Pin .NET SDK to 10.0.401 with latestPatch roll-forward

[David Pine (IEvangelist)]

Summary

Pins global.json to SDK 10.0.401 (runtime 10.0.12) and changes rollForward from latestFeature to latestPatch.

The official build (run 20261014.1) failed in Run Aspire Publish with NU1102: Unable to find package Microsoft.NETCore.App.Host.linux-x64 with version (= 10.0.13). The aspire.dev Azure Artifacts feed upstreams NuGet Gallery but only serves versions that are at least ~7 days old, and 10.0.13 shipped on 2026-10-13. The pipeline's UseDotNet@2 step installs 10.0.x, which resolved to SDK 10.0.402 (runtime 10.0.13). Pinning the SDK keeps builds on a runtime the feed already has. latestPatch still lets developers use newer patches within the 10.0.4xx band.

Follow-up required (not in this PR)

The official pipeline lives in the internal Azure DevOps repo (pipelines/build.yml, deploy branch) and currently ignores global.json. It needs this change to benefit from the pin:

- task: UseDotNet@2
  displayName: 'Install DotNet'
  inputs:
    packageType: 'sdk'
    useGlobalJson: true

Bump the pin about a week after each .NET servicing release, once the feed has the new packs.

Third-party links and affiliations

None.

Validation

• dotnet --version with the new global.json resolves to 10.0.402 locally (latestPatch within 10.0.4xx).
• Other consumers (actions/setup-dotnet with global-json-file, CodeQL pipeline with useGlobalJson: true) already read global.json.
• The official pipeline fix can't be validated until the internal build.yml change lands.

[Copilot]

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

0 open findings

What changed in this PR

Pins the repository’s .NET SDK via global.json to avoid CI failures caused by newer runtimes not yet available in the organization’s proxied/upstream NuGet feed, while still allowing patch-level roll-forward within the chosen SDK feature band.

Changes:

• Pin .NET SDK version from 10.0.100 to 10.0.401.
• Change rollForward behavior from latestFeature to latestPatch.

File	Description
global.json	Pins SDK to 10.0.401 and restricts roll-forward to patches to prevent unintended runtime upgrades in CI.

🧠 Review effort: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.