Skip to content

Bump dotnet-sdk from 10.0.302 to 10.0.400 - #266

Merged
jas88 merged 1 commit into
mainfrom
dependabot/dotnet_sdk/dotnet-sdk-10.0.400
Aug 18, 2026
Merged

jas88 merged 1 commit into
mainfrom
dependabot/dotnet_sdk/dotnet-sdk-10.0.400

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dotnet-sdk from 10.0.302 to 10.0.400.

Release notes

Sourced from dotnet-sdk's releases.

.NET 10.0.11

Release

What's Changed

... (truncated)

Commits
  • 32593ca [release/10.0.4xx] Fix hostfxr resolution failure on musl (#55519)
  • 34bb679 [release/10.0.4xx] Fix NuGet subcommand help forwarding (#55482)
  • 5b623a1 [release/10.0.4xx] Fix missing data for ReportInstallSucces (#55485)
  • 0066c99 Merge branch 'release/10.0.4xx' into backport/pr-55483-to-release/10.0.4xx
  • 042be08 [release/10.0.4xx] Source code updates from dotnet/dotnet (#55465)
  • a5af175 Fix missing data for ReportInstallSucces
  • 9cac8b9 Add copilot-app LLM environment telemetry detection [10.0.4xx] (#55443)
  • 1d1aa49 Re-enable C++/CLI test coverage previously gated on VS 2026 toolset availabil...
  • 5b2b079 [automated] Merge branch 'release/10.0.3xx' => 'release/10.0.4xx' (#55375)
  • 87fb6b4 Reset files to release/10.0.4xx
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Pins the repo to .NET SDK 10.0.400 to pick up patch reliability fixes. Builds previously used 10.0.302; now they run on 10.0.400, which fixes musl hostfxr resolution, corrects NuGet subcommand help, and improves install telemetry, with no API changes.

Rollout

  • Only change: global.json sdk.version is 10.0.400; rollForward stays latestMinor.
  • Required: Ensure CI and developer machines have .NET SDK 10.0.400 or newer installed.
  • Validate by running dotnet --info and a smoke build of the solutions.

Written for commit 7149e39. Summary will update on new commits.

Review in cubic

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dotnet_sdk_package_manager Pull requests that update dotnet_sdk_package_manager code labels Aug 17, 2026
jas88 added a commit that referenced this pull request Aug 18, 2026
Every open PR has been failing the same `Build MacOS dylib` job since
early August, which gates the Linux/Windows/test jobs (they show as
`skipping`). One root cause, not five.

## Failure

```
libtool: Version mismatch error.  This is libtool 2.5.4 Debian-2.5.4-4, but
libtool: the definition of this LT_INIT comes from libtool 2.6.2.
make[1]: *** [libarchive/archive_acl.lo] Error 63
```

`build-macos.sh` ran `aclocal && automake && autoconf` before
configuring xz and libarchive. `aclocal` rewrites `aclocal.m4` from the
**host** `libtool.m4` but leaves the tarball’s
`build/autoconf/ltmain.sh` alone, so the generated `libtool` script and
the `LT_INIT` macro come from different libtool releases.

That stayed benign while the runner’s libtool matched the tarball’s
2.5.4. It broke the moment Homebrew moved to 2.6.2 — which is why all
five open PRs started failing simultaneously without any of them
touching the native build. The build workflow only runs on PR branches,
so `main` never surfaced it.

## Why the regeneration existed

It was guarding a real problem, so this doesn’t just delete it. These
tarballs ship files generated by a specific automake; if mtimes fall out
of dependency order, make fires the autotools rebuild rules and demands
the exact tool version:

```
build/autoconf/missing: line 85: automake-1.17: command not found
make: *** [Makefile.in] Error 1
```

Regenerating avoided that but traded it for the libtool coupling above.

## Fix

Stamp the generated files in dependency order instead, so no rebuild
rule fires at all:

```
configure.ac/Makefile.am/m4 -> aclocal.m4 -> configure -> config.h.in -> Makefile.in
```

The tarball’s own generated files are kept and stay mutually consistent,
so **neither the host automake version nor the host libtool version can
affect the build** — the class of breakage goes away rather than moving.

This also replaces the previous xz-only timestamp workaround, which
touched files in the wrong order (leaving `aclocal.m4` newer than
`configure` and `Makefile.in`) and only worked because the four `touch`
calls usually landed within the same second.

`libxml2` is deliberately excluded: it is built via its own
`autogen.sh`, a full self-consistent `autoreconf` that refreshes
`ltmain.sh` too.

## Verification

Run locally on macOS against the real tarballs:

- Reproduced `Error 63` by putting 2.6.2 `LT_INIT` macros over the
tarball’s 2.5.4 `ltmain.sh` — confirms the root cause.
- Reproduced the `automake-1.17: command not found` path from timestamp
skew — confirms the regeneration’s original purpose is still needed.
- With the fix, built from a **worst-case-skewed** tree
(`aclocal.m4`/`configure.ac` forced newest): configure and make succeed
with **0** rebuild rules fired, and `aclocal.m4`/`ltmain.sh` both remain
the tarball’s own 2.5.4.
- Validated for both **3.8.8** (current `main`) and **3.8.9** (#261) —
3.8.9 ships the same 2.5.4 `ltmain.sh`, so it would hit the identical
failure.

`shellcheck` findings unchanged versus `main` (34 → 34, none in the new
code); `pre-commit` passes.

Note my local libtool is 2.5.4, so the local runs cannot exercise the
2.6.2 mismatch directly — CI on this PR is the real end-to-end check.

## Follow-up

The five open PRs (#255, #261, #264, #265, #266) need rebasing onto
`main` once this lands to pick up the fix.

<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Fixes macOS dylib build failures by preventing `libtool` version
mismatches. Previously we regenerated autotools files and added
`automake-1.17` symlinks, which mixed host `libtool` macros with the
tarball’s `ltmain.sh`; now we keep tarball-generated files, stamp them
in dependency order, and remove the symlinks.

- Add `normalize_autotools_timestamps` in `native/build-config.sh` with
explicit tiered stamping via `autotools_stamp_tier`; apply to
`libarchive`, `xz`, and `lzo`; exclude `libxml2` (built via its own
`autogen.sh`).
- Remove `aclocal && automake && autoconf` in `native/build-macos.sh`
for `xz` and `libarchive`.
- Drop `automake-1.17`/`aclocal-1.17` symlink creation on macOS to avoid
silent `aclocal.m4` regeneration and Homebrew bin writes.
- Replace the previous xz-only timestamp workaround with this
generalized approach.

**Rollout**
- Build-only change; no runtime impact.
- Rebase open PRs onto `main` after merge to restore macOS CI.

<sup>Written for commit 04cca2c.
Summary will update on new commits.</sup>

<a
href="https://cubic.dev/pr/jas88/libarchive.net/pull/267?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="Review in cubic"
src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a>

<!-- End of auto-generated description by cubic. -->
Bumps [dotnet-sdk](https://github.com/dotnet/sdk) from 10.0.302 to 10.0.400.
- [Release notes](https://github.com/dotnet/sdk/releases)
- [Commits](dotnet/sdk@v10.0.302...v10.0.400)

---
updated-dependencies:
- dependency-name: dotnet-sdk
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@jas88
jas88 force-pushed the dependabot/dotnet_sdk/dotnet-sdk-10.0.400 branch from 6ef446f to 7149e39 Compare August 18, 2026 13:14
@jas88
jas88 merged commit c162cb5 into main Aug 18, 2026
5 checks passed
@jas88
jas88 deleted the dependabot/dotnet_sdk/dotnet-sdk-10.0.400 branch August 18, 2026 23:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file dotnet_sdk_package_manager Pull requests that update dotnet_sdk_package_manager code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant