Bump Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation from 7.0.12 to 8.0.30 by dependabot[bot] · Pull Request #15 · StevenKitavi/VulnerableWebGoat.NET

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Update branding to 8.0.16 by @vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
[release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
[release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
[release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
fetch TLS client hello message from HTTP.SYS by @BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60355
Update branding to 8.0.15 by @vseanreesermsft in Update branding to 8.0.15 dotnet/aspnetcore#60784
Add partitioned to cookie for SignalR browser testing by @BrennanConroy in Add partitioned to cookie for SignalR browser testing dotnet/aspnetcore#60728
[release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 dotnet/aspnetcore#60677
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Update branding to 8.0.14 by @vseanreesermsft in Update branding to 8.0.14 dotnet/aspnetcore#60197
[release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 dotnet/aspnetcore#60150
[release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in [release/8.0] Fix java discovery in IdentityModel pipeline dotnet/aspnetcore#60075
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#60199
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59922
[release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in [release/8.0] Readd DiagnosticSource to KestrelServerImpl dotnet/aspnetcore#60203
[release/8.0] Update to MacOS 15 in Helix by @github-actions in [release/8.0] Update to MacOS 15 in Helix dotnet/aspnetcore#60239
[release/8.0] Use the latest available JDK by @wtgodbe in [release/8.0] Use the latest available JDK dotnet/aspnetcore#60233
[release/8.0] Fix skip condition for java tests by @github-actions in [release/8.0] Fix skip condition for java tests dotnet/aspnetcore#60243
[release/8.0] Update list of helix queues to skip by @wtgodbe in [release/8.0] Update list of helix queues to skip dotnet/aspnetcore#60231
[release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification dotnet/aspnetcore#57288
[release/8.0] Update remnants of azureedge.net by @sebastienros in [release/8.0] Update remnants of azureedge.net dotnet/aspnetcore#60264
[release/8.0] Centralize on one docker container by @wtgodbe in [release/8.0] Centralize on one docker container dotnet/aspnetcore#60299
Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in Revert "[release/8.0] Update remnants of azureedge.net" dotnet/aspnetcore#60324
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

[release/8.0] Update dotnetbuilds CDN to new endpoint by @mmitche in [release/8.0] Update dotnetbuilds CDN to new endpoint dotnet/aspnetcore#59575
Update branding to 8.0.13 by @vseanreesermsft in Update branding to 8.0.13 dotnet/aspnetcore#59756
[release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @wtgodbe in [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 dotnet/aspnetcore#59295
[release/8.0] Update OSX helix queue by @github-actions in [release/8.0] Update OSX helix queue dotnet/aspnetcore#59742
[release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 dotnet/aspnetcore#59678
[release/8.0] Skip tests on internal queues too by @github-actions in [release/8.0] Skip tests on internal queues too dotnet/aspnetcore#59579
[release/8.0] Fix Kestrel host header mismatch handling when port in Url by @BrennanConroy in [release/8.0] Fix Kestrel host header mismatch handling when port in Url dotnet/aspnetcore#59403
Migrate off of Debian 11 by @v-firzha in Migrate off of Debian 11 dotnet/aspnetcore#59584
[release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @wtgodbe in [release/8.0] Pin to S.T.J 8.0.5 in Analyzers dotnet/aspnetcore#59777
[release/8.0] [Blazor WASM standalone] Avoid caching index.html during development by @github-actions in [release/8.0] [Blazor WASM standalone] Avoid caching index.html during development dotnet/aspnetcore#59349
Update to Fedora 41 by @BrennanConroy in Update to Fedora 41 dotnet/aspnetcore#59817
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#59811
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59825
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59864
[release/8.0] Fix/update docker tags by @wtgodbe in [release/8.0] Fix/update docker tags dotnet/aspnetcore#59867
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#59872

