Skip to content

6.3.0

Choose a tag to compare

@github-actions github-actions released this 12 Oct 00:23

Added

  • NuGet purls for project references (#1137, fixes #1136): combining --set-nuget-purl with --include-project-references generates missing project purls. Existing purls and custom BOM references are preserved, and dependency edges use the final references.

Changed

  • Development dependency scopes (#1138): development dependencies and their development-only transitive dependencies are included by default with scope="excluded". Packages shared with production runtime use remain required.
  • --exclude-dev is deprecated but continues to filter: it omits development-only and test-project-only packages while retaining packages shared with production runtime use.

Fixed

  • Assembly-name resolution (#1128, fixes #917): resolve $(RootNamespace) in assembly names, including nested $(MSBuildProjectName) tokens. Missing, empty, or circular $(AssemblyName)-referencing namespaces fall back to the project filename. This is best-effort substitution, not full MSBuild evaluation.
  • Exclusion filtering (#1135, fixes #1133): --exclude-filter removes only packages it newly orphans; pre-existing orphans are retained.
  • Target-framework regression coverage (#1131, fixes #1126): verifies exclusion filtering for non-normalized target frameworks, including net48, netstandard2.0, Net8.0, and Windows-qualified TFMs. The underlying NuGet.ProjectModel 7.6.0 fix was already included in 6.2.1.

Contributors

Thanks to everyone who contributed code, tests, and issue reports to this release:

🎉 New Contributors

A warm welcome and a big thank you to our first-time contributors:

Full changelog: v6.2.1...v6.3.0