You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
🌐 Azure Container Registry private endpoints (a id="16132")(/a)
Support for private endpoints when using Azure Container Registry in deployment scenarios, enabling secure image pulls in isolated networks.
Changes: Support private endpoints for Azure Container Registry #16132
📝 Documentation required
🌐 Azure Front Door hosting integration (a id="16137")(/a)
New Aspire.Hosting.Azure.FrontDoor package provisions Azure Front Door (Standard SKU) in front of app resources via builder.AddAzureFrontDoor("fd").WithOrigin(api.GetEndpoint("https")).
Changes: Add Azure Front Door hosting integration #16137
📝 Documentation required
⚡ Azure Network Security Perimeter (NSP) support (a id="15711")(/a)
New NSP configuration in Aspire.Hosting.Azure.Network for controlling network access to Azure resources with security perimeter policies.
Changes: Add Azure Network Security Perimeter (NSP) support #15711
📝 Documentation required
🔄 BeforeStart Pipeline steps (a id="13780")(/a)
Pipeline steps can now be declared as BeforeStart dependencies, enabling ordered execution of startup actions (e.g., role assignment before Azure resource provisioning).
Changes: Add support for BeforeStart Pipeline steps #13780
📝 Documentation required
🌐 JavaScript publish methods and Next.js support (a id="15736")(/a)
New Aspire.Hosting.JavaScript publish methods: PublishAsStaticWebsite (YARP-backed static file serving with optional API proxy), PublishAsNodeServer (container from build artifact), PublishAsNpmScript (multi-stage Dockerfile), and AddNextJsApp for Next.js standalone deployments. Supports Vite, React, Vue, Astro, SvelteKit, Next.js, Nuxt, Remix, and more.
Changes: Add JavaScript publish methods, AddNextJsApp, and switch to YARP #15736, Ignore package.json engines.node when generating Dockerfiles #16295 ⚠️Breaking change
📝 Documentation required
🐳 Podman support for Docker Compose deploy (a id="16074")(/a)
Aspire now auto-detects and uses Podman or Docker at runtime using parallel probing. The IContainerRuntime API has been unified into an IContainerRuntimeResolver abstraction. aspire doctor now reports all available runtimes with status and explains which is active.
Changes: Add Podman support for Docker Compose deploy and unify container runtime abstraction #16074 ⚠️Breaking change
📝 Documentation required
🌍 Read ASPIRE_ENVIRONMENT from environment (a id="16098")(/a) DistributedApplicationBuilder now reads the ASPIRE_ENVIRONMENT environment variable for environment selection, consistent with ASP.NET Core's ASPNETCORE_ENVIRONMENT.
Changes: Read ASPIRE_ENVIRONMENT in DistributedApplicationBuilder #16098
🛡️ Selective endpoint reference filtering (a id="15558")(/a)
New IsDefaultReferenceEndpoint property on EndpointAnnotation lets integrations exclude management/health endpoints (e.g., Keycloak admin console, emulator health probes) from WithReference defaults. Keycloak, Azure CosmosDB Emulator, EventHubs Emulator, and ServiceBus Emulator already opt their management endpoints out.
Changes: Allow filtering endpoints from the default reference set #15558 ⚠️Breaking change
📝 Documentation required
🐳 Docker Compose privileged container flag (a id="16075")(/a)
Docker Compose publishing now supports the privileged flag for containers that require elevated permissions.
Changes: Add 'privileged' flag for docker-compose publishing #16075
🔄 F# and VB project upgrade support (a id="15799")(/a) aspire add and related upgrade commands now support F# (.fsproj) and Visual Basic (.vbproj) projects.
Changes: Support upgrading F# and VB projects #15799
⚙️ Make Azure credential timeout configurable (a id="16175")(/a)
The Azure credential process timeout is now configurable, useful in environments with slow credential acquisition.
Changes: Make Azure credential process timeout configurable #16175
📊 aspire dashboard command (a id="15607")(/a)
New aspire dashboard CLI command for standalone dashboard management: start, stop, and open the dashboard independent of an app host.
Changes: Add aspire dashboard CLI command #15607
📝 Documentation required
💥 aspire destroy command (a id="16097")(/a)
New aspire destroy command tears down previously deployed environments (Azure resource groups, Docker Compose stacks, Kubernetes Helm releases) with per-environment confirmation prompts and a --yes flag for scripted use.
Changes: Add aspire destroy command for tearing down deployed environments #16097
📝 Documentation required
📋 --list-steps flag for aspire do (a id="16085")(/a) aspire do --list-steps lists available pipeline steps without executing them, useful for discovery and scripting.
Changes: Add --list-steps flag to aspire do command #16085
🤖 Non-interactive (headless) CLI mode (a id="16235")(/a)
New PromptBinding infrastructure enables scripted and automation use cases by providing a non-interactive code path for prompts that would otherwise require user input.
Changes: Add PromptBinding infrastructure for non-interactive CLI mode #16235
🐛 Surface process output on failure (a id="16303")(/a)
Build output from Docker, Podman, and dotnet publish is now surfaced on failure, making it much easier to diagnose deployment errors.
Changes: Surface process output on failure #16303
📊 Dashboard telemetry API auto-configuration (a id="16326")(/a)
Dashboard telemetry API is now enabled by default with ApiKey authentication and auto-generated keys. The CLI auto-exchanges browser login tokens for API keys, so aspire otel logs works when you paste a login URL directly.
Changes: Enable dashboard telemetry API by default with ApiKey auth and login token exchange #16326
📝 Documentation required
🛠️ Environment variable support in debug launch (a id="16449")(/a)
Aspire debug launch configurations now support environment variable overrides, enabling per-launch environment customization.
Changes: Add env support to Aspire debug launch configuration #16449
Improvements
🔗 Clickable dashboard hyperlinks in telemetry commands (a id="16079")(/a) aspire otel and related telemetry commands now render clickable hyperlinks to the dashboard for navigating directly to traces and logs.
Changes: Add clickable dashboard hyperlinks to CLI telemetry commands #16079
📄 Disambiguate duplicate paths in aspire ps (a id="16199")(/a) aspire ps now disambiguates entries with duplicate app host paths, making it clearer which session to connect to.
Changes: Disambiguate duplicate paths in aspire ps output #16199
🔌 Handle describe --follow disconnects (a id="16271")(/a) aspire describe --follow gracefully handles server disconnects instead of crashing.
Changes: Handle describe --follow disconnects #16271
📖 Markdig for docs rendering (a id="16342")(/a)
CLI docs commands now use Markdig for richer, more accurate Markdown rendering in the terminal.
Changes: Use Markdig for Aspire CLI docs rendering #16342
🏷️ Rename endpoints column to URLs in describe (a id="16144")(/a)
The aspire describe endpoints column is renamed to "URLs" for clarity.
Changes: Rename describe endpoints column to URLs #16144
📡 Telemetry activity for app host runs (a id="16346")(/a)
Running the app host via the CLI now emits telemetry activity, enabling tracing of CLI-initiated app host sessions.
Changes: Add telemetry activity for running app host in CLI #16346
Bug fixes
🐛 Fix aspire wait for JSON-emitted resource names (a id="16224")(/a) aspire wait now correctly resolves resource names emitted in JSON format from the app host.
Changes: Fix aspire wait for JSON-emitted resource names #16224
🐛 Fix OTLP endpoint resolution in isolated mode (a id="16367")(/a)
The OTLP endpoint URL is now correctly resolved when the app host runs in isolated mode.
Changes: Fix OTLP endpoint resolution in isolated mode #16367
🗝️ User secrets as checkbox inputs (a id="16293")(/a)
User secret parameters in the dashboard now use checkbox-style inputs with inline descriptions for a more intuitive experience.
Changes: Move user secrets descriptions to checkbox inputs #16293
🐛 Fix OTLP histogram bucket count deserialization (a id="16376")(/a)
Fixed incorrect JSON deserialization of numeric bucketCounts fields in OTLP histogram data, which caused missing or incorrect metrics.
Changes: Fix OTLP JSON deserialization of numeric histogram bucketCounts #16376
🔒 Fix open redirect vulnerability (a id="15952")(/a)
Fixed a security issue where crafted URLs could redirect users to arbitrary external sites via the dashboard login page.
Changes: Fix open redirect vulnerability #15952
📊 Open Aspire Dashboard from Command Palette (a id="15499")(/a)
New "Open Aspire Dashboard" entry in the VS Code Command Palette for quick dashboard access.
Changes: Add 'Open Aspire Dashboard' to Command Palette #15499
🌐 Simple Browser for dashboard launch (a id="15896")(/a)
The Aspire VS Code extension can now open the dashboard in VS Code's built-in Simple Browser panel, keeping the workflow within the editor.
Changes: Add Simple Browser option for dashboard launch #15896
🐍 Python AppHost code generator (a id="13947")(/a)
New polyglot Python AppHost code generator enables building Aspire app hosts in Python, with parity to TypeScript and Java polyglot support.
Changes: PythonAppHost Code Generator #13947
📝 Documentation required
📉 Remove vendored OpenTelemetry SqlClient instrumentation (a id="14621")(/a) Aspire.Microsoft.Data.SqlClient and Aspire.System.Data.SqlClient now depend on the official OpenTelemetry.Instrumentation.SqlClient NuGet package rather than vendoring the source code.
Changes: Remove vendored OpenTelemetry.Instrumentation.SqlClient code #14621
(a id="service-discovery")(/a)
🔍 Service Discovery
1 improvement
Improvements
🔧 Updated service discovery environment variables (a id="16210")(/a)
Improved handling of HTTP/HTTPS endpoint names and scheme mismatches, allowing non-HTTP endpoints to be referenced using DNS-style service discovery notation.
Changes: Update service discovery environment variables #16210
(a id="templates")(/a)
📄 Templates
1 new feature
New features
🐍 Python starter uses TypeScript AppHost (a id="15574")(/a)
The aspire-py-starter template no longer requires the .NET SDK for the AppHost — it now uses a TypeScript AppHost, aligning with aspire-ts-starter. The template is now generated via aspire new instead of dotnet new.
Changes: Move Python starter template to TypeScript AppHost and CLI template factory #15574 ⚠️Breaking change
📝 Documentation required
This changelog is automatically generated. Add a comment to this issue to provide
feedback (e.g., "Exclude PR #1234", "Rename: X → Y", "Merge PRs #1234 and #5678").
Table of Contents
What's New
(a id="apphost")(/a)
🏗️ AppHost
10 new features, 7 improvements, 1 bug fix
New features
🌐 Azure Container Registry private endpoints (a id="16132")(/a)
Support for private endpoints when using Azure Container Registry in deployment scenarios, enabling secure image pulls in isolated networks.
Changes: Support private endpoints for Azure Container Registry #16132
📝 Documentation required
🌐 Azure Front Door hosting integration (a id="16137")(/a)
New
Aspire.Hosting.Azure.FrontDoorpackage provisions Azure Front Door (Standard SKU) in front of app resources viabuilder.AddAzureFrontDoor("fd").WithOrigin(api.GetEndpoint("https")).Changes: Add Azure Front Door hosting integration #16137
📝 Documentation required
☸️ Azure Kubernetes Service (AKS) hosting support (a id="16088")(/a)
New
Aspire.Hosting.Azure.Kubernetespackage withAddAzureKubernetesEnvironment()for provisioning and deploying to AKS clusters. Includes node pool configuration, private cluster support, Container Insights, and workload identity groundwork. Combined with Helm-based deployment pipeline fromAspire.Hosting.Kubernetes.Changes: Add Kubernetes deploy pipeline with Helm engine #15723, Add Azure Kubernetes Service (AKS) hosting support #16088, Add WithSystemNodePool() to customize AKS system node pool VM size #16312, Add AKS Blazor+Redis interactive deploy E2E test #16316
📝 Documentation required
⚡ Azure Network Security Perimeter (NSP) support (a id="15711")(/a)
New NSP configuration in
Aspire.Hosting.Azure.Networkfor controlling network access to Azure resources with security perimeter policies.Changes: Add Azure Network Security Perimeter (NSP) support #15711
📝 Documentation required
🔄 BeforeStart Pipeline steps (a id="13780")(/a)
Pipeline steps can now be declared as
BeforeStartdependencies, enabling ordered execution of startup actions (e.g., role assignment before Azure resource provisioning).Changes: Add support for BeforeStart Pipeline steps #13780
📝 Documentation required
🎮 Command results from resource commands (a id="15664")(/a)
Resource commands can now return structured result data (
CommandResultData) with messages, format (including Markdown), and display settings. A newLoggerproperty onExecuteCommandContextlets command handlers emit log output. DeprecatesErrorMessagein favor of the unifiedMessageproperty.Changes: Add command result support for resource commands #15622, Add HTTP command result support for AppHost HTTP commands #15664, Add Logger property to ExecuteCommandContext #15678
🐳 Durable Task Scheduler resources for Azure Functions (a id="13711")(/a)
New resource types for Azure Durable Task Scheduler (DTS) in the
Aspire.Hosting.Azure.Functionsintegration.Changes: Addition of Durable Task Scheduler resources to Azure Functions host library #13711
📝 Documentation required
☕ Java polyglot AppHost parity (a id="15470")(/a)
Java-based AppHosts now have full feature parity with TypeScript and Python polyglot hosts, including ATS export support for pipeline, Docker Compose, and configuration APIs.
Changes: Add Java polyglot AppHost parity #15470, Add ATS pipeline parity for polyglot AppHosts #15826
🌐 JavaScript publish methods and Next.js support (a id="15736")(/a)
⚠️ Breaking change
New
Aspire.Hosting.JavaScriptpublish methods:PublishAsStaticWebsite(YARP-backed static file serving with optional API proxy),PublishAsNodeServer(container from build artifact),PublishAsNpmScript(multi-stage Dockerfile), andAddNextJsAppfor Next.js standalone deployments. Supports Vite, React, Vue, Astro, SvelteKit, Next.js, Nuxt, Remix, and more.Changes: Add JavaScript publish methods, AddNextJsApp, and switch to YARP #15736, Ignore package.json engines.node when generating Dockerfiles #16295
📝 Documentation required
🐳 Podman support for Docker Compose deploy (a id="16074")(/a)
⚠️ Breaking change
Aspire now auto-detects and uses Podman or Docker at runtime using parallel probing. The
IContainerRuntimeAPI has been unified into anIContainerRuntimeResolverabstraction.aspire doctornow reports all available runtimes with status and explains which is active.Changes: Add Podman support for Docker Compose deploy and unify container runtime abstraction #16074
📝 Documentation required
🌍 Read ASPIRE_ENVIRONMENT from environment (a id="16098")(/a)
DistributedApplicationBuildernow reads theASPIRE_ENVIRONMENTenvironment variable for environment selection, consistent with ASP.NET Core'sASPNETCORE_ENVIRONMENT.Changes: Read ASPIRE_ENVIRONMENT in DistributedApplicationBuilder #16098
🛡️ Selective endpoint reference filtering (a id="15558")(/a)
⚠️ Breaking change
New
IsDefaultReferenceEndpointproperty onEndpointAnnotationlets integrations exclude management/health endpoints (e.g., Keycloak admin console, emulator health probes) fromWithReferencedefaults. Keycloak, Azure CosmosDB Emulator, EventHubs Emulator, and ServiceBus Emulator already opt their management endpoints out.Changes: Allow filtering endpoints from the default reference set #15558
📝 Documentation required
Improvements
🔒 Automatic dev certificate export (a id="16282")(/a)
Aspire now pre-exports the ASP.NET Core dev certificate to its own cache directory, avoiding repeated macOS Keychain prompts during repeated app starts.
Changes: Pre-export dev certificate to Aspire cache to avoid macOS keychain prompts #16282
🔧 Configurable name validation policy (a id="15728")(/a)
New
NameValidationPolicyAnnotationallows per-resource customization of name validation rules.Changes: Refactor name validation to NameValidationPolicyAnnotation with configurable rules #15728
🐳 Docker Compose privileged container flag (a id="16075")(/a)
Docker Compose publishing now supports the
privilegedflag for containers that require elevated permissions.Changes: Add 'privileged' flag for docker-compose publishing #16075
🔄 F# and VB project upgrade support (a id="15799")(/a)
aspire addand related upgrade commands now support F# (.fsproj) and Visual Basic (.vbproj) projects.Changes: Support upgrading F# and VB projects #15799
🔒 HTTPS upgrade for Azure App Service endpoints (a id="16060")(/a)
HTTP endpoints are automatically upgraded to HTTPS when deploying to Azure App Service.
Changes: Upgrade HTTP endpoints to HTTPS in Azure App Service #16060
⚙️ Make Azure credential timeout configurable (a id="16175")(/a)
The Azure credential process timeout is now configurable, useful in environments with slow credential acquisition.
Changes: Make Azure credential process timeout configurable #16175
🔧 WithEndpoint updates existing endpoints (a id="16039")(/a)
Calling
WithEndpointwith the name of an existing endpoint now updates it in-place instead of throwing an exception.Changes: Make WithEndpoint update existing endpoints instead of throwing #16039
Bug fixes
Fixed a race condition in event callback ordering during container creation that could cause incorrect startup behavior.
Changes: Fix event order and callback calling during container creation #15503
(a id="cli")(/a)
⌨️ CLI
9 new features, 9 improvements, 3 bug fixes
New features
🔑 --dashboard-url and --api-key options (a id="15595")(/a)
aspire agent mcpandaspire otelcommands now accept--dashboard-urland--api-keyoptions for connecting to an external standalone dashboard.Changes: Add --dashboard-url and --api-key options to aspire agent mcp and aspire otel commands #15595
📊 aspire dashboard command (a id="15607")(/a)
New
aspire dashboardCLI command for standalone dashboard management: start, stop, and open the dashboard independent of an app host.Changes: Add
aspire dashboardCLI command #15607📝 Documentation required
💥 aspire destroy command (a id="16097")(/a)
New
aspire destroycommand tears down previously deployed environments (Azure resource groups, Docker Compose stacks, Kubernetes Helm releases) with per-environment confirmation prompts and a--yesflag for scripted use.Changes: Add aspire destroy command for tearing down deployed environments #16097
📝 Documentation required
📖 aspire docs api subcommands (a id="15814")(/a)
New
aspire docs api *subcommands surfaceaspire.devAPI reference documentation directly in the terminal.Changes: Add
aspire docs api *sub-commands to exposeaspire.devreference material #15814📋 --list-steps flag for aspire do (a id="16085")(/a)
aspire do --list-stepslists available pipeline steps without executing them, useful for discovery and scripting.Changes: Add --list-steps flag to aspire do command #16085
🤖 Non-interactive (headless) CLI mode (a id="16235")(/a)
New
PromptBindinginfrastructure enables scripted and automation use cases by providing a non-interactive code path for prompts that would otherwise require user input.Changes: Add PromptBinding infrastructure for non-interactive CLI mode #16235
🐛 Surface process output on failure (a id="16303")(/a)
Build output from Docker, Podman, and
dotnet publishis now surfaced on failure, making it much easier to diagnose deployment errors.Changes: Surface process output on failure #16303
📊 Dashboard telemetry API auto-configuration (a id="16326")(/a)
Dashboard telemetry API is now enabled by default with ApiKey authentication and auto-generated keys. The CLI auto-exchanges browser login tokens for API keys, so
aspire otel logsworks when you paste a login URL directly.Changes: Enable dashboard telemetry API by default with ApiKey auth and login token exchange #16326
📝 Documentation required
🛠️ Environment variable support in debug launch (a id="16449")(/a)
Aspire debug launch configurations now support environment variable overrides, enabling per-launch environment customization.
Changes: Add env support to Aspire debug launch configuration #16449
Improvements
🔗 Clickable dashboard hyperlinks in telemetry commands (a id="16079")(/a)
aspire oteland related telemetry commands now render clickable hyperlinks to the dashboard for navigating directly to traces and logs.Changes: Add clickable dashboard hyperlinks to CLI telemetry commands #16079
🔗 Clickable trace IDs in trace detail view (a id="16345")(/a)
Trace IDs in the CLI trace detail view are now rendered as clickable links to the dashboard.
Changes: Make trace ID a clickable link in trace detail view #16345
🔗 Dashboard URL token in aspire ps (a id="16165")(/a)
aspire psoutput now includes the dashboard URL with the login token for quick access.Changes: Add token for Dashboard url when running
aspire ps#16165📄 Disambiguate duplicate paths in aspire ps (a id="16199")(/a)
aspire psnow disambiguates entries with duplicate app host paths, making it clearer which session to connect to.Changes: Disambiguate duplicate paths in aspire ps output #16199
🔌 Handle describe --follow disconnects (a id="16271")(/a)
aspire describe --followgracefully handles server disconnects instead of crashing.Changes: Handle describe --follow disconnects #16271
👁️ Hide hidden resources by default (a id="16146")(/a)
aspire describe,aspire logs, andaspire exportnow hide internal/infrastructure resources by default. Use the new--include-hiddenflag to show them.Changes: CLI: Hide hidden resources by default in describe/logs/export, add --include-hidden option #16146
📖 Markdig for docs rendering (a id="16342")(/a)
CLI docs commands now use Markdig for richer, more accurate Markdown rendering in the terminal.
Changes: Use Markdig for Aspire CLI docs rendering #16342
🏷️ Rename endpoints column to URLs in describe (a id="16144")(/a)
The
aspire describeendpoints column is renamed to "URLs" for clarity.Changes: Rename describe endpoints column to URLs #16144
📡 Telemetry activity for app host runs (a id="16346")(/a)
Running the app host via the CLI now emits telemetry activity, enabling tracing of CLI-initiated app host sessions.
Changes: Add telemetry activity for running app host in CLI #16346
Bug fixes
🐛 Fix aspire wait for JSON-emitted resource names (a id="16224")(/a)
aspire waitnow correctly resolves resource names emitted in JSON format from the app host.Changes: Fix aspire wait for JSON-emitted resource names #16224
🐛 Fix OTLP endpoint resolution in isolated mode (a id="16367")(/a)
The OTLP endpoint URL is now correctly resolved when the app host runs in isolated mode.
Changes: Fix OTLP endpoint resolution in isolated mode #16367
🐛 Fix PR channel version selection (a id="16125")(/a)
Corrected how the CLI selects the channel version when used in PR/preview build scenarios.
Changes: Fix PR channel version selection in Aspire CLI #16125
(a id="dashboard")(/a)
📖 Dashboard
3 new features, 5 improvements, 3 bug fixes
New features
🔔 Notification center (a id="15906")(/a)
New bell icon in the dashboard header shows a notification center with command execution results (start, stop, restart). Notifications support Markdown-formatted messages, timestamps, and a "View response" action. Capped at 100 entries.
Changes: Add notification center, command response message, and markdown support to Dashboard #15906, Use display name in lifecycle command response messages #16143
📝 Documentation required
📋 Parameters page improvements (a id="16117")(/a)
Dashboard Parameters page now supports clicking to set a parameter value directly, a warning badge for unset parameters, and filtering parameters by resource.
Changes: Dashboard: Parameters page follow-ups - clickable set value, warning badge, filter by resource #16117
i️ State column InfoPopover (a id="15996")(/a)
Hovering over a resource state in the dashboard now shows an info popover with expanded details and clickable links for further investigation.
Changes: Dashboard: Add InfoPopover for state column with clickable links #15996
Improvements
🚫 Disable browser autocomplete on inputs (a id="16297")(/a)
Browser autocomplete is disabled on the dashboard's search and input fields to prevent unwanted suggestions.
Changes: Disable browser autocomplete on dashboard search and input fields #16297
🧹 Clarify clear telemetry labels (a id="16128")(/a)
The "clear telemetry" button labels and confirmation messages are clarified for better usability.
Changes: Clarify dashboard clear telemetry labels #16128
🔗 Remove 'dotnet' prefix from shortlinks (a id="16176")(/a)
Dashboard
aka.ms/aspireshortlinks no longer include the redundant 'dotnet' prefix.Changes: Remove 'dotnet' prefix from aka.ms/aspire shortlinks #16176
🗝️ User secrets as checkbox inputs (a id="16293")(/a)
User secret parameters in the dashboard now use checkbox-style inputs with inline descriptions for a more intuitive experience.
Changes: Move user secrets descriptions to checkbox inputs #16293
Bug fixes
🐛 Fix FluentSelect/FluentCombobox value binding (a id="16315")(/a)
Fixed a bug where FluentSelect and FluentCombobox components lost their selected value when available options changed.
Changes: Fix FluentSelect/FluentCombobox value binding when options change #16315
🐛 Fix OTLP histogram bucket count deserialization (a id="16376")(/a)
Fixed incorrect JSON deserialization of numeric
bucketCountsfields in OTLP histogram data, which caused missing or incorrect metrics.Changes: Fix OTLP JSON deserialization of numeric histogram bucketCounts #16376
🔒 Fix open redirect vulnerability (a id="15952")(/a)
Fixed a security issue where crafted URLs could redirect users to arbitrary external sites via the dashboard login page.
Changes: Fix open redirect vulnerability #15952
(a id="extensions")(/a)
🧩 Extensions
5 new features, 2 bug fixes
New features
🌐 Auto-restore on workspace open (a id="15546")(/a)
The VS Code extension now automatically restores the Aspire project when a workspace containing an
aspire.config.jsonis opened or when the config changes.Changes: VS Code extension: Auto-restore on workspace open and config change #15546
🌐 Improved resource state indicators (a id="15688")(/a)
VS Code extension gutter decorations, CodeLens annotations, and tree view items now display richer, more accurate resource state information.
Changes: VS Code extension: Improve gutter, code lens, and tree view resource state indicators #15688
🌐 Open AppHost source action (a id="15668")(/a)
New VS Code action opens the AppHost source file directly from the extension UI.
Changes: Add open AppHost source action to VS Code extension #15668
📊 Open Aspire Dashboard from Command Palette (a id="15499")(/a)
New "Open Aspire Dashboard" entry in the VS Code Command Palette for quick dashboard access.
Changes: Add 'Open Aspire Dashboard' to Command Palette #15499
🌐 Simple Browser for dashboard launch (a id="15896")(/a)
The Aspire VS Code extension can now open the dashboard in VS Code's built-in Simple Browser panel, keeping the workflow within the editor.
Changes: Add Simple Browser option for dashboard launch #15896
Bug fixes
🐛 Fix aspire start in VS Code integrated terminal (a id="15980")(/a)
Resolved an issue where
aspire startwould fail when run inside the VS Code integrated terminal.Changes: Fix aspire start failing in VS Code integrated terminal #15980
🐛 Fix CodeLens positioned inside code blocks (a id="15893")(/a)
CodeLens annotations no longer appear incorrectly anchored inside preceding Markdown code blocks.
Changes: Fix CodeLens positioned inside preceding code blocks #15893
(a id="integrations")(/a)
🔌 Integrations
2 improvements
Improvements
🐍 Python AppHost code generator (a id="13947")(/a)
New polyglot Python AppHost code generator enables building Aspire app hosts in Python, with parity to TypeScript and Java polyglot support.
Changes: PythonAppHost Code Generator #13947
📝 Documentation required
📉 Remove vendored OpenTelemetry SqlClient instrumentation (a id="14621")(/a)
Aspire.Microsoft.Data.SqlClientandAspire.System.Data.SqlClientnow depend on the officialOpenTelemetry.Instrumentation.SqlClientNuGet package rather than vendoring the source code.Changes: Remove vendored OpenTelemetry.Instrumentation.SqlClient code #14621
(a id="service-discovery")(/a)
🔍 Service Discovery
1 improvement
Improvements
Improved handling of HTTP/HTTPS endpoint names and scheme mismatches, allowing non-HTTP endpoints to be referenced using DNS-style service discovery notation.
Changes: Update service discovery environment variables #16210
(a id="templates")(/a)
📄 Templates
1 new feature
New features
The
aspire-py-startertemplate no longer requires the .NET SDK for the AppHost — it now uses a TypeScript AppHost, aligning withaspire-ts-starter. The template is now generated viaaspire newinstead ofdotnet new.Changes: Move Python starter template to TypeScript AppHost and CLI template factory #15574
📝 Documentation required
This changelog is automatically generated. Add a comment to this issue to provide
feedback (e.g., "Exclude PR #1234", "Rename: X → Y", "Merge PRs #1234 and #5678").