Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

vseanreesermsft
Copy link
Contributor

No description provided.

Mirroring and others added 14 commits April 2, 2025 19:35
Fixes merge conflict

----
#### AI description  (iteration 1)
#### PR Classification
Merge from public repository to update dependencies and build configurations.

#### PR Summary
This pull request updates various dependencies and build configurations to their latest versions.
- Updated dependency versions in `/eng/Version.Details.xml` and `/eng/Versions.props`.
- Added `HelixProjectArguments` parameter in `/eng/common/templates-official/steps/send-to-helix.yml` and `/eng/common/templates/steps/send-to-helix.yml`.
- Changed Ubuntu version from 20.04 to 22.04 in `/.azure/pipelines/jobs/default-build.yml`.
- Added support for `s390x` architecture in `/eng/common/cross/toolchain.cmake`.
- Updated Nginx version in `/eng/scripts/install-nginx-linux.sh`.
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->
…covery code

# Add empty string check for recovery code

If an empty string gets passed as the recovery code to `UserStoreBase.RedeemCodeAsync(TUser user, string code, CancellationToken ct)`, the method returns `true`, incorrectly indicating a valid recovery code. This PR resolves the issue by validating that the `code` argument is not an empty string.

## Description

The `RedeemCodeAsync()` method already validates that `code` is non-null. This PR:
* Extends the logic in this method to handle the empty string (`""`) case
* Adds tests validating that an exception gets thrown when `code` is `null` or `""`

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix

#### PR Summary
This pull request adds a check for empty strings in recovery codes to prevent null or empty values from being processed.
- `src/Shared/ThrowHelpers/ArgumentNullThrowHelper.cs`: Added `ThrowIfNullOrEmpty` method to validate strings as non-null and non-empty.
- `src/Identity/EntityFrameworkCore/test/EF.Test/UserStoreTest.cs`: Added tests to ensure `RedeemCodeAsync` throws exceptions for null or empty codes.
- `src/Identity/Extensions.Stores/src/UserStoreBase.cs`: Updated `ThrowIfNull` to `ThrowIfNullOrEmpty` for code validation in `RedeemCodeAsync`.
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix

#### PR Summary
This pull request adds a check for empty strings in recovery codes to prevent potential issues.
- `src/Shared/ThrowHelpers/ArgumentNullThrowHelper.cs`: Added `ThrowIfNullOrEmpty` method to throw an exception if a string is null or empty.
- `src/Identity/EntityFrameworkCore/test/EF.Test/UserStoreTest.cs`: Added tests to validate the new empty string check for recovery codes.
- `src/Identity/Extensions.Stores/src/UserStoreBase.cs`: Updated `RedeemCodeAsync` method to use `ThrowIfNullOrEmpty` for the `code` parameter.
…otnet-runtime build 20250415.6

Microsoft.Extensions.HostFactoryResolver.Sources , Microsoft.Internal.Runtime.AspNetCore.Transport , Microsoft.NET.Runtime.MonoAOTCompiler.Task , Microsoft.NET.Runtime.WebAssembly.Sdk , Microsoft.NETCore.App.Ref , Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport , Microsoft.NETCore.Platforms , System.Net.Http.WinHttpHandler , Microsoft.SourceBuild.Intermediate.runtime.linux-x64
 From Version 8.0.15-servicing.25164.13 -> To Version 8.0.16-servicing.25215.6
…otnet-efcore build 20250416.6

dotnet-ef , Microsoft.EntityFrameworkCore , Microsoft.EntityFrameworkCore.Design , Microsoft.EntityFrameworkCore.InMemory , Microsoft.EntityFrameworkCore.Relational , Microsoft.EntityFrameworkCore.Sqlite , Microsoft.EntityFrameworkCore.SqlServer , Microsoft.EntityFrameworkCore.Tools
 From Version 8.0.15 -> To Version 8.0.16
…ng/internal/dotnet-efcore, dnceng/internal/dotnet-runtime

This pull request updates the following dependencies

[marker]: <> (Begin:83131e87-e80d-4d5b-f426-08dbd53b3319)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-runtime
- **Subscription**: [83131e87-e80d-4d5b-f426-08dbd53b3319](https://maestro.dot.net/subscriptions?search=83131e87-e80d-4d5b-f426-08dbd53b3319)
- **Build**: [20250415.6](https://dev.azure.com/dnceng/internal/_build/results?buildId=2687939)
- **Date Produced**: April 16, 2025 11:39:55 PM UTC
- **Commit**: [efd5742bb5dd1677fbbbeb277bcfb5c9025548e5](https://dev.azure.com/dnceng/internal/_git/dotnet-runtime?_a=history&version=GCefd5742bb5dd1677fbbbeb277bcfb5c9025548e5)
- **Branch**: refs/heads/internal/release/8.0

[DependencyUpdate]: <> (Begin)

- **Updates**:
  - **Microsoft.Extensions.HostFactoryResolver.Sources**: [from 8.0.15-servicing.25164.13 to 8.0.16-servicing.25215.6][1]
  - **Microsoft.Internal.Runtime.AspNetCore.Transport**: [from 8.0.15-servicing.25164.13 to 8.0.16-servicing.25215.6][1]
  - **Microsoft.NET.Runtime.MonoAOTCompiler.Task**: [from 8.0.15 to 8.0.16][1]
  - **Microsoft.NET.Runtime.WebAssembly.Sdk**: [from 8.0.15 to 8.0.16][1]
  - **Microsoft.NETCore.App.Ref**: [from 8.0.15 to 8.0.16][1]
  - **Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm**: [from 8.0.15 to 8.0.16][1]
  - **Microsoft.NETCore.App.Runtime.win-x64**: [from 8.0.15 to 8.0.16][1]
  - **Microsoft.NETCore.BrowserDebugHost.Transport**: [from 8.0.15-servicing.25164.13 to 8.0.16-servicing.25215.6][1]
  - **Microsoft.NETCore.Platforms**: [from 8.0.15-servicing.25164.13 to 8.0.16-servicing.25215.6][1]
  - **System.Net.Http.WinHttpHandler**: [from 8.0.2 to 8.0.3][2]
  - **Microsoft.SourceBuild.Intermediate.runtime.linux-x64**: [from 8.0.15-servicing.25164.13 to 8.0.16-servicing.25215.6][1]

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC50c4cb9fc31c47f03eac865d7bc518af173b74b7&targetVersion=GCefd5742bb5dd1677fbbbeb277bcfb5c9025548e5&_a=files
[2]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC05e0f2d2c881def48961d3b83fa11ae84df8e534&targetVersion=GCefd5742bb5dd1677fbbbeb277bcfb5c9025548e5&_a=files

[DependencyUpdate]: <> (End)

[marker]: <> (End:83131e87-e80d-4d5b-f426-08dbd53b3319)

[marker]: <> (Begin:e179a2a7-bc5d-4498-2467-08dbd53ba9ce)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-efcore
- **Subscription**: [e179a2a7-bc5d-4498-2467-08dbd53ba9ce](https://maestro.dot.net/subscriptions?search=e179a2a7-bc5d-4498-2467-08dbd53ba9ce)
- **Build**: [20250416.6](https://dev.azure.com/dnceng/internal/_build/results?buildId=2689219)
- **Date Produced**: April 17, 2025 2:04:04 AM UTC
- **Commit**: [c755c4a6f3df392ac86ce9985f27a8c3e851b3b3](https://dev.azure.com/dnceng/internal/_git/dotnet-efcore?_a=history&version=GCc755c4a6f3df392ac86ce9985f27a8c3e851b3b3)
- **Branch**: refs/heads/internal/release/8.0

[DependencyUpdate]: <> (Begin)

- **Updates**:
  - **dotnet-ef**: [from 8.0.15 to 8.0.16][3]
  - **Microsof...
@vseanreesermsft vseanreesermsft requested review from wtgodbe and a team as code owners May 13, 2025 22:00
@dotnet-policy-service dotnet-policy-service bot added this to the 8.0.x milestone May 13, 2025
This was referenced Oct 1, 2025
microsoft-github-policy-service bot pushed a commit to Azure/bicep that referenced this pull request Oct 5, 2025
#18209)

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Updated
[Microsoft.AspNetCore.Components.WebAssembly](https://github.com/dotnet/aspnetcore)
from 8.0.15 to 8.0.20.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.AspNetCore.Components.WebAssembly's
releases](https://github.com/dotnet/aspnetcore/releases)._

## 8.0.20

[Release](https://github.com/dotnet/core/releases/tag/v8.0.20)

## What's Changed
* Update branding to 8.0.20 by @​vseanreesermsft in
dotnet/aspnetcore#63106
* [release/8.0] (deps): Bump src/submodules/googletest from `c67de11` to
`373af2e` by @​dependabot[bot] in
dotnet/aspnetcore#63038
* [release/8.0] Dispose the certificate chain elements with the chain by
@​MackinnonBuck in dotnet/aspnetcore#62994
* [release/8.0] Update SignalR Redis tests to use internal Docker Hub
mirror by @​github-actions[bot] in
dotnet/aspnetcore#63117
* [release/8.0] [SignalR] Don't throw for message headers in Java client
by @​github-actions[bot] in
dotnet/aspnetcore#62784
* Merging internal commits for release/8.0 by @​vseanreesermsft in
dotnet/aspnetcore#63152
* [release/8.0] Update dependencies from dotnet/extensions by
@​dotnet-maestro[bot] in dotnet/aspnetcore#63188
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/aspnetcore#63189


