From d51fa0e8c3c2e11a4b9828e7e27639cfa67e5fa5 Mon Sep 17 00:00:00 2001
From: Luke Latham <1622880+guardrex@users.noreply.github.com>
Date: Thu, 20 Nov 2025 06:53:09 -0500
Subject: [PATCH 1/2] Access modifiers for cascading params (#36362)

---
 .../blazor/components/cascading-values-and-parameters.md    | 6 ++++--
 .../class-libraries-and-static-server-side-rendering.md     | 2 +-
 aspnetcore/blazor/components/httpcontext.md                 | 2 +-
 aspnetcore/blazor/fundamentals/handle-errors.md             | 6 +++---
 aspnetcore/blazor/fundamentals/routing.md                   | 2 +-
 aspnetcore/blazor/globalization-localization.md             | 4 ++--
 aspnetcore/blazor/hybrid/root-component-parameters.md       | 2 +-
 aspnetcore/blazor/security/content-security-policy.md       | 2 +-
 8 files changed, 14 insertions(+), 12 deletions(-)

diff --git a/aspnetcore/blazor/components/cascading-values-and-parameters.md b/aspnetcore/blazor/components/cascading-values-and-parameters.md
index 09a8e69d20ef..68c0a96128fa 100644
--- a/aspnetcore/blazor/components/cascading-values-and-parameters.md
+++ b/aspnetcore/blazor/components/cascading-values-and-parameters.md
@@ -241,7 +241,7 @@ The following component is used to demonstrate how changing the value of `Notify
     private int dalekCount;
 
     [CascadingParameter]
-    public NotifyingDalek? Dalek { get; set; }
+    private NotifyingDalek? Dalek { get; set; }
 
     private void Update()
     {
@@ -433,6 +433,8 @@ For more information, see the following sections of this article:
 
 To make use of cascading values, descendent components declare cascading parameters using the [`[CascadingParameter]` attribute](xref:Microsoft.AspNetCore.Components.CascadingParameterAttribute). Cascading values are bound to cascading parameters **by type**. Cascading multiple values of the same type is covered in the [Cascade multiple values](#cascade-multiple-values) section later in this article.
 
+The `private` access modifier is recommended for cascading parameters because the parameter should be scoped for use only within the component's class in most cases. When subclassing is required, use the `protected` access modifier.
+
 The following component binds the `ThemeInfo` cascading value to a cascading parameter, optionally using the same name of `ThemeInfo`. The parameter is used to set the CSS class for the **`Increment Counter (Themed)`** button.
 
 `ThemedCounter.razor`:
@@ -657,7 +659,7 @@ Descendent `Tab` components capture the containing `TabSet` as a cascading param
 
 @code {
     [CascadingParameter]
-    public TabSet? ContainerTabSet { get; set; }
+    private TabSet? ContainerTabSet { get; set; }
 
     [Parameter]
     public string? Title { get; set; }
diff --git a/aspnetcore/blazor/components/class-libraries-and-static-server-side-rendering.md b/aspnetcore/blazor/components/class-libraries-and-static-server-side-rendering.md
index e5699f5be141..655ac45d200b 100644
--- a/aspnetcore/blazor/components/class-libraries-and-static-server-side-rendering.md
+++ b/aspnetcore/blazor/components/class-libraries-and-static-server-side-rendering.md
@@ -125,7 +125,7 @@ Reusable components are free to receive an <xref:Microsoft.AspNetCore.Http.HttpC
 
 ```csharp
 [CascadingParameter]
-public HttpContext? Context { get; set; }
+private HttpContext? Context { get; set; }
 ```
 
 The value is `null` during interactive rendering and is only set during static SSR.
diff --git a/aspnetcore/blazor/components/httpcontext.md b/aspnetcore/blazor/components/httpcontext.md
index 41befcc5b1f2..a850624219c6 100644
--- a/aspnetcore/blazor/components/httpcontext.md
+++ b/aspnetcore/blazor/components/httpcontext.md
@@ -22,7 +22,7 @@ uid: blazor/components/httpcontext
 
 ```csharp
 [CascadingParameter]
-public HttpContext? HttpContext { get; set; }
+private HttpContext? HttpContext { get; set; }
 ```
 
 For additional context in *advanced* edge cases&dagger;, see the discussion in the following articles:
diff --git a/aspnetcore/blazor/fundamentals/handle-errors.md b/aspnetcore/blazor/fundamentals/handle-errors.md
index 069afffb0cb8..768e82ed11bc 100644
--- a/aspnetcore/blazor/fundamentals/handle-errors.md
+++ b/aspnetcore/blazor/fundamentals/handle-errors.md
@@ -596,7 +596,7 @@ To process errors in a component:
 
   ```csharp
   [CascadingParameter]
-  public ProcessError? ProcessError { get; set; }
+  private ProcessError? ProcessError { get; set; }
   ```
 
 * Call an error processing method in any `catch` block with an appropriate exception type. The example `ProcessError` component only offers a single `LogError` method, but the error processing component can provide any number of error processing methods to address alternative error processing requirements throughout the app. The following `Counter` component `@code` block example includes the `ProcessError` cascading parameter and traps an exception for logging when the count is greater than five:
@@ -606,7 +606,7 @@ To process errors in a component:
       private int currentCount = 0;
 
       [CascadingParameter]
-      public ProcessError? ProcessError { get; set; }
+      private ProcessError? ProcessError { get; set; }
 
       private void IncrementCount()
       {
@@ -689,7 +689,7 @@ To process errors in a component:
 
   ```razor
   [CascadingParameter]
-  public ProcessError ProcessError { get; set; }
+  private ProcessError ProcessError { get; set; }
   ```
 
 * Call an error processing method in any `catch` block with an appropriate exception type. The example `ProcessError` component only offers a single `LogError` method, but the error processing component can provide any number of error processing methods to address alternative error processing requirements throughout the app.
diff --git a/aspnetcore/blazor/fundamentals/routing.md b/aspnetcore/blazor/fundamentals/routing.md
index c8c563a90b32..5899e30d342a 100644
--- a/aspnetcore/blazor/fundamentals/routing.md
+++ b/aspnetcore/blazor/fundamentals/routing.md
@@ -835,7 +835,7 @@ Apps that implement a custom router can also use `NavigationManager.NotFound`. T
   ```razor
   @code {
       [CascadingParameter]
-      public HttpContext? HttpContext { get; set; }
+      private HttpContext? HttpContext { get; set; }
 
       private void OnNotFoundEvent(object sender, NotFoundEventArgs e)
       {
diff --git a/aspnetcore/blazor/globalization-localization.md b/aspnetcore/blazor/globalization-localization.md
index 0f2cd96aad66..e31c45d4b351 100644
--- a/aspnetcore/blazor/globalization-localization.md
+++ b/aspnetcore/blazor/globalization-localization.md
@@ -760,7 +760,7 @@ Add the following `@code` block to the bottom of the `App` component file:
 ```razor
 @code {
     [CascadingParameter]
-    public HttpContext? HttpContext { get; set; }
+    private HttpContext? HttpContext { get; set; }
 
     protected override void OnInitialized()
     {
@@ -1350,7 +1350,7 @@ Add the following `@code` block to the bottom of the `App` component file:
 ```razor
 @code {
     [CascadingParameter]
-    public HttpContext? HttpContext { get; set; }
+    private HttpContext? HttpContext { get; set; }
 
     protected override void OnInitialized()
     {
diff --git a/aspnetcore/blazor/hybrid/root-component-parameters.md b/aspnetcore/blazor/hybrid/root-component-parameters.md
index a3eaae5c6465..ae1330a7ed20 100644
--- a/aspnetcore/blazor/hybrid/root-component-parameters.md
+++ b/aspnetcore/blazor/hybrid/root-component-parameters.md
@@ -230,7 +230,7 @@ The following `Keypad` component example:
 
 @code {
     [CascadingParameter]
-    protected KeypadViewModel KeypadViewModel { get; set; }
+    private KeypadViewModel KeypadViewModel { get; set; }
 
     private void DeleteChar()
     {
diff --git a/aspnetcore/blazor/security/content-security-policy.md b/aspnetcore/blazor/security/content-security-policy.md
index dc4ae9ae9033..5d402e701ad7 100644
--- a/aspnetcore/blazor/security/content-security-policy.md
+++ b/aspnetcore/blazor/security/content-security-policy.md
@@ -459,7 +459,7 @@ The rendered import map from the `ImportMap` component is generated by the app a
     private string? integrity;
 
     [CascadingParameter]
-    public HttpContext? HttpContext { get; set; }
+    private HttpContext? HttpContext { get; set; }
 
     protected override void OnInitialized()
     {

From 95d48569566b469357d51f6535756baa34fc470f Mon Sep 17 00:00:00 2001
From: Bill Wagner <wiwagn@microsoft.com>
Date: Thu, 20 Nov 2025 14:16:30 -0500
Subject: [PATCH 2/2] Import inputs into env (#36380)

* Import inputs into env

Instead of raw input from workflow_dispatch, import those inputs into the environment before using.

* Apply suggestions from code review
---
 .github/workflows/quest-bulk.yml | 4 +++-
 .github/workflows/quest.yml      | 9 ++++++---
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/quest-bulk.yml b/.github/workflows/quest-bulk.yml
index 60db1feaeaff..a3c2d7b6d3d8 100644
--- a/.github/workflows/quest-bulk.yml
+++ b/.github/workflows/quest-bulk.yml
@@ -27,7 +27,9 @@ jobs:
       - name: "Print manual bulk import run reason"
         if: ${{ github.event_name == 'workflow_dispatch' }}
         run: |
-          echo "Reason: ${{ github.event.inputs.reason }}"
+          echo "Reason: $REASON"
+        env:
+          REASON: ${{ github.event.inputs.reason }}
 
       - name: Azure OpenID Connect
         id: azure-oidc-auth
diff --git a/.github/workflows/quest.yml b/.github/workflows/quest.yml
index af869c31b542..4e6c1dc0a2e9 100644
--- a/.github/workflows/quest.yml
+++ b/.github/workflows/quest.yml
@@ -28,9 +28,12 @@ jobs:
       - name: "Print manual run reason"
         if: ${{ github.event_name == 'workflow_dispatch' }}
         run: |
-          echo "Reason: ${{ github.event.inputs.reason }}"
-          echo "Issue number: ${{ github.event.inputs.issue }}"
-
+          echo "Reason: $REASON"
+          echo "Issue number: $ISSUENUMBER"
+        env:
+          REASON: ${{ github.event.inputs.reason }}
+          ISSUENUMBER: ${{ github.event.inputs.issue }}
+I
       - name: Azure OpenID Connect
         id: azure-oidc-auth
         uses: dotnet/docs-tools/.github/actions/oidc-auth-flow@main