dotnet scaffold sometimes finds the incorrect NuGet package version for the target framework

only sometimes... unclear when... I think it might be an issue with the nuget API

I see this sometimes when scaffolding a net 9 project with Blazor Identity

sometimes fails on the first time and then succeeds on the second time which is weird...

Adding package 'Microsoft.EntityFrameworkCore.Tools (v10.0.3)'...

info : X.509 certificate chain validation will use the default trust store selected by .NET for code signing.
info : X.509 certificate chain validation will use the default trust store selected by .NET for timestamping.
info : Adding PackageReference for package 'Microsoft.EntityFrameworkCore.Tools' into project 'C:\Users\hmckelvie\source\repos\blazorapp1\BlazorApp1\BlazorApp1.csproj'.
info : Restoring packages for C:\Users\hmckelvie\source\repos\blazorapp1\BlazorApp1\BlazorApp1.csproj...
info : CACHE https://api.nuget.org/v3/vulnerabilities/index.json
info : CACHE https://api.nuget.org/v3-vulnerabilities/2026.02.14.05.23.21/vulnerability.base.json
info : CACHE https://api.nuget.org/v3-vulnerabilities/2026.02.14.05.23.21/2026.02.17.11.23.28/vulnerability.update.json
error: NU1202: Package Microsoft.EntityFrameworkCore.Design 10.0.3 is not compatible with net9.0 (.NETCoreApp,Version=v9.0). Package Microsoft.EntityFrameworkCore.Design 10.0.3 supports: net10.0 (.NETCoreApp,Version=v10.0)
error: Package 'Microsoft.EntityFrameworkCore.Tools' is incompatible with 'all' frameworks in project 'C:\Users\hmckelvie\source\repos\blazorapp1\BlazorApp1\BlazorApp1.csproj'.

10.0.3 is not compatible with Net 9 but right now the metadata is showing that it is...