Release Tag 10.0.7 is missing for dotnet/runtime

[jekula]

Looking for a download link for sources of dotnet/runtime v10.0.7 solely

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.

[hez2010]

I think it's because 10.0.7 is an out-of-band release aming for fixing a CVE in asp.net core, which is not a part of .net runtime. So there's no tag for it in this repo due to no changes in the runtime since 10.0.6.

[snakefoot]

Yes is is a possible theory, but 10.0.5 was also out-of-band release without changes in dotnet-runtime. More likely there is something broken in the Microsoft-release-logic. Maybe @rbhanda knows the answer?

[jekula]

I think it's because 10.0.7 is an out-of-band release aming for fixing a CVE in asp.net core, which is not a part of .net runtime. So there's no tag for it in this repo due to no changes in the runtime since 10.0.6.

Same Tag is missing at aspnetcore

[hez2010]

I think it's because 10.0.7 is an out-of-band release aming for fixing a CVE in asp.net core, which is not a part of .net runtime. So there's no tag for it in this repo due to no changes in the runtime since 10.0.6.

Same Tag is missing at aspnetcore

You can find the tag at https://github.com/dotnet/dotnet

[jekula]

I think it's because 10.0.7 is an out-of-band release aming for fixing a CVE in asp.net core, which is not a part of .net runtime. So there's no tag for it in this repo due to no changes in the runtime since 10.0.6.

Same Tag is missing at aspnetcore

You can find the tag at https://github.com/dotnet/dotnet
Thanks I know, anyhow our legal department requires source bundle to be verified usually as a public available download link.
Providing the entire dotnet/dotnet sources would overload them unnecessarily so we need to extract the required parts before submitting it.
Is there a reason for not providing the release tags on dotnet/runtime and dotnet/aspnetcore or did it happen accidently?

Note: the release tags in dotnet/dotnet seems to be a little bit ambiguous as there are two:

• .NET 10.0.7 / 10.0.203 with source code published last week excluding sources for runtime and aspnetcore
• .NET 10.0.7 / 10.0.107 with source code published two weeks ago including sources for runtime and aspnetcore