Skip to content

Update .NET runtime packages to 10.0.10 - #41127

Merged
Ben Hillis (benhillis) merged 1 commit into
masterfrom
user/benhill/fix-dependabot-alerts
Jul 21, 2026
Merged

Ben Hillis (benhillis) merged 1 commit into
masterfrom
user/benhill/fix-dependabot-alerts

Conversation

@benhillis

Copy link
Copy Markdown
Member

Updates the x64 and ARM64 .NET 10 runtime packages from 10.0.9 to 10.0.10. This addresses the ten open Dependabot alerts for GHSA-cvvh-rhrc-wg4q, GHSA-w7cw-xp7h-6j5j, GHSA-qvw7-jm5c-6hqw, GHSA-74jp-vm22-8q8x, and GHSA-wp74-jgxh-gv4q.

Copilot-Session: 0b1ba0cf-1463-4cfb-af0b-b0f0b39c6bad
Copilot AI review requested due to automatic review settings July 21, 2026 05:27
@benhillis
Ben Hillis (benhillis) requested a review from a team as a code owner July 21, 2026 05:27

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s NuGet-pinned .NET 10 Windows runtime packages to a patched version to address the Dependabot/security advisories listed in the PR description.

Changes:

  • Bump Microsoft.NETCore.App.Runtime.win-arm64 from 10.0.9 → 10.0.10.
  • Bump Microsoft.NETCore.App.Runtime.win-x64 from 10.0.9 → 10.0.10.

@benhillis
Ben Hillis (benhillis) enabled auto-merge (squash) July 21, 2026 05:34
@benhillis
Ben Hillis (benhillis) merged commit c2ad286 into master Jul 21, 2026
12 checks passed
@benhillis
Ben Hillis (benhillis) deleted the user/benhill/fix-dependabot-alerts branch July 21, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants