Package Manager

Performance and Polish with NuGet 5.9

Getting started with NuGet 5.9

NuGet 5.9 is included in Visual Studio 16.9 and .NET 5.0 out of the box. You can also download NuGet 5.9 for Windows, macOS, and Linux as a standalone executable.

NuGet 5.9 is one of many releases in our .NET unification journey.
The post Performance and Polish with NuGet 5.9 appeared first on The NuGet Blog.
Nuget

How to Scan NuGet Packages for Security Vulnerabilities

Open Source is everywhere. It is in many proprietary codebases and community projects. For organizations and individuals, the question today is not whether you are or are not using open-source code, but what open-source code you are using, and how much.
The post How to Scan NuGet Packages for Security Vulnerabilities appeared first on The NuGet Blog.
Nuget

State of the NuGet Ecosystem

Introduction

Over the last six months, the NuGet team has been busy running user surveys for NuGet and the .NET ecosystem. Recently, our team launched our first quarterly user survey for NuGet.org. With over 500 responses, we wanted to spend some time to share with you what we’ve learned in these last few months.
The post State of the NuGet Ecosystem appeared first on The NuGet Blog.
Nuget

The NuGet.org repository signing certificate will be updated as soon as March 15th, 2021

Action required: If you validate that packages are repository signed by NuGet.org using a NuGet client policy, NuGet.exe verify command, or the dotnet nuget verify command, please follow these steps by March 15th, 2021 to avoid potential disruptions when installing new NuGet.org packages.
The post The NuGet.org repository signing certificate will be updated as soon as March 15th, 2021 appeared first on The NuGet Blog.
Nuget

Happy 10th Birthday, NuGet!

NuGet 1.0 was released on January 13th, 2011 – 10 years and 4 major version releases ago. Since then, NuGet.org has grown to host a large and vibrant package ecosystem with over 230 thousand unique packages.

To illustrate just much how the .NET ecosystem has grown,
The post Happy 10th Birthday, NuGet! appeared first on The NuGet Blog.
Nuget

Custom V2 OData queries will be deprecated March 9, 2021

We announced the deprecation of custom V2 OData queries (#37) last year and conducted a dry run in early November to ensure that there are no surprises for users. Going forward, we plan to bring all new features and improvements only to the newer V3 APIs.
The post Custom V2 OData queries will be deprecated March 9, 2021 appeared first on The NuGet Blog.
Nuget

Getting Started With NuGet 5.8

Getting started with NuGet 5.8

NuGet 5.8 is included in Visual Studio 16.8 and .NET 5.0 out of the box. You can also download NuGet 5.8 for Windows, macOS, and Linux as a standalone executable.

NuGet 5.8 is one of many releases in our .NET unification journey.
The post Getting Started With NuGet 5.8 appeared first on The NuGet Blog.
Nuget

The Microsoft author signing certificate will be updated as soon as November 1st, 2020

Action required: If you validate that packages are author signed by Microsoft using a NuGet client policy or the NuGet.exe verify command, please follow these steps by November 1st, 2020 to avoid potential disruptions when installing new Microsoft packages. If you are unsure,
The post The Microsoft author signing certificate will be updated as soon as November 1st, 2020 appeared first on The NuGet Blog.
Nuget

View dependent packages on NuGet.org

There are several ways to evaluate packages on NuGet.org, such as download statistics, update frequency, owner reputation, GitHub Usage, and more.

Today, we’re excited to announce that you can now view dependent packages in the Used By section, yet another major improvement to the package evaluation experience!
The post View dependent packages on NuGet.org appeared first on The NuGet Blog.
Nuget

Advanced search on NuGet.org

We are excited to announce that NuGet.org now supports one of our top customer asks – advanced search! You can now use a multitude of sorting and filtering criteria to help find the best NuGet packages for your needs!

What’s new?
The post Advanced search on NuGet.org appeared first on The NuGet Blog.
Nuget

NuGet.org will permanently remove support for TLS 1.0 and 1.1 on June 15th

Last November, we shared our two-stage plan for deprecating TLS 1.0/1.1 on NuGet.org in which we stated that the permanent removal of TLS 1.0/1.1 support would occur in April 2020. However, in April, to avoid disrupting customers in the midst of the COVID-19 pandemic,
The post NuGet.org will permanently remove support for TLS 1.0 and 1.1 on June 15th appeared first on The NuGet Blog.
Nuget

Sitecore SolR Sorting Challenge

As I promised in my last post (please read it first) here is a solution to address the SolR sorting issues. The Problem The issue is that different pages, usually have different date fields to represent how they should be sorted and if we want to adher...
Sitecore

Usergroup: Developing Sitecore code under Docker

I presented a session at the London and Manchester user groups recently, where I talked about what I needed to do in order to get started developing Sitecore code under Docker. Containers are a hot topic right now, so having had to do some work on this...
Sitecore

Viewing Asset XMP Data in Sitecore Content Hub

In this post, we will cover extracting and viewing digital asset information embedded into files using the Extensible Metadata Platform (XMP) standard. We’ll take a look at the steps needed to extract the information and view it as part of the di...
Sitecore

NuGet.org will continue to support TLS 1.0 and 1.1 until further notice

Last November, we shared our two-stage plan for deprecating TLS 1.0/1.1 on NuGet.org and actions you can take today to ensure your systems use TLS 1.2. In that post, we announced that NuGet.org would remove support for TLS 1.0/1.1 in April 2020.
The post NuGet.org will continue to support TLS 1.0 and 1.1 until further notice appeared first on The NuGet Blog.
Nuget

Deprecating TLS 1.0 and 1.1 on NuGet.org – Stage 1

Last November, we shared our two-stage plan for deprecating TLS 1.0/1.1 on NuGet.org and actions you can take today to ensure your systems use TLS 1.2. In this post, we will go into more details and a specific timeline for Stage 1 i.e.
The post Deprecating TLS 1.0 and 1.1 on NuGet.org – Stage 1 appeared first on The NuGet Blog.
Nuget

Deprecating TLS 1.0 and 1.1 on NuGet.org

co-authored by Scott Bommarito

At Microsoft, using the latest and secure encryption techniques is very important to us to ensure the security and privacy of our customers. TLS 1.0 and TLS 1.1, released in 1999 and 2006 respectively, are known to be vulnerable to a number of attacks including POODLE and BEAST.
The post Deprecating TLS 1.0 and 1.1 on NuGet.org appeared first on The NuGet Blog.
Nuget

Deprecating packages on nuget.org

We are excited to announce that nuget.org now supports package deprecation. This has been a long standing ask that will help the ecosystem use supported packages. As a package publisher on nuget.org, you can now deprecate packages that are obsolete, legacy,
The post Deprecating packages on nuget.org appeared first on The NuGet Blog.
Nuget

New and improved NuGet Search is here!

It’s been a long time coming, and today we are excited to announce the new and improved search on NuGet.org leveraging Azure Search. We want to start this post with a huge thanks to you, the NuGet community, for providing feedback.
The post New and improved NuGet Search is here! appeared first on The NuGet Blog.
Nuget

Surfacing GitHub Usage for packages on NuGet.org

There are several criteria you can use today to evaluate NuGet packages. We received feedback that you would like even more information to help choose the right packages. We’re excited to introduce GitHub Usage on nuget.org, which allows you to explore top GitHub repositories that depend on the package you are looking at.
The post Surfacing GitHub Usage for packages on NuGet.org appeared first on The NuGet Blog.
Nuget

NuGet Spring 2019 Roadmap

We published our last NuGet roadmap in June last year. Many of the features announced were major additions to NuGet and we have been hard at work to implement those over the last few months. In this post, we will start by summarizing the features we have completed and then peek into the next wave of work planned.
The post NuGet Spring 2019 Roadmap appeared first on The NuGet Blog.
Nuget

Enable repeatable package restores using a lock file

With PackageReference, NuGet always tries to produce the same closure of package dependencies if the input package reference list has not changed. However, there are a few scenarios where it may not be able to do so. While these cases are limited,
The post Enable repeatable package restores using a lock file appeared first on The NuGet Blog.
Nuget

Lock down your dependencies using configurable trust policies

For the past several months we have focused on various features to improve package security and trust. Around a year back, we had announced our plans on various signing functionalities that we have been implementing at a steady pace. We enabled package author signing and NuGet.org repository signing earlier this year.
The post Lock down your dependencies using configurable trust policies appeared first on The NuGet Blog.
Nuget

Improved package debugging experience with the NuGet.org symbol server

Starting today, you can publish symbol packages to the NuGet.org symbol server. With NuGet.org as a single service provider for libraries and symbols, package authors and consumers will have a streamlined publishing and consumption experience. With a single place for managing authentication and identity,
The post Improved package debugging experience with the NuGet.org symbol server appeared first on The NuGet Blog.
Nuget

Introducing Source Code Link for NuGet packages

NuGet.org now supports surfacing source code repository link for NuGet packages. This will enable package authors to surface both the project’s website and the source repository using the projectUrl and the repository properties respectively instead of having to choose between the two using just the projectUrl property.
The post Introducing Source Code Link for NuGet packages appeared first on The NuGet Blog.
Nuget