chore(deps): update all microsoft dependencies to v9 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.AspNetCore.Components.Web (source)	8.0.19 -> 9.0.8
Microsoft.AspNetCore.Components.WebView.Maui	8.0.100 -> 9.0.100
Microsoft.AspNetCore.Components.WebView.Wpf	8.0.100 -> 9.0.100
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	8.0.19 -> 9.0.8
Microsoft.AspNetCore.MiddlewareAnalysis (source)	8.0.19 -> 9.0.8
Microsoft.AspNetCore.Mvc.NewtonsoftJson (source)	8.0.19 -> 9.0.8
Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation (source)	8.0.19 -> 9.0.8
Microsoft.AspNetCore.Mvc.Testing (source)	8.0.19 -> 9.0.8
Microsoft.EntityFrameworkCore (source)	8.0.19 -> 9.0.8
Microsoft.EntityFrameworkCore.InMemory (source)	8.0.19 -> 9.0.8
Microsoft.EntityFrameworkCore.Relational (source)	8.0.19 -> 9.0.8
Microsoft.EntityFrameworkCore.Sqlite (source)	8.0.19 -> 9.0.8
Microsoft.Extensions.DependencyInjection.Abstractions (source)	8.0.2 -> 9.0.8
Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions (source)	8.0.19 -> 9.0.8
Microsoft.Extensions.Hosting.Abstractions (source)	8.0.1 -> 9.0.8
Microsoft.Extensions.Http.Resilience (source)	8.10.0 -> 9.8.0
Microsoft.Extensions.Logging.Abstractions (source)	8.0.3 -> 9.0.8
Microsoft.Extensions.Logging.Console (source)	8.0.1 -> 9.0.8
Microsoft.Extensions.Logging.EventLog (source)	8.0.1 -> 9.0.8
Microsoft.Extensions.Options.ConfigurationExtensions (source)	8.0.0 -> 9.0.8
Microsoft.Extensions.ServiceDiscovery	8.2.2 -> 9.4.2
Microsoft.Win32.SystemEvents (source)	8.0.0 -> 9.0.8
System.DirectoryServices.AccountManagement (source)	8.0.1 -> 9.0.8
System.DirectoryServices.Protocols (source)	5.0.1 -> 9.0.8
System.Drawing.Common	5.0.3 -> 9.0.8
System.Formats.Asn1 (source)	8.0.2 -> 9.0.8
System.Security.Cryptography.Xml (source)	8.0.2 -> 9.0.8
System.Speech (source)	8.0.0 -> 9.0.8
System.Text.Json (source)	8.0.6 -> 9.0.8

---

Release Notes

dotnet/aspnetcore (Microsoft.AspNetCore.Components.Web)

v9.0.8

v9.0.7: .NET 9.0.7

Release

What's Changed

• Update branding to 9.0.7 by @​vseanreesermsft in #​62242
• [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @​dependabot in #​62199
• Fix OpenApiJsonSchema array parsing (#​62051) by @​BrennanConroy in #​62118
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61986
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61945
• [release/9.0] Update Alpine helix references by @​wtgodbe in #​62240
• [Backport 9.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in #​62038
• [release/9.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in #​62248
• [release/9.0] Block test that is failing after switching to latest-chrome by @​github-actions in #​62283
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​62281
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​62282
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​62303

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#​61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#​61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#​61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#​61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#​61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#​61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v9.0.5: .NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @​vseanreesermsft in #​61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in #​61261
• [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in #​61215
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60964
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60902
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @​github-actions in #​60916
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61354
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​61393
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @​wtgodbe in #​60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @​github-actions in #​61374
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61483
• [Identity] Fix Identity UI asset definitions by @​javiercn in #​59100

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

v9.0.4: .NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @​vseanreesermsft in #​60785
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in #​60678
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60356
• Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in #​60673
• Fix self-referential schema handling in collection schemas by @​captainsafia in #​60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @​MackinnonBuck in #​60858
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​60880

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

v9.0.3: .NET 9.0.3

Release

What's Changed

• Update branding to 9.0.3 by @​vseanreesermsft in #​60198
• [release/9.0] Fix branding by @​wtgodbe in #​60029
• [release/9.0] Update to MacOS 15 in Helix by @​github-actions in #​60238
• [release/9.0] Revert "Revert "Use the latest available jdk"" by @​github-actions in #​60229
• [release/9.0] Update HtmlAttributePropertyHelper to correctly follow the MetadataUpdateHandlerAttribute contract by @​github-actions in #​59908
• [release/9.0] Fix skip condition for java tests by @​github-actions in #​60242
• [release/9.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @​dependabot in #​60151
• [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in #​60202
• [release/9.0] Redis distributed cache: add HybridCache usage signal by @​github-actions in #​59886
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59952
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59951
• [release/9.0] Update remnants of azureedge.net by @​sebastienros in #​60263
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60291
• [release/9.0] Centralize on one docker container by @​wtgodbe in #​60298
• Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe in #​60323
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​60317

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

v9.0.2: .NET 9.0.2

Release

What's Changed

• Update branding to 9.0.2 by @​vseanreesermsft in #​59757
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​59267
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59266
• [release/9.0] Update OSX helix queue by @​github-actions in #​59743
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59728
• [release/9.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @​dependabot in #​59679
• [release/9.0] Skip tests on internal queues too by @​github-actions in #​59578
• [release/9.0] Fix loading dotnet user-jwts config by @​github-actions in #​59473
• [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @​github-actions in #​59422
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​59419
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59611
• [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @​github-actions in #​59362
• Migrate off of Fedora 38 by @​v-firzha in #​59613
• [release/9.0] [Blazor WASM standalone] Avoid caching index.html during development by @​MackinnonBuck in #​59348
• [release/9.0] Update to Fedora 41 by @​github-actions in #​59816
• [release/9.0] Don't throw exception for parameters with custom binding source by @​github-actions in #​59533
• [release/9.0] Apply schema transformer to AdditionalProperties by @​github-actions in #​59730
• [release/9.0] Harden schema reference transformer for relative references by @​captainsafia in #​59779
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59847
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59848
• [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @​github-actions in #​59325
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​59871

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

v9.0.1: .NET 9.0.1

Release

What's Changed

• Merging internal commits for release/9.0 by @​vseanreesermsft in #​58900
• [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @​halter73 in #​58573
• Hot Reload agent improvements by @​tmat in #​58333
• [release/9.0] Update dependencies from roslyn by @​wtgodbe in #​59183
• [release/9.0] Add direct reference to System.Drawing.Common in tools by @​wtgodbe in #​59189
• [release/9.0] Harden parsing of [Range] attribute values by @​github-actions in #​59077
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​59143
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59024
• [release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 by @​dependabot in #​59032
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​58589
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​58675
• [release/9.0] Fix SignalR Java POM to include description by @​github-actions in #​58896
• [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @​github-actions in #​58931

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

v9.0.0: .NET 9.0.0

Release

What's Changed

• Update branding to rtm by @​wtgodbe in #​57907
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​57910
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​57922
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​57954
• [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in #​57999
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​58032
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58015
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in #​58033
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58048
• [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @​github-actions in #​57975
• [release/9.0] Update dependencies from dotnet/efcore by @​dotnet-maestro in #​58052
• Fix up OpenAPI schema handling and support concurrent requests by @​captainsafia in #​58024
• [release/9.0] Mark API from 9 as shipped by @​wtgodbe in #​58060
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​58034
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58117
• [release/9.0] Enable TSA/Policheck by @​github-actions in #​58123
• [release/9.0] Add explicit conversion for value-type returning handlers with filters by @​github-actions in #​57967
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​58116
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @​dependabot in #​58183
• [release/9.0] (deps): Bump src/submodules/googletest from 0953a17 to 6dae7eb by @​dependabot in #​58184
• [release/9.0] Change usage of "Country" to "CountryRegion" by @​github-actions in #​58280
• Merge RC2 changes into 9.0 by @​wtgodbe in #​58296
• [release/9.0] Remove ProviderKey from Hosting Bundle by @​github-actions in #​58293
• [release/9.0] [Blazor] Fix template nav menu styling by @​github-actions in #​58277
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​58268
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in #​58159
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​58158
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​58157
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58182
• [release/9.0] Update dependencies from dotnet/efcore by @​dotnet-maestro in #​58306
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58315
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58355
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​58366
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​58344
• [release/9.0] Fix handling for inert route parameters in MVC endpoints for OpenAPI by @​github-actions in #​58311
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in #​58413
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58374
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​58414
• [release/9.0] Fix ModelMetadata for TryParse-parameters in ApiExplorer by @​captainsafia in #​58372
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58421
• [release/9.0] Stabilize branding by @​wtgodbe in #​58444
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58449
• [release/9.0] [Infrastructure] Updated npm packages by @​MackinnonBuck in #​58469
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58462
• [release/9.0] bumping ws dependency to fix component vulnerability by @​github-actions in #​58458
• [release/9.0] Improve dev-certs export error message by @​github-actions in #​58471
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​58475
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​58479
• Add scope for internal npm packages (#​58476) by @​BrennanConroy in #​58511
• [release/9.0] Use MacOS-13 in CI by @​github-actions in #​58546
• [release/9.0] Turn non-stable dependency warning back on by @​wtgodbe in #​58548
• [release/9.0] Update Messagepack dependency by @​github-actions in #​58556
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​58544

Full Changelog: dotnet/aspnetcore@v9.0.0-rc.2.24474.3...v9.0.0

dotnet/maui (Microsoft.AspNetCore.Components.WebView.Maui)

v9.0.100: SR10

Compare Source

What's Changed

This release includes 94 commits with various improvements, bug fixes, and enhancements to the .NET MAUI framework.

