Who contributed to .NET on July 10, 2026?

6 developers shipped this update, including DrewScoggins, dotnet-maestro[bot], JanProvaznik, PureWeen, ajcvickers, and Copilot.

What were the notable .NET updates?

Add file-backed cert store so CertHelper works on Mac, [main] Source code updates from dotnet/msbuild, and [main] Source code updates from dotnet/efcore.

@dotnet

The .NET runtime, ASP.NET, and the C# tooling

github ↗

Pick a date

Topics: .NET Full archive →

The Wire · Showcase

MAC CERT STORE BREAKS PROVISIONING, MSBUILD FIXES RACE CONDITION, EFCORE TACKLES NULL MATERIALIZATION

By RepoJournal · Filed 06:59 UTC on July 10, 2026 · About .NET

6 people shipped this

dotnet-maestro[bot] @dotnet-maestro[bot] 4 cited

Copilot @Copilot 3 cited

JanProvaznik @JanProvaznik 2 cited

DrewScoggins @DrewScoggins 1 cited

PureWeen @PureWeen 1 cited

ajcvickers @ajcvickers 1 cited

dotnet/performance shipped a file-backed certificate abstraction that finally lets macOS queues rotate credentials without static PFX files, while msbuild Server on Linux just fixed an intermittent race that was silently dropping successful builds.

The cert store abstraction [1] addresses a long-standing macOS limitation where the CurrentUser keychain cannot export private keys without interactive password prompts, forcing iPhone and Mac CI queues to rely entirely on hand-provisioned static PFX files that were never rotated. The new ILocalCertStore interface provides two implementations: X509LocalCertStore for Windows/Linux OS store behavior, and FileLocalCertStore for thumbprint-backed PFX persistence. This lands as the codeflow pulls continue flowing: dotnet/msbuild [2], dotnet/efcore [3], dotnet/fsharp [4], and nuget.client [5] all merged to main overnight. On the msbuild side, a critical race condition fix [7] resolves WaitAny index ordering that was causing the Server client to drop build results on Linux, leaving successful builds with exit code 1 and the final summary message lost. The same team partially reverted the NuGet RestoreTask workaround [6], letting RestoreTask follow normal TaskHost routing now that the underlying singleton leak has been contained elsewhere. EFCore shipped four fixes: nullability markers now survive GroupBy-element to-one subquery lowering [10], foreign keys to split entities no longer reference the wrong fragment table [11], case-only principal key changes propagate correctly to dependent FKs [12], and legacy snapshot migrations won't NRE when encountering old PrimitiveCollection string vectors [13]. Maui's release-readiness automation [9] now consults blessed-build sources with subscription-wiring checks, and new self-updater workflows [8] keep action pins and versions current.

Action items

→ Review cert store abstraction for your macOS CI provisioning before next rotation cycle dotnet/performance [plan]
→ Upgrade msbuild if running Server mode on Linux to fix silent build success drops dotnet/msbuild [immediate]
→ Pull latest efcore to fix split entity FK references and GroupBy nullability bugs dotnet/efcore [plan]
→ Monitor maui release-readiness automation rollout for blessed-build sourcing dotnet/maui [monitor]

References

[1] Add file-backed cert store so CertHelper works on Mac ↗ dotnet/performance
[2] [main] Source code updates from dotnet/msbuild ↗ dotnet/dotnet
[3] [main] Source code updates from dotnet/efcore ↗ dotnet/dotnet
[4] [main] Source code updates from dotnet/fsharp ↗ dotnet/dotnet
[5] [main] Source code updates from nuget/nuget.client ↗ dotnet/dotnet
[6] Partially revert #13660: remove NuGet RestoreTask transient TaskHost workaround ↗ dotnet/msbuild
[7] Fix MSBuild Server client dropping build result under WaitAny race (#14172) ↗ dotnet/msbuild
[8] Add gh-aw self-updater workflows (action-pin refresh + version updater) ↗ dotnet/maui
[9] release-readiness: preview readiness — blessed-build source + subscription-wiring & feed-drift checks (evolve #36268) (#36213) dotnet/maui
[10] Make the nullability marker survive GroupBy-element to-one subquery lowering ↗ dotnet/efcore
[11] Fix FK to entity-split principal referencing wrong (fragment) table ↗ dotnet/efcore
[12] Propagate case-only principal string key updates to dependent FKs ↗ dotnet/efcore
[13] Prevent `FindCollectionMapping` NRE on legacy string/vector snapshot mappings ↗ dotnet/efcore

Quick answers

What shipped in .NET on July 10, 2026?: dotnet/performance shipped a file-backed certificate abstraction that finally lets macOS queues rotate credentials without static PFX files, while msbuild Server on Linux just fixed an intermittent race that was silently dropping successful builds. In total, 29 commits and 30 pull requests landed.
Who contributed to .NET on July 10, 2026?: 6 developers shipped this update, including DrewScoggins, dotnet-maestro[bot], JanProvaznik, PureWeen, ajcvickers, and Copilot.
What were the notable .NET updates?: Add file-backed cert store so CertHelper works on Mac, [main] Source code updates from dotnet/msbuild, and [main] Source code updates from dotnet/efcore.

WASM RUNTIME SHRINKS 3.6% AS DOTNET HARDENS DEBUGGER EXPORTS

The JIT compiler just cut 815 kilobytes from WebAssembly Core Library by folding address constants into load instructions, while the runtime fixed a silent failure in WASI debugging that would strip metadata from stripped binaries.

dotnet 13 shipped 1-min read

@dotnet 3 days ago

RUNTIME FIXES KERBEROS FALLBACK ON UNIX, APPHOST CONVERTS TO C

The managed SPNEGO implementation now falls back to NTLM when Kerberos credentials go missing on Linux, closing a critical auth gap that broke enterprise deployments [ref:1].

dotnet 120 shipped 1-min read

@dotnet 4 days ago

MACIOS DOCS OVERHAUL SPANS 31 TYPES, ASPNETCORE VALIDATION MOVES TO SOURCE GENERATION

Rolf Bjarne shipped 31 types with proper XML documentation across macios while aspnetcore refactors validation classes out of the public API entirely.

dotnet 25 shipped 1-min read

@dotnet 5 days ago

SQLCLIENT KILLS PLATFORM-SPECIFIC BUILDS, ASPNETCORE HARDENS SIGNALR

SqlClient unified its Windows and Unix code paths without restructuring the NuGet package, collapsing build complexity across the entire SNI layer.

dotnet 97 shipped 2-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.