chore(deps): update dotnet monorepo

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.AspNetCore.Razor.Design (source)	2.2.0 -> 2.3.0
Microsoft.AspNetCore.WebUtilities (source)	9.0.3 -> 9.0.6
Microsoft.AspNetCore.WebUtilities (source)	8.0.12 -> 8.0.17
Microsoft.AspNetCore.WebUtilities (source)	8.0.14 -> 8.0.17
Microsoft.CodeAnalysis.CSharp	4.1.0 -> 4.14.0
Microsoft.CodeAnalysis.CSharp	3.8.0 -> 3.11.0
Microsoft.CodeAnalysis.CSharp.Workspaces	4.11.0 -> 4.14.0
Microsoft.CodeAnalysis.CSharp.Workspaces	4.12.0-3.24523.4 -> 4.14.0
Microsoft.Extensions.Http (source)	9.0.3 -> 9.0.6
System.Collections.Immutable (source)	9.0.3 -> 9.0.6
System.Formats.Asn1 (source)	9.0.3 -> 9.0.6
System.Net.Http.Json (source)	9.0.3 -> 9.0.6
System.Text.Json (source)	9.0.3 -> 9.0.6

---

Release Notes

dotnet/aspnetcore (Microsoft.AspNetCore.WebUtilities)

v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#​61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#​61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#​61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#​61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#​61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#​61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v9.0.5: .NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/61261
• [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in https://github.com/dotnet/aspnetcore/pull/61215
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60964
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60902
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @​github-actions in https://github.com/dotnet/aspnetcore/pull/60916
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61354
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/61393
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @​wtgodbe in https://github.com/dotnet/aspnetcore/pull/60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @​github-actions in https://github.com/dotnet/aspnetcore/pull/61374
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/61483
• [Identity] Fix Identity UI asset definitions by @​javiercn in https://github.com/dotnet/aspnetcore/pull/59100

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

v9.0.4: .NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60785
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in https://github.com/dotnet/aspnetcore/pull/60678
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/aspnetcore/pull/60356
• Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/60673
• Fix self-referential schema handling in collection schemas by @​captainsafia in https://github.com/dotnet/aspnetcore/pull/60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @​MackinnonBuck in https://github.com/dotnet/aspnetcore/pull/60858
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/aspnetcore/pull/60880

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

dotnet/roslyn (Microsoft.CodeAnalysis.CSharp)

v3.9.0: .NET 5.0.4

Release

dotnet/runtime (Microsoft.Extensions.Http)

