[main] Source code updates from dotnet/dotnet

[dotnet-maestro]

Note

This is a codeflow update. It may contain both source code changes from
the VMR
as well as dependency updates. Learn more here.

This pull request brings the following source code changes

From https://github.com/dotnet/dotnet

• Subscription: f7901f87-9f24-40d6-9bc1-564863937237
• Build: 20260326.6 (307929)
• Date Produced: March 26, 2026 4:26:20 PM UTC
• Commit: 7af60210ff756fa343088d4dc1b7080c200dea50
• Commit Diff: 491bbab...7af6021
• Branch: main

Updated Dependencies

• From 5.6.0-2.26172.108 to 5.6.0-2.26176.106
  • Microsoft.CodeAnalysis
  • Microsoft.CodeAnalysis.Analyzers
  • Microsoft.CodeAnalysis.CSharp
  • Microsoft.Net.Compilers.Toolset
• From 11.0.100-preview.3.26172.108 to 11.0.100-preview.3.26176.106
  • Microsoft.CodeAnalysis.NetAnalyzers
  • Microsoft.DotNet.ApiCompat.Task
  • Microsoft.NET.Workload.Emscripten.Current.Manifest-11.0.100.Transport
• From 11.0.0-beta.26172.108 to 11.0.0-beta.26176.106
  • Microsoft.DotNet.Arcade.Sdk
  • Microsoft.DotNet.Build.Tasks.Archives
  • Microsoft.DotNet.Build.Tasks.Feed
  • Microsoft.DotNet.Build.Tasks.Installers
  • Microsoft.DotNet.Build.Tasks.Packaging
  • Microsoft.DotNet.Build.Tasks.TargetFramework
  • Microsoft.DotNet.Build.Tasks.Templating
  • Microsoft.DotNet.Build.Tasks.Workloads
  • Microsoft.DotNet.CodeAnalysis
  • Microsoft.DotNet.GenAPI
  • Microsoft.DotNet.GenFacades
  • Microsoft.DotNet.Helix.Sdk
  • Microsoft.DotNet.PackageTesting
  • Microsoft.DotNet.RemoteExecutor
  • Microsoft.DotNet.SharedFramework.Sdk
  • Microsoft.DotNet.XliffTasks
  • Microsoft.DotNet.XUnitExtensions
• From 0.11.5-preview.26172.108 to 0.11.5-preview.26176.106
  • Microsoft.DotNet.Cecil
• From 3.2.2-beta.26172.108 to 3.2.2-beta.26176.106
  • Microsoft.DotNet.XUnitAssert
• From 2.9.3-beta.26172.108 to 2.9.3-beta.26176.106
  • Microsoft.DotNet.XUnitConsoleRunner
• From 11.0.0-preview.3.26172.108 to 11.0.0-preview.3.26176.106
  • Microsoft.NET.Sdk.IL
  • Microsoft.NETCore.App.Ref
  • Microsoft.NETCore.ILAsm
  • runtime.native.System.IO.Ports
  • System.Reflection.Metadata
  • System.Reflection.MetadataLoadContext
  • System.Text.Json
• From 7.6.0-rc.17308 to 7.6.0-rc.17706
  • NuGet.Frameworks
  • NuGet.Packaging
  • NuGet.ProjectModel
  • NuGet.Versioning
• From 3.0.0-preview.3.26172.108 to 3.0.0-preview.3.26176.106
  • System.CommandLine
• From 19.1.0-alpha.1.26159.1 to 19.1.0-alpha.1.26167.1
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.linux-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.osx-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
  • runtime.win-arm64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.win-x64.Microsoft.NETCore.Runtime.JIT.Tools
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Libclang
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Sdk
  • runtime.win-x64.Microsoft.NETCore.Runtime.Mono.LLVM.Tools
• From 11.0.0-alpha.1.26159.2 to 11.0.0-alpha.1.26167.1
  • runtime.linux-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-musl-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-musl-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.linux-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.osx-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.osx-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.win-arm64.Microsoft.NETCore.Runtime.Wasm.Node.Transport
  • runtime.win-x64.Microsoft.NETCore.Runtime.Wasm.Node.Transport

