dotnet / dotnet/wcf

System.ServiceModel.Federation depends on deprecated Microsoft.IdentityModel.Protocols.WsTrust package

Open
#5,938 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
1.8k
Forks
576
Avg merge
6d 9h
Merged PRs (30d)
2

Description

**Describe the bug**
When using the System.ServiceModel.Federation nuget package, it adds a reference to an out of support, deprecated nuget package: Microsoft.IdentityModel.Protocols.WsTrust, which makes the System.ServiceModel.Federation unusable for scenarios where it is mandated that all dependencies are under active support.

**To Reproduce**
Steps to reproduce the behavior:
1. dotnet new classlib
2. dotnet add package System.ServiceModel.Federation
3. dotnet list package --deprecated --include-transitive

This outputs
> Project `test` has the following deprecated packages
[net10.0]:
Transitive Package Resolved Reason(s) Alternative
> Microsoft.IdentityModel.Protocols.WsTrust 6.8.0 Legacy

**Expected behavior**
No deprecated transitive dependencies

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.