runtime (original) (raw)

and others added 30 commits

November 5, 2025 02:02

CoseMessage's Decode routines say that any failure is a CryptographicException, but some of the validation failures leak out ArgumentException from the validation in CoseHeaderMap.

…-merge-8.0-2026-01-13-1149

There were no OOB packages with <GeneratePackageOnBuild> set to true, so none needed to be reset to false.

Co-authored-by: Miha Zupan mihazupan.zupan1@gmail.com Co-authored-by: Nikola Milosavljevic nikolam@microsoft.com Co-authored-by: dotnet-maestro[bot] <42748379+dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: dotnet-maestro[bot] <dotnet-maestro[bot]@users.noreply.github.com> Co-authored-by: Copilot 198982749+Copilot@users.noreply.github.com Co-authored-by: elinor-fung 47805090+elinor-fung@users.noreply.github.com Co-authored-by: Elinor Fung elfung@microsoft.com Co-authored-by: sbomer 787361+sbomer@users.noreply.github.com Co-authored-by: Sven Boemer sbomer@gmail.com Co-authored-by: Andy Gocke angocke@microsoft.com Co-authored-by: Eric StJohn ericstj@microsoft.com Co-authored-by: Matous Kozak matouskozak@seznam.cz Co-authored-by: Steve Pfister stpfiste@microsoft.com Co-authored-by: Filip Navara filip.navara@gmail.com

Backport of #123450 to release/8.0

/cc @lewing @hoyosjs

Customer Impact

Customer reported
Found internally

[Select one or both of the boxes. Describe how this issue impacts customers, citing the expected and actual behaviors and scope of the issue. If customer-reported, provide the issue number.]

Regression

[If yes, specify when the regression was introduced. Provide the PR or commit if known.]

Testing

[How was the fix verified? How was the issue missed previously? What tests were added?]

Risk

[High/Medium/Low. Justify the indication by mentioning how risks were measured and addressed.]

IMPORTANT: If this backport is for a servicing release, please verify that:

For .NET 8 and .NET 9: The PR target branch is release/X.0-staging, not release/X.0.
For .NET 10+: The PR target branch is release/X.0 (no -staging suffix).

Package authoring no longer needed in .NET 9

IMPORTANT: Starting with .NET 9, you no longer need to edit a NuGet package's csproj to enable building and bump the version. Keep in mind that we still need package authoring in .NET 8 and older versions.

Co-authored-by: Juan Hoyos 19413848+hoyosjs@users.noreply.github.com Co-authored-by: Alexander Köplinger alex.koeplinger@outlook.com

…-merge-8.0-2026-02-10-1100

This was referenced

Feb 12, 2026

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters

[ Show hidden characters]({{ revealButtonHref }})