Security, DevOps APIs, AI Ops, and C# patterns
This issue covers JWT and OWASP guidance, Azure DevOps API workflows, Aspire and Redis, plus AI documentation, RCA, and semantic caching.
Jasen's top three picks
- 1 OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
medium.com
Dependency risk is still one of the easiest security gaps to miss. Good reminder that package hygiene is part of application security now.
- 2 Replacing wkhtmltopdf in .NET: A Migration Guide to a Maintained Engine
medium.com
A very real migration problem. Useful if you've still got wkhtmltopdf buried in billing, reporting, or document workflows.
- 3 Azure DevOps: merging pull requests with conventional commits
johnnyreilly.com
A nice process-focused post for teams that care about commit history quality and want Azure DevOps to enforce it.
Editor's note
I kept this one intentionally mixed, which is how I like the newsletter best. The JWT mistakes piece and the OWASP components article are especially practical, while the Azure DevOps API posts add useful automation ideas you can apply quickly. I also liked the pair of AI root-cause articles because they connect .NET app diagnostics with real operational workflows rather than just demo prompts.
Today's articles
OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
medium.com
Modern software development is no longer just about writing secure code. It’s about trusting code written by others. Every NuGet package…
Read article
Replacing wkhtmltopdf in .NET: A Migration Guide to a Maintained Engine
medium.com
The tool that generated your invoices for a decade is archived. Here is how to move a real .NET codebase off it without breaking your PDFs.
Topics: .NET Core
Read article
Azure DevOps: merging pull requests with conventional commits
johnnyreilly.com
How to merge a pull request in Azure DevOps and maintain a git commit history of conventional commits, using the Azure DevOps API and build validations.
Topics: Azure DevOps GitHub
Read article
Creating an AI-Powered API Documentation Assistant with ASP.NET Core and Vector Search
c-sharpcorner.com
Build an AI-powered API documentation assistant using ASP.NET Core and vector search for faster, contextual answers.
Topics: ASP.NET Core OpenAI Web API
Read article
params IEnumerable : The Upgrade to params You Didn’t Know You Needed
medium.com
The Old Constraint
Topics: C#
Read article
Reconfigurable Authorization Policies in .NET
medium.com
Should changing an authorization rule really require a deployment?
Topics: Authorization Security
Read article
Specification Pattern in C#
ngcheehou.medium.com
Imagine you are a developer responsible for maintaining an HR employee portal. This is the Employee class:
Topics: C# Design Patterns
Read article
The Ultimate Guide: Getting Started with Cloud Code in Visual Studio and .NET
miguelbarros1983.medium.com
Artificial Intelligence has evolved from a simple code-completion tool into a true development partner. If you work within the .NET…
Topics: GitHub Copilot Visual Studio
Read article
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com
The Static Web Apps CLI has a local authentication emulator. This is a useful tool for local development, and can be used with ASP.NET authentication. This post shows how.
Topics: ASP.NET Core Authentication Azure
Read article
The CQRS decorator pipeline: logging, caching, and transactions without touching a handler
medium.com
Cross-cutting concerns belong around a handler, not inside it. Here is a Scrutor-composed decorator pipeline where logging, caching, and…
Topics: CQRS Design Patterns
Read article
List Pipelines with the Azure DevOps API
johnnyreilly.com
Learn how to list the Azure Pipelines in a project using the Azure DevOps REST API with TypeScript and the continuation token.
Topics: Azure DevOps
Read article
Extension Members in C# 14: The Feature That’ll Start the Next “Is This Clean Code?” War
medium.com
It lets you bolt a property onto a type you don’t own. Half my team called it elegant. The other half called it cursed. They’re both right.
Topics: C#
Read article
Getting Started with .NET Aspire for Microservices Development
c-sharpcorner.com
.NET Aspire simplifies microservices development with built-in service discovery, observability, and orchestration for cloud-native apps.
Topics: .NET Aspire .NET Core
Read article
Getting Inherited Controller Routes to work in ASP.NET Core
weblog.west-wind.com
By default ASP.NET applies Controller Attribute Routes on concrete types. If you create a Controller class, the class and its routes are automatically recognized by ASP.NET during the startup process....
Topics: ASP.NET Core ASP.NET MVC
Read article
Building High-Performance Distributed Caching with Redis and ASP.NET Core
c-sharpcorner.com
Boost ASP.NET Core app performance with Redis distributed caching. Learn integration, best practices, and patterns for scalability.
Topics: ASP.NET Core Performance Redis
Read article
.NET 11 Performance Improvements Explained with Real Benchmarks
c-sharpcorner.com
.NET 11 boosts performance with runtime, GC, and ASP.NET Core optimizations. See real benchmarks for faster apps!
Topics: Performance
Read article
Building an AI-Powered Root Cause Analysis System for Production Incidents in .NET
c-sharpcorner.com
Build an AI-powered Root Cause Analysis system in .NET to accelerate incident resolution, reduce MTTR, and enhance system reliability with modern observability.
Topics: .NET Core OpenAI OpenTelemetry
Read article
PostgreSQL vs SQL Server for Modern .NET Applications
c-sharpcorner.com
Compare PostgreSQL vs SQL Server for .NET apps. Explore licensing, performance, cloud, JSON, and scalability to choose the best fit.
Topics: PostgreSQL SQL Server
Read article
JWT Done Right: 15 Production Mistakes Every ASP.NET Core Developer Should Avoid (.NET 9 Guide)
medium.com
Fifteen JWT mistakes in ASP.NET Core APIs: validation, refresh tokens, key rotation, revocation, and the controls that must sit beside a…
Topics: ASP.NET Core JWT Security
Read article
I Deleted AutoMapper a Year Before It Went Commercial. Here’s the Bug That Made Me Do It.
medium.com
A NullReferenceException, 14 frames deep into a library I’d never opened. The actual bug was one missing line.
Topics: AutoMapper C#
Read article
LINQ in C#: The Complete Beginner’s Guide with Practical Examples (Part 1)
medium.com
Learn LINQ from scratch with real-world examples and understand why it’s one of the most powerful features in C#.
Topics: C#
Read articleHow to Implement AI-Driven Root Cause Detection in ASP.NET Core Applications
c-sharpcorner.com
Implement AI-driven root cause detection in ASP.NET Core apps with OpenTelemetry, Azure OpenAI & App Insights for faster MTTR.
Topics: Application Insights ASP.NET Core OpenTelemetry
Read articleBuilding a Semantic Caching Layer for AI Applications in ASP.NET Core
c-sharpcorner.com
Boost AI app performance & cut costs with semantic caching in ASP.NET Core. Match queries by meaning, not text, for faster, cheaper AI.
Topics: ASP.NET Core OpenAI Performance
Read article