[mendozagit]

Resumen

El binario AOT embebía el runtime .NET 10.0.12, que tiene GHSA-4mpw-cpwj-hxxj (CVE-2026-70197, RCE) y otros avisos HIGH del runtime.

• global.json: SDK de 10.0.401 a 10.0.403, con runtime packs e ILCompiler 10.0.14.
• Versión 4.0.469, también en los ejemplos de versión de docs/.

Verificación

• En project.assets.json, los packs de win-x64 y linux-x64 quedan en 10.0.14. OSV no tiene avisos para 10.0.14.
• dotnet publish AOT para win-x64: el exe embebe 10.0.14, no queda rastro de 10.0.12, y --help y --version funcionan.
• dotnet test FiscalApi.Cli.slnx -c Release: 404/404.

Después del merge

Crear el release v4.0.469 y descartar el borrador v4.0.462, que se compiló con el runtime vulnerable.

Summary by CodeRabbit

• Documentation
  • Updated installation and command-line examples to reflect version 4.0.469, including version output and verbose request details.
  • Updated the upgrade notice example to show version 4.0.470 available when version 4.0.469 is installed.
• Chores
  • Updated the required .NET SDK version to 10.0.403.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 576f7973-3025-4286-bf11-ee2fb7775fdd

Commits

Reviewing files that changed from the base of the PR and between 9a1c896 and 0e4be98.

Files selected for processing: 4

• docs/instalacion.md
• docs/salida-y-codigos.md
• global.json
• src/FiscalApi.Cli/FiscalApi.Cli.csproj

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The CLI version changed to 4.0.469. Installation and output documentation now use the new version. The .NET SDK version changed to 10.0.403.

Changes: Release version alignment

Layer / File(s)	Summary
CLI version and documentation examples src/FiscalApi.Cli/FiscalApi.Cli.csproj, docs/instalacion.md, docs/salida-y-codigos.md	The CLI project version and documented version examples changed from 4.0.462 to 4.0.469. The update notice now shows 4.0.470 as available.
SDK baseline global.json	The .NET SDK version changed from 10.0.401 to 10.0.403. The latestFeature setting is unchanged.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related PRs

• FiscalAPI/fiscalapi-cli#5: Uses the project <Version> value for release validation and publishing. This change updates that value to 4.0.469.

Merge Risk: Minimal · up to 0e4be

The release version updates are consistent and introduce no identified merge-blocking risk.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title names the two changes the PR makes: the security update of the .NET SDK to 10.0.403 with the AOT runtime 10.0.14, and the version bump to 4.0.469. The raw summary confirms both changes in gl…
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the two changes the PR makes: the security update of the .NET SDK to 10.0.403 with the AOT runtime 10.0.14, and the version bump to 4.0.469. The raw summary confirms both changes in global.json, the CLI csproj, and the docs examples, and the PR objectives describe the same security motivation. The title is specific and accurate, although it lists two changes and does not state the vulnerability being fixed.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (4 skipped: 4 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}