Backport #125488: Add curl retry flags to wasi-sdk Linux download

Backport of #125488 to release/10.0.

On release/10.0, the wasi-sdk curl download is in src/mono/mono.proj
(not eng/AcquireWasiSdk.targets as on main).

Add --silent --show-error --fail --retry 3 --retry-delay 5 flags
to prevent transient download failures from breaking the build.

Author: Copilot

.CodeQL.yml

@@ -1,5 +1,5 @@
 # This file configures CodeQL runs and TSA bug autofiling. For more information, see:
-# https://eng.ms/docs/coreai/devdiv/one-engineering-system-1es/1es-docs/codeql/troubleshooting/bugs/generated-library-code
+# https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/troubleshooting/bugs/generated-library-code
 # (Access restricted to Microsoft employees only.)
 
 path_classifiers:
@@ -8,26 +8,9 @@ path_classifiers:
     # be excluded from analysis. If there is a problem at the API layer, the analysis
     # engine will detect the problem in the src/ implementations anyway.
     - src/libraries/**/ref/*
-  cmake_internal:
     # exclude artifacts/obj/**/CMakeFiles/**/CheckFunctionExists.c since CMake 
     # generates random directory names causing creation of duplicate issues 
     # related to obsolete encryption algorithm used. Note that CheckFuntionExists 
     # files are generated as part of build-time checks in CMake and are not compiled
     # or linked into any product binaries.
     - artifacts/obj/**/CMakeFiles/**/CheckFunctionExists.c
-
-queries:
-  #
-  # REPO-WIDE RULE EXCLUSIONS
-  #
-  - exclude:
-      queryid:
-        # [Serializable] doesn't imply that a type is *safe* to [de]serialize; only that it is
-        # *possible* to do so. The rules below incorrectly assume we're trying to make a safety
-        # guarantee.
-        - "cs/dangerous-deserialization-routine"
-        - "cs/deserialization-of-pointer-type"
-        # We already have CodeQL + Roslyn rules running to detect usage of dangerous deserialization
-        # APIs. Those call sites are well-reviewed and don't benefit from extra alerts regarding
-        # the possibility of loading malicious code.
-        - "cs/deserialization-unexpected-subtypes"

.azuredevops/dependabot.yml

@@ -1,19 +1,25 @@
 {
-  "tool": "Credential Scanner",
-  "suppressions": [
-    {
-      "_justification": "Suppression approved. Private key for testing purpose.",
-      "file": [
-        "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/DSA/DSAKeyPemTests.cs",
-        "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/EC/ECKeyPemTests.cs",
-        "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/RSA/RSAKeyPemTests.cs",
-        "src/libraries/Common/tests/System/Security/Cryptography/X509Certificates/TestData.cs",
-        "src/libraries/System.Security.Cryptography/tests/X509Certificates/X509Certificate2PemTests.cs"
-      ],
-      "placeholder": [
-        "-----BEGIN PRIVATE KEY-----",
-        "-----BEGIN * PRIVATE KEY-----"
-      ]
-    }
-  ]
+    "tool": "Credential Scanner",
+    "suppressions": [
+        {
+            "_justification": "Suppression approved. Private key for testing purpose.",
+            "file": [
+                "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/DSA/DSAKeyPemTests.cs",
+                "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/EC/ECKeyPemTests.cs",
+                "src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/RSA/RSAKeyPemTests.cs",
+                "src/libraries/Common/tests/System/Security/Cryptography/X509Certificates/TestData.cs",
+                "src/tests/FunctionalTests/Android/Device_Emulator/gRPC/grpc-dotnet/testassets/Certs/InteropTests/server1.key"
+            ],
+            "placeholder": [
+                "-----BEGIN PRIVATE KEY-----",
+                "-----BEGIN * PRIVATE KEY-----"
+            ]
+        },
+        {
+            "_justification": "Suppression approved. Private key for testing purpose.",
+            "file": [
+                "src/tests/FunctionalTests/Android/Device_Emulator/gRPC/grpc-dotnet/testassets/Certs/InteropTests/server1.pfx"
+            ]
+        }
+    ]
 }

.config/CredScanSuppressions.json

@@ -15,7 +15,7 @@
       ]
     },
     "microsoft.dotnet.xharness.cli": {
-      "version": "11.0.0-prerelease.26160.2",
+      "version": "11.0.0-prerelease.26117.1",
       "commands": [
         "xharness"
       ]

.config/dotnet-tools.json

@@ -29,8 +29,7 @@
 		"vscode": {
 			// Add the IDs of extensions you want installed when the container is created.
 			"extensions": [
-				"ms-dotnettools.csharp",
-				"ms-dotnettools.csdevkit"
+				"ms-dotnettools.csharp"
 			],
 			"settings": {
 				// Loading projects on demand is better for larger codebases
@@ -55,7 +54,8 @@
 	// This allows developers to just use 'dotnet build' on the command-line, and the local dotnet version will be used.
     // Add the Android SDK tooling and emulator to the path.
 	"remoteEnv": {
-		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:ANDROID_SDK_ROOT}/cmdline-tools/cmdline-tools/bin:${containerEnv:ANDROID_SDK_ROOT}/emulator:${containerEnv:ANDROID_SDK_ROOT}/platform-tools:${containerEnv:PATH}"
+		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:ANDROID_SDK_ROOT}/cmdline-tools/cmdline-tools/bin:${containerEnv:ANDROID_SDK_ROOT}/emulator:${containerEnv:ANDROID_SDK_ROOT}/platform-tools:${containerEnv:PATH}",
+		"DOTNET_MULTILEVEL_LOOKUP": "0"
 	},
 
 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.

.devcontainer/android/devcontainer.json

@@ -9,14 +9,11 @@
 	},
 	"hostRequirements": {
 		"cpus": 4,
-		"memory": "8gb",
-		"storage": "64gb"
+		"memory": "8gb"
 	},
 
 	"features": {
-		"ghcr.io/devcontainers/features/github-cli:1": {},
-		"ghcr.io/devcontainers/features/sshd:1": {},
-		"ghcr.io/devcontainers/features/copilot-cli:1": {}
+		"ghcr.io/devcontainers/features/github-cli:1": {}
 	},
 
 	// Configure tool-specific properties.
@@ -25,8 +22,7 @@
 		"vscode": {
 			// Add the IDs of extensions you want installed when the container is created.
 			"extensions": [
-				"ms-dotnettools.csharp",
-				"ms-dotnettools.csdevkit"
+				"ms-dotnettools.csharp"
 			],
 			"settings": {
 				// Loading projects on demand is better for larger codebases
@@ -42,7 +38,8 @@
 	// Add the locally installed dotnet to the path to ensure that it is activated
 	// This allows developers to just use 'dotnet build' on the command-line, and the local dotnet version will be used.
 	"remoteEnv": {
-		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:PATH}"
+		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:PATH}",
+		"DOTNET_MULTILEVEL_LOOKUP": "0"
 	},
 
 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.

.devcontainer/devcontainer.json

@@ -9,8 +9,7 @@
 	},
 	"hostRequirements": {
 		"cpus": 4,
-		"memory": "8gb",
-		"storage": "64gb"
+		"memory": "8gb"
 	},
 
 	"features": {
@@ -23,8 +22,7 @@
 		"vscode": {
 			// Add the IDs of extensions you want installed when the container is created.
 			"extensions": [
-				"ms-dotnettools.csharp",
-				"ms-dotnettools.csdevkit"
+				"ms-dotnettools.csharp"
 			],
 			"settings": {
 				// Loading projects on demand is better for larger codebases
@@ -46,7 +44,8 @@
 	// Add the locally installed dotnet to the path to ensure that it is activated
 	// This allows developers to just use 'dotnet build' on the command-line, and the local dotnet version will be used.
 	"remoteEnv": {
-		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:PATH}"
+		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerEnv:PATH}",
+		"DOTNET_MULTILEVEL_LOOKUP": "0"
 	},
 
 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.

.devcontainer/libraries/devcontainer.json

@@ -23,8 +23,7 @@
 		"vscode": {
 			// Add the IDs of extensions you want installed when the container is created.
 			"extensions": [
-				"ms-dotnettools.csharp",
-				"ms-dotnettools.csdevkit"
+				"ms-dotnettools.csharp"
 			],
 			"settings": {
 				// Loading projects on demand is better for larger codebases
@@ -47,7 +46,8 @@
 	// This allows developers to just use 'dotnet build' on the command-line, and the local dotnet version will be used.
 	// Add the global tools dir to the PATH so that globally installed tools will work
 	"remoteEnv": {
-		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerWorkspaceFolder}/.dotnet-tools-global:${containerEnv:PATH}"
+		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerWorkspaceFolder}/.dotnet-tools-global:${containerEnv:PATH}",
+		"DOTNET_MULTILEVEL_LOOKUP": "0",
 	},
 
 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
@@ -57,7 +57,7 @@
 	"forwardPorts": [8000],
 	"portsAttributes": {
 		"8000": {
-			"label": "mono wasm samples (8000)"
+			"label": "mono wasm samples (8000)",
 		}
 	}
 }

.devcontainer/wasm-multiThreaded/devcontainer.json

@@ -23,8 +23,7 @@
 		"vscode": {
 			// Add the IDs of extensions you want installed when the container is created.
 			"extensions": [
-				"ms-dotnettools.csharp",
-				"ms-dotnettools.csdevkit"
+				"ms-dotnettools.csharp"
 			],
 			"settings": {
 				// Loading projects on demand is better for larger codebases
@@ -47,7 +46,8 @@
 	// This allows developers to just use 'dotnet build' on the command-line, and the local dotnet version will be used.
 	// Add the global tools dir to the PATH so that globally installed tools will work
 	"remoteEnv": {
-		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerWorkspaceFolder}/.dotnet-tools-global:${containerEnv:PATH}"
+		"PATH": "${containerWorkspaceFolder}/.dotnet:${containerWorkspaceFolder}/.dotnet-tools-global:${containerEnv:PATH}",
+		"DOTNET_MULTILEVEL_LOOKUP": "0",
 	},
 
 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
@@ -57,7 +57,7 @@
 	"forwardPorts": [8000],
 	"portsAttributes": {
 		"8000": {
-			"label": "mono wasm samples (8000)"
+			"label": "mono wasm samples (8000)",
 		}
 	}
 }

.devcontainer/wasm/devcontainer.json

@@ -12,10 +12,6 @@ indent_style = space
 indent_size = 4
 trim_trailing_whitespace = true
 
-# Specify UTF-8 without byte-order mark
-[*.{csproj,locproj,nativeproj,proj,resx,slnx,vbproj}]
-charset = utf-8
-
 # Generated code
 [*{_AssemblyInfo.cs,.notsupported.cs,AsmOffsets.cs}]
 generated_code = true
@@ -99,7 +95,7 @@ dotnet_style_collection_initializer = true:suggestion
 dotnet_style_prefer_collection_expression = when_types_exactly_match
 dotnet_style_explicit_tuple_names = true:suggestion
 dotnet_style_coalesce_expression = true:suggestion
-dotnet_style_null_propagation = true
+dotnet_style_null_propagation = true:suggestion
 dotnet_style_prefer_is_null_check_over_reference_equality_method = true:suggestion
 dotnet_style_prefer_inferred_tuple_names = true:suggestion
 dotnet_style_prefer_inferred_anonymous_type_member_names = true:suggestion
@@ -132,12 +128,6 @@ csharp_style_prefer_index_operator = false:none
 csharp_style_prefer_range_operator = false:none
 csharp_style_pattern_local_over_anonymous_function = false:none
 
-# IDE0071: Simplify interpolation - keep as silent hint since ReadOnlySpan<char>.ToString() is required for netstandard targets
-dotnet_diagnostic.IDE0071.severity = silent
-
-# IDE0031: Use null propagation - keep as silent hint to avoid build errors with TreatWarningsAsErrors
-dotnet_diagnostic.IDE0031.severity = silent
-
 # Space preferences
 csharp_space_after_cast = false
 csharp_space_after_colon_in_inheritance_clause = true
@@ -146,7 +136,7 @@ csharp_space_after_dot = false
 csharp_space_after_keywords_in_control_flow_statements = true
 csharp_space_after_semicolon_in_for_statement = true
 csharp_space_around_binary_operators = before_and_after
-csharp_space_around_declaration_statements = false
+csharp_space_around_declaration_statements = do_not_ignore
 csharp_space_before_colon_in_inheritance_clause = true
 csharp_space_before_comma = false
 csharp_space_before_dot = false
@@ -165,10 +155,6 @@ csharp_space_between_square_brackets = false
 # License header
 file_header_template = Licensed to the .NET Foundation under one or more agreements.\nThe .NET Foundation licenses this file to you under the MIT license.
 
-# xUnit1051: recommends TestContext.Current.CancellationToken (v3 pattern) which
-# is not yet adopted; suppress until a full v3 migration is performed.
-dotnet_diagnostic.xUnit1051.severity = none
-
 [src/libraries/System.Net.Http/src/System/Net/Http/{SocketsHttpHandler/Http3RequestStream.cs,BrowserHttpHandler/BrowserHttpHandler.cs}]
 # disable CA2025, the analyzer throws a NullReferenceException when processing this file: https://github.com/dotnet/roslyn-analyzers/issues/7652
 dotnet_diagnostic.CA2025.severity = none
@@ -182,26 +168,23 @@ indent_brace_style = Allman
 [*.{csproj,vbproj,vcxproj,vcxproj.filters,proj,nativeproj,locproj}]
 indent_size = 2
 
+[*.{csproj,vbproj,proj,nativeproj,locproj}]
+charset = utf-8
+
 # Xml build files
 [*.builds]
 indent_size = 2
 
 # Xml files
-[*.{resx,ruleset,slnx,stylecop,xml}]
+[*.{xml,stylecop,resx,ruleset}]
 indent_size = 2
 
-# Xml resource files
-[*.resx]
-# match Visual Studio behavior
-insert_final_newline = false
-trim_trailing_whitespace = false
-
 # Xml config files
 [*.{props,targets,config,nuspec}]
 indent_size = 2
 
-# Data serialization
-[*.{json,yaml,yml}]
+# YAML config files
+[*.{yml,yaml}]
 indent_size = 2
 
 # Shell scripts