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Update branding to 8.0.12 by @vseanreesermsft in Update branding to 8.0.12 dotnet/aspnetcore#58800
[release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 dotnet/aspnetcore#58741
Add scope for internal npm packages by @BrennanConroy in Add scope for internal npm packages dotnet/aspnetcore#58512
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58477
[release/8.0] Upgrade serialize-javascript transient dependency by @MackinnonBuck in [release/8.0] Upgrade serialize-javascript transient dependency dotnet/aspnetcore#58466
[release/8.0] Update Messagepack dependency by @wtgodbe in [release/8.0] Update Messagepack dependency dotnet/aspnetcore#58676
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58898
[release/8.0] Use MacOS-13 in CI by @wtgodbe in [release/8.0] Use MacOS-13 in CI dotnet/aspnetcore#58549
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59065
[release/8.0] Fix java discovery in helix-matrix by @wtgodbe in [release/8.0] Fix java discovery in helix-matrix dotnet/aspnetcore#59181
[release/8.0] Update dependencies from dotnet/roslyn by @wtgodbe in [release/8.0] Update dependencies from dotnet/roslyn dotnet/aspnetcore#59184
[release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 dotnet/aspnetcore#59033

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Update branding to 8.0.11 by @vseanreesermsft in Update branding to 8.0.11 dotnet/aspnetcore#58198
[release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from ff233bd to 6dae7eb dotnet/aspnetcore#58180
[release/8.0] Add explicit conversion for value-type returning handlers with filters by @captainsafia in [release/8.0] Add explicit conversion for value-type returning handlers with filters dotnet/aspnetcore#57966
[release/8.0] Stop using Mac 11 in Helix by @wtgodbe in [release/8.0] Stop using Mac 11 in Helix dotnet/aspnetcore#58063
[release/8.0] Enable TSA/Policheck by @github-actions in [release/8.0] Enable TSA/Policheck dotnet/aspnetcore#58124
[release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @dependabot in [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 dotnet/aspnetcore#58179
[Backport] Http.Sys: Clean up Request parsing errors by @BrennanConroy in [Backport] Http.Sys: Clean up Request parsing errors dotnet/aspnetcore#57819
[release/8.0] Update the Microsoft.Identity.Web versions used by project templates by @halter73 in [release/8.0] Update the Microsoft.Identity.Web versions used by project templates dotnet/aspnetcore#58229
Add registry search for upgrade policy keys, update dependencies from Arcade by @dotnet-maestro in Add registry search for upgrade policy keys, update dependencies from Arcade dotnet/aspnetcore#58278
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58300
[release/8.0] Remove ProviderKey from Hosting Bundle by @github-actions in [release/8.0] Remove ProviderKey from Hosting Bundle dotnet/aspnetcore#58294
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58352
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58347
[release/8.0] Improve dev-certs export error message by @amcasey in [release/8.0] Improve dev-certs export error message dotnet/aspnetcore#58470
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#58474

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#54744
Update branding to 8.0.5 by @vseanreesermsft in Update branding to 8.0.5 dotnet/aspnetcore#54907
[release/8.0] Convert to 1ES templates by @RussKie in [release/8.0] Convert to 1ES templates dotnet/aspnetcore#54660
Increase logs and delays in CanLaunchPhotinoWebViewAndClickButton by @Eilon in Increase logs and delays in CanLaunchPhotinoWebViewAndClickButton dotnet/aspnetcore#54608
[release/8.0] (deps): Bump src/submodules/googletest from 31993df to 77afe8e by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 31993df to 77afe8e dotnet/aspnetcore#54872
[release/8.0] Reduce helix-matrix timeout to 5 hours by @github-actions in [release/8.0] Reduce helix-matrix timeout to 5 hours dotnet/aspnetcore#54778
[release/8.0] Preserve RemoteAuthenticationContext during trimming if used in JS interop by @halter73 in [release/8.0] Preserve RemoteAuthenticationContext during trimming if used in JS interop dotnet/aspnetcore#54655
[release/8.0] Improve usage of Type.GetType when activating types in data protection by @github-actions in [release/8.0] Improve usage of Type.GetType when activating types in data protection dotnet/aspnetcore#54762
[release/8.0] Fix route analyzer performance with highly concatenated strings by @github-actions in [release/8.0] Fix route analyzer performance with highly concatenated strings dotnet/aspnetcore#54763
[release/8.0] Suppress .ps1 SDL errors by @wtgodbe in [release/8.0] Suppress .ps1 SDL errors dotnet/aspnetcore#54915
[release/8.0] Backport test fixes by @MackinnonBuck in [release/8.0] Backport test fixes dotnet/aspnetcore#54912
[release/8.0] Skip SpotBugs for now by @wtgodbe in [release/8.0] Skip SpotBugs for now dotnet/aspnetcore#54952
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#55034
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#55061
[release/8.0] Update Wix version by @github-actions in [release/8.0] Update Wix version dotnet/aspnetcore#55101

