Skip to content

dotnet list package --outdated, --vulnerable, --deprecated do not respect package source mapping #12766

Open
@zivkan

Description

@zivkan

NuGet Product Used

dotnet.exe

Product Version

8.0.100-preview.5.23303.2

Worked before?

No response

Impact

It bothers me. A fix would be nice

Repro Steps & Context

  1. The NuGet.Client repo uses package source mapping. Add a mapping for package Microsoft.SourceLink.GitHub to the dotnet-public feed.
  2. Run dotnet list package --outdated on any project in the repo to get the list of installed packages for which there is a newer version available.

Expected:
The output should show Microsoft.SourceLink.GitHub at version 1.1.1.

Actual:
The output shows Microsoft.SourceLink.GitHub at a version higher than 1.1.1, which indicates it is coming from a different package source and it's reporting a package version that cannot be restored.

Verbose Logs

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions