Migrate to .NET 10 LTS, three months ahead of the .NET 8 deadline

.NET 8 goes out of support on 10 November 2026 and .NET 9 dies the same day,
so .NET 10 LTS (EOL 14 November 2028) was the only target. This was the
hardest date on the roadmap: after it, the installer would ship an
unsupported runtime, a runtime CVE would be unpatchable, and it would show
up as an EOL component in our own SBOM.

What moved

* All nine projects retargeted to net10.0-windows: ControlPanel,
  ControlPanel.Core, ControlPanel.Tests, DBSetup, DBSetupQuick, DBUpdater,
  DataDirectorySynchronizer, ImportTool, Shared.
* global.json added, pinning SDK 10.0.303 with rollForward latestFeature.
  There was no global.json before, which meant installing any newer SDK on a
  build machine silently changed the toolchain. It now accepts 10.0.3xx and
  later within .NET 10 but never rolls to .NET 11 - that has to be a
  deliberate edit, alongside the TargetFramework values and the bundled
  runtime.
* The bundled Desktop Runtime moves to 10.x, and get-dotnet-runtime.ps1 is
  parameterised by channel and now fails loudly if aka.ms hands back
  something under 40 MB. It previously would have saved an error page as the
  installer and failed silently at install time.
* hMailServerInnoExtension.iss: the DotNetDesktopMissing() probe globbed
  Microsoft.WindowsDesktop.App\8.* and now globs 10.*. Left unchanged it
  would have found the .NET 8 runtime, concluded nothing needed installing,
  and shipped a Control Panel that could not start.
* section_files_64.iss, section_run.iss and the progress text follow the
  new filename.
* capture-cp.ps1 had the net8.0-windows output path hardcoded.
* AGENTS.md, README.md and CONTROL-PANEL-PLAN.md updated. AGENTS.md was also
  stale on two counts unrelated to this work - it still claimed 6.2.8 build
  10 and 898/898 tests; it now says 6.2.18 build 20 and 1049/1049.

Two real findings, not just retargeting

* .NET 9 added the WFO1000 WinForms analyzer, and with warnings-as-errors it
  failed the build on four properties of Shared/Controls/ucText.cs whose
  designer-serialization intent was undeclared. The analyzer was right: Text
  and Numeric are genuine designer state, but Number and Number64 are derived
  views over Text, and the designer had been emitting meaningless
  "Number = 0" / "Number64 = 0" lines into generated code for years. Intent
  is now declared per property. Existing generated lines still compile, so
  this changes only what the designer writes from here on.
* System.DirectoryServices is now part of the Windows Desktop shared
  framework, so the explicit PackageReference was redundant (NU1510). It is
  used by ActiveDirectoryService.cs and still resolves; the package is gone
  and the SBOM is one entry shorter.

Packages taken to current: System.Management and
System.ServiceProcess.ServiceController 10.0.10 -> 10.0.11 in both
ControlPanel and DBSetup. WPF-UI 4.3.0, LiveChartsCore 2.0.5 and QRCoder
1.8.0 were already latest. The regression suite's packages.config is
deliberately untouched in this commit - it is the harness that validates
everything else, and bumping it belongs in its own change.

One thing deliberately NOT changed: MinVersion stays at 10.0.14393. The
comment claimed that build was the floor of the .NET 8 runtime, so the
obvious move was to raise it for .NET 10 - but .NET 10 still supports
Windows 10 1607 and Windows Server 2012, so raising it would have locked
out supported configurations for no reason.

Verification

* Both solutions build with 0 warnings, 0 errors.
* ControlPanel.Tests: 45/45 pass on net10.0.
* The published Control Panel starts and stays up - a WPF app can build
  clean and still die at startup, so this was checked rather than assumed.
* The C++ server is untouched by this commit.

Author: chrisholloway5

README.md

@@ -88,7 +88,7 @@ Technology
 | Async I/O | Boost 1.91 (Asio) |
 | Databases | MySQL, MariaDB, MS SQL Server, PostgreSQL 18 (libpq), and the embedded SQL CE for zero-configuration installs |
 | MySQL/MariaDB client | MariaDB Connector/C, shipped as `libmysql.dll` with auth plugins — works with MySQL 8 `caching_sha2_password` and MariaDB `ed25519`/`gssapi` out of the box |
-| Administration GUI and tools | C# / .NET 8 (WPF, Fluent design) |
+| Administration GUI and tools | C# / .NET 10 (WPF, Fluent design) |
 | Extensibility | COM/IDispatch API, plus a REST administration API |
 | Schema | Database version 6005, upgradeable from every earlier hMailServer release |
 
@@ -97,12 +97,12 @@ Technology
 Administration
 ==============
 
-**hMailServer Control Panel** (`hMailCP.exe`) is the bundled administration GUI: a .NET 8 WPF application that talks to the server purely through the COM API. It covers domains, accounts, aliases, distribution lists, routes, rules, IP ranges, TCP/IP ports and SSL bindings, server settings, the live dashboard, the delivery queue, logs, status, backup, SSL certificates, scripts, Sieve scripts and public folders.
+**hMailServer Control Panel** (`hMailCP.exe`) is the bundled administration GUI: a .NET 10 WPF application that talks to the server purely through the COM API. It covers domains, accounts, aliases, distribution lists, routes, rules, IP ranges, TCP/IP ports and SSL bindings, server settings, the live dashboard, the delivery queue, logs, status, backup, SSL certificates, scripts, Sieve scripts and public folders.
 
 * **Ctrl+K** searches every setting by label or INI key — type `delete logs`, `log level` or `LogDeleteDays` and it takes you to the page that owns it.
 * **Active Directory pickers**: a read-only browser lists the forest's domains and searches their users, to link an account to an AD user or bulk-import addresses into a distribution list.
 * Optional TOTP two-factor authentication on logon.
-* Requires the .NET 8 Desktop Runtime, which the installer bundles and installs silently when missing.
+* Requires the .NET 10 Desktop Runtime, which the installer bundles and installs silently when missing.
 
 **REST administration API** for domains, accounts, the delivery queue, server status and TLSA records, with authenticated access and bounded request handling (a size cap and a receive deadline, so a slow or oversized request cannot occupy a worker).
 
@@ -230,11 +230,11 @@ Alternatively, build from Visual Studio (started with _Run as Administrator_) or
 1. Download the source code from this Git repository.
 2. Compile the solution hmailserver\source\Server\hMailServer\hMailServer.sln.
    This will build the hMailServer server-part (hMailServer.exe)
-3. Build and publish the .NET 8 setup tools with build\build-tools.ps1 (or
+3. Build and publish the .NET 10 setup tools with build\build-tools.ps1 (or
    "dotnet build" on hmailserver\source\Tools\hMailServer Tools.sln).
    This covers DB Setup, DB Setup Quick, DB Updater, the Data Directory
    Synchronizer and the Import Tool.
-   The Control Panel is a separate .NET 8 solution, hmailserver\source\Tools\ControlPanel.sln.
+   The Control Panel is a separate .NET 10 solution, hmailserver\source\Tools\ControlPanel.sln.
 4. Compile hmailserver\installation\hMailServer64.iss (using Inno Setup 6)
    This will build the hMailServer installation program.
 

Roadmap.md

@@ -43,7 +43,7 @@ strong and where it is thin far more honestly than any prose summary.
 
 | Section | ✅ | 🔄 | ⬜ | ⏸️ |
 |---|--:|--:|--:|--:|
-| [Dated items — the forcing functions](#dated-items--the-forcing-functions) | – | – | 6 | 1 |
+| [Dated items — the forcing functions](#dated-items--the-forcing-functions) | 1 | – | 5 | 1 |
 | [Defects found by the audit](#defects-found-by-the-audit) | – | – | 16 | – |
 | **The capability matrix** | | | | |
 | [SMTP and ESMTP](#smtp-and-esmtp) | 23 | – | 4 | – |
@@ -63,9 +63,9 @@ strong and where it is thin far more honestly than any prose summary.
 | **Forward-looking** | | | | |
 | [Planned work](#planned-work) | – | 2 | 16 | 2 |
 | [Future-proofing: standards and protocols](#future-proofing-standards-and-protocols) | – | – | 6 | 2 |
-| [Future-proofing: platform and supply chain](#future-proofing-platform-and-supply-chain) | – | – | 6 | 2 |
+| [Future-proofing: platform and supply chain](#future-proofing-platform-and-supply-chain) | 1 | – | 5 | 2 |
 | [Future-proofing: deployment and operations](#future-proofing-deployment-and-operations) | – | – | 9 | – |
-| **Total** | **495** | **2** | **200** | **14** |
+| **Total** | **497** | **2** | **198** | **14** |
 
 Three things stand out and are worth naming rather than leaving to be inferred.
 **Storage and the administration surface are the best-covered areas**, and the
@@ -84,7 +84,7 @@ previous version of this roadmap. Ordered by when they bite.
 
 | | Date | Item | What happens |
 |:-:|---|---|---|
-| ⬜ | **10 Nov 2026** | **.NET 8 end of support** | The Control Panel and all six command-line tools target .NET 8. .NET 9 dies the same day, so the only target is **.NET 10 LTS** (EOL 14 Nov 2028). After this date the installer ships an unsupported runtime that will show up as an EOL component in our own SBOM, and a runtime CVE becomes unpatchable. **This is the hardest date on the board.** |
+| ✅ | ~~10 Nov 2026~~ | **.NET 8 end of support — done, 12 Aug 2026** | Migrated to **.NET 10 LTS** (EOL 14 Nov 2028) with three months to spare. All nine projects retargeted to `net10.0-windows`, SDK pinned in `global.json` (`rollForward: latestFeature`, so a newer SDK on a build machine cannot silently change the toolchain), the bundled Desktop Runtime and the installer's version probe moved to 10.x, and packages taken to current. Everything builds with **0 warnings** and the Control Panel starts clean. |
 | ⬜ | **End Dec 2026** | **Microsoft 365 turns off Basic auth for SMTP AUTH** | The outbound client offers exactly one mechanism — `AUTH LOGIN`. Anyone relaying through `smtp.office365.com` stops working. Needs a token cache plus XOAUTH2 encoding; note Exchange Online implements **XOAUTH2 only**, not RFC 7628 OAUTHBEARER. Collecting *from* M365 over POP/IMAP has already been broken since 2022. |
 | ⬜ | **9 Dec 2026** | **EU Product Liability Directive (2024/2853)** | Software is unambiguously a "product"; a product can be defective *because of a vulnerability or a failure to ship security updates*, and liability **cannot be disclaimed by licence** — AGPLv3's warranty disclaimer does not help. FOSS supplied outside a commercial activity is exempt. Documentation, not code, but it should drive a business decision. |
 | ⬜ | **12 Jan 2027** | **Windows Server 2016 end of support** | The moment to declare a supported floor. Recommendation: **Server 2019 / Windows 10 21H2**, which costs zero code — Server 2019 is still `_WIN32_WINNT=0x0A00`. Do not raise the macro past that; self-hosted mail skews old and Server 2019 has support into 2029. |
@@ -983,7 +983,7 @@ Future-proofing: platform and supply chain
 
 | | Item | Detail |
 |:-:|---|---|
-| ⬜ | **Migrate to .NET 10 LTS** | See the dated table — 10 Nov 2026, and the hardest deadline here. |
+| ✅ | **Migrate to .NET 10 LTS** | Done 12 Aug 2026, ahead of the 10 Nov 2026 deadline. Nine projects to `net10.0-windows`; SDK 10.0.303 pinned in `global.json`; bundled Desktop Runtime, the installer's `Microsoft.WindowsDesktop.App\10.*` probe, the runtime-fetch script, the screenshot script and the docs all moved together. Two real findings on the way: .NET 9 added the **WFO1000** WinForms analyzer, which (correctly) rejected four properties on `ucText` whose designer-serialization intent was undeclared — the designer had been emitting meaningless `Number = 0` lines for years; and `System.DirectoryServices` is now in the Windows Desktop shared framework, so that `PackageReference` was redundant and is gone. **`MinVersion` stays at 10.0.14393** — .NET 10 still supports Windows 10 1607 and Server 2012, which was worth checking rather than assuming. |
 | ⬜ | **Decide the OpenSSL branch** | 4.0.x is not LTS and dies 14 May 2027. Decide by Q1 2027 whether to follow to the next LTS or move back to 3.5. |
 | ⬜ | **Declare a supported Windows floor** | Server 2019 / Windows 10 21H2, effective with the first release after 12 Jan 2027. Zero code cost — Server 2019 is still `_WIN32_WINNT=0x0A00`, and that macro should *not* be raised. |
 | ⬜ | **Artifact signing** | SBOMs are already attached to every release in both SPDX and CycloneDX. The gap is signing: Authenticode on the installer and binaries, and ideally Sigstore for the release artefacts. This is the supply-chain item that is actually missing, and the CRA makes update integrity a formal requirement if scope ever changes. |

