Replace direct npm publishing with stage-only tokens, inspect the exact package, require 2FA approval, and keep release automation fail closed.
Use .NET 11 to run dotnet package update –vulnerable with TreatWarningsAsErrors, then verify the dependency diff under your full restore and test policy.
Keep direct MeterListener consumers working in .NET 11 by collecting observable HTTP metrics explicitly and verifying both client and server measurements.
Diagnose local DefaultAzureCredential timeouts, skip IMDS only in development, keep managed identity explicit in production, and verify the selected credential.
Model fixed multi-shape JSON with C# 15 unions, resolve ambiguous reads, verify OpenAPI anyOf output, and protect ASP.NET Core clients before rollout.
Pin the .NET 11 build-time OpenAPI host environment in CI, isolate generated contracts, compare drift, and block development-only endpoint leaks.
Migrate Azure Pipelines Linux container jobs to the safer Docker socket default, opt in only required jobs, and verify host-daemon access before builds.
Enable Angular 22.2 strictUnclaimedEventNames, verify NG8030 for a misspelled directive output, and enforce the compiler gate in CI.
Diagnose Azure SQL error 13618, verify EF Core’s corrected OPENJSON translation, and keep an engine-backed regression test for native JSON columns.
Audit pull_request_target workflows, evaluate narrow actor and event policies, and verify GitHub Actions workflow execution protections before November 2.
