iiinova — where your digital self keeps evolving

I am also not sure what the support policy of non-current versions of packages are (from Microsoft). Just because there is STJ 9.0.1 doesn’t necessarily mean STJ 8.0.4 is outdated.

310

And yes, direct deps override transitive ones - but that shouldn’t be used to workaround a CVE

That is the funny part - People (including Microsoft) did push out new version still having outdated dependencies. So even if you as a responsible dev, did you job and keep everything up to date, you would not have been done.

000

Hmm that might be - never thought of that. Maybe it is laziness. Every ide makes it somewhat easy to upgrade all your packages in one go. Central Package Management makes this even more trivial

When you say it - I can remember some discussion going on, on the GitHub repo. And basically, as you can always override such issue with a direct dependency it wasn’t crtitical. Personally - I don’t like that because it doesn’t lead developers to a „pit of success“

000

Understandable - but you will face the issue probably in November this year again :) And I am still not sure why the issue comes in the first place. It might be worth reporting this over at the nuget repo. I mean, given that even netstandrd2.0 would support the v9 version of the dependency

Well - that is a good question. We faced similar issues with the System.Text.JSON - where even many MS packages didn’t update STJ to fix the CVE (even though the package itself got updated).

100

Interesting - for sure there are man corner cases where this might not work. Thanks for the update

000

Interesting - that would also move the validation whether or not services can be created to compile-time (not in all cases, but in many) !?

100

As direct deps are always overruling transient deps, users can override the package. But the other way around doesn't work. Yes, there is a risk that it breaks your library code, though.

210

We in bUnit took your last approach. We aligned TFM with the package version, see: github.com/bUnit-dev/bU... I also did this in some of my other smaller libraries. For netstandard2.0, I would roll with the lowest required version - so 8.0.1 for your dep.

github.com

Steven Giesel @steven-giesel.com · 27/01/2025

.NET 10's first preview will arrive soon. And yes, there are new LINQ operators coming! Therefore I updated my LINQ mindmap to the current #dotnet 10 state. The link for the High-Res version (free of charge, of course) is in the comments. #csharp #linq

143

When you upgrade packages, do you read the release notes? We maintainers, normally, invest a bit of time to write them ;)

251

Steven Giesel @steven-giesel.com · 23/01/2025

Nice! Have to check it out!

000

Steven Giesel @steven-giesel.com · 23/01/2025

If that would work in rider or as a standalone tool - that would be something

100

Steven Giesel @steven-giesel.com · 22/01/2025

LOL :) that is a good take!

000

Steven Giesel @steven-giesel.com · 21/01/2025

My @ndcconferences.com Oslo talk got accepted - just a very slight amount of nervousness. Anyway - if you are at NDC Oslo and want to hear some gibberish about #csharp #SIMD and #performance - be my guest!

140

Steven Giesel @steven-giesel.com · 20/01/2025

Yeah - I saw a prototype in a pdf and one a volumetric display (aka hologram)

000

Steven Giesel @steven-giesel.com · 20/01/2025

Already did the upgrade - until now everything runs smoothly :D But I did stay on the "real" FusionCache without the MS-HybridCache-Layer in between.

Steven Giesel @steven-giesel.com · 20/01/2025

Fair enough - the full Framework does work. The modern cross-platform version (which the author was referring to) does not.

000

Steven Giesel @steven-giesel.com · 19/01/2025

LOL - so you might be the first stable implementation of the hybridcache. Currently, the official one is still „just“ a nuget package that isn’t stable!

Steven Giesel @steven-giesel.com · 19/01/2025

Fingers crossed! You might wanna spin up a docker container and try it out :D

100

Steven Giesel @steven-giesel.com · 19/01/2025

The short answer: no - #dotnet does not run on Windows 98! But glad someone asked!

3202

Steven Giesel @steven-giesel.com · 18/01/2025

Courses from developers for developers! That is what @fabiangosebrink.bsky.social and I did with our academy site: developer-academy.ch Do you want to level up your frontend game? There are some really nice gems coming up - don't miss it! #dotnet #angular #ngrx

developer-academy.ch

Developer Academy Learn modern software development with Angular, Nx, .NET and more

Learn modern software development with Angular, Nx, .NET and more

021

Reposted by Steven Giesel

Egil Hansen @egilhansen.com · 17/01/2025

Going live with @steven-giesel.com in a couple of minutes for another #bUnit dev session. Come hang and help us build v2. Watch at: - www.youtube.com/watch?v=m_GM... - twitch.tv/egilhansen

youtube.com

bUnit dev session #6

YouTube video by Egil Hansen

031

Steven Giesel @steven-giesel.com · 16/01/2025

Amazing work from you - as always! Thanks for the heads up

Steven Giesel @steven-giesel.com · 16/01/2025

Is there a timeline or idea when this will be used by EF?

100

dotnet watch file-watching has regressed in 9.0 · Issue #44912 · dotnet/sdk

Annoyingly the latest patch release of #dotnet 9 (9.0.102) did not fix the "dotnet watch" bug (github.com/dotnet/sdk/i...). After one or two changes I always receive: "Change failed to apply (error code: '00-00-00-00-00'). Further changes won't be applied to this process."

github.com

Describe the bug I am using "dotnet watch" to launch and watch an extremely simple asp.net application which, for the purposes of this bug report, simply serves up a static index.html file. I have ...

000

I am using FusionCache directly. I didn't see the need for the layer in between.

I noticed that I never came back - but FusionCache is really nice and feels more mature. Overall the migration process was very smooth and easy! A-ma-zing!

121

Steven Giesel @steven-giesel.com · 14/01/2025

I am big fan of small tools like DbUp that just execute some SQL files. But of course EF Migrations is very handy if you already use EF.

180

Removing unused stuff - it just feels right!

130

Steven Giesel @steven-giesel.com · 14/01/2025

That sounds like the whole IT department and more ... :D