feat: add .NET 10 RC support and OIDC NuGet authentication

- Add .NET 10.0 RC SDK support via global.json with rollForward policy
- Add net10.0 target framework to DPI.csproj
- Update CI/CD to remove .NET 6.0 and standardize on .NET 8.0/9.0/10.0
- Replace static NuGet API key with OIDC-based authentication
- Add required GitHub Actions permissions for OIDC (id-token, packages)
- Add CancellationToken parameter to NuGetAnalyzeCommand.ExecuteAsync

This prepares the project for .NET 10 release while improving
security by using OIDC authentication for NuGet package publishing.

Author: devlead

.github/workflows/build.yml

@@ -12,6 +12,10 @@ jobs:
   build:
     name: Build
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
+      id-token: write
+      packages: write
     strategy:
       fail-fast: false
       matrix:
@@ -22,21 +26,28 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Install .NET SDK 6.0.x
+      - name: Install .NET SDK 8.0.x
         uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: '6.0.x'
+          dotnet-version: '8.0.x'
 
-      - name: Install .NET SDK 8.0.x
+      - name: Install .NET SDK 9.0.x
         uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: '8.0.x'
+          dotnet-version: '9.0.x'
 
       - name: Install .NET SDK
         uses: actions/setup-dotnet@v5
         with:
           global-json-file: global.json
 
+      - name: NuGet login (OIDC → temp API key)
+        uses: NuGet/login@v1
+        id: login
+        if: matrix.os == 'windows-latest' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))
+        with:
+          user: ${{secrets.NUGET_USER}}
+
       - name: Run Cake script
         uses: cake-build/cake-action@v3
         env:
@@ -45,7 +56,7 @@ jobs:
           GH_PACKAGES_NUGET_SOURCE: ${{ secrets.GH_PACKAGES_NUGET_SOURCE }}
           GH_PACKAGES_NUGET_APIKEY: ${{ secrets.GH_PACKAGES_NUGET_APIKEY }}
           NUGET_SOURCE: ${{ secrets.NUGET_SOURCE }}
-          NUGET_APIKEY: ${{ secrets.NUGET_APIKEY }}
+          NUGET_APIKEY: ${{steps.login.outputs.NUGET_API_KEY}}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           cake-version: tool-manifest

global.json

@@ -1,5 +1,6 @@
 {
   "sdk": {
-    "version": "9.0.306"
+    "rollForward": "latestFeature",
+    "version": "10.0.100-rc.2.25502.107"
   }
 }

src/DPI/Commands/NuGet/NuGetAnalyzeCommand.cs

@@ -23,7 +23,7 @@ public class NuGetAnalyzeCommand<TSettings> : NuGetCommand<TSettings> where TSet
 
         private NuGetParsers NuGetParsers { get; }
 
-        public override async Task<int> ExecuteAsync(CommandContext context, TSettings settings)
+        public override async Task<int> ExecuteAsync(CommandContext context, TSettings settings, CancellationToken cancellationToken)
         {
             FilePathCollection filePaths;
             using (settings.Logger.BeginScope("GetFiles"))

src/DPI/DPI.csproj

@@ -2,7 +2,7 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFrameworks>net8.0;net9.0</TargetFrameworks>
+    <TargetFrameworks>net8.0;net9.0;net10.0</TargetFrameworks>
     <Nullable>enable</Nullable>
     <PackageIcon>icon/dpi.png</PackageIcon>
     <ImplicitUsings>enable</ImplicitUsings>