Upgrade to .NET 10 and Microsoft.Data.SqlClient 6.x

.pipelines/cosmos-pipelines.yml

@@ -54,10 +54,10 @@ steps:
 # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
 # specifying the runtime version a project targets."
 - task: UseDotNet@2
-  displayName: Setup .NET SDK v8.0.x
+  displayName: Setup .NET SDK v10.0.x
   inputs:
     packageType: sdk
-    version: 8.0.x
+    version: 10.0.x
     installationPath: $(Agent.ToolsDirectory)/dotnet
 
 - task: NuGetToolInstaller@1

.pipelines/dwsql-pipelines.yml

@@ -47,10 +47,10 @@ jobs:
   # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
   # specifying the runtime version a project targets."
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   - task: NuGetToolInstaller@1
 
@@ -176,10 +176,10 @@ jobs:
   # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
   # specifying the runtime version a project targets."
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   - task: NuGetToolInstaller@1
 

.pipelines/mssql-pipelines.yml

@@ -49,10 +49,10 @@ jobs:
   # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
   # specifying the runtime version a project targets."
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   - task: NuGetToolInstaller@1
 

.pipelines/mysql-pipelines.yml

@@ -46,10 +46,10 @@ jobs:
   # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
   # specifying the runtime version a project targets."
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   - task: NuGetToolInstaller@1
 

.pipelines/pg-pipelines.yml

@@ -41,10 +41,10 @@ jobs:
   # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
   # specifying the runtime version a project targets."
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   - task: NuGetToolInstaller@1
 

.pipelines/templates/build-pipelines.yml

@@ -54,10 +54,10 @@ steps:
 # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from 
 # specifying the runtime version a project targets."
 - task: UseDotNet@2
-  displayName: Setup .NET SDK v8.0.x
+  displayName: Setup .NET SDK v10.0.x
   inputs:
     packageType: sdk
-    version: 8.0.x
+    version: 10.0.x
     installationPath: $(Agent.ToolsDirectory)/dotnet
 
 - task: NuGetToolInstaller@1

.pipelines/templates/mssql-test-steps.yml

@@ -31,10 +31,10 @@ steps:
 # Per Microsoft Learn Docs, "Selecting the .NET SDK version is independent from
 # specifying the runtime version a project targets."
 - task: UseDotNet@2
-  displayName: Setup .NET SDK v8.0.x
+  displayName: Setup .NET SDK v10.0.x
   inputs:
     packageType: sdk
-    version: 8.0.x
+    version: 10.0.x
 
 - task: NuGetToolInstaller@1
 

.pipelines/templates/static-tools.yml

@@ -21,10 +21,10 @@ jobs:
     clean: true  # if true, execute `execute git clean -ffdx && git reset --hard HEAD` before fetching
 
   - task: UseDotNet@2
-    displayName: Setup .NET SDK v8.0.x
+    displayName: Setup .NET SDK v10.0.x
     inputs:
       packageType: sdk
-      version: 8.0.x
+      version: 10.0.x
 
   # Analyze source and build output text files for credentials
   - task: CredScan@3

Dockerfile

@@ -1,13 +1,13 @@
 # Version values referenced from https://hub.docker.com/_/microsoft-dotnet-aspnet
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-cbl-mariner2.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0-azurelinux3.0 AS build
 
 
 WORKDIR /src
 COPY [".", "./"]
 RUN dotnet build "./src/Service/Azure.DataApiBuilder.Service.csproj" -c Docker -o /out -r linux-x64
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0-cbl-mariner2.0 AS runtime
+FROM mcr.microsoft.com/dotnet/aspnet:10.0-azurelinux3.0 AS runtime
 
 COPY --from=build /out /App
 # Add default dab-config.json to /App in the image

global.json

@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "8.0.420",
+    "version": "10.0.301",
     "rollForward": "latestFeature"
   }
 }

