[e128]

Executive Summary

The repository built and tested on net10.0 and SDK 10.0.4xx. The published analyzer package must keep working for a net10.0 consumer while the repository itself moves to .NET 11.

This change moves every project to net11.0 and pins SDK 11.0.100. It leaves the analyzer assemblies on netstandard2.0 with no package dependency, so one build loads in a .NET 10 host and a .NET 11 host. A new fixture proves that reach by consuming the packed package under SDK 10.

The gate is green: shell lint, format, build, and test all pass. The suite reports 5,270 tests passed, 0 failed, 0 skipped, with 0 build warnings and 0 build errors. The net10.0 consumer proof is behavioral, not a measurement: the packaged analyzer reports E128024 in a net10.0 build.

Code Changes

Build and SDK

• global.json pins SDK 11.0.100 and Directory.Build.props targets net11.0.
• The dead EnablePreviewFeatures groups are removed. Union types and runtime async are GA.
• The runtime-async=on group moves to Directory.Build.targets. A .props file evaluates before the project body sets IsTestProject, IsRoslynComponent, or IsBenchmarkProject, so the role conditions read empty there.
• tests/E128.Analyzers.Tests no longer multi-targets.

Analyzer reach

• Both analyzer projects pin LangVersion to 14.0. The SDK 10 compiler must build the sources, and latest there is C# 14. A C# 15 form in analyzer source fails CS8652 before the package can load.
• E128.Analyzers version 2.7.0 states the two-host reach in its description and tags.
• tests/Net10Consumer is a new fixture. It carries its own global.json (SDK 10), empty Directory.Build.props and .targets so no repository analyzer reaches it, an empty Directory.Packages.props to stop central package management, and a nuget.config that clears the inherited sources and serves E128.* from artifacts/nupkgs. Its source holds one deliberate E128024 violation.

Application code

• E128.Reference.Core returns GreetingResult, a C# 15 union of Greeting and GreetingError. The web endpoint maps each case and returns 400 for a blank name.
• The union makes the switch exhaustive at compile time, so a new case is a build failure rather than a fallthrough.

Dependencies

• Microsoft.Extensions.* and Mvc.Testing move to 11.0.0.
• Removed unused pins for System.Collections.Immutable, Humanizer.Core, Microsoft.ApplicationInsights, and Microsoft.Extensions.Diagnostics.Testing.
• System.Security.Cryptography.Pkcs stays at 11.0.0. Removing the pin let a 9.0.6 transitive version through, which carries a high-severity advisory.

Infrastructure

• Dockerfile moves to 11.0-resolute.
• ci.yml and publish.yml move to 11.0.x.
• ci.yml gains the net10-consumer job. It installs both SDK bands, packs the analyzer, builds the fixture, then fails when the log shows CS8032, AD0001, or a load failure, or when E128024 is absent.
• runtime-matrix.sh now collects every TFM declaration and no longer exits on an empty array under set -u.
• solution-inventory.sh counts benchmark projects.
• podman.sh reads the plain Healthy body instead of JSON.
• test.sh gains --framework.

Documentation

• lode/dotnet/net11-upgrade.md records the two-band rule, the analyzer reach rules, the union result, and the formatting hazard.
• plans/roadmap.md records the deferred items.

Tests and Tooling

• scripts/check.sh --all: shell, format, build, and test all pass.
• Suite count: 5,270 passed, 0 failed, 0 skipped.
• Format: scripts/format.sh --check reports no finding.
• Analyzer release files: analyzer-release-check.sh --json reports clean, with 214 source rules, 0 unshipped, 215 shipped.
• Analyzer README table: readme-table-diff.sh --analyzer --json reports drift: false.
• The net10-consumer CI job is new, so this run is its first use.
• No test was skipped or disabled by this change.

Review Guide

1. Directory.Build.targets: the runtime-async condition depends on properties set in the project body, which is why it lives in .targets and not .props.
2. src/E128.Analyzers/E128.Analyzers.csproj and src/E128.Analyzers.CodeFixers/E128.Analyzers.CodeFixers.csproj: the LangVersion pin at 14.0 is deliberate. Changing it to latest breaks the SDK 10 build of the sources.
3. tests/Net10Consumer/: check that the fixture's Directory.Build.props, Directory.Packages.props, and nuget.config really cut the repository inheritance. The fixture only proves reach if it builds without the repository's own analyzer and package settings.
4. .github/workflows/ci.yml: the net10-consumer gate asserts a diagnostic and the absence of a load warning. Both halves are needed, because a silent analyzer and a loaded analyzer look the same by exit code.

Rollback

Revert the single commit. The branch carries one commit on top of current main, and no other branch depends on it.

The previous .NET 10 state is the main tip before this commit.

Links

• Deferred work: plans/roadmap.md, section ".NET 11 Follow-Up".
• The closed plan and its evidence record: plans/net11-upgrade/, recoverable from commit 2d1d3c1 on this branch's ancestor history.
• An earlier push of this branch, origin/feature/net11-upgrade, holds plan documents from 2026-11-06 that exist nowhere else. This pull request does not touch that branch.

🤖 Generated with Claude Code