Never miss a release that matters
AI-powered summaries of every GitHub release.
AI Summaries
Changelogs condensed into clear, actionable insights.
Always Free
Track up to 5 packages at no cost, forever.
Weekly Digest
A curated summary of every release, delivered weekly.
TL;DR
ASP.NET Core now supports TempData (temporary data storage) in Blazor applications, improving state management for interactive components.
New
- TempData for Blazor: Enables using
TempDatafor passing data between Blazor components, similar to MVC applications.
Fixes Worth Knowing
- Antiforgery tokens are now generated more efficiently, leveraging a new DataProtection API.
- Improved error handling prevents exceptions when processing bad requests.
- Passkey sign-in now correctly enforces email/phone confirmation and account lockout policies.
- HTTP server activities now include OpenTelemetry (OTEL) semantic conventions for better tracing.
- Certificate validation now supports older certificates.
- Fixed issues with component parameter patterns and ID attribute generation in Blazor.
Before You Upgrade
- The
blazorserversample has been removed; update any code referencing it.
TL;DR
ASP.NET Core 9.0.16 improves security by patching a critical Lodash vulnerability (JavaScript library) and updates dependencies.
Fixes Worth Knowing
A security fix addresses a vulnerability in the Lodash dependency, preventing potential issues with malicious code execution. Dependencies across the framework have also been updated for improved stability and performance.
TL;DR
ASP.NET Core now supports the latest version of the Microsoft Authentication Library (MSAL) for browser applications, improving security and enabling new authentication features.
New
- MSAL browser support updated to version 4.x (authentication library).
Fixes Worth Knowing
- Updated NPM dependencies (JavaScript packages) for improved compatibility.
TL;DR
This release addresses a critical security vulnerability (CVE) in the Lodash dependency and includes fixes for encryption calculations, improving application security.
Fixes Worth Knowing
- Fixed an issue with incorrect calculations in
ManagedAuthenticatedEncryptor(encryption process). - Addressed a security vulnerability in the Lodash JavaScript library (common web component).
- Resolved issues with parallel restore for pass-2 projects, potentially improving build times.
TL;DR
.NET 10 RC2 delivers support for file-based applications using user secrets, enhancing local development workflows.
Breaking
None
New
- User Secrets for File-Based Apps: Allows storing sensitive configuration in user secrets files for applications not hosted in a traditional web project structure.
- TLS Cipher Suite Querying: Enables querying
TlsCipherSuiteon Http.Sys/IIS for more control over TLS configuration (security feature).
Fixes Worth Knowing
- Blazor WASM: Resolved an issue causing
AntiforgeryValidationExceptionduring component state persistence. - OpenAPI: Fixed schema generation issues with circular references.
- Directory Browser: Improved accessibility of the directory browser middleware.
Before You Upgrade
If you are using Blazor with enhanced navigation, be aware that preloading has been disabled.
TL;DR
ASP.NET Core 6.0.36 improves reliability by addressing request parsing errors in Http.Sys (web server).
Breaking
None
New
None
Fixes Worth Knowing
- Resolved issues with request parsing in Http.Sys, preventing potential crashes or unexpected behavior when handling malformed requests.
Before You Upgrade
Restart your application after upgrading to ensure the Http.Sys changes take effect.
TL;DR
ASP.NET Core 9.0 RC2 improves the Blazor development experience with enhanced circuit initialization and WebAssembly Dev Server header support, alongside fixes for OpenAPI documentation and HTTP/3 error handling.
Breaking
None
New
- Blazor Circuit Initialization: Inbound activity handlers are now invoked during circuit initialization. (Blazor - interactive web UI)
- Static Assets: Improved development experience for static files. (Files like CSS, JavaScript)
Fixes Worth Knowing
- OpenAPI: Correctly maps nested schemas and
[Produces]attributes for more accurate API documentation. (API documentation - Swagger/OpenAPI) - HTTP/3: Prevents errors when setting HTTP/3 error codes. (Networking protocol)
- IAsyncEnumerable: Allows setting headers on controller methods returning asynchronous streams of data. (Advanced API development)
Before You Upgrade
Review any custom OpenAPI generation logic to ensure compatibility with the improved schema mapping.
TL;DR
This release improves ASP.NET Core application security by updating bundled libraries to address several critical vulnerabilities.
Breaking
None
New
None
Fixes Worth Knowing
- Updated OpenSSL to address high-severity security vulnerabilities (encryption library).
- Addressed potential denial-of-service vulnerabilities in Kestrel (web server).
Before You Upgrade
Review the .NET 7.0.20 release notes on GitHub for a complete list of security fixes and their potential impact: https://github.com/dotnet/core/releases/tag/v7.0.20
TL;DR
.NET 8 introduces significant performance improvements and new features for building cloud-native applications (software designed for the cloud).
Breaking
None
New
None
Fixes Worth Knowing
None
Before You Upgrade
Review the .NET 8 migration guide for potential application compatibility issues before deploying to production.
TL;DR
This release bundles security updates for ASP.NET Core 3.1, addressing a critical remote code execution vulnerability.
Breaking
- None
New
None
Fixes Worth Knowing
None
Before You Upgrade
Update to this version as soon as possible to mitigate the identified security risk (critical vulnerability).
TL;DR
.NET 7 introduces significant performance improvements and new features for building cloud-native applications (software designed for the cloud).
Breaking
None
New
None
Fixes Worth Knowing
None
Before You Upgrade
Review the .NET 7 documentation for any application compatibility concerns before migrating your projects.
TL;DR
This release improves ASP.NET Core application security by updating to .NET 5.0.17, which includes critical security patches.
Breaking
None
New
None
Fixes Worth Knowing
None
Before You Upgrade
Update your application to target .NET 5.0.17 to benefit from the latest security improvements.
TL;DR
.NET 6 introduces significant performance improvements and new features for building cloud-native (internet-focused) applications with ASP.NET Core.
Breaking
None
New
None
Fixes Worth Knowing
None
Before You Upgrade
Review the .NET 6 documentation for any application compatibility concerns before migrating from a previous version.
TL;DR
This release improves the security of ASP.NET Core applications by updating the underlying .NET Core runtime with critical security patches.
Breaking
None
New
None
Fixes Worth Knowing
Addresses a security vulnerability (potential denial of service) when handling specially crafted HTTP/2 requests.
Before You Upgrade
Restart your ASP.NET Core applications after updating to ensure the security patches are active.
TL;DR
.NET 5 Release Candidate 2 is now available, introducing significant performance improvements and new features for building cross-platform applications (software that runs on multiple operating systems).
Breaking
None
New
None
Fixes Worth Knowing
Fixes address issues with single-file deployment (packaging an app with all dependencies) and improve compatibility with certain Linux distributions.
Before You Upgrade
Review the .NET 5 documentation for any potential compatibility concerns with existing libraries.
TL;DR
ASP.NET Core 3.1 Preview 3 delivers significant performance improvements to Blazor (interactive web UI) applications, particularly around component rendering and startup time.
Breaking
None
New
None (covered in TL;DR)
Fixes Worth Knowing
Fixes address issues with globalization (culture-specific formatting) and deployment scenarios involving self-contained applications.
Before You Upgrade
Ensure your projects target .NET Core 3.1 Preview 3 to take advantage of the Blazor performance enhancements.
TL;DR
ASP.NET Core 3.0 preview introduces Windows Forms and WPF support, enabling .NET Core applications to target desktop environments.
Breaking
None
New
- Windows Forms & WPF Support: (.NET desktop apps) .NET Core now supports building traditional desktop applications.
- gRPC Health Checks: (Remote procedure calls) Easily monitor the health of gRPC services.
Fixes Worth Knowing
None
Before You Upgrade
Ensure your project targets .NET Core 3.0 and update any NuGet package references to the preview versions.
TL;DR
ASP.NET Core now supports gRPC, enabling high-performance remote procedure calls (RPC) using HTTP/2.
Breaking
None
New
- gRPC Support: Build efficient microservices and APIs.
- Diagnostic Source Improvements: Enhanced telemetry for better application monitoring.
Fixes Worth Knowing
None
Before You Upgrade
Review the known issues list at https://github.com/aspnet/Announcements/issues/323 before upgrading.
TL;DR
This release bundles fixes across several ASP.NET Core components, improving stability for common development tasks like database access and web application building.
Breaking
None
New
None
Fixes Worth Knowing
Fixes were included for Diagnostics (monitoring tools), EntityFramework (database access), and MVC (web application framework) components, addressing various bug fixes.
Before You Upgrade
Review the linked release notes for individual components (Diagnostics, EntityFramework, etc.) if you utilize those specific features to understand detailed fixes.
TL;DR
ASP.NET Core gains significant improvements across many components, with a focus on foundational updates and bug fixes for a more stable development experience.
Breaking
- Refer to the Announcements repository for a complete list of breaking changes.
New
None
Fixes Worth Knowing
This release includes numerous bug fixes across a wide range of areas, including Antiforgery (security component), Caching, Data Protection, and Entity Framework.
Before You Upgrade
Review the breaking changes listed in the Announcements repository before upgrading to ensure compatibility.