scripts/create-manifest-file.ps1

@@ -21,7 +21,10 @@ if ($isReleaseBuild -eq 'true')
 }
 
 # Generating hash for DAB packages
-$dotnetTargetFrameworks = "net8.0"
+# TODO: Release-engineering - confirm the net10.0_{linux,win,osx}-x64 download
+# URLs and SHA hashes referenced downstream still resolve after the .NET 10
+# publish cycle runs. (Add a tracking issue number/link here once created.)
+$dotnetTargetFrameworks = "net10.0"
 $RIDs = "win-x64", "linux-x64", "osx-x64"
 [hashtable]$frameworkPlatformDownloadMetadata = @{}
 [hashtable]$frameworkPlatformFileHashMetadata = @{}
@@ -62,16 +65,16 @@ $latestBlock = @'
     "releaseDate": "${releaseDate}",
     "files": {
         "linux-x64":{
-            "url": "$($frameworkPlatformDownloadMetadata["net8.0_linux-x64"])",
-            "sha": "$($frameworkPlatformFileHashMetadata["net8.0_linux-x64"])"
+            "url": "$($frameworkPlatformDownloadMetadata["net10.0_linux-x64"])",
+            "sha": "$($frameworkPlatformFileHashMetadata["net10.0_linux-x64"])"
         },
         "win-x64":{
-            "url": "$($frameworkPlatformDownloadMetadata["net8.0_win-x64"])",
-            "sha": "$($frameworkPlatformFileHashMetadata["net8.0_win-x64"])"
+            "url": "$($frameworkPlatformDownloadMetadata["net10.0_win-x64"])",
+            "sha": "$($frameworkPlatformFileHashMetadata["net10.0_win-x64"])"
         },
         "osx-x64":{
-            "url": "$($frameworkPlatformDownloadMetadata["net8.0_osx-x64"])",
-            "sha": "$($frameworkPlatformFileHashMetadata["net8.0_osx-x64"])"
+            "url": "$($frameworkPlatformDownloadMetadata["net10.0_osx-x64"])",
+            "sha": "$($frameworkPlatformFileHashMetadata["net10.0_osx-x64"])"
         },
         "nuget": {
             "url": "${download_url_nuget_cli}",

scripts/notice-generation.ps1

@@ -15,7 +15,7 @@ Invoke-WebRequest $chiliCreamLicenseMetadataURL -UseBasicParsing |
  Out-File $chiliCreamLicenseSavePath
 
 # Define the path to the license file in your repository and Read the content of the license file
-$sqlClientSNILicenseFilePath = "$BuildSourcesDir/external_licenses/Microsoft.Data.SqlClient.SNI.5.2.0.License.txt"
+$sqlClientSNILicenseFilePath = "$BuildSourcesDir/external_licenses/Microsoft.Data.SqlClient.SNI.6.0.2.License.txt"
 $sqlClientSNILicense = Get-Content -Path $sqlClientSNILicenseFilePath -Raw
 
 # Replace erroneous copyright, using [System.IO.File] for better performance than Get-Content and Set-Content

scripts/publish.ps1

@@ -10,12 +10,12 @@ param (
 )
 
 $BuildRoot = Split-Path $PSScriptRoot -Parent
-$dotnetTargetFrameworks = "net8.0"
+$dotnetTargetFrameworks = "net10.0"
 $RIDs = "win-x64", "linux-x64", "osx-x64"
 
 # Runs dotnet publish for each target framework and RID.
 # Example results:
-# \dotnetpublishout\publish\Release\net8.0\win-x64\dab
+# \dotnetpublishout\publish\Release\net10.0\win-x64\dab
 if ($Package)
 {
     foreach ($targetFramework in $dotnetTargetFrameworks)
@@ -30,7 +30,7 @@ if ($Package)
 
 # Zips the published output for each target framework and RID.
 # For example:
-# \dotnetpublishout\publish\Release\net8.0\win-x64\dab_net8.0_win-x64-0.14.123-rc.zip
+# \dotnetpublishout\publish\Release\net10.0\win-x64\dab_net10.0_win-x64-0.14.123-rc.zip
 if ($CreateZip)
 {
     foreach ($targetFramework in $dotnetTargetFrameworks)

src/Aspire.AppHost/AppHost.cs

@@ -25,7 +25,7 @@
         }
 
         var mssqlService = builder.AddProject<Projects.Azure_DataApiBuilder_Service>("mssql-service", "Development")
-            .WithArgs("-f", "net8.0")
+            .WithArgs("-f", "net10.0")
             .WithEndpoint(endpointName: "https", (e) => e.Port = 1234)
             .WithEndpoint(endpointName: "http", (e) => e.Port = 2345)
             .WithEnvironment("db-type", "mssql")
@@ -65,7 +65,7 @@
         }
 
         var pgService = builder.AddProject<Projects.Azure_DataApiBuilder_Service>("pg-service", "Development")
-            .WithArgs("-f", "net8.0")
+            .WithArgs("-f", "net10.0")
             .WithEndpoint(endpointName: "https", (e) => e.Port = 1234)
             .WithEndpoint(endpointName: "http", (e) => e.Port = 2345)
             .WithEnvironment("db-type", "postgresql")

src/Aspire.AppHost/Aspire.AppHost.csproj

@@ -4,7 +4,7 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net8.0</TargetFramework>
+    <TargetFramework>net10.0</TargetFramework>
     <ImplicitUsings>enable</ImplicitUsings>
     <NoWarn>NU1603;NU1605</NoWarn>
     <Nullable>enable</Nullable>
@@ -15,6 +15,9 @@
     <PackageReference Include="Aspire.Hosting.AppHost" />
     <PackageReference Include="Aspire.Hosting.SqlServer" />
     <PackageReference Include="Aspire.Hosting.PostgreSQL" />
+    <!-- Force the transitive MessagePack (via Aspire.Hosting/KubernetesClient) up to a
+         patched version to resolve NU1903 (GHSA-hv8m-jj95-wg3x). -->
+    <PackageReference Include="MessagePack" />
   </ItemGroup>
 
