Edit

NuGet 5.2 Release Notes

  • Article

NuGet distribution vehicles:

NuGet version Available in Visual Studio version Available in .NET SDK(s)
5.2.0 Visual Studio 2019 version 16.2 2.1.80X1, 2.2.40X2
5.2.1 n/a n/a .NET Core 2.2 is out of support as of December 23, 2019

1Installed with Visual Studio 2019 with .NET Core workload

2Available as an optional install with Visual Studio 2019 with .NET Core workload

Summary: What's New in 5.2.1

  • [Security]: Microsoft Security Advisory CVE 2022-30184 | .NET Information Disclosure Vulnerability - #11883

Summary: What's New in 5.2

  • Fixed a critical bug that caused occasional NuGet operation failures due to path issues on Linux & Mac - #7341

  • Improved UI responsiveness when browsing packages using the NuGet package manager UI in Visual Studio especially noticeable for slow sources - #8039

  • Tons of reliability fixes for lock file (#8187,#8160,#8114,#7840) and authentication plugin (#8300,#8271,#8269,#8210,#8198,#7845)

Issues fixed in this release

Bugs

  • Perf: Package Manager Console: UI delay updating "Default project" combobox selected value - #8235

  • Perf: Performance improvements in the PM UI - #8039

  • Perf: UI Delay when reading Default Project in PMC - #6824

  • Perf: [vsfeedback] NuGet Update tab freezes for a local package source - #6470

  • Plugins: NuGet waits full handshake timeout if plugin fails to launch or terminates early - #8300

  • Plugins: improve diagnosability of plugin launch failure - #8271

  • Plugins: Issue with nuget.exe discovery of built in plugins - #8269

  • Plugins: cache file is never read - #8210

  • Plugins: "A task was canceled." errors with authentication plugin during restore - #8198

  • Plugins cache not discoverable intermittently on linux platforms - #7845

  • LockFile: with ATF, it has false NU1004 due to a bad target framework equality check - #8187

  • LockFile: '--locked-mode' restore flag not respected if lock file is empty or malformed - #8160

  • LockFile: Don't lowercase projects with custom assembly names in packages lock file - #8114

  • LockFile: Make project reference lower case in lock file - #7840

  • Restore: installing a tampered signed package results in multiple failed install attempts (with repeated output) - #8175

  • VS: solution user options fail to deserialize after NuGet update - #8166

  • dotnet-list-package in a UnitTest project returns an error - #8154

  • Create NuGet package group for VS installer - fixing some VSIX setup problems - #8033

  • GeneratePackageOnBuild should not set NoBuild. - #7801

  • The new option "-SymbolPackageFormat snupkg" generates an error when the .nuspec file contains an explicit assembly reference element - #7638

  • NuGet.targets(498,5): error : Could not find a part of the path '/tmp/NuGetScratch - #7341

DCR:

  • Add an msbuild property that indicates that PackageDownload is supported - #8106

  • FrameworkReference suppress dependency flow via FrameworkReference.PrivateAssets - #7988

  • Mechanism for supplying runtime.json outside of a package - #7351

List of all issues fixed in this release - 5.2 RTM