[main] Update dependencies from dotnet/dotnet by dotnet-maestro[bot] · Pull Request #3698 · dotnet/Scaffolding

dotnet-maestro · 2026-03-23T05:01:41Z

This pull request updates the following dependencies

From https://github.com/dotnet/dotnet

Subscription: 4d4e2949-c57e-4fe4-c8df-08dabd6d8c77
Build: 20260415.21 (310648)
Date Produced: April 16, 2026 8:21:55 AM UTC
Commit: ab01524bbb2ef1eea0ffaef161b3ef5686e8f256
Branch: main

Dependency Updates:
- From 11.0.0-preview.2.26108.103 to 11.0.0-preview.4.26215.121
  - Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore
  - Microsoft.AspNetCore.Identity.EntityFrameworkCore
  - Microsoft.AspNetCore.Identity.UI
  - Microsoft.EntityFrameworkCore
  - Microsoft.EntityFrameworkCore.Design
  - Microsoft.EntityFrameworkCore.SqlServer
  - Microsoft.Extensions.Configuration
  - Microsoft.Extensions.Configuration.Abstractions
  - Microsoft.Extensions.Configuration.Binder
  - Microsoft.Extensions.Configuration.CommandLine
  - Microsoft.Extensions.Configuration.EnvironmentVariables
  - Microsoft.Extensions.Configuration.Json
  - Microsoft.Extensions.Configuration.UserSecrets
  - Microsoft.Extensions.DependencyInjection
  - Microsoft.Extensions.DependencyModel
  - Microsoft.Extensions.FileProviders.Embedded
  - Microsoft.Extensions.FileProviders.Physical
  - Microsoft.Extensions.Identity.Stores
  - Microsoft.Extensions.Logging
  - Microsoft.Extensions.Logging.Console
  - Microsoft.Extensions.Logging.Debug
  - Microsoft.Extensions.Options.ConfigurationExtensions
  - System.Text.Json
- From 11.0.0-beta.26108.103 to 11.0.0-beta.26215.121
  - Microsoft.DotNet.Arcade.Sdk

…321.6 On relative base path root Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore , Microsoft.AspNetCore.Identity.EntityFrameworkCore , Microsoft.AspNetCore.Identity.UI , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.Extensions.Configuration , Microsoft.Extensions.Configuration.Abstractions , Microsoft.Extensions.Configuration.Binder , Microsoft.Extensions.Configuration.CommandLine , Microsoft.Extensions.Configuration.EnvironmentVariables , Microsoft.Extensions.Configuration.Json , Microsoft.Extensions.Configuration.UserSecrets , Microsoft.Extensions.DependencyInjection , Microsoft.Extensions.DependencyModel , Microsoft.Extensions.FileProviders.Embedded , Microsoft.Extensions.FileProviders.Physical , Microsoft.Extensions.Identity.Stores , Microsoft.Extensions.Logging , Microsoft.Extensions.Logging.Console , Microsoft.Extensions.Logging.Debug , Microsoft.Extensions.Options.ConfigurationExtensions , System.Text.Json From Version 11.0.0-preview.2.26108.103 -> To Version 11.0.0-preview.3.26171.106 Microsoft.DotNet.Arcade.Sdk From Version 11.0.0-beta.26108.103 -> To Version 11.0.0-beta.26171.106

…329.2 On relative base path root Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore , Microsoft.AspNetCore.Identity.EntityFrameworkCore , Microsoft.AspNetCore.Identity.UI , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.Extensions.Configuration , Microsoft.Extensions.Configuration.Abstractions , Microsoft.Extensions.Configuration.Binder , Microsoft.Extensions.Configuration.CommandLine , Microsoft.Extensions.Configuration.EnvironmentVariables , Microsoft.Extensions.Configuration.Json , Microsoft.Extensions.Configuration.UserSecrets , Microsoft.Extensions.DependencyInjection , Microsoft.Extensions.DependencyModel , Microsoft.Extensions.FileProviders.Embedded , Microsoft.Extensions.FileProviders.Physical , Microsoft.Extensions.Identity.Stores , Microsoft.Extensions.Logging , Microsoft.Extensions.Logging.Console , Microsoft.Extensions.Logging.Debug , Microsoft.Extensions.Options.ConfigurationExtensions , System.Text.Json From Version 11.0.0-preview.2.26108.103 -> To Version 11.0.0-preview.3.26179.102 Microsoft.DotNet.Arcade.Sdk From Version 11.0.0-beta.26108.103 -> To Version 11.0.0-beta.26179.102

…403.8 On relative base path root Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore , Microsoft.AspNetCore.Identity.EntityFrameworkCore , Microsoft.AspNetCore.Identity.UI , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.Extensions.Configuration , Microsoft.Extensions.Configuration.Abstractions , Microsoft.Extensions.Configuration.Binder , Microsoft.Extensions.Configuration.CommandLine , Microsoft.Extensions.Configuration.EnvironmentVariables , Microsoft.Extensions.Configuration.Json , Microsoft.Extensions.Configuration.UserSecrets , Microsoft.Extensions.DependencyInjection , Microsoft.Extensions.DependencyModel , Microsoft.Extensions.FileProviders.Embedded , Microsoft.Extensions.FileProviders.Physical , Microsoft.Extensions.Identity.Stores , Microsoft.Extensions.Logging , Microsoft.Extensions.Logging.Console , Microsoft.Extensions.Logging.Debug , Microsoft.Extensions.Options.ConfigurationExtensions , System.Text.Json From Version 11.0.0-preview.2.26108.103 -> To Version 11.0.0-preview.4.26203.108 Microsoft.DotNet.Arcade.Sdk From Version 11.0.0-beta.26108.103 -> To Version 11.0.0-beta.26203.108

…410.11 On relative base path root Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore , Microsoft.AspNetCore.Identity.EntityFrameworkCore , Microsoft.AspNetCore.Identity.UI , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.Extensions.Configuration , Microsoft.Extensions.Configuration.Abstractions , Microsoft.Extensions.Configuration.Binder , Microsoft.Extensions.Configuration.CommandLine , Microsoft.Extensions.Configuration.EnvironmentVariables , Microsoft.Extensions.Configuration.Json , Microsoft.Extensions.Configuration.UserSecrets , Microsoft.Extensions.DependencyInjection , Microsoft.Extensions.DependencyModel , Microsoft.Extensions.FileProviders.Embedded , Microsoft.Extensions.FileProviders.Physical , Microsoft.Extensions.Identity.Stores , Microsoft.Extensions.Logging , Microsoft.Extensions.Logging.Console , Microsoft.Extensions.Logging.Debug , Microsoft.Extensions.Options.ConfigurationExtensions , System.Text.Json From Version 11.0.0-preview.2.26108.103 -> To Version 11.0.0-preview.4.26210.111 Microsoft.DotNet.Arcade.Sdk From Version 11.0.0-beta.26108.103 -> To Version 11.0.0-beta.26210.111

haileymck · 2026-04-16T21:55:23Z

@copilot fix this build and ensure that CI is passing with the correct updates.

haileymck · 2026-04-16T21:56:06Z

@copilot fix this build and ensure that CI passes here

haileymck · 2026-04-16T21:57:59Z

@copilot fix this PR and ensure that CI passes

Copilot

Pull request overview

This PR updates the repo’s .NET/Arcade dependency versions from dotnet/dotnet and brings in a set of eng/common infrastructure changes (VMR sync behavior, toolset acquisition, pipeline templates, and additional platform support).

Changes:

Update .NET SDK/tooling versions (global.json + Arcade SDK + EF/Extensions dependency versions).
Revise eng/common tooling and pipeline templates (toolset extraction pathing, publish artifact changes, new Renovate pipeline/job templates, VMR sync fallback behavior).
Remove legacy SDL/Guardian helper scripts and add OpenBSD-related cross/rootfs support.

Reviewed changes

Copilot reviewed 45 out of 45 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
global.json	Bumps .NET SDK and Arcade SDK versions.
eng/common/vmr-sync.sh	Adds repo mapping resolution + reset fallback for failed forwardflow.
eng/common/vmr-sync.ps1	Same as vmr-sync.sh for PowerShell.
eng/common/tools.sh	Adds warn-not-as-error support; reworks Arcade toolset acquisition/extraction; adds DotNet wrapper; MSBuild switches updates.
eng/common/tools.ps1	Mirrors tools.sh changes; adds DotNet wrapper; adjusts VS discovery; updates toolset extraction and task project lookup.
eng/common/templates/vmr-build-pr.yml	Pins dotnet/dotnet resource `ref` to main.
eng/common/templates/variables/pool-providers.yml	Updates commented pool image example.
eng/common/templates/steps/vmr-sync.yml	Removes steps that extracted/check out VMR SHA from Version.Details.xml.
eng/common/templates/jobs/codeql-build.yml	Removes shim template (deleted).
eng/common/templates/job/job.yml	Switches log publishing step to pipeline artifacts.
eng/common/templates-official/variables/sdl-variables.yml	Removes SDL variables template (deleted).
eng/common/templates-official/variables/pool-providers.yml	Updates commented pool image example.
eng/common/templates-official/jobs/codeql-build.yml	Removes shim template (deleted).
eng/common/templates-official/job/job.yml	Updates official job log publishing to pipeline artifacts naming/inputs.
eng/common/template-guidance.md	Updates guidance to reflect removed shims/SDL variables.
eng/common/sdl/trim-assets-version.ps1	Removes legacy SDL helper (deleted).
eng/common/sdl/sdl.ps1	Removes legacy Guardian installer helper (deleted).
eng/common/sdl/run-sdl.ps1	Removes legacy Guardian run helper (deleted).
eng/common/sdl/packages.config	Removes Guardian CLI package pin (deleted).
eng/common/sdl/init-sdl.ps1	Removes legacy Guardian init helper (deleted).
eng/common/sdl/extract-artifact-packages.ps1	Removes legacy artifact extraction helper (deleted).
eng/common/sdl/extract-artifact-archives.ps1	Removes legacy archive extraction helper (deleted).
eng/common/sdl/execute-all-sdl-tools.ps1	Removes legacy SDL orchestration script (deleted).
eng/common/sdl/configure-sdl-tool.ps1	Removes legacy SDL tool configuration script (deleted).
eng/common/sdl/NuGet.config	Removes SDL-specific NuGet.config (deleted).
eng/common/sdk-task.sh	Updates help text to reference “toolset” layout.
eng/common/sdk-task.ps1	Updates help text to reference “toolset” layout.
eng/common/renovate.env	Adds shared environment configuration for Renovate self-hosted runs.
eng/common/native/install-dependencies.sh	Updates Alpine package list (adds llvm, lldb-dev, etc.).
eng/common/native/init-distro-rid.sh	Adds OpenBSD RID computation.
eng/common/cross/toolchain.cmake	Adds OpenBSD detection + target triple wiring.
eng/common/cross/build-rootfs.sh	Adds OpenBSD sysroot building support (sets/packages + download/install logic).
eng/common/core-templates/steps/publish-logs.yml	Adjusts redaction token list (removes MaestroAccessToken).
eng/common/core-templates/steps/install-microbuild.yml	Removes explicit `@self` on nested template references.
eng/common/core-templates/stages/renovate.yml	Adds Renovate stage template for 1ES official pipelines.
eng/common/core-templates/post-build/post-build.yml	Removes SDLValidationParameters handling; updates pools/images; changes signing validation invocation.
eng/common/core-templates/jobs/codeql-build.yml	Removes CodeQL jobs template (deleted).
eng/common/core-templates/job/source-index-stage1.yml	Sets `skipComponentGovernanceDetection=true`; updates pool images.
eng/common/core-templates/job/renovate.yml	Adds Renovate job template (container-based).
eng/common/core-templates/job/publish-build-assets.yml	Updates pool images.
eng/common/core-templates/job/onelocbuild.yml	Updates pool images.
eng/common/build.sh	Adds `--warnNotAsError` option wiring.
eng/common/build.ps1	Adds `-warnNotAsError` parameter + usage text.
eng/Versions.props	Updates EF/Extensions/System.Text.Json version properties.
eng/Version.Details.xml	Updates dependency versions and SHA to the new dotnet/dotnet commit.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-16T22:02:05Z

+  if ($null -eq $vsInfo -or $vsInfo.Count -eq 0) {
+    throw "No instance of Visual Studio meeting the requirements specified was found. Requirements: $($args -join ' ')"
+    return $null
+  }


LocateVisualStudio now throws when no VS instance is found, but the surrounding build logic expects it to return $null so it can fall back to downloading/using XCopy MSBuild (see InitializeVisualStudioMSBuild calling LocateVisualStudio and then choosing between VS vs xcopy). Throwing here will prevent that fallback and can break builds on machines without VS. Either restore the previous behavior (return $null) or update callers/docs to match the new contract.

Copilot · 2026-04-16T22:02:05Z

 stages:
- ${{ if or(eq( parameters.enableNugetValidation, 'true'), eq(parameters.enableSigningValidation, 'true'), eq(parameters.enableSourceLinkValidation, 'true'), eq(parameters.SDLValidationParameters.enable, 'true')) }}:
+- ${{ if or(eq( parameters.enableNugetValidation, 'true'), eq(parameters.enableSigningValidation, 'true'), eq(parameters.enableSourceLinkValidation, 'true')) }}:
  - stage: Validate


The Validate stage condition no longer includes parameters.SDLValidationParameters.enable, and the SDLValidationParameters parameter block was removed from this template. This is a breaking change for existing pipelines that pass SDLValidationParameters into templates-official/post-build/post-build.yml (e.g., this repo’s azure-pipelines.yml). Either keep/continue forwarding the parameter (even if ignored) or update downstream pipelines accordingly in the same PR to avoid template expansion failures/behavior changes.

Copilot · 2026-04-16T22:02:06Z

+
+# Renovate version used in the container image tag.
+- name: renovateVersion
+  default: 43


Renovate version is defined in two places with different defaults: parameters.renovateVersion defaults to 43 (container tag), while the job template hard-codes a renovateVersion variable as '42'. This can drift and make it unclear which Renovate version is actually running. Consider using a single source of truth (e.g., pass the stage parameter into the job and set the variable from it, or remove one of them).

Suggested change

default: 43

default: 42

Copilot · 2026-04-16T22:02:06Z

+version_details_path=$(cd "$scriptroot/.."; pwd -P)/Version.Details.xml
+repo_name=$(grep -m 1 '<Source ' "$version_details_path" | sed -n 's/.*Mapping="\([^"]*\)".*/\1/p')
+if [[ -z "$repo_name" ]]; then
+  fail "Failed to resolve repo mapping from $version_details_path"
+  exit 1
+fi


Version.Details.xml in this repo (eng/Version.Details.xml) uses the Arcade dependency schema (<Dependencies><Dependency ...>), so grepping for <Source ... Mapping="..."> will always return empty and cause vmr-sync to fail before running darc. Resolve the repo mapping from the VMR’s Version.Details.xml (likely under $vmr_dir) or derive it from another reliable source (e.g., a script parameter / repo remote), and update version_details_path accordingly (it currently points to eng/Version.Details.xml).

Copilot · 2026-04-16T22:02:06Z

+$versionDetailsPath = Resolve-Path (Join-Path $PSScriptRoot '..\Version.Details.xml') | Select-Object -ExpandProperty Path
+[xml]$versionDetails = Get-Content -Path $versionDetailsPath
+$repoName = $versionDetails.SelectSingleNode('//Source').Mapping
+if (-not $repoName) {
+  Fail "Failed to resolve repo mapping from $versionDetailsPath"
+  exit 1
+}


This script reads ..\Version.Details.xml (eng/Version.Details.xml) and expects a //Source node with a Mapping attribute, but that file in this repo uses the <Dependencies><Dependency ...> format and contains no <Source> element. As a result $repoName will be empty and the sync will exit early. Consider reading the VMR’s Version.Details.xml under $vmrDir (or accept the mapping as a parameter) instead of the repo’s eng/Version.Details.xml.

haileymck · 2026-04-16T23:06:57Z

@copilot update this PR and ensure that CI is passing and baby sit this PR until it is ready to go

…ild versions Agent-Logs-Url: https://github.com/dotnet/Scaffolding/sessions/a1a56373-84f0-411b-aab7-c5bf59802f81 Co-authored-by: haileymck <111816896+haileymck@users.noreply.github.com>

Copilot · 2026-04-16T23:19:02Z

@copilot fix this PR and ensure that CI passes

Fixed the CI build failures in commit 669d919. The root cause was that Microsoft.EntityFrameworkCore.Design 11.0.0-preview.4.26210.111 requires newer transitive dependencies than what was centrally managed in eng/Versions.props:

Humanizer.Core: 3.0.1 → 3.0.10
Microsoft.CodeAnalysis*: 5.0.0 → 5.3.0
Microsoft.Build* (Framework/Tasks.Core/Utilities.Core): 18.3.3 → 18.4.0

