Release 2.9.0

NetCoreApplicationTemplate 2.9.0 is a backward-compatible release focused on template validation, repository security, community governance, dependency maintenance, and documentation quality.

Highlights

• Added CI coverage for all six supported authentication and database-provider combinations:
  • Cookie authentication or no authentication
  • SQLite, SQL Server, or no database
• Added option-specific scaffold assertions, locked restores, Release builds, and generated-project tests.
• Added CODE_OF_CONDUCT.md and GOVERNANCE.md.
• Documented repository security controls, publishing boundaries, emergency procedures, and maintainer-transition criteria.
• Updated Microsoft.SourceLink.GitHub to 10.0.303, addressing CVE-2026-62900.
• Updated the pinned .NET SDK container to 10.0.401 and refreshed the ASP.NET Core runtime image digest.
• Improved documentation navigation, ownership, support routing, and canonical project links.
• Corrected template exclusions so repository governance files are not copied into generated projects.
• Aligned OWASP Dependency-Check with the SDK selected by global.json.

Compatibility

This release does not introduce breaking template changes:

• Package ID remains NetCoreApplicationTemplate.
• Short name remains netcoreapp-template.
• Template identity remains AsiBackbone.NetCoreApplicationTemplate.CSharp.
• Supported options and generated runtime behavior remain unchanged.
• Target framework remains .NET 10 (net10.0).
• Existing generated applications are not modified automatically.

Install or update

dotnet new install NetCoreApplicationTemplate::2.9.0

Validation

The release passed:

• 392 repository tests
• 88.37% line coverage
• All security-critical coverage thresholds
• All six template-option build and test combinations
• Windows, Linux, and macOS template smoke tests
• CodeQL, OWASP Dependency-Check, Snyk, dependency review, documentation-link, and version-consistency checks

Full changelog: v2.8.0…v2.9.0