Add .NET 10 as a publishing target and move VS Code extension to .NET 10#755
Merged
Conversation
Copilot
AI
changed the title
[WIP] Add .NET 10 as a publishing target for DevSkim binaries
Add .NET 10 as a publishing target and move VS Code extension to .NET 10
Jun 9, 2026
Contributor
|
/azp run |
|
Azure Pipelines successfully started running 2 pipeline(s). |
Contributor
|
/azp run |
|
Azure Pipelines successfully started running 2 pipeline(s). |
* Bump tmp from 0.2.5 to 0.2.7 in /DevSkim-VSCode-Plugin (#754) Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.7. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.5...v0.2.7) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump uuid and @azure/identity in /DevSkim-VSCode-Plugin (#752) Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [@azure/identity](https://github.com/Azure/azure-sdk-for-js). These dependencies need to be updated together. Removes `uuid` Updates `@azure/identity` from 4.13.0 to 4.13.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.13.0...@azure/identity_4.13.1) --- updated-dependencies: - dependency-name: uuid dependency-version: dependency-type: indirect - dependency-name: "@azure/identity" dependency-version: 4.13.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump qs from 6.15.0 to 6.15.2 in /DevSkim-VSCode-Plugin (#753) Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2. - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.0...v6.15.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Initial plan * Fix NU5017: add CreateRidSpecificToolPackages=false and conditional RuntimeIdentifiers; merge main; update Changelog.md --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Contributor
|
/azp run |
|
Azure Pipelines successfully started running 2 pipeline(s). |
Contributor
There was a problem hiding this comment.
Pull request overview
Adds .NET 10 support across DevSkim’s .NET projects and CI, and switches the VS Code extension’s bundled language server publish target to .NET 10.
Changes:
- Added
net10.0to target frameworks for the core library, CLI, and test projects; multi-targeted the Language Server withnet8.0;net10.0. - Updated Azure Pipelines matrices and build steps to install/test with the .NET 10 SDK.
- Updated the VS Code extension build scripts to publish the Language Server for
net10.0(and updated the npm lockfile/changelog accordingly).
Show a summary per file
| File | Description |
|---|---|
| Pipelines/vscode/devskim-vscode-release.yml | Installs .NET 10 SDK for VS Code release pipeline build stage. |
| Pipelines/vscode/devskim-vscode-pr.yml | Installs .NET 10 SDK for VS Code PR validation build stage. |
| Pipelines/vs/devskim-visualstudio-release.yml | Adds .NET 10 to test matrix and installs .NET 10 SDK for VS build stage. |
| Pipelines/vs/devskim-visualstudio-pr.yml | Adds .NET 10 to test matrix and installs .NET 10 SDK for VS build stage. |
| Pipelines/cli/devskim-cli-release.yml | Adds .NET 10 to CLI test matrix. |
| Pipelines/cli/devskim-cli-pr.yml | Moves PR build DotnetVersion to 10.0.x and adds .NET 10 to test matrix. |
| DevSkim-VSCode-Plugin/package.json | Publishes the Language Server with -f net10.0 for VS Code packaging. |
| DevSkim-VSCode-Plugin/package-lock.json | Updates resolved npm dependency graph used by the VS Code extension build. |
| DevSkim-DotNet/Microsoft.DevSkim/Microsoft.DevSkim.csproj | Adds net10.0 TFM for the core library package. |
| DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj | Adds net10.0 TFM for test runs under .NET 10. |
| DevSkim-DotNet/Microsoft.DevSkim.LanguageServer/Microsoft.DevSkim.LanguageServer.csproj | Multi-targets Language Server for net8.0 and net10.0. |
| DevSkim-DotNet/Microsoft.DevSkim.CLI/Microsoft.DevSkim.CLI.csproj | Adds net10.0 TFM and adjusts tool packaging behavior for .NET 10 SDK. |
| Changelog.md | Adds changelog entries documenting the .NET 10 support and related updates. |
Copilot's findings
Files not reviewed (1)
- DevSkim-VSCode-Plugin/package-lock.json: Generated file
Comments suppressed due to low confidence (1)
DevSkim-VSCode-Plugin/package-lock.json:159
- This PR includes a lockfile-level dependency upgrade for the VS Code extension build tooling (e.g.,
@azure/identity-> 4.13.1, msal v5), which also raises the Node engine requirement to >=20.0.0. The PR description doesn’t mention these npm dependency changes; either call them out explicitly (and ensure CI/build environments pin Node 20+) or revert the lockfile upgrades if they were incidental.
- Files reviewed: 12/13 changed files
- Comments generated: 1
| The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), | ||
| and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). | ||
|
|
||
| ## [1.0.86] - 2026-06-10 |
chanel-y
approved these changes
Jun 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Extends framework support to .NET 10 across the libraries, CLI, language server, and build pipelines, and switches the VS Code extension's bundled language server to .NET 10.
Target frameworks
Microsoft.DevSkim,Microsoft.DevSkim.CLI,Microsoft.DevSkim.Tests: appendednet10.0Microsoft.DevSkim.LanguageServer: changed single-targetnet8.0to multi-targetnet8.0;net10.0—net8.0retained so the Visual Studio extension's existingdotnet publish -f net8.0step is unaffectedVS Code extension
package.jsonnet-setup/net-setup:releasenow publish the language server with-f net10.0Pipelines
10.0.xtodotnetVersionsUseDotNet@2task to install the10.0.xSDK (now required for the VS Code language server publish)Notes
DotnetVersion) and the Visual Studio extension's own TFM are intentionally left on9.0.x/net8.0; this PR adds .NET 10 as a target and only swaps the VS Code extension per scope.nuget.configprivate feed configuration is unchanged.