.NET: chore: updates microsoft extensions and related packages to their latest version, as well as global.json dotnet sdk version to align

[Vincent Biret (baywet)]

Updates all microsoft extensions packages to their latest version in hope of unblocking dependabot

[Copilot]

🟡 Changes recommended

A few net10-pinned packages remain at 10.0.0 despite the PR’s “latest” update intent, so the version set looks incomplete/inconsistent for the stated goal.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates centrally-managed .NET package versions (via dotnet/Directory.Packages.props) to newer Microsoft.* patch/minor releases, intended to unblock Dependabot by moving Microsoft Extensions and related packages forward.

Changes:

• Bumps several .NET 10-related packages from 10.0.11 → 10.0.12 (e.g., System.Text.Json, System.Threading.Channels, DiagnosticSource, various Microsoft.Extensions.*).
• Updates some Microsoft.Extensions feature packages to 10.9.0 (e.g., Microsoft.Extensions.Http.Resilience, ServiceDiscovery, VectorData.Abstractions, Compliance.Abstractions).
• Updates Microsoft.Data.Sqlite and Microsoft.Bcl.AsyncInterfaces to 10.0.12.

File summaries

File	Description
dotnet/Directory.Packages.props	Central package version bumps for Microsoft.Extensions and related .NET 10 packages.

Review details

Suppressed comments (1)

dotnet/Directory.Packages.props:55

• System.Net.Http.Json remains pinned to 10.0.0 while other net10 System.* packages were updated to 10.0.12 in this PR; if the goal is “latest” patch levels to unblock dependabot, consider updating this pin too for consistency.

    <PackageVersion Include="System.Net.Http.Json" Version="10.0.0" />

• Files reviewed: 1/1 changed files
• Comments generated: 2
• Review effort level: Lite

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟢 Approval recommended

The changes are limited to central package version updates and align with the repo’s .NET 10 SDK usage without introducing any evident repo-local incompatibilities.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0 new
• Review effort level: Lite

[github-actions]

MAF Automated Review — Iteration 1

Result: Findings reported
Scope: full PR (1 commit(s)): feb01e0a8fb5
Model: gpt-5.6-sol-fast

Overview

The PR consistently aligns Microsoft runtime packages on 10.0.12 and related Extensions packages on 10.9.0 through the repository's central package manifest. Central transitive pinning, broad multi-target CI, package validation, and dependency auditing provide strong guardrails, and no security-specific regression was identified. However, a pinning-disabled net472 test project resolves the prior System.Text.Json assembly while a referenced project compiles against the new one, causing the supported net472 build to fail.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
1 verified finding remained after source verification (1 high) across 1 file. Details are attached to the affected lines below.

Affected areas: dotnet/Directory.Packages.props

[Copilot]

🔵 Needs a closer look

Broad dependency + SDK pin updates can have wide impact and should be validated by CI/build results and manual review of any breaking changes.

Review details

• Files reviewed: 3/3 changed files
• Comments generated: 1
• Review effort level: Lite

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall line coverage in commit f15d611 in the deps/ms-extensions branch is 84%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	deps/ms-extensions f15d611	+/-
/home/runner/wo...valConverter.cs	—	100%	—
/home/runner/wo...entsProvider.cs	—	99%	—
/home/runner/wo...nticAnalyzer.cs	—	94%	—
/home/runner/wo...tClientAgent.cs	—	91%	—
/home/runner/wo...putConverter.cs	—	90%	—
/home/runner/wo...kflowBuilder.cs	—	90%	—
/home/runner/wo...kflowSession.cs	—	87%	—
/home/runner/wo...SkillsSource.cs	—	86%	—
/home/runner/wo...onExtensions.cs	—	81%	—
/home/runner/wo...ctionVisitor.cs	—	70%	—