MSBuild performance and analyzer work lead a quiet week

MSBuild carried the week's real engineering weight. The task host now expands built-in metadata references, and property expansion performance improved overall [1][2]. For users, this means faster builds in projects that rely heavily on metadata expansion. Separately, new analyzer rules catch mismatched thread-affinity declarations, and the routing docs were corrected to match [3]. The rules flag errors earlier, so multi-threading mistakes surface as build diagnostics rather than runtime surprises.

F# removed two 'always-on' language feature flags: BetterExceptionPrinting and NestedCopyAndUpdate [4][5]. These were already enabled unconditionally, so the flag plumbing is gone; no source-level behavior changes for existing code, but the compiler's internal surface shrinks. A separate fix resolves an InvalidProgramException from nested NativePtr.stackalloc [6], which previously could crash code generation in that pattern.

Updates landed in MAUI and the core platform dependency flows, but most were routine bump trains. MAUI moved to the latest Mono.Cecil [7]. Roslyn and arcade dependencies rolled forward [8][9][10]. In the security area, SqlClient's ServerCertificate validation now pins to the server-provided certificate [11], and dev-proxy updated several identity and code-analysis dependencies [12][13].

On the infrastructure side, the dotnet and windowsdesktop repos accepted codeflow syncs throughout the period , and the crossgen2 fix for uppercase extensions and the SSE parser buffer limit both landed late in the week. ASP.NET Core shipped passkey endpoints and critical fixes mid-week , while test-quarantine data now preserves test names and gRPC dependencies moved to 2.83.0 [15][14].

Looking ahead, the pace suggests the ecosystem is consolidating around dependency hygiene and tooling for correctness. MSBuild's analyzer and performance work is the most user-visible improvement; if you maintain or consume MSBuild task hosts, watch for the expansion change. No major architectural shifts are on the calendar, but the F# flag removals and SqlClient cert pinning are worth folding into your next review.