Merging changes from release/10.1 into main #7128
Merged
+55
−51
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Preapre for 10.1 release ---- #### AI description (iteration 1) #### PR Classification This pull request prepares the project for the 10.1 release by updating dependency versions and build configurations for a stable shipping build. #### PR Summary The changes update package versions and streamline build pipelines to ensure a stable, release-ready output: - **`eng/Versions.props`**: Bumped dependency versions from 10.0.0 to 10.0.1 and enabled release stabilization by setting `<StabilizePackageVersion>` to true and `<DotNetFinalVersionKind>` to release. - **`azure-pipelines.yml`**: Removed the code coverage stage and updated dependency triggers to simplify the CI pipeline. - **`NuGet.config`**: Removed the package source mapping section and added a new internal package source reference. - **`eng/pipelines/templates/BuildAndTest.yml` & `Directory.Build.props`**: Added tasks to set up private feed credentials and disabled NU1507 warnings to support internal feeds. <!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->
Preapre for 10.1 release ---- #### AI description (iteration 1) #### PR Classification This pull request prepares the project for the 10.1 release by updating dependency versions and build configurations for a stable shipping build. #### PR Summary The changes update package versions and streamline build pipelines to ensure a stable, release-ready output: - **`eng/Versions.props`**: Bumped dependency versions from 10.0.0 to 10.0.1 and enabled release stabilization by setting `<StabilizePackageVersion>` to true and `<DotNetFinalVersionKind>` to release. - **`azure-pipelines.yml`**: Removed the code coverage stage and updated dependency triggers to simplify the CI pipeline. - **`NuGet.config`**: Removed the package source mapping section and added a new internal package source reference. - **`eng/pipelines/templates/BuildAndTest.yml` & `Directory.Build.props`**: Added tasks to set up private feed credentials and disabled NU1507 warnings to support internal feeds. <!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->
stephentoub
approved these changes
Dec 10, 2025
Contributor
There was a problem hiding this comment.
Pull request overview
This PR merges changes from the release/10.1 branch into main, bringing in servicing updates and security fixes. The changes include updating .NET 10.0 package references to version 10.0.1 (from 10.0.0), addressing security vulnerabilities in transitive dependencies, and updating build tooling.
Key changes:
- Update all .NET 10.0 runtime, AspNetCore, and extensions packages from version 10.0.0 to 10.0.1 (standard servicing release)
- Add explicit package references to fix security vulnerabilities in transitive dependencies (Newtonsoft.Json for net462, System.IO.Packaging 8.0.0)
- Update Microsoft.DotNet.BuildTasks.Templating from beta.25523.111 to beta.25569.105
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| test/Libraries/Microsoft.Extensions.Diagnostics.Probes.Tests/Microsoft.Extensions.Diagnostics.Probes.Tests.csproj | Adds Newtonsoft.Json package reference for net462 target to address vulnerability in transitive dependency |
| test/Libraries/Microsoft.Extensions.DataIngestion.Tests/Microsoft.Extensions.DataIngestion.Tests.csproj | Adds System.IO.Packaging override to fix vulnerability in version 8.0.0 |
| eng/packages/TestOnly.props | Defines System.IO.Packaging version 8.0.1 for test projects |
| eng/Versions.props | Updates all .NET 10.0 package versions from 10.0.0 to 10.0.1 (43 package version properties) and updates build tasks templating version |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This should be merged and not squashed.
Microsoft Reviewers: Open in CodeFlow