.NET news, Tuesday, October 27, 2026

.NET 11 images

Pick a base image

BABenjamin Abt [email protected] (BEN ABT) 6 d ago

Choosing a .NET Base Image: Chiseled, Distroless or Alpine

Distroless, Chiseled and Alpine are often treated as interchangeable, but they differ in C library and runtime model. This guide explains how to pick a .NET base image by libc, globalization, publish model and diagnostics before image size. It matters for anyone shipping containers, since a smaller image that breaks native libraries or culture formatting is incompatible rather than optimized.

aspnetcore docker security 9 min

Marten 8

Read your own writes

JMJeremy D. Miller (The Shade Tree Developer) jeremydmiller 6 d ago

Read your own writes with Marten: ProjectLatest and Wolverine's UpdatedAggregate

Jeremy D. Miller explains how to read your own writes in event-sourced systems that use async projections in Marten. Switching from FetchLatest to ProjectLatest removes an extra database round trip by reusing pending events in the session. Wolverine's UpdatedAggregate type then lets HTTP endpoints and message handlers return the current aggregate with less code.

architecture efcore performance 4 min

Uno Platform

Verify AI-written code

UNUno Platform Blog Matt Mattei Oct 26

How Uno Platform developers keep AI-written .NET code trustworthy

Uno Platform's Matt Mattei explains how he checks code that AI agents write for .NET and Uno Platform apps. He combines written specs, runtime checks, lint hooks and change-cost probes. The post gives working .NET developers a concrete review checklist for agent-written features.

ai testing tooling 9 min

MauiReactor

UI without bindings

TKTelerik Blogs (Progress) Héctor Pérez Oct 26

Exploring MauiReactor and the MVU pattern in .NET MAUI

MauiReactor is a library that brings the MVU (Model-View-Update) pattern to .NET MAUI, letting you define UI in fluent C# without XAML or bindings. This article builds a habit tracker step by step, covering stateful components, [Prop] parameters for child components and how SetState triggers re-rendering. It is a useful starting point for developers curious about a reactive alternative to MVVM, keeping in mind the library is not officially supported by the .NET MAUI team.

architecture csharp maui 10 min

PHP2Shell

Patch PHP in pipelines

DOAzure DevOps Blog Josef Sin Oct 26

PHP2Shell and Azure DevOps: what Pipelines users should check

PHP disclosed two critical vulnerabilities on October 21, 2026 that can allow remote code execution. Azure DevOps Services and Server do not use PHP for customer requests, so the exposure sits in the PHP runtimes your pipelines, agents, containers and deployed apps use. The post explains which PHP installs Microsoft patches and which ones you must patch.

cloud security tooling 3 min

Relevance framework

In-process recommendations

MLMostly Lucid (Scott Galloway) Scott Galloway Oct 26

Mostlylucid.Relevance: SQLite-backed recommendations for .NET apps

Part 5 of Scott Galloway's series packages the recommendation and intervention ideas from earlier parts into Mostlylucid.Relevance, a framework that runs inside the application process and keeps its state in SQLite. It can serve several isolated domains at once, and an optional native package adds an HNSW vector index. The package also ships an AGENTS.md guide describing extension points and invariants for developers and their coding assistants.

ai architecture performance 22 min

Claude Code

Set Claude's permission limits

RCRound The Code (David Grace) David Grace Oct 26

Controlling Claude Code permission prompts in a .NET project

Auto mode in Claude Code still lets an AI classifier decide which actions are safe. The author shows how to add ask and deny rules to a .NET project's settings file to keep control over EF Core migrations, running the app and database updates. He also explains that a deny rule wins over allow and ask rules, whichever settings file holds it.

ai efcore tooling 7 min

EF Core

Catch row conflicts

DVDEV Community: #efcore Md Marzukul Islam Oct 26

EF Core rowversion vs JPA @version: How Concurrency Tokens Differ

A developer moving from Spring Boot to EF Core explains how SQL Server's rowversion differs from JPA's @version field. The value comes from a database-wide counter, so it is not a per-row version number. This matters for .NET developers who need to set up optimistic concurrency correctly.

concurrency efcore sqlserver 3 min

GraphQL.NET

Flexible data queries

DVDEV Community: #aspnetcore Lincoln Zocateli Oct 26

GraphQL for Beginners: A .NET 10 Guide with GraphQL.NET

This beginner guide explains GraphQL schemas, queries, mutations and resolvers and builds a working endpoint with GraphQL.NET on ASP.NET Core and .NET 10. It compares the same product read with a REST endpoint and shows how validation errors come back as HTTP 200 with an errors array. Useful for .NET teams weighing GraphQL, especially the server-side duties it adds.

api aspnetcore graphql 17 min

C# 12

Constructor order changes

SGSteven Giesel Oct 26

Primary constructors are more than syntactic sugar

Switching from a regular constructor to a primary constructor can change when fields get their values. The difference matters when a base constructor calls a virtual member. Steven Giesel shows the difference by looking at the code the compiler generates.

csharp performance 3 min

DPoP

Bind tokens to keys

DSDuende Software Blog Joe DeCock Oct 26

DPoP explained: binding OAuth tokens to a client key

Duende's Halloween-themed walkthrough explains DPoP, the RFC 9449 extension that binds access tokens to a client's key pair. Binding stops a stolen bearer token from being replayed against an API. The post follows the token request, the cnf.jkt claim and the proof check on the API side, and it maps each step to Duende's .NET libraries.

aspnetcore security 4 min

MCP C# SDK 2.0

Stateless MCP servers

IQInfoQ .NET Edin Kapić Oct 26

MCP C# SDK 2.0 Makes HTTP Stateless by Default

Microsoft released version 2.0 of the official MCP C# SDK, implementing the 2026-07-28 Model Context Protocol revision. Streamable HTTP servers are now stateless by default, and Multi Round-Trip Requests (MRTR) let interactive tools ask clients for input. Releases 2.1 to 2.3 added hybrid session serving, a subscriptions/listen handler and several OAuth and discovery fixes.

ai aspnetcore mcp 3 min

.NET MAUI

Smoother list scrolling

HBHabr C# (ru) ol1vvvka Oct 26

Why .NET MAUI lists stutter on a weak tablet and what actually helped

While moving a field sales app from Xamarin.Forms to .NET MAUI, the author found catalog scrolling janky on older Android tablets even though the business logic was fast. She measured frame times with dumpsys gfxinfo and cut the worst stutter through list virtualization, data preparation, and simpler row templates. The result is a concrete, number-backed guide for anyone tuning MAUI collection views.

android maui performance 11 min

MAF 1.26

Moving from SK to MAF

DVDEV Community: #aspnetcore Rahmat Afridi Oct 26

Migrating Semantic Kernel agents to Microsoft Agent Framework

This walkthrough shows how to move a tool-using ASP.NET Core agent from Semantic Kernel to Microsoft Agent Framework step by step. The Kernel-centered model gives way to IChatClient, AIAgent and AIFunctionFactory. It is a practical plan for teams already running Semantic Kernel agents.

ai aspnetcore csharp 6 min

ServiceStack 10.4

Vector search in your database

SSServiceStack Blog [email protected] (Demis) Oct 26

Vector search comes to OrmLite with ServiceStack v10.4 embedding columns

ServiceStack v10.4 adds a [Vector] attribute to OrmLite, so embeddings from an AI model can be stored with your rows. Distance functions such as Sql.CosineDistance() combine with filters, joins and tenant rules in one typed query. For .NET developers building RAG features, this removes the need for a separate vector store to keep in sync.

ai ormlite servicestack 7 min

Mockly

Fluent HTTP mocks

DDDennis Doomen Dennis Doomen Oct 26

Mockly: fluent HTTP mocking for .NET tests that call HttpClient

Dennis Doomen released Mockly, an open-source library that makes testing code which calls HttpClient much simpler. It replaces hand-written HttpMessageHandler subclasses and fragile Moq setups on the protected SendAsync method. Its main strength is that failure paths such as retries, timeouts, 401 refreshes and 429 throttling can be simulated in a line or two, and unmatched requests produce a clear explanation.

testing tooling 16 min

Azure SQL Hyperscale

Split the database in four

SQAzure SQL Blog Anna Hoffman Oct 25

Inside Azure SQL Hyperscale: how the Socrates paper split the database

A walkthrough of the 2019 Socrates paper behind Azure SQL Database Hyperscale. The design splits compute, transaction log, page servers and storage into separate tiers, which is why backups, restores and adding replicas no longer scale with database size. Developers running or evaluating Hyperscale get a clear view of the architecture behind it.

architecture azure performance 9 min

Tuesday, October 27, 2026
stories of the day