NuGet 5.7 Release Notes
NuGet distribution vehicles:
| NuGet version | Available in Visual Studio version | Available in .NET SDK(s) |
|---|---|---|
| 5.7.0 | Visual Studio 2019 version 16.7 | 3.1.4011 |
| 5.7.1 | Visual Studio 2019 version 16.7 | 3.1.4081 |
| 5.7.2 | N/A | 3.1.4201 |
| 5.7.3 | N/A | 3.1.4241 |
1 Installed with Visual Studio 2019 with .NET Core workload
Summary: What's New in 5.7.3
- [Security]: Microsoft Security Advisory CVE-2022-41032 | .NET Elevation of Privilege Vulnerability - #12149
Summary: What's New in 5.7.2
- [Security]: Microsoft Security Advisory CVE-2022-30184 | .NET Information Disclosure Vulnerability - #11883
Summary: What's New in 5.7
Features added in this release
Added extern alias support for NuGet package references - #4989
Made switching between Installed and Updates tabs faster by allowing them to share a data source and reducing resfreshing - #8294
Make restore faster - speed up evaluations by calling MSBuild Static Graph apis (dotnet.exe) - #9644
Added Visual Studio partial restore for PackageReference projects (no-op++) - #9513
Visual Studio Package Manager UI will crash less often when searching misbehaving package sources that return more than the requested number of results per HTTP request. - #8478
Added integration of PackageVersion information for non-SDK style projects in VS restore - #9236
Added support for nuget.exe update
-self -Sourcehttps://feed - #1783Added support for multiple config files in %APPDATA%\NuGet directory - #9394
DeterministicSourcePaths now takes NuGet source packages into account - #9431
Added INuGetProjectService.GetInstalledPackagesAsync extensibility API - #9702
Added interop API to enumerate fallback folders without requiring a solution/project - #9395
Added
latestoption for-MSBuildVersion- #8808
Issues fixed in this release
Bugs:
In a dotnet CLI restore, when launching credential plugins, try the dotnet CLI on the system path if the
DOTNET_HOST_PATHenvironment variable is not defined. - #7438nuget.exe spec generates a copyright tag with hard-coded text of Copyright YYYY Instead of
$copyright$- #8696NuGet.exe throws exception 'authors required' during pack of a csproj ignoring placeholders and assemblyinfo attributes if the assembly name is changed - #4234
HttpRequestMessage gets reused multiple times which is not supported with the SocketHttpHandler - #8661
NuGet.Indexing 5.6.0 preview 3 and later use a different public key token - #9481
Honor TreatWarningsAsErrors during NuGet Package creation - #7404
[CPVM] Spurious package downgrades for multiple p2p projects - #9549
The “Browse” tab is not aligned left with search box - #9559
The installed version is inconsistent with the embedded icon in the solution level PM UI for one package id with multiple versions installed - #9321
Leak: PartCreationPolicy(CreationPolicy.NonShared) NuGet.SolutionRestoreManager.RestoreOperationLogger - #9595
Avoid reading the assets file in no-op restores - #9693
NuGet.Protocol does not support getting a version's download count from search - #9086
Improve memory performance of PackageMetadataResourceV3 by reducing the JObject dependencies - #9719
Design change requests:
Suppressed the
<owners>element when it is redundant - #5134Log IntervalTrackers as ETW events - #9593
Added an informational message on restore to inform CPVM users that the feature is in preview - #9340
Populate Solution Explorer package/project transitive dependencies from assets file - #9580
Installed packages tab shouldn't paginate the packages list - #6995
List of all issues fixed in this release - 5.7
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
| Who | PRs | Issues |
|---|---|---|
| campersau | 3433, 3120 | NuGet.Protocol does not support getting a version's download count from search - #9086 HttpRequestMessage gets reused multiple times which is not supported with the SocketHttpHandler - #8661 |
| Joseph Musser (jnm2) | 3241 | Suppressed the <owners> element when it is redundant - #5134 |
| Volodymyr Shkolka (BlackGad) | 3273 | NuGet cannot restore from HTTPS sources that require Client Certificates - #5773 |
| Marius Ungureanu (Therzok) | 3357 | HttpSourceAuthenticationHandler SemaphoreSlim future proofing - #9463 |
| Sunner (SuNNjek) | 3088 | nuget.exe spec generates a copyright tag with hard-coded text of Copyright YYYY Instead of $copyright$ - #8696 |
| Olivier Spinelli (olivier-spinelli) | 3335 | In a dotnet CLI restore, when launching credential plugins, try the dotnet CLI on the system path if the DOTNET_HOST_PATH environment variable is not defined. - #7438 |
| goyzhang | 3370 | Added latest option for -MSBuildVersion - #8808 |
Summary: What's New in 5.7.1
Extend the .nupkg.metadata file to include the installation source - #10354
Log package contenthash during restore logging (during extraction) - #10384
When restoring at normal verbosity, log which source a package is being restored from - #10461