Paulo Morgado's Shared Readingshttps://services.paulomorgado.net/feeds/Syndication.ashx/Shared/ReadingsOver the last week Dependabot has had more burr than usual, including a bunch of GitHub workflow updates for CodeQL, but bang, failed workflow.https://idunno.org/group-your-dependabot-updates/https://idunno.org/group-your-dependabot-updates/Mon, 03 Aug 2026 20:59:34 GMTgithubdependabotNuGet API key durations will be reduced to 30 days starting August 17th. This change will significantly strengthen the integrity of the NuGet supply chain.https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/Mon, 03 Aug 2026 19:03:44 GMTnugetsecurityAs always my yearly take on the latest .NET release. In a few months dotnet 11 will be released and I wanted to have a look into some performance metrics.https://steven-giesel.com/blogPost/86620358-bb91-4295-84fc-a1329b2567ae/net-11-performance-editionhttps://steven-giesel.com/blogPost/86620358-bb91-4295-84fc-a1329b2567ae/net-11-performance-editionSun, 02 Aug 2026 12:06:40 GMTdotnetperformanceMeet the open-source polyglot testing agent that learns from a repository, writes unit tests, and checks that they build and pass.https://devblogs.microsoft.com/dotnet/polyglot-unit-testing-agent/https://devblogs.microsoft.com/dotnet/polyglot-unit-testing-agent/Fri, 31 Jul 2026 16:03:20 GMTdotnetartificialinteligencetestinggithubcopilotWindows Performance Analyzer (WPA) is one of the most powerful tools available for understanding system performance on Windows. It helps engineershttps://devblogs.microsoft.com/performance-diagnostics/introducing-wpa-mcp-early-preview-of-ai-assisted-trace-analysis-in-windows-performance-analyzer/https://devblogs.microsoft.com/performance-diagnostics/introducing-wpa-mcp-early-preview-of-ai-assisted-trace-analysis-in-windows-performance-analyzer/Fri, 31 Jul 2026 07:51:47 GMTetwperformancediagnosticsIn this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a requesthttps://andrewlock.net/understanding-the-fetch-metadata-http-headers-sec-fetch-site-and-friends/https://andrewlock.net/understanding-the-fetch-metadata-http-headers-sec-fetch-site-and-friends/Wed, 29 Jul 2026 11:45:48 GMTwebsecurityhttpaspnetMCP C# SDK v2.0 implements the 2026-07-28 specification with a stateless-first protocol, standardized HTTP headers, and Multi Round-Trip Requests for interactive tools, all while staying backward compatible.https://devblogs.microsoft.com/dotnet/announcing-v20-of-the-official-mcp-csharp-sdk/https://devblogs.microsoft.com/dotnet/announcing-v20-of-the-official-mcp-csharp-sdk/Tue, 28 Jul 2026 23:03:38 GMTcsharpmodelcontextprotocolartificialinteligenceThere's a new Agent (Preview) in Copilot Chat, built on the same GitHub Copilot SDK that powers the GitHub Copilot CLI, that gets more done with less back-and-forth.https://devblogs.microsoft.com/visualstudio/visual-studio-july-update-meet-the-new-agent-powered-by-copilot-sdk/https://devblogs.microsoft.com/visualstudio/visual-studio-july-update-meet-the-new-agent-powered-by-copilot-sdk/Tue, 28 Jul 2026 18:22:04 GMTvisualstudiogithubcopilotLearn two ways to get a Unicode character name from a Rune in .NET: ICU interop for small footprint or Meziantou.Framework.Unicode for simplicity.https://www.meziantou.net/get-a-unicode-character-name-from-a-rune-in-dotnet.htmhttps://www.meziantou.net/get-a-unicode-character-name-from-a-rune-in-dotnet.htmMon, 27 Jul 2026 20:48:19 GMTdotnetunicodeMeet the MSBuild Binlog Analyzer for VS Code - a Copilot-powered way to read MSBuild binary logs, explain and fix build failures with one click, compare builds, and catch regressions, backed by the Microsoft.AITools.BinlogMcp MCP server.https://devblogs.microsoft.com/dotnet/msbuild-binlog-analyzer-vscode/https://devblogs.microsoft.com/dotnet/msbuild-binlog-analyzer-vscode/Mon, 27 Jul 2026 17:03:32 GMTmsbuildgithubcopilotdotnetvscodeFrom a 2007 Windows via C/C++ VMMap demo to a modern Windows 11 analyzer and its Linux /proc/smaps counterpart - and why Working Set, RSS/PSS and 'committed' memory do not mean the same thing on the two operating systems.https://chrisnas.github.io/posts/2026-07-09_how-to-map-the-address/?fbclid=IwY2xjawTUPWlwZG9mBWV4dG4DYWVtAjExAHNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5Mp-Q8LT4bi6YbnDCN6J95UcQ3tw9Hozuyl052oHTuskqlQFSWoJm-63Jb2w_aem_-y_Sr3N0PHYTR9WlqEdJbwhttps://chrisnas.github.io/posts/2026-07-09_how-to-map-the-address/?fbclid=IwY2xjawTUPWlwZG9mBWV4dG4DYWVtAjExAHNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5Mp-Q8LT4bi6YbnDCN6J95UcQ3tw9Hozuyl052oHTuskqlQFSWoJm-63Jb2w_aem_-y_Sr3N0PHYTR9WlqEdJbwMon, 27 Jul 2026 13:34:03 GMTdebuggingdiagnosticsmemoryGenerate strongly-typed message producers from AsyncAPI specs using the Corvus CLI - validated payloads, channel address templates, and pluggable transports for NATS, Kafka, AMQP, MQTT, and Azure Service Bus.https://endjin.com/blog/asyncapi-code-generation-with-corvus-typed-producershttps://endjin.com/blog/asyncapi-code-generation-with-corvus-typed-producersFri, 24 Jul 2026 08:00:22 GMTcsharpasyncapiGenerate strongly-typed HTTP clients from OpenAPI 3.x specs using the Corvus CLI - zero-allocation models, exhaustive response matching, and built-in schema validation with a single dotnet tool command.https://endjin.com/blog/openapi-code-generation-with-corvus-typed-http-clientshttps://endjin.com/blog/openapi-code-generation-with-corvus-typed-http-clientsFri, 24 Jul 2026 07:57:41 GMTopenapicsharpIf you’ve ever opened an ETL trace with hundreds of data tables and wondered “where do I even start?” This post is for you. We’re releasing an earlyhttps://devblogs.microsoft.com/performance-diagnostics/etw-mcp-intro/https://devblogs.microsoft.com/performance-diagnostics/etw-mcp-intro/Wed, 22 Jul 2026 07:25:24 GMTartificialinteligencediagnosticsperformanceetwmodelcontextprotocolThis document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software like Microsoft SmartScreen. Importantly, URLs a…https://textslashplain.com/2026/07/17/guidelines-for-url-storage-and-comparison/https://textslashplain.com/2026/07/17/guidelines-for-url-storage-and-comparison/Mon, 20 Jul 2026 15:55:12 GMTwebsecurityurlA free, open-source, hands-on course that walks you through modernizing a real legacy ASP.NET application all the way to .NET 10 using the GitHub Copilot modernization agent, step by step.https://devblogs.microsoft.com/dotnet/announcing-dotnet-modernization-for-beginners/https://devblogs.microsoft.com/dotnet/announcing-dotnet-modernization-for-beginners/Thu, 16 Jul 2026 18:03:25 GMTdotnetgithubcopilotmodernizationYou open the model picker, scroll past a dozen options, and pause. How are these models different? Which one should you actually use? And once you're ahttps://devblogs.microsoft.com/visualstudio/pick-manage-and-get-the-most-from-your-models/https://devblogs.microsoft.com/visualstudio/pick-manage-and-get-the-most-from-your-models/Wed, 15 Jul 2026 18:04:10 GMTvisualstudiogithubcopilotDuende Software is a company that builds industry-leading security software.https://duendesoftware.com/blog/20260714-youre-already-using-dotnet-changetokenhttps://duendesoftware.com/blog/20260714-youre-already-using-dotnet-changetokenWed, 15 Jul 2026 15:34:06 GMTdotnetA recap of the latest servicing updates for .NET and .NET Framework for July 2026.https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates/https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates/Tue, 14 Jul 2026 19:03:16 GMTdotnetservicingupdatesFind out about the new features in .NET 11 Preview 6 across runtime, SDK, libraries, ASP.NET Core, .NET MAUI, C#, Entity Framework Core, F#, and container images.https://devblogs.microsoft.com/dotnet/dotnet-11-preview-6/https://devblogs.microsoft.com/dotnet/dotnet-11-preview-6/Tue, 14 Jul 2026 18:03:44 GMTdotnetcsharpupdatesVisual Studio now includes built-in Agent Skills, created by experts from the .NET and Azure teams, to help you better customize your agentic workflow andhttps://devblogs.microsoft.com/visualstudio/built-in-agent-skills-in-visual-studio/https://devblogs.microsoft.com/visualstudio/built-in-agent-skills-in-visual-studio/Tue, 14 Jul 2026 17:58:07 GMTvisualstudiogithubcopilotBlazor is a bit talkative when it comes to the Developer Console. PageSpeed Insights for example does complain: Browser errors were logged to the console The fix is easy.https://steven-giesel.com/blogPost/1cfa82eb-1108-4355-8815-615b094bf9echttps://steven-giesel.com/blogPost/1cfa82eb-1108-4355-8815-615b094bf9ecSun, 12 Jul 2026 16:51:33 GMTblazorloggingModernize .NET applications in the GitHub Copilot app. Follow your upgrade from assessment through execution in an interactive upgrade canvas.https://devblogs.microsoft.com/dotnet/modernize-dotnet-in-github-copilot-app/https://devblogs.microsoft.com/dotnet/modernize-dotnet-in-github-copilot-app/Thu, 09 Jul 2026 18:03:19 GMTdotnetgithubcopilotmodernizationIn this post I show some of the improvements to the Process API in .NET 11 for running processes and reading their outputs without risk of deadlockhttps://andrewlock.net/exploring-the-dotnet-11-preview-5-improvments-to-process-apis/https://andrewlock.net/exploring-the-dotnet-11-preview-5-improvments-to-process-apis/Tue, 07 Jul 2026 18:12:06 GMTdotnetprocessTL;DR: The async model is a contract. In .NET, async methods are expected to do little CPU work, spend most of their time awaiting input/output, and make long-running CPU work explicit. Lease...https://www.planetgeek.ch/2026/07/02/the-scheduler-is-part-of-your-message-pump/https://www.planetgeek.ch/2026/07/02/the-scheduler-is-part-of-your-message-pump/Tue, 07 Jul 2026 11:07:41 GMTasynccsharpdotnetHow I migrated the Aspire Community Toolkit's NuGet publishing workflows from a long-lived API key to NuGet trusted publishing with GitHub OIDC.https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/Tue, 07 Jul 2026 07:47:08 GMTnugetThe June update includes a Copilot Usage window refresh with proactive alerts as you approach your limits, MCP servers now get a trust check before they run anything new.https://devblogs.microsoft.com/visualstudio/visual-studio-june-update-track-your-usage-trust-your-tools/https://devblogs.microsoft.com/visualstudio/visual-studio-june-update-track-your-usage-trust-your-tools/Fri, 03 Jul 2026 11:39:22 GMTvisualstudioIn this post I describe what a close closed hierarchy is, how to create one, and discuss why you might want tohttps://andrewlock.net/exploring-the-dotnet-11-preview-4-closed-class-hierarchies/https://andrewlock.net/exploring-the-dotnet-11-preview-4-closed-class-hierarchies/Fri, 03 Jul 2026 11:33:52 GMTcsharpdotnetUsing NativeAOT to write a .NET GC in C#. In this part, we add support for finalization.https://minidump.net/writing-a-net-gc-in-c-part-10/https://minidump.net/writing-a-net-gc-in-c-part-10/Fri, 03 Jul 2026 11:32:19 GMTdotnetnativeaotgcA practical tour of the Model Context Protocol tools for .NET build diagnostics - the full Binlog MCP toolset, how those tools run inside a GitHub Actions workflow, and what the evaluation data says about the efficiency gains.https://devblogs.microsoft.com/dotnet/mcp-build-diagnostics-workflows/https://devblogs.microsoft.com/dotnet/mcp-build-diagnostics-workflows/Tue, 30 Jun 2026 17:03:54 GMTdotnetgithubactionsmodelcontextprotocolmsbuildgithubcopilotartificialinteligence.NET 8 and .NET 9 will both reach end of support on November 10, 2026. Learn what this means and how to upgrade to .NET 10 (LTS).https://devblogs.microsoft.com/dotnet/dotnet-8-9-end-of-support/https://devblogs.microsoft.com/dotnet/dotnet-8-9-end-of-support/Mon, 29 Jun 2026 22:03:16 GMTdotnetlifecycleSkiaSharp 4.148.0 is the first stable release of SkiaSharp v4. Learn what is new, why you should be excited, and join the SkiaSharp live event on June 30.https://devblogs.microsoft.com/dotnet/skiasharp-4-0-stable/https://devblogs.microsoft.com/dotnet/skiasharp-4-0-stable/Mon, 29 Jun 2026 22:03:15 GMTdotnetskiaskiasharpunoplatformAt Microsoft Build 2026, we introduced WSL containers, bringing Linux container development directly into Windows through the Windows Subsystem for Linuxhttps://devblogs.microsoft.com/commandline/wsl-container-is-now-available-for-public-preview/https://devblogs.microsoft.com/commandline/wsl-container-is-now-available-for-public-preview/Mon, 29 Jun 2026 20:12:58 GMTwslcontainersIf you’re building and maintaining Visual Studio extensions, you’ve probably ended up with some sort of build and publishing workflow - whether it’shttps://devblogs.microsoft.com/visualstudio/automating-your-visual-studio-extension-builds-with-github-actions/https://devblogs.microsoft.com/visualstudio/automating-your-visual-studio-extension-builds-with-github-actions/Mon, 29 Jun 2026 20:10:27 GMTvisualstudioextensibilityWhy .NET is replacing the DAC with the cDAC data contracts, how they work locally / over a process / from a dump, and how to map the GitHub .md contracts to C# - with a from-scratch !eeheap as a working example.https://chrisnas.github.io/posts/2026-06-17_reading-clr-internals-the/https://chrisnas.github.io/posts/2026-06-17_reading-clr-internals-the/Thu, 25 Jun 2026 15:40:31 GMTdotnetdiagnosticsdebuggingIn this post I take a short look at the new MoveChunks API, explore how it works, what it's for, and how the new API provides opportunities for public APIshttps://andrewlock.net/exploring-the-dotnet-11-preview-3-avoiding-tostring-allocations-with-stringbuilder-movechunks/https://andrewlock.net/exploring-the-dotnet-11-preview-3-avoiding-tostring-allocations-with-stringbuilder-movechunks/Wed, 24 Jun 2026 10:36:33 GMTcsharpdotnetBuilding a tool that provides both a rich Windows GUI and a functional CLI from a single executable presents unique challenges due to how Windows handles subsystem types. This post explores three approaches for dual-mode apps: attaching to consoles from a GUI, launching UIs from a console app, and creating separate specialized EXEs. I’ll share the "clean as possible" workarounds for console jank and window flashing used in my own production tools.https://weblog.west-wind.com/posts/2026/Jun/23/Creating-Dual-Use-Windows-GUI-and-Console-Applicationshttps://weblog.west-wind.com/posts/2026/Jun/23/Creating-Dual-Use-Windows-GUI-and-Console-ApplicationsWed, 24 Jun 2026 10:36:05 GMTdotnetwindowsPicture this. Your inbox lights up at 7:14 AM. A supplier just pushed 50,000 product records to your endpoint. Half are new. The other half are updates to products already sitting in your database. You have no idea which is which. The feed does not tell you. The records do not carry your internal primary keys. And the import job…https://www.woodruff.dev/bulkmerge-upsert-in-ef-core-how-to-insert-or-update-without-the-headache/https://www.woodruff.dev/bulkmerge-upsert-in-ef-core-how-to-insert-or-update-without-the-headache/Tue, 23 Jun 2026 10:23:02 GMTefcoreGenerate and version an OpenAPI file from ASP.NET Core, then regenerate a Kiota client at build time only when the spec changes.https://www.meziantou.net/generate-a-kiota-client-at-build-time-from-an-asp-net-core-openapi-file.htmhttps://www.meziantou.net/generate-a-kiota-client-at-build-time-from-an-asp-net-core-openapi-file.htmTue, 23 Jun 2026 10:20:27 GMTaspnetopenapisourcegeneratorscsharpHow we evolved from static test lists to intelligent test selection in GitHub Actions to make CI/CD faster and