[main] Update dependencies from dotnet/source-build-reference-packages

[dotnet-maestro]

This pull request updates the following dependencies

From https://github.com/dotnet/source-build-reference-packages

• Subscription: 24042da9-7629-4b52-5b75-08d9c02cf8d5
• Build: 20241015.1
• Date Produced: October 15, 2024 7:12:38 PM UTC
• Commit: 4660d88cf953fbbd14192c787053a20246ce1aeb
• Branch: refs/heads/main

• Updates:
  • Microsoft.SourceBuild.Intermediate.source-build-reference-packages: from 10.0.0-alpha.1.24514.1 to 10.0.0-alpha.1.24515.1

[v-wuzhai]

@dotnet/source-build-internal Could you take a look at the failures here?

[MichaelSimons]

@v-wuzhai - why did you make this change in this PR that is updating the source-build-reference-packages version? This is what broke source-build. I am not seeing why that change was included here.

[marcpopMSFT]

@MichaelSimons the prior build failed because of the recently released STJ security update:
tools\Microsoft.TemplateEngine.TemplateLocalizer.Core\Microsoft.TemplateEngine.TemplateLocalizer.Core.csproj(0,0): error NU1903: (NETCORE_ENGINEERING_TELEMETRY=Restore) Package 'System.Text.Json' 8.0.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-8g4q-xg66-9fp4

So v-wuzhai updated that package to account for that. Do we need a matching change in SBRP?

[MichaelSimons]

Thanks for the explanation. It was confusing to me why this was being included in this PR. Yes, 8.0.5 will need to be added to SBRP.