   <ItemGroup>

src/Auth/Azure.DataApiBuilder.Auth.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFrameworks>net8.0</TargetFrameworks>
+    <TargetFrameworks>net10.0</TargetFrameworks>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <OutputPath>$(BaseOutputPath)\engine</OutputPath>

src/Azure.DataApiBuilder.Mcp/Azure.DataApiBuilder.Mcp.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFramework>net8.0</TargetFramework>
+    <TargetFramework>net10.0</TargetFramework>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <!-- Suppress transitive dependency version mismatch warnings from MCP SDK -->

src/Cli.Tests/Cli.Tests.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFrameworks>net8.0</TargetFrameworks>
+        <TargetFrameworks>net10.0</TargetFrameworks>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
         <IsPackable>false</IsPackable>

src/Cli/Cli.csproj

@@ -2,7 +2,7 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFrameworks>net8.0</TargetFrameworks>
+    <TargetFrameworks>net10.0</TargetFrameworks>
     <RootNamespace>Cli</RootNamespace>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>

src/Config/Azure.DataApiBuilder.Config.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFrameworks>net8.0</TargetFrameworks>
+    <TargetFrameworks>net10.0</TargetFrameworks>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <OutputPath>$(BaseOutputPath)\engine</OutputPath>
@@ -28,6 +28,7 @@
       <PackageReference Include="Humanizer" />
       <PackageReference Include="Npgsql" />
       <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" />
+      <PackageReference Include="Microsoft.Extensions.Primitives" />
   </ItemGroup>
 
     <ItemGroup>

src/Core/Azure.DataApiBuilder.Core.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFrameworks>net8.0</TargetFrameworks>
+    <TargetFrameworks>net10.0</TargetFrameworks>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <PackageOutputPath>./nupkg</PackageOutputPath>

src/Core/Resolvers/Factories/MutationEngineFactory.cs

@@ -107,7 +107,7 @@ public IMutationEngine GetMutationEngine(DatabaseType databaseType)
                     $"{nameof(databaseType)}:{databaseType} could not be found within the config",
                     HttpStatusCode.BadRequest,
                     DataApiBuilderException.SubStatusCodes.DataSourceNotFound);
-            };
+            }
 
             return mutationEngine;
         }

src/Core/Resolvers/Sql Query Structures/SqlUpdateQueryStructure.cs

@@ -122,26 +122,26 @@ public SqlUpdateStructure(
                     Predicates.Add(CreatePredicateForParam(new KeyValuePair<string, object?>(pkBackingColumn, param.Value)));
                 }
                 else // Unpack the input argument type as columns to update
-                if (param.Key == UpdateAndPatchMutationBuilder.INPUT_ARGUMENT_NAME)
-                {
-                    IDictionary<string, object?> updateFields =
-                        GQLMutArgumentToDictParams(context, UpdateAndPatchMutationBuilder.INPUT_ARGUMENT_NAME, mutationParams);
-
-                    foreach (KeyValuePair<string, object?> field in updateFields)
+                    if (param.Key == UpdateAndPatchMutationBuilder.INPUT_ARGUMENT_NAME)
                     {
-                        string fieldBackingColumn = field.Key;
-                        if (sqlMetadataProvider.TryGetBackingColumn(entityName, field.Key, out string? resolvedBackingColumn)
-                            && !string.IsNullOrWhiteSpace(resolvedBackingColumn))
-                        {
-                            fieldBackingColumn = resolvedBackingColumn;
-                        }
+                        IDictionary<string, object?> updateFields =
+                            GQLMutArgumentToDictParams(context, UpdateAndPatchMutationBuilder.INPUT_ARGUMENT_NAME, mutationParams);
 
-                        if (columns.Contains(fieldBackingColumn))
+                        foreach (KeyValuePair<string, object?> field in updateFields)
                         {
-                            UpdateOperations.Add(CreatePredicateForParam(new KeyValuePair<string, object?>(key: fieldBackingColumn, field.Value)));
+                            string fieldBackingColumn = field.Key;
+                            if (sqlMetadataProvider.TryGetBackingColumn(entityName, field.Key, out string? resolvedBackingColumn)
+                                && !string.IsNullOrWhiteSpace(resolvedBackingColumn))
+                            {
+                                fieldBackingColumn = resolvedBackingColumn;
+                            }
+
+                            if (columns.Contains(fieldBackingColumn))
+                            {
+                                UpdateOperations.Add(CreatePredicateForParam(new KeyValuePair<string, object?>(key: fieldBackingColumn, field.Value)));
+                            }
                         }
                     }
-                }
             }
 
             if (UpdateOperations.Count == 0)