Version 8.2.1 not listed on nuget.org

[afranklp]

One of my projects was updated from Dependabot on 7/8/25 to reference Serilog.Sinks.MSSqlServer v8.2.1, and as of today this version is not available via nuget.org.

[ckadluba]

Hi @afranklp!

Thank you for letting us know! This perhaps has has the same cause as issue #624.

Release 8.2.1 only had some minor changes over 8.2.0 but we plan to fix this issue soon anyway.

I will close this issue as a duplicate.

[bricelam]

Wait, who delisted it?? The responsible way to handle this would have been to release another patch version (8.2.2) updating the vulnerable dependency and marking 8.2.1 as vulnerable.

[ckadluba]

Nuget.org delisted the version after sending me an alert via email. After assessing the risk, we figured out that it is probably not critical for the MSSQL sink and we can wait until Microsoft publishes a fix. But that was before I learned that they would delist the version.

With the news of the delisted version, we will pobably add a workaround and create a release 8.2.2 to fix this. But in the meantime you can still use 8.2.0.

Please read the full explanation and discussion in the linked issue #624 for details.

[bricelam]

Indeed, a good plan was in place. (It was just undermined a bit by the package removal.)

Thank you for all your work on this project!

[Frulfump]

The deletion of packages is being discussed here NuGet/Home#14413 if you would like to chime in. Microsoft responded that they will provide more insights early next week NuGet/Home#14413 (comment)