diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 62fd16e1..38e6bfc2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -53,7 +53,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       # Deliberately allowed to fail. GitVersion cannot version every git shape — a branch with no
       # merge base against a release branch, for one — and "we could not name this build" is not a
@@ -105,7 +105,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       - name: Restore
         run: dotnet restore CanKit.Pro.sln
@@ -220,7 +220,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       # Proves the packing the release workflow's `verify` job will do still works, on every pull
       # request rather than only when someone cuts a release.
@@ -347,7 +347,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       # `dotnet format` was never run in CI, so import ordering and whitespace drifted on `main`
       # until three separate agents tripped over the same three files. The formatter's own rules
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 2bf789d1..92d76838 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index c6660a6e..9846905d 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -86,7 +86,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       # Compiles the solution and turns the XML documentation comments into docs/api/. Must run
       # before mkdocs: the API tab's pages and its navigation file do not exist until it has.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 71cbab29..27a871c9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -82,7 +82,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       - name: Setup Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
@@ -238,7 +238,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: 10.0.x
+          dotnet-version: 10.0.403 # Exact version bypasses the broken aka.ms redirect (#456).
 
       - name: Setup Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0