Announcing NuGet 6.10

The NuGet Team

NuGet 6.10 is included in Visual Studio 2022 and .NET 8.0 out of the box. You can also download NuGet 6.10 for Windows, macOS, and Linux as a standalone executable.

In NuGet 6.10, we introduce some exciting new features and bug fixes, such as a new dotnet nuget config command, vulnerability auditing in packages.config, and improvements to cached credentials. For more information, and a detailed list of all changes, see our release notes.

NuGet 6.10 Highlights

New features in NuGet 6.10:

• dotnet nuget config command
• Vulnerability auditing in packages.config
• Improvements to cached credentials

dotnet nuget config command

You can now run the dotnet nuget config command with paths, get, set, and unset sub-commands to easily configure and understand your NuGet environment. Here’s a few scenarios using this command:

• dotnet nuget config paths – will list all of the NuGet.config files associated with a current working directory.
• dotnet nuget config get all --show-path – will list all of the configuration settings and their respective file path.
• dotnet nuget config set signatureValidationMode require – will set the signatureValidationMode property to require in your NuGet.config file.
• dotnet nuget config unset signatureValidationMode – will unset the signatureValidationMode property in your NuGet.config file.

Vulnerability auditing in packages.config

You can now audit for known security vulnerabilities in packages.config projects. You’ll see a familiar experience as you saw with <PackageReference> last year, but for any project that hasn’t migrated from packages.config quite yet:

Improvements to cached credentials

When authenticating to a private NuGet package source, there can be a retry loop after a 401 Unauthorized challenge occurs instead of a 403 Forbidden, causing unnecessary delays and potential strain on internal services. In these cases, NuGet will now verify if cached credentials work before asking for new ones, decreasing the frequency of cache invalidation and excess user prompts.

Thank you to @leong-desco for discovering this issue!

Closing

NuGet 6.10 comes with some exciting new features and bug fixes that will continue to improve your experience managing packages in your .NET projects!

On behalf of the NuGet team and the entire .NET community, we’d like to express our sincere gratitude to all the community contributors who have generously given their time and expertise to improve NuGet this release. Thank you.

For more details on NuGet 6.10, see our official release notes.

Feedback

Your feedback is important to us. If there are any problems with this release, check our GitHub Issues and Visual Studio Developer Community for existing issues. For new issues within NuGet, please report a GitHub Issue. For general NuGet experience issues, let us know via the Report a Problem option found in your favorite IDE under Help > Report a Problem.

The NuGet Team

Follow