[main] Source code updates from dotnet/dotnet

[dotnet-maestro]

Note

This is a codeflow update. It may contain both source code changes from the VMR as well as dependency updates. Learn more here.

This pull request brings the following source code changes

From https://github.com/dotnet/dotnet

• Subscription: d04a9fa0-e045-4804-8d07-d79b6d0400e0
• Build: 20250402.2
• Date Produced: April 2, 2025 8:19:12 PM UTC
• Source Diff: 49f46ce..49f46ce
• Commit: 49f46ce3082f22cd016b9fffdae880a09b04afcd
• Branch: main

Updated Dependencies

• System.CommandLine: from 2.0.0-beta4.23307.1 to 2.0.0-beta4.25202.102
• Microsoft.DotNet.Arcade.Sdk: from 10.0.0-beta.25171.1 to 10.0.0-beta.25202.102
• Microsoft.DotNet.XliffTasks: from 10.0.0-beta.25171.1 to 10.0.0-beta.25202.102

[premun]

@ViktorHofer I don't have write access here so cannot push but can you add this to NuGet.config?

<!-- Feeds for packages built in the VMR (newly Arcade and other) -->
<add key="dotnet10-transport" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet10-transport/nuget/v3/index.json" />

[akoeplinger]

actually I don't think we can merge this as it contains the System.CommandLine bump that is blocked: #1364

[premun]

I excluded System.CommandLine from future flows. We can either close the PR and trigger the subscription again or we can revert the System.CommandLine bump.
Since we already have other changes in the PR, I'd do the latter?

[premun]

Thanks for the revert.

How about the prebuilts? Is that expected?

[akoeplinger]

@dotnet/source-build do we need to update prebuild detection to account for the new arcade VMR versions?

[MichaelSimons]

@dotnet/source-build do we need to update prebuild detection to account for the new arcade VMR versions?

Once the VMR flow is enabled for a repo, IMO we should remove the repo level SB legs. The VMR doesn't produce the SB intermediates which the repo level SB legs depend on. This will likely have a cascading effect on other repo's which depend on sourcelink. This is a downside from trying to change sourcelink outside of "the great switch"

[akoeplinger]

hmm okay. I guess we could also just add the arcade packages to the prebuilt baseline for now since they aren't real issues and keep the SB leg?

[ViktorHofer]

Is that file permissions change intentional?

[akoeplinger]

yes, it's executable in arcade.

[premun]

I think the flat flow works better with eng/common as I saw it fixing permissions on the first backflow in other repos too

[akoeplinger]

ah, didn't realize this would auto-merge... Let me know if we should revert