Paulo Morgado's Shared Readingshttps://services.paulomorgado.net/feeds/Syndication.ashx/Shared/Readings.NET 11 Release Candidate 1 is available with improvements across libraries, runtime, SDK, MSBuild, NuGet, C#, F#, ASP.NET Core, .NET MAUI, and Windows Forms.https://devblogs.microsoft.com/dotnet/dotnet-11-rc-1/https://devblogs.microsoft.com/dotnet/dotnet-11-rc-1/Tue, 08 Sep 2026 22:03:44 GMTdotnetcsharpaspnetA recap of the latest servicing updates for .NET and .NET Framework for September 2026.https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-september-2026-servicing-updates/https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-september-2026-servicing-updates/Tue, 08 Sep 2026 21:03:23 GMTdotnetservicingupdatesWhen a distributed application feels slow, the user sees one delay. The code behind that delay may run across a web frontend, backend services, databases,https://devblogs.microsoft.com/visualstudio/today-i-will-find-hidden-latency-across-a-distributed-net-application/https://devblogs.microsoft.com/visualstudio/today-i-will-find-hidden-latency-across-a-distributed-net-application/Tue, 08 Sep 2026 19:11:04 GMTvisualstudioperformancedotnetprofilergithubcopilotReal-Time Api Health Check Monitoring. Contribute to VeritasSoftware/LiveHealthChecks development by creating an account on GitHub.https://github.com/VeritasSoftware/LiveHealthCheckshttps://github.com/VeritasSoftware/LiveHealthChecksTue, 08 Sep 2026 15:11:52 GMThealthchecksdotnetaspnetWhen talking to developers I get wildly different opinions about how "good" GitHub Copilot actually was for them. Some love it, some find it...https://bartwullems.blogspot.com/2026/09/monitoring-github-copilot-usage-with.htmlhttps://bartwullems.blogspot.com/2026/09/monitoring-github-copilot-usage-with.htmlWed, 02 Sep 2026 20:07:49 GMTaspiregithubcopilotEvery time npm has a supply chain incident, it’s tempting to think “haha, npm had yet another supply chain attack!” and feel safe in .NET land. But the tools to do the same thing in .NET, or at least similar things, are all there. Module initializers, source generators, MSBuild targets, startup hooks. A number of techniques exist to smuggle code into someone’s codebase, and most of them run before your application’s Main method is even called.https://blog.maartenballiauw.be/posts/2026-09-01-building-a-supply-chain-attack-with-dotnet-and-nuget/https://blog.maartenballiauw.be/posts/2026-09-01-building-a-supply-chain-attack-with-dotnet-and-nuget/Tue, 01 Sep 2026 19:09:17 GMTnugetIn this post I discuss the System.Text.Json support for unions and closed hierarchies coming in .NET 11, the decisions made, and some of the sharp edges I hithttps://andrewlock.net/exploring-the-dotnet-11-preview-7-the-pain-of-serializing-unions-and-closed-class-hierarchies-with-system-text-json/https://andrewlock.net/exploring-the-dotnet-11-preview-7-the-pain-of-serializing-unions-and-closed-class-hierarchies-with-system-text-json/Tue, 01 Sep 2026 19:07:40 GMTdotnetcsharpsystemtextjsonMaster high-performance C♯ programming in .NET 10 with zero-allocation spans, memory safety, SearchValues, and stack JIT optimizations.https://www.kunal-chowdhury.com/2026/08/high-performance-csharp-in-practice.htmlhttps://www.kunal-chowdhury.com/2026/08/high-performance-csharp-in-practice.htmlSat, 29 Aug 2026 21:57:06 GMTdotnetVSLive! @ Microsoft HQ 2026 was one of the most energizing VSLive! events I’ve attended. What stood out was the level of engagement over five days ofhttps://devblogs.microsoft.com/visualstudio/vslive-hq-content-sandiego-and-orlando-mentions/https://devblogs.microsoft.com/visualstudio/vslive-hq-content-sandiego-and-orlando-mentions/Thu, 27 Aug 2026 17:20:42 GMTdotnetHow Uno Platform built two Model Context Protocol servers in C# so AI agents can ground themselves in real documentation and then see and drive a running cross-platform .NET app.https://devblogs.microsoft.com/dotnet/how-uno-platform-uses-dotnet-mcp-ai-to-build-high-quality-apps/https://devblogs.microsoft.com/dotnet/how-uno-platform-uses-dotnet-mcp-ai-to-build-high-quality-apps/Thu, 27 Aug 2026 17:20:00 GMTdotnetunoplatformmodelcontextprotocolgithubcopilotartificialinteligenceA few months ago, we introduced a new guided agentic workflow in the Visual Studio Debugger Agent designed to help you move from a bug report to a Visual Studio Bloghttps://devblogs.microsoft.com/visualstudio/the-visual-studio-debugger-agentic-workflow-gets-a-test-driven-upgrade/https://devblogs.microsoft.com/visualstudio/the-visual-studio-debugger-agentic-workflow-gets-a-test-driven-upgrade/Wed, 26 Aug 2026 19:57:47 GMTvisualstudiodebugginggithubcopilotdiagnosticsVisual Studio August Update — Work Smarter Across Models and Brancheshttps://devblogs.microsoft.com/visualstudio/visual-studio-august-update-work-smarter-across-models-and-branches/https://devblogs.microsoft.com/visualstudio/visual-studio-august-update-work-smarter-across-models-and-branches/Wed, 26 Aug 2026 19:56:52 GMTvisualstudioproductivitygithubcopilot.NET Conf returns November 10-12, 2026, with three days of sessions, community, and the launch of .NET 11.https://devblogs.microsoft.com/dotnet/dotnet-conf-2026/https://devblogs.microsoft.com/dotnet/dotnet-conf-2026/Tue, 25 Aug 2026 17:03:20 GMTdotnetIn this post I show how to find the total number of logical CPUs on a host (not just those available to a process); something that isn't exposed in modern .NEThttps://andrewlock.net/finding-the-total-number-of-processors-on-a-machine-with-dotnet/https://andrewlock.net/finding-the-total-number-of-processors-on-a-machine-with-dotnet/Tue, 25 Aug 2026 14:45:29 GMTdotnetobservabilityThe best AI in Visual Studio is the AI you can bring with you. Developers don't work in a single-model world anymore. You might reach for one model for We're bringing Bring Your Own Model (BYOM) to Visual Studio so more developers can use AI with the models their teams prefer, whether through GitHub Copilot or their own model deployments.https://devblogs.microsoft.com/visualstudio/unlocking-the-power-of-ai-for-every-developer-in-visual-studio-with-bring-your-own-model/https://devblogs.microsoft.com/visualstudio/unlocking-the-power-of-ai-for-every-developer-in-visual-studio-with-bring-your-own-model/Tue, 25 Aug 2026 07:20:05 GMTvisualstudiogithubcopilotLearn how to use IncludeAssets and ExcludeAssets to block NuGet analyzers and MSBuild targets, and reduce package build-time risks.https://www.meziantou.net/limit-what-nuget-packages-can-do-in-your-project.htmhttps://www.meziantou.net/limit-what-nuget-packages-can-do-in-your-project.htmMon, 24 Aug 2026 17:49:11 GMTnugetmsbuildC# 15 ships with .NET 11. It adds union types, closed hierarchies, a preview of the updated unsafe model, and a few smaller changes that remove everyday ceremony.https://devblogs.microsoft.com/dotnet/explore-csharp-15/https://devblogs.microsoft.com/dotnet/explore-csharp-15/Mon, 24 Aug 2026 17:38:04 GMTdotnetWe are all familiar with IP addresses such as 192.168.0.1. They are typically written as four numbers in the range 0 to 255 inclusive, separated by dots. In C#, you can parse them with the standard library using IPAddress.TryParse. Pedantic people are quick to point out that IP addresses can take different forms: they can … Continue reading Parsing IP addresses in C# at crazy speedshttps://lemire.me/blog/2026/08/19/parsing-ip-addresses-in-c-at-crazy-speeds/https://lemire.me/blog/2026/08/19/parsing-ip-addresses-in-c-at-crazy-speeds/Thu, 20 Aug 2026 19:54:30 GMTdotnetperformancecsharpAspire 13.5 refreshes the dashboard and aspire.dev, expands the Interaction Service, adds cross-scope Azure references and Kubernetes persistent volumes, and brings live terminals into the AppHost.https://devblogs.microsoft.com/aspire/whats-new-aspire-13-5/https://devblogs.microsoft.com/aspire/whats-new-aspire-13-5/Tue, 18 Aug 2026 22:23:14 GMTaspirexUnit.v3 got a new major release. This blog post is more about the consequences of that for your local build and CI/CD pipelines than about the new features.https://steven-giesel.com/blogPost/b0e1aadf-8e88-4553-9636-19df43b1b068/xunitv3-400-releasedhttps://steven-giesel.com/blogPost/b0e1aadf-8e88-4553-9636-19df43b1b068/xunitv3-400-releasedMon, 17 Aug 2026 13:10:11 GMTxunitdotnettestingThis blog demonstrates how to use Aspire to set up a solution for developing and deploying an ASP.NET Core web application with Auth0 as the identity provider and a downstream API. The application …https://damienbod.com/2026/08/17/use-aspire-to-implement-and-deploy-the-bff-security-architecture/https://damienbod.com/2026/08/17/use-aspire-to-implement-and-deploy-the-bff-security-architecture/Mon, 17 Aug 2026 07:10:29 GMTaspnetopenidconnectaspiredotnetIf you've worked with Git submodules for any length of time, you probably have a love-hate relationship with them. They're genuinely useful for pulling ahttps://devblogs.microsoft.com/visualstudio/managing-git-submodules-without-leaving-the-ide/https://devblogs.microsoft.com/visualstudio/managing-git-submodules-without-leaving-the-ide/Tue, 11 Aug 2026 19:43:06 GMTgitvisualstudioYou have an IMessageSender interface, with two implementations: EmailMessageSender and SmsMessageSender. You register both, and now the question is which one gets injected into your OrderConfirmationService constructor. The answer, unhelpfully, is whichever was registered last. This may also introduce subtle, unexpected bugs when new services are registered.https://blog.maartenballiauw.be/posts/2026-08-11-keyed-services-named-registrations-in-dotnet-service-provider/https://blog.maartenballiauw.be/posts/2026-08-11-keyed-services-named-registrations-in-dotnet-service-provider/Tue, 11 Aug 2026 12:14:43 GMTdotnetdependencyinjectionkeyedservicesThis post should how to implement a web application which needs secure access and secure identities. The application uses Angular as the UI tech, ASP.NET Core as the backend tech and a backend for …https://damienbod.com/2026/08/10/implement-bff-using-auth0-angular-and-asp-net-core/https://damienbod.com/2026/08/10/implement-bff-using-auth0-angular-and-asp-net-core/Mon, 10 Aug 2026 07:15:43 GMTaspnetdotnetopenidconnectMicrosoft.Testing.Platform brings failures into GitHub Actions and Azure DevOps, uses pipeline history to separate regressions from flakes, and preserves usable reports when a test host crashes.https://devblogs.microsoft.com/dotnet/microsoft-testing-platform-reporting/https://devblogs.microsoft.com/dotnet/microsoft-testing-platform-reporting/Thu, 06 Aug 2026 18:03:10 GMTdotnettestinggithubactionsmicrosofttestingplatformA custom CoreCLR GC that only ever allocates and never reclaims memory - the simplest possible baseline for writing a real one, and a fun toy for measuring how GC-bound your app really is.https://kokosa.dev/blog/2026/zero-gc/https://kokosa.dev/blog/2026/zero-gc/Wed, 05 Aug 2026 12:38:00 GMTdotnetgcperformanceBuild a live speech-to-text app in C# with Foundry Local, a compact Nemotron model, and local model lifecycle management.https://devblogs.microsoft.com/dotnet/foundry-local-live-speech-to-text-csharp/https://devblogs.microsoft.com/dotnet/foundry-local-live-speech-to-text-csharp/Tue, 04 Aug 2026 22:03:19 GMTcsharpdotnetartificialinteligenceIn this post I describe the new Cross-Site Request Forgery protection added to ASP.NET Core that uses Fetch Metadata HTTP headers instead of antiforgery tokenshttps://andrewlock.net/exploring-the-dotnet-11-preview-6-automatic-csrf-protection-based-on-fetch-metadata-http-headers/https://andrewlock.net/exploring-the-dotnet-11-preview-6-automatic-csrf-protection-based-on-fetch-metadata-http-headers/Tue, 04 Aug 2026 21:09:55 GMTaspnetsecurityhttpwebdotnetOver the last week Dependabot has had more burr than usual, including a bunch of GitHub workflow updates for CodeQL, but bang, failed workflow.https://idunno.org/group-your-dependabot-updates/https://idunno.org/group-your-dependabot-updates/Mon, 03 Aug 2026 20:59:34 GMTgithubdependabotNuGet API key durations will be reduced to 30 days starting August 17th. This change will