NuGet 6.0 is one of many releases in our .NET unification journey. Our NuGet tooling helps developers discover new .NET packages to use for their .NET applications, while making package management easier during your daily development.<\/p>\n
NuGet 6.0 Highlights<\/h2>\n
There are many new features in NuGet 6.0<\/a>:<\/p>\n NuGet 6.0 is the first release to offer full authoring and restoring support for NuGet packages targeting .NET 6.0. You can now target the following target frameworks:<\/p>\n If you aren\u2019t familiar with the .NET 6.0 targets today or what it will look like in the future, don\u2019t forget to check out the .NET 6.0 TFM spec<\/a>.<\/p>\n Earlier this year, many package managers became aware of dependency confusion<\/a> attacks in which a user can be tricked into installing a malicious dependency instead of the one they intended to. To fortify your software supply chain against these attacks, the NuGet team has developed a new feature that allows you to map your dependencies to specific sources. Below is an example of how you can use source mapping to protect your projects.<\/p>\n You can read more about source mapping in our documentation<\/a>. To secure your software supply chain, you can also read our documentation on the topic<\/a>.<\/p>\n When using the NuGet Package Manager within Visual Studio, you will now see package vulnerabilities for your packages including details such as the number and severity of vulnerabilities as well as direct links to learn more about the advisories.<\/p>\n There is now a You can now use the MSBuild flag Deprecated packages in Visual Studio now include a link to the suggested alternate package to use. You can use this feature to quickly browse and install packages that are actively maintained.<\/p>\n You can now add a package README.md file directly within Visual Studio. A README helps communicate important information about your package. It is often the first item a visitor will see when visiting your package on NuGet.org. README files typically include information on:<\/p>\n You can read more about adding a README to your NuGet package on our blog<\/a>.<\/p>\n In Visual Studio 2022, NuGet has redefined the contract between NuGet package restore and common Visual Studio components to improve performance for large solutions by only calling restore once instead of multiple times. This improves the time it takes for background processes to complete significantly.<\/p>\n Install Visual Studio 2022<\/a> and let us know if you notice a faster experience when loading your large solutions or switching between branches!<\/p>\n NuGet 6.0 is a big release that should improve many aspects of your daily package management needs. We\u2019ve added a bunch of new features to Visual Studio experiences, improved restore performance to solution load & branch switching, and added support to .NET 6!<\/p>\n We\u2019re excited to see you use NuGet 6.0 & include it in your toolset for building amazing things with .NET.<\/p>\n For more details on NuGet 6.0, see our official release notes<\/a>.<\/p>\n Your feedback is important to us. If there are any problems with this release, check our GitHub Issues<\/a> and Visual Studio Developer Community<\/a> for existing issues. For new issues within NuGet, please report a GitHub Issue<\/a>. For general NuGet experience issues, let us know via the Report a Problem<\/a> option found in your favorite IDE under NuGet 6.0 – Source Mapping, Package Vulnerabilities, Faster Solution Load, Oh My! NuGet 6.0 is included in Visual Studio 2022 and .NET 6.0 out of the box. You can also download NuGet 6.0 for Windows, macOS, and Linux as a standalone executable. NuGet 6.0 is one of many releases in our .NET unification journey. Our […]<\/p>\n","protected":false},"author":551,"featured_media":1801,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[7933,7874,7930,646],"tags":[30,7947,104,7964,7954,123,147],"class_list":["post-2159","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-feature-announcement","category-nuget","category-release-announcement","category-visual-studio","tag-announcement","tag-microsoft","tag-nuget","tag-nuget-6-0","tag-secure-supply-chain","tag-security","tag-visual-studio"],"acf":[],"blog_post_summary":" NuGet 6.0 – Source Mapping, Package Vulnerabilities, Faster Solution Load, Oh My! NuGet 6.0 is included in Visual Studio 2022 and .NET 6.0 out of the box. You can also download NuGet 6.0 for Windows, macOS, and Linux as a standalone executable. NuGet 6.0 is one of many releases in our .NET unification journey. Our […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/2159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/551"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=2159"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/2159\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/1801"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=2159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=2159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=2159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
.NET 6 Support<\/h3>\n
\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/10\/2020\/11\/dotnet-1.png\")
<\/a><\/p>\nSource Mapping<\/h3>\n
<!-- Define a global packages folder for your repository. -->\n<!-- This is where installed packages will be stored locally. -->\n<config>\n <add key=\"globalPackagesFolder\" value=\"globalPackagesFolder\" \/>\n<\/config>\n\n<!-- Define my package sources, nuget.org and contoso.com. -->\n<!-- `clear` ensures no additional sources are inherited from another config file. -->\n<packageSources>\n <clear \/>\n <!-- `key` can be any identifier for your source. -->\n <add key=\"nuget.org\" value=\"https:\/\/api.nuget.org\/v3\/index.json\" \/>\n <add key=\"contoso.com\" value=\"https:\/\/contoso.com\/packages\/\" \/>\n<\/packageSources>\n\n<!-- Define mappings by adding package ID patterns beneath the target source. -->\n<!-- Contoso.* packages will be restored from contoso.com, everything else from nuget.org. -->\n<packageSourceMapping>\n <!-- key value for <packageSource> should match key values from <packageSources> element -->\n <packageSource key=\"nuget.org\">\n <package pattern=\"*\" \/>\n <\/packageSource>\n <packageSource key=\"contoso.com\">\n <package pattern=\"Contoso.*\" \/>\n <\/packageSource>\n<\/packageSourceMapping>\n<\/code><\/pre>\nPackage Vulnerabilities in Visual Studio<\/h3>\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/49\/2021\/10\/vulnerability-1120x189.png\")
<\/a><\/p>\nRetry & Backoff Behavior<\/h3>\n
NUGET_ENABLE_EXPERIMENTAL_HTTP_RETRY<\/code> flag to improve the retry & backoff behavior of NuGet clients such as increasing the maximum amount of retries and increasing the delay for a more resilient experience when encountering a weaker internet connection.<\/p>\nExclude Default File Extensions<\/h3>\n
<AllowedOutputExtensionsInPackageBuildOutputFolder><\/code> to edit the file extensions included in the build output of your package. This gives you more control over the extensions being included in your build output folder.<\/p>\nImproved Deprecation Information in Visual Studio<\/h3>\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/dotnet\/wp-content\/uploads\/sites\/10\/2021\/10\/deprecation-1-1120x345.png\")
<\/a><\/p>\nAdd a Package README in Visual Studio<\/h3>\n
\n
Faster Solution Load & Branch Switching in Visual Studio<\/h3>\n
Closing<\/h2>\n
Feedback<\/h2>\n
Help > Report a Problem<\/code>.<\/p>\n","protected":false},"excerpt":{"rendered":"