main
[breaking] Defer antiforgery/CSRF rejection to form consumers via `IAntiforgeryValidationFeature` (#67082)
Unhandled-security-metadata guard misses AuthorizationPolicy and IAuthorizationRequirementData (#67742)
Treat all ProjectRefs to SharedFx projects as PrivateAssets=all (#64863)