Skip to content

Clarify the post-OSMF Polly strategy for Microsoft.Extensions.Resilience #7719

Description

@Arithmomaniac

Drafted with assistance of GitHub Copilot

Polly will adopt the Open Source Maintenance Fee for maintained binary releases beginning November 16, 2026.

This directly affects the .NET resilience packages:

  • Microsoft.Extensions.Resilience explicitly references Polly packages.
    This alone requires Microsoft to take an OSMF license.
  • Microsoft.Extensions.Resilience and Microsoft.Extensions.Http.Resilience expose Polly types through stable public APIs, including ResilienceContext, ResiliencePipeline<T>, Outcome<T>, and Polly strategy option classes.
    Although Polly is transitive in the package graph, that source-level use may be considered direct for our users. The current OSMF guidance indicates that is not the case via its examples re: using statements, but it is not airtight.

Could the maintainers clarify:

  1. Whether these packages will continue using official Polly binaries after November 16, with Microsoft licensing Polly.
  2. Whether Microsoft is considering temporarily freezing the Polly version, building it from source, maintaining or adopting a fork, replacing it, or redesigning the affected APIs.
  3. Whether consumers using exposed Polly types remain (or not) covered by the transitive-dependency exemption or be covered (or not) by custom Microsoft licensing.

A freeze may be a reasonable temporary measure, but it needs a servicing policy and an exit plan. Community forks such as Fences are beginning to appear, but none is yet an established replacement.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions