[release/10.0] fix permissive Socket.DualMode (#122455)

Fixes regression from Net9, where you can set `DualMode = true` even
when the OS doesn't support IPv6.
This PR makes it permissive again.

Contributes to #122435

Backport of #122448 to release/10.0

/cc @pavelsavara

## Customer Impact

- [x] Customer reported #122435
- [ ] Found internally

[Select one or both of the boxes. Describe how this issue impacts
customers, citing the expected and actual behaviors and scope of the
issue. If customer-reported, provide the issue number.]

## Regression

- [x] Yes #106977
- [ ] No

## Testing

Automated testing

## Risk

Low. This PR reverts to previous behavior for all but WASI OS.

Co-authored-by: Pavel Savara <[email protected]>

Merge commit '1d0d03ff2eebdde223b5ba28be2233c9f0df82ca'

Merge commit 'ac345324f04146714172ea78c5496bd979fc3dcf'

[release/10.0] Composite ML-DSA Draft 12 and 13 updates (#120601, #12…

…0961) (#121555)

Backport of #120601 and #120961 to release/10.0

# Description

Backports Draft 12 and Draft 13 spec changes for Composite ML-DSA. This
PR combines two related updates:

**Draft 12 changes (#120601):**
- Mandate parameters field in ECPrivateKey (previously omitted)
- `CompositeMLDsaAlgorithm.cs`: Calculate parameters field size for EC
curves (P256/P384/P521/brainpool variants)
- `CompositeMLDsaManaged.ECDsa.cs`: Validate parameters presence and
curve match; write parameters with context-specific tag [0]
- `CompositeMLDsaManaged.cs`: Update spec references from draft-08 to
draft-12
- Test updates: Add validation for wrong/missing/implicit/explicit
curves; update expected key sizes per spec Table 4

**Draft 13 changes (#120961):**
- Update OIDs from experimental range (2.16.840.1.114027.80.9.1.*) to
official IANA-assigned range (1.3.6.1.5.5.7.6.*)
- `Oids.cs`: Update all Composite ML-DSA OID constants to new range
- `CompositeMLDsaManaged.cs`: Add "ECDSA" to domain separation strings
(e.g., "COMPSIG-MLDSA65-P256-SHA512" →
"COMPSIG-MLDSA65-ECDSA-P256-SHA512")
- Test data and helpers: Update to reflect new OIDs and domain strings

# Customer Impact

Without these fixes, Composite ML-DSA keys generated in .NET 10 would
not conform to Draft 12 and Draft 13 of the IETF spec, causing
interoperability failures with other implementations following the
updated standards.

# Regression

No. This updates implementation to match spec evolution from Draft 8 to
Draft 13.

# Testing

All 1,015 CompositeMLDsa tests pass. Added test coverage for:
- Wrong curve OID rejection
- Missing parameters rejection  
- Implicit curve parameters rejection
- Explicit curve parameters rejection
- Correct parameter serialization for all supported curves
- New OID and domain string validation

# Risk

Low. Changes are confined to Composite ML-DSA implementation (preview
feature). Validates existing behavior is maintained while adding
required spec compliance. Breaking changes are intentional and necessary
for spec conformance.

<!-- START COPILOT CODING AGENT TIPS -->
---

✨ Let Copilot coding agent [set things up for
you](https://github.com/dotnet/runtime/issues/new?title=✨+Set+up+Copilot+instructions&body=Configure%20instructions%20for%20this%20repository%20as%20documented%20in%20%5BBest%20practices%20for%20Copilot%20coding%20agent%20in%20your%20repository%5D%28https://gh.io/copilot-coding-agent-tips%29%2E%0A%0A%3COnboard%20this%20repo%3E&assignees=copilot)
— coding agent works faster and does higher quality work when set up for
your repo.

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Pranav Senthilnathan <[email protected]>
Co-authored-by: Kevin Jones <[email protected]>

Merge commit 'a9d6fdea674fedb93f7cf138df8b77276674a9f2'

[release/10.0] Mark labels in x64 write barrier code as local/alt_ent…

…ry (#120923)

Backport of #119245 to release/10.0

/cc @agocke @filipnavara

## Customer Impact

- [ ] Customer reported
- [X] Found internally

[Select one or both of the boxes. Describe how this issue impacts
customers, citing the expected and actual behaviors and scope of the
issue. If customer-reported, provide the issue number.]

## Regression

- [X] Yes
- [ ] No

This is a regression in the new Apple toolset.

## Testing

Tested manually, and in macios CI.

## Risk

Medium, product change coming somewhat late. However, this change has
been running in the `main` branch for a couple weeks with no issue.

---------

Co-authored-by: Filip Navara <[email protected]>

Merge commit 'bbfb872cc6526e7bc14a365571ef6d91ac1c40d5'

[release/10.0-rc2] [browser] Expect fingerprint in dotnet.native.wasm…

… asset identity (#120268)

* Expect fingerprint in dotnet.native.wasm asset identity

* Wasm.Build.Tests with .NET 10 rc2 SDK

* Latest rc2 SDK version

* SDK version

* Revert Wasm.Build.Tests SDK

---------

Co-authored-by: Marek Fišera <[email protected]>

Merge commit 'fe023f17474aab631c9ee8caeabfae03af46689b'

Merge commit 'fda25cd42d28a3457be3c8adc736756d11a2684f'