Associated changes in source repos

• dotnet/arcade@853171a...291fa08
• dotnet/aspnetcore@3dafd5c...655f41d
• dotnet/deployment-tools@b94499d...73e2836
• dotnet/efcore@aeda6f5...3445554
• dotnet/fsharp@c80d142...1cd0ca0
• dotnet/msbuild@82c3923...0f7f8dd
• NuGet/NuGet.Client@15db684...5e65b14
• dotnet/razor@42fb27d...d9362b9
• dotnet/roslyn@06a735c...675bbbd
• 443d53e...d343974
• dotnet/sdk@2122e7d...f25f310
• dotnet/source-build-assets@314d773...66ddf29
• dotnet/templating@9419d16...a861186
• dotnet/winforms@6ff69e6...6735caf

Diff the source with this PR branch

darc vmr diff --name-only https://github.com/dotnet/dotnet:7af60210ff756fa343088d4dc1b7080c200dea50..https://github.com/dotnet/runtime:darc-main-6a97f84a-eb38-47a7-8110-86e70e314ed4

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-infrastructure-libraries
See info in area-owners.md if you want to be subscribed.

[github-actions]

🤖 Copilot Code Review — PR #126161

Note

This review was generated by GitHub Copilot.

Holistic Assessment

Motivation: This is an automated backflow PR from dotnet/dotnet (build 307929) updating dependency versions and pulling in infrastructure fixes from the VMR. The version bumps and accompanying changes are a standard part of the dotnet dependency management process.

Approach: The PR follows the standard automated dependency update pattern. Beyond version bumps, it includes three targeted infrastructure changes: CS9368 warning suppressions, a pipeline variable addition, and a filename typo fix — all flowing through from the upstream VMR.

Summary: ✅ LGTM. This is a routine automated dependency update. The non-version-bump changes (CS9368 suppression, pipeline fix, typo correction) are all straightforward infrastructure fixes with clear upstream justification.

---

Detailed Findings

✅ Dependency Version Updates — Standard version bumps

Version updates in eng/Version.Details.props, eng/Version.Details.xml, and global.json are consistent across all three files. Key version transitions:

• Arcade/toolset packages: 26172.108 → 26176.106
• LLVM tools: 26159.1 → 26167.1
• NuGet packages: 7.6.0-rc.17308 → 7.6.0-rc.17706
• Node transport: 26159.2 → 26167.1

All SHA references in Version.Details.xml are updated consistently. No version mismatches detected.

✅ CS9368 Warning Suppression — Compiler warning workaround

Adds <NoWarn>$(NoWarn);CS9368</NoWarn> across 18 csproj files (CoreCLR, NativeAOT, and Mono CoreLib projects, plus various library ref/src projects), linked to dotnet/dotnet#5640. This is necessary to accommodate a new warning introduced in the updated Roslyn compiler toolset (5.6.0-2.26176.106). The suppression is applied per-project rather than globally, which is consistent with how other targeted warning suppressions are handled in this repo.

✅ Pipeline Change — Component governance skip

Adding skipComponentGovernanceDetection: true to eng/common/core-templates/job/source-index-stage1.yml is a reasonable optimization — source indexing jobs don't produce shippable artifacts and don't need component governance scanning.

✅ Filename Typo Fix — es-metatadata.yml → es-metadata.yml

Fixes a double-"a" typo in the filename. Verified the old filename is not referenced from any other file in the repository, so this rename is safe.

Generated by Code Review for issue #126161 · ◷

[dotnet-maestro]

Important

While this PR was open, the source repository has received code changes from this repository (an opposite codeflow merged).
To avoid complex conflicts, the codeflow cannot continue until this PR is closed or merged.

You can continue with one of the following options:

• Ignore this and merge this PR as usual without waiting for the new changes.
  Once merged, Maestro will create a new codeflow PR with the new changes.
• Close this PR and wait for Maestro to open a new one with old and new changes included.
  You will lose any manual changes made in this PR.
  You can also manually trigger the new codeflow right away by running:

  darc trigger-subscriptions --id f7901f87-9f24-40d6-9bc1-564863937237
  

• Force a codeflow into this PR at your own risk if you want the new changes.
  User commits made to this PR might be reverted.

  darc trigger-subscriptions --id f7901f87-9f24-40d6-9bc1-564863937237 --force
  

💡 You may consult the FAQ for more information or tag @dotnet/prodconsvcs for assistance.

[akoeplinger]

/ba-g unrelated infrastructure issue when fetching helix docker containers