Skip to content

[release/11.0] Update Bootstrap to 5.3.8 in templates and Identity UI - #68948

Merged
wtgodbe merged 2 commits into
release/11.0from
javiercn-backport-bootstrap-5-3-8-11-0
Sep 3, 2026
Merged

[release/11.0] Update Bootstrap to 5.3.8 in templates and Identity UI#68948
wtgodbe merged 2 commits into
release/11.0from
javiercn-backport-bootstrap-5-3-8-11-0

Conversation

@javiercn

@javiercn javiercn commented Sep 1, 2026

Copy link
Copy Markdown
Member

FYI, we normally do this push late in the release to ensure we are up to date, right before release.

[release/11.0] Update Bootstrap to 5.3.8 in templates and Identity UI

Update Bootstrap assets to 5.3.8 in templates and Identity UI.

Description

This is a backport of #68898 to release/11.0, limited to the Bootstrap template and Identity UI changes.

It refreshes the vendored Bootstrap assets, CDN integrity hashes, licenses, copy automation, and package-test expectations. Guidance changes from the original PR are intentionally excluded.

Original PR: #68898

Fixes #67666

Customer Impact

Without this backport, applications scaffolded from the .NET 11 templates and the packaged Identity UI continue to ship Bootstrap 5.3.3 instead of 5.3.8, missing the current upstream patch fixes and requiring customers to update the generated assets themselves.

Regression?

  • Yes
  • No

This is a patch-level third-party asset update rather than a regression fix.

Risk

  • High
  • Medium
  • Low

The change updates vendored Bootstrap assets and matching SRI hashes without changing ASP.NET Core runtime code. The same update is already merged on main, and generated applications were exercised locally. The remaining risk is limited to Bootstrap CSS/JavaScript behavior and package contents.

Verification

  • Manual (required)
  • Automated

Manual verification performed:

  • npm ci --ignore-scripts --no-audit --no-fund
  • npm run copy-bootstrap regenerated all six vendored destinations with no resulting source changes.
  • npm ls bootstrap --depth=0 confirmed bootstrap@5.3.8.
  • src\ProjectTemplates\build.cmd -pack -configuration Release completed successfully.
  • Generated Individual-auth Blazor Web, Razor Pages, MVC, and standalone Blazor WebAssembly applications from the locally built template package.
  • Built/published all four generated applications; ran the Blazor Web and MVC applications and verified their login/registration surfaces.
  • Verified the generated applications serve Bootstrap 5.3.8. MVC Identity UI served the updated Bootstrap asset, and the Blazor application served /_framework/blazor.web.js after producing the required local framework-assets package.
  • Final diff and whitespace checks passed.

The full IdentityUIPackageTest was not run locally. The generated-app validation above reached the changed template and Identity UI assets directly.

Packaging changes reviewed?

  • Yes
  • No
  • N/A

The template and Identity UI package contents, vendored assets, package lock, copy automation, and expected Bootstrap version were reviewed.


When servicing release/2.3

  • Make necessary changes in eng/PatchConfig.props

N/A: this PR targets release/11.0.

Copilot AI lite review requested due to automatic review settings September 1, 2026 10:51
@javiercn
javiercn requested a review from a team as a code owner September 1, 2026 10:51
@javiercn
javiercn force-pushed the javiercn-backport-bootstrap-5-3-8-11-0 branch from 7fbba35 to 7375fbe Compare September 1, 2026 10:56
Refresh all vendored Bootstrap 5 assets, CDN integrity hashes, licenses, and package-test expectations. Extend the copy automation to cover the current Blazor template path, standalone WebAssembly, and Identity UI.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 95292c6a-5353-44bc-9065-d2fe86d53e90
@javiercn
javiercn force-pushed the javiercn-backport-bootstrap-5-3-8-11-0 branch from 7375fbe to 28427b7 Compare September 1, 2026 10:57

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Backports the Bootstrap 5.3.8 update to the release/11.0 branch for the ASP.NET Core project templates and the Identity UI (vendored assets + CDN references), aligning shipped template output with upstream Bootstrap patch updates.

Changes:

  • Bumps bootstrap npm dependency to ^5.3.8 and expands the copy automation to include additional template destinations and Identity UI.
  • Refreshes vendored Bootstrap dist/ assets (CSS/JS + maps) and LICENSE text across templates and Identity UI.
  • Updates Identity UI production CDN URLs and SRI hashes; updates the Identity UI package test expectation to 5.3.8.
File summaries
File Description
src/ProjectTemplates/Web.ProjectTemplates/package.json Bumps Bootstrap dependency and updates copy scripts to include additional destinations (WASM + Identity UI).
src/ProjectTemplates/Web.ProjectTemplates/package-lock.json Locks Bootstrap to 5.3.8 (resolved URL + integrity).
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/LICENSE Updates vendored Bootstrap license header text for 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.js Updates vendored Bootstrap JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.esm.js Updates vendored Bootstrap ESM JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.bundle.js Updates vendored Bootstrap bundle JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates vendored Bootstrap utilities RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.css Updates vendored Bootstrap utilities CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates vendored Bootstrap reboot RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css Updates vendored Bootstrap reboot minified CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css Updates vendored Bootstrap reboot CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates vendored Bootstrap grid RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-FSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.css Updates vendored Bootstrap grid CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/LICENSE Updates vendored Bootstrap license header text for 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.js Updates vendored Bootstrap JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.esm.js Updates vendored Bootstrap ESM JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.bundle.js Updates vendored Bootstrap bundle JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates vendored Bootstrap utilities RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.css Updates vendored Bootstrap utilities CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates vendored Bootstrap reboot RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css Updates vendored Bootstrap reboot minified CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css Updates vendored Bootstrap reboot CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates vendored Bootstrap grid RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/StarterWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.css Updates vendored Bootstrap grid CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/LICENSE Updates vendored Bootstrap license header text for 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.js Updates vendored Bootstrap JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.esm.js Updates vendored Bootstrap ESM JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.bundle.js Updates vendored Bootstrap bundle JS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates vendored Bootstrap utilities RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.css Updates vendored Bootstrap utilities CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates vendored Bootstrap reboot RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css Updates vendored Bootstrap reboot minified CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css Updates vendored Bootstrap reboot CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates vendored Bootstrap grid RTL CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/RazorPagesWeb-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.css Updates vendored Bootstrap grid CSS to 5.3.8.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.js Updates vendored Bootstrap JS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.esm.js Updates vendored Bootstrap ESM JS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/js/bootstrap.bundle.js Updates vendored Bootstrap bundle JS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates vendored Bootstrap utilities RTL CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.css Updates vendored Bootstrap utilities CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates vendored Bootstrap reboot RTL CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css Updates vendored Bootstrap reboot CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates vendored Bootstrap grid RTL CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/ComponentsWebAssembly-CSharp/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.css Updates vendored Bootstrap grid CSS to 5.3.8 for standalone WASM template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/js/bootstrap.js Updates vendored Bootstrap JS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/js/bootstrap.esm.js Updates vendored Bootstrap ESM JS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/js/bootstrap.bundle.js Updates vendored Bootstrap bundle JS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates vendored Bootstrap utilities RTL CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-utilities.css Updates vendored Bootstrap utilities CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates vendored Bootstrap reboot RTL CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css Updates vendored Bootstrap reboot CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates vendored Bootstrap grid RTL CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/Web.ProjectTemplates/content/BlazorWeb-CSharp/BlazorWebCSharp.1/wwwroot/lib/bootstrap/dist/css/bootstrap-grid.css Updates vendored Bootstrap grid CSS to 5.3.8 for Blazor Web template assets.
src/ProjectTemplates/test/Templates.Tests/IdentityUIPackageTest.cs Updates the expected Bootstrap version string used by the Identity UI package test.
src/Identity/UI/src/assets/V5/lib/bootstrap/LICENSE Updates vendored Bootstrap license header text for Identity UI assets.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/js/bootstrap.js Updates Identity UI vendored Bootstrap JS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/js/bootstrap.esm.js Updates Identity UI vendored Bootstrap ESM JS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/js/bootstrap.bundle.js Updates Identity UI vendored Bootstrap bundle JS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-utilities.rtl.css Updates Identity UI vendored Bootstrap utilities RTL CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-utilities.css Updates Identity UI vendored Bootstrap utilities CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-reboot.rtl.css Updates Identity UI vendored Bootstrap reboot RTL CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-reboot.min.css Updates Identity UI vendored Bootstrap reboot minified CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-reboot.css Updates Identity UI vendored Bootstrap reboot CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-grid.rtl.css Updates Identity UI vendored Bootstrap grid RTL CSS to 5.3.8.
src/Identity/UI/src/assets/V5/lib/bootstrap/dist/css/bootstrap-grid.css Updates Identity UI vendored Bootstrap grid CSS to 5.3.8.
src/Identity/UI/src/Areas/Identity/Pages/V5/_Layout.cshtml Updates Bootstrap CDN URLs + SRI hashes used by Identity UI in non-development environments.
Review details

Files not reviewed (1)

  • src/ProjectTemplates/Web.ProjectTemplates/package-lock.json: Generated file
  • Files reviewed: 7/272 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Comment thread src/Identity/UI/src/Areas/Identity/Pages/V5/_Layout.cshtml Outdated
@javiercn javiercn added the Servicing-consider Shiproom approval is required for the issue label Sep 2, 2026
Use visually-hidden for the Bootstrap 5 CDN fallback probe so a successful CDN load does not trigger the local stylesheet fallback.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 83dcfc7b-0305-4d3a-abe0-0d3bf535dddc
@javiercn

javiercn commented Sep 2, 2026

Copy link
Copy Markdown
Member Author

The PR description has been updated to the servicing/shiproom template, including customer impact, regression, risk, verification, and packaging review. The PR is not a draft and is ready for review.

@javiercn
javiercn requested a review from artl93 September 2, 2026 17:37
@artl93 artl93 added Servicing-approved Shiproom has approved the issue and removed Servicing-consider Shiproom approval is required for the issue labels Sep 2, 2026
@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Hi @javiercn. This PR was just approved to be included in the upcoming servicing release. Somebody from the @dotnet/aspnet-build team will get it merged when the branches are open. Until then, please make sure all the CI checks pass and the PR is reviewed.

@Youssef1313 Youssef1313 added area-commandlinetools Includes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPI area-identity Includes: Identity and providers labels Sep 2, 2026
@wtgodbe
wtgodbe merged commit 7c75204 into release/11.0 Sep 3, 2026
49 checks passed
@wtgodbe
wtgodbe deleted the javiercn-backport-bootstrap-5-3-8-11-0 branch September 3, 2026 14:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-commandlinetools Includes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPI area-identity Includes: Identity and providers Servicing-approved Shiproom has approved the issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants