[release/10.0] Source code updates from dotnet/dotnet

[dotnet-maestro]

Note

This is a codeflow update. It may contain both source code changes from the VMR as well as dependency updates. Learn more here.

This pull request brings the following source code changes

From https://github.com/dotnet/dotnet

• Subscription: 2ea855fa-50be-4519-984f-f6036952ff14
• Build: 20251023.13 (288435)
• Date Produced: October 24, 2025 8:05:31 AM UTC
• Commit: 7b29526f2107416f68578bcb9deaca74fcfcf7f0
• Commit Diff: d499f9c...7b29526
• Branch: release/10.0.1xx

Updated Dependencies

• From 10.0.0-beta.25519.102 to 10.0.0-beta.25523.113
  • Microsoft.DotNet.Arcade.Sdk
  • Microsoft.DotNet.Build.Tasks.Templating
  • Microsoft.DotNet.Helix.Sdk
• From 10.0.0 to 10.0.0
  • Microsoft.Extensions.Caching.Memory
  • Microsoft.Extensions.Configuration
  • Microsoft.Extensions.Configuration.Abstractions
  • Microsoft.Extensions.Configuration.EnvironmentVariables
  • Microsoft.Extensions.Configuration.Json
  • Microsoft.Extensions.DependencyInjection
  • Microsoft.Extensions.DependencyModel
  • Microsoft.Extensions.Logging
  • Microsoft.NETCore.App.Ref
  • System.Formats.Asn1
  • System.Runtime.Caching
  • System.Text.Encodings.Web
  • System.Text.Json
• From 10.0.0-rtm.25519.102 to 10.0.0-rtm.25523.113
  • Microsoft.Extensions.HostFactoryResolver.Sources
  • Microsoft.NETCore.Platforms

Associated changes in source repos

• dotnet/arcade@e8ca693...aa655f2
• dotnet/diagnostics@297a926...fee8d69
• 456f972...12b8d44
• dotnet/msbuild@ef8ee47...995a3dc
• dotnet/runtime@7f46a7e...60629d1
• dotnet/sdk@0235c63...e6bc966
• dotnet/source-build-reference-packages@2beeb91...a9094d4
• microsoft/vstest@b7e8733...697c127
• dotnet/windowsdesktop@b7aa786...da5c1d5
• dotnet/winforms@2b94716...10bf112
• dotnet/wpf@8409237...72ca82c

[AndriySvyryd]

Since the change to stable versioning Helix is failing with

C:\Users\cloudtest\.nuget\packages\microsoft.dotnet.helix.sdk\10.0.0-beta.25523.108\tools\dotnet-cli\DotNetCli.targets(40,5): error : Unable to find dotnet cli runtime version 10.0.0 from any of the specified feeds. [D:\a\_work\1\s\eng\helix.proj]

@ViktorHofer @mmitche Have you seen this?

[ViktorHofer]

This failure is due to this line:

efcore/eng/helix.proj

Line 33 in af2d7b8

<AdditionalDotNetPackage Include="$(MicrosoftNETCoreAppRefVersion)">

With that you tell helix to restore the runtime package with that specific version which currently is stable. But the task doesn't have access to the isolated feed in which the stable package resides.

I think this means that the default URI that it tries to fetch the runtime package from is incorrect. I'm not sure why you need this entry at all.

[SamMonoRT]

This failure is due to this line:

efcore/eng/helix.proj

Line 33 in af2d7b8

<AdditionalDotNetPackage Include="$(MicrosoftNETCoreAppRefVersion)">

This was introduced well back in b2dd10e#diff-de3ca0ca5220bb3b322733f4e43e179b906cb9a96eefb0c5a04d8adfd31e32e4 --- why would it fail now, and would you know the correct way to fix this?

[ViktorHofer]

So the SDK that this PR upgrades to has the following bundled NETCoreRuntime version:

Helix reads that here: https://github.com/dotnet/arcade/blob/d48732057be73512b3bac9c01eeacd59398c16d5/src/Microsoft.DotNet.Helix/Sdk/tools/dotnet-cli/DotNetCli.props#L10

So that's not it.

---

I see that previous PR already failed in this step and were merged on red:

This started happening with #36972

[ViktorHofer]

So my above statement is correct:

With that you tell helix to restore the runtime package with that specific version which currently is stable. But the task doesn't have access to the isolated feed in which the stable package resides.
I think this means that the default URI that it tries to fetch the runtime package from is incorrect. I'm not sure why you need this entry at all.

cc @mmitche

[mmitche]

MicrosoftNetCoreAppRef isn't the right package for this. You want the non-stable version. Microsoft.NETCore.Platforms. The system will find the non-stable directory in storage, find the a productVersion.txt inside and see that the file name is actually supposed to be stable, and then construct the correct URI.

[mmitche]

Looking good now.

[SamMonoRT]

@AndriySvyryd @cincuranet - this looks good to merge now