microsoft · gfs · Jun 17, 2026 · Jun 9, 2026 · Jun 9, 2026 · Jun 10, 2026
diff --git a/Changelog.md b/Changelog.md
@@ -4,6 +4,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.86] - 2026-06-10
+### Added
+- Added .NET 10 as a publishing target for the DevSkim library, CLI, and Language Server.
+
+### Changed
+- Swapped the VS Code extension language server to publish against .NET 10.
+- Kept the DevSkim CLI dotnet tool portable (framework-dependent) by setting `CreateRidSpecificToolPackages=false`, avoiding the .NET 10 SDK's new RID-specific tool packaging that broke `dotnet pack` with NU5017 and would have dropped arm64 and pre-.NET 10 SDK install support.
+
+### Pipeline
+- Added .NET 10 (`10.0.x`) SDK to the CLI, VS Code, and Visual Studio build pipelines.
+
+## [1.0.85] - 2026-06-10
+### Dependencies
+- Bump qs from 6.15.0 to 6.15.2 in /DevSkim-VSCode-Plugin (#753)
+
+## [1.0.84] - 2026-06-10
+### Dependencies
+- Bump @azure/identity from 4.13.0 to 4.13.1 and remove the now-unused uuid transitive dependency in /DevSkim-VSCode-Plugin (#752)
+
+## [1.0.83] - 2026-06-10
+### Dependencies
+- Bump tmp from 0.2.5 to 0.2.7 in /DevSkim-VSCode-Plugin (#754)
+
 ## [1.0.82] - 2026-05-12
 ### Dependencies
 - Update dependencies for VS Code Extension

diff --git a/DevSkim-DotNet/Microsoft.DevSkim.CLI/Microsoft.DevSkim.CLI.csproj b/DevSkim-DotNet/Microsoft.DevSkim.CLI/Microsoft.DevSkim.CLI.csproj
@@ -2,17 +2,26 @@
 
 <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFrameworks>net8.0;net9.0</TargetFrameworks>
+    <TargetFrameworks>net8.0;net9.0;net10.0</TargetFrameworks>
     <AssemblyName>devskim</AssemblyName>
     <StartupObject>Microsoft.DevSkim.CLI.Program</StartupObject>
-    <RuntimeIdentifiers>win-x64;linux-x64;osx-x64</RuntimeIdentifiers>
+    <!-- Required by the standalone CLI publish jobs (dotnet-publish-linux-mac-job.yml /
+         dotnet-publish-win-netcore-job.yml) that produce the per-platform GitHub Release zips.
+         Suppressed during `dotnet pack` so the tool package is built as a portable
+         (framework-dependent) package and _ToolPackageShouldIncludeImplementation stays true. -->
+    <RuntimeIdentifiers Condition="'$(_IsPacking)' != 'true'">win-x64;linux-x64;osx-x64</RuntimeIdentifiers>
     <Product>Microsoft DevSkim Command Line Interface</Product>
     <Version>0.0.0</Version>
     <Authors>Microsoft</Authors>
     <Company>Microsoft</Company>
     <copyright>© Microsoft Corporation. All rights reserved.</copyright> 
     <Description>DevSkim is a framework and language analyzer that provides inline security analysis. This is a Dotnet Tool package. For the library package, see Microsoft.CST.DevSkim.</Description>
     <PackAsTool>true</PackAsTool>
+    <!-- .NET 10 SDK otherwise emits RID-specific tool packages plus an empty outer
+         marker package whose empty .snupkg trips NU5017 during pack. Keeping the
+         dotnet tool portable (framework-dependent) also preserves arm64 and
+         pre-.NET 10 SDK `dotnet tool install` support. -->
+    <CreateRidSpecificToolPackages>false</CreateRidSpecificToolPackages>
     <ToolCommandName>devskim</ToolCommandName>
     <PackageId>Microsoft.CST.DevSkim.CLI</PackageId>
     <PackageTags>Security Linter</PackageTags>

diff --git a/DevSkim-DotNet/Microsoft.DevSkim.LanguageServer/Microsoft.DevSkim.LanguageServer.csproj b/DevSkim-DotNet/Microsoft.DevSkim.LanguageServer/Microsoft.DevSkim.LanguageServer.csproj
@@ -5,7 +5,7 @@
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <RootNamespace>DevSkim.LanguageServer</RootNamespace>
-    <TargetFramework>net8.0</TargetFramework>
+    <TargetFrameworks>net8.0;net10.0</TargetFrameworks>
     <PackageLicenseExpression>MIT</PackageLicenseExpression>
     <Authors>Microsoft</Authors>
     <copyright>© Microsoft Corporation. All rights reserved.</copyright> 

diff --git a/DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj b/DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFrameworks>net8.0;net9.0</TargetFrameworks>
+        <TargetFrameworks>net8.0;net9.0;net10.0</TargetFrameworks>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
         <OutputType>Exe</OutputType>

diff --git a/DevSkim-DotNet/Microsoft.DevSkim/Microsoft.DevSkim.csproj b/DevSkim-DotNet/Microsoft.DevSkim/Microsoft.DevSkim.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFrameworks>netstandard2.1;net8.0;net9.0</TargetFrameworks>    
+    <TargetFrameworks>netstandard2.1;net8.0;net9.0;net10.0</TargetFrameworks>    
     <PackageId>Microsoft.CST.DevSkim</PackageId>
     <PackageVersion>0.0.0</PackageVersion>
     <PackageTags>Security Linter</PackageTags>

diff --git a/DevSkim-VSCode-Plugin/package-lock.json b/DevSkim-VSCode-Plugin/package-lock.json
diff --git a/DevSkim-VSCode-Plugin/package.json b/DevSkim-VSCode-Plugin/package.json
@@ -291,8 +291,8 @@
 		"clean:out": "npx --quiet -y rimraf --glob **/out && npx --quiet -y rimraf --glob **/tsconfig.tsbuildinfo",
 		"clean:modules": "npx --quiet -y rimraf --glob **/node_modules",
 		"clean:vsix": "npx --quiet -y rimraf --glob *.vsix",
-		"net-setup": "dotnet publish -c Debug -f net8.0 ../DevSkim-DotNet/Microsoft.DevSkim.LanguageServer -o devskimBinaries",
-		"net-setup:release": "dotnet publish -c Release -f net8.0 ../DevSkim-DotNet/Microsoft.DevSkim.LanguageServer -o devskimBinaries",
+		"net-setup": "dotnet publish -c Debug -f net10.0 ../DevSkim-DotNet/Microsoft.DevSkim.LanguageServer -o devskimBinaries",
+		"net-setup:release": "dotnet publish -c Release -f net10.0 ../DevSkim-DotNet/Microsoft.DevSkim.LanguageServer -o devskimBinaries",
 		"setup": "npm install && npm run net-setup",
 		"setup:release": "npm install && npm run net-setup:release",
 		"reset": "npm run clean && npm run setup",

diff --git a/Pipelines/cli/devskim-cli-pr.yml b/Pipelines/cli/devskim-cli-pr.yml
@@ -21,7 +21,7 @@ resources:
 
 variables:
   BuildConfiguration: 'Release'
-  DotnetVersion: '9.0.x'
+  DotnetVersion: '10.0.x'
 
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
@@ -36,7 +36,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_windows'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           projectPath: 'DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj'
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Windows-2022
@@ -50,7 +50,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_ubuntu'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Ubuntu-2204
           poolOs: linux

diff --git a/Pipelines/cli/devskim-cli-release.yml b/Pipelines/cli/devskim-cli-release.yml
@@ -35,7 +35,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_windows'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           projectPath: 'DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj'
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Windows-2022
@@ -49,7 +49,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_ubuntu'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Ubuntu-2204
           poolOs: linux

diff --git a/Pipelines/vs/devskim-visualstudio-pr.yml b/Pipelines/vs/devskim-visualstudio-pr.yml
@@ -32,7 +32,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_windows'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           projectPath: 'DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj'
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Windows-2022
@@ -66,6 +66,11 @@ extends:
           inputs:
             packageType: 'sdk'
             version: '9.0.x'
+        - task: UseDotNet@2
+          displayName: Install Dotnet 10 SDK
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
         - template: nbgv-set-version-steps.yml@templates
         - task: PowerShell@2
           displayName: Mkdir for Extension

diff --git a/Pipelines/vs/devskim-visualstudio-release.yml b/Pipelines/vs/devskim-visualstudio-release.yml
@@ -31,7 +31,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_windows'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           projectPath: 'DevSkim-DotNet/Microsoft.DevSkim.Tests/Microsoft.DevSkim.Tests.csproj'
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Windows-2022
@@ -45,7 +45,7 @@ extends:
       - template: dotnet-test-job.yml@templates
         parameters:
           jobName: 'dotnet_test_ubuntu'
-          dotnetVersions: ['8.0.x','9.0.x']
+          dotnetVersions: ['8.0.x','9.0.x','10.0.x']
           poolName: MSSecurity-1ES-Build-Agents-Pool
           poolImage: MSSecurity-1ES-Ubuntu-2204
           poolOs: linux
@@ -79,6 +79,11 @@ extends:
           inputs:
             packageType: 'sdk'
             version: '9.0.x'
+        - task: UseDotNet@2
+          displayName: Install Dotnet 10 SDK
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
         - template: nbgv-set-version-steps.yml@templates
         - task: PowerShell@2
           displayName: Mkdir for Extension

diff --git a/Pipelines/vscode/devskim-vscode-pr.yml b/Pipelines/vscode/devskim-vscode-pr.yml
@@ -49,6 +49,11 @@ extends:
           inputs:
             packageType: 'sdk'
             version: '9.0.x'
+        - task: UseDotNet@2
+          displayName: Install Dotnet SDK
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
         - template: nbgv-set-version-steps.yml@templates
         - task: PowerShell@2
           displayName: Mkdir for Manifests and Packages

diff --git a/Pipelines/vscode/devskim-vscode-release.yml b/Pipelines/vscode/devskim-vscode-release.yml
@@ -48,6 +48,11 @@ extends:
           inputs:
             packageType: 'sdk'
             version: '9.0.x'
+        - task: UseDotNet@2
+          displayName: Install Dotnet SDK
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
         - template: nbgv-set-version-steps.yml@templates
         - task: PowerShell@2
           displayName: Mkdir for Manifests and Packages