.NET 8.0 RC2

[rbhanda]

Release Notes

Please report any issues you find with .NET 8 RC 2, either responding to this issue, creating a new issue or creating a new issue in one of the following repos:

• dotnet/aspnetcore - for ASP.NET Core questions
• dotnet/efcore - for Entity Framework Core questions
• dotnet/sdk - for CLI tools and questions
• dotnet/runtime - for runtime, API, or installer issues and questions
• dotnet/winforms - for WinForms issues
• dotnet/wpf - for WPF issues
• nuget/home - for NuGet questions and issues

Known Issues

If there are any issues with this release we will track them here and check issues off as they're resolved. See the linked issues for details on progress and resolution details.

[thabaum]

MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack

Check spelling for "Kestral" as it should be "Kestrel" and is mentioned twice referred to as Kestral on these two lines:

Include a protocols setting for each Kestral endpoint to limit your application to HTTP1.1

and the following line:

For .NET and Kestral, servers without HTTP/2 enabled are not affected. To limit your application to HTTP1.1 via config, edit your appsettings.json to include a protocols setting for each endpoint:

[mairaw]

Thank you for your feedback @thabaum. I'm reaching out to some folks internally to help with that.

[eduherminio]

According to #8439 (comment) this piece code was needed for RC1 to make configuration binder source generator work, but it would no longer be needed for RC2 and onwards.

<Features>$(Features);InterceptorsPreview</Features>

However, (even without removing it), I'm facing with this build error:

Error: /Users/runner/work/my_repo_dir/Microsoft.Extensions.Configuration.Binder.SourceGeneration/Microsoft.Extensions.Configuration.Binder.SourceGeneration.ConfigurationBindingGenerator/BindingExtensions.g.cs(35,10): error CS9137:
The 'interceptors' experimental feature is not enabled in this namespace.
Add '<InterceptorsPreviewNamespaces>$(InterceptorsPreviewNamespaces);Microsoft.Extensions.Configuration.Binder.SourceGeneration</InterceptorsPreviewNamespaces>' to your project. [/Users/runner/work/my_repo_dir/MyProject.csproj]

If I'm not wrong, that isn't mentioned in the package README or the RC2 article announcement.

Is that the intended behavior? If that's the case, it's probably worth mentioning in the places mentioned above.

cc/ @layomia

PD: following the instructions does fix the issue.

[WeihanLi]

@eduherminio it was changed to use InterceptorsPreviewNamespaces, and it mentions in the documentation https://github.com/dotnet/roslyn/blob/main/docs/features/interceptors.md#user-opt-in

think the change does worth mention

see:

• https://github.com/dotnet/roslyn/blob/main/docs/features/interceptors.md#user-opt-in
• Replace InterceptorsPreview with InterceptorsPreviewNamespaces=global roslyn#69848
• Move to granular opt-in for interceptors preview sdk#35024

[mairaw]

@thabaum the CVE page was updated. Thanks for letting us know!

[rbhanda]

Closing in favor of #8904