-release/9.0-staging (make changes) git commit -m "Updated PR with my changes" git push git@github.com:dotnet/runtime HEAD:merge/release/9.0-to-release/9.0-staging ``` </details> Contact .NET Core Engineering (dotnet/dnceng) if you have questions or issues. Also, if this PR was generated incorrectly, help us fix it. See https://github.com/dotnet/arcade/blob/main/.github/workflows/scripts/inter-branch-merge.ps1. --------- Co-authored-by: Mirroring <dnceng-mirroring@microsoft.com> Co-authored-by: Jeremy Barton <jbarton@microsoft.com> Co-authored-by: Sean Reeser <v-seanreeser@microsoft.com> Co-authored-by: Tomas Weinfurt <tweinfurt@yahoo.com> Co-authored-by: dotnet-maestro[bot] <42748379+dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: David Cantú <dacantu@microsoft.com> Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: richlander <2608468+richlander@users.noreply.github.com> Co-authored-by: Miha Zupan <mihazupan.zupan1@gmail.com> Co-authored-by: Sven Boemer <sbomer@gmail.com> Co-authored-by: Vladimir Sadov <vsadov@microsoft.com> Co-authored-by: Steve Pfister <steveisok@users.noreply.github.com> Co-authored-by: Alexander Köplinger <alex.koeplinger@outlook.com> Co-authored-by: Jeff Handley <jeffhandley@users.noreply.github.com> Co-authored-by: elinor-fung <47805090+elinor-fung@users.noreply.github.com> Co-authored-by: Elinor Fung <elfung@microsoft.com> Co-authored-by: Andy Gocke <angocke@microsoft.com> Co-authored-by: Eric StJohn <ericstj@microsoft.com> Co-authored-by: Matous Kozak <matouskozak@seznam.cz> Co-authored-by: Filip Navara <filip.navara@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Larry Ewing <lewing@microsoft.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jeremy Koritzinsky <jekoritz@microsoft.com> Co-authored-by: Marie Píchová <11718369+ManickaP@users.noreply.github.com> Co-authored-by: Rahul Bhandari <rbhanda@microsoft.com> Co-authored-by: Juan Hoyos <19413848+hoyosjs@users.noreply.github.com> Co-authored-by: jozkee <16040868+jozkee@users.noreply.github.com>
…dotnet#124458) This pull request updates the following dependencies [marker]: <> (Begin:b458125c-6cf0-41ea-981d-2709b660d5c5) ## From https://github.com/dotnet/hotreload-utils - **Subscription**: [b458125c-6cf0-41ea-981d-2709b660d5c5](https://maestro.dot.net/subscriptions?search=b458125c-6cf0-41ea-981d-2709b660d5c5) - **Build**: [20260302.4](https://dev.azure.com/dnceng/internal/_build/results?buildId=2916199) ([304006](https://maestro.dot.net/channel/3883/github:dotnet:hotreload-utils/build/304006)) - **Date Produced**: March 2, 2026 3:37:03 PM UTC - **Commit**: [2a70fdb0e55455dc067a6f24582b5d9ed75ed373](dotnet/hotreload-utils@2a70fdb) - **Branch**: [release/9.0](https://github.com/dotnet/hotreload-utils/tree/release/9.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [9.0.0-alpha.0.25625.4 to 9.0.0-alpha.0.26152.4][2] - Microsoft.DotNet.HotReload.Utils.Generator.BuildTool [2]: dotnet/hotreload-utils@6eb5041...2a70fdb [DependencyUpdate]: <> (End) [marker]: <> (End:b458125c-6cf0-41ea-981d-2709b660d5c5) --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com>
…24209) This pull request updates the following dependencies [marker]: <> (Begin:b609d3b5-ab6f-473c-9ce1-f266baef16fc) ## From https://github.com/dotnet/cecil - **Subscription**: [b609d3b5-ab6f-473c-9ce1-f266baef16fc](https://maestro.dot.net/subscriptions?search=b609d3b5-ab6f-473c-9ce1-f266baef16fc) - **Build**: [20260222.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2910328) ([302882](https://maestro.dot.net/channel/3883/github:dotnet:cecil/build/302882)) - **Date Produced**: February 23, 2026 5:45:08 AM UTC - **Commit**: [4fe10b2349082f474928ac1b97ce207b70dc2307](dotnet/cecil@4fe10b2) - **Branch**: [release/9.0](https://github.com/dotnet/cecil/tree/release/9.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [0.11.5-alpha.25628.2 to 0.11.5-alpha.26122.3][3] - Microsoft.SourceBuild.Intermediate.cecil - Microsoft.DotNet.Cecil [3]: dotnet/cecil@1f9985e...4fe10b2 [DependencyUpdate]: <> (End) [marker]: <> (End:b609d3b5-ab6f-473c-9ce1-f266baef16fc) --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com>
…t#124165) This pull request updates the following dependencies [marker]: <> (Begin:077f423f-1332-4108-a2ea-08dcc66548e6) ## From https://github.com/dotnet/xharness - **Subscription**: [077f423f-1332-4108-a2ea-08dcc66548e6](https://maestro.dot.net/subscriptions?search=077f423f-1332-4108-a2ea-08dcc66548e6) - **Build**: [20260217.1](https://dev.azure.com/dnceng/internal/_build/results?buildId=2906325) ([302122](https://maestro.dot.net/channel/2/github:dotnet:xharness/build/302122)) - **Date Produced**: February 17, 2026 4:29:14 PM UTC - **Commit**: [0eeaa60169fe6a95932d29d822e20eb225ce0143](dotnet/xharness@0eeaa60) - **Branch**: [main](https://github.com/dotnet/xharness/tree/main) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [9.0.0-prerelease.25615.2 to 11.0.0-prerelease.26117.1][3] - Microsoft.DotNet.XHarness.CLI - Microsoft.DotNet.XHarness.TestRunners.Common - Microsoft.DotNet.XHarness.TestRunners.Xunit [3]: dotnet/xharness@c26361a...0eeaa60 [DependencyUpdate]: <> (End) [marker]: <> (End:077f423f-1332-4108-a2ea-08dcc66548e6) --------- Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Alexander Köplinger <alex.koeplinger@outlook.com>
…124841) This pull request updates the following dependencies [marker]: <> (Begin:943c2154-7e47-4fed-bb40-3e772747daf7) ## From https://github.com/dotnet/arcade - **Subscription**: [943c2154-7e47-4fed-bb40-3e772747daf7](https://maestro.dot.net/subscriptions?search=943c2154-7e47-4fed-bb40-3e772747daf7) - **Build**: [20260223.3](https://dev.azure.com/dnceng/internal/_build/results?buildId=2910552) ([302931](https://maestro.dot.net/channel/5175/github:dotnet:arcade/build/302931)) - **Date Produced**: February 23, 2026 12:35:47 PM UTC - **Commit**: [29a2184303379b9840b70e7cdb2faa0f39833b89](dotnet/arcade@29a2184) - **Branch**: [release/9.0](https://github.com/dotnet/arcade/tree/release/9.0) [DependencyUpdate]: <> (Begin) - **Dependency Updates**: - From [9.0.0-beta.26070.1 to 9.0.0-beta.26123.3][1] - Microsoft.SourceBuild.Intermediate.arcade - Microsoft.DotNet.Arcade.Sdk - Microsoft.DotNet.Build.Tasks.Archives - Microsoft.DotNet.Build.Tasks.Feed - Microsoft.DotNet.Build.Tasks.Installers - Microsoft.DotNet.Build.Tasks.Packaging - Microsoft.DotNet.Build.Tasks.TargetFramework - Microsoft.DotNet.Build.Tasks.Templating - Microsoft.DotNet.Build.Tasks.Workloads - Microsoft.DotNet.CodeAnalysis - Microsoft.DotNet.GenAPI - Microsoft.DotNet.GenFacades - Microsoft.DotNet.Helix.Sdk - Microsoft.DotNet.PackageTesting - Microsoft.DotNet.RemoteExecutor - Microsoft.DotNet.SharedFramework.Sdk - Microsoft.DotNet.VersionTools.Tasks - Microsoft.DotNet.XliffTasks - Microsoft.DotNet.XUnitExtensions - From [2.9.0-beta.26070.1 to 2.9.0-beta.26123.3][1] - Microsoft.DotNet.XUnitAssert - Microsoft.DotNet.XUnitConsoleRunner [1]: dotnet/arcade@9b9436a...29a2184 [DependencyUpdate]: <> (End) [marker]: <> (End:943c2154-7e47-4fed-bb40-3e772747daf7) Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com>
… objects (dotnet#125212) Backport of dotnet#125116 to release/9.0-staging /cc @BrzVlad ## Customer Impact - [x] Customer reported - [ ] Found internally In some cases, cards marked for non-array LOS objects (objects with size greater than 8K) were being ignored. This means that the GC could fail to observe that some object refs were stored inside these large objects. This can result in GC crashes or other undefined behavior. This can impact all mono workloads. This issue was confirmed to be hit by a customer who also investigated it via a GC debug flag. There are other undiagnosed GC crashes that might hopefully be fixed by this. ## Regression - [ ] Yes - [x] No ## Testing Was able to create a console app reproducing this bug. Validated the fix. ## Risk Low. The fix just does an address alignment, in order to scan correctly an additional card. Co-authored-by: Vlad Brezae <brezaevlad@gmail.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Merges changes from release/9.0-staging into release/9.0, bringing in dependency/version updates, COSE decoding/signing improvements with added tests, and a handful of targeted runtime and test adjustments.
Changes:
- Update toolset/dependency versions (Arcade/Helix, Roslyn, xharness, emsdk, Cecil) and related source-build configuration.
- Improve COSE header decoding/validation (including indefinite-length handling) and expand cryptography test coverage accordingly.
- Apply small runtime/test fixes (card table scanning alignment; stabilize Windows symbolic link tests; minor test/annotation tweaks).
Reviewed changes
Copilot reviewed 19 out of 20 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| src/tools/illink/test/Mono.Linker.Tests.Cases/DataFlow/CompilerGeneratedCodeAccessedViaReflection.cs | Enables an UnexpectedWarning annotation for updated compiler codegen behavior. |
| src/tools/illink/test/ILLink.RoslynAnalyzer.Tests.Generator/ILLink.RoslynAnalyzer.Tests.Generator.csproj | Switches generator to use the “Latest VS” Roslyn package version property. |
| src/mono/mono/sgen/sgen-cardtable.c | Aligns scanning start address to card boundary before iterating cards. |
| src/libraries/System.Text.RegularExpressions/tests/FunctionalTests/UpgradeToGeneratedRegexAnalyzerTests.cs | Updates expected fixed-code strings for top-level-statement scenarios. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.CustomHeaderMaps.cs | Expands signing tests to cover definite vs. indefinite-length critical header encodings. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeSign1.cs | Adds decode tests for critical header validation across detached/indefinite variants. |
| src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeMultiSign.cs | Adds decode tests for critical header validation across detached/indefinite variants. |
| src/libraries/System.Security.Cryptography.Cose/src/System/Security/Cryptography/Cose/CoseMessage.cs | Updates CBOR map/array decoding to handle indefinite-length and improves exception shaping. |
| src/libraries/System.Runtime/tests/System.IO.FileSystem.Tests/Base/SymbolicLinks/BaseSymbolicLinks.cs | Avoids flaky UNC + returnFinalTarget=true cases on Windows by limiting that permutation. |
| src/libraries/System.Runtime.InteropServices/tests/LibraryImportGenerator.UnitTests/*.cs | Removes extra blank lines in test baselines. |
| global.json | Updates Arcade/Helix/SharedFramework SDK versions. |
| eng/common/core-templates/job/source-build.yml | Updates internal source-build pool image name. |
| eng/Versions.props | Updates multiple dependency version properties (Roslyn, Arcade, xharness, Cecil, emsdk, LLVM/JIT tools). |
| eng/Version.Details.xml | Updates pinned dependency versions and SHAs accordingly. |
| eng/SourceBuildPrebuiltBaseline.xml | Adds ignore patterns for Roslyn dependency packages in source-build baseline. |
| NuGet.config | Updates darc-managed emsdk feed entry to new commit-based key. |
| .config/dotnet-tools.json | Bumps microsoft.dotnet.xharness.cli tool version. |
Comments suppressed due to low confidence (1)
src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.DecodeSign1.cs:1
DetachedIndefiniteHexis defined but never selected:(true, true)currently maps toDetachedDefiniteHex. This makes the “detached + indefinite length” test case exercise the wrong payload; update the switch arm to useDetachedIndefiniteHexfor(true, true).
// Licensed to the .NET Foundation under one or more agreements.
...System.Text.RegularExpressions/tests/FunctionalTests/UpgradeToGeneratedRegexAnalyzerTests.cs
Show resolved
Hide resolved
...aries/System.Security.Cryptography.Cose/src/System/Security/Cryptography/Cose/CoseMessage.cs
Show resolved
Hide resolved
This was referenced Mar 12, 2026
Open
This was referenced Mar 12, 2026
APP_CRASH SIGABRT during coreclr_initialize on tvOS device (vm_map_enter allocation failure)
#123396
Open
wfurt
approved these changes
Mar 12, 2026
dotnet#123661) Backport of dotnet#123485 to release/9.0-staging /cc @liveans Increasing RFC compliance for WebSocket ## Customer Impact RFC compliance ## Regression No ## Testing Manual verification + automated tests ## Risk Low, the change only affects non‑compliant WebSocket clients sending unmasked frames, which is explicitly disallowed by RFC 6455. No behavior change is expected for compliant clients. --------- Co-authored-by: Ahmet İbrahim Aksoy <aaksoy@microsoft.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 16 out of 17 changed files in this pull request and generated 2 comments.
You can also share your feedback on Copilot code review. Take the survey.
This was referenced Mar 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.