Upgrade .NET dependencies

[ejsmith]

Summary

• update CI and container builds to .NET SDK 10.0.400 and ASP.NET Core runtime 10.0.11
• pin the E2E workflow to the same SDK and align the remaining workflows on actions/setup-dotnet@v6
• update the Web and Job OpenTelemetry package families to 1.18.0, including their matching preview instrumentations
• update Scalar.AspNetCore to 2.17.1

There are no application API or public configuration contract changes.

Dependency audit

• .NET 10.0.11 / SDK 10.0.400 are the current servicing releases, published August 11, 2026
• OpenTelemetry 1.18.0 was published August 21; the OTLP export request limit now defaults to 64 MiB instead of 128 MiB, while the application's configured batch behavior remains unchanged
• Scalar.AspNetCore 2.17.1 was published August 20 and preserves the existing synchronous /docs configuration
• no vulnerable direct or transitive NuGet packages were reported

Intentional deferrals:

• Aspire remains on 13.4.6 pending resolution and verification of the upstream issues that caused the existing hold; CommunityToolkit.Aspire.Hosting.Deno stays aligned because 13.5.0 requires Aspire 13.5+
• Stripe.net remains on 52.3.0 because 52.4.0 was published today and changes the SDK-pinned Stripe API version to 2026-08-26.dahlia; that belongs in a dedicated billing validation change
• Microsoft.OpenApi remains on 2.12.0 because Microsoft.AspNetCore.OpenApi 10.0.11 requires a version below 3.0.0

Official references:

• .NET 10.0.11 release notes
• OpenTelemetry core 1.17.0...1.18.0
• OpenTelemetry contrib 1.18 releases
• Scalar.AspNetCore 2.17.1
• actions/setup-dotnet v6

Validation

• Release solution build: 0 warnings, 0 errors
• full .NET suite: 2,887 total; 2,884 passed; 3 skipped; 0 failed
• Chromium E2E dogfood: 40/40 passed
• local Aspire App healthy; /next/, /api/v2/about, and /docs/ returned HTTP 200
• local API and all-in-one linux/amd64 Docker builds passed using SDK 10.0.400; the all-in-one image reported Microsoft.AspNetCore.App and Microsoft.NETCore.App 10.0.11
• .NET 10.0.400 SDK and 10.0.11 ASP.NET container manifests verified for amd64, arm64, and arm/v7
• all four edited workflow YAML files parsed successfully

Risk

OpenTelemetry 1.18.0 and Scalar.AspNetCore 2.17.1 are less than two weeks old, so they carry elevated freshness risk. The full backend, browser, runtime, docs, and container validation above passed. Aspire and the billing-sensitive Stripe update remain explicitly deferred.

[niemyjski]

Looks good, didn't test it but changes generally look good.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 675aa6edc4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
Exceptionless.Insulation	37%	35%	286	❌
Exceptionless.Core	76%	68%	10288	✔
Exceptionless.Web	85%	69%	7974	✔
Exceptionless.AppHost	38%	41%	147	❌
Summary	79% (25564 / 32524)	68% (11979 / 17719)	18695	✔