Browse .NET News (96)

Allison announces CodeQL 2.26.0 updates for GitHub code scanning, including Kotlin 2.4.0 support, improved C# Razor Pages dataflow for SQL injection detection, new JavaScript/TypeScript system prompt injection coverage, and multiple query accuracy improvements across Go, Python, Swift, and GitHub Actions.

Mika Dumont introduces an interactive upgrade canvas in the GitHub Copilot app that lets teams track a .NET modernization end-to-end, from assessment and planning through execution, code changes, build failures, and final results, with the same upgrade workflow available in Visual Studio, VS Code, and the Copilot CLI.

Wes Steyn shows how to scale a Microsoft Agent Framework “claw” using the Agent Harness: on-demand skills (including centrally managed Foundry skills via MCP), approval-gated shell access, CodeAct for sandboxed code execution, and concurrent background agents, with runnable samples in both .NET and Python.

David Pine explains how the .NET Aspire team uses GitHub Agentic Workflows to turn merged product pull requests into SME-reviewed documentation pull requests in a separate repo, while keeping security tight through a “safe-outputs” contract and narrowly scoped GitHub App permissions.

Evan Mattson announces the 1.0 release of Microsoft Agent Framework’s orchestration patterns across both Python and .NET, explaining what’s now stable (sequential, concurrent, group chat, handoff, and magentic) and why higher-level orchestration builders matter for multi-agent apps.

The Visual Studio Code Team shares the early release notes for VS Code 1.129 (Insiders), including links to the commit log and closed issues so developers can track what’s landing as the milestone evolves.

Sergey Menshykh announces the stable release of Agent Skills for .NET in Microsoft Agent Framework, describing an open format for packaging reusable domain expertise (instructions, resources, and scripts) that agents load on demand, plus the governance controls needed to run skills safely in production.

Nick Brady’s June 2026 digest covers the biggest Microsoft Foundry updates: Claude reaching general availability, new agent distribution into Microsoft 365 Copilot and Teams, and major improvements across Toolboxes, Routines, Memory, observability, and Foundry Local deployments.

Jan Krivanek and Yuliia Kovalova show how to run MCP-powered MSBuild binlog diagnostics inside GitHub Actions so failed PR builds get an automated root-cause comment (with inline suggestions) without anyone downloading logs. They also catalog new Binlog MCP tools and share evaluation data on quality, time, and token usage.

Rahul Bhandari explains what the November 10, 2026 end-of-support date means for .NET 8 (LTS) and .NET 9 (STS), including the practical impact on security fixes, servicing updates, and support, plus what teams should do next to stay on a supported runtime.

Matthew Leibowitz announces SkiaSharp 4.148.0, the first stable release of SkiaSharp v4, and breaks down what changed for .NET developers: an updated Skia engine, new font and image features, API cleanup and lifecycle fixes, and performance improvements, plus links to release notes, samples, and a live event.

Zachary Teutsch explains how WinApp CLI adds Windows package identity to unpackaged .NET desktop apps and streamlines MSIX packaging. The post walks through initializing a project, running and debugging with identity via dotnet tooling, generating manifests/assets, and optionally using a VS Code extension for an F5 run/debug workflow.

Mads Kristensen shows a practical GitHub Actions pipeline for Visual Studio extension authors to build, version-stamp, and publish VSIX packages. It covers an MSBuild-based workflow, publishing to the Visual Studio Marketplace with a secret token, and optionally pushing CI builds to a VSIX Gallery for quick testing.

Wes Steyn shows how Microsoft Agent Framework’s Agent Harness can safely work with user data by adding file access, human approvals for risky tool calls, and durable memory. The post includes both C# and Python examples, plus runnable samples you can use as a starting point for your own agent.

Sandeep Sen and Kristen Womack share the May/June 2026 Azure Developer CLI (azd) roundup, covering new commands like azd tool and azd exec, safer provisioning with azure.yaml dependsOn, improvements to extensions and prompts, and a long list of fixes across deployments, pipelines, and authentication.

jovanpop-msft introduces the Bulk Copy API (preview) for Microsoft Fabric Data Warehouse, explaining when client-side bulk ingestion is a better fit than server-side COPY INTO and showing practical patterns for C#, Java, command-line bcp.exe, and orchestration tools like Azure Data Factory and SSIS.

Lily Ma summarizes what has shipped in the Azure Functions MCP extension since preview, including resource and prompt triggers, MCP Apps for interactive UI, built-in MCP authentication with Microsoft Entra ID, and new .NET fluent configuration APIs for schemas, metadata, and rich content responses.

The Visual Studio Code Team shares a brief update for VS Code 1.127, noting a change to token pricing normalization to support a legacy flat pricing payload returned by some endpoints.

Justin Bettencourt rounds up the May 2026 Azure SDK releases, including GA for the Azure SDK for Rust and the .NET Azure Batch client library, plus new Azure AI Search knowledge-base retrieval features and preview Azure AI Agent Server hosting libraries across .NET, Python, and JavaScript.

Wes Steyn shows how to build an “agent harness” (a loop around a model with tools, planning, memory, and web search) using Microsoft Agent Framework. The post walks through creating a chat client with Microsoft AI Foundry, wrapping it into a harness agent, and running it in a console UI with plan/execute modes.

