From c95e21694cb02bd338f842ae934a19703ffc61e2 Mon Sep 17 00:00:00 2001 From: Immad Date: Tue, 16 Jun 2026 18:03:31 -0500 Subject: [PATCH 1/2] Upgrade .NET SDK to 10.0.301 to mitigate security vulnerability Update global.json to pin .NET SDK 10.0.301, addressing the recent security advisory notification. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- global.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/global.json b/global.json index 4daf48a..de9f9b5 100644 --- a/global.json +++ b/global.json @@ -1,6 +1,6 @@ { "sdk": { - "version": "10.0.204", + "version": "10.0.301", "rollForward": "latestFeature" } } \ No newline at end of file From 97a3e7e933ef67fcc28fba96e3e1dc0b85ba9635 Mon Sep 17 00:00:00 2001 From: Immad Date: Tue, 16 Jun 2026 20:39:22 -0500 Subject: [PATCH 2/2] Install .NET 10.0.3xx SDK in CI workflows The GitHub-hosted runner image does not yet ship 10.0.301, which is required by global.json after the security upgrade. Explicitly install the 10.0.3xx band so CI picks up the latest patch automatically. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/ci.yml | 4 +++- .github/workflows/docs.yml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9a3ddfc..60e2129 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,7 +19,9 @@ jobs: - name: Setup .NET uses: actions/setup-dotnet@v4 with: - dotnet-version: '8.0.x' + dotnet-version: | + 8.0.x + 10.0.3xx - name: Restore dependencies run: dotnet restore diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 3a64fcc..91f94fb 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -25,7 +25,9 @@ jobs: - name: Setup .NET uses: actions/setup-dotnet@v4 with: - dotnet-version: '8.0.x' + dotnet-version: | + 8.0.x + 10.0.3xx - name: Install DocFX run: dotnet tool install -g docfx