build/capture-cp.ps1

@@ -24,7 +24,7 @@ public static Bitmap Shoot(IntPtr h){RECT r;GetWindowRect(h,out r);int w=r.Right
 if ($Launch) {
     Stop-Process -Name hMailCP -Force -ErrorAction SilentlyContinue
     Start-Sleep 1
-    $exe = Join-Path $PSScriptRoot '..\hmailserver\source\Tools\ControlPanel\bin\Release\net8.0-windows\hMailCP.exe'
+    $exe = Join-Path $PSScriptRoot '..\hmailserver\source\Tools\ControlPanel\bin\Release\net10.0-windows\hMailCP.exe'
     Start-Process $exe -ArgumentList '/connect','localhost','Administrator','testar' | Out-Null
     Start-Sleep 10
 }

build/get-dotnet-runtime.ps1

@@ -1,15 +1,37 @@
-# Downloads the .NET 8 Desktop Runtime installer that the hMailServer
-# installer bundles for the Control Panel component. The file is not kept
-# in the repository (55+ MB); run this once before building the installer.
+# Downloads the .NET Desktop Runtime installer that the hMailServer installer
+# bundles for the Control Panel component. The file is not kept in the repository
+# (55+ MB, and .gitignore excludes the whole DotNet folder); run this once before
+# building the installer.
+#
+# Keep the version here in step with three other places, or the installer will
+# either ship the wrong runtime or decide it does not need to install one:
+#   * <TargetFramework> in the nine .csproj files under source/Tools
+#   * global.json (the SDK pin)
+#   * hMailServerInnoExtension.iss -> DotNetDesktopMissing(), which globs
+#     Microsoft.WindowsDesktop.App\<major>.* to decide whether to run this
+#   * section_files_64.iss and section_run.iss, which reference the file by name
+param(
+    [string] $Channel = '10.0'
+)
+
 $dest = Join-Path $PSScriptRoot '..\hmailserver\installation\DotNet'
 New-Item -ItemType Directory -Force $dest | Out-Null
-$file = Join-Path $dest 'windowsdesktop-runtime-8.0-win-x64.exe'
+$file = Join-Path $dest ("windowsdesktop-runtime-{0}-win-x64.exe" -f $Channel)
 
 if (Test-Path $file) {
     Write-Host "already present: $file"
     return
 }
 
-Write-Host 'downloading .NET 8 Desktop Runtime (x64)...'
-Invoke-WebRequest -Uri 'https://aka.ms/dotnet/8.0/windowsdesktop-runtime-win-x64.exe' -OutFile $file
-Write-Host ("downloaded {0} ({1:N1} MB)" -f $file, ((Get-Item $file).Length / 1MB))
+Write-Host ("downloading .NET {0} Desktop Runtime (x64)..." -f $Channel)
+Invoke-WebRequest -Uri ("https://aka.ms/dotnet/{0}/windowsdesktop-runtime-win-x64.exe" -f $Channel) -OutFile $file
+
+$size = (Get-Item $file).Length
+if ($size -lt 40MB) {
+    # aka.ms redirects; a short file means we saved an error page rather than the
+    # installer, which would otherwise fail silently at install time.
+    Remove-Item $file -Force
+    throw ("downloaded file was only {0:N1} MB - expected 50+ MB. The aka.ms link for channel {1} may have moved." -f ($size / 1MB), $Channel)
+}
+
+Write-Host ("downloaded {0} ({1:N1} MB)" -f $file, ($size / 1MB))

global.json

@@ -0,0 +1,8 @@
+{
+  "//": "Pins the .NET SDK so builds are reproducible and installing a newer SDK on a build machine cannot silently change the toolchain. rollForward latestFeature accepts 10.0.3xx and later within .NET 10, but never rolls to .NET 11 - that has to be a deliberate edit here, alongside the TargetFramework values and the runtime the installer bundles.",
+  "sdk": {
+    "version": "10.0.303",
+    "rollForward": "latestFeature",
+    "allowPrerelease": false
+  }
+}

hmailserver/installation/hMailServerInnoExtension.iss

@@ -10,14 +10,14 @@ var
   rdoUseInternal : TRadioButton;
   rdoUseExternal : TRadioButton;
 
-// Returns true when the .NET 8 Desktop Runtime is not installed, in
+// Returns true when the .NET 10 Desktop Runtime is not installed, in
 // which case the bundled runtime installer is executed.
 function DotNetDesktopMissing(): Boolean;
 var
   findRec: TFindRec;
 begin
   Result := True;
-  if FindFirst(ExpandConstant('{pf64}\dotnet\shared\Microsoft.WindowsDesktop.App\8.*'), findRec) then
+  if FindFirst(ExpandConstant('{pf64}\dotnet\shared\Microsoft.WindowsDesktop.App.*'), findRec) then
   begin
     Result := False;
     FindClose(findRec);
@@ -281,9 +281,9 @@ begin
 	Result := sKey;
 end;
 
-// Installs the bundled .NET 8 Desktop Runtime when it is missing. Called
+// Installs the bundled .NET 10 Desktop Runtime when it is missing. Called
 // from RunPostInstallTasks before the database tools are executed - they
-// are .NET 8 apps and run from [Code] at ssPostInstall, which is earlier
+// are .NET 10 apps and run from [Code] at ssPostInstall, which is earlier
 // than the [Run] section where the runtime is otherwise installed for the
 // Control Panel component.
 procedure InstallDotNetRuntime();
@@ -293,9 +293,9 @@ begin
 	if not DotNetDesktopMissing() then
 		Exit;
 
-	if (Exec(ExpandConstant('{tmp}\windowsdesktop-runtime-8.0-win-x64.exe'), '/install /quiet /norestart', '', SW_SHOWNORMAL, ewWaitUntilTerminated, ResultCode) = False) then
+	if (Exec(ExpandConstant('{tmp}\windowsdesktop-runtime-10.0-win-x64.exe'), '/install /quiet /norestart', '', SW_SHOWNORMAL, ewWaitUntilTerminated, ResultCode) = False) then
 	begin
-		MsgBox('The .NET 8 Desktop Runtime could not be installed. The database setup tools will not work until it is installed.' + #13#10 +
+		MsgBox('The .NET 10 Desktop Runtime could not be installed. The database setup tools will not work until it is installed.' + #13#10 +
 		       SysErrorMessage(ResultCode), mbError, MB_OK);
 		Exit;
 	end;
@@ -304,7 +304,7 @@ begin
 	// result is the exit code. 0 = success, 3010 = success, reboot required.
 	if (ResultCode <> 0) and (ResultCode <> 3010) then
 	begin
-		MsgBox('The .NET 8 Desktop Runtime installation failed with exit code ' + IntToStr(ResultCode) + '.' + #13#10 +
+		MsgBox('The .NET 10 Desktop Runtime installation failed with exit code ' + IntToStr(ResultCode) + '.' + #13#10 +
 		       'The database setup tools will not work until the runtime is installed. ' +
 		       'Install it manually from https://dotnet.microsoft.com/download/dotnet/8.0 and then run ' +
 		       'DBSetupQuick.exe from the hMailServer Bin folder.', mbError, MB_OK);
@@ -491,7 +491,7 @@ function InitializeSetup(): Boolean;
 begin
 	Result := true;
 
-	// The .NET tools require the .NET 8 Desktop Runtime; it is bundled and
+	// The .NET tools require the .NET 10 Desktop Runtime; it is bundled and
 	// installed automatically when missing, so no up-front framework check
 	// is needed (the old .NET Framework 4.5 gate died with the last
 	// .NET Framework tools).
@@ -648,10 +648,10 @@ begin
       ProgressPage := CreateOutputProgressPage('Finalizing installation','Please wait while the setup performs post-installation tasks');
       ProgressPage.Show();
 
-      ProgressPage.SetText('Installing the .NET 8 Desktop Runtime...', '');
+      ProgressPage.SetText('Installing the .NET 10 Desktop Runtime...', '');
       ProgressPage.SetProgress(1,6);
 
