From 7ead8220670b7a4f21b6a3283ded76a0457ce18f Mon Sep 17 00:00:00 2001
From: Svrnty <info.svrnty.io>
Date: Fri, 27 Feb 2026 21:03:50 -0500
Subject: [PATCH] ci: fix dotnet version to 10.0.x and add concurrency controls

Change CI dotnet-version from 8.x to 10.0.x to match the project's
net10.0 target framework (security.yml already used 10.0.x). Add
concurrency groups and permissions: contents: read to both workflows.

Co-Authored-By: Svrnty Inc. <eng@svrnty.com>
---
 .github/workflows/ci.yml       | 9 ++++++++-
 .github/workflows/security.yml | 7 +++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 58021c3..237cf39 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,13 @@ on:
   pull_request:
     branches: [JP]
 
+concurrency:
+  group: ci-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   build-and-test:
     name: Build & Test
@@ -15,7 +22,7 @@ jobs:
 
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: "8.x"
+          dotnet-version: "10.0.x"
 
       - name: Restore
         run: dotnet restore Svrnty.CQRS.sln
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 7902bae..55aded1 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -8,6 +8,13 @@ on:
   schedule:
     - cron: "0 6 * * 1" # Weekly on Monday at 06:00 UTC
 
+concurrency:
+  group: security-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   vulnerability-scan:
     name: .NET vulnerability scan