<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>NuGet | The .NET Blog</title><link>https://thedotnetblog.com/tags/nuget/</link><description>Articles, tutorials and insights from the .NET community.</description><generator>Hugo</generator><language>en</language><managingEditor>@thedotnetblog (The .NET Blog)</managingEditor><webMaster>@thedotnetblog</webMaster><lastBuildDate>Sat, 25 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://thedotnetblog.com/tags/nuget/index.xml" rel="self" type="application/rss+xml"/><item><title>Azure SDK April 2026: AI Foundry 2.0 and What .NET Developers Should Know</title><link>https://thedotnetblog.com/posts/emiliano-montesdeoca/azure-sdk-april-2026-ai-foundry-2-stable/</link><pubDate>Sat, 25 Apr 2026 00:00:00 +0000</pubDate><author>Emiliano Montesdeoca</author><guid>https://thedotnetblog.com/posts/emiliano-montesdeoca/azure-sdk-april-2026-ai-foundry-2-stable/</guid><description>The April 2026 Azure SDK release ships Azure.AI.Projects 2.0.0 stable with significant breaking changes, critical Cosmos DB security fixes, and a wave of new Provisioning libraries for .NET.</description><content:encoded>&lt;p&gt;Monthly SDK releases are often easy to skip. This one has a few things worth paying attention to — especially if you&amp;rsquo;re building with AI Foundry, Cosmos DB in Java, or doing infrastructure provisioning from .NET code.&lt;/p&gt;
&lt;h2 id="azureaiprojects-200--breaking-changes-that-make-sense"&gt;Azure.AI.Projects 2.0.0 — Breaking Changes That Make Sense&lt;/h2&gt;
&lt;p&gt;The &lt;code&gt;Azure.AI.Projects&lt;/code&gt; NuGet package reaches stable 2.0.0 with some significant architectural changes. If you&amp;rsquo;re already using the preview, here&amp;rsquo;s what changed:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Namespace splits&lt;/strong&gt;: Evaluations moved to &lt;code&gt;Azure.AI.Projects.Evaluation&lt;/code&gt;, memory operations moved to &lt;code&gt;Azure.AI.Projects.Memory&lt;/code&gt;. Your using statements will need updating.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Renamed types&lt;/strong&gt;: &lt;code&gt;Insights&lt;/code&gt; → &lt;code&gt;ProjectInsights&lt;/code&gt;, &lt;code&gt;Schedules&lt;/code&gt; → &lt;code&gt;ProjectSchedules&lt;/code&gt;, &lt;code&gt;Evaluators&lt;/code&gt; → &lt;code&gt;ProjectEvaluators&lt;/code&gt;, &lt;code&gt;Trigger&lt;/code&gt; → &lt;code&gt;ScheduleTrigger&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Naming conventions&lt;/strong&gt;: Boolean properties now follow the &lt;code&gt;Is*&lt;/code&gt; convention consistently&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;These are the kinds of breaking changes that hurt once and then feel right forever. If you&amp;rsquo;ve been building on the preview, update your imports and let the compiler point you to the rest.&lt;/p&gt;
&lt;p&gt;The good news: it&amp;rsquo;s stable. You can actually rely on this API now.&lt;/p&gt;
&lt;h2 id="cosmos-db-java-critical-security-fix-rce"&gt;Cosmos DB Java: Critical Security Fix (RCE)&lt;/h2&gt;
&lt;p&gt;This one is serious. The Java Cosmos DB library (&lt;code&gt;azure-cosmos&lt;/code&gt;) version 4.79.0 includes a critical security fix for a &lt;strong&gt;Remote Code Execution vulnerability (CWE-502)&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;The issue was Java deserialization in &lt;code&gt;CosmosClientMetadataCachesSnapshot&lt;/code&gt;, &lt;code&gt;AsyncCache&lt;/code&gt;, and &lt;code&gt;DocumentCollection&lt;/code&gt;. The fix replaces Java deserialization with JSON-based serialization, eliminating the entire class of deserialization attacks.&lt;/p&gt;
&lt;p&gt;If you have any Java services using Azure Cosmos DB, update to 4.79.0 immediately. This isn&amp;rsquo;t optional.&lt;/p&gt;
&lt;h2 id="new-provisioning-libraries-for-net"&gt;New Provisioning Libraries for .NET&lt;/h2&gt;
&lt;p&gt;A wave of stable Provisioning libraries hit 1.0.0 this month — these are the libraries that let you define Azure infrastructure in C# code rather than ARM templates or Bicep:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://www.nuget.org/packages/Azure.Provisioning.Network/1.0.0"&gt;Azure.Provisioning.Network 1.0.0&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://www.nuget.org/packages/Azure.Provisioning.PrivateDns/1.0.0"&gt;Azure.Provisioning.PrivateDns 1.0.0&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Several more are in beta.1, covering API Management, Batch, Compute, Monitor, MySQL, and Security Center. If you&amp;rsquo;re doing infrastructure-as-code from .NET — particularly with Aspire deployments — these libraries are your entry point.&lt;/p&gt;
&lt;h2 id="azure-ai-agents-java-200-ga"&gt;Azure AI Agents Java: 2.0.0 GA&lt;/h2&gt;
&lt;p&gt;The Java Azure AI Agents library also reaches general availability this month. The key breaking changes:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Several enum types converted to &lt;code&gt;ExpandableStringEnum&lt;/code&gt;-based classes (more flexible for new values)&lt;/li&gt;
&lt;li&gt;&lt;code&gt;*Param&lt;/code&gt; model classes renamed to &lt;code&gt;*Parameter&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;code&gt;MCPToolConnectorId&lt;/code&gt; → &lt;code&gt;McpToolConnectorId&lt;/code&gt; (consistent casing)&lt;/li&gt;
&lt;li&gt;New convenience overload for &lt;code&gt;beginUpdateMemories&lt;/code&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id="wrapping-up"&gt;Wrapping up&lt;/h2&gt;
&lt;p&gt;The headline for .NET developers this month is &lt;code&gt;Azure.AI.Projects 2.0.0&lt;/code&gt; hitting stable — if you&amp;rsquo;re building with AI Foundry, now&amp;rsquo;s the time to pin to stable and update your imports. For Java shops using Cosmos DB, the security update is urgent.&lt;/p&gt;
&lt;p&gt;Full release notes at &lt;a href="https://aka.ms/azsdk/releases"&gt;aka.ms/azsdk/releases&lt;/a&gt;. Original post: &lt;a href="https://devblogs.microsoft.com/azure-sdk/azure-sdk-release-april-2026/"&gt;Azure SDK Release (April 2026)&lt;/a&gt;.&lt;/p&gt;</content:encoded></item></channel></rss>