-      // The database tools below are .NET 8 apps; make sure the runtime is
+      // The database tools below are .NET 10 apps; make sure the runtime is
       // in place before they are executed. ([Run] would install it too, but
       // that section runs after this code.)
       InstallDotNetRuntime();

hmailserver/installation/section_components.iss

@@ -5,4 +5,4 @@ Name: "server"; Description: "Server"; Types: full custom
 ; remote instance. The Control Panel does not need it: it binds late, through
 ; IDispatch, and connects to a remote host on its own.
 Name: "admintools"; Description: "Remote administration support (registers the COM API for scripts)"; Types: full custom
-Name: "controlpanel"; Description: "Control Panel (modern admin app, requires .NET 8 Desktop Runtime)"; Types: full custom
+Name: "controlpanel"; Description: "Control Panel (modern admin app, requires .NET 10 Desktop Runtime)"; Types: full custom

hmailserver/installation/section_files_64.iss

@@ -11,18 +11,18 @@ Source: "Microsoft.VC145.CRT\*"; DestDir: "{app}\Bin"; Flags: ignoreversion; Com
 ; Web administration SPA (served by the REST API listener at GET /)
 Source: "WebAdmin\index.html"; DestDir: "{app}\WebAdmin"; Flags: ignoreversion; Components: server;
 
-; hMailServer Control Panel (modern .NET 8 WPF admin app)
+; hMailServer Control Panel (modern .NET 10 WPF admin app)
 Source: "..\source\Tools\ControlPanel\publish\*"; DestDir: "{app}\ControlPanel"; Flags: ignoreversion recursesubdirs; Components: controlpanel;
-; .NET 8 Desktop Runtime, installed silently when missing. The server
-; component needs it too: DBSetup/DBSetupQuick/DBUpdater are .NET 8 apps
+; .NET 10 Desktop Runtime, installed silently when missing. The server
+; component needs it too: DBSetup/DBSetupQuick/DBUpdater are .NET 10 apps
 ; that run during installation (from [Code], before [Run] executes - see
 ; InstallDotNetRuntime in hMailServerInnoExtension.iss).
 ; (file is downloaded by build\get-dotnet-runtime.ps1; not in the repository)
-Source: "DotNet\windowsdesktop-runtime-8.0-win-x64.exe"; DestDir: "{tmp}"; Flags: deleteafterinstall; Components: server controlpanel;
+Source: "DotNet\windowsdesktop-runtime-10.0-win-x64.exe"; DestDir: "{tmp}"; Flags: deleteafterinstall; Components: server controlpanel;
 
 Source: "SQLCE\SSCERuntime_x64-ENU.msi"; Flags: deleteafterinstall ; Excludes: ".svn"; DestDir: "{tmp}"; Components: server;
 
-; Common tools (.NET 8, framework-dependent dotnet publish output; built by
+; Common tools (.NET 10, framework-dependent dotnet publish output; built by
 ; build\build-tools.ps1). The three database tools share {app}\Bin - their
 ; publish folders carry identical copies of Shared.dll and the checked-in
 ; Interop.hMailServer.dll tlbimp wrapper (source\Tools\Interop), which

hmailserver/installation/section_run.iss

@@ -1,7 +1,7 @@
 [Run]
-; Install the bundled .NET 8 Desktop Runtime, but only when it is missing.
+; Install the bundled .NET 10 Desktop Runtime, but only when it is missing.
 ; For the server component the runtime is normally already installed by
 ; InstallDotNetRuntime() at ssPostInstall (before the database tools run);
 ; this entry is the backstop and covers controlpanel-only installs.
-Filename: "{tmp}\windowsdesktop-runtime-8.0-win-x64.exe"; Parameters: "/install /quiet /norestart"; StatusMsg: "Installing .NET 8 Desktop Runtime..."; Check: DotNetDesktopMissing; Components: server controlpanel;
+Filename: "{tmp}\windowsdesktop-runtime-10.0-win-x64.exe"; Parameters: "/install /quiet /norestart"; StatusMsg: "Installing .NET 10 Desktop Runtime..."; Check: DotNetDesktopMissing; Components: server controlpanel;
 Filename: "{app}\ControlPanel\hMailCP.exe";  Flags: skipifsilent postinstall nowait; Description: Run hMailServer Control Panel; Components: controlpanel;

hmailserver/installation/section_setup.iss

@@ -12,7 +12,7 @@ AllowNoIcons=yes
 Uninstallable=true
 DirExistsWarning=no
 CreateAppDir=true
-; Windows 10 1607 (build 14393): the floor of the .NET 8 Desktop Runtime,
+; Windows 10 1607 (build 14393): the floor of the .NET 10 Desktop Runtime,
 ; which the Control Panel and the setup tools require (bundled, installed
 ; when missing - its installer refuses anything older, which would leave the
 ; server without a database). The binaries link the VC++ v145 runtime.