global.json

{
  "//": "Pins the .NET SDK so hosted-runner bumps and local drift cannot change the toolchain silently (#174). CI installs this exact version via setup-dotnet's global-json-file input, so the workflows and this file cannot disagree the way `dotnet-version: 10.0.x` plus a hardcoded cache key did.",
  "//rollForward": "latestPatch accepts servicing patches within the 10.0.4xx feature band but refuses a different band, keeping builds reproducible. 10.0.400 is a released SDK, so unlike the 10.0.300 preview this pin was on before, it is served from the normal release channel rather than depending on a build staying downloadable.",
  "sdk": {
    "version": "10.0.400",
    "rollForward": "latestPatch"
  }
}