Editor's note
I kept this one intentionally mixed, which is how I like the newsletter best. The JWT mistakes piece and the OWASP components article are especially practical, while the Azure DevOps API posts add useful automation ideas you can apply quickly. I also liked the pair of AI root-cause articles because they connect .NET app diagnostics with real operational workflows rather than just demo prompts.
Enjoying the newsletter? Your feedback helps us grow and reach more developers.
Today's Articles
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Jasen's take on today's picks
OWASP Top 10 for .NET Developers - Part 6: Preventing Vulnerable and Outdated Components
Dependency risk is still one of the easiest security gaps to miss. Good reminder that package hygiene is part of application security now.
Replacing wkhtmltopdf in .NET: A Migration Guide to a Maintained Engine
A very real migration problem. Useful if you've still got wkhtmltopdf buried in billing, reporting, or document workflows.
Azure DevOps: merging pull requests with conventional commits
A nice process-focused post for teams that care about commit history quality and want Azure DevOps to enforce it.
Creating an AI-Powered API Documentation Assistant with ASP.NET Core and Vector Search
The interesting part here is less AI sparkle and more the practical ASP.NET Core plus vector search wiring.
params IEnumerable : The Upgrade to params You Didn’t Know You Needed
Small language ergonomics posts like this often age well. Worth a look if you write reusable APIs.
Reconfigurable Authorization Policies in .NET
I like the premise: policy changes without redeployments can be a big operational win when done carefully.
Specification pattern content can get abstract fast; this one is more approachable if you're evaluating where it fits.
The Ultimate Guide: Getting Started with Cloud Code in Visual Studio and .NET
Useful for developers trying to understand where Visual Studio's AI-assisted cloud tooling is heading.
Static Web Apps CLI: local authentication emulation with ASP.NET
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
The CQRS decorator pipeline: logging, caching, and transactions without touching a handler
Decorator pipelines are a solid way to keep handlers clean. Logging and caching belong around the behavior, not inside it.
List Pipelines with the Azure DevOps API
Short, practical API automation from Azure DevOps. Handy if you script pipeline inventory or governance checks.
Extension Members in C# 14: The Feature That’ll Start the Next “Is This Clean Code?” War
C# feature debates are rarely just about syntax. This one should spark opinions about readability and restraint.
Getting Started with .NET Aspire for Microservices Development
A decent entry point for Aspire if you're just starting to explore the .NET opinionated microservices toolchain.
Getting Inherited Controller Routes to work in ASP.NET Core
Inherited routing quirks have surprised plenty of teams. Good niche ASP.NET Core post with immediate value.
Building High-Performance Distributed Caching with Redis and ASP.NET Core
Redis remains one of the most practical performance wins for web apps when used with discipline.
.NET 11 Performance Improvements Explained with Real Benchmarks
Benchmark posts always need skepticism, but runtime and GC summaries are still useful for upgrade planning.
Building an AI-Powered Root Cause Analysis System for Production Incidents in .NET
AI for incident analysis is getting more concrete. The value here depends on telemetry quality more than model cleverness.
PostgreSQL vs SQL Server for Modern .NET Applications
A familiar comparison, but still relevant when teams are picking defaults for new systems.
JWT Done Right: 15 Production Mistakes Every ASP.NET Core Developer Should Avoid (.NET 9 Guide)
JWT advice is often too shallow; this one aims at the production mistakes that actually cause incidents.
I Deleted AutoMapper a Year Before It Went Commercial. Here’s the Bug That Made Me Do It.
AutoMapper debates never really end. Personal migration stories are useful because they expose the debugging and maintenance tradeoffs.
LINQ in C#: The Complete Beginner’s Guide with Practical Examples (Part 1)
Beginner-friendly LINQ content still has a place, especially for developers moving deeper into everyday C#.
How to Implement AI-Driven Root Cause Detection in ASP.NET Core Applications
This one is stronger because it ties OpenTelemetry, App Insights, and Azure OpenAI into one operational scenario.
Building a Semantic Caching Layer for AI Applications in ASP.NET Core
Semantic caching is one of the more practical AI cost-control patterns. Good topic for teams building retrieval-heavy apps.