From 598b72423b972b50dc576c841f20cfa5801c7f5c Mon Sep 17 00:00:00 2001 From: Andy Gerlicher Date: Mon, 1 Jun 2026 13:49:56 -0700 Subject: [PATCH] Remove .NET SDK pin from global.json SFI scanners flag the literal SDK version string in global.json even though rollForward already lets the build use newer 10.x SDKs. Pipelines already install 10.x via UseDotNet@2, so dropping the sdk block lets CI track the latest 10.x automatically with no string for scanners to flag. Also add a Prerequisites section to CONTRIBUTING.md so local devs know they need 8.x/9.x/10.x SDKs installed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- CONTRIBUTING.md | 14 ++++++++++++++ global.json | 5 ----- 2 files changed, 14 insertions(+), 5 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 72f1506a..dd813b65 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,6 +1,20 @@ # Contributing +## Prerequisites + +This repository does not pin a specific .NET SDK version in `global.json`; the +build uses whichever SDK is installed. To build and test locally you need: + +- A current .NET 10 SDK (the build targets the latest 10.x). +- .NET 8 and .NET 9 SDKs as well, since the test projects target `net8.0`, + `net9.0`, and `net10.0` (plus `net472` on Windows). + +CI installs these via `UseDotNet@2` (`8.x`, `9.x`, `10.x`); mirror that +locally. Download them from . + +## Contributions + This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.microsoft.com. diff --git a/global.json b/global.json index 8bfad9c3..7c873321 100644 --- a/global.json +++ b/global.json @@ -1,9 +1,4 @@ { - "sdk": { - "version": "10.0.203", - "rollForward": "latestMinor", - "allowPrerelease": true - }, "msbuild-sdks": { "Microsoft.Build.NoTargets": "3.7.134" }