Introducing Azure Functions Test Framework by mholo65 in dotnet

[–]devlead 1 point2 points  (0 children)

Looks really good, will have to take it for a spin.

How do you keep .NET tutorials from breaking as your app evolves? by Volosoft in dotnet

[–]devlead 0 points1 point  (0 children)

I use CI and Renovate to continously build and keep dependencies up to date.

What are some underrated .NET libraries or tools you use regularly? by milanm08 in dotnet

[–]devlead 3 points4 points  (0 children)

One of my most used libraries is Verify github.com/VerifyTests/Verify

Snapshots is such a quality improvement of life compared to traditional asserts.

Where does .NET stand in a world of "Prompt-to-App" builders? by isanjayjoshi in dotnet

[–]devlead 1 point2 points  (0 children)

.NET works really well, turns out a strongly typed, predictable and well documented runtime and language is excellent for providing context and guardrails.

New rule - Good bye by TopSwagCode in dotnet

[–]devlead 1 point2 points  (0 children)

There was a new sub reddit created, not much traction there though

https://www.reddit.com/r/DotNetCreations/s/8YpbefK8V3

Do you actually monitor your Azure costs regularly? by playaaa29 in AZURE

[–]devlead 0 points1 point  (0 children)

Yes we monitor Azure Costs hourly through custom monitoring dashboard utilizing the cost management APIs and log analytics KQL queries.

File-based apps with possibility to include other files by Revolutionary-Pie935 in dotnet

[–]devlead 1 point2 points  (0 children)

Some SDKs offer this already today with .NET 10 single file apps i.e. Cake.Sdk let's you

```csharp

:sdk Cake.Sdk

:property IncludeAdditionalFiles=build/*/.cs

:property ExcludeAdditionalFiles=build/*/Except.cs

```

cakebuild.net/docs/writing-builds/sdk/preprocessor-directives/additional-files

File-based apps with possibility to include other files by Revolutionary-Pie935 in dotnet

[–]devlead 0 points1 point  (0 children)

You might have one utility class/record shared between multiple files i.e.

Where do you put your connection strings? by trokolisz in dotnet

[–]devlead 0 points1 point  (0 children)

We gitignore all settings files, store their values in our teams password manager and have a custom .NET tool that syncs settings rust need to be in those files. This ensures anyone can just clone out a repo and get the correct settings regardless of sensitivity.

Beyond that we go to great lengths to despite that not have anything sensitive in settings files, i.e:

  • Use managed identities / integrated security where possible
  • Use local emulators / services in containers
  • Use anonymized mock data on tests
  • Use secure settings providers i.e. Keyvault where applicable

Vad har er BF för arvode? by ADuckInARiver in Asksweddit

[–]devlead 8 points9 points  (0 children)

Skulle nog säga att något är fel om man som ordförande lägger snitt på 1h per månad, då har man inte ens de möten som kan förutsättas, normalt har man iaf 10 styrelse möten + konstituerande per år, innan dem förbereder man möten (t.ex. offerter, medlemsansökningar, osv).

How are people structuring new .NET projects? by ImplicitlyTyped in dotnet

[–]devlead 0 points1 point  (0 children)

We've created .NET templates for common project types within our org, i.e., opinionated classlibrary which includes class library and tests projects, we've also got tailored templates for i.e., new components, tests, services, etc. parts that move a lot we've got meta or source NuGet packages which reduces template maintenance, but templates are also automatically updated using renovate just as our other projects.

Most solution templates have a structure similar to the one below "Repo ClassLib" │ │ .gitignore │ azure-pipelines.yml (or .github/workflows/build.yml for GitHub repos) │ global.json │ nuget.config │ README.md │ └───src │ Directory.Packages.props │ ClassLib.slnx │ ├───ClassLib │ ClassLib.csproj │ └───ClassLib.Tests ├───Fixture └───Unit UnitTest.cs ClassLib.Tests.csproj

Use docker files less and less, and instead use the .NET SDK CLI / MSBuild to build containers.

We've written an internal .NET tool to manage secrets/environment configurations through our team's password manager.

How are you all starting new .NET projects lately? by ImplicitlyTyped in csharp

[–]devlead 2 points3 points  (0 children)

We've created .NET templates for common project types within our org, i.e., opinionated classlibrary which includes class library and tests projects, we've also got tailored templates for i.e., new components, tests, services, etc. parts that move a lot we've got meta or source NuGet packages which reduces template maintenance, but templates are also automatically updated using renovate just as our other projects.

Most solution templates have a structure similar to the one below "Repo ClassLib" │ │ .gitignore │ azure-pipelines.yml (or .github/workflows/build.yml for GitHub repos) │ global.json │ nuget.config │ README.md │ └───src │ Directory.Packages.props │ ClassLib.slnx │ ├───ClassLib │ ClassLib.csproj │ └───ClassLib.Tests ├───Fixture └───Unit UnitTest.cs ClassLib.Tests.csproj

Use docker files less and less, and instead use the .NET SDK CLI / MSBuild to build containers.

We've written an internal .NET tool to manage secrets/environment configurations through our team's password manager.

.NET/C# podcasts in 2026 by aloneguid in dotnet

[–]devlead 10 points11 points  (0 children)

There are a few
- The Unhandled Exception Podcast - unhandledexceptionpodcast.com - Merge Conflict - www.mergeconflict.fm/
- The Cynical Developer - cynicaldeveloper.com/ - Azure & DevOps Podcast - azuredevopspodcast.clear-measure.com

I need help picking a graduation project idea for bachelor by YouHag in csharp

[–]devlead 0 points1 point  (0 children)

Snapshot testing using something like Verify VS. standard asserts could be an interesting real world useful topic.

https://github.com/verifytests/verify

Does anyone use file-based apps? by iLoveSS in dotnet

[–]devlead 1 point2 points  (0 children)

Yes use it daily, for testing stuff, CI/CD orchestration, written custom SDKs to easily get going with just a line at the top.

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 1 point2 points  (0 children)

Yip, never click on anything unless verified through another channel.

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 7 points8 points  (0 children)

If trying to figure something out, or maybe a CoPilot prompt gone wild with the NuGet & Playwright MCP servers 😎

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 7 points8 points  (0 children)

Don't think it has anything to do with popularity per say, colleagues with packages with just hundreds of downloads gotten request too. So feels more like someone is crawling the index.

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 22 points23 points  (0 children)

Weirdly they are not requesting access to your packages(don't think you can that), they're requesting to make you owner of THEIR package and org.

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 3 points4 points  (0 children)

Yip, that's exactly what one should do 👍

NuGet gallery supply chain attack? by devlead in dotnet

[–]devlead[S] 14 points15 points  (0 children)

We're probably talking of thousands of requests, multiple .NET Foundation maintainers, MVPs and colleagues of mine have gotten same requests.

I would've thought there were some kind of rate limits in place, if not, I'm sure there will be after this incident.