Merge branch 'main' into port-sys-netinfo-openbsd

Author: rzikm

.config/dotnet-tools.json

@@ -15,7 +15,7 @@
       ]
     },
     "microsoft.dotnet.xharness.cli": {
-      "version": "11.0.0-prerelease.26301.2",
+      "version": "11.0.0-prerelease.26319.2",
       "commands": [
         "xharness"
       ]

.github/aw/actions-lock.json

@@ -35,10 +35,10 @@
       "version": "v7.0.1",
       "sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
     },
-    "github/gh-aw-actions/setup@v0.71.5": {
+    "github/gh-aw-actions/setup@v0.74.8": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.71.5",
-      "sha": "b8068426813005612b960b5ab0b8bd2c27142323"
+      "version": "v0.74.8",
+      "sha": "efa55847f72aadb03490d955263ff911bf758700"
     }
   }
 }

.github/copilot-instructions.md

@@ -48,7 +48,7 @@ When NOT running under CCA, guidance for creating commits and pushing changes:
 
 ## AI-Generated Content Disclosure
 
-When posting any content to GitHub under a user's credentials — opening PRs, creating issues, commenting on PRs or issues, posting review comments, or any other public-facing action — and the account is **not** a dedicated "copilot" or "bot" account/app, you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) indicating the content was AI/Copilot-generated.
+When posting any content to GitHub under a user's credentials — opening PRs, creating issues, commenting on PRs or issues, posting review comments, or any other public-facing action — and the account is **not** a dedicated "copilot" or "bot" account/app (e.g., `github-actions[bot]`, `copilot`), you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) at the bottom of the content indicating the content was AI/Copilot-generated.
 
 This applies to all GitHub interactions: PR descriptions, issue bodies, comments, review comments, etc. Exceptions:
 - The account is a recognized bot or Copilot app account (e.g., `github-actions[bot]`, `copilot`), where the AI origin is already apparent from the account identity.

.github/dependabot.yml

@@ -1,14 +1,17 @@
-version: 2
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: daily
-    open-pull-requests-limit: 5
-    labels:
-      - area-codeflow
-    exclude-paths:
-      - ".github/workflows/*.lock.yml"
-    ignore:
-      - dependency-name: "actions/checkout"
-        update-types: ["version-update:semver-patch","version-update:semver-minor"]
+- directory: /
+  exclude-paths:
+  - .github/workflows/*.lock.yml
+  ignore:
+  - dependency-name: "actions/checkout"
+    update-types:
+    - version-update:semver-patch
+    - version-update:semver-minor
+  - dependency-name: "github/gh-aw-actions/**" # Managed by gh aw compile. Version-locked to the gh-aw compiler; do not bump.
+  labels:
+  - area-codeflow
+  open-pull-requests-limit: 5
+  package-ecosystem: github-actions
+  schedule:
+    interval: daily
+version: 2

.github/skills/add-new-jit-ee-api/SKILL.md

@@ -21,6 +21,8 @@ CORINFO_METHOD_HANDLE getUnboxedEntry(CORINFO_METHOD_HANDLE ftn, bool* requiresI
 
 #### 3 — Implementation steps (must be completed in order)
 
+NOTE: When inserting new entries/methods into any of the files below, their position and ordering does not matter. Any suggested placement (e.g. "at the end" or "near similar signatures") is just a convenient default, not a requirement.
+
 1. Update the `ThunkInput.txt` file with the new API definition. Example:
 
 ```diff

.github/skills/api-proposal/SKILL.md

@@ -312,7 +312,7 @@ Present the complete draft to the user for review. Iterate based on feedback bef
 
 ### Phase 5: Publish
 
-> **AI-generated content disclosure:** When posting any content to GitHub (issue body, PR body, comments) under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app — prepend a concise, visible note (e.g. a `> [!NOTE]` alert) indicating the content was AI/Copilot-generated. This applies to the initial proposal, iteration updates, and any follow-up comments posted on the user's behalf. Skip this if the user explicitly asks you to omit it.
+> **AI-generated content disclosure:** When posting any content to GitHub (issue body, PR body, comments) under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app (e.g., `github-actions[bot]`, `copilot`) — add a concise, visible note (e.g. a `> [!NOTE]` alert) at the bottom of the content indicating the content was AI/Copilot-generated. This applies to the initial proposal, iteration updates, and any follow-up comments posted on the user's behalf. Skip this if the user explicitly asks you to omit it.
 
 #### Step 1: Push and capture commit URL
 

.github/skills/code-review/SKILL.md

@@ -105,12 +105,12 @@ When the environment supports launching sub-agents with different models (e.g.,
 
 When presenting the final review (whether as a PR comment or as output to the user), use the following structure. This ensures consistency across reviews and makes the output easy to scan.
 
-> 📝 **AI-generated content disclosure:** When posting review content to GitHub (PR review comments, PR comments) under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app — you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) indicating the content was AI/Copilot-generated. Skip this if the user explicitly asks you to omit it.
+> 📝 **AI-generated content disclosure:** When posting review content to GitHub (PR review comments, PR comments) under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app (e.g., `github-actions[bot]`, `copilot`) — you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) at the bottom of the content indicating the content was AI/Copilot-generated. Skip this if the user explicitly asks you to omit it.
 
 ### Structure
 
 ```
-## 🤖 Copilot Code Review — PR #<number>
+## Copilot Code Review
 
 ### Holistic Assessment
 
@@ -121,6 +121,8 @@ When presenting the final review (whether as a PR comment or as output to the us
 **Summary**: <✅ LGTM / ⚠️ Needs Human Review / ⚠️ Needs Changes / ❌ Reject>. <2-3 sentence summary of the overall verdict and key points. If "Needs Human Review," explicitly state which findings you are uncertain about and what a human reviewer should focus on.>
 
 ---
+<details>
+  <summary>Detailed Findings</summary>
 
 ### Detailed Findings
 
@@ -129,6 +131,11 @@ When presenting the final review (whether as a PR comment or as output to the us
 <Explanation with specifics. Reference code, line numbers, interleavings, etc.>
 
 (Repeat for each finding category. Group related findings under a single heading.)
+
+</details>
+
+<!-- AI disclosure note: place any AI-generated content disclosure below this line. -->
+<!-- Example: > [!NOTE] This review was created by GitHub Copilot. -->
 ```
 
 ### Guidelines

.github/skills/performance-benchmark/SKILL.md

@@ -125,7 +125,7 @@ public class Bench
 
 Post a comment on the PR to trigger EgorBot with your benchmark. The general format is:
 
-> 📝 **AI-generated content disclosure:** When posting benchmark comments to GitHub under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app — you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) indicating the content was AI/Copilot-generated. Skip this if the user explicitly asks you to omit it.
+> 📝 **AI-generated content disclosure:** When posting benchmark comments to GitHub under a user's credentials — i.e., the account is **not** a dedicated "copilot" or "bot" account/app (e.g., `github-actions[bot]`, `copilot`) — you **MUST** include a concise, visible note (e.g. a `> [!NOTE]` alert) at the bottom of the content indicating the content was AI/Copilot-generated. Skip this if the user explicitly asks you to omit it.
 
 @EgorBot [targets] [options] [BenchmarkDotNet args]
 

.github/workflows/aspnetcore-sync.yml

@@ -16,15 +16,15 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout aspnetcore
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # Test this script using changes in a fork
         repository: 'dotnet/aspnetcore'
         path: aspnetcore
         ref: main
         persist-credentials: false
     - name: Checkout runtime
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         # Test this script using changes in a fork
         repository: 'dotnet/runtime'

.github/workflows/bump-chrome-version.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Setup Branch
         run: |
           git config user.name github-actions[bot]