v9.0.6

v9.0.5: .NET 9.0.5

Release

What's Changed

• [release/9.0-staging] [HttpStress] [SslStress] Run stress tests nightly against staging branches by @​github-actions in https://github.com/dotnet/runtime/pull/113476
• [release/9.0] [browser][http] mute JS exceptions about network errors + HEAD verb by @​github-actions in https://github.com/dotnet/runtime/pull/113261
• [release/9.0-staging] Fix double dispose of GCHandle in BrowserWebSocket by @​github-actions in https://github.com/dotnet/runtime/pull/113541
• [release/9.0-staging] [HttpStress] Fix Linux HttpStress build by @​antonfirsov in https://github.com/dotnet/runtime/pull/113617
• [release/9.0-staging] Use minipal_getcpufeatures to detect for AVX (#​113032) by @​cshung in https://github.com/dotnet/runtime/pull/113489
• [release/9.0-staging] Backport "Use FLS detach callback as a thread termination notification. Another try." by @​VSadov in https://github.com/dotnet/runtime/pull/113055
• [release/9.0-staging] [Json] Avoid writing to PipeWriter if IAsyncEnumerable throws before first item by @​github-actions in https://github.com/dotnet/runtime/pull/113699
• [browser] Remove experimental args from NodeJS WBT runner (part2) by @​maraf in https://github.com/dotnet/runtime/pull/113753
• [9.0] Update openssl dependency for openSUSE by @​NikolaMilosavljevic in https://github.com/dotnet/runtime/pull/113548
• [release/9.0-staging] JIT: avoid fp divide by zero in profile synthesis by @​github-actions in https://github.com/dotnet/runtime/pull/113418
• [release/9.0-staging] Do not substitute return values of constrained calls by @​github-actions in https://github.com/dotnet/runtime/pull/113462
• [release/9.0] Test failure - SendAsync_RequestVersion20_ResponseVersion20 by @​github-actions in https://github.com/dotnet/runtime/pull/113649
• [release/9.0-staging] [mono] Missing memory barrier leads to crash in multi-threaded scenarios by @​github-actions in https://github.com/dotnet/runtime/pull/113740
• [release/9.0] Move DAC signing identity to PME by @​hoyosjs in https://github.com/dotnet/runtime/pull/114031
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113460
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113483
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113516
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113461
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113561
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113595
• [release/9.0-staging] Update dependencies from dotnet/roslyn by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113821
• [9.0] libnethost no LTCG by @​jkoritzinsky in https://github.com/dotnet/runtime/pull/113893
• [9.0] Bring back yml necessary change types in label checkers by @​carlossanlop in https://github.com/dotnet/runtime/pull/114166
• [release/9.0-staging] [Apple mobile] Enable trimming on build machines to match ILLink features by @​kotlarmilos in https://github.com/dotnet/runtime/pull/113466
• [release/9.0-staging] Fix VS div-by-0 in DacEnumerableHashTable code by @​github-actions in https://github.com/dotnet/runtime/pull/113892
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113517
• [release/9.0-staging] Update dependencies from dotnet/roslyn-analyzers by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113822
• [release/9.0-staging] Update dependencies from dotnet/sdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113596
• Update branding to 9.0.5 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/114162
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/113449
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114185
• [release/9.0-staging] Revert disabling of tests for HTTP servers by @​github-actions in https://github.com/dotnet/runtime/pull/114207
• [release/9.0-staging] Fix build break with cmake 4.0 by @​github-actions in https://github.com/dotnet/runtime/pull/114278
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/114224
• [release/9.0-staging] Fix inadvertently upgrading compiler warnings to errors by @​akoeplinger in https://github.com/dotnet/runtime/pull/114331
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/114396
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/114415
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114299
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114473
• [release/9.0-staging][mono][hotreload]Adjust row_size and size_bitfield from the baseline based on the delta sizes by @​thaystg in https://github.com/dotnet/runtime/pull/114119
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114296
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114318
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114364
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114474
• [release/9.0] Fix edge cases in Tarjan GC bridge (Android) by @​filipnavara in https://github.com/dotnet/runtime/pull/114391
• [release/9.0-staging] [debugger] Fix debugging a x86 app in mixed mode by @​github-actions in https://github.com/dotnet/runtime/pull/114077
• [release/9.0-staging] [infra][apple-mobile] Migrate MacCatalyst and iOS/tvOS simulator jobs to osx.14.arm64.open and osx.15.amd64.open queues by @​github-actions in https://github.com/dotnet/runtime/pull/114617
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114615
• [release/9.0-staging] Update dependencies from dotnet/sdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114613
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114589
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114254
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114576
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/114612
• [release/9.0-staging] Moved a static field initialization from Thread to ProcessorIdCache by @​github-actions in https://github.com/dotnet/runtime/pull/114273
• Revert "[release/9.0] Fix edge cases in Tarjan GC bridge (Android)" by @​steveisok in https://github.com/dotnet/runtime/pull/114641
• [manual] Merge release/9.0-staging to release/9.0 by @​jozkee in https://github.com/dotnet/runtime/pull/114662

Full Changelog: dotnet/runtime@v9.0.4...v9.0.5

v9.0.4: .NET 9.0.4

Release

What's Changed

• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/112424
• [release/9.0] Fix init race in mono_class_try_get_[shortname]_class. by @​github-actions in https://github.com/dotnet/runtime/pull/112296
• [release/9.0] Internal monitor impl not using coop mutex causing deadlocks on Android. by @​github-actions in https://github.com/dotnet/runtime/pull/112373
• [release/9.0-staging][iOS][globalization] Fix IndexOf on empty strings on iOS to return -1 by @​matouskozak in https://github.com/dotnet/runtime/pull/112012
• [release/9.0] Skip NegotiateStream_StreamToStream_Authentication_EmptyCredentials_Fails on WinSrv 2025 by @​rzikm in https://github.com/dotnet/runtime/pull/112473
• [release/9.0-staging] Fix case-insensitive JSON deserialization of enum member names by @​github-actions in https://github.com/dotnet/runtime/pull/112057
• [release/9.0-staging] Move generation of SuggestedBindingRedirects.targets to inner build by @​github-actions in https://github.com/dotnet/runtime/pull/112487
• [release/9.0-staging] Remove unneeded DiagnosticSource content by @​github-actions in https://github.com/dotnet/runtime/pull/112708
• [release/9.0-staging] Fix LINQ handling of iterator.Take(...).Last(...) by @​stephentoub in https://github.com/dotnet/runtime/pull/112714
• [release/9.0-staging] [mono][mini] Disable inlining if we encounter class initialization failure by @​github-actions in https://github.com/dotnet/runtime/pull/112005
• [release/9.0-staging] [mono][interp] Fix execution of delegate invoke wrapper with interpreter by @​github-actions in https://github.com/dotnet/runtime/pull/111700
• [release/9.0-staging] Include PDB for all TfmRuntimeSpecificPackageFile by @​github-actions in https://github.com/dotnet/runtime/pull/112139
• [release/9.0-staging] Add support for LDAPTLS_CACERTDIR \ TrustedCertificateDirectory by @​steveharter in https://github.com/dotnet/runtime/pull/112531
• [release/9.0-staging] Fix getting resource when ResourceResolve returns assembly with resource that is an assembly ref by @​elinor-fung in https://github.com/dotnet/runtime/pull/112893
• [release/9.0-staging] JIT: fix local assertion prop error for partial local comparisons by @​github-actions in https://github.com/dotnet/runtime/pull/112539
• [9.0] Make CPU utilization checks in the thread pool configurable by @​kouvel in https://github.com/dotnet/runtime/pull/112791
• [release/9.0-staging] Backport "Ship CoreCLR packages in servicing releases" by @​amanasifkhalid in https://github.com/dotnet/runtime/pull/113026
• [release/9.0-staging] Fix TensorPrimitives.MultiplyAddEstimate for integers by @​github-actions in https://github.com/dotnet/runtime/pull/113094
• [release/9.0-staging] Use invariant culture when formatting transfer capture in regex source generator (#​113081) by @​stephentoub in https://github.com/dotnet/runtime/pull/113150
• [release/9.0-staging] NativeAOT/Arm64: Do not overwrite gcinfo tracking registers for TLS by @​github-actions in https://github.com/dotnet/runtime/pull/112549
• Update branding to 9.0.4 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/113226
• [9.0] Make counting of IO completion work items more precise on Windows by @​kouvel in https://github.com/dotnet/runtime/pull/112794
• [release/9.0-staging] Remove --no-lock brew flag by @​akoeplinger in https://github.com/dotnet/runtime/pull/113281
• [release/9.0-staging] [QUIC] Update MsQuic library version by @​github-actions in https://github.com/dotnet/runtime/pull/113205
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/113264
• [release/9.0-staging] Update dependencies from dotnet/roslyn-analyzers by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112836
• [release/9.0-staging] Update dependencies from dotnet/roslyn by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112835
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112627
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112552
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112522
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112515
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112468
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112514
• [release/9.0-staging] Update dependencies from dotnet/hotreload-utils by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112394
• [release/9.0] Fix BigInteger.Rotate{Left,Right} for backport by @​github-actions in https://github.com/dotnet/runtime/pull/112991
• [release/9.0-staging] [mono] Switch generic instance cache back to GHashTable; improve ginst hash function by @​github-actions in https://github.com/dotnet/runtime/pull/113316
• [release/9.0-staging] Update dependencies from dotnet/sdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/112628
• [manual] Merge release/9.0-staging into release/9.0 by @​carlossanlop in https://github.com/dotnet/runtime/pull/113350
• [release/9.0-staging] Fix HttpHandlerDiagnosticListenerTests.TestW3CHeadersTraceStateAndCorrelationContext by @​github-actions in https://github.com/dotnet/runtime/pull/112882
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/113389
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/113333
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/113447
• [release/9.0] fix SBOM issues for runtime by @​haruna99 in https://github.com/dotnet/runtime/pull/113463

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.