Skip to content

Conversation

github-actions[bot]
Copy link
Contributor

@github-actions github-actions bot commented Mar 11, 2025

Backport of #11555 & #11561 to vs17.14

/cc @ViktorHofer @akoeplinger

Both "System.Runtime" and "System.Private.Uri" are inbox in .NETCoreApp since ~2017 and don't need to be referenced explicitly anymore.

They were referenced here as external dependencies brought vulnerable netstandard1.x dependencies in which were then flagged by CG.

That isn't the case anymore. xunit, shouldly and other packages with their corresponding versions used in this repo don't bring netstandard1.x in anymore.

Don't reference "System.Net.Http" for the same reason. It is inbox on .NET Framework, .NETCoreApp and .NET Standard. On .NET Framework a "<Reference Include="System.Net.Http" />" item is needed as it isn't part of the default referenced assemblies.

Note that this change will help when starting to consume a .NET 10 SDK as those would get flagged by NuGet Prune Package Reference and NuGet Audit.
@github-actions github-actions bot requested a review from a team as a code owner March 11, 2025 09:09
#11561)

Follow-up to #11145. We were missing the entry for System.Text.Encoding.CodePages in Version.Details.xml which caused a prebuild in dotnet/sdk#47377.

Also simplified the way we reference the different package versions a bit to make it clearer.

Remove Microsoft.VisualStudio.SolutionPersistence from SourceBuildPrebuiltBaseline.xml, since we now properly reference it from source-build-externals
@ViktorHofer ViktorHofer changed the title [vs17.14] Remove deprecated 4.3.* System package references [vs17.14] Remove deprecated 4.3.* System package references & fix entries in Version.Details.xml Mar 11, 2025
@ViktorHofer ViktorHofer enabled auto-merge (squash) March 11, 2025 09:18
@ViktorHofer
Copy link
Member

@dotnet/kitten please approve to unblock dotnet/sdk#47377

@ViktorHofer ViktorHofer merged commit 7871c1d into vs17.14 Mar 11, 2025
9 checks passed
@ViktorHofer ViktorHofer deleted the backport/pr-11555-to-vs17.14 branch March 11, 2025 11:40
@rainersigwald
Copy link
Member

This is going to make it harder than necessary to merge main to 17.14, unfortunately. Working on that with @maridematte.

maridematte added a commit that referenced this pull request Mar 19, 2025
* Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 11081403

* Update Versions.props VersionPrefix

* Update Versions.props VersionPrefix

* [vs17.14] Remove deprecated 4.3.* System package references & fix entries in Version.Details.xml (#11571)

* Remove deprecated 4.3.* package references

Both "System.Runtime" and "System.Private.Uri" are inbox in .NETCoreApp since ~2017 and don't need to be referenced explicitly anymore.

They were referenced here as external dependencies brought vulnerable netstandard1.x dependencies in which were then flagged by CG.

That isn't the case anymore. xunit, shouldly and other packages with their corresponding versions used in this repo don't bring netstandard1.x in anymore.

Don't reference "System.Net.Http" for the same reason. It is inbox on .NET Framework, .NETCoreApp and .NET Standard. On .NET Framework a "<Reference Include="System.Net.Http" />" item is needed as it isn't part of the default referenced assemblies.

Note that this change will help when starting to consume a .NET 10 SDK as those would get flagged by NuGet Prune Package Reference and NuGet Audit.

* Avoid netstandard1.x dependencies

* fix build

* Fix entries in Version.Details.xml and make version overriding clearer (#11561)

Follow-up to #11145. We were missing the entry for System.Text.Encoding.CodePages in Version.Details.xml which caused a prebuild in dotnet/sdk#47377.

Also simplified the way we reference the different package versions a bit to make it clearer.

Remove Microsoft.VisualStudio.SolutionPersistence from SourceBuildPrebuiltBaseline.xml, since we now properly reference it from source-build-externals

---------

Co-authored-by: Viktor Hofer <[email protected]>
Co-authored-by: Alexander Köplinger <[email protected]>

* Don't ngen StringTools.net35 (#11544)

This assembly shouldn't ever be loaded in the net4x context so don't spend the install time ngening it.

* Make SolutionParser package reference private  (#11603)

Context
The VS insertion is currently failing due to the SolutionParser version being upgraded beyond the version used by VS. Made the change so this reference is not exposed and so the insertions do not fail.

---------

Co-authored-by: dotnet bot <[email protected]>
Co-authored-by: Jenny Bai <[email protected]>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Viktor Hofer <[email protected]>
Co-authored-by: Alexander Köplinger <[email protected]>
Co-authored-by: Rainer Sigwald <[email protected]>
Co-authored-by: Mariana Dematte <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants