Does Microsoft publish release notes for individual nuget packages?
I noticed a few nuget packages with a 'dot' release (which leads me to believe some bugs were resolved) but I can't find information about what exactly was fixed in these dot releases.
Here are a few examples, picked at random, of packages released by Microsoft:
System.Net.Http version 4.3.2
System.Reflection.Metadata version 1.4.2
System.Collections.Immutable version 1.3.1
Microsoft.Data.OData version 5.8.2
Microsoft ASP.NET Identity Core 2.2.1
The description for most of these packages says that release notes are available at https://go.microsoft.com/fwlink/?LinkID=799421 but that's a link to the release notes for .NET Core 1.1.0 Preview 1 released 10/24/2016, nothing specific to the packages.
An example of a Microsoft nuget package that publishes very clear release notes for each version is Windows Azure Storage.
Related
In Visual Studio 2022, API project created using .NET Core 6.0.6 runtime, we are using Microsoft.EntityFrameworkCore.SqlServer 6.0.3 nuget package. But recently found that there is a security vulnerability in the System.Drawing.Common 4.7.0 package.
We use TFS CI Build Pipeline to build and release our software.
Please let us know how to overcome this security risk (we are using Blackduck compliance scan) and apply the patch/ changes to be made in TFS CI build pipeline script and deploy the software, but still use .NET Core 6.0.6 runtime, as we do not want to upgrade the .NET Core version to 7.0.
P.S: We are aware that the System.Drawing.Common vulnerability is cleared in version 4.7.2, 4.7.3 and also in >= 5.0.3 versions.
But still the security risk is reported by the Blackduck compliance scan.
What we have tried:
We have manually added the System.Drawing.Common package version 4.7.3 to the project and noticed that the package Microsoft.EntityFrameworkCore.SqlServer 6.0.3 is now internally referring to the System.Drawing.Common version 4.7.3.
But still the security risk is reported by the Blackduck compliance scan.
Referred links:
https://www.nuget.org/packages/System.Drawing.Common/4.7.0#versions-body-tab
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24112
My team is working on MSAL migration and we found "microsoft.bot.Connector" nuget is using ActiveDirectory reference internally.
What is the latest version of microsoft.bot.Connector nuget which is migrated for MSAL?
A sample code for latest version upgrade for MSAL will also help.
As per the Dotnet SDK releases, 4.16.0 is the most recent version to merge work on MSAL. Your screenshot shows version 4.14.4, which is too old to have those fixes. Please update to 4.16 or newer.
I'm migrating from VS2015 to VS2017, and updating a repo's solutions to be able to be compatible with VS2017. In the process, I'm also updating the Azure SDK version from 2.7 to 3.0.
I'm setting up a fresh dev environment, and installed Azure SDK 3.0 via VS2017's Azure development workload.
When I opened the solution file in the repo, I got one notice per cloud service project that its Microsoft Azure Tools version was getting upgraded from 2.7 to 2.9...
...and the ProductVersion tag in the corresponding .csproj files was updated from 2.7 to 2.9.
Questions:
Why wasn't this updated to 3.0?
Is there anyway for me to update it
to 3.0 without manually editing the csproj file? I don't see an
option to do so in Properties when I right click the cloud service
projects in Solution Explorer.
Is there some reason I shouldn't be
doing this?
"Microsoft Azure Tools - v2.9" mentioned in your screenshot is just a little misleading.
Underlying reason is that Microsoft hasn't really changed the version number of most components as part of 3.0 SDK release. Even the binaries get installed in the same folder as 2.9.
Good news is that you don't need to do anything special apart from converting the project to target latest version, which you're already getting prompted for.
So once you do convert your project as per the prompt, you're essentially working with SDK 3.0, even though version string says v2.9, because as the links explain, most of the components haven't changed major version number as part of SDK 3.0 version (when comparing with 2.9)
Here are some of the links which talk about this -
Azure SDK for .NET 3.0 Release Summary
No breaking changes to the Azure SDK 3.0 have been introduced in this
release. There is also no upgrade process needed to leverage this SDK
with existing Cloud Service projects. To allow use of the Azure SDK
3.0 without requiring an upgrade process, Azure SDK 3.0 installs to the same directories as Azure SDK 2.9. Most the components did not
change the major version from 2.9 but instead just updated the build
number.
Visual Studio 2017 latest installer does not install Azure SDK 3.0
In this link look at the response from Devin Breshears - MSFT
Azure 3.0 SDK Install Weirdness
An independent blog talking about the same issue.
Where can I find a specific version of Service FabriŃ, I need 5.6 runtime and 2.6 sdk version. Is there any download list for Service Fabric versions?
I found the link https://blogs.msdn.microsoft.com/azureservicefabric/2017/06/20/release-of-sdk-2-6-220-and-runtime-5-6-220-refresh-for-windows , but there no link for downloading this version. Every link leads to the latest version.
I found it!
https://servicefabricsdkstorage.blob.core.windows.net/public-release-notes/Microsoft%20Azure%20Service%20Fabric%20Release%20Notes%20-%20SDK%202.6.220%20-%20Runtime%205.6.220.docx
Here is a link where the downloading links of service fabric Runtime, SDK and VS Tools can be found.
So the algorithm for seeking download links:
Find the release update on Azure
site.(https://blogs.msdn.microsoft.com/azureservicefabric/2017/06/20/release-of-sdk-2-6-220-and-runtime-5-6-220-refresh-for-windows/
in my case)
Find release notes of a specific release.
Download Release Notes
Find Download links at the end of a document.
Can use Web Platform Installer to install different versions of Service Fabric SDK together with runtime. If you don't want to install the corresponding SDK, only runtime, actually you can go to Web Platform Installer's folder to find the package, such as "%LOCALAPPDATA%\Microsoft\Web Platform Installer\installers\ServiceFabricRuntime_6_5_CU5".
Please give some details about the latest released version of ARM SDK. Because i could see the MVN repository having 0.9.4 , beta1 and beta2 versions. Please suggest which version going to be stable.
In GitHub link do not have java-docs for 0.9.4 version release. Please share the link for the same.
I referred the below link but it is having v0.9, 0.9.3, beta1 and beta1+fixes releases.
https://github.com/Azure/azure-sdk-for-java
I referred the link to download SDK. But it is having only 0.9.0 like (azure-svc-mgmt-0.9.0) version
https://azure.microsoft.com/en-us/downloads/
Why the latest version SDK documentation not uploaded in azure site. Please give me some suggestion to get rid of this. Which version last stable release?
Thanks in advance.
Regards
Rathidevi
Recently azure has released 1.0.0 as stable release and this Java SDK version is the latest stable version.
This version has changed drastically compared to older stable versions such as 0.9.0.
I would recommend you to upgrade you to new Java SDK version 1.0.0.