Updated to .Net 10, and enabled native aot/single file. (#133)

* Updated to .Net 10, and enabled native aot/single file.

* Fixed tests.

* Simplified build.

* Fix cross compilation for arm64.

* Updated dependencies.

* Update all dependencies to their latest versions

- Identity: Microsoft.Identity.Client / .Broker / .Extensions.Msal
  4.85.2 -> 4.86.1
- Extensions: Microsoft.Extensions.* 10.0.9 -> 10.0.10
- SkiaSharp (+ NativeAssets.Linux/macOS) 4.148.0 -> 4.150.1
- System.CommandLine 2.0.9 -> 2.0.10, Spectre.Console 0.57.1 -> 0.57.2
- Meziantou.Framework.Win32.CredentialManager 2.0.2 -> 3.0.1
- Nerdbank.GitVersioning 3.10.85 -> 3.10.91
- Test stack: MSTest.Sdk / MSTest.* 4.2.3 -> 4.3.2,
  Microsoft.NET.Test.Sdk 18.0.1 -> 18.8.1,
  Testing.Extensions.CodeCoverage 18.8.0 -> 18.9.0,
  Testing.Extensions.TrxReport 2.2.3 -> 2.3.2

Replace FluentAssertions 7.2.0 with AwesomeAssertions 9.5.0. FluentAssertions
8+ moved to a commercial license; AwesomeAssertions is the Apache-2.0 community
fork. Updated the global using in Usings.cs from FluentAssertions to
AwesomeAssertions (its 9.x root namespace); the 178 assertion call sites are
otherwise unchanged.

Validated: solution builds clean (0 warnings), all unit tests pass on net10.0
and net10.0-windows, and the win-x64 Native AOT single-file publish succeeds
and runs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: a5eef89d-c576-4c40-85ad-79f16260e9e2

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: a5eef89d-c576-4c40-85ad-79f16260e9e2

Author: azchohfi

.github/workflows/build.yml

@@ -10,8 +10,8 @@ on:
     branches: [ "main" ]
 
 jobs:
-  build-nuget-and-tests:
-    name: Build Nuget and Run Tests
+  build-and-test:
+    name: Build and Run Tests
     strategy:
       fail-fast: false
       matrix:
@@ -26,7 +26,7 @@ jobs:
     - name: Setup .NET
       uses: actions/setup-dotnet@v6
       with:
-        dotnet-version: 9.0.x
+        dotnet-version: 10.0.x
     - name: Install and Configure Keyring
       if: ${{ matrix.os == 'ubuntu-latest' }}
       run: |
@@ -43,19 +43,19 @@ jobs:
       run: dotnet restore MSStore.CLI.sln /p:Configuration=Release
     - name: Build
       run: dotnet build MSStore.CLI.sln --no-restore /p:Configuration=Release
-    - name: Test net9.0
-      run: dotnet run --project MSStore.CLI.UnitTests -f net9.0 --no-build -c Release --coverage --coverage-output-format cobertura --report-trx --results-directory ./TestResults
-    - name: Test net9.0-windows10.0.17763.0
+    - name: Test net10.0
+      run: dotnet run --project MSStore.CLI.UnitTests -f net10.0 --no-build -c Release --coverage --coverage-output-format cobertura --report-trx --results-directory ./TestResults
+    - name: Test net10.0-windows10.0.17763.0
       if: ${{ matrix.os == 'windows-latest' }}
-      run: dotnet run --project MSStore.CLI.UnitTests -f net9.0-windows10.0.17763.0 --no-build -c Release --coverage --coverage-output-format cobertura --report-trx --results-directory ./TestResults
+      run: dotnet run --project MSStore.CLI.UnitTests -f net10.0-windows10.0.17763.0 --no-build -c Release --coverage --coverage-output-format cobertura --report-trx --results-directory ./TestResults
     - name: Publish test results
       if: ${{ !cancelled() }}
       uses: actions/upload-artifact@v7
       with:
         name: test-results-${{ matrix.os }}
         path: TestResults/*.trx
     - name: Install ReportGenerator
-      run: dotnet tool install --global dotnet-reportgenerator-globaltool --version 5.4.11
+      run: dotnet tool install --global dotnet-reportgenerator-globaltool --version 5.5.1
     - name: Merge code coverage files
       run: reportgenerator "-reports:${{ github.workspace }}/**/*.cobertura.xml" "-targetdir:${{ github.workspace }}/report" "-reporttypes:Cobertura" "-filefilters:-*GenerationContext*.g.cs"
     - name: Publish code coverage results
@@ -64,15 +64,6 @@ jobs:
         name: Cobertura-${{ matrix.os }}
         path: ${{ github.workspace }}/report/Cobertura.xml
     # TODO: Publish github comment with code coverage
-    - name: Pack NuGet
-      if: ${{ matrix.os == 'ubuntu-latest' }}
-      run: dotnet pack MSStore.API --no-build -c Release
-    - name: Upload Artifact - NuGet
-      if: ${{ matrix.os == 'ubuntu-latest' }}
-      uses: actions/upload-artifact@v7
-      with:
-        name: NuGet
-        path: MSStore.API/bin/Release/*.nupkg
 
