$ the-wire · showcase
HELIX MACHINE CORRUPTION DETECTION ROLLS OUT; RUNTIME MUTUAL AUTH TIGHTENS
By RepoJournal · Filed · About .NET · Composed from the cited sources · methodology
12 people shipped this
dotnet-maestro
@dotnet-maestro
5 cited
Evangelink
@Evangelink
2 cited
DrewScoggins
@DrewScoggins
1 cited
Matous Kozak
@matouskozak
1 cited
LoopedBard3
@LoopedBard3
1 cited
copilot-swe-agent
@copilot-swe-agent
1 cited
Tomas Weinfurt
@wfurt
1 cited
mthalman
@mthalman
jonathanpeppers
@jonathanpeppers
dotnet-maestro[bot]
@dotnet-maestro[bot]
Radek Zikmund
@rzikm
premun
@premun
Performance's new dpkg detection takes broken test machines offline automatically, while runtime enforces Negotiate mutual authentication and SDK extends binary log sessions across device builds.
Drew Scoggins' dpkg corruption handler [1] detects when apt/dpkg gets stuck mid-install and pulls the machine from Helix rotation instead of looping failures on a dead host, a hard-won operational win for the perf pipeline. In security posture, runtime now validates that mutual authentication actually succeeded when `RequireMutualAuthentication` is enabled [12], catching NTLM edge cases that SSPI misreports even on Windows. Separately, the SDK's binary log fix [11] unifies MSBuild sessions so `dotnet test -bl` writes a valid binlog instead of corrupt multi-build artifacts, with device-specific MAUI paths following behind [10]. Across the stack, BenchmarkDotNet bumped to nightly 595 [2], Android CoreCLR gained full R2R scenario runs on Pixel 8 and Galaxy A16 [3], and the `dotnet new install` command picked up a `--prerelease` flag to resolve latest prerelease versions without explicit version strings [9]. Codeflow updates continue from runtime, Roslyn, ASP.NET Core, Arcade, and source-build-assets [4] [5] [6] [7] [8].
Action items
- → If running Helix perf tests, watch logs for dpkg detection to confirm machines are being retired cleanly dotnet/performance [monitor]
- → Review NegotiateStream mutual auth requirements if your code calls RequireMutualAuthentication explicitly dotnet/runtime [plan]
- → Test `dotnet test -bl` on multi-TFM device projects to confirm binlog is now readable dotnet/sdk [plan]
- → Try `dotnet new install --prerelease` to pick up latest template prereleases dotnet/sdk [monitor]
References
- [1] Take machine offline and notify when dpkg is corrupted during prereq install ↗ dotnet/performance
- [2] Update BenchmarkDotNet to 0.16.0-nightly.20260801.595 ↗ dotnet/performance
- [3] [Android] Add CoreCLR full R2R scenario run ↗ dotnet/performance
- [4] [main] Source code updates from dotnet/runtime ↗ dotnet/dotnet
- [5] [main] Source code updates from dotnet/roslyn ↗ dotnet/dotnet
- [6] [main] Source code updates from dotnet/aspnetcore ↗ dotnet/dotnet
- [7] [main] Source code updates from dotnet/arcade ↗ dotnet/dotnet
- [8] [main] Source code updates from dotnet/source-build-assets ↗ dotnet/dotnet
- [9] Add --prerelease flag to dotnet new install ↗ dotnet/sdk
- [10] Extend the single `dotnet test -bl` build session to the device (MAUI) paths ↗ dotnet/sdk
- [11] Fix corrupted `dotnet test -bl` binary logs by using a single MSBuild build session ↗ dotnet/sdk
- [12] Enforce required Negotiate mutual authentication (#131588) dotnet/runtime ↗
