NuGet: baixar versions anteriors

Summary: What's New in 7.9.0
Breaking changes
- SearchFilter changing PackageTypes to PackageType - #14941
- Add nullable annotations to NuGet.Protocol - #14851
- Add deprecation warning for monoandroid TFMs - #14828
- Report real transitive reference versions in dotnet nuget why, not final resolved versions - #13752
Issues fixed in this release
Restore
- Inconsistent restore results based on restore order - #13326
- dotnet restore/build should work correctly when its MSBuild tasks run repeatedly and in the same process - #14958
- Restore will start checking audit sources are secure HTTPS - #14962
- nuget.exe restore -MSBuildPath crashes when pointing it to .NET SDK directory - #14844
- RestoreLockedMode=true & RestoreForceEvaluate=true should error - #8222
CLI
- Revisit deterministic pack - #8601
- Use a deterministic order for files when calculating psmdcp hash - #14916
- Capability discovery for SearchFilter.PackageTypes across PackageSearchResource implementations - #14936
- Don't require the usage of RootCommand to wire up the NuGet System.CommandLine commands - #14939
- static graph restore doesn't handle relative paths for RestoreSource correctly - #14904
- Show certificate CRL and OCSP URLs in dotnet nuget verify output - #14780
- dotnet nuget why on non-sdk style project's assets file doesn't work - #14695
- dotnet add package incorrectly adds PrivateAssets to the PackageVersion item - #14601
Package Manager UI in Visual Studio
- Installed packages load all version info before returning, taking a long time to load on slow feeds - #14964
- [Bug Bash] The vulnerable warning icon shows incorrectly on the right panel of "Installed" tab in solution-level PM UI - #14322
- [Bug Bash] The warning icon on the right of installed vulnerable package version doesn’t show for the lower version in "Installed" tab and “Consolidate” tab of solution-level PM UI - #14024
- [Bug Bash] The status of the new installed package which doesn’t match the package pattern was shown incorrectly in ‘Browse’ tab - #14923
- The error “the JSON value could not be converted to System.Int64” occurs when selecting a valid devops source in the ‘Package Source’ dropdown list on PM UI - #14943
- [Bug Bash][Unstable] An error “A project with ID ‘XXXXXXX-XXXXXXX’ was not found” occurred after installing a package with PackageReference format into a Console App (.NET Framework 4.8.1) - #12397
NuGet SDK
- [Epic]Migrate NuGet client libraries from Newtonsoft.Json to System.Text.Json deserialization - #14846
- Annotate Newtonsoft.Json deserialization code path - #14934
NuGet MCP Server
- The NuGet Solver tool is still unavailable after the NuGet MCP Server is enabled from MCP Server Manager - #14912
Engineering
- Remove unused Package Reference upgrade InfoBar in PM UI - #14968
- RuntimeEnvironmentHelper: remove Lazy for basic platform checks - #14951
- Remove feature switch || runtime check() used in nuget.client repo - #14944
- Failed to update binding redirects error needs more information - #14940
- Remove PackageSearchResourceV3(NuGet.Protocol.RawSearchResourceV3 searchResource) constructor - #14935
- Migrate NuGet's dotnet CLI commands to System.CommandLine - #14848
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- OvesN
- 7537 Mark GetRestoreProjectStyleTask as MSBuild-multithreadable
- 7534 Mark WarnForInvalidProjectsTask as MSBuild-multithreadable
- 7536 Migrate GetRestoreProjectReferencesTask to the multithreadable model
- JanProvaznik
- 7509 Annotate trivial Nuget.Build.Tasks for multithreadable MSBuild execution
- 7508 Bump MSBuild to 18.6.3 for NET compilation of Nuget.Build.Tasks.dll
- sbomer
- 7511 Skip NU1703 for empty MonoAndroid assets
- omajid
- 7410 Make PackageBuilder.CalcPsmdcpName deterministic
- liliankasem
- 7395 Fix package type query parameter for V3 search, add capability check
- nareshjo
- 7405 Fix VS allocation issue: NuGet restore content-file glob

Summary: What's New in 7.6.0
- Treat TargetFramework(s) values as aliases - #5154
- This feature enables building for the same framework multiple times, enabling scenarios such as generating runtime specific assemblies for the same target framework, as well as making running benchmarks on different versions of the same package easier.
- Learn more about TargetFramework aliases
- Pack is aliased-framework-aware - #14751
- When a project has multiple TargetFramework aliases that resolve to the same framework, dotnet pack now detects the ambiguity and raises NU5051 with an actionable error message instead of producing unexpected output.
- Package management APIs for file-based apps - #14390
- NuGet now exposes APIs that dotnet package add, list, remove, and update use for file-based apps that reference packages with #:package directives in C# source files.
- Read push API key from environment variable - #12539
- dotnet nuget push can now read the API key from an environment variable, avoiding the need to pass secrets on the command line or store them in configuration files.
Issues fixed in this release
- nuget push sends CI platform in user-agent header - #14740
- nuget.exe push now includes the CI platform (Azure DevOps, GitHub Actions, and others) in the HTTP user-agent header, allowing package sources to identify where pushes originate.
- dotnet add package --no-restore with Central Package Management no longer produces NU1008 - #12552
- When using Central Package Management, dotnet add package --no-restore now correctly adds the PackageReference without a Version attribute instead of producing a restore error.
- Fix Add-Migration error in Package Manager Console - #14862
- Running Add-Migration in the NuGet Package Manager Console no longer throws a "GetProjectFromHierarchy must be called on the UI thread" error.
- NuGetAuditSuppress with packages.config now supports multiple suppressions - #14825
- Previously, only the first NuGetAuditSuppress entry was honored in packages.config projects. All suppressions are now applied correctly.
- Fix context menu theming on Package Manager UI search box - #14799
- The right-click context menu on the search control in the NuGet Package Manager UI now follows the Visual Studio color theme.
- Fix NuGetProjectServiceV1 for out-of-process consumers - #14732
- The NuGetProjectServiceV1 brokered service now uses the correct serialization settings, making it usable from out-of-process Visual Studio extensions.
- Fix context menu theming on Package Manager UI copy menus - #14704
- The right-click copy context menus in the Package Manager UI Package Details tab now follow the Visual Studio color theme.
- dotnet list package --vulnerable now shows vulnerabilities for deprecated packages - #14477
- Previously, vulnerability information was not displayed for package versions that were both vulnerable and deprecated. Both statuses are now reported.
- dotnet list package resolves conditional TargetFramework values correctly - #14339
- dotnet list package no longer fails when a project uses a TargetFramework property value that matches a real framework moniker, such as net9.0-windows with conditional PackageReference elements.
- Improved NU1107 error message with Central Package Management and transitive pinning - #12277
- The NU1107 version conflict error now provides relevant guidance when Central Package Management with transitive pinning is enabled, instead of suggesting actions that don't apply in that configuration.
- Fix NU1004 for cross-framework references with locked mode - #12010
- Restoring with --locked-mode no longer produces a false NU1004 error when a .NET project references a .NET Framework project.
- Fix intermittent "Failed to resolve SDK" error during parallel restores - #10935
- Parallel dotnet restore processes no longer intermittently fail with "Failed to resolve SDK" when the package is already installed in the global packages folder.
List of commits in this release
Community co

Summary: What's New in 7.3.0
- Support for managing audit sources in Visual Studio options UI - #13955
- Manage NuGet Packages in vulnerability gold bar could take you to a view with vulnerability filter selected - #13050
- Vulnerability InfoBar in Visual Studio now has "How to fix with GitHub Copilot" link to NuGet's MCP Server documentation - #14680
- Add dotnet nuget download command - #12513
Issues fixed in this release
- Use a deterministic order for adding files to nuget packages - #14448
- Audit Sources region is collapsed until needed in VS Options - #14665
- IAssetsLogMessage.TargetGraphs and IRestoreLogMessage.TargetGraphs should use the alias TargetFramework instead of the effective target framework - #14528
- [Localization] The string ‘Machine-wide package sources are provisioned by Visual Studio workloads and can only be enabled or disabled’ was not localized - #14716
- [Localization] The string ‘Use separate sources for vulnerability audit’ in ‘Options->NuGet Package Manager->Package Sources’ page was not localized - #14715
- Tooltips are not appearing via keyboard navigation on Package List - #14683
- Package Owners are no longer separated with a space in the Package Item ToolTip - #14682
- No warning NU1905 shows when no audit sources are configured however the info said it would in Options->NuGet Package Manager->Package Sources->Audit source part - #14678
- Static graph restore with duplicate PackageVersion crashes - #14676
- dotnet list package error Sequence contains no matching element targeting netcoreapp3.1 when package with build targets that fails the build is part of the deps - #14670
- NuGet.Packaging should reference System.Security.Cryptography.Pkcs v8 for net8.0 targets - #14636
- "Clear NuGet local resources" button is hidden until NuGet VSIX loads - #14625
- Dependency resolver allocating and resizing HashSet - #14611
- NuGetEnvironment.GetFolderPath should cache results - #14602
- Use TargetAlias in AssetsFileDependencies snapshot - #14584
- LockFileTarget and IRestoreTargetGraph are labeled with an alias - #14577
- Cannot set updatePackageLastAccessTime config via dotnet nuget config set - #14576
- dotnet package update should support multiple projects - #14309
- Migrator (PC to PR) shouldn't suggest using project.json project - #14240
- Include prerelease checkbox is truncated in PM UI for any width - #14221
- dotnet restore fails to invalidate lock file and produce puzzling error messages - #14198
- dotnet list package --format=json outputs warning "(A) : Auto-referenced package." - #13080
- [Bug Bash] The vulnerability filter “show only vulnerable” checkbox is truncated when the PM UI width is not wide enough to display all controls - #13002
- [Bug]: NuGet.Common.dll RuntimeEnvironmentHelper.GetIsMacOSX throws a first-chance exception - #11433
- [Bug]: KeyNotFoundException in LockFileBuilder.CreateLockFile - #11028
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- SimonCropp
- 6719 Remove un used parameters
- 6716 Avoid the perf hit of using linq .Count()
- 6721 Remove un used members
- omajid
- 6963 Ensure stable order of files in the nuget package
- nareshjo
- 6994 Prevent dictionary allocations in LockFileItem.Equals
- bradselw
- 6924 Addressing SFI-ES2.1.2 in DartLab pipelines
- dkurepa
- 6951 Set source tag to VMR main

Summary: What's New in 7.3.0
- Support for managing audit sources in Visual Studio options UI - #13955
- Manage NuGet Packages in vulnerability gold bar could take you to a view with vulnerability filter selected - #13050
- Vulnerability InfoBar in Visual Studio now has "How to fix with GitHub Copilot" link to NuGet's MCP Server documentation - #14680
- Add dotnet nuget download command - #12513
Issues fixed in this release
- Use a deterministic order for adding files to nuget packages - #14448
- Audit Sources region is collapsed until needed in VS Options - #14665
- IAssetsLogMessage.TargetGraphs and IRestoreLogMessage.TargetGraphs should use the alias TargetFramework instead of the effective target framework - #14528
- [Localization] The string ‘Machine-wide package sources are provisioned by Visual Studio workloads and can only be enabled or disabled’ was not localized - #14716
- [Localization] The string ‘Use separate sources for vulnerability audit’ in ‘Options->NuGet Package Manager->Package Sources’ page was not localized - #14715
- Tooltips are not appearing via keyboard navigation on Package List - #14683
- Package Owners are no longer separated with a space in the Package Item ToolTip - #14682
- No warning NU1905 shows when no audit sources are configured however the info said it would in Options->NuGet Package Manager->Package Sources->Audit source part - #14678
- Static graph restore with duplicate PackageVersion crashes - #14676
- dotnet list package error Sequence contains no matching element targeting netcoreapp3.1 when package with build targets that fails the build is part of the deps - #14670
- NuGet.Packaging should reference System.Security.Cryptography.Pkcs v8 for net8.0 targets - #14636
- "Clear NuGet local resources" button is hidden until NuGet VSIX loads - #14625
- Dependency resolver allocating and resizing HashSet - #14611
- NuGetEnvironment.GetFolderPath should cache results - #14602
- Use TargetAlias in AssetsFileDependencies snapshot - #14584
- LockFileTarget and IRestoreTargetGraph are labeled with an alias - #14577
- Cannot set updatePackageLastAccessTime config via dotnet nuget config set - #14576
- dotnet package update should support multiple projects - #14309
- Migrator (PC to PR) shouldn't suggest using project.json project - #14240
- Include prerelease checkbox is truncated in PM UI for any width - #14221
- dotnet restore fails to invalidate lock file and produce puzzling error messages - #14198
- dotnet list package --format=json outputs warning "(A) : Auto-referenced package." - #13080
- [Bug Bash] The vulnerability filter “show only vulnerable” checkbox is truncated when the PM UI width is not wide enough to display all controls - #13002
- [Bug]: NuGet.Common.dll RuntimeEnvironmentHelper.GetIsMacOSX throws a first-chance exception - #11433
- [Bug]: KeyNotFoundException in LockFileBuilder.CreateLockFile - #11028
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- SimonCropp
- 6719 Remove un used parameters
- 6716 Avoid the perf hit of using linq .Count()
- 6721 Remove un used members
- omajid
- 6963 Ensure stable order of files in the nuget package
- nareshjo
- 6994 Prevent dictionary allocations in LockFileItem.Equals
- bradselw
- 6924 Addressing SFI-ES2.1.2 in DartLab pipelines
- dkurepa
- 6951 Set source tag to VMR main

Summary: What's New in 6.14.0
- (preview feature) NuGet onboards to Unified Settings and create General page - #14040
- Support for new slnx solution format - #14034
- dotnet-nuget-push now supports --config-file - #4879
- dotnet list package --vulnerable should support auditSources - #13767
- [DCR]: Focus shifts from Output window to Error List after every package operation, even with no error or warnings - #11728
Issues fixed in this release
- Event tracing in new dependency resolver - #14134
- Support for new slnx format in static graph-based restore - #14086
- Add Net90 to FrameworkConstants.CommonFrameworks - #14067
- Don't show usage help when dotnet cli command throws unhandled exception - #14200
- Multiple callers check for NuGet entries before calling Error List BringToFrontIfSettingsPermitAsync - #14163
- NuGetAudit should report transitive packages with vulnerabilities when targeting .NET 10 or higher - #14161
- Update README preview to render with same font size as Visual Studio - #14112
- NU5100 (AssemblyOutsideLibWarning): Why build is allowed but buildTransitive is not? - #14080
- Can't copy the text from NuGet package manager gold bar - #14074
- NuGet 6.13.2.1 does no longer support prerelease versions - #14219
- Badly specified framework leads to an uninformative error - #14216
- Restore should fail more quickly when using http sources - #14210
- README spins indefinitely if the Readme URI does not result in a readme - #14201
- Error in Visual Studio if Path contains directory you do not have permission to view - #14192
- list package doesn't work with a solution argument in 9.0.201 - #14177
- Focus shifts from Output window to Error List after Clear NuGet Locals command - #14157
- NuGet adding a bunch of generally unuseful information to VS activity log - #14153
- NuGet authentication plug-in discovery fails when environment variable has trailing semicolon - #14144
- nuget.exe fails to find Microsoft.VisualStudio.SolutionPersistence.dll - #14136
- NuGet restore writes dgspec too frequently - #14135
- dotnet list package does not display resolved versions when AuditSources are used - #14116
- The REAMDE tab always shows “Loading README” for the latest version of the package in the detail panel of PM UI - #14098
- [Bug Bash] The second time clicking ‘Installed’ tab for a remote source which doesn’t allow for downloading a README shows the README tab - #14097
- HttpFileSystemBasedFindPackageByIdResource.ConsumeFlatContainerIndexAsync allocates significantly more than necessary - #14095
- UnresolvedMessages.GetMessageAsync is allocating more heavily than necessary - #14094
- New dependency resolver does not properly detect a cycle with a transitive dependency with the same name as the root project - #14052
- dotnet nuget why does not give an error if only a project path was specified - #14030
- Cleanup ServiceProviderExtensions, remove GetFreeThreadedServiceAsync - #14007
- Value cannot be null. Parameter name: versionRange when opening the PM UI - #13933
- Reenable new algorithm resolution with lock files with .NET 10 SDK - #13800
- Report the path when unable to read corrupted .nupkg.metadata - #13763
- [Bug Bash] The vulnerability InfoBar disappears in the Solution Explorer window after restoring packages for .NET SDK based project - #13318
- Use System.Text.Json to read the cache file in CacheFileFormat - #13059
- [Bug]: dotnet nuget push symbols not working as expected - #11871
- nuget.exe restore fails when MSBuildPath ends with a slash - #8634
- nuget.exe -msbuildpath c:\foo\msbuild.exe gives bad error experience - #4195
- Address comments in Implement Support for NuGet Authentication Plugins as .NET Tools PR - #13975
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- ViktorHofer
- 6309 Define MicrosoftVisualStudioSolutionPersistenceVersion property
- 6292 Upgrade ProtectedData version when building source-only
- 6270 Upda

Summary: What's New in 6.13.1
NuGet 6.13.1 is available in Visual Studio 17.13.
- Support for new slnx solution format in dotnet nuget why and dotnet list package - #14034
Summary: What's New in 6.13.0
NuGet 6.13.0 is available in the .NET 9.0.200 SDK.
- Support for credential providers deployed via .NET tools - #12567
- Opt-in feature: "Supplied by Platform", which removes packages that are supplied by the .NET platform from the dependency graph. This results in better performance and eliminates false positives for vulnerabilities in transitive dependencies.
- dotnet nuget why should check RID specific packages - #13718
- Allow specifying the msbuild binlog path when invoking static graph restore to avoid modifying the environment - #10789
- New Dependency Resolver Fixes
- New dependency resolver downloads more packages than before - #13943
- New dependency resolver does not handle floating versions correctly in some situations - #13992
- New dependency resolver erroneously reports NU1605 (downgrade) when using transitive pinning a direct dependency and a downgrade exists in a package graph - #13938
- NuGet Restore restoring old versions of transitive dependencies when direct dependency does not have guidelines for user's targeted .NET Framework - #13934
- Project and package in the same graph with the same name but different dependencies may lead to incorrect versions of the dependencies of that id - #13888
- Package Manager UI in Visual Studio now shows embedded READMEs for NuGet packages, if available - #12583
Issues fixed in this release
- Detect if restore used NuGetAudit or not for PackageReference projects - #13778
- Add indicator for deprecated and vulnerable packages to Package Details tab header. - #13974
- Navigation telemetry for 'Clear All NuGet Storage' Command in VS Settings - #13968
- Nuget Package Manager for Solution automatically selects transitive dependencies - #13893
- Debugging large repos with static graph-based restore is slow - #13876
- NuGet Client SDK packages updating to net8.0 - #13842
- Promote NU3043 warning to error in .NET 10 - #13814
- Setting "Allow format selection on first package install" meaning is unclear - #14016
- dotnet nuget why reports missing argument, even though it ran - #13908
- Spacing adjustments in Details Pane Tabs - #13880
- The focus border on the Details Pane Tab content is being truncated - #13879
- JAWS is reading the entire contents of the Package Details Tab when first visiting it - #13878
- ContentItemCollection.PopulateItemGroups unnecessarily allocates - #13851
- Read and write .nupkg.metadata files with System.Text.Json - #13835
- NuGet Fails in Containers When HOME Is Not Set - #13834
- Signing: key not disposed - #13823
- Walk TFMs in parallel when collecting pack outputs - #13776
- PERF: NuGet Cloning operations are showing heavily in allocations during VS solution load - #13647
- Fetching Vulnerability Resources doesn't respect cancellation - #13644
- Wrong order of arguments in logs for centralized package version (string Info_AddPkgCPM) - #13155
- Satellite assemblies for three-letter languages are not copied from NuGet package - #12253
- Nuget pack doesn't support blank <version> in .nuspec even though version is passed on the command line - #7987
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- SimonCropp
- 6185 reduce memory in ManifestMetadata
- 6168 remove duplicate dictionary lookups
- 6166 remove redundant Count() in GlobalPackageFolderRepositories
- 6165 avoid Any call in GetCommandAttribute
- 6167 remove redundant casts
- baronfel
- 6124 Expand Locale parser to support three-character language codes
- 6018 Update _WalkEachTargetPerFramework to walk TFMs in parallel
- ToddGrun
- 6098 Modify ContentItemCollection.PopulateItemGroups to use pooling for highly allocated temporary data structures
- 5930 Attempt to move several data structures to be immutable
- mthalma

Summary: What's New in 6.13.1
NuGet 6.13.1 is available in Visual Studio 17.13.
- Support for new slnx solution format in dotnet nuget why and dotnet list package - #14034
Summary: What's New in 6.13.0
NuGet 6.13.0 is available in the .NET 9.0.200 SDK.
- Support for credential providers deployed via .NET tools - #12567
- Opt-in feature: "Supplied by Platform", which removes packages that are supplied by the .NET platform from the dependency graph. This results in better performance and eliminates false positives for vulnerabilities in transitive dependencies.
- dotnet nuget why should check RID specific packages - #13718
- Allow specifying the msbuild binlog path when invoking static graph restore to avoid modifying the environment - #10789
- New Dependency Resolver Fixes
- New dependency resolver downloads more packages than before - #13943
- New dependency resolver does not handle floating versions correctly in some situations - #13992
- New dependency resolver erroneously reports NU1605 (downgrade) when using transitive pinning a direct dependency and a downgrade exists in a package graph - #13938
- NuGet Restore restoring old versions of transitive dependencies when direct dependency does not have guidelines for user's targeted .NET Framework - #13934
- Project and package in the same graph with the same name but different dependencies may lead to incorrect versions of the dependencies of that id - #13888
- Package Manager UI in Visual Studio now shows embedded READMEs for NuGet packages, if available - #12583
Issues fixed in this release
- Detect if restore used NuGetAudit or not for PackageReference projects - #13778
- Add indicator for deprecated and vulnerable packages to Package Details tab header. - #13974
- Navigation telemetry for 'Clear All NuGet Storage' Command in VS Settings - #13968
- Nuget Package Manager for Solution automatically selects transitive dependencies - #13893
- Debugging large repos with static graph-based restore is slow - #13876
- NuGet Client SDK packages updating to net8.0 - #13842
- Promote NU3043 warning to error in .NET 10 - #13814
- Setting "Allow format selection on first package install" meaning is unclear - #14016
- dotnet nuget why reports missing argument, even though it ran - #13908
- Spacing adjustments in Details Pane Tabs - #13880
- The focus border on the Details Pane Tab content is being truncated - #13879
- JAWS is reading the entire contents of the Package Details Tab when first visiting it - #13878
- ContentItemCollection.PopulateItemGroups unnecessarily allocates - #13851
- Read and write .nupkg.metadata files with System.Text.Json - #13835
- NuGet Fails in Containers When HOME Is Not Set - #13834
- Signing: key not disposed - #13823
- Walk TFMs in parallel when collecting pack outputs - #13776
- PERF: NuGet Cloning operations are showing heavily in allocations during VS solution load - #13647
- Fetching Vulnerability Resources doesn't respect cancellation - #13644
- Wrong order of arguments in logs for centralized package version (string Info_AddPkgCPM) - #13155
- Satellite assemblies for three-letter languages are not copied from NuGet package - #12253
- Nuget pack doesn't support blank <version> in .nuspec even though version is passed on the command line - #7987
List of commits in this release
Community contributions
Thank you to all the contributors who helped make this NuGet release awesome!
- SimonCropp
- 6185 reduce memory in ManifestMetadata
- 6168 remove duplicate dictionary lookups
- 6166 remove redundant Count() in GlobalPackageFolderRepositories
- 6165 avoid Any call in GetCommandAttribute
- 6167 remove redundant casts
- baronfel
- 6124 Expand Locale parser to support three-character language codes
- 6018 Update _WalkEachTargetPerFramework to walk TFMs in parallel
- ToddGrun
- 6098 Modify ContentItemCollection.PopulateItemGroups to use pooling for highly allocated temporary data structures
- 5930 Attempt to move several data structures to be immutable
- mthalma

Known Issues
- Project and package in the same graph with the same name but different dependencies may lead to incorrect versions of the dependencies of that id #13888
- VS PM UI shows warning icon about package vulnerability even after upgrade #13866
- dotnet nuget why reports missing argument, even though it ran #13908
Summary: What's New in 6.12.1
NuGet 6.12.1 is available in Visual Studio 17.12.0 and the .NET 9.0.101 SDK.
Issues fixed in this release
- Deserializing an empty version range in a package dependency fails in .NET SDK 9.0.100-rc.2 #13869
Summary: What's New in 6.12
NuGet 6.12.0 is available in the .NET 9.0.100 SDK.
- Add new graph resolution algorithm for better performance with large graphs - #13692
- NuGetAudit raises warnings for vulnerable transitive packages by default when the .NET 9 SDK is installed #13293
- Change NuGetAuditMode default from direct to all, raising warnings for vulnerable transitive packages for non-SDK style projects - #13584
- Audit security vulnerabilities without adding nuget.org as package source - #12698
- Owner profile hyperlinks needed in Details Pane of PM UI - #13686
- Deprecate SHA-1 fingerprints usage in NuGet Sign commands in favor of SHA-2 family fingerprints #13891
- Bubble-up Known Vulnerability Indicators in Solution Explorer for Transitive Packages - #13636
- Enable Transitive Dependencies and vulnerabilities for Solution-level in Visual Studio - #13216
Breaking changes
- Deprecate http usage: Promote from warning to error - #13289
Issues fixed in this release
- Enable dotnet nuget why on non-SDK style projects - #13576
- NuGetAuditSuppress for packages.config - #13575
- Roll-out new breaking change process for SDK tools, respect SdkAnalysisLevel - #13309
- Add property for toggling the to the previous NuGet resolver: RestoreUseLegacyDependencyResolver - #13700
- Reduce allocations in TokenSegment.TryMatch - #12728
- Use SDKAnalysisLevel in restore "https everywhere: promote from warning to error" - #13546
- tweak wording of NU1603 - #13446
- Default Package icon shown even when embedded icon file exists on disk - #13766
- Navigation telemetry for hyperlinks: License, ReportAbuse, Readme, ProjectUrl - #13749
- Navigation telemetry for Owner Profile URLs in PM UI - #13738
- PM UI should show transitive path - #13574
- NuGetVersion should use a factory to intern parsed versions - #13532
- Remove NuGet.Packaging.Core code - #13385
- PM UI transitive dependencies should display all transitive dependencies, not just ones brought in through packages directly installed in a project - #13060
- Remove deprecated field "owners" from VS UI Details Pane - #10666
- "Value cannot be null; Parameter name: source" displays in error list when clicking installed tab in PM UI - #13801
- New dependency resolver does not properly handle missing package versions when using CPM - #13788
- Saving PackageManagementFormat throws Nullable object must have a value. - #13773
- ProjectReference causing PM UI to error with "Value cannot be null. Parameter name: frameworkIdentifier" - #13737
- LockFileUtils.CreateLockFileTargetProject allocates a lot - #13712
- ConvertToProjectPaths causes extra allocations due to yield usage - #13677
- dotnet add package with CPM installs a different version than what gets restored - #13657
- dotnet list package does not work if project is using central package management system, after upgrading to .NET 8.0 - #13632
- Add a log code NuGetAuditSuppress duplicate items - #13620
- Solution Explorer search can be broken by skipped dataflow updates - #13619
- Add nullability declarations to ResolverUtility and RemoteWalkContext - #13617
- Use of Obsolete X509Certificate2 ctor - #13612
- nuget restore warnings can't be suppressed with NoWarn in Visual Studio - #13571
- Restore may write nulls to project.assets.json - #13563
- VS 17.10 - Error building projects with CPM explicitly enabled if ManagePackageVersionsCentrally is set to false in Directory.Build.props - #13560
- 

Known Issues
- Project and package in the same graph with the same name but different dependencies may lead to incorrect versions of the dependencies of that id #13888
- VS PM UI shows warning icon about package vulnerability even after upgrade #13866
- dotnet nuget why reports missing argument, even though it ran #13908

Summary: What's New in 6.12.1
NuGet 6.12.1 is available in Visual Studio 17.12.0 and the .NET 9.0.101 SDK.

Issues fixed in this release
- Deserializing an empty version range in a package dependency fails in .NET SDK 9.0.100-rc.2 #13869

Summary: What's New in 6.12
NuGet 6.12.0 is available in the .NET 9.0.100 SDK.
- Add new graph resolution algorithm for better performance with large graphs - #13692
- NuGetAudit raises warnings for vulnerable transitive packages by default when the .NET 9 SDK is installed #13293
- Change NuGetAuditMode default from direct to all, raising warnings for vulnerable transitive packages for non-SDK style projects - #13584
- Audit security vulnerabilities without adding nuget.org as package source - #12698
- Owner profile hyperlinks needed in Details Pane of PM UI - #13686
- Deprecate SHA-1 fingerprints usage in NuGet Sign commands in favor of SHA-2 family fingerprints #13891
- Bubble-up Known Vulnerability Indicators in Solution Explorer for Transitive Packages - #13636
- Enable Transitive Dependencies and vulnerabilities for Solution-level in Visual Studio - #13216

Breaking changes
- Deprecate http usage: Promote from warning to error - #13289

Issues fixed in this release
- Enable dotnet nuget why on non-SDK style projects - #13576
- NuGetAuditSuppress for packages.config - #13575
- Roll-out new breaking change process for SDK tools, respect SdkAnalysisLevel - #13309
- Add property for toggling the to the previous NuGet resolver: RestoreUseLegacyDependencyResolver - #13700
- Reduce allocations in TokenSegment.TryMatch - #12728
- Use SDKAnalysisLevel in restore "https everywhere: promote from warning to error" - #13546
- tweak wording of NU1603 - #13446
- Default Package icon shown even when embedded icon file exists on disk - #13766
- Navigation telemetry for hyperlinks: License, ReportAbuse, Readme, ProjectUrl - #13749
- Navigation telemetry for Owner Profile URLs in PM UI - #13738
- PM UI should show transitive path - #13574
- NuGetVersion should use a factory to intern parsed versions - #13532
- Remove NuGet.Packaging.Core code - #13385
- PM UI transitive dependencies should display all transitive dependencies, not just ones brought in through packages directly installed in a project - #13060
- Remove deprecated field "owners" from VS UI Details Pane - #10666
- "Value cannot be null; Parameter name: source" displays in error list when clicking installed tab in PM UI - #13801
- New dependency resolver does not properly handle missing package versions when using CPM - #13788
- Saving PackageManagementFormat throws Nullable object must have a value. - #13773
- ProjectReference causing PM UI to error with "Value cannot be null. Parameter name: frameworkIdentifier" - #13737
- LockFileUtils.CreateLockFileTargetProject allocates a lot - #13712
- ConvertToProjectPaths causes extra allocations due to yield usage - #13677
- dotnet add package with CPM installs a different version than what gets restored - #13657
- dotnet list package does not work if project is using central package management system, after upgrading to .NET 8.0 - #13632
- Add a log code NuGetAuditSuppress duplicate items - #13620
- Solution Explorer search can be broken by skipped dataflow updates - #13619
- Add nullability declarations to ResolverUtility and RemoteWalkContext - #13617
- Use of Obsolete X509Certificate2 ctor - #13612
- nuget restore warnings can't be suppressed with NoWarn in Visual Studio - #13571
- Restore may write nulls to project.assets.json - #13563
- VS 17.10 - Error building projects with CPM explicitly enabled if ManagePackageVersionsCentrally is set to false in Directory.Build.props - #135