   build-cli:
     strategy:
@@ -84,13 +75,13 @@ jobs:
         include:
           - os: windows-latest
             dotnet-os: win
-            dotnet-framework: net9.0-windows10.0.17763.0
+            dotnet-framework: net10.0-windows10.0.17763.0
           - os: ubuntu-latest
             dotnet-os: linux
-            dotnet-framework: net9.0
+            dotnet-framework: net10.0
           - os: macos-latest
             dotnet-os: osx
-            dotnet-framework: net9.0
+            dotnet-framework: net10.0
     runs-on: ${{ matrix.os }}
 
     name: Build CLI - ${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }}
@@ -102,20 +93,25 @@ jobs:
     - name: Setup .NET
       uses: actions/setup-dotnet@v6
       with:
-        dotnet-version: 9.0.x
+        dotnet-version: 10.0.x
     - name: Add msbuild to PATH
       if: ${{ matrix.os == 'windows-latest' }}
       uses: microsoft/setup-msbuild@v3
     - name: Install NBGV tool
       run: dotnet tool install --tool-path . nbgv
     - name: Set Version
       run: ./nbgv cloud
-    - name: Restore CLI
-      run: dotnet restore MSStore.CLI -r ${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }} /p:Configuration=Release /p:PublishReadyToRun=true
-    - name: Build CLI
-      run: dotnet build MSStore.CLI --no-restore --no-self-contained -r ${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }} -f ${{ matrix.dotnet-framework }} /p:Configuration=Release
+    - name: Install linux-arm64 NativeAOT toolchain
+      if: ${{ matrix.os == 'ubuntu-latest' && matrix.dotnet-arch == 'arm64' }}
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y \
+          clang llvm lld \
+          binutils-aarch64-linux-gnu \
+          gcc-aarch64-linux-gnu g++-aarch64-linux-gnu \
+          libc6-dev-arm64-cross
     - name: Publish SelfContained CLI
-      run: dotnet publish MSStore.CLI --no-build --no-self-contained -r ${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }} -f ${{ matrix.dotnet-framework }} /p:Configuration=Release /p:PublishProfile=${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }}
+      run: dotnet publish MSStore.CLI --self-contained -r ${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }} -f ${{ matrix.dotnet-framework }} /p:Configuration=Release /p:PublishProfile=${{ matrix.dotnet-os }}-${{ matrix.dotnet-arch }}
     - run: |
          New-Item -ItemType File -Path ".\MSStore.CLI.MSIX\obj\${{ matrix.dotnet-arch }}\appxmanifest.xml" -Force
          Copy-Item ".\MSStore.CLI.MSIX\Package.appxmanifest" -Destination ".\MSStore.CLI.MSIX\obj\${{ matrix.dotnet-arch }}\appxmanifest.xml" -Force

.pipelines/build.yml

@@ -16,11 +16,6 @@ parameters:
     type: object
     default:
       - Release
-  - name: buildPlatforms
-    type: object
-    default:
-      - x64
-      - arm64
   - name: pools
     type: object
     default:
@@ -49,7 +44,7 @@ extends:
       credscan:
         suppressionsFile: '$(System.DefaultWorkingDirectory)/.pipelines/CredScanSuppressions.json'
       binSkim:
-        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net9.0\MSStore.API.dll'
+        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net10.0\MSStore.API.dll'
     stages:
       - stage: Build_And_Run_CodeQL
         jobs:
@@ -63,17 +58,15 @@ extends:
               steps:
               - checkout: self
               - task: UseDotNet@2
-                displayName: Setup .NET 9
+                displayName: Setup .NET 10
                 inputs:
-                  version: 9.0.x
+                  version: 10.0.x
               - script: mv -f $(Build.SourcesDirectory)/.pipelines/release-nuget.config ./nuget.config
                 displayName: Add release package source
               - task: NuGetAuthenticate@1
               - script: dotnet restore MSStore.CLI.sln /p:Configuration=${{ dotnet_config }}
                 displayName: Restore dependencies
-              - template: ./.pipelines/templates/build-nuget.yaml@self
+              - template: ./.pipelines/templates/build-and-tests.yaml@self
                 parameters:
                   dotnet_configuration: ${{ dotnet_config }}
-                  AgentOS: $(Agent.OS)
-                  DoEsrp: false
-                  signingIdentity: {}
+                  AgentOS: $(Agent.OS)

.pipelines/code-inspector.yaml

@@ -35,7 +35,7 @@ extends:
       credscan:
         suppressionsFile: '$(System.DefaultWorkingDirectory)/.pipelines/CredScanSuppressions.json'
       binSkim:
-        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net9.0\MSStore.API.dll'
+        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net10.0\MSStore.API.dll'
     stages:
     - stage: codeInspector
       displayName: Code Inspector

.pipelines/release.yml

@@ -40,17 +40,17 @@ parameters:
       image: windows-latest
       os: windows
       dotnet_runtime: win
-      dotnet_framework: net9.0-windows10.0.17763.0
+      dotnet_framework: net10.0-windows10.0.17763.0
     - name: Azure-Pipelines-1ESPT-ExDShared
       image: ubuntu-latest
       os: linux
       dotnet_runtime: linux
-      dotnet_framework: net9.0
+      dotnet_framework: net10.0
     - name: Azure Pipelines
       image: macos-latest
       os: macOS
       dotnet_runtime: osx
-      dotnet_framework: net9.0
+      dotnet_framework: net10.0
 
 name: 0.0.$(Date:yyMM).$(Date:dd)$(Rev:rr)
 
@@ -69,51 +69,36 @@ extends:
       credscan:
         suppressionsFile: '$(System.DefaultWorkingDirectory)/.pipelines/CredScanSuppressions.json'
       binSkim:
-        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net9.0\MSStore.API.dll'
+        AnalyzeTargetGlob: '$(System.DefaultWorkingDirectory)\MSStore.API\bin\**\net10.0\MSStore.API.dll'
     stages:
-      - stage: NuGet
+      - stage: Build_And_Tests
         jobs:
         - ${{ each pool in parameters.pools }}:
           - ${{ each dotnet_config in parameters.dotnet_configurations }}:
-            - job: Build_Nuget_And_Tests_${{ pool.os }}_${{ dotnet_config }}
-              displayName: Build Nuget and Run Tests (${{ pool.os }}_${{ dotnet_config }})
+            - job: Build_And_Tests_${{ pool.os }}_${{ dotnet_config }}
+              displayName: Build and Run Tests (${{ pool.os }}_${{ dotnet_config }})
               pool:
                 name: ${{ pool.name }}
                 image: ${{ pool.image }}
                 os: ${{ pool.os }}
               steps:
               - checkout: self
               - task: UseDotNet@2
-                displayName: Setup .NET 9
+                displayName: Setup .NET 10
                 inputs:
-                  version: 9.0.x
-              - ${{ if eq(parameters.DoEsrp, 'true') }}:
-                - task: UseDotNet@2
-                  displayName: Setup .NET 6.0 (For ESRP Task)
-                  condition: startsWith(variables['Agent.OS'], 'Linux')
-                  inputs:
-                    packageType: runtime
-                    version: 6.0.x
+                  version: 10.0.x
               - script: mv -f $(Build.SourcesDirectory)/.pipelines/release-nuget.config ./nuget.config
                 displayName: Add release package source
               - task: NuGetAuthenticate@1
               - script: dotnet restore MSStore.CLI.sln /p:Configuration=${{ dotnet_config }}
                 displayName: Restore dependencies
-              - template: ./.pipelines/templates/build-nuget.yaml@self
-                parameters:
-                  dotnet_configuration: ${{ dotnet_config }}
-                  AgentOS: $(Agent.OS)
-                  DoEsrp: ${{ parameters.DoEsrp }}
-                  signingIdentity: ${{ parameters.signingIdentity }}
-              - template: ./.pipelines/templates/pack-nuget.yaml@self
+              - template: ./.pipelines/templates/build-and-tests.yaml@self
                 parameters:
                   dotnet_configuration: ${{ dotnet_config }}
                   AgentOS: $(Agent.OS)
-                  DoEsrp: ${{ parameters.DoEsrp }}
-                  signingIdentity: ${{ parameters.signingIdentity }}
 
       - stage: CLI
-        dependsOn: NuGet
+        dependsOn: Build_And_Tests
         jobs:
         - ${{ each pool in parameters.pools }}:
           - ${{ each dotnet_config in parameters.dotnet_configurations }}:
@@ -128,9 +113,9 @@ extends:
                 - checkout: self
                   persistCredentials: true
                 - task: UseDotNet@2
-                  displayName: Setup .NET 9
+                  displayName: Setup .NET 10
                   inputs:
-                    version: 9.0.x
+                    version: 10.0.x
                 - ${{ if eq(parameters.DoEsrp, 'true') }}:
                   - task: UseDotNet@2
                     displayName: Setup .NET 6.0 (For ESRP Task)
@@ -150,7 +135,7 @@ extends:
                     xmlTargetFiles: ''
                     xmlTransformationRules: ''
                 - task: NuGetAuthenticate@1
-                - script: dotnet restore MSStore.CLI -r ${{ pool.dotnet_runtime }}-${{ platform }} /p:Configuration=${{ dotnet_config }} /p:PublishReadyToRun=true
+                - script: dotnet restore MSStore.CLI -r ${{ pool.dotnet_runtime }}-${{ platform }} /p:Configuration=${{ dotnet_config }}
                   displayName: Restore CLI
                 - template: ./.pipelines/templates/build-cli.yaml@self
                   parameters:

.pipelines/templates/build-and-tests.yaml

@@ -0,0 +1,75 @@
+parameters:
+  - name: dotnet_configuration
+    type: object
+    default:
+      - Release
+  - name: AgentOS
+    type: string
+    default: ''
+
+steps:
+- bash: |
+    echo "##vso[task.setvariable variable=AgentOS;]${{ parameters.AgentOS }}"
+- script: |
+    sudo apt-get update
+    sudo apt-get install -y gnome-keyring dbus-x11
+    eval "$(dbus-launch --sh-syntax)"
+    echo "##vso[task.setvariable variable=DBUS_SESSION_BUS_ADDRESS;]$DBUS_SESSION_BUS_ADDRESS"
+    export $(echo 'anypass_just_to_unlock' | gnome-keyring-daemon --unlock)
+    export $(echo 'anypass_just_to_unlock' | gnome-keyring-daemon --start --components=gpg,pkcs11,secrets,ssh)
+  condition: startsWith(variables.AgentOS, 'Linux')
+  displayName: Install and Configure Keyring
+  env:
+    DISPLAY: :0.0
+- task: DotNetCoreCLI@2
+  inputs:
+    command: custom
+    custom: tool
+    arguments: install --tool-path . nbgv
+  displayName: Install NBGV tool
+- script: ./nbgv cloud
+  condition: startsWith(variables.AgentOS, 'Darwin')
+  displayName: Set Version MacOS
+- script: nbgv cloud
+  condition: not(startsWith(variables.AgentOS, 'Darwin'))
+  displayName: Set Version
+- script: dotnet build MSStore.CLI.sln --no-restore /p:Configuration=${{ parameters.dotnet_configuration }}
+  displayName: Build
+- task: DotNetCoreCLI@2
+  displayName: 'Tests net10.0'
+  env:
+    DISPLAY: :0.0
+  inputs:
+    command: 'run'
+    projects: '**/*[Tt]est*/*.csproj'
+    arguments: '-f net10.0 --no-build -c ${{ parameters.dotnet_configuration }} --coverage --coverage-output-format cobertura --report-trx'
+- task: DotNetCoreCLI@2
+  displayName: 'Tests net10.0-windows10.0.17763.0'
+  condition: startsWith(variables.AgentOS, 'Windows_NT')
+  env:
+    DISPLAY: :0.0
+  inputs:
+    command: 'run'
+    projects: '**/*[Tt]est*/*.csproj'
+    arguments: '-f net10.0-windows10.0.17763.0 --no-build -c ${{ parameters.dotnet_configuration }} --coverage --coverage-output-format cobertura --report-trx'
+- task: PublishTestResults@2
+  inputs:
+    testResultsFormat: 'VSTest'
+    testResultsFiles: '$(Build.SourcesDirectory)/MSStore.CLI.UnitTests/**/TestResults/*.trx'
+- task: DotNetCoreCLI@2
+  displayName: 'Install ReportGenerator'
+  inputs:
+    command: custom
+    custom: tool
+    arguments: 'install --global dotnet-reportgenerator-globaltool --version 5.5.1'
+- script: reportgenerator "-reports:$(Build.SourcesDirectory)/**/*.cobertura.xml" "-targetdir:$(Build.SourcesDirectory)/report" "-reporttypes:Cobertura" "-filefilters:-*GenerationContext*.g.cs"
+  displayName: Merge code coverage files
+- task: PublishCodeCoverageResults@1
+  displayName: 'Publish code coverage results'
+  inputs:
+    codeCoverageTool: 'Cobertura'
+    summaryFileLocation: '$(Build.SourcesDirectory)/report/Cobertura.xml'
+- task: ComponentGovernanceComponentDetection@0
+  displayName: 'Component Governance Detection'
+  inputs:
+    ignoreDirectories: $(Build.SourcesDirectory)/MSStore.CLI.UnitTests/TestData,$(Build.SourcesDirectory)/MSStore.CLI.UnitTests/bin

