Release Notes

hosting-10.2.4 (2026-10-08)

Built-in heartbeat endpoint - A new HeartbeatController serves GET api/heartbeat, returning the application name, environment and current UTC timestamp. The endpoint is [AllowAnonymous], so it can be used by load balancers and monitoring probes without credentials. It is discovered automatically by any web host built on Albatross.Hosting.
UseHeartbeat toggle on Startup - A new protected bool UseHeartbeat property (default true). Set it to false in a derived Startup to remove the heartbeat controller from the application.

Optional Serilog request logging - A new protected bool LogRequests property on Startup (default false). When true, UseSerilogRequestLogging() is added to the pipeline, enriched with a User property holding the authenticated user name (or <anon>). The middleware sits outside the exception handler, so each failed request is logged once with the status code of the handled response. Override the virtual UseRequestLogging() to customize the middleware options.

First stable release of the changes listed under hosting-10.2.1, which was published only as release candidates. No additional changes.

TransformAngularConfig.UpdateBaseHref() no longer writes when the file is already correct - The index html is now compared against the transformed content and written only when the base href actually changes. Previously the writer was opened on every startup regardless of whether the regex matched anything, which threw UnauthorizedAccessException and took the host down when the app was installed in a read-only directory (under %ProgramFiles%, or served by an IIS application pool or service account identity).
Base href write failures are no longer fatal - A failure to write the index html is now logged as an error instead of propagating. In a deployed environment setting the base href is the installer's responsibility, so the app should still start.

Bumped Microsoft.AspNetCore.* and Microsoft.Extensions.Hosting.* package references to 10.0.12
Bumped Albatross.Config to 8.0.1

SourceLink moved to Albatross.Hosting.csproj - Microsoft.SourceLink.GitHub (updated to 10.0.401) is now referenced by the package project directly rather than applied to every project through Directory.Build.props.

Setup constructor signature changed - The constructor parameter bool supressUnhandledArgumentExceptionLogging has been replaced with string configRoot. Callers must pass the configuration root directory explicitly (e.g., new Setup(args, AppContext.BaseDirectory)).
Removed SupressUnhandledArgumentExceptionLogging and ConfigureLogging() - The SupressUnhandledArgumentExceptionLogging property and the virtual ConfigureLogging() override point have been removed. Serilog filtering must now be configured directly via the serilog.json configuration file.
hostsettings.json no longer loaded - Host URL configuration via hostsettings.json is no longer part of the default configuration pipeline.
Removed LogUsage and HttpRequestLoggingMiddleware - The LogUsage property on Startup, the HttpRequestLoggingMiddleware, UsageWriter, and UsageData classes have all been removed. Request logging should now be implemented using Serilog's built-in middleware or custom enrichers.

IHttpContextAccessor registered by default - services.AddHttpContextAccessor() is now called in Startup.ConfigureServices(), making IHttpContextAccessor available for injection without additional setup.
Serilog configured from serilog.json - Serilog is now configured by reading serilog.json (and serilog.{environment}.json) directly via Configuration in the Setup constructor, replacing the previous SetupSerilog.UseConfigFile() approach.
config-root constructor parameter - The base directory from which configuration files are loaded is now passed directly as the configRoot constructor argument to Setup, defaulting to AppContext.BaseDirectory.
RazorPages toggle on Startup - A new protected virtual bool RazorPages property (default false) can be overridden to enable Razor Pages support. When true, AddRazorPages() is registered and MapRazorPages() is wired into the endpoint pipeline.
RunAsync() uses await using - The bootstrap logger is now disposed asynchronously with await using for correct async teardown.

Simplified global exception handling - Removed the IGlobalExceptionHandler interface, HttpApiException, ErrorMessage, ProblemDetailsWithTraceId, LegacyGobalExceptionHandler, and ExceptionHandlerSerializationOptions classes. The global exception handler is now a sealed GlobalExceptionHandler class that serves as a fallback for unhandled exceptions. Errors should be handled explicitly using ActionResult in controller actions.
Removed GlobalExceptionHandler property from Startup - The virtual GlobalExceptionHandler property has been removed. The handler is no longer customizable via override.

Added comprehensive documentation - Migrated and expanded documentation to DocFX format:
- Authentication guide covering Kerberos and JWT Bearer token configuration
- Custom error response handling guide
- Plain text input formatter usage
- Service/daemon application development guide
- SPA hosting configuration guide
- Web API application development guide
- Request logging documentation
Enhanced README - Expanded the Albatross.Hosting README with more detailed usage examples and configuration options

Added GitHub Actions workflow - Added GitHub Pages workflow for automated documentation publishing

Upgraded to .NET 10 - The target framework has been upgraded from .NET 9 to .NET 10. All consuming projects must target .NET 10 or later.

Fixed default authentication scheme - Changed authentication configuration to use AuthenticationSettings.GetDefault() method instead of the DefaultAuthenticationScheme property for more reliable scheme resolution.
Updated OpenAPI integration - Updated to the latest OpenAPI types:
- Changed Dictionary<string, OpenApiSecurityScheme> to Dictionary<string, IOpenApiSecurityScheme>
- Changed doc.SecurityRequirements to doc.Security
- Updated to use OpenApiSecuritySchemeReference for security requirement references

Updated all dependencies to .NET 10 compatible versions: