main
Restore use of ParameterDefaultValue in ActivatorUtilities (#40529)
Use file scoped namespaces (#38076)
[main] Source code updates from dotnet/dotnet (#65006)
Replace PlatformID with OperatingSystem API for OS detection (#65094)
Fix bounds check in DiagnosticPoolBlock (#62180)
Enable throw helper analyzers (#45954)
feat: "Spanify" DataProtector with IBufferWriter<byte> (#64262)
Fix typos in code. (#67428)
Ensuring deleted cookies are recognized by the browser by ensuring the MaxAge within CookieOptions is set to null. (#55169)
Add complex form binding support to RDF (#48790)
Annotate SignalR client for native AOT (#56079)
Fix help option formatting to use comma-space separator instead of pipe (#63284)
[Blazor] Support persisting component state on enhanced navigation (#62824)
Improve debug views of dictionaries (#52867)
Add OTEL semantic conventions tags to HTTP server activity (#64851)
Reduce unnecessary unsafe usage in AdaptiveCapacityDictionary (#64617)
[Blazor] Add Blazor WebAssembly Service Defaults template (#64807)
Fixup a few dataprotection and antiforgery edge cases (#66508)
Attempted fix on flaky counter tests (#59892)
Add SocketsHttpHandler logging to gRPC interop tests (#41199)
Add TLS channel binding token access to `ITlsConnectionFeature` (#67436)
[blazor][wasm] Remove legacy interop (#52732)
Tweak configuration of JsonSerializerOptions (#49875)
Unify HTTP token parsing code (#46580)
Update identity metrics with feedback (#62982)
[SignalR] Avoid unobserved tasks in the .NET client (#43545)
Annotate SignalR server for native AOT (#56460)
Fix ClientErrorMapping 500 title to match RFC 9110 (#65590)
Update Identity Components in Blazor project template (#51134)
[release/8.0] [Blazor] Support injecting keyed services with `[Inject]` (#50561)
Remove unnecessary pragmas (#55810)
Refactor : Enable CA2249
Add rule to seal internal and private types (#41457)
Use char overloads (#56531)
Reject ASCII control characters in cookie auth return URLs (#66876)
Upgrade xunit version to 2.9.0 (#57303)
[Mvc] Avoid exception in route analyzer (#63033)
Add localization support to Microsoft.Extensions.Validation (#66646)
Update https://docs.microsoft.com to https://learn.microsoft.com (#55970)
Use inbox `TaskToAsyncResult` class and remove `TaskToApm`. (#68139)
Propagate trace parent to SignalR hub invocations (#57049)
Fix metadata typos (#62771)
[main] Source code updates from dotnet/dotnet (#67309)
Merged PR 49095: [internal/release/9.0] Add empty string check for recovery code (#61926)
Rename Microsoft.Aspnetcore.Testing to Microsoft.AspNetCore.InternalTesting (#51713)
Use C# 12's collection expressions (#51378)
Avoid O(N) string[] allocations for N header values in GetCommaSeparatedValues (#54808)
Antiforgery perf improvements (includes new DataProtection API usage) (#64751)
Implement Cross-Site Request Forgery Algorithm based on Fetch Metadata headers (#66585)
Sync shared code from runtime
Clean up remaining `net461` references (#37731)
Add support for anti-forgery middleware (#49233)
[breaking] Defer antiforgery/CSRF rejection to form consumers via `IAntiforgeryValidationFeature` (#67082)
Require CancellationToken for client results (and fix cancel closing connection) (#43249)
Implement IConnectionEndPointFeature in Kestrel, HttpSys, and IIS (#62162)
Add generic variants of ProducesProblem and ProducesValidationProblem (#56810)
Improve default Identity email wording for recipients who didn't initiate the action (#66747)
Fixed the issue. Will be adding the tests as a separate commit. (#60096)
Use HashCode helper class instead of package (#46513)
Update .NET SDK to 10.0.100-preview.4.25180.3 (#61244)
Use SearchValues/ContainsAny/span helpers in more places (#67018)
Add alt-used to known headers (#43012)
Add trimming annotations to DotNetObjectReference (#41610)
Defer implicit middlewares to run after Routing (#67307)
[Blazor] Deprecate UseWebAssemblyDebugging and remove it from Blazor templates (#67861)
Fix InvalidCastException when retrieving attributes for PropertyAsParameterInfo (#67284)
Harden SignalR `negotiateVersion` parsing. (#67908)
Find and Replace Apache License -> MIT
Fix UsePathBase with WAB (#42876)
[AOT] Enable analysis and annotate Http.Results (#46082)
Treat QUERY as a safe HTTP method for antiforgery and CSRF protection (#67839)
Throw BadHttpRequestException when decompressed data exceeds request body size limit (#61812)
Support loading OIDC options from configuration (#42679)
Favor project-specific build scripts over top-level script (#29918)
Migrate to single sln file + slnf files (#23581)