.pipelines/templates/build-cli.yaml

@@ -28,15 +28,8 @@ steps:
 - script: nbgv cloud
   condition: not(startsWith(variables.AgentOS, 'Darwin'))
   displayName: Set Version
-- script: dotnet build MSStore.CLI --no-restore --no-self-contained -r ${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }} -f ${{ parameters.dotnet_framework }} /p:Configuration=${{ parameters.dotnet_configuration }}
-  displayName: Build CLI
-- task: DownloadPipelineArtifact@2
-  inputs:
-    buildType: 'current'
-    artifactName: 'NuGetDLLs'
-    targetPath: '$(System.DefaultWorkingDirectory)/MSStore.CLI/bin/${{ parameters.dotnet_configuration }}/${{ parameters.dotnet_framework }}/${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }}'
-- script: dotnet publish MSStore.CLI --no-build --no-self-contained -r ${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }} -f ${{ parameters.dotnet_framework }} /p:Configuration=${{ parameters.dotnet_configuration }} /p:PublishProfile=${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }}
-  displayName: Publish NoSelfContained CLI
+- script: dotnet publish MSStore.CLI --self-contained -r ${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }} -f ${{ parameters.dotnet_framework }} /p:Configuration=${{ parameters.dotnet_configuration }} /p:PublishProfile=${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }}
+  displayName: Publish CLI
 - ${{ if eq(parameters['DoEsrp'], 'true') }}:
   - task: EsrpCodeSigning@5
     displayName: Code Sign ESRP - CLI - 3rd Party Dependencies
@@ -50,9 +43,8 @@ steps:
       AuthSignCertName: ${{ parameters.signingIdentity.signCertName }}
       FolderPath: '$(System.DefaultWorkingDirectory)/MSStore.CLI/bin/${{ parameters.dotnet_configuration }}/${{ parameters.dotnet_framework }}/${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }}/publish'
       Pattern: |
-        Meziantou.Framework.Win32.CredentialManager.dll,
-        Spectre.Console.dll,
-        SkiaSharp.dll,
+        libSkiaSharp.dll,
+        msalruntime_${{ parameters.dotnet_arch }}.dll,
       signConfigType: inlineSignParams
       inlineOperation: |
         [
@@ -91,12 +83,6 @@ steps:
       FolderPath: '$(System.DefaultWorkingDirectory)/MSStore.CLI/bin/${{ parameters.dotnet_configuration }}/${{ parameters.dotnet_framework }}/${{ parameters.dotnet_runtime }}-${{ parameters.dotnet_arch }}/publish'
       Pattern: |
         msstore.exe
-        msstore.dll
-        MSStore.API.dll
-        Microsoft.*.dll
-        !Microsoft.Windows.SDK.NET.dll
-        System.CommandLine*.dll
-        !System.CommandLine.resources.dll
       UseMinimatch: true
       signConfigType: inlineSignParams
       inlineOperation: |