v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

.NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @vseanreesermsft in #61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in #61261
• [release/9.0] Upgrade to Ubuntu 22 by @github-actions in #61215
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #60964
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60902
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @github-actions in #60916
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #61354
• Merging internal commits for release/9.0 by @vseanreesermsft in #61393
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @wtgodbe in #60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @github-actions in #61374
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #61483
• [Identity] Fix Identity UI asset definitions by @javiercn in #59100

Full Changelog: v9.0.4...v9.0.5

.NET 8.0.16

Release

What's Changed

• Update branding to 8.0.16 by @vseanreesermsft in #61283
• [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in #61260
• [release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #61281
• [release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in #61216
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60901
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60926
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61404
• Merging internal commits for release/8.0 by @vseanreesermsft in #61398
• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #61411
• Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in #60352
• [release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in #61375
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #61442
• fetch TLS client hello message from HTTP.SYS by @BrennanConroy in #61494

Full Changelog: v8.0.15...v8.0.16

.NET 10.0 Preview 3

What's Changed

• Update branding to preview3 by @wtgodbe in #60508
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60510
• Update milestones for Preview2/3 by @wtgodbe in #60521
• Revert "Revert "Revert "Update .NET build URLs""" by @wtgodbe in #60519
• Limit types that get converted to null for empty/null input in NullableConverter by @oroztocil in #60498
• Avoid logging bad requests as application errors if the connection was aborted by @adityamandaleeka in #60359
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60511
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60531
• Issue #60416 - Correction of BufferedReadStream 's Position by @nidaca in #60529
• Simplify PublicTopLevelProgramGenerator by @Youssef1313 in #60222
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60549
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60444
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60443
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60579
• Enable arm64 DEBs by @NikolaMilosavljevic in #60565
• Fix: Mark catch-all route parameters as optional (#60392) by @mapedersen in #60544
• Add module initializer for Verify.SourceGenerators by @captainsafia in #60547
• [main] [release/10.0-preview1] Do not remove wixpacks from items to sign by @github-actions in #60524
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60580
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60559
• Add support for AddOpenApiOperationTransformer API by @captainsafia in #60566
• update area owners by @danmoseley in #60421
• Upgrade Facebook Graph API version to v22.0 by @NSTom in #59387
• Fix incorrect path to included script file in Blazor project template by @oroztocil in #60607
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60623
• Fix MD linting in area-owners.md by @sebastienros in #60632
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60637
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60639
• Scroll in enhanced navigation behaves same as in client side routing by @ilonatommy in #60296
• Support resolving OpenAPI server URLs from HttpRequest by @captainsafia in #60617
• Only build BuildAfterTargeting pack on win-x64 by @wtgodbe in #60658
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60661
• Update xcopy-msbuild to latest available version by @benhopkinstech in #60666
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60702
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60703
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60676
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60701
• Add support for ServerSentEventsResult and extension methods by @captainsafia in #60616
• 1es-ify Localization pipeline by @wtgodbe in #60720
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60730
• Suppress CS1591 warnings for PublicTopLevelProgram.Generated.g.cs by @benhopkinstech in #60727
• Fix: Inconsistent certificate chain handling between endpoint and default configuration by @jnjudge1 in #60710
• Fix use of ReconnectModal in Blazor templates with auto mode and global interactivity by @oroztocil in #60735
• Fix for: Minimal APIs and controllers treat header arrays differently by @smnsht in #58251
• Update Selenium versions by @JamesNK in #60744
• Unquarantine EventCountersAndMetricsValues and VerifyCountersFireWithCorrectValues by @SteveSandersonMS in #60651
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60746
• Add location.reload on rejected Blazor reconnection to ReconnectModal… by @oroztocil in #60753
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60601
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60771
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60772
• Don't send body in HEAD response when using PipeWriter.Advance before headers flushed by @BrennanConroy in #59725
• Update to Microsoft.OpenApi v2.0.0-preview.11 by @captainsafia in #60761
• Add avif MIME type by @xt0rted in #60790
• [main] (deps): Bump src/submodules/googletest from 2b6b042 to 7218908 by @dependabot in #60664
• Localized file check-in by OneLocBuild Task: Build definition ID 1159: Build ID 2656907 by @dotnet-bot in #60736
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60793
• Sync shared code from runtime by @github-actions in #60782
• Clarify DefaultPolicy and FallbackPolicy Behavior in XML Docs by @shethaadit in #60619
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60821
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60839
• [Blazor] Flow the WebAssembly options from Server to client through SSR marker by @maraf in #60714
• Refactoring DiagnosticDescriptors.cs files by @benhopkinstech in #60832
• Update milestones for April by @wtgodbe in #60853
• Deduplicate assets produced on multiple build legs in the VMR to only be produced on the 'primary' build leg by @jkoritzinsky in #60792
• Add doc link for policybot by @wtgodbe in #60856
• Update Playwright version in Versions.props by @sebastienros in #60854
• Fix punctuation of documentation in AuthenticationHandler.cs by @alexbeeston in #60814
• Descriptive Error for Improper Use of [AsParameters] by @smnsht in #58218
• Check length of TypeArguments before accessing via index by @benhopkinstech in #60742
• Add more schema tests by @captainsafia in #60822
• Fix apostrophes in ReconnectModal.razor.js by @danroth27 in #60816
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60838
• Setting the Description in a ProducesResponseTypeAttribute works correctly for Minimal API by @sander1095 in #60539
• Add Microsoft.AspNetCore.OpenApi to the webapiaot template (with an optional flag to disable it) by @sander1095 in #60337
• Update .NET SDK to 10.0.100-preview.3.25122.1 by @github-actions in #60564
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60861
• Quarantine RadioButtonGetsResetAfterSubmittingEnhancedForm test by @captainsafia in #60874
• Update project templates use primary constructors and collection expressions by @Varorbc in https://github.com/dotnet/aspnetcore/pul...

.NET 8.0.15

Release

What's Changed

• [release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60355
• Update branding to 8.0.15 by @vseanreesermsft in #60784
• Add partitioned to cookie for SignalR browser testing by @BrennanConroy in #60728
• [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in #60677
• Merging internal commits for release/8.0 by @vseanreesermsft in #60879

Full Changelog: v8.0.14...v8.0.15

.NET 10.0 Preview 2

What's Changed

• Update branding to preview2 by @wtgodbe in #60057
• Compute dates in DefaultKeyResolver once by @martincostello in #60051
• Fix remarks tag structure in xml documentation comment of IRazorViewE… by @gekka in #60040
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60058
• Better implementation of EventCallback.Equals by @JelleHissink in #53395
• Add public method to QuickGrid to close column options UI by @matthetherington in #57904
• use GeneratedRegex property by @WeihanLi in #58710
• Nested Editor Null Reference Exception. Fix a bug in the HtmlFieldPrefix.cs:23 by @sgarnovsky in #58888
• Dispose CTS when the Stream is claimed or timeout occurs by @clegoz in #59652
• no dispatchGlobalEventToAllElements when no renderer attached by @zuizuihao in #58667
• Update .NET SDK to 10.0.100-alpha.1.25077.1 by @github-actions in #60050
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60062
• Quarantine CanUseAntiforgeryAfterInitialRender by @BrennanConroy in #57767
• Update CODEOWNERS to include doc writers and reduce duplication by @halter73 in #60017
• Add info about Darc web UI by @wtgodbe in #60069
• Clarify meaning of the group name specified in WithGroupName by @mikekistler in #59784
• Add AuthN/AuthZ metrics by @MackinnonBuck in #59557
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60079
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60081
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60046
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60044
• [Infrastructure] Updated npm packages 2025-01-29 by @javiercn in #60090
• [Infrastructure] Fixes the dependency update script for selenium and playwright by @javiercn in #60089
• Update Selenium and Playwright dependencies 2025-01-29 by @javiercn in #60088
• Quarantine SubmitButtonFormactionAttributeOverridesEnhancedFormAction by @captainsafia in #60068
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60032
• Update IIS link in Hosting Bundle by @wtgodbe in #60080
• Add route string syntax for pattern in RouteHandlerServices.Map by @murshex in #59940
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60102
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60101
• Refactor private PushAuthorizationRequest by @marcusber in #59990
• Quarantine test ResponseTests.AppCanHandleClientAbortingConnectionMidResponse. by @shethaadit in #60121
• Quarantine test ControllerEndpointFiltersTest.CanCaptureMethodInfoFromControllerAction. by @shethaadit in #60122
• Use the latest available jdk by @ViktorHofer in #59788
• Revert "Use the latest available jdk" by @wtgodbe in #60143
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60126
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60157
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #60166
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60168
• Quarantine Http2ConnectionTests.IgnoreNewStreamsDuringClosedConnection test. by @shethaadit in #60120
• [main] (deps): Bump src/submodules/googletest from 2b6b042 to b4aae50 by @dependabot in #60135
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #60167
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60173
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #60165
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60177
• Fix SkipOnHelix skipping tests that had ';' at the end of the Queues list by @BrennanConroy in #60183
• Update .NET SDK to 10.0.100-preview.2.25102.3 by @github-actions in #60172
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60130
• Fixed the issue by @mkArtakMSFT in #60096
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60187
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60192
• Readd DiagnosticSource to KestrelServerImpl by @BrennanConroy in #60129
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60201
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60188
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60206
• Update servicing milestones by @wtgodbe in #60220
• NavigateTo does not scroll to the top in internal navigation to same url by @ilonatommy in #60190
• Revert "Revert "Use the latest available jdk"" by @ViktorHofer in #60227
• Quarantine Microsoft.AspNetCore.Server.HttpSys.FunctionalTests.DelegateTests.DelegateAfterReceiverRestart by @DeagleGross in #60142
• Update to MacOS 15 in Helix by @wtgodbe in #60232
• Hot Reload agent improvements by @tmat in #60030
• Fix skip condition for java tests by @wtgodbe in #60240
• Quarantining InteropTests.InteropTests.SpecialStatusMessage by @sebastienros in #60246
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #60214
• Remove signing opt-out for MSIs by @github-actions in #60257
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #60267
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #60270
• Only build MSIs that aren't also built in BuildPass2 during BuildPass1 by @jkoritzinsky in #60268
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #60287
• [main] Update dependencies from dotnet/symreader by @dotnet-maestro in #60290
• Ignore query/fragment in ShouldMatch of NavLink by default but allow overriding ShouldMatch by @ilonatommy in #59903
• React to NuGet package pruning warnings by @ViktorHofer in #60297
• Centralize on one container by @wtgodbe in #60260
• Support multi-version snapshot tests for OpenAPI by @captainsafia in #60278
• Fix condition for BuildAfterTargetingPack by @wtgodbe in #60147
• Update .NET build URLs by @MackinnonBuck in #60265
• Revert "Update .NET build URLs" by @wtgodbe in #60321
• Treating empty string in form post as null for nullable value types by @nvmkpk in #52499
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #60207
• [main] (deps): Bump src/submodules/googletest from b4aae50 to 445e9bd by @dependabot in #60254
• Revert "Revert "Update .NET build URLs"" by @wtgodbe in #60354
• [main...

.NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @vseanreesermsft in #60785
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in #60678
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #60356
• Fix OpenAPI server URLs for Aspire scenarios by @captainsafia in #60673
• Fix self-referential schema handling in collection schemas by @captainsafia in #60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @MackinnonBuck in #60858
• Merging internal commits for release/9.0 by @vseanreesermsft in #60880

Full Changelog: v9.0.3...v9.0.4

.NET 10.0 Preview 1

Release

What's Changed

• Update branding to 10.0 by @wtgodbe in #57340
• Fix CanBindToFormWithFiles by @MackinnonBuck in #57355
• Add RedirectHttpResult.IsLocalUrl() by @martincostello in #57363
• [Blazor] Fix navigation lock tests by @MackinnonBuck in #57372
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #57402
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #57404
• [automated] Merge branch 'release/9.0' => 'main' by @github-actions in #57339
• Propagate PropertyInfo for AsParameters parameters by @jgarciadelanoceda in #57264
• [main] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in #57403
• Add hpack decoding test by @amcasey in #57221
• Add StringSyntax to the RouteAttribute by @IEvangelist in #57369
• [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in #57420
• [automated] Merge branch 'release/9.0' => 'main' by @github-actions in #57434
• Quarantine CanSendAndReceiveUserMessagesUserNameWithPatternIsTreatedAsLiteral by @amcasey in #57414
• Retry POST_Expect100Continue_Get100Continue by @amcasey in #57374
• Add explicit conversion for value-type returning handlers with filters by @captainsafia in #57428
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57366
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57330
• Sync shared code from runtime by @github-actions in #57440
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #57346
• Revert "Sync shared code from runtime (#57440)" by @javiercn in #57444
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #57445
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57442
• [Templates] Generate single test HTTPS Certificate by @javiercn in #57431
• [main] Update dependencies from dotnet/efcore by @dotnet-maestro in #57451
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57458
• [release/9.0] Add references to new 9.0 branches in .yml files by @wtgodbe in #57463
• Fix ResultsOfTGenerated tests by @captainsafia in #57465
• fix: Correct interface filename to match interface name for ISkipStatusCodePagesMetadata by @onurkanbakirci in #57441
• [automated] Merge branch 'release/9.0' => 'main' by @github-actions in #57469
• Add README to Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation package by @lyndaidaii in #54508
• Unquarantine ServerReset_BeforeRequestBody_ClientBodyThrows by @amcasey in #57470
• Fix StreamPool_MultipleStreamsConcurrent_StreamsReturnedToPool by @amcasey in #57473
• Upgrade xunit version to 2.9.0 by @akoeplinger in #57303
• [main] Update dependencies from dotnet/runtime by @dotnet-maestro in #57483
• Fix race in RST_STREAM_IncompleteRequest_AdditionalWindowUpdateFrame_ConnectionAborted by @amcasey in #57450
• Unquarantine Frame_MultipleStreams_RequestsNotFinished_DefaultMaxStreamsPerConnection_EnhanceYourCalmAfterDoubleMaxStreams by @amcasey in #57471
• Middleware/Rewrite: Update XML comments for "AddRedirect" to indicate status code. by @ctolkien in #57224
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #57526
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #57446
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57500
• Quarantine Http3RequestTests.POST_Expect100Continue_Get100Continue by @radical in #57533
• Validate local development scenarios in CI by @MackinnonBuck in #57492
• Remove some tests from helix retry list by @radical in #57539
• [main] Update dependencies from dotnet/winforms by @dotnet-maestro in #57522
• Breaking change fix for IdentityRole.ConcurrencyStamp to initialize with new Guid. by @shethaadit in #57553
• Retry ComponentLifecycleMethodThrowsExceptionTerminatesTheCircuit by @radical in #57552
• Fix BlazorWebJsInitializersTest by @MackinnonBuck in #57548
• Fix InjectedStartup_DefaultApplicationNameIsEntryAssembly by @MackinnonBuck in #57554
• Unquarantine EnhancedFormThatCallsNavigationManagerRefreshDoesNotPushHistoryEntry by @amcasey in #57376
• Provide Microsoft.AspNetCore.Diagnostics.EntityFramework package README by @MackinnonBuck in #57540
• Unquarantine Microsoft.AspNetCore.Components.E2ETest.Tests.EventTest.Cancel_CanTrigger by @MackinnonBuck in #57555
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #57459
• Quarantine two CircuitTests by @SteveSandersonMS in #57589
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #57521
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #57519
• [main] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in #57593
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57547
• bumping ws dependency to fix component vulnerability by @polatengin in #57536
• Provide Microsoft.AspNetCore.Identity.EntityFrameworkCore package README by @MackinnonBuck in #57537
• [release/9.0] Quarantine two CircuitTests by @github-actions in #57606
• Update Selenium version in Versions.props by @sebastienros in #57625
• [main] Update dependencies from dotnet/arcade by @dotnet-maestro in #57629
• Fix duplicate error.type on kestrel.connection.duration by @JamesNK in #57561
• [main] Update dependencies from dotnet/extensions by @dotnet-maestro in #57665
• [automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in #57659
• [Blazor] Invoke inbound activity handlers on circuit initialization by @MackinnonBuck in #57557
• [release/9.0] Fix duplicate error.type on kestrel.connection.duration by @github-actions in #57581
• [automated] Merge branch 'release/9.0' => 'main' by @github-actions in #57620
• [main] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57602
• Provide Microsoft.AspNetCore.Identity.UI package README by @MackinnonBuck in #57580
• [main] Update dependencies from dotnet/winforms by @dotnet-maestro in #57666
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #57668
• Update .NET SDK to 9.0.100-rc.2.24452.3 by @github-actions in #57663
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in #57436
• [Static Assets] Improve development experience by @javiercn in #57671
• [release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in #57527
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in https://...

.NET 9.0.3

Release

What's Changed

• Update branding to 9.0.3 by @vseanreesermsft in #60198
• [release/9.0] Fix branding by @wtgodbe in #60029
• [release/9.0] Update to MacOS 15 in Helix by @github-actions in #60238
• [release/9.0] Revert "Revert "Use the latest available jdk"" by @github-actions in #60229
• [release/9.0] Update HtmlAttributePropertyHelper to correctly follow the MetadataUpdateHandlerAttribute contract by @github-actions in #59908
• [release/9.0] Fix skip condition for java tests by @github-actions in #60242
• [release/9.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @dependabot in #60151
• [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in #60202
• [release/9.0] Redis distributed cache: add HybridCache usage signal by @github-actions in #59886
• [release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in #59952
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #59951
• [release/9.0] Update remnants of azureedge.net by @sebastienros in #60263
• [release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in #60291
• [release/9.0] Centralize on one docker container by @wtgodbe in #60298
• Revert "[release/9.0] Update remnants of azureedge.net" by @wtgodbe in #60323
• Merging internal commits for release/9.0 by @vseanreesermsft in #60317

Full Changelog: v9.0.2...v9.0.3