Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability

[Copilot]

Component Governance is failing builds due to a High-severity vulnerability (DOTNET-Security-10.0) in .NET SDK 10.0.100.

Changes

• Updated global.json SDK version: 10.0.100 → 10.0.103

This resolves the security alert and unblocks the build pipeline. The patched SDK version addresses the vulnerability while maintaining backward compatibility via the existing rollForward: latestFeature configuration.

Original prompt

Summary

The repository is currently pinned to .NET SDK 10.0.100, which contains a High-severity security vulnerability (DOTNET-Security-10.0). Component Governance is failing the build due to this vulnerability.

Problem

• Current SDK version: 10.0.100
• Severity: High
• Alert: DOTNET-Security-10.0
• Due date: 2026-05-15

The build pipeline is failing with the following error:

##[error]Component Governance failed due to the presence of 1 security alerts at or above "High" severity based on the configuration of this build.

Solution

Update the global.json file to use .NET SDK version 10.0.103, which patches this vulnerability.

Changes Required

• Update global.json SDK version from 10.0.100 to 10.0.103
• Ensure the build pipeline uses the updated secure SDK version

References

• Component Governance Alert: DOTNET-Security-10.0
• .NET Security Notes: https://aka.ms/dotnet-security-notes
• .NET Downloads: https://aka.ms/dotnet-download

This pull request was created from Copilot chat.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.