Wes Steyn introduces a hands-on series for building a CLI-style “claw” (a coding agent) using Microsoft Agent Framework, explaining the core harness loop—tools, planning, memory, approvals, and observability—and outlining how the sample evolves from a minimal agent to a production-ready service in .NET and Python.

The Visual Studio Code Team shares the 1.126 (Insiders) release notes, highlighting iterative updates to the chat and Agents experiences, including UI alignment changes, a unified model customization picker, and inline chat renaming.

Microsoft Defender Security Research Team breaks down an npm supply chain compromise in the mastra/@mastra ecosystem, where a typosquat dependency executed a malicious postinstall payload. The report explains the staged delivery, C2 behavior, cross-platform persistence, and provides Microsoft Defender detections, KQL hunting queries, and concrete mitigation steps.

Jan Krivanek introduces the Microsoft Binlog MCP Server, an MCP server that lets AI assistants (including GitHub Copilot) query MSBuild .binlog files using 15 purpose-built tools for failure diagnosis, property tracing, performance bottleneck analysis, and build-to-build comparisons across Visual Studio, VS Code, and CLI workflows.

Mads Kristensen introduces the new Theme colors options page in Visual Studio 2026, which lets you tweak Fluent color tokens directly in the IDE and have changes apply live. He also shows how to share per-theme customizations via JSON overrides and points to updated token documentation.

Leah Tran introduces Visual Studio 18.7’s pull request review experience, which lets developers open PRs, browse diffs, discuss comments, and approve or merge changes from inside the IDE for both GitHub and Azure DevOps repos.

Jeffrey Fritz announces the .NET Day on Agentic Modernization livestream (June 16, 2026), focused on practical ways to modernize existing .NET applications without a full rewrite. The agenda highlights GitHub Copilot-assisted modernization, Aspire-based approaches, migration of WinForms and line-of-business apps, and adding agentic/AI capabilities.

The Visual Studio Code Team shares what’s new in VS Code 1.125 (Insiders), focusing on Agent Host improvements like the new /chronicle command set for session history, clearer file path display in chat, and updates to Cache Explorer for navigating multi-agent sessions and prompt-signature allocation details.

drew-sk introduces SSMS 22.7 improvements aimed at database DevOps workflows: a graphical schema compare experience, a built-in SQL formatter (including format-on-save for SQL projects), and expanded SQL projects publishing support with SQLCMD variables surfaced in the Publish dialog and supported via SqlPackage.

.NET Team announces .NET 11 Preview 5 and highlights what’s new across the runtime, SDK, libraries, C#, ASP.NET Core, .NET MAUI, and Entity Framework Core, with links to detailed release notes and guidance on installing the preview SDK and tooling.

Rahul Bhandari and Tara Overfield recap the June 2026 servicing releases for .NET and .NET Framework, including the CVEs addressed in .NET 10.0.9, 9.0.17, and 8.0.28, plus links to release notes, installers, container images, Linux packages, and known issues.

Jon Galloway recaps Microsoft Build 2026 with the main developer announcements across GitHub Copilot, Microsoft Foundry, Azure, Windows, Visual Studio, and .NET—highlighting agentic workflows, new tooling, governance specs, and a curated set of sessions and hubs to follow up on what shipped.

Daniel Roth rounds up the key .NET sessions from Microsoft Build 2026, highlighting what’s new in .NET 11 and C# (including union types), plus sessions on agentic web apps, AI building blocks for .NET, .NET MAUI on-device AI, and tooling like dotnetup.

Allison summarizes what’s new in CodeQL 2.25.6 for GitHub code scanning, including Swift 6.3.2 support, full extractor and data flow coverage for C# 14 and .NET 10, and query improvements that expand sensitive-data detection and reduce false positives across multiple languages.

Allison summarizes the May 2026 update for GitHub Copilot in Visual Studio 2026, covering new agent planning workflows, skill discovery, multi-file change review, context window tracking, and tighter Git integration for bringing commits into Copilot Chat and centralizing commit message instructions.

Dom Robinson, samkemp, and Inbal Sagiv announce Foundry Local 1.2.0 and preview Foundry Local on Azure Local, focusing on running AI on-device and at the edge with better transcription, broader hardware support, improved cancellation, and simpler acceleration across Windows and Linux.

Shawn Henry rounds up the BUILD 2026 announcements for Microsoft Agent Framework, covering the new Agent Harness for production-grade agent execution, Foundry Hosted Agents for deploying and operating agents at scale, and CodeAct (Hyperlight) to reduce tool-calling latency and token usage, with examples in .NET and Python.

Anna Hoffman summarizes Microsoft SQL announcements from Build 2026, focused on an “agentic” database developer workflow powered by GitHub Copilot across VS Code and SSMS, plus Azure SQL Hyperscale capabilities and new security and streaming features.

Allison announces general availability of the GitHub Copilot SDK, which lets you embed Copilot’s agent runtime into your own apps and developer tools. The post highlights supported languages, core agent capabilities (tools, MCP, prompts, tracing), authentication options, and what changed since public preview.

Mads Kristensen outlines the Visual Studio announcements from Microsoft Build 2026, focusing on GitHub Copilot’s move toward agentic workflows inside the IDE, plus practical inner-loop improvements like pre-build error checks, AI-assisted merge conflict resolution, and modernization help for upgrading older .NET apps.