RepoJournal
.NET @dotnet
107 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-07-10
stories 59
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

MAC CERT STORE BREAKS PROVISIONING, MSBUILD FIXES RACE CONDITION, EFCORE TACKLES NULL MATERIALIZATION

By RepoJournal · Filed · About .NET · Composed from the cited sources · methodology

dotnet-maestro[bot] Copilot JanProvaznik DrewScoggins PureWeen ajcvickers
6 people shipped this
dotnet-maestro[bot] @dotnet-maestro[bot] 4 cited Copilot @Copilot 3 cited JanProvaznik @JanProvaznik 2 cited DrewScoggins @DrewScoggins 1 cited PureWeen @PureWeen 1 cited ajcvickers @ajcvickers 1 cited

dotnet/performance shipped a file-backed certificate abstraction that finally lets macOS queues rotate credentials without static PFX files, while msbuild Server on Linux just fixed an intermittent race that was silently dropping successful builds.

The cert store abstraction [1] addresses a long-standing macOS limitation where the CurrentUser keychain cannot export private keys without interactive password prompts, forcing iPhone and Mac CI queues to rely entirely on hand-provisioned static PFX files that were never rotated. The new ILocalCertStore interface provides two implementations: X509LocalCertStore for Windows/Linux OS store behavior, and FileLocalCertStore for thumbprint-backed PFX persistence. This lands as the codeflow pulls continue flowing: dotnet/msbuild [2], dotnet/efcore [3], dotnet/fsharp [4], and nuget.client [5] all merged to main overnight. On the msbuild side, a critical race condition fix [7] resolves WaitAny index ordering that was causing the Server client to drop build results on Linux, leaving successful builds with exit code 1 and the final summary message lost. The same team partially reverted the NuGet RestoreTask workaround [6], letting RestoreTask follow normal TaskHost routing now that the underlying singleton leak has been contained elsewhere. EFCore shipped four fixes: nullability markers now survive GroupBy-element to-one subquery lowering [10], foreign keys to split entities no longer reference the wrong fragment table [11], case-only principal key changes propagate correctly to dependent FKs [12], and legacy snapshot migrations won't NRE when encountering old PrimitiveCollection string vectors [13]. Maui's release-readiness automation [9] now consults blessed-build sources with subscription-wiring checks, and new self-updater workflows [8] keep action pins and versions current.

Action items

References

  1. [1] Add file-backed cert store so CertHelper works on Mac ↗ dotnet/performance
  2. [2] [main] Source code updates from dotnet/msbuild ↗ dotnet/dotnet
  3. [3] [main] Source code updates from dotnet/efcore ↗ dotnet/dotnet
  4. [4] [main] Source code updates from dotnet/fsharp ↗ dotnet/dotnet
  5. [5] [main] Source code updates from nuget/nuget.client ↗ dotnet/dotnet
  6. [6] Partially revert #13660: remove NuGet RestoreTask transient TaskHost workaround ↗ dotnet/msbuild
  7. [7] Fix MSBuild Server client dropping build result under WaitAny race (#14172) ↗ dotnet/msbuild
  8. [8] Add gh-aw self-updater workflows (action-pin refresh + version updater) ↗ dotnet/maui
  9. [9] release-readiness: preview readiness — blessed-build source + subscription-wiring & feed-drift checks (evolve #36268) (#36213) ↗ dotnet/maui
  10. [10] Make the nullability marker survive GroupBy-element to-one subquery lowering ↗ dotnet/efcore
  11. [11] Fix FK to entity-split principal referencing wrong (fragment) table ↗ dotnet/efcore
  12. [12] Propagate case-only principal string key updates to dependent FKs ↗ dotnet/efcore
  13. [13] Prevent `FindCollectionMapping` NRE on legacy string/vector snapshot mappings ↗ dotnet/efcore

$ ls dotnet/reviews/ # the step-back reads

the week in review CVE-2026-69304 hits ASP.NET Core; Spark 4.0 support lands the month in review F# interpolated strings and record spreads land as Orleans and runtime harden
Full archive → Weekly reviews →

Quick answers

What shipped in .NET on July 10, 2026?
dotnet/performance shipped a file-backed certificate abstraction that finally lets macOS queues rotate credentials without static PFX files, while msbuild Server on Linux just fixed an intermittent race that was silently dropping successful builds. In total, 29 commits and 30 pull requests landed.
Who contributed to .NET on July 10, 2026?
6 developers shipped this update, including DrewScoggins, dotnet-maestro[bot], JanProvaznik, PureWeen, ajcvickers, and Copilot.
What were the notable .NET updates?
Add file-backed cert store so CertHelper works on Mac, [main] Source code updates from dotnet/msbuild, and [main] Source code updates from dotnet/efcore.
♥

$ log @dotnet --recent

Vector literals stop breaking under comma-decimal cultures, AIDL one-way proxies generate correctly 83 shipped Spark 4.0 lands in .NET bindings, arcade refreshes Entra tokens mid-job 23 shipped MSBuild TaskAnalyzer quiets three diagnostics, Terminal Logger stops corrupting shared log events 20 shipped MAUI backports iOS regression coverage, aspnetcore bumps extensions 6 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training GSM8K scoring parses answers as exact decimals AI Red Teaming PyRIT closes a judge-spoofing hole, promptfoo accepts Langfuse v6

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.