Microsoft will limit new NuGet API keys to 30 days from August 17, 2026, as it strengthens software supply-chain security.