[13.3] Change log

[github-actions]

Last updated: 2026-04-25 06:09 UTC
PRs analyzed through: 2026-04-25 06:09 UTC

Table of Contents

• 🚧 AppHost
• ⌨️ CLI
• 📊 Dashboard
• 🧩 Extensions
• 🔌 Integrations
• ⚙️ Engineering

What's New

• 2026-4-24 — Extensions new features - Environment variables in Aspire debug launch configuration (Add env support to Aspire debug launch configuration #16449)
• 2026-4-24 — Dashboard new features - Notification center and command response messages (Add notification center, command response message, and markdown support to Dashboard #15906)
• 2026-4-24 — Dashboard new features - State column InfoPopover with clickable links (Dashboard: Add InfoPopover for state column with clickable links #15996)
• 2026-4-23 — App Host new features - TryGetByName on IResourceCollection (Add TryGetByName to IResourceCollection #16389)
• 2026-4-23 — CLI new features - Support F# and VB project upgrades with aspire update (Support upgrading F# and VB projects #15799)
• 2026-4-22 — App Host new features - Tracked browser logs and network capture (Add tracked browser logs and network capture #16310)
• 2026-4-20 — App Host new features - WithSystemNodePool() for AKS node pool customization (Add WithSystemNodePool() to customize AKS system node pool VM size #16312)
• 2026-4-20 — Integrations new features - Azure Front Door hosting integration (Add Azure Front Door hosting integration #16137)

🚧 AppHost

9 new features, 8 improvements, 7 bug fixes

App Host new features

• 🐍 Python AppHost code generator
  Adds a code generator for Python AppHosts that scaffolds the AppHost project structure and dependency wiring automatically, enabling polyglot Python-based distributed applications.
  Changes: PythonAppHost Code Generator #13947

• 🌐 Azure Kubernetes Service (AKS) hosting support
  New Aspire.Hosting.Azure.Kubernetes package provides first-class AKS support, including Helm-based deployment and AKS-specific resource configuration.
  Changes: Add Azure Kubernetes Service (AKS) hosting support #16088
  📝 Documentation required

• 🌉 Azure Front Door hosting integration
  New Aspire.Hosting.Azure.FrontDoor package provisions an Azure Front Door (Standard SKU) profile with endpoints, origins, and routing rules from the AppHost.
  Changes: Add Azure Front Door hosting integration #16137
  📝 Documentation required

• ⚡ Command results for resource commands
  Resource commands can now return structured output (text or JSON) via ExecuteCommandResult.Result and ResultFormat. The result flows through the entire stack: AppHost → Dashboard UI → CLI → MCP tools. HTTP-based commands can also surface response bodies.
  Changes: Add command result support for resource commands #15622, Add HTTP command result support for AppHost HTTP commands #15664

• 🌐 JavaScript (Next.js) app support with YARP
  Aspire.Hosting.JavaScript adds AddNextJsApp and publish methods (PublishAsStaticWebsite, PublishAsDockerFile), using YARP for static site serving and API reverse-proxying.
  Changes: Add JavaScript publish methods, AddNextJsApp, and switch to YARP #15736
  📝 Documentation required

• ☕ Java polyglot AppHost support
  Java polyglot AppHosts now have near-full parity with TypeScript: union types, callback ergonomics, and the full ATS pipeline surface are now generated for Java SDK consumers.
  Changes: Add Java polyglot AppHost parity #15470

• 🌐 Tracked browser logs and network capture
  New WithBrowserLogs(...) on endpoint-capable resources attaches a child resource that launches a tracked Chromium browser and streams browser console logs and network activity back into Aspire.
  Changes: Add tracked browser logs and network capture #16310
  📝 Documentation required

• 🔍 TryGetByName on IResourceCollection
  New TryGetByName extension method provides an efficient, case-insensitive resource lookup by name, replacing verbose SingleOrDefault LINQ expressions throughout the codebase.
  Changes: Add TryGetByName to IResourceCollection #16389

• 🔒 withImagePushOptions, ACA custom domain, and ConfigureEnvFile for polyglot AppHosts
  Polyglot AppHosts (TypeScript, Python, Java) gain several new capabilities: withImagePushOptions for container registry configuration, ConfigureCustomDomain for Azure Container Apps, ConfigureEnvFile for Docker app hosts, and endpoint mutation callbacks via EndpointUpdateContext.
  Changes: Add polyglot withImagePushOptions support #15809, Add polyglot ACA custom domain support #15811, Add ConfigureEnvFile support to polyglot Docker app hosts #15819, Add polyglot endpoint callback exports #15856

App Host improvements

• 🚇 Container tunnel enabled by default
  Container-to-host networking via the Aspire tunnel is now on by default, enabling containers to consume resources on the host network without requiring Docker Desktop.
  Changes: Enable container tunnel by default #14557

• 🔧 ASPIRE_ENVIRONMENT read by DistributedApplicationBuilder
  The ASPIRE_ENVIRONMENT environment variable is now honored by the AppHost itself (not just the CLI), so setting it via dotnet run, azd, or other launchers correctly configures the environment.
  Changes: Read ASPIRE_ENVIRONMENT in DistributedApplicationBuilder #16098
  📝 Documentation required

• 🔗 WithEndpoint updates existing endpoints instead of throwing
  Calling WithEndpoint, WithHttpEndpoint, or WithHttpsEndpoint with an already-registered endpoint name now updates the existing endpoint rather than throwing an exception.
  Changes: Make WithEndpoint update existing endpoints instead of throwing #16039

• 🔐 Filter endpoints from the default reference set
  Resources can exclude specific endpoints from the default reference connection string using the new endpoint filtering annotation, enabling fine-grained control over which endpoints are exposed to dependent services.
  Changes: Allow filtering endpoints from the default reference set #15558
  ⚠️ Breaking change

• 🏅 Use ASP.NET Core dev cert for DCP TLS
  If the ASP.NET Core developer certificate is available and trusted, Aspire now uses it to secure DCP communication rather than an ephemeral certificate, reducing cert trust issues on macOS and Linux.
  Changes: Use ASP.NET Core dev cert for DCP to avoid issues with ephemeral cert trust #15718

• 🤖 Support alternative TypeScript AppHost toolchains
  TypeScript AppHosts now detect and use the project's configured package manager (npm, Bun, Yarn, pnpm) for install, run, watch, and diagnostic commands instead of always defaulting to npm.
  Changes: Support alternative TypeScript AppHost toolchains #16162

• 🔑 Detect system-assigned managed identities in AzureCredentialHelper
  AzureCredentialHelper now recognizes system-assigned managed identities alongside user-assigned ones, improving Azure credential resolution in managed environments.
  Changes: Detect system-assigned managed identities in AzureCredentialHelper #15885

• 📦 Dockerfile generation ignores package.json engines.node
  Aspire no longer uses the engines.node field from package.json to select the Node.js base image version when generating Dockerfiles, avoiding incorrect version picks from compatibility ranges like >=18.0.0.
  Changes: Ignore package.json engines.node when generating Dockerfiles #16295
  ⚠️ Breaking change

App Host bug fixes

• 🐛 Fix event order during container creation
  Corrected event ordering and callback invocation during container lifecycle to prevent race conditions.
  Changes: Fix event order and callback calling during container creation #15503

• 🐛 Fix TypeScript codegen for reusable packages
  Resolved type generation issues in TypeScript SDK codegen that caused compile errors when consuming reusable packages.
  Changes: Fix TypeScript codegen typing for reusable packages #15631

• 🐛 Fix config boolean handling in aspire config
  Fixed a crash when reading boolean values from aspire.config.json and incorrect types written back on save.
  Changes: [main] Fix config boolean handling: crash on read, wrong types on write #15638

• 🐛 Fix Durable Task Scheduler ATS export annotations
  Corrected ATS export annotations for Durable Task Scheduler resources to ensure correct polyglot code generation.
  Changes: Fix Durable Task Scheduler ATS export annotations #15684

• 🐛 Fix default publish output path for TypeScript AppHosts
  TypeScript AppHost publish now writes to the correct output directory instead of an unexpected location.
  Changes: Fix default publish output path for TypeScript AppHosts #16157

• 🐛 Fix Next.js standalone Dockerfile cache permissions
  The generated Next.js standalone Dockerfile now sets correct cache directory permissions, preventing permission-denied errors during container builds.
  Changes: Fix Next.js standalone Dockerfile cache permissions #16290

