Update DOTNETCORE runtime versions to 8.0.25, 9.0.14, 10.0.5

[Copilot]

Bumps .NET runtime versions per Stack Freshness requirements. 8.0.25 and 9.0.14 were already reflected in constants.yml and DotNetCoreRunTimeVersions.cs but build/__dotNetCoreRunTimeVersions.sh was stale; 10.0 required a full update from 10.0.4 → 10.0.5.

Changes

• images/constants.yml — Updated NET_CORE_APP_100 / ASPNET_CORE_APP_100 to 10.0.5; added missing _SHA entries for the 10.0 components (previously absent unlike 8.0/9.0)
• src/BuildScriptGenerator/DotNetCore/DotNetCoreRunTimeVersions.cs — Updated NetCoreApp100, AspnetCoreApp100, and both SHA constants to 10.0.5 values
• build/__dotNetCoreRunTimeVersions.sh — Synced 8.0 (8.0.7→8.0.25), 9.0 (9.0.0→9.0.14), and 10.0 (preview→10.0.5) with SHAs from constants.yml
• platforms/dotnet/versions/noble/versionsToBuild.txt — Added SDK 10.0.201 (the GA SDK shipping runtime 10.0.5)
• src/BuildScriptGenerator/DotNetCore/DotNetCoreSdkVersions.cs — DotNet100SdkVersion: 10.0.200 → 10.0.201

All SHA256 values sourced from the official .NET 10.0 release metadata.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• java.sun.com
  • Triggering command: /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java -jar /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/xml/tools/xml-extractor.jar --fileList=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/working/files-to-index2627838936538098201.list --sourceArchiveDir=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/src --outputDir=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/trap/csharp (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[vijaysaayi]

@copilot resolve merge conflicts

[Copilot]

@copilot resolve merge conflicts

Resolved the merge conflict in images/constants.yml (commit 2984097). The conflict was between our NET_CORE_APP_100: "10.0.5" update and the new DOTNET_SDK_* entries added in main. Both are now included, with DOTNET_SDK_100 set to 10.0.201 (the SDK that ships .NET Runtime 10.0.5).

[github-actions]

SHA Validation Summary

Stack	Status
PHP	❌ failure
.NET	⏭️ skipped

[vijaysaayi]

@copilot - Can you rebase with latest main ?

[Copilot]

@copilot - Can you rebase with latest main ?

Rebased onto the latest origin/main (020296f3). The conflict in images/constants.yml (our 10.0.5 version vs main's new DOTNET_SDK_* entries) was resolved — commit b5872da2.

[github-actions]

SHA Validation Summary

Stack	Status
PHP	❌ failure
.NET	✅ success

PHP Validation Output

Validating PHP SHA256 hashes from: images/constants.yml
==================================================
PHP 8.1.34: OK
PHP 8.2.30: OK
PHP 8.3.29: OK
PHP 8.4.16: OK
PHP 8.5.1: OK
==================================================
Validated: 5 PHP version(s)
VALIDATION PASSED

.NET Validation Output

Validating .NET SHA512 hashes...
  .NET Runtime 8.0.25: OK
  .NET Runtime 9.0.14: OK
  .NET Runtime 10.0.5: OK
  ASP.NET Core 8.0.25: OK
  ASP.NET Core 9.0.14: OK
  ASP.NET Core 10.0.5: OK
PASSED

[github-actions]

SHA Validation Summary

Stack	Status
PHP	❌ failure
.NET	✅ success

PHP Validation Output

Validating PHP SHA256 hashes from: images/constants.yml
==================================================
PHP 8.1.34: OK
PHP 8.2.30: OK
PHP 8.3.29: OK
PHP 8.4.16: OK
PHP 8.5.1: OK
==================================================
Validated: 5 PHP version(s)
VALIDATION PASSED

.NET Validation Output

Validating .NET SHA512 hashes...
  .NET Runtime 8.0.25: OK
  .NET Runtime 9.0.14: OK
  .NET Runtime 10.0.5: OK
  ASP.NET Core 8.0.25: OK
  ASP.NET Core 9.0.14: OK
  ASP.NET Core 10.0.5: OK
PASSED

[vijaysaayi]

@copilot - Resolve merge conflicts and update to latest main branch

[Copilot]

@copilot - Resolve merge conflicts and update to latest main branch

Rebased onto the latest origin/main (0e193557 — "Update SHA validation: align grep pattern with script output"). Merge conflict in images/constants.yml resolved by combining our 10.0.5 version update with the DOTNET_SDK_* entries from main — commit 0406754b.

[github-actions]

SHA Validation Summary

Stack	Status
PHP	✅ success
.NET	✅ success

PHP Validation Output

Validating PHP SHA256 hashes from: images/constants.yml
==================================================
PHP 8.1.34: OK
PHP 8.2.30: OK
PHP 8.3.29: OK
PHP 8.4.16: OK
PHP 8.5.1: OK
==================================================
Validated: 5 PHP version(s)
SHA VALIDATION PASSED

.NET Validation Output

Validating .NET SHA512 hashes...
  .NET Runtime 8.0.25: OK
  .NET Runtime 9.0.14: OK
  .NET Runtime 10.0.5: OK
  ASP.NET Core 8.0.25: OK
  ASP.NET Core 9.0.14: OK
  ASP.NET Core 10.0.5: OK
SHA VALIDATION PASSED

[algignac]

Hi team! Just a quick heads-up: since CVE-2026-40372 was recently disclosed for .NET 10, versions 10.0.0 to 10.0.6 are currently vulnerable. Would it make sense to update this PR to skip directly to 10.0.7 (the patched version)?