microsoft / microsoft/typespec

Remove unnecessary nuget package in vs-extension

Open
#5,368 2 comments 1 reaction 0 assignees View on GitHub
feature ide
Dominant language
Java
Stars
5.9k
Forks
394
Avg merge
1d 23h
Merged PRs (30d)
104

Description

Some transitive nuget package are added explicitly into vs-extension to avoid vulnerabilities and warnings. We need to remove them after the packages using them releases new versions with these vulnerabilities and warnings handled.

detail:
- The 'MessagePack' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.SDK', 'Microsoft.VisualStudio.Workspace' and 'Microsoft.VisualStudio.VSIntegration'. Have to add it explicitly because the version used by 'Microsoft.VisualStudio...' report vulnerabilities now
- The 'Microsoft.VisualStudio.Composition' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.Workspace'. Have to add it explicitly because otherwise 'Microsoft.VisualStudio.Workspace" will report warning NU1603 because its desired version not found and higher version will be used
- The 'Microsoft.VisualStudio.Shell.15.0' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.Workspace.VSIntegration'. Have to add it explicitly because otherwise 'Microsoft.VisualStudio.Workspace.VSIntegration" will report warning NU1603 because its desired version not found and higher version will be used

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.