significantly strengthen the integrity of the NuGet supply chain.https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/Mon, 03 Aug 2026 19:03:44 GMTnugetsecurityAs always my yearly take on the latest .NET release. In a few months dotnet 11 will be released and I wanted to have a look into some performance metrics.https://steven-giesel.com/blogPost/86620358-bb91-4295-84fc-a1329b2567ae/net-11-performance-editionhttps://steven-giesel.com/blogPost/86620358-bb91-4295-84fc-a1329b2567ae/net-11-performance-editionSun, 02 Aug 2026 12:06:40 GMTdotnetperformanceMeet the open-source polyglot testing agent that learns from a repository, writes unit tests, and checks that they build and pass.https://devblogs.microsoft.com/dotnet/polyglot-unit-testing-agent/https://devblogs.microsoft.com/dotnet/polyglot-unit-testing-agent/Fri, 31 Jul 2026 16:03:20 GMTdotnetartificialinteligencetestinggithubcopilotWindows Performance Analyzer (WPA) is one of the most powerful tools available for understanding system performance on Windows. It helps engineershttps://devblogs.microsoft.com/performance-diagnostics/introducing-wpa-mcp-early-preview-of-ai-assisted-trace-analysis-in-windows-performance-analyzer/https://devblogs.microsoft.com/performance-diagnostics/introducing-wpa-mcp-early-preview-of-ai-assisted-trace-analysis-in-windows-performance-analyzer/Fri, 31 Jul 2026 07:51:47 GMTetwperformancediagnosticsIn this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a requesthttps://andrewlock.net/understanding-the-fetch-metadata-http-headers-sec-fetch-site-and-friends/https://andrewlock.net/understanding-the-fetch-metadata-http-headers-sec-fetch-site-and-friends/Wed, 29 Jul 2026 11:45:48 GMTwebsecurityhttpaspnetMCP C# SDK v2.0 implements the 2026-07-28 specification with a stateless-first protocol, standardized HTTP headers, and Multi Round-Trip Requests for interactive tools, all while staying backward compatible.https://devblogs.microsoft.com/dotnet/announcing-v20-of-the-official-mcp-csharp-sdk/https://devblogs.microsoft.com/dotnet/announcing-v20-of-the-official-mcp-csharp-sdk/Tue, 28 Jul 2026 23:03:38 GMTcsharpmodelcontextprotocolartificialinteligenceThere's a new Agent (Preview) in Copilot Chat, built on the same GitHub Copilot SDK that powers the GitHub Copilot CLI, that gets more done with less back-and-forth.https://devblogs.microsoft.com/visualstudio/visual-studio-july-update-meet-the-new-agent-powered-by-copilot-sdk/https://devblogs.microsoft.com/visualstudio/visual-studio-july-update-meet-the-new-agent-powered-by-copilot-sdk/Tue, 28 Jul 2026 18:22:04 GMTvisualstudiogithubcopilotLearn two ways to get a Unicode character name from a Rune in .NET: ICU interop for small footprint or Meziantou.Framework.Unicode for simplicity.https://www.meziantou.net/get-a-unicode-character-name-from-a-rune-in-dotnet.htmhttps://www.meziantou.net/get-a-unicode-character-name-from-a-rune-in-dotnet.htmMon, 27 Jul 2026 20:48:19 GMTdotnetunicodeMeet the MSBuild Binlog Analyzer for VS Code - a Copilot-powered way to read MSBuild binary logs, explain and fix build failures with one click, compare builds, and catch regressions, backed by the Microsoft.AITools.BinlogMcp MCP server.https://devblogs.microsoft.com/dotnet/msbuild-binlog-analyzer-vscode/https://devblogs.microsoft.com/dotnet/msbuild-binlog-analyzer-vscode/Mon, 27 Jul 2026 17:03:32 GMTmsbuildgithubcopilotdotnetvscodeFrom a 2007 Windows via C/C++ VMMap demo to a modern Windows 11 analyzer and its Linux /proc/smaps counterpart - and why Working Set, RSS/PSS and 'committed' memory do not mean the same thing on the two operating systems.https://chrisnas.github.io/posts/2026-07-09_how-to-map-the-address/?fbclid=IwY2xjawTUPWlwZG9mBWV4dG4DYWVtAjExAHNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5Mp-Q8LT4bi6YbnDCN6J95UcQ3tw9Hozuyl052oHTuskqlQFSWoJm-63Jb2w_aem_-y_Sr3N0PHYTR9WlqEdJbwhttps://chrisnas.github.io/posts/2026-07-09_how-to-map-the-address/?fbclid=IwY2xjawTUPWlwZG9mBWV4dG4DYWVtAjExAHNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5Mp-Q8LT4bi6YbnDCN6J95UcQ3tw9Hozuyl052oHTuskqlQFSWoJm-63Jb2w_aem_-y_Sr3N0PHYTR9WlqEdJbwMon, 27 Jul 2026 13:34:03 GMTdebuggingdiagnosticsmemoryGenerate strongly-typed message producers from AsyncAPI specs using the Corvus CLI - validated payloads, channel address templates, and pluggable transports for NATS, Kafka, AMQP, MQTT, and Azure Service Bus.https://endjin.com/blog/asyncapi-code-generation-with-corvus-typed-producershttps://endjin.com/blog/asyncapi-code-generation-with-corvus-typed-producersFri, 24 Jul 2026 08:00:22 GMTcsharpasyncapiGenerate strongly-typed HTTP clients from OpenAPI 3.x specs using the Corvus CLI - zero-allocation models, exhaustive response matching, and built-in schema validation with a single dotnet tool command.https://endjin.com/blog/openapi-code-generation-with-corvus-typed-http-clientshttps://endjin.com/blog/openapi-code-generation-with-corvus-typed-http-clientsFri, 24 Jul 2026 07:57:41 GMTopenapicsharpIf you’ve ever opened an ETL trace with hundreds of data tables and wondered “where do I even start?” This post is for you. We’re releasing an earlyhttps://devblogs.microsoft.com/performance-diagnostics/etw-mcp-intro/https://devblogs.microsoft.com/performance-diagnostics/etw-mcp-intro/Wed, 22 Jul 2026 07:25:24 GMTartificialinteligencediagnosticsperformanceetwmodelcontextprotocolThis document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software like Microsoft SmartScreen. Importantly, URLs a…https://textslashplain.com/2026/07/17/guidelines-for-url-storage-and-comparison/https://textslashplain.com/2026/07/17/guidelines-for-url-storage-and-comparison/Mon, 20 Jul 2026 15:55:12 GMTwebsecurityurlA free, open-source, hands-on course that walks you through modernizing a real legacy ASP.NET application all the way to .NET 10 using the GitHub Copilot modernization agent, step by step.https://devblogs.microsoft.com/dotnet/announcing-dotnet-modernization-for-beginners/https://devblogs.microsoft.com/dotnet/announcing-dotnet-modernization-for-beginners/Thu, 16 Jul 2026 18:03:25 GMTdotnetgithubcopilotmodernizationYou open the model picker, scroll past a dozen options, and pause. How are these models different? Which one should you actually use? And once you're ahttps://devblogs.microsoft.com/visualstudio/pick-manage-and-get-the-most-from-your-models/https://devblogs.microsoft.com/visualstudio/pick-manage-and-get-the-most-from-your-models/Wed, 15 Jul 2026 18:04:10 GMTvisualstudiogithubcopilotDuende Software is a company that builds industry-leading security software.https://duendesoftware.com/blog/20260714-youre-already-using-dotnet-changetokenhttps://duendesoftware.com/blog/20260714-youre-already-using-dotnet-changetokenWed, 15 Jul 2026 15:34:06 GMTdotnetA recap of the latest servicing updates for .NET and .NET Framework for July 2026.https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates/https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates/Tue, 14 Jul 2026 19:03:16 GMTdotnetservicingupdatesFind out about the new features in .NET 11 Preview 6 across runtime, SDK, libraries, ASP.NET Core, .NET MAUI, C#, Entity Framework Core, F#, and container images.https://devblogs.microsoft.com/dotnet/dotnet-11-preview-6/https://devblogs.microsoft.com/dotnet/dotnet-11-preview-6/Tue, 14 Jul 2026 18:03:44 GMTdotnetcsharpupdatesVisual Studio now includes built-in Agent Skills, created by experts from the .NET and Azure teams, to help you better customize your agentic workflow andhttps://devblogs.microsoft.com/visualstudio/built-in-agent-skills-in-visual-studio/https://devblogs.microsoft.com/visualstudio/built-in-agent-skills-in-visual-studio/Tue, 14 Jul 2026 17:58:07 GMTvisualstudiogithubcopilotBlazor is a bit talkative when it comes to the Developer Console. PageSpeed Insights for example does complain: Browser errors were logged to the console The fix is easy.https://steven-giesel.com/blogPost/1cfa82eb-1108-4355-8815-615b094bf9echttps://steven-giesel.com/blogPost/1cfa82eb-1108-4355-8815-615b094bf9ecSun, 12 Jul 2026 16:51:33 GMTblazorlogging