[main] Source code updates from dotnet/dotnet

[dotnet-maestro]

Note

This is a codeflow update. It may contain both source code changes from
the VMR
as well as dependency updates. Learn more here.

This pull request brings the following source code changes

From https://github.com/dotnet/dotnet

• Subscription: f7901f87-9f24-40d6-9bc1-564863937237
• Build: 20260326.6 (307929)
• Date Produced: March 26, 2026 4:26:20 PM UTC
• Commit: 7af60210ff756fa343088d4dc1b7080c200dea50
• Commit Diff: 491bbab...7af6021
• Branch: main

Updated Dependencies

• From 5.6.0-2.26172.108 to 5.6.0-2.26176.106
  • Microsoft.CodeAnalysis
  • Microsoft.CodeAnalysis.Analyzers
  • Microsoft.CodeAnalysis.CSharp
  • Microsoft.Net.Compilers.Toolset
• From 11.0.100-preview.3.26172.108 to 11.0.100-preview.3.26176.106
  • Microsoft.CodeAnalysis.NetAnalyzers
  • Microsoft.DotNet.ApiCompat.Task
  • Microsoft.NET.Workload.Emscripten.Current.Manifest-11.0.100.Transport
• From 11.0.0-beta.26172.108 to 11.0.0-beta.26176.106
  • Microsoft.DotNet.Arcade.Sdk
  • Microsoft.DotNet.Build.Tasks.Archives
  • Microsoft.DotNet.Build.Tasks.Feed
  • Microsoft.DotNet.Build.Tasks.Installers
  • Microsoft.DotNet.Build.Tasks.Packaging
  • Microsoft.DotNet.Build.Tasks.TargetFramework
  • Microsoft.DotNet.Build.Tasks.Templating
  • Microsoft.DotNet.Build.Tasks.Workloads
  • Microsoft.DotNet.CodeAnalysis
  • Microsoft.DotNet.GenAPI
  • Microsoft.DotNet.GenFacades
  • Microsoft.DotNet.Helix.Sdk
  • Microsoft.DotNet.PackageTesting
  • Microsoft.DotNet.RemoteExecutor
  • Microsoft.DotNet.SharedFramework.Sdk
  • Microsoft.DotNet.XliffTasks
  • Microsoft.DotNet.XUnitExtensions
• From 0.11.5-preview.26172.108 to 0.11.5-preview.26176.106
  • Microsoft.DotNet.Cecil
• From 3.2.2-beta.26172.108 to 3.2.2-beta.26176.106
  • Microsoft.DotNet.XUnitAssert
• From 2.9.3-beta.26172.108 to 2.9.3-beta.26176.106
  • Microsoft.DotNet.XUnitConsoleRunner
• From 11.0.0-preview.3.26172.108 to 11.0.0-preview.3.26176.106
  • Microsoft.NET.Sdk.IL
  • Microsoft.NETCore.App.Ref
  • Microsoft.NETCore.ILAsm
  • runtime.native.System.IO.Ports
  • System.Reflection.Metadata
  • System.Reflection.MetadataLoadContext
  • System.Text.Json
• From 7.6.0-rc.17308 to 7.6.0-rc.17706
  • NuGet.Frameworks
  • NuGet.Packaging
  • NuGet.ProjectModel
  • NuGet.Versioning
• From 3.0.0-preview.3.26172.108 to 3.0.0-preview.3.26176.106
  • System.CommandLine
• From 19.1.0-alpha.1.26159.1 to 19.1.0-alpha.1.26167.1
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.osx-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.win-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.win-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
• From 11.0.0-alpha.1.26159.2 to 11.0.0-alpha.1.26167.1
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.win-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.win-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport

Associated changes in source repos

• dotnet/arcade@853171a...291fa08
• dotnet/aspnetcore@3dafd5c...655f41d
• dotnet/deployment-tools@b94499d...73e2836
• dotnet/efcore@aeda6f5...3445554
• dotnet/fsharp@c80d142...1cd0ca0
• dotnet/msbuild@82c3923...0f7f8dd
• NuGet/NuGet.Client@15db684...5e65b14
• dotnet/razor@42fb27d...d9362b9
• dotnet/roslyn@06a735c...675bbbd
• 443d53e...d343974
• dotnet/sdk@2122e7d...f25f310
• dotnet/source-build-reference-packages@314d773...66ddf29
• dotnet/templating@9419d16...a861186
• dotnet/winforms@6ff69e6...6735caf

Diff the source with this PR branch

darc vmr diff --name-only https://github.com/dotnet/dotnet:7af60210ff756fa343088d4dc1b7080c200dea50..https://github.com/dotnet/runtime:darc-main-6a97f84a-eb38-47a7-8110-86e70e314ed4

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-infrastructure-libraries
See info in area-owners.md if you want to be subscribed.

[github-actions]

🤖 Copilot Code Review — PR #126161

Note

This review was generated by GitHub Copilot.

Holistic Assessment

Motivation: This is an automated backflow PR from dotnet/dotnet (build 307929) updating dependency versions and pulling in infrastructure fixes from the VMR. The version bumps and accompanying changes are a standard part of the dotnet dependency management process.

Approach: The PR follows the standard automated dependency update pattern. Beyond version bumps, it includes three targeted infrastructure changes: CS9368 warning suppressions, a pipeline variable addition, and a filename typo fix — all flowing through from the upstream VMR.

Summary: ✅ LGTM. This is a routine automated dependency update. The non-version-bump changes (CS9368 suppression, pipeline fix, typo correction) are all straightforward infrastructure fixes with clear upstream justification.

---

Detailed Findings

✅ Dependency Version Updates — Standard version bumps

Version updates in eng/Version.Details.props, eng/Version.Details.xml, and global.json are consistent across all three files. Key version transitions:

• Arcade/toolset packages: 26172.108 → 26176.106
• LLVM tools: 26159.1 → 26167.1
• NuGet packages: 7.6.0-rc.17308 → 7.6.0-rc.17706
• Node transport: 26159.2 → 26167.1

All SHA references in Version.Details.xml are updated consistently. No version mismatches detected.

✅ CS9368 Warning Suppression — Compiler warning workaround

Adds <NoWarn>$(NoWarn);CS9368</NoWarn> across 18 csproj files (CoreCLR, NativeAOT, and Mono CoreLib projects, plus various library ref/src projects), linked to dotnet/dotnet#5640. This is necessary to accommodate a new warning introduced in the updated Roslyn compiler toolset (5.6.0-2.26176.106). The suppression is applied per-project rather than globally, which is consistent with how other targeted warning suppressions are handled in this repo.

✅ Pipeline Change — Component governance skip

Adding skipComponentGovernanceDetection: true to eng/common/core-templates/job/source-index-stage1.yml is a reasonable optimization — source indexing jobs don't produce shippable artifacts and don't need component governance scanning.

✅ Filename Typo Fix — es-metatadata.yml → es-metadata.yml

Fixes a double-"a" typo in the filename. Verified the old filename is not referenced from any other file in the repository, so this rename is safe.

Generated by Code Review for issue #126161 · ◷