diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index 6a8c8a1..a8483d3 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -2,8 +2,8 @@
   "version": 1,
   "isRoot": true,
   "tools": {
-    "fallout.cli": {
-      "version": "11.0.18",
+    "fallout.globaltool": {
+      "version": "10.4.0",
       "commands": [
         "fallout"
       ]
diff --git a/.gitignore b/.gitignore
index 1079ab1..1e20cfe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -196,4 +196,6 @@ pip-log.txt
 .DS_Store
 
 # Fallout build tool
-.fallout/temp
\ No newline at end of file
+.fallout/temp
+# The Python-era "build" pattern above would swallow the build project directory
+!/build/
\ No newline at end of file
diff --git a/build/_build.csproj b/build/_build.csproj
index 647ac26..11c89b0 100644
--- a/build/_build.csproj
+++ b/build/_build.csproj
@@ -11,9 +11,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Fallout.Common" Version="11.0.18" />
-    <!-- Transitive pin: Fallout.Common 11.0.18 still resolves 10.0.6, which carries advisories. -->
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.10" PrivateAssets="All" />
+    <PackageReference Include="Fallout.Common" Version="10.4.0" />
   </ItemGroup>
 
 </Project>