**Full Changelog**:
dotnet/aspnetcore@v8.0.19...v8.0.20

## 8.0.18

[Release](https://github.com/dotnet/core/releases/tag/v8.0.18)

## What's Changed
* Update branding to 8.0.18 by @​vseanreesermsft in
dotnet/aspnetcore#62241
* [release/8.0] Update Alpine helix references by @​github-actions in
dotnet/aspnetcore#62243
* [release/8.0] (deps): Bump src/submodules/googletest from `04ee1b4` to
`e9092b1` by @​dependabot in
dotnet/aspnetcore#62201
* [8.0] Delete src/arcade directory by @​akoeplinger in
dotnet/aspnetcore#61994
* [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by
@​BrennanConroy in dotnet/aspnetcore#62037
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
dotnet/aspnetcore#62006
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in dotnet/aspnetcore#61944
* [release/8.0] Associate tagged keys with entries so replacements are
not evicted by @​github-actions in
dotnet/aspnetcore#62247
* [release/8.0] Block test that is failing after switching to
latest-chrome by @​github-actions in
dotnet/aspnetcore#62284
* backport(net8.0): http.sys on-demand TLS client hello retrieval by
@​DeagleGross in dotnet/aspnetcore#62290
* Merging internal commits for release/8.0 by @​vseanreesermsft in
dotnet/aspnetcore#62302


**Full Changelog**:
dotnet/aspnetcore@v8.0.17...v8.0.18

## 8.0.17

## Bug Fixes

- **Forwarded Headers Middleware: Ignore X-Forwarded-Headers from
Unknown Proxy**
([#​61623](dotnet/aspnetcore#61623))
The Forwarded Headers Middleware now ignores `X-Forwarded-Headers` sent
from unknown proxies. This change improves security by ensuring that
only trusted proxies can influence the forwarded headers, preventing
potential spoofing or misrouting of requests.

## Dependency Updates

- **Update dependencies from dotnet/arcade**
([#​61832](dotnet/aspnetcore#61832))
This update brings in the latest changes from the dotnet/arcade
repository, ensuring that ASP.NET Core benefits from recent
improvements, bug fixes, and security patches in the shared build
infrastructure.

- **Bump src/submodules/googletest from `52204f7` to `04ee1b4`**
([#​61761](dotnet/aspnetcore#61761))
The GoogleTest submodule has been updated to a newer commit, providing
the latest testing features, bug fixes, and performance improvements for
the project's C++ test components.

## Miscellaneous

- **Update branding to 8.0.17**
([#​61830](dotnet/aspnetcore#61830))
The project version branding has been updated to reflect the new 8.0.17
release, ensuring consistency across build outputs and documentation.

- **Merging internal commits for release/8.0**
([#​61924](dotnet/aspnetcore#61924))
This change merges various internal commits into the release/8.0 branch,
incorporating minor fixes, documentation updates, and other
non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete
details, please review the linked pull requests.

**Full Changelog**:
dotnet/aspnetcore@v8.0.16...v8.0.17

## 8.0.16

[Release](https://github.com/dotnet/core/releases/tag/v8.0.16)

## What's Changed
* Update branding to 8.0.16 by @​vseanreesermsft in
dotnet/aspnetcore#61283
* [release/8.0] (deps): Bump src/submodules/googletest from `24a9e94` to
`52204f7` by @​dependabot in
dotnet/aspnetcore#61260
* [release/8.0] Update dependencies from dotnet/source-build-externals
by @​dotnet-maestro in dotnet/aspnetcore#61281
* [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in
dotnet/aspnetcore#61216
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in dotnet/aspnetcore#60901
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
dotnet/aspnetcore#60926
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in dotnet/aspnetcore#61404
* Merging internal commits for release/8.0 by @​vseanreesermsft in
dotnet/aspnetcore#61398
* [release/8.0] Update dependencies from dotnet/arcade by
@​dotnet-maestro in dotnet/aspnetcore#61411
* Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by
@​wtgodbe in dotnet/aspnetcore#60352
* [release/8.0] Fix preserving messages for stateful reconnect with
backplane by @​BrennanConroy in
dotnet/aspnetcore#61375
* [release/8.0] Update dependencies from
dotnet/source-build-reference-packages by @​dotnet-maestro in
dotnet/aspnetcore#61442
* fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in
dotnet/aspnetcore#61494


**Full Changelog**:
dotnet/aspnetcore@v8.0.15...v8.0.16

Commits viewable in [compare
view](dotnet/aspnetcore@v8.0.15...v8.0.20).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.AspNetCore.Components.WebAssembly&package-manager=nuget&previous-version=8.0.15&new-version=8.0.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/Azure/bicep/pull/18209)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants