Upgrade to .NET 10 / Aspire 13

[Copilot]

Upgrades all projects to .NET 10 (LTS) and Aspire 13.1.2, along with the full sweep of associated package bumps.

Framework & Aspire

• net9.0 → net10.0 across all projects
• Aspire 9.5.1 → 13.1.2 with the new SDK declaration format:

  <!-- Before -->
  <Project Sdk="Microsoft.NET.Sdk">
    <Sdk Name="Aspire.AppHost.Sdk" Version="9.5.1" />
    <IsAspireHost>true</IsAspireHost>
    <PackageReference Include="Aspire.Hosting.AppHost" Version="9.5.1" />
  
  <!-- After -->
  <Project Sdk="Aspire.AppHost.Sdk/13.1.2">
    <!-- Aspire.Hosting.AppHost now implicit; IsAspireHost set by SDK -->

Breaking API change: JavaScript hosting

AddPnpmApp + WithPnpmPackageInstallation were removed in Aspire 13. Migrated to the new Aspire.Hosting.JavaScript package API:

// Before (Aspire 9 / CommunityToolkit.Aspire.Hosting.NodeJS.Extensions)
builder.AddPnpmApp("menu-ui", "../ui/menu-website", scriptName: "aspire")
    .WithPnpmPackageInstallation();

// After (Aspire 13 / Aspire.Hosting.JavaScript)
builder.AddJavaScriptApp("menu-ui", "../ui/menu-website", "aspire")
    .WithPnpm(); // install is true by default

CommunityToolkit.Aspire.Hosting.NodeJS.Extensions replaced by Aspire.Hosting.JavaScript 13.1.2 + CommunityToolkit.Aspire.Hosting.JavaScript.Extensions 13.1.1.

Package bumps

Package	Old	New
EF Core (all)	9.0.7	10.0.3
JWT ****** 9.0.10	10.0.3
Microsoft.Extensions.ApiDescription.Server	9.0.10	10.0.3
Microsoft.Extensions.Http.Resilience	9.10.0	10.3.0
Microsoft.Extensions.ServiceDiscovery	9.5.1	10.3.0
OpenTelemetry (all)	1.12.0–1.13.1	1.15.0
Swashbuckle.AspNetCore	9.0.6	10.1.4
Microsoft.ApplicationInsights.AspNetCore	2.23.0	3.0.0
Microsoft.VisualStudio.Azure.Containers.Tools.Targets	1.22.1	1.23.0
Riok.Mapperly	4.2.1	4.3.1
Vogen	8.0.2	8.0.4
FakeItEasy	8.3.0	9.0.1
coverlet.collector	6.0.4	8.0.0
GitHubActionsTestLogger	2.4.1	3.0.1
MartinCostello.Logging.XUnit	0.6.0	0.7.1
Microsoft.NET.Test.Sdk	18.0.0	18.3.0
AwesomeAssertions	9.2.1	9.4.0

Removed System.Net.Http and System.Text.RegularExpressions explicit references from test projects — they're inbox in .NET 10 and were causing NU1510 warnings-as-errors.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• www.nuget.org
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Update dotnet aspire and associated nuget packages to the latest version and update any code to reflect changes in the new versions and any best practices</issue_title>
<issue_description></issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Update dotnet aspire and associated nuget packages to the latest version and update any code to reflect changes in the new versions and any best practices #888

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Copilot]

Pull request overview

Upgrades the solution to .NET 10 and Aspire 13.1.2, updating related NuGet dependencies and adapting the AppHost JavaScript hosting setup to the Aspire 13 API surface.

Changes:

• Updated all projects from net9.0 to net10.0 and bumped core packages (EF Core 10.0.3, OpenTelemetry 1.15.0, Swashbuckle 10.1.4, etc.).
• Migrated AppHost JavaScript hosting from the removed AddPnpmApp API to AddJavaScriptApp(...).WithPnpm().
• Updated test projects’ tooling packages (coverlet, FakeItEasy, test SDK) and removed explicit inbox framework package references.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
MenuDB/MenuDB.csproj	Bumps TFM to net10.0 and EF Core packages to 10.0.3.
MenuApi/MenuApi.csproj	Bumps TFM to net10.0 and updates Aspire/EF/JWT/AppInsights and other packages.
MenuApi.Tests/MenuApi.Tests.csproj	Bumps TFM and updates test dependencies; removes inbox package references.
MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj	Bumps TFM, upgrades Aspire.Hosting.Testing and test tooling packages.
Menu.ServiceDefaults/Menu.ServiceDefaults.csproj	Bumps TFM and updates resilience, service discovery, and OpenTelemetry packages.
Menu.MigrationService/Menu.MigrationService.csproj	Bumps TFM and updates Aspire EF Core SqlServer integration package.
Menu.AppHost/Program.cs	Switches UI hosting to AddJavaScriptApp + WithPnpm() for Aspire 13 compatibility.
Menu.AppHost/Menu.AppHost.csproj	Moves AppHost to new Aspire AppHost SDK format and updates hosting packages (including JavaScript hosting).
Menu.ApiServiceDefaults/Menu.ApiServiceDefaults.csproj	Bumps TFM and Swashbuckle dependency.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud