Content by devclass (9)

DevClass rounds up Microsoft Build announcements that matter to developers, including new Windows sandboxing for AI agents (MXC), an Arm-based Surface RTX Spark Dev Box, GitHub Enterprise Local for connected or air-gapped environments, Azure Linux updates, and Microsoft-maintained Coreutils for Windows.

DevClass reports on .NET Aspire 13.4, highlighting the general availability of the TypeScript AppHost and new integrations that broaden Aspire beyond C#-only workflows. The piece also covers deployment targets (including Azure and Kubernetes), the Aspire dashboard’s OpenTelemetry-based observability, and notable Kubernetes-related improvements.

DevClass reports on a multi-hour GitHub Actions outage that surfaced an incorrect “Your account is suspended” error, why Actions downtime can block CI/CD even when developers can still code locally, and what GitHub’s incident updates said about authentication issues and follow-on data cleanup.

DevClass reports on GitHub’s investigation into a poisoned VS Code extension that led to exfiltration of internal repositories, and the downstream risks for credentials, private code exposure, and follow-on access if stolen secrets were present.

DevClass reports on a Shai-Hulud supply-chain attack where a compromised npm account published malware into 314 packages, then hid reports by closing GitHub issues. The piece summarizes the payload’s credential-stealing behavior and practical cleanup steps like rotating secrets and checking for unauthorized repos and services.

DevClass reports on TanStack’s incident follow-up after a supply-chain attack that abused a GitHub Actions workflow to run untrusted code and poison shared caches, and on the project’s proposed hardening steps—including potentially moving to invitation-only pull requests.

DevClass reports on Microsoft’s claimed WinUI 3 performance improvements, including a 25% speed-up in File Explorer areas built with WinUI and reductions in memory allocations and function calls, alongside developer concerns about WinUI 3 responsiveness versus WPF and UWP.

DevClass reports on the Zed editor reaching version 1.0, covering its Rust-based architecture, GPU-accelerated UI, built-in language server support, and the editor’s growing set of AI features (including agents) alongside an option to disable AI entirely.

DevClass reports on Godot maintainers dealing with a surge of low-quality, LLM-generated pull requests, and summarizes community reactions plus GitHub’s planned and existing controls (like PR restrictions and upcoming PR deletion) to reduce review burden.