search

microsoft / service-fabric

Service Fabric is a distributed systems platform for packaging, deploying, and managing stateless and stateful distributed applications and containers at large scale.
https://docs.microsoft.com/en-us/azure/service-fabric/
MIT License
3.03k stars 399 forks source link

[Question] - Why was Microsoft.VisualStudio.Azure.Fabric.MSBuild 1.7.7 unlisted? #1412

Open SierraNL opened 1 year ago

SierraNL commented 1 year ago

Describe the question Microsoft.VisualStudio.Azure.Fabric.MSBuild 1.7.7 was released with SF 9.1, but was recently unlisted from nuget.org, why?

To Reproduce Steps to reproduce the behavior:

  1. Go to 'https://www.nuget.org/packages/Microsoft.VisualStudio.Azure.Fabric.MSBuild/1.7.7)'
  2. See the unlisted message

Expected behavior A new package, or a clear discription on why this package was unlisten

Situation We are working with quite a few teams on SF applications, and quite a few have updated to SF 9.1, which also includes Microsoft.VisualStudio.Azure.Fabric.MSBuild 1.7.7. We have the package in our local feeds. But we would like to know if we have to roll back due to some security issue, or if it's safe to continue to use the package and update is a new version is released?

Assignees: /cc @microsoft/service-fabric-triage

NCarlsonMSFT commented 1 year ago

@SierraNL sorry for the confusion. When we introduce new versions of the NuGet in VS we publish them unlisted on NuGet.org to support previews and then list them when the preview ships. This version became available in VS 17.5 Preview 2 and unfortunately we just dropped the ball in marking it as listed. This has been fixed.

dahlweid commented 1 year ago

@NCarlsonMSFT Is the same happening for 1.7.8 and 1.7.9 on nuget.org? Both are marked as unlisted.

NCarlsonMSFT commented 1 year ago

@dahlweid those are both versions to support changes in the forthcoming Visual Studio 2022 17.6. 1.7.8 won't be listed as 1.7.9 has replaced it as the version that will ship with 17.6.