Who contributed to .NET on August 3, 2026?

5 developers shipped this update, including dotnet-maestro, Galina Paskaleva, dotnet-maestro[bot], JoeRobich, and Larry Ewing.

What were the notable .NET updates?

Handle textDocument/didChange notifications that don't pass across the range, Handle textDocument/didChange notifications that don't pass across the range (#84714), and Add CodeQL comments to clarify trusted input handling in ResourcesGen….

@dotnet

The .NET runtime, ASP.NET, and the C# tooling

github ↗

Pick a date

Topics: .NET Full archive →

The Wire · Showcase

ROSLYN FIXES EDITOR SYNC, WPF TIGHTENS SECURITY

By RepoJournal · Filed 06:59 UTC on August 3, 2026 · About .NET

5 people shipped this

dotnet-maestro @dotnet-maestro 2 cited

JoeRobich @JoeRobich 2 cited

Galina Paskaleva @gpaskaleva-msft 1 cited

dotnet-maestro[bot] @dotnet-maestro[bot]

Larry Ewing @lewing

Roslyn patched a critical textDocument notification handler that was dropping range information, breaking editor sync across the IDE.

The Roslyn team shipped a fix for textDocument/didChange notifications that weren't passing range data correctly [1], resolving a sync issue that could corrupt edits in real-time. This restores changes from an earlier PR with updated naming to match the 3.18 LSP spec [2]. On the security front, WPF added CodeQL suppression comments in ResourcesGenerator and UidManager after determining the flagged data flows were build-time only and sourced from trusted MSBuild inputs supplied by project files, not untrusted external sources [3]. The VMR continues its regular sync cycle with codeflow updates flowing from runtime into dotnet/dotnet [4] and from dotnet/dotnet into WPF [5], keeping the ecosystem locked in step. Across 3 repos this cycle: 4 commits, 4 PRs.

Action items

→ Pull latest Roslyn changes to test editor sync in your LSP clients dotnet/roslyn [plan]
→ Sync WPF and runtime codeflow updates on next VMR refresh dotnet/wpf [plan]
→ Monitor Roslyn didChange handler in production IDE scenarios dotnet/roslyn [monitor]

References

[1] Handle textDocument/didChange notifications that don't pass across the range ↗ dotnet/roslyn
[2] Handle textDocument/didChange notifications that don't pass across the range (#84714) dotnet/roslyn
[3] Add CodeQL comments to clarify trusted input handling in ResourcesGen… ↗ dotnet/wpf
[4] [main] Source code updates from dotnet/runtime ↗ dotnet/dotnet
[5] [main] Source code updates from dotnet/dotnet ↗ dotnet/wpf

Quick answers

What shipped in .NET on August 3, 2026?: Roslyn patched a critical textDocument notification handler that was dropping range information, breaking editor sync across the IDE. In total, 4 commits and 4 pull requests landed.
Who contributed to .NET on August 3, 2026?: 5 developers shipped this update, including dotnet-maestro, Galina Paskaleva, dotnet-maestro[bot], JoeRobich, and Larry Ewing.
What were the notable .NET updates?: Handle textDocument/didChange notifications that don't pass across the range, Handle textDocument/didChange notifications that don't pass across the range (#84714), and Add CodeQL comments to clarify trusted input handling in ResourcesGen….

DOTNET FOUNDATION PULLS iOS METRICS INTO FOCUS AS RUNTIME HARDENS HTTP PARSING

Performance team fixed iOS size reporting to measure only distributable packages, while runtime clamped down on RFC 9112 compliance for chunked encoding.

dotnet 72 shipped

@dotnet Aug 5

HELIX MACHINE CORRUPTION DETECTION ROLLS OUT; RUNTIME MUTUAL AUTH TIGHTENS

Performance's new dpkg detection takes broken test machines offline automatically, while runtime enforces Negotiate mutual authentication and SDK extends binary log sessions across device builds.

dotnet 133 shipped

@dotnet Aug 4

RUNTIME STRIPS DEAD CODE, FIXES TRIMMER DATAFLOW BUGS ACROSS CODEPATH

CoreCLR interop stubs lose obsolete target tagging while trimmer gains null-safety guards in generic-attribute processing, unblocking three years of accumulated simplification work.

dotnet 84 shipped

@dotnet Aug 2

RUNTIME HARDENS UNSAFE CALLS WHILE MAUI FIXES MERGE PIPELINE

The CLR just shipped tooling to migrate LibraryImport toward unsafe-v2, plus allocation cuts in COM interop, while MAUI plugs gaps in its bot-driven merge policy.

dotnet 12 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.