[main] Source code updates from dotnet/dotnet (#17028)

[main] Source code updates from dotnet/dotnet

Author: dotnet-maestro[bot]

eng/Version.Details.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <Dependencies>
-  <Source Uri="https://github.com/dotnet/dotnet" Mapping="arcade" Sha="a065c06c0c5f5647d8e312fc70dec3f5ca77b830" BarId="319156" />
+  <Source Uri="https://github.com/dotnet/dotnet" Mapping="arcade" Sha="ae899ea0758628a22feb37a1401ae397cc5fc8d1" BarId="319323" />
   <ProductDependencies>
   </ProductDependencies>
   <ToolsetDependencies>

eng/common/native/NativeAotSupported.props

@@ -0,0 +1,26 @@
+<Project>
+  <PropertyGroup>
+
+    <!-- Reject unsupported OS via RID prefix match -->
+    <_NativeAotSupportedOS Condition="
+      '$(TargetOS)' != 'browser' and
+      '$(TargetOS)' != 'haiku' and
+      '$(TargetOS)' != 'illumos' and
+      '$(TargetOS)' != 'netbsd' and
+      '$(TargetOS)' != 'solaris'
+    ">true</_NativeAotSupportedOS>
+
+    <!-- Reject unsupported architectures via RID suffix match -->
+    <_NativeAotSupportedArch Condition="
+      '$(TargetArchitecture)' != 'wasm' and
+      ('$(TargetArchitecture)' != 'x86' or '$(TargetOS)' == 'windows')
+    ">true</_NativeAotSupportedArch>
+
+    <NativeAotSupported Condition="
+      '$(NativeAotSupported)' == '' and
+      '$(_NativeAotSupportedOS)' == 'true' and
+      '$(_NativeAotSupportedArch)' == 'true'
+    ">true</NativeAotSupported>
+
+  </PropertyGroup>
+</Project>

src/Microsoft.DotNet.Build.Tasks.Installers/build/installer.build.targets

@@ -249,11 +249,11 @@
     <Exec Command="chmod ugo+x '$(_LayoutControlRoot)postrm'"
           Condition="'@(LinuxPostRemoveScript)' != ''" />
 
-    <Exec Command="tar -C '$(_LayoutControlRoot)' -czf '$(_LayoutDirectory)/control.tar.gz' ."
+    <Exec Command="tar --owner=root --group=root -C '$(_LayoutControlRoot)' -czf '$(_LayoutDirectory)/control.tar.gz' ."
           IgnoreExitCode="true"
           IgnoreStandardErrorWarningFormat="true" />
 
-    <Exec Command="tar -C '$(_LayoutDataRoot)' -czf '$(_LayoutDirectory)/data.tar.gz' ."
+    <Exec Command="tar --owner=root --group=root -C '$(_LayoutDataRoot)' -czf '$(_LayoutDirectory)/data.tar.gz' ."
           IgnoreExitCode="true"
           IgnoreStandardErrorWarningFormat="true" />
 

src/Microsoft.DotNet.SignTool/src/ContentUtil.cs

@@ -65,7 +65,7 @@ public static bool IsManaged(string filePath)
         {
             try
             {
-                using (var stream = new FileStream(filePath, FileMode.Open))
+                using (var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read, FileShare.ReadWrite))
                 using (var peReader = new PEReader(stream))
                 {
                     return peReader.PEHeaders.CorHeader != null;
@@ -81,7 +81,7 @@ public static bool IsCrossgened(string filePath)
         {
             const int CROSSGEN_FLAG = 4;
 
-            using (var stream = new FileStream(filePath, FileMode.Open))
+            using (var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read, FileShare.ReadWrite))
             using (var peReader = new PEReader(stream))
             {
                 return ((int)peReader.PEHeaders.CorHeader.Flags & CROSSGEN_FLAG) == CROSSGEN_FLAG;
@@ -115,7 +115,7 @@ public static ExecutableType GetExecutableType(string filePath)
         {
             try
             {
-                using (var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read))
+                using (var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read, FileShare.ReadWrite))
                 {
                     if (stream.Length < 4)
                         return ExecutableType.None;

src/Microsoft.DotNet.SignTool/src/VerifySignatures.cs

@@ -147,7 +147,11 @@ internal static SigningStatus IsSignedPkgOrAppBundle(TaskLoggingHelper log, stri
 
         public static SigningStatus IsSignedPE(string filePath)
         {
-            using (var stream = new FileStream(filePath, FileMode.Open))
+            // Open read-only with a shared lock. Verification only reads PE headers, so
+            // requesting write access (the FileStream(path, FileMode) default) is unnecessary
+            // and causes a sharing violation when another process (e.g. an antimalware scanner)
+            // momentarily holds the freshly-built file open.
+            using (var stream = new FileStream(filePath, FileMode.Open, FileAccess.Read, FileShare.ReadWrite))
             {
                 return IsSignedPE(stream);
             }