• 🐛 Fix OTLP endpoint resolution in isolated mode
  When running under aspire start --isolated, the OTLP endpoint URL is now resolved correctly so services can export telemetry to the dashboard.
  Changes: Fix OTLP endpoint resolution in isolated mode #16367

⌨️ CLI

9 new features, 11 improvements, 10 bug fixes

CLI new features

• 📊 aspire dashboard command
  New aspire dashboard command starts a standalone Aspire Dashboard instance and opens it in the browser, without requiring an AppHost project.
  Changes: Add aspire dashboard CLI command #15607
  📝 Documentation required

• 💥 aspire destroy command
  New aspire destroy command tears down previously deployed Aspire environments, completing the deployment lifecycle alongside aspire publish and aspire deploy.
  Changes: Add aspire destroy command for tearing down deployed environments #16097
  📝 Documentation required

• 📚 aspire docs api command
  New aspire docs api * sub-commands expose reference documentation from aspire.dev directly in the terminal, enabling offline and quick access to API docs.
  Changes: Add aspire docs api * sub-commands to expose aspire.dev reference material #15814
  📝 Documentation required

• 📋 --list-steps flag for aspire do
  aspire do --list-steps prints all pipeline steps in topological order with their dependencies and tags, without running them — useful for inspecting what a publish pipeline will do.
  Changes: Add --list-steps flag to aspire do command #16085

• 🔗 --dashboard-url and --api-key for aspire agent mcp and aspire otel
  The aspire agent mcp and aspire otel commands now accept --dashboard-url and --api-key flags, enabling connections to external or remote dashboard instances.
  Changes: Add --dashboard-url and --api-key options to aspire agent mcp and aspire otel commands #15595

• 📐 Support F# and VB project upgrades with aspire update
  aspire update can now upgrade AppHost projects written in F# (.fsproj) and Visual Basic (.vbproj), not just C#.
  Changes: Support upgrading F# and VB projects #15799

• 🔁 PromptBinding for non-interactive CLI mode
  New PromptBinding infrastructure centralizes argument resolution in non-interactive mode, allowing CLI commands to consistently fall back to provided arguments instead of prompting when running in scripts or CI pipelines.
  Changes: Add PromptBinding infrastructure for non-interactive CLI mode #16235

• 📈 Telemetry activity tracking for app host runs
  The CLI now emits an aspire/cli/run_apphost telemetry activity that tracks app host runs with metadata like language, run duration, and resource counts.
  Changes: Add telemetry activity for running app host in CLI #16346

• 🔑 Show authentication token with dashboard URL in aspire ps
  aspire ps now includes the login token alongside the dashboard URL so users can directly authenticate when opening the dashboard from the terminal.
  Changes: Add token for Dashboard url when running aspire ps #16165

CLI improvements

• 🎨 Suppress animated banner in CI and non-interactive environments
  The CLI startup animation is no longer shown in CI pipelines or non-interactive terminals, reducing noise in automated workflows.
  Changes: Suppress animated banner auto-display in CI/non-interactive environments #14792

• 🔗 Clickable hyperlinks in CLI URL output
  All CLI URL output now uses Spectre.Console [link] markup, producing clickable hyperlinks in terminals that support OSC 8 escape sequences.
  Changes: Use Spectre.Console link markup for CLI URL output #15573

• 📊 Hierarchical publish summary with timeline
  The aspire do publish step summary now shows steps organized hierarchically with a Unicode timeline ruler and per-step duration bars, making it easier to identify bottlenecks.
  Changes: Render publish summary hierarchy and timeline #15530

• 🙈 Hide internal resources by default in describe/logs/export
  aspire describe, aspire logs, and aspire export now hide Aspire-internal resources by default. Use --include-hidden to show them.
  Changes: CLI: Hide hidden resources by default in describe/logs/export, add --include-hidden option #16146

• 🗺️ Disambiguate duplicate paths in aspire ps
  aspire ps now shows enough path context to distinguish apps with the same project name or directory suffix, preventing ambiguous output.
  Changes: Disambiguate duplicate paths in aspire ps output #16199

• 🔌 Handle describe --follow disconnects gracefully
  aspire describe --follow now reconnects automatically when the stream is interrupted rather than exiting with an error.
  Changes: Handle describe --follow disconnects #16271

• ⚠️ Warn instead of failing during aspire update when package is missing
  aspire update no longer fails hard when a package is absent from the current channel; it now emits a warning and continues.
  Changes: Warn instead of failing when a package is missing from the channel during aspire update #16337

• 🖱️ Clickable trace ID link in trace detail view
  The trace ID shown in aspire traces --trace-id detail view is now a clickable hyperlink that opens the trace directly in the dashboard.
  Changes: Make trace ID a clickable link in trace detail view #16345

• 🩺 Remove obsolete Docker Engine tunnel warning from aspire doctor
  aspire doctor no longer shows the outdated warning about Docker Engine lacking container-to-host tunnel support, since the tunnel is now enabled by default.
  Changes: Remove obsolete Docker Engine tunnel warning from aspire doctor #16343

• 📡 Enable dashboard telemetry API by default with API key auth
  The standalone dashboard now enables its telemetry API by default with API key authentication, and the CLI performs automatic token exchange so aspire otel commands work without manual configuration.
  Changes: Enable dashboard telemetry API by default with ApiKey auth and login token exchange #16326

• 🔕 Reduce CLI diagnostic log noise
  Lowered verbosity of routine diagnostic log messages in the CLI and improved process execution logging clarity.
  Changes: Reduce CLI diagnostic log noise and improve process logging #15956

CLI bug fixes

• 🐛 Fix aspire stop not cleaning up application containers
  aspire stop now correctly terminates and removes all containers associated with the running application.
  Changes: Fix issue 15806 ("aspire stop" is not cleaning up application containers) #16006

• 🐛 Fix aspire wait for JSON-emitted resource names
  aspire wait now correctly resolves resource names emitted in JSON format from the AppHost.
  Changes: Fix aspire wait for JSON-emitted resource names #16224

• 🐛 Fix aspire start --format json restart output
  The JSON output mode for aspire start no longer produces malformed output when the AppHost restarts.
  Changes: Fix aspire start --format json restart output #16228

• 🐛 Fix ANSI escape leaks in plain log and telemetry output
  ANSI color codes no longer appear in plain (non-terminal) log output or telemetry payloads.
  Changes: Fix ANSI leaks in plain logs and telemetry output #16225

• 🐛 Fix installer SHA-256 mismatch on Windows
  The Aspire CLI installer on Windows no longer fails SHA-256 validation due to MicroBuild repackaging tar.gz archives.
  Changes: Fix installer SHA-256 mismatch caused by MicroBuild repacking tar.gz on Windows #16231

• 🐛 Fix bundle extraction crash when aspire-managed.exe is locked
  The CLI no longer crashes during self-extraction when the managed bundle executable is locked by another process (e.g., antivirus or prior run).
  Changes: Fix bundle extraction crash when aspire-managed.exe is locked #15790

• 🐛 Fix migration from .aspire/settings.json to aspire.config.json
  The migration path from the old .aspire/settings.json format to aspire.config.json now correctly transfers all settings.
  Changes: Fix migration from .aspire/settings.json to aspire.config.json #15524

• 🐛 Fix aspire start failing in VS Code integrated terminal
  aspire start no longer fails when launched from the VS Code integrated terminal due to terminal environment issues.
  Changes: Fix aspire start failing in VS Code integrated terminal #15980

• 🐛 Fix install script silently swallowing file-lock errors
  The CLI install script now surfaces file-lock errors instead of silently reporting success when installation actually failed.
  Changes: Fix install script swallowing file-lock errors and reporting false success #15419

• 🐛 Fix aspire config list --all showing no features when no config exists
  aspire config list --all now correctly lists all available features even when no aspire.config.json file has been created yet.
  Changes: Fix aspire config list --all showing no features when no config exists #15821

📊 Dashboard

2 new features, 5 improvements, 4 bug fixes

Dashboard new features

• 🔔 Notification center with command response messages and markdown support
  The dashboard now has a notification center (bell icon) that shows resource command responses. Command results can include a Message field rendered as markdown, and the text visualizer also gains markdown rendering support.
  Changes: Add notification center, command response message, and markdown support to Dashboard #15906
  📝 Documentation required

• i️ State column InfoPopover with clickable links
  The resource state column now shows an information popover with contextual details and clickable links, making it easier to navigate from resource state to related diagnostics.
  Changes: Dashboard: Add InfoPopover for state column with clickable links #15996

Dashboard improvements

• 📡 Enable dashboard telemetry API by default
  The dashboard's telemetry API is now enabled by default with API key authentication. Combined with the CLI's automatic token exchange, telemetry commands (aspire otel, aspire traces, aspire logs) work against a standalone dashboard without manual configuration.
  Changes: Enable dashboard telemetry API by default with ApiKey auth and login token exchange #16326

• 🔗 Support short trace IDs
  The dashboard telemetry API now accepts and resolves shortened trace IDs, making it easier to look up traces by a partial identifier.
  Changes: Port: Simplify TelemetryApiService.GetTrace and support short trace IDs #15641

• 🏷️ Use display names in lifecycle command response messages
  Start, stop, and restart command response messages in the dashboard now use the resource's display name instead of its internal DCP resource ID.
  Changes: Use display name in lifecycle command response messages #16143

• 📊 Remove telemetry API data limits
  Removed the per-request data size limits on the telemetry API endpoints, eliminating truncation for large traces and log batches.
  Changes: Remove telemetry API data limits and refactor URL builders #16020

• 🔕 Remove MCP server and UI from the dashboard
  The experimental Model Context Protocol server and its UI have been removed from the Aspire Dashboard to reduce surface area and avoid confusion.
  Changes: Remove MCP server and UI from the dashboard #15528

Dashboard bug fixes

• 🔒 Fix open redirect security vulnerability
  Fixed an open redirect vulnerability in ValidateTokenMiddleware where an attacker-controlled returnUrl query parameter could redirect users to an external site after authentication.
  Changes: Fix open redirect vulnerability #15952

• 🐛 Fix FluentSelect/FluentCombobox value binding when options change
  FluentSelect and FluentCombobox components in interaction inputs now correctly preserve or clear their selected value when the available options list changes.
  Changes: Fix FluentSelect/FluentCombobox value binding when options change #16315

• 🐛 Fix OTLP JSON deserialization of numeric histogram bucketCounts
  The OTLP exporter (e.g., VS Code Copilot Chat) can now correctly send histogram bucketCounts as JSON numbers instead of strings, fixing parse errors from non-conforming exporters.
  Changes: Fix OTLP JSON deserialization of numeric histogram bucketCounts #16376

• 🐛 Fix language dropdown arrow-key navigation and duplicate zh-CN locale
  The language selection dropdown in dashboard settings now responds correctly to keyboard arrow keys, and the duplicate zh-CN entry has been removed.
  Changes: Fix language dropdown arrow-key behavior and duplicate zh-CN entry in dashboard settings #16094

🧩 Extensions

3 new features, 4 improvements, 2 bug fixes

Extensions new features

• 🔧 Environment variables in Aspire debug launch configuration
  The VS Code extension's Aspire debug launch configuration now supports env and args fields, allowing per-launch environment variables and arguments to be specified in .vscode/launch.json.
  Changes: Add env support to Aspire debug launch configuration #16449
  📝 Documentation required

• 🖥️ Simple Browser option for dashboard launch
  A new simpleBrowser option for aspire.dashboardBrowser in VS Code settings opens the Aspire Dashboard inside VS Code's built-in Simple Browser panel instead of the system browser.
  Changes: Add Simple Browser option for dashboard launch #15896

• 🗂️ Open Aspire Dashboard from Command Palette
  The VS Code extension now exposes an "Open Aspire Dashboard" command in the Command Palette, providing quick keyboard-driven access to the dashboard.
  Changes: Add 'Open Aspire Dashboard' to Command Palette #15499

Extensions improvements

• 🔄 Auto-restore on workspace open and config change
  The VS Code extension now automatically runs aspire restore when a workspace is opened or when aspire.config.json changes, keeping integrations up to date without manual intervention.
  Changes: VS Code extension: Auto-restore on workspace open and config change #15546

• 📊 Improved resource state indicators in gutter, code lens, and tree view
  Resource state is now shown consistently across the VS Code extension's gutter decorations, code lens items, and the Aspire tree view sidebar.
  Changes: VS Code extension: Improve gutter, code lens, and tree view resource state indicators #15688

• 🔗 Open AppHost source action in VS Code extension
  A new "Open AppHost source" action in the VS Code extension lets developers navigate directly to the AppHost project that defines a given resource.
  Changes: Add open AppHost source action to VS Code extension #15668

• 🚫 Smarter non-linkable endpoint URL detection
  Non-HTTP endpoint URLs in the extension's resource panel are now identified using a deny-list approach matching the dashboard's logic, reducing false negatives for unusual URL schemes.
  Changes: Use deny list for non-linkable endpoint URLs in extension #15894

Extensions bug fixes

• 🐛 Fix JSON-RPC error on disconnect and auto-restart debug session
  The VS Code extension no longer shows a JSON-RPC error dialog when the AppHost disconnects; the debug session now auto-restarts when the AppHost restarts.
  Changes: Fix JSON-RPC error on disconnect and auto-restart Aspire debug session on AppHost restart #14548

• 🐛 Fix CodeLens positioned inside preceding code blocks
  CodeLens items in the VS Code extension are no longer incorrectly rendered inside preceding code blocks in the editor.
  Changes: Fix CodeLens positioned inside preceding code blocks #15893

🔌 Integrations

5 new features, 2 improvements, 1 bug fix

Integrations new features

• 🗄️ EF Core migration management hosting integration
  New Aspire.Hosting.EntityFrameworkCore package adds AddEFMigrations extension methods that expose EF Core migration commands as Aspire resource commands, enabling migrations to be run from the dashboard or CLI.
  Changes: Add Aspire.Hosting.EntityFrameworkCore hosting integration for EF Core migration management #13481
  📝 Documentation required

• ⏲️ Durable Task Scheduler for Azure Functions
  The Aspire.Hosting.Azure.Functions library now supports adding Durable Task Scheduler resources, enabling local development of durable orchestrations with the Azure Functions host.
  Changes: Addition of Durable Task Scheduler resources to Azure Functions host library #13711
  📝 Documentation required

• 🔒 Private endpoint support for Azure OpenAI and Foundry
  AzureOpenAIResource and FoundryResource now implement IAzurePrivateEndpointTarget, enabling them to be connected via Azure Private Endpoints for secure, network-isolated access.
  Changes: Add IAzurePrivateEndpointTarget support to AzureOpenAIResource and FoundryResource #15945

• 📡 RabbitMQ component v7 tracing support
  Distributed tracing is now enabled by default in the Aspire.RabbitMQ.Client component when using the RabbitMQ.Client v7 library.
  Changes: Enable tracing for RabbitMQ Component (v7) #15659
  📝 Documentation required

• 🌐 Multiple DNS zones for Foundry private endpoint
  The Foundry hosting integration now provisions multiple DNS zones when configuring private endpoint connectivity, covering all required Foundry service endpoints.
  Changes: Add multiple DNS zones for Foundry private endpoint #16051

Integrations improvements

• 🧹 Remove custom Npgsql histogram view on .NET 10+
  The custom OpenTelemetry histogram view workaround for Npgsql is no longer applied on .NET 10 and later, which natively supports the required histogram configuration.
  Changes: Remove custom Npgsql histogram view on .NET 10+ #16044

• ⚠️ Deprecate Aspire.Hosting.NodeJs
  Aspire.Hosting.NodeJs is now marked as deprecated in the CLI integration listings. Users should migrate to the JavaScript-native polyglot AppHost approach.
  Changes: Deprecate Aspire.Hosting.NodeJs in CLI integration listings #15677

Integrations bug fixes

• 🐛 Fix Redis Commander container image source
  Updated the Redis Commander container image reference to ghcr.io/joeferner/redis-commander following the upstream registry migration.
  Changes: Update Redis Commander container image to ghcr.io/joeferner/redis-commander #12945

⚙️ Engineering

1 bug fix

Engineering bug fixes

• 🔐 Fix CVE-2026-26127 by updating Microsoft.Bcl.Memory
  Updated Microsoft.Bcl.Memory to 10.0.5 to address CVE-2026-26127.
  Changes: Bump Microsoft.Bcl.Memory to 10.0.5 to fix CVE-2026-26127 #15410

---

This changelog is automatically generated. Add a comment to this issue to provide
feedback (e.g., "Exclude PR #1234", "Rename: X → Y", "Merge PRs #1234 and #5678").

Generated by Milestone Changelog Generator · ● 3.6M · ◷