Skip to content

Update 1 NuGet dependencies #483

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 13, 2025
Merged

Update 1 NuGet dependencies #483

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http.Client.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ There is also a package with the server API only and another with the full API.<
<dependency id="nanoFramework.Runtime.Events" version="1.11.32" />
<dependency id="nanoFramework.System.Collections" version="1.5.67" />
<dependency id="nanoFramework.System.Text" version="1.3.42" />
<dependency id="nanoFramework.System.Net" version="1.11.43" />
<dependency id="nanoFramework.System.Net" version="1.11.46" />
<dependency id="nanoFramework.System.Threading" version="1.1.52" />
</dependencies>
</metadata>
Expand Down
4 changes: 2 additions & 2 deletions nanoFramework.System.Net.Http.Client/System.Net.Http.Client.nfproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -224,8 +224,8 @@
<Reference Include="System.IO.Streams, Version=1.1.96.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.IO.Streams.1.1.96\lib\System.IO.Streams.dll</HintPath>
</Reference>
<Reference Include="System.Net, Version=1.11.43.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.43\lib\System.Net.dll</HintPath>
<Reference Include="System.Net, Version=1.11.46.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.46\lib\System.Net.dll</HintPath>
</Reference>
<Reference Include="System.Threading, Version=1.1.52.34401, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Threading.1.1.52\lib\System.Threading.dll</HintPath>
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http.Client/packages.config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
<package id="nanoFramework.Runtime.Events" version="1.11.32" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Collections" version="1.5.67" targetFramework="netnano1.0" />
<package id="nanoFramework.System.IO.Streams" version="1.1.96" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.43" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.46" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Text" version="1.3.42" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Threading" version="1.1.52" targetFramework="netnano1.0" />
<package id="Nerdbank.GitVersioning" version="3.9.50" developmentDependency="true" targetFramework="netnano1.0" />
Expand Down
6 changes: 3 additions & 3 deletions nanoFramework.System.Net.Http.Client/packages.lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,9 +28,9 @@
},
"nanoFramework.System.Net": {
"type": "Direct",
"requested": "[1.11.43, 1.11.43]",
"resolved": "1.11.43",
"contentHash": "USwz59gxcNUzsiXfQohWSi8ANNwGDsp+qG4zBtHZU3rKMtvTsLI3rxdfMC77VehKqsCPn7aK3PU2oCRFo+1Rgg=="
"requested": "[1.11.46, 1.11.46]",
"resolved": "1.11.46",
"contentHash": "cowzYj1VZHdo2Ey+AmIt3u8+rXQHu+q7KuQq1C46SKhSZoVW5PTMaLOvOZ2sXN1ySiHTLqSebRJEKomcA+XnxA=="
},
Comment on lines 29 to 34
Copy link

@coderabbitai coderabbitai bot Nov 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify the updated contentHash is legitimate for nanoFramework.System.Net v1.11.46.

The version bump from 1.11.43 to 1.11.46 is consistent and well-formed. However, confirm that the contentHash cowzYj1VZHdo2Ey+AmIt3u8+rXQHu+q7KuQq1C46SKhSZoVW5PTMaLOvOZ2sXN1ySiHTLqSebRJEKomcA+XnxA== is correct for this package version and matches official NuGet sources. Additionally, check for any security advisories associated with v1.11.46.

🌐 Web query:

nanoFramework.System.Net version 1.11.46 security advisories

💡 Result:

I couldn't find any published security advisories or CVEs specifically for nanoFramework.System.Net version 1.11.46. Sources checked include the .NET nanoFramework release/blog pages and the project's NuGet listings; no advisory or CVE referencing that package/version was found. [1][2]

If you want to be certain, check these places (where advisories would appear):

  • nanoFramework project site / release posts. [1]
  • the package's NuGet entry (package history/releases). [2]
  • GitHub Security Advisories / the repo's Releases & Issues pages. [3]

References

  1. .NET nanoFramework — stable releases / release notes. [turn0search3].
  2. nuget.org nanoframework profile / package listings. [turn1search1].
  3. GitHub Advisory Database / .NET-related advisories (example search). [turn1search2].

I'll search for the official NuGet package details to verify the contentHash:

I need to verify whether version 1.11.46 actually exists in the NuGet package registry:

Version 1.11.46 of nanoFramework.System.Net does not exist in the public NuGet registry.

The latest stable version available is 1.11.43 (last updated 4/24/2025). The dependency entry in packages.lock.json references version 1.11.46, which cannot be verified against the official NuGet package repository. Additionally, dependent packages like nanoFramework.System.Net.Http.Client require nanoFramework.System.Net >= 1.11.43, indicating that 1.11.43 is the current stable baseline.

Action required: Verify the correct version number. Either downgrade to the existing stable version 1.11.43 or confirm that v1.11.46 is a pre-release or internal version not yet published to NuGet.

🤖 Prompt for AI Agents 
In nanoFramework.System.Net.Http.Client/packages.lock.json around lines 29-34
the lock references nanoFramework.System.Net resolved "1.11.46" which does not
exist on public NuGet; update this to a verifiable state by either changing the
resolved/requested version to the latest public stable "1.11.43" and
regenerating the lockfile (dotnet restore / nuget restore) so contentHash is
recalculated, or if 1.11.46 is an internal/pre-release package add the internal
feed to NuGet.config, restore against that feed and then regenerate the lockfile
so the version and contentHash match the published artifact. Ensure
packages.lock.json only contains versions that can be restored by the configured
package sources.

"nanoFramework.System.Text": {
"type": "Direct",
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http.Server.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ There is also a package with the client API only and another with the full API.<
<dependency id="nanoFramework.Runtime.Events" version="1.11.32" />
<dependency id="nanoFramework.System.Collections" version="1.5.67" />
<dependency id="nanoFramework.System.Text" version="1.3.42" />
<dependency id="nanoFramework.System.Net" version="1.11.43" />
<dependency id="nanoFramework.System.Net" version="1.11.46" />
<dependency id="nanoFramework.System.Threading" version="1.1.52" />
</dependencies>
</metadata>
Expand Down
4 changes: 2 additions & 2 deletions nanoFramework.System.Net.Http.Server/System.Net.Http.Server.nfproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,8 +150,8 @@
<Reference Include="System.IO.Streams, Version=1.1.96.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.IO.Streams.1.1.96\lib\System.IO.Streams.dll</HintPath>
</Reference>
<Reference Include="System.Net, Version=1.11.43.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.43\lib\System.Net.dll</HintPath>
<Reference Include="System.Net, Version=1.11.46.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.46\lib\System.Net.dll</HintPath>
</Reference>
<Reference Include="System.Threading, Version=1.1.52.34401, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Threading.1.1.52\lib\System.Threading.dll</HintPath>
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http.Server/packages.config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
<package id="nanoFramework.Runtime.Events" version="1.11.32" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Collections" version="1.5.67" targetFramework="netnano1.0" />
<package id="nanoFramework.System.IO.Streams" version="1.1.96" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.43" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.46" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Text" version="1.3.42" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Threading" version="1.1.52" targetFramework="netnano1.0" />
<package id="Nerdbank.GitVersioning" version="3.9.50" developmentDependency="true" targetFramework="netnano1.0" />
Expand Down
6 changes: 3 additions & 3 deletions nanoFramework.System.Net.Http.Server/packages.lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,9 +28,9 @@
},
"nanoFramework.System.Net": {
"type": "Direct",
"requested": "[1.11.43, 1.11.43]",
"resolved": "1.11.43",
"contentHash": "USwz59gxcNUzsiXfQohWSi8ANNwGDsp+qG4zBtHZU3rKMtvTsLI3rxdfMC77VehKqsCPn7aK3PU2oCRFo+1Rgg=="
"requested": "[1.11.46, 1.11.46]",
"resolved": "1.11.46",
"contentHash": "cowzYj1VZHdo2Ey+AmIt3u8+rXQHu+q7KuQq1C46SKhSZoVW5PTMaLOvOZ2sXN1ySiHTLqSebRJEKomcA+XnxA=="
},
"nanoFramework.System.Text": {
"type": "Direct",
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ These are meant to be used when there is the need to use smaller assemblies.</de
<dependency id="nanoFramework.Runtime.Events" version="1.11.32" />
<dependency id="nanoFramework.System.Collections" version="1.5.67" />
<dependency id="nanoFramework.System.Text" version="1.3.42" />
<dependency id="nanoFramework.System.Net" version="1.11.43" />
<dependency id="nanoFramework.System.Net" version="1.11.46" />
<dependency id="nanoFramework.System.Threading" version="1.1.52" />
</dependencies>
</metadata>
Expand Down
4 changes: 2 additions & 2 deletions nanoFramework.System.Net.Http/System.Net.Http.nfproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,8 +124,8 @@
<Reference Include="System.IO.Streams, Version=1.1.96.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.IO.Streams.1.1.96\lib\System.IO.Streams.dll</HintPath>
</Reference>
<Reference Include="System.Net, Version=1.11.43.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.43\lib\System.Net.dll</HintPath>
<Reference Include="System.Net, Version=1.11.46.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.46\lib\System.Net.dll</HintPath>
</Reference>
<Reference Include="System.Threading, Version=1.1.52.34401, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Threading.1.1.52\lib\System.Threading.dll</HintPath>
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Http/packages.config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
<package id="nanoFramework.Runtime.Events" version="1.11.32" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Collections" version="1.5.67" targetFramework="netnano1.0" />
<package id="nanoFramework.System.IO.Streams" version="1.1.96" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.43" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.46" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Text" version="1.3.42" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Threading" version="1.1.52" targetFramework="netnano1.0" />
<package id="Nerdbank.GitVersioning" version="3.9.50" developmentDependency="true" targetFramework="netnano1.0" />
Expand Down
6 changes: 3 additions & 3 deletions nanoFramework.System.Net.Http/packages.lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,9 +28,9 @@
},
"nanoFramework.System.Net": {
"type": "Direct",
"requested": "[1.11.43, 1.11.43]",
"resolved": "1.11.43",
"contentHash": "USwz59gxcNUzsiXfQohWSi8ANNwGDsp+qG4zBtHZU3rKMtvTsLI3rxdfMC77VehKqsCPn7aK3PU2oCRFo+1Rgg=="
"requested": "[1.11.46, 1.11.46]",
"resolved": "1.11.46",
"contentHash": "cowzYj1VZHdo2Ey+AmIt3u8+rXQHu+q7KuQq1C46SKhSZoVW5PTMaLOvOZ2sXN1ySiHTLqSebRJEKomcA+XnxA=="
},
"nanoFramework.System.Text": {
"type": "Direct",
Expand Down