[nightly] Update dependencies from syft

Author: dotnet-docker-bot

README.aspnet.md

@@ -6,10 +6,12 @@ This document describes the platforms (OS and architectures) supported by the of
 
 .NET supports [a broad set of operating systems and versions](https://github.com/dotnet/core/blob/main/os-lifecycle-policy.md). When producing container images, it’s impractical to support the full matrix of OS, arch, and .NET version combinations. In practice, images are produced for a select set of operating systems and versions. If official .NET container images aren't provided for your preferred OS, [let us know by opening a discussion](https://github.com/dotnet/dotnet-docker/discussions). Alternatively, you can [author your own .NET images](scenarios/installing-dotnet.md).
 
-- New versions of operating systems that we support are added on a best-effort basis, typically within one month.
-- New OSes are always available in the [nightly repositories](https://github.com/dotnet/dotnet-docker/blob/nightly/README.md) first, and then are added to the officially supported repos afterwards.
+- Images for new OS versions are typically released within one month of the new OS release, with a goal to release same-day when possible.
+- New OS versions are available in [`dotnet/nightly` repositories](https://github.com/dotnet/dotnet-docker/blob/nightly/README.md) first, and are added to the officially supported repos afterwards.
 - All new OS releases will be accompanied by an [announcement](https://github.com/dotnet/dotnet-docker/discussions/categories/announcements).
 
+These policies are specific to .NET container images. For more information on overall .NET OS support, see [.NET OS Support Tracking](https://github.com/dotnet/core/issues/9638).
+
 ### Linux
 
 Each distribution (distro) has a unique approach to releasing, schedule, and end-of life (EOL). This prohibits the definition of a one-size-fits-all policy. Instead, a policy is defined for each supported distro.

README.runtime-deps.md

@@ -250,16 +250,16 @@ jobs:
       '$(gitHubNotificationsRepoInfo.org)'
       '$(gitHubNotificationsRepoInfo.repo)'
       --repo-prefix '$(publishRepoPrefix)'
-      --task "🟪 Copy Images (Authenticated)"
-      --task "🟪 Publish Manifest (Authenticated)"
-      --task "🟪 Wait for Image Ingestion (Authenticated)"
+      --task "🟪 Copy Images"
+      --task "🟪 Publish Manifest"
+      --task "🟪 Wait for Image Ingestion"
       --task "🟪 Publish Readmes"
-      --task "🟪 Wait for MCR Doc Ingestion (Authenticated)"
+      --task "🟪 Wait for MCR Doc Ingestion"
       --task "🟪 Publish Image Info"
-      --task "🟪 Ingest Kusto Image Info (Authenticated)"
-      --task "🟪 Generate EOL Annotation Data (Authenticated)"
-      --task "🟪 Annotate EOL Images (Authenticated)"
-      --task "🟪 Wait for Annotation Ingestion (Authenticated)"
+      --task "🟪 Ingest Kusto Image Info"
+      --task "🟪 Generate EOL Annotation Data"
+      --task "🟪 Annotate EOL Images"
+      --task "🟪 Wait for Annotation Ingestion"
       $(dryRunArg)
       $(imageBuilder.commonCmdArgs)
     displayName: Post Publish Notification

README.runtime.md

@@ -1,5 +1,5 @@
 variables:
-  imageNames.imageBuilderName: mcr.microsoft.com/dotnet-buildtools/image-builder:2718660
+  imageNames.imageBuilderName: mcr.microsoft.com/dotnet-buildtools/image-builder:2727330
   imageNames.imageBuilder: $(imageNames.imageBuilderName)
   imageNames.imageBuilder.withrepo: imagebuilder-withrepo:$(Build.BuildId)-$(System.JobId)
   imageNames.testRunner: mcr.microsoft.com/dotnet-buildtools/prereqs:azurelinux3.0-docker-testrunner

README.sdk.md

@@ -8,14 +8,14 @@
         sha-var-name: Name of variable that stores the checksum
         sha-function: SHA function to use ^
 
-    set isInternal to find(ARGS["url"], "artifacts.visualstudio.com") >= 0 ^
-    set alpineSetTokenCmd to 'token=$(echo "${ACCESSTOKEN}:${ACCESSTOKEN}" | base64 -w 0)' ^
-    set additionalWgetArgs to when(isInternal, '--header="Authorization: Basic $token" ', '') ^
-    set additionalCurlArgs to when(isInternal, '-u :$ACCESSTOKEN --basic ', '') ^
+    _ Documentation for using Managed Identity/OAuth tokens to access Azure storage accounts:
+        https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-azure-active-directory#call-storage-operations-with-oauth-tokens ^
+
+    set isInternal to find(ARGS["url"], "dotnetstage") >= 0 ^
+    set headerArgs to when(isInternal, '--header "Authorization: Bearer $ACCESSTOKEN" --header "x-ms-version: 2017-11-09" ', '') ^
     set isAlpine to find(OS_VERSION, "alpine") >= 0 ^
     set shaFunction to ARGS["sha-function"] ^
     set shaFunction to when(shaFunction, shaFunction, "512")
-}}{{if isAlpine:{{if isInternal:{{alpineSetTokenCmd}} \
-&& }}wget {{additionalWgetArgs}}-O^else:curl {{additionalCurlArgs}}-fSL --output}} {{ARGS["out-file"]}} {{if isInternal:"{{ARGS["url"]}}"^else:{{ARGS["url"]}}}}{{if ARGS["sha"]: \
+}}{{if isAlpine:wget {{headerArgs}}-O^else:curl {{headerArgs}}-fSL --output}} {{ARGS["out-file"]}} {{if isInternal:"{{ARGS["url"]}}"^else:{{ARGS["url"]}}}}{{if ARGS["sha"]: \
 && {{ARGS["sha-var-name"]}}='{{ARGS["sha"]}}' \
 && echo "${{ARGS["sha-var-name"]}}  {{ARGS["out-file"]}}" | sha{{shaFunction}}sum -c -}}

documentation/supported-platforms.md

@@ -8,11 +8,16 @@
         sha-var-name: Name of variable that stores the checksum
         hash-algorithm: Algorithm type to use to get the checksum. Defaults to sha512 ^
 
-    set isInternal to find(ARGS["url"], "artifacts.visualstudio.com") >= 0 ^
+    _ Documentation for using Managed Identity/OAuth tokens to access Azure storage accounts:
+        https://learn.microsoft.com/en-us/rest/api/storageservices/authorize-with-azure-active-directory#call-storage-operations-with-oauth-tokens ^
+
+    set isInternal to find(ARGS["url"], "dotnetstage") >= 0 ^
     set hashAlgorithm to when(ARGS["hash-algorithm"], ARGS["hash-algorithm"], "sha512")
 }}{{if isInternal:`
-$Base64AuthInfo = [Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes(\":$($Env:ACCESSTOKEN)\")); `
-$Headers = @@{Authorization = \"Basic $Base64AuthInfo\"}; `
+$Headers = @@{ `
+    Authorization = \"Bearer $env:ACCESSTOKEN\"; `
+    'x-ms-version' = '2017-11-09'; `
+}; `
 Invoke-WebRequest -OutFile {{ARGS["out-file"]}} \"{{ARGS["url"]}}\" -Headers $Headers; `
 `^else:Invoke-WebRequest -OutFile {{ARGS["out-file"]}} {{ARGS["url"]}}; `}}
 ${{ARGS["sha-var-name"]}} = '{{ARGS["sha"]}}'; `

eng/common/templates/jobs/publish.yml

@@ -10,7 +10,7 @@
     set isFullAzureLinux to isAzureLinux && !isDistroless ^
     set isDistrolessAzureLinux to isAzureLinux && isDistroless ^
     set baseUrl to VARIABLES[cat("dotnet|", dotnetVersion, "|base-url|", VARIABLES["branch"])] ^
-    set isInternal to find(baseUrl, "artifacts.visualstudio.com") >= 0 ^
+    set isInternal to find(baseUrl, "dotnetstage") >= 0 ^
     set runtimeDepsVariant to when(ARGS["is-extra"], "-extra", "") ^
     set tagVersion to when(dotnetVersion = "8.0",
         VARIABLES[cat("dotnet|", dotnetVersion, "|product-version")],