.NET MAUI Product Fixes

• Revert "ToolbarItem behavior with ImageSource iOS - fix (#​28833)" by @​PureWeen in #​31112 - Fixes #​30818
• Delete .github/workflows/dotnet-format-pr.yml by @​PureWeen in #​31089
• Update MauiRecyclerView.cs by @​github-actions[bot] in #​31050
• [main] [release/10.0.1xx-preview7] [iOS] Fix extra bottom space in ScrollView when using SafeAreaEdges by @​github-actions[bot] in #​31026
• Added the GraphicsView base images for Windows and mac platforms by @​nivetha-nagalingam in #​31018
• August 11th, inflight/candidate by @​PureWeen in #​31014 - Fixes #​30649, #​30953, #​31011
• Fixed CollectionView does not update layout correctly when ItemsSource changes by @​Dhivya-SF4094 in #​30978 - Fixes #​30953
• Add emulator process kill timeout with ADB restart and comprehensive timeout protection by @​Copilot in #​30941
• [main] [release/9.0.1xx-sr8] Fix signing of fonts with arcade infra by @​github-actions[bot] in #​30938
• Add CornerRadius parameter order notes by @​jfversluis in #​30930 - Fixes #​13136
• Update Provisioning.csproj by @​jfversluis in #​30925
• Fix duplicate app icon resizing by @​jeremy-visionaid in #​30920
• Clean up duplicate path normalization code in HybridWebView by @​jsuarezruiz in #​30873 - Fixes #​23668
• Update CONTRIBUTING.md links by @​jfversluis in #​30867
• Update CODE_OF_CONDUCT.md by @​rmarinho in #​30815
• [Android] Fixed: Image randomly disappears while switching tabs by @​Tamilarasan-Paranthaman in #​30763 - Fixes #​30728
• Fixed GraphicsView event handlers are triggered even when IsEnabled is set to False by @​Dhivya-SF4094 in #​30755 - Fixes #​30649
• [iOS] ScrollView content offset RTL - fix by @​kubaflo in #​30724
• July 21st, 2025 Candidate by @​PureWeen in #​30696 - Fixes #​23050, #​20871, #​29919, #​18430, #​28800, #​29937, #​24734, #​30263, #​30095
• Update bug-report.yml with preview6 by @​PureWeen in #​30639
• Update bug-report.yml 9.0.90 SR9 by @​PureWeen in #​30621
• [main] Fix formatting for dotnet format by @​mattleibow in #​30587
• Pass the launched extra wen resuming auth by @​mattleibow in #​30583 - Fixes #​24692
• Update bug-report.yml 9.0.82 by @​PureWeen in #​30548
• [android] Update gradle.properties by @​rmarinho in #​30543
• [Windows]Fixed the PointerGestureRecognizer behaves incorrectly when multiple windows are open. by @​Ahamed-Ali in #​30537 - Fixes #​27430, #​30536
• Update Visual Studio issue link in config.yml by @​morning4coffe-dev in #​30530
• Local and Copilot dev can generate public apis by @​mattleibow in #​30500
• [iOS, Mac] Fix for Picker title is not displayed again when SelectedIndex is set to -1 by @​HarishwaranVijayakumar in #​30486 - Fixes #​31011, #​30463
• [Android] Fix for Search Handler visual and functional bug in subtabs by @​BagavathiPerumal in #​30467 - Fixes #​21119
• fix extention typo by @​SimonCropp in #​30461
• fix some incorrect casting using as by @​SimonCropp in #​30459
• Fix for TapGestureRecognizer ButtonMask always return 0 by @​HarishwaranVijayakumar in #​30372 - Fixes #​24734
• [Windows] Fixed the Pasted Password Becomes Visible When IsPassword Is Enabled by @​Ahamed-Ali in #​30353 - Fixes #​30263
• Remove .NET 8 specific code for templates by @​jfversluis in #​30342 - Fixes #​28800
• [Catalyst] Adding and Removing ContextMenus currently does not work - fix by @​kubaflo in [#​30307](https://redirect.github.com/d

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 9.x releases. But if you manually upgrade to 9.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

[github-actions]

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.