Reproducible builds

[natemcmaster]

Tracking issue for multiple issue related to making the build reproducible.

• Commit the exact sha of repositories - Commit the exact sha of repositories #574
• Commit the version of build tools - Commit the version of build tools #576
• Forbid floating versions in PackageReference - Add a warning/error for floating PackageReference versions BuildTools#398

Pinning versions in repos:

• Antiforgery - aspnet/Antiforgery@df486e5
• AzureIntegration
• BasicMiddleware - aspnet/BasicMiddleware@76af959
• BrowserLink - aspnet/BrowserLink@87c6dad
• Caching - aspnet/Caching@c6a9cbb
• Common - Pin tool and package versions to reduce build non-determinism dotnet/extensions#272
• Configuration - Pin tool and package versions to make builds more repeatable Configuration#749
• CORS -aspnet/CORS@8fd3686
• DataProtection aspnet/DataProtection@49b2e22
• DependencyInjection aspnet/DependencyInjection@88297e3
• Diagnostics - aspnet/Diagnostics@7ac0e06
• DotNetTools - aspnet/DotNetTools@1836201
• EntityFrameworkCore - Pin tool and package versions to make builds more repeatable dotnet/efcore#10199
• EventNotification aspnet/EventNotification@3f881f1
• FileSystem
• Hosting - Pin tool and package versions to make build more repeatable Hosting#1252
• HtmlAbstractions
• HttpAbstractions
• HttpClientFactory
• HttpSysServer
• Identity - Pin tool and package versions to make builds more repeatable Identity#1492
• IISIntegration
• JavaScriptServices - Pin tool and package versions to make builds more repeatable JavaScriptServices#1365
• JsonPatch
• KestrelHttpServer - Pin tool and package versions to make builds more repeatable KestrelHttpServer#2137
• Localization
• Logging - Pin tools and package versions to make builds more repeatable Logging#724
• MetaPackages - Pin tools and package versions MetaPackages#245
• Microsoft.Data.Sqlite - Pin tool and package versions to make builds more repeatable Microsoft.Data.Sqlite#452
• MusicStore
• Mvc - Pin tool and package versions to make builds more repeatable Mvc#7013
• MvcPrecompilation
• Options
• Proxy
• Razor - Pin tool and package versions to make builds more repeatable Razor#1745
• ResponseCaching
• Routing
• Scaffolding
• Security
• ServerTests
• Session
• SignalR - Pin package and tool versions to make build more repeatable SignalR#1071
• StaticFiles
• Testing
• WebSockets

[natemcmaster]

This has been completed for all repos in Universe.