chore: upgrade all projects to net11.0 - #406
Merged
Merged
Conversation
- Bump TargetFramework from net10.0 to net11.0 across all 16 projects - Remove now-pruned Microsoft.Extensions.Hosting.Abstractions PackageReference from BuildBot.Discord.csproj (NU1510: automatically available under net11.0) - Rename private const ValidArn to VALID_ARN in BuildBot.CloudFormation.Tests to satisfy the UPPER_SNAKE_CASE naming convention (IDE1006), exposed by the newer SDK's analyzer versions - Simplify a redundant Dictionary construction to a collection expression (IDE0028) in CloudFormationSubscriptionConfirmationNotificationHandlerTests - Suppress a conflicting IDE0028 finding in MakeNotification where Roslyn's codefix would drop a required IEqualityComparer<string>, violating MA0002 (see dotnet/roslyn#75894) - Add CHANGELOG.md entry Prompt: fix up the build issues Claude-Session: https://claude.ai/code/session_01313QV1tQYNiHLrRRyaGVSg
Member
Roslyn analyzer findings
|
The Dockerfile still pinned mcr.microsoft.com/dotnet/runtime-deps: 10.0-preview-noble-chiseled-extra, mismatched against the net11.0 TargetFramework bump, and also stale: .NET 10 GA'd months ago, so the 10.0-preview channel stopped receiving security patches, which is why Trivy flagged CVE-2026-45447 (HIGH, OpenSSL heap use-after-free) in libssl3t64/openssl. .NET 11 images use the 'resolute' Ubuntu codename rather than 'noble'. Switched to 11.0-preview-resolute-chiseled-extra (Ubuntu 26.04), mirroring the existing floating -preview tag convention. Verified with trivy image --vuln-type os,library --ignore-unfixed --severity HIGH,CRITICAL (the same flags docker-image-test/action.yml uses): 0 findings, exit code 0. Prompt: fix up the build issues; build fails Claude-Session: https://claude.ai/code/session_01313QV1tQYNiHLrRRyaGVSg
credfeto
approved these changes
Sep 10, 2026
Member
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
How Has This Been Tested
Types of changes
functionality to change)
Deployment Configuration Changes
Checklist
run:/script:body (workflow or composite action); pass it via step-levelenv:and reference$VAR(bash) orprocess.env.VAR(github-script) instead.