@copilot update this PR and ensure that CI is passing and baby sit this PR until it is ready to go

Updated eng/Versions.props in commit 669d919 to fix the NU1109/NU1608 package downgrade errors. The CI should now pass with the correct version bumps for the transitive dependencies required by EF Core 11.0.0-preview.4.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

dev.azure.com
- Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

…415.21 On relative base path root Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore , Microsoft.AspNetCore.Identity.EntityFrameworkCore , Microsoft.AspNetCore.Identity.UI , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.Extensions.Configuration , Microsoft.Extensions.Configuration.Abstractions , Microsoft.Extensions.Configuration.Binder , Microsoft.Extensions.Configuration.CommandLine , Microsoft.Extensions.Configuration.EnvironmentVariables , Microsoft.Extensions.Configuration.Json , Microsoft.Extensions.Configuration.UserSecrets , Microsoft.Extensions.DependencyInjection , Microsoft.Extensions.DependencyModel , Microsoft.Extensions.FileProviders.Embedded , Microsoft.Extensions.FileProviders.Physical , Microsoft.Extensions.Identity.Stores , Microsoft.Extensions.Logging , Microsoft.Extensions.Logging.Console , Microsoft.Extensions.Logging.Debug , Microsoft.Extensions.Options.ConfigurationExtensions , System.Text.Json From Version 11.0.0-preview.2.26108.103 -> To Version 11.0.0-preview.4.26215.121 Microsoft.DotNet.Arcade.Sdk From Version 11.0.0-beta.26108.103 -> To Version 11.0.0-beta.26215.121

dotnet-maestro bot added 4 commits March 23, 2026 05:01

haileymck requested a review from Copilot April 16, 2026 21:55

Copilot AI requested a review from haileymck April 16, 2026 21:55

Copilot stopped work on behalf of haileymck due to an error April 16, 2026 21:55
Before you can use Copilot cloud agent, you need to pick a "Usage billed to" option in your Copilot settings. Update your settings at https://github.com/settings/copilot/features, then try again.

Copilot started reviewing on behalf of haileymck April 16, 2026 21:55 View session

Copilot stopped work on behalf of haileymck due to an error April 16, 2026 21:56
Before you can use Copilot cloud agent, you need to pick a "Usage billed to" option in your Copilot settings. Update your settings at https://github.com/settings/copilot/features, then try again.

Copilot started work on behalf of haileymck April 16, 2026 21:57 View session

Copilot finished work on behalf of haileymck April 16, 2026 21:58

Copilot AI reviewed Apr 16, 2026

View reviewed changes

Copilot started work on behalf of haileymck April 16, 2026 23:07 View session

Fix package downgrade errors: bump Humanizer.Core, CodeAnalysis, MSBu…

669d919

…ild versions Agent-Logs-Url: https://github.com/dotnet/Scaffolding/sessions/a1a56373-84f0-411b-aab7-c5bf59802f81 Co-authored-by: haileymck <111816896+haileymck@users.noreply.github.com>

Copilot finished work on behalf of haileymck April 16, 2026 23:19

haileymck and others added 3 commits April 17, 2026 10:28

update packages

e88e67a

update packages

4159e75

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[main] Update dependencies from dotnet/dotnet#3698

[main] Update dependencies from dotnet/dotnet#3698
dotnet-maestro[bot] wants to merge 8 commits intomainfrom
darc-main-0bec6964-c9d1-46ed-89b9-4afb67be4cab

dotnet-maestro bot commented Mar 23, 2026 •

edited

Loading

Uh oh!

haileymck commented Apr 16, 2026

Uh oh!

haileymck commented Apr 16, 2026 •

edited

Loading

Uh oh!

haileymck commented Apr 16, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

haileymck commented Apr 16, 2026 •

edited

Loading

Uh oh!

Copilot AI commented Apr 16, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dotnet-maestro bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

From https://github.com/dotnet/dotnet

Uh oh!

haileymck commented Apr 16, 2026

Uh oh!

haileymck commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

haileymck commented Apr 16, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

haileymck commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dotnet-maestro bot commented Mar 23, 2026 •

edited

Loading

haileymck commented Apr 16, 2026 •

edited

Loading

haileymck commented Apr 16, 2026 •

edited

Loading

Copilot AI commented Apr 16, 2026 •

edited

Loading