polly

Polly.Core 8.8.1 starts the circuit breaker's background loop under ExecutionContext.SuppressFlow, so a long-lived pipeline stops pinning the AsyncLocal values of whoever built it. A 15-line repro shows the leak on 8.8.0 and the fix on 8.8.1.

A DelegatingHandler registered before AddStandardResilienceHandler runs once per logical request, not once per retry. Move it after the resilience handler, and make it idempotent, because the retry re-sends the same HttpRequestMessage. Measured on Microsoft.Extensions.Http.Resilience 10.10.0 and 8.10.0.

Polly 8.8.0 adds EnableReloadsWithMonitor, so a resilience pipeline can hot-reload from a feature flag or remote config monitor that is not registered in DI. A probe shows the rebuild, and one trap: context.GetOptions still reads the DI monitor and returns defaults.

Aspire's AddServiceDefaults applies a standard resilience handler to every HttpClient. Calling AddStandardResilienceHandler again stacks a second one instead of replacing it. Here are the three real override paths, the -standard options name nobody documents, and the infinite timeout you inherit if you just remove it.

Use the Microsoft.Extensions.Http.Resilience handler for HttpClient calls, since it is Polly with HTTP-aware defaults and telemetry in one line. Reach for Polly's ResiliencePipeline directly only when you protect something that is not an HttpClient.