.NET: chore: updates source link dependency due to transitive vulnerability

[Vincent Biret (baywet)]

Updates source link dependency as it has a transitive known vulnerability which causes build failures. It's an attempt to unblock #8167 and #8166 among other PRs

[Copilot]

🟢 Approval recommended

The dependency-only update was fully reviewed with no unresolved issues.

Pull request overview

Updates Source Link to address a vulnerable transitive dependency and unblock related .NET dependency upgrades.

Changes:

• Upgrades Microsoft.SourceLink.GitHub from 8.0.0 to 10.0.401.

File summaries

File	Description
dotnet/Directory.Packages.props	Updates the centrally managed Source Link version.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Balanced

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MAF Automated Review — Iteration 1

Result: No findings
Scope: full PR (1 commit(s)): 5175f3967664
Model: gpt-5.6-sol-fast

Overview

This PR centrally upgrades the private build-time SourceLink dependency to 10.0.401 while preserving the existing symbol-package contract across all package projects. Central package management, PrivateAssets="All", warnings-as-errors builds, multi-target CI, package creation, and representative package installation constrain compatibility and dependency-leakage risk. The reviewers found no supported Critical, High, or Medium defect introduced by the change.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall line coverage in commit 5175f39 in the chore/update-source-... branch is 84%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	chore/update-source-... 5175f39	+/-
/home/runner/wo...valConverter.cs	—	100%	—
/home/runner/wo...entsProvider.cs	—	99%	—
/home/runner/wo...nticAnalyzer.cs	—	94%	—
/home/runner/wo...tClientAgent.cs	—	91%	—
/home/runner/wo...putConverter.cs	—	90%	—
/home/runner/wo...kflowBuilder.cs	—	90%	—
/home/runner/wo...kflowSession.cs	—	87%	—
/home/runner/wo...SkillsSource.cs	—	86%	—
/home/runner/wo...onExtensions.cs	—	81%	—
/home/runner/wo...ctionVisitor.cs	—	70%	—