Full Changelog: dotnet/aspnetcore@v8.0.4...v8.0.5

8.0.4

Release

8.0.3

Release

8.0.2

Release

8.0.1

Release

8.0.0

Release

8.0.0-rc.2.23480.2

Release

7.0.20

Release

7.0.19

Release

7.0.18

Release

7.0.17

Release

7.0.16

Release

7.0.15

Release

7.0.14

Release

What's Changed

[release/7.0] Update jquery-validation to v1.19.5 by @github-actions in [release/7.0] Update jquery-validation to v1.19.5 dotnet/aspnetcore#50483
Merging internal commits for release/7.0 by @vseanreesermsft in Merging internal commits for release/7.0 dotnet/aspnetcore#50660
[release/7.0] Fix 6.0 SiteExtension version by @wtgodbe in [release/7.0] Fix 6.0 SiteExtension version dotnet/aspnetcore#50708
Update branding to 7.0.13 by @vseanreesermsft in Update branding to 7.0.13 dotnet/aspnetcore#51116
[release/7.0] (deps): Bump src/submodules/googletest from 8a6feab to e47544a by @dependabot in [release/7.0] (deps): Bump src/submodules/googletest from 8a6feab to e47544a dotnet/aspnetcore#51051
[release/7.0] Fix DragDrop_CanTrigger() flakiness by @MackinnonBuck in [release/7.0] Fix DragDrop_CanTrigger() flakiness dotnet/aspnetcore#51141
[release/7.0] Dispose CTS in HubConnection streaming by @github-actions in [release/7.0] Dispose CTS in HubConnection streaming dotnet/aspnetcore#51138
Merging internal commits for release/7.0 by @vseanreesermsft in Merging internal commits for release/7.0 dotnet/aspnetcore#51266
[release/7.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/7.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#51327
Update branding to 7.0.14 by @vseanreesermsft in Update branding to 7.0.14 dotnet/aspnetcore#51479

Full Changelog: dotnet/aspnetcore@v7.0.13...v7.0.14

7.0.13

Release

Commits viewable in compare view.

… 8.0.29 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation dependency-version: 8.0.29 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-19T13:15:31Z

Looks like Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation is updatable in another way, so this is no longer needed.

dependabotBot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 7, 2026

dependabotBot closed this Aug 19, 2026

dependabotBot changed the title ~~Bump Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation from 7.0.12 to 8.0.29~~Bump Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation from 7.0.12 to 8.0.30Aug 19, 2026

Navigation Menu

Bump Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation from 7.0.12 to 8.0.30 - #15

Bump Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation from 7.0.12 to 8.0.30#15
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/WebGoat.NET/Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation-8.0.29

dependabotBot commented on behalf of githubAug 7, 2026•
edited
Loading

Uh oh!

dependabotBot commented on behalf of githubAug 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabotBot commented on behalf of githubAug 7, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.0.30

What's Changed

New Contributors

8.0.29

What's Changed

8.0.28

What's Changed

8.0.27

What's Changed

8.0.26

What's Changed

8.0.25

What's Changed

8.0.24

8.0.23

What's Changed

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.11

What's Changed

8.0.10

8.0.8

8.0.7

8.0.6

8.0.5

What's Changed

8.0.4

8.0.3

8.0.2

8.0.1

8.0.0

8.0.0-rc.2.23480.2

7.0.20

7.0.19

7.0.18

7.0.17

7.0.16

7.0.15

7.0.14

What's Changed

7.0.13

Uh oh!

dependabotBot commented on behalf of githubAug 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabotBot commented on behalf of githubAug 7, 2026•
edited
Loading