{"id":3162,"date":"2024-05-21T11:28:09","date_gmt":"2024-05-21T18:28:09","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/dotnet\/?p=3162"},"modified":"2024-05-21T11:28:09","modified_gmt":"2024-05-21T18:28:09","slug":"announcing-nuget-6-10","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/announcing-nuget-6-10\/","title":{"rendered":"Announcing NuGet 6.10"},"content":{"rendered":"<p>NuGet 6.10 is included in <a href=\"https:\/\/visualstudio.microsoft.com\/downloads\/\">Visual Studio 2022<\/a> and <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet\/8.0\">.NET 8.0<\/a> out of the box. You can also download NuGet 6.10 for Windows, macOS, and Linux as a <a href=\"https:\/\/www.nuget.org\/downloads\">standalone executable<\/a>.<\/p>\n<p>In NuGet 6.10, we introduce some exciting new features and bug fixes, such as a new <code>dotnet nuget config<\/code> command, vulnerability auditing in <code>packages.config<\/code>, and improvements to cached credentials. For more information, and a detailed list of all changes, <a href=\"https:\/\/learn.microsoft.com\/nuget\/release-notes\/nuget-6.10\">see our release notes<\/a>.<\/p>\n<h2>NuGet 6.10 Highlights<\/h2>\n<p><a href=\"https:\/\/learn.microsoft.com\/nuget\/release-notes\/nuget-6.10\">New features in NuGet 6.10<\/a>:<\/p>\n<ul>\n<li><a href=\"#dotnet-nuget-config-command\"><code>dotnet nuget config<\/code> command<\/a><\/li>\n<li><a href=\"#vulnerability-auditing-in-packages-config\">Vulnerability auditing in <code>packages.config<\/code><\/a><\/li>\n<li><a href=\"#improvements-to-cached-credentials\">Improvements to cached credentials<\/a><\/li>\n<\/ul>\n<h2><code>dotnet nuget config<\/code> command<\/h2>\n<p>You can now run the <code>dotnet nuget config<\/code> command with <code>paths<\/code>, <code>get<\/code>, <code>set<\/code>, and <code>unset<\/code> sub-commands to easily configure and understand your NuGet environment. Here&#8217;s a few scenarios using this command:<\/p>\n<ul>\n<li><code>dotnet nuget config paths<\/code> &#8211; will list all of the <code>NuGet.config<\/code> files associated with a current working directory.<\/li>\n<li><code>dotnet nuget config get all --show-path<\/code> &#8211; will list all of the configuration settings and their respective file path.<\/li>\n<li><code>dotnet nuget config set signatureValidationMode require<\/code> &#8211; will set the <code>signatureValidationMode<\/code> property to <code>require<\/code> in your <code>NuGet.config<\/code> file.<\/li>\n<li><code>dotnet nuget config unset signatureValidationMode<\/code> &#8211; will unset the <code>signatureValidationMode<\/code> property in your <code>NuGet.config<\/code> file.<\/li>\n<\/ul>\n<h2>Vulnerability auditing in <code>packages.config<\/code><\/h2>\n<p>You can now audit for known security vulnerabilities in <code>packages.config<\/code> projects. You&#8217;ll see a familiar experience as you saw with <code>&lt;PackageReference&gt;<\/code> last year, but for any project that hasn&#8217;t migrated from <code>packages.config<\/code> quite yet:<\/p>\n<p><iframe title=\"Developer Efficiency, AI Assistance &amp; Microsoft Dev Box with CVP Amanda Silver | Final Episode\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/74YPxmnG63c?list=PLReL099Y5nRePRvCqlFjTRwcdHMtoLazP\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<h2>Improvements to cached credentials<\/h2>\n<p>When authenticating to a private NuGet package source, there can be a retry loop after a <code>401 Unauthorized<\/code> challenge occurs instead of a <code>403 Forbidden<\/code>, causing unnecessary delays and potential strain on internal services. In these cases, NuGet will now verify if cached credentials work before asking for new ones, decreasing the frequency of cache invalidation and excess user prompts.<\/p>\n<p>Thank you to <a href=\"https:\/\/github.com\/leong-desco\">@leong-desco<\/a> for discovering this issue!<\/p>\n<h2>Closing<\/h2>\n<p>NuGet 6.10 comes with some exciting new features and bug fixes that will continue to improve your experience managing packages in your .NET projects!<\/p>\n<p>On behalf of the NuGet team and the entire .NET community, we&#8217;d like to express our sincere gratitude to all the <a href=\"https:\/\/learn.microsoft.com\/nuget\/release-notes\/nuget-6.10#community-contributions\">community contributors<\/a> who have generously given their time and expertise to improve NuGet this release. Thank you.<\/p>\n<p>For more details on NuGet 6.10, see our <a href=\"https:\/\/learn.microsoft.com\/nuget\/release-notes\/nuget-6.10\">official release notes<\/a>.<\/p>\n<h2>Feedback<\/h2>\n<p>Your feedback is important to us. If there are any problems with this release, check our <a href=\"https:\/\/github.com\/NuGet\/Home\/issues\">GitHub Issues<\/a> and <a href=\"https:\/\/developercommunity.visualstudio.com\/\">Visual Studio Developer Community<\/a> for existing issues. For new issues within NuGet, please <a href=\"https:\/\/github.com\/NuGet\/Home\/issues\/new\/choose\">report a GitHub Issue<\/a>. For general NuGet experience issues, let us know via the <a href=\"https:\/\/docs.microsoft.com\/visualstudio\/ide\/how-to-report-a-problem-with-visual-studio\">Report a Problem<\/a> option found in your favorite IDE under <code>Help &gt; Report a Problem<\/code>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>NuGet 6.10 is included in Visual Studio 2022 and .NET 8.0 out of the box. You can also download NuGet 6.10 for Windows, macOS, and Linux as a standalone executable. In NuGet 6.10, we introduce some exciting new features and bug fixes, such as a new dotnet nuget config command, vulnerability auditing in packages.config, and [&hellip;]<\/p>\n","protected":false},"author":4321,"featured_media":1801,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[7874,7930],"tags":[8020,104,8021],"class_list":["post-3162","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nuget","category-release-announcement","tag-6-10","tag-nuget","tag-release-announcement"],"acf":[],"blog_post_summary":"<p>NuGet 6.10 is included in Visual Studio 2022 and .NET 8.0 out of the box. You can also download NuGet 6.10 for Windows, macOS, and Linux as a standalone executable. In NuGet 6.10, we introduce some exciting new features and bug fixes, such as a new dotnet nuget config command, vulnerability auditing in packages.config, and [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/3162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/4321"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=3162"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/3162\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/1801"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=3162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=3162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=3162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}