Co-authored-by: Tom Deseyn <tom.deseyn@gmail.com>

- [release/7.0] Remove experimental and downlevel feeds
- Change additional versions
  - bump SiteExtension.3.1 and SiteExtension.6.0 package versions
  - downgrade Microsoft.Extensions.DiagnosticAdapter to avoid needing the dotnet5 feed

* Make Kestrel prefer on-disk cert for macOS bind.

* Clarify Intersect behavior in comment.

Co-authored-by: Aditya Mandaleeka <adityam@microsoft.com>

Co-authored-by: Will Godbe <wigodbe@microsoft.com>

* Send 431 when HTTP/2 headers are too large or many #17861
* Send 431 when HTTP/2 headers are too large or many #33622
* Fix test encoder
* PR feedback
* Rework count enforcement

Co-authored-by: Chris R <Tratcher@outlook.com>

* Limit the hpack buffer resize #44643
* More resizes

* Update IHttpRequestFeature.cs
* Update ApiParameterDescription.cs
* Update IProblemDetailsService.cs
* Update ApiConventionApplicationModelConvention.cs
* Update CircuitHandler.cs
* Update CorsPolicyBuilder.cs
* Update TypedResults.cs

Co-authored-by: Bruno Oliveira <brunolins16@users.noreply.github.com>

Co-authored-by: Nikita Balabaev <xakep139@users.noreply.github.com>

- backport of #44688
- add new schedule for a weekly run
- add top-level parameter enabling CodeQL3000 in manual builds
- add `enableSBOM` and `variables` parameters in default-build.yml
- add a separate job w/ CodeQL3000 tasks included in build steps; run this job alone
  - use the new default-build.yml parameters
  - set `$(UseSharedCompilation)` to `false` to ease analysis
- add tag indicating CodeQL3000 tasks did useful work
  - ignore no-op task executions
- add a tsaoptions.json file
  - cribbed values from our eng/sdl-tsa-vars.config file

nit: Unconditionally disable the auto-injected component governance build step
- job.yml inserts the task where we need (unless overridden)

- Update branding to 7.0.1
- Complete 7.0.1 branding
  - change label to "servicing"
  - check in 7.0.0 PackageOverrides.txt and PlatformManifest.txt files
- Special case current .NET SDK version
  - use incoming runtime even though this is a servicing build

Co-authored-by: Doug Bunting <6431421+dougbu@users.noreply.github.com>

* [Templates] Fix links to http://useionic.com



* Use GitHub repo link for OpenIconic

Co-authored-by: Artak M <artakm@microsoft.com>

- backport #43956 aka 1b19eaf0
  - Fixes [loc ticket 710128 [C&AI Translation Feedback] - ASP.NET Core incomplete German translation](https://ceapex.visualstudio.com/CEINTL/_queries/edit/710128/)
  - Fixes #44167
  - Automates translation of WXL files in main (not directly in release/7.0)
- fixup translations
  - restore German "directory" translation
  - undo hot key changes
    - leave only Portuguese s/&Navegar/&Procurar/ change for `OptionsBrowseButton`
    - apparently, that's something like s/to browse/to search for/

Co-authored-by: Mackinnon Buck <mackinnon.buck@gmail.com>

[release/7.0] Update dependencies from dotnet/arcade

[release/7.0] Update dependencies from dotnet/runtime dotnet/efcore

* Update AuthorizeFilter.cs

* Update AuthorizeFilter.cs

Co-authored-by: William Godbe <wigodbe@microsoft.com>

[release/7.0] Update dependencies from dotnet/efcore

[release/7.0] Update dependencies from dotnet/efcore

[release/7.0] Update dependencies from dotnet/runtime dotnet/efcore

[release/7.0] Update dependencies from dotnet/runtime

* Don't pack Microsoft.Aspnetcore.Ratelimiting

* Update SharedFramework.Local.props

[release/7.0] Update dependencies from dotnet/efcore

[release/7.0] Update dependencies from dotnet/runtime dotnet/efcore

[release/7.0] Merge from internal rc2 branch

* Runtime helpers update
* Test updates
* Fix build break

* Generate VS.Redist package for ANCM

* Fixup

* Add package for IISExpress

* Rename nuspecs

* Fix target order

Co-authored-by: Will Godbe <wigodbe@microsoft.com>

[release/7.0] Update dependencies from dotnet/efcore

[release/7.0] Update dependencies from dotnet/efcore dotnet/source-build-externals

[release/7.0] Update dependencies from dotnet/runtime dotnet/efcore

Co-authored-by: Mackinnon Buck <mackinnon.buck@gmail.com>

[release/7.0] Update dependencies from dotnet/efcore

[release/7.0] Update dependencies from dotnet/runtime

- incomplete w/o updates in spa-templates and a submodule update here