Who contributed to .NET on July 31, 2026?

12 developers shipped this update, including dotnet-maestro, BrennanConroy, rokonec, William Godbe, Evangelink, github-actions[bot], dotnet-maestro[bot], and rosebyte, and 4 more.

What were the notable .NET updates?

Add SignalR TypeScript auth refresh, Fix non-monotonic GC.GetTotalAllocatedBytes under DATAS (Server GC) (#131069), and Fix the underpowered eval gate: score direction, not magnitude.

@dotnet

The .NET runtime, ASP.NET, and the C# tooling

github ↗

Pick a date

Topics: .NET Full archive →

The Wire · Showcase

ASPNETCORE SHIPS SIGNALR AUTH REFRESH, RUNTIME FIXES GC ACCOUNTING BUG

By RepoJournal · Filed 07:00 UTC on July 31, 2026 · About .NET

12 people shipped this

Evangelink @Evangelink 2 cited

BrennanConroy @BrennanConroy 1 cited

rokonec @rokonec 1 cited

rosebyte @rosebyte 1 cited

Konrad Kokosa @kkokosa 1 cited

copilot-swe-agent @copilot-swe-agent 1 cited

teo-tsirpanis @teo-tsirpanis 1 cited

eiriktsarpalis @eiriktsarpalis 1 cited

dotnet-maestro @dotnet-maestro

William Godbe @wtgodbe

github-actions[bot] @github-actions[bot]

dotnet-maestro[bot] @dotnet-maestro[bot]

SignalR TypeScript clients can now refresh auth tokens automatically, while runtime patches non-monotonic heap allocation reporting under Server GC.

ASP.NET Core merged opt-in TypeScript auth-refresh APIs for SignalR [1], handling token lifecycle parsing, automatic scheduling, and manual refresh from HubConnection while preserving redirect and Azure SignalR behavior. Separately, runtime fixed a critical bug where GC.GetTotalAllocatedBytes() returned non-monotonic values under DATAS (Server GC default in .NET 9+) by summing across all heaps instead of only active ones [2]. The skills team closed two separate eval-gate defects: a statistical scoring bug that flipped verdicts 27% of the time [3], and a measurement artifact where coverage parsing looked for the wrong eval schema [4]. SignalR and runtime changes ship across 40 commits and 1 release this period. Runtime also added System.Text.Json converters for BFloat16 and IEEE 754 decimal types [5], optimized method invocations to use MethodInvoker APIs [6], and implemented cDAC native code info DacDbi APIs for debuggers [7]. A breaking change in configuration handling now treats empty string values from chained providers as present rather than missing [8], shadowing earlier values as expected.

Action items

→ Review the Device Bound Session Credentials prototype [ref:3] - experimental, W3C editor's draft, gated behind ASP0030 diagnostic dotnet/aspnetcore [monitor]
→ Merge pending runtime GC and JSON converter changes before next release dotnet/runtime [plan]
→ Update chained configuration tests for breaking change in empty string handling dotnet/runtime [plan]

References

[1] Add SignalR TypeScript auth refresh ↗ dotnet/aspnetcore
[2] Fix non-monotonic GC.GetTotalAllocatedBytes under DATAS (Server GC) (#131069) dotnet/runtime
[3] Fix the underpowered eval gate: score direction, not magnitude ↗ dotnet/skills
[4] Close the dotnet-test skill-coverage gaps from the PR 945 report ↗ dotnet/skills
[5] Add System.Text.Json converters for BFloat16 and the IEEE 754 decimal types ↗ dotnet/runtime
[6] Optimize method invocations in System.Text.Json et al. ↗ dotnet/runtime
[7] Implement cDAC native code info DacDbi APIs ↗ dotnet/runtime
[8] Treat empty string value from chained configuration as present ↗ dotnet/runtime
[9] Device Bound Session Credentials (DBSC) for cookie authentication (prototype) ↗ dotnet/aspnetcore

Quick answers

What shipped in .NET on July 31, 2026?: SignalR TypeScript clients can now refresh auth tokens automatically, while runtime patches non-monotonic heap allocation reporting under Server GC. In total, 40 commits, 40 pull requests, and 1 releases landed.
Who contributed to .NET on July 31, 2026?: 12 developers shipped this update, including dotnet-maestro, BrennanConroy, rokonec, William Godbe, Evangelink, github-actions[bot], dotnet-maestro[bot], and rosebyte, and 4 more.
What were the notable .NET updates?: Add SignalR TypeScript auth refresh, Fix non-monotonic GC.GetTotalAllocatedBytes under DATAS (Server GC) (#131069), and Fix the underpowered eval gate: score direction, not magnitude.

DOTNET FOUNDATION PULLS iOS METRICS INTO FOCUS AS RUNTIME HARDENS HTTP PARSING

Performance team fixed iOS size reporting to measure only distributable packages, while runtime clamped down on RFC 9112 compliance for chunked encoding.

dotnet 72 shipped

@dotnet Aug 5

HELIX MACHINE CORRUPTION DETECTION ROLLS OUT; RUNTIME MUTUAL AUTH TIGHTENS

Performance's new dpkg detection takes broken test machines offline automatically, while runtime enforces Negotiate mutual authentication and SDK extends binary log sessions across device builds.

dotnet 133 shipped

@dotnet Aug 4

RUNTIME STRIPS DEAD CODE, FIXES TRIMMER DATAFLOW BUGS ACROSS CODEPATH

CoreCLR interop stubs lose obsolete target tagging while trimmer gains null-safety guards in generic-attribute processing, unblocking three years of accumulated simplification work.

dotnet 84 shipped

@dotnet Aug 3

ROSLYN FIXES EDITOR SYNC, WPF TIGHTENS SECURITY

Roslyn patched a critical textDocument notification handler that was dropping range information, breaking editor sync across the IDE.

dotnet 8 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.