smarter.https://www.aaron-powell.com/posts/2026-06-18-distributed-test-runs-aspire/https://www.aaron-powell.com/posts/2026-06-18-distributed-test-runs-aspire/Sat, 20 Jun 2026 11:17:43 GMTaspirecicdtestinggithubactionsLearn why NL2SQL is useful for demos and development, but risky for production data. See how SQL MCP Server uses contracts, guardrails, and abstraction for safer agentic data access.https://devblogs.microsoft.com/azure-sql/sql-mcp-server-nl2sql/https://devblogs.microsoft.com/azure-sql/sql-mcp-server-nl2sql/Fri, 19 Jun 2026 10:35:03 GMTsqlserveragenticaimodelcontextprotocolDiagnose MSBuild build failures and performance issues with AI using the new Microsoft Binlog MCP Server - 15 specialized tools that let your AI assistant investigate binary logs.https://devblogs.microsoft.com/dotnet/msbuild-binlog-mcp-server/https://devblogs.microsoft.com/dotnet/msbuild-binlog-mcp-server/Wed, 17 Jun 2026 17:03:15 GMTdiagnosticsmsbuildartificialinteligencemodelcontextprotocolgithubcopilotAspire 13.4 brings more of the local development loop into VS Code: AppHost CodeLens actions, live resource state, dashboard shortcuts, typed resource command prompts, TypeScript AppHost support, and multi-language debugging.https://devblogs.microsoft.com/aspire/aspire-vscode-extension-13-4/https://devblogs.microsoft.com/aspire/aspire-vscode-extension-13-4/Tue, 16 Jun 2026 23:01:33 GMTaspiretypescriptvscodeMost developers know CR and LF, but Unicode defines more newline characters. Learn what they are and how to handle them safely in .NET.https://www.meziantou.net/new-lines-are-more-than-r-and-n.htmhttps://www.meziantou.net/new-lines-are-more-than-r-and-n.htmMon, 15 Jun 2026 17:52:01 GMTdotnetcsharpunicodeHow to let an AI coding agent investigate dev and production issues by driving your .NET diagnostics CLI tools — via MCP servers, SKILL.md files, or even by controlling a GUI application.https://chrisnas.github.io/posts/2026-06-08_dotnet-cli-tools-in-the-ai-fury/https://chrisnas.github.io/posts/2026-06-08_dotnet-cli-tools-in-the-ai-fury/Fri, 12 Jun 2026 13:55:23 GMTdotnetcsharpdiagnosticsartificialinteligencemodelcontextprotocolNow you can review, comment on, and approve pull requests from both GitHub and Azure DevOps, all without leaving the IDE.https://devblogs.microsoft.com/visualstudio/review-pull-requests-without-leaving-visual-studio/https://devblogs.microsoft.com/visualstudio/review-pull-requests-without-leaving-visual-studio/Thu, 11 Jun 2026 19:27:05 GMTvisualstudiogitproductivityA recap of the latest servicing updates for .NET and .NET Framework for June 2026.https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-june-2026-servicing-updates/https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-june-2026-servicing-updates/Tue, 09 Jun 2026 18:42:51 GMTdotnetservicingupdatesLearn how Aspire, Microsoft Agent Framework, and Microsoft Foundry model, run, observe, and publish a distributed multi-agent AlpineAI ski resort demo.https://devblogs.microsoft.com/aspire/building-distributed-multi-agent-systems-with-aspire-and-microsoft-agent-framework/https://devblogs.microsoft.com/aspire/building-distributed-multi-agent-systems-with-aspire-and-microsoft-agent-framework/Tue, 09 Jun 2026 17:18:44 GMTaspireartificialinteligencehttps://devblogs.microsoft.com/dotnet/dotnet-at-microsoft-build-2026/https://devblogs.microsoft.com/dotnet/dotnet-at-microsoft-build-2026/Mon, 08 Jun 2026 18:03:24 GMTdotnetcsharpartificialinteligenceaspnetTL;DR: Profilers show cost, not priority. Start with memory, then CPU, use filters to zoom into the code path you own, and let domain context decide which hot spots deserve a benchmark. The first...https://www.planetgeek.ch/2026/06/08/read-profiles-without-chasing-every-red-bar/https://www.planetgeek.ch/2026/06/08/read-profiles-without-chasing-every-red-bar/Mon, 08 Jun 2026 12:53:57 GMTdotnetperformanceprofiling