[Main to live] Create NuGet 7.0 Release Notes #3507

donnie-msft · 2025-11-10T20:38:41Z

Release notes for 7.0 - #3499

learn-build-service-prod · 2025-11-10T20:39:37Z

Learn Build status updates of commit 7546033:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/release-notes/Index.md	✅Succeeded	View
docs/release-notes/NuGet-7.0.md	✅Succeeded	View

For more details, please refer to the build report.

learn-build-service-prod · 2025-11-10T20:40:36Z

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

Copilot

Pull Request Overview

This PR introduces the NuGet 7.0 release notes, documenting a major version release with significant new features, breaking changes, bug fixes, and community contributions. The release targets Visual Studio 2026 and .NET 10.0 SDK.

Key Changes

Introduces NuGet 7.0 release notes with comprehensive documentation of new features including vulnerability warnings, package pruning, NuGet MCP Server, and SHA-1 deprecation
Adds breaking changes section covering project.json removal, SHA-1 errors, and SDK API removals
Updates the release notes index to include NuGet 7.0 and 6.14 entries with updated author information

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 11 comments.

File	Description
docs/release-notes/NuGet-7.0.md	Complete release notes for NuGet 7.0 including new features, breaking changes, fixed issues, and community contributions
docs/release-notes/Index.md	Updated index to add NuGet 7.0 and 6.14 entries, and updated author metadata

Copilot · 2025-11-11T17:37:31Z

docs/release-notes/NuGet-7.0.md

+
+## Summary: What's New in 7.0.0
+
+* Projects that target .NET 10 warn for vulnerabilities in transitive packages by defaulting to NuGetAuditMode=all [#14161](https://github.com/nuget/home/issues/14161)


URL case inconsistency: The GitHub issue link should use consistent casing. Other links in the document use "NuGet/Home" (uppercase), but this one uses "nuget/home" (lowercase).

Suggested change

* Projects that target .NET 10 warn for vulnerabilities in transitive packages by defaulting to NuGetAuditMode=all [#14161](https://github.com/nuget/home/issues/14161)

* Projects that target .NET 10 warn for vulnerabilities in transitive packages by defaulting to NuGetAuditMode=all [#14161](https://github.com/NuGet/Home/issues/14161)

Copilot · 2025-11-11T17:37:32Z

docs/release-notes/NuGet-7.0.md

+
+* Add package ID validation during restore - [#14407](https://github.com/NuGet/Home/issues/14407)
+
+* Project.json is no longer supported in 7.0. Visual Studio 2026 automatically migrated project.json projects to PackageReference


Missing punctuation: This sentence should end with a period for consistency with the other items in the "Breaking changes" section.

Suggested change

* Project.json is no longer supported in 7.0. Visual Studio 2026 automatically migrated project.json projects to PackageReference

* Project.json is no longer supported in 7.0. Visual Studio 2026 automatically migrated project.json projects to PackageReference.

Copilot · 2025-11-11T17:37:32Z

docs/release-notes/NuGet-7.0.md

+
+* Don&#39;t use reflection based deserialization in NuGet.Protocol - [#14470](https://github.com/NuGet/Home/issues/14470)
+
+* JsonSerializerIsReflectionDisabled on update to Nuget.Protocols 6.13.1 in apps with JsonSerializerIsReflectionEnabledByDefault set to false - [#14111](https://github.com/NuGet/Home/issues/14111)


Inconsistent capitalization: "Nuget.Protocols" should be "NuGet.Protocols" to match the standard NuGet branding (capital 'G').

Suggested change

* JsonSerializerIsReflectionDisabled on update to Nuget.Protocols 6.13.1 in apps with JsonSerializerIsReflectionEnabledByDefault set to false - [#14111](https://github.com/NuGet/Home/issues/14111)

* JsonSerializerIsReflectionDisabled on update to NuGet.Protocols 6.13.1 in apps with JsonSerializerIsReflectionEnabledByDefault set to false - [#14111](https://github.com/NuGet/Home/issues/14111)

Copilot · 2025-11-11T17:37:32Z

docs/release-notes/NuGet-7.0.md

+
+* [Bug Bash] Newly added package source mapping shouldn’t be case-sensitive in “Option-&gt;NuGet Package Manager-&gt;Package Source Mapping” window - [#13210](https://github.com/NuGet/Home/issues/13210)
+
+* [Bug Bash] New added package source mapping will lost after switching back to the &quot;Package Source Mapping&quot; tab from other tab in “Option-&gt;NuGet Package Manager” window  - [#13150](https://github.com/NuGet/Home/issues/13150)


Grammar error: "will lost" should be "will be lost".

Suggested change

* [Bug Bash] New added package source mapping will lost after switching back to the "Package Source Mapping" tab from other tab in “Option->NuGet Package Manager” window - [#13150](https://github.com/NuGet/Home/issues/13150)

* [Bug Bash] New added package source mapping will be lost after switching back to the "Package Source Mapping" tab from other tab in “Option->NuGet Package Manager” window - [#13150](https://github.com/NuGet/Home/issues/13150)

Copilot · 2025-11-11T17:37:33Z

docs/release-notes/NuGet-7.0.md

+  * [6589](https://github.com/NuGet/NuGet.Client/pull/6589) redundant null check for projectManagerService.GetMetadataAsync return value
+  * [6605](https://github.com/NuGet/NuGet.Client/pull/6605) enable nullable in VSRestoreSettingsUtilityTests
+  * [6575](https://github.com/NuGet/NuGet.Client/pull/6575) remove redundant dictionary lookup in CredentialServiceAdapter.GetCredentials
+  * [6601](https://github.com/NuGet/NuGet.Client/pull/6601) enable nullabe in NuGetInstallCommandTest


Spelling error: "nullabe" should be "nullable".

Suggested change

* [6601](https://github.com/NuGet/NuGet.Client/pull/6601) enable nullabe in NuGetInstallCommandTest

* [6601](https://github.com/NuGet/NuGet.Client/pull/6601) enable nullable in NuGetInstallCommandTest

Copilot · 2025-11-11T17:37:33Z

docs/release-notes/Index.md

 ms.date: 05/25/2022
 ms.topic: release-notes


[nitpick] Outdated metadata: The ms.date field shows 05/25/2022, but the index is being updated with new entries (NuGet 7.0 and 6.14). Consider updating the date to reflect the current modification date.

Suggested change

ms.date: 05/25/2022

ms.topic: release-notes

ms.date: 06/07/2024

ms.topic: release-notes

ai-usage: ai-generated

Copilot · 2025-11-11T17:37:34Z

docs/release-notes/NuGet-7.0.md

+  * [6519](https://github.com/NuGet/NuGet.Client/pull/6519) Make LockFileLibrary immutable for performance and sanity reasons
+


Trailing whitespace: Remove the trailing whitespace at the end of this line.

Suggested change

* [6519](https://github.com/NuGet/NuGet.Client/pull/6519) Make LockFileLibrary immutable for performance and sanity reasons

* [6519](https://github.com/NuGet/NuGet.Client/pull/6519) Make LockFileLibrary immutable for performance and sanity reasons

Copilot · 2025-11-11T17:37:34Z

docs/release-notes/NuGet-7.0.md

+
+* Package pruning will lead to a one-time diff in packages lock file - [#14272](https://github.com/NuGet/Home/issues/14272)
+
+* Pruning privatizes a direct references by apply PrivateAssets=all and IncludeAssets=none - [#14196](https://github.com/NuGet/Home/issues/14196)


Grammar error: "by apply" should be "by applying".

Suggested change

* Pruning privatizes a direct references by apply PrivateAssets=all and IncludeAssets=none - [#14196](https://github.com/NuGet/Home/issues/14196)

* Pruning privatizes a direct references by applying PrivateAssets=all and IncludeAssets=none - [#14196](https://github.com/NuGet/Home/issues/14196)

Copilot · 2025-11-11T17:37:34Z

docs/release-notes/NuGet-7.0.md

+
+  * Remove PackageSpec.Dependencies - [#14446](https://github.com/NuGet/Home/issues/14446)
+
+  * Clean up Package Spec redudant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)


Spelling error: "redudant" should be "redundant".

Suggested change

* Clean up Package Spec redudant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)

* Clean up Package Spec redundant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)

Copilot · 2025-11-11T17:37:34Z

docs/release-notes/NuGet-7.0.md

+
+* [Bug Bash] New added package source mapping will lost after switching back to the &quot;Package Source Mapping&quot; tab from other tab in “Option-&gt;NuGet Package Manager” window  - [#13150](https://github.com/NuGet/Home/issues/13150)
+
+* [Bug Bash] The “Remove” button should be disable when no package source mapping is selected in the “Package Source Mappings” list  - [#13115](https://github.com/NuGet/Home/issues/13115)


Grammar error: "should be disable" should be "should be disabled".

Suggested change

* [Bug Bash] The “Remove” button should be disable when no package source mapping is selected in the “Package Source Mappings” list - [#13115](https://github.com/NuGet/Home/issues/13115)

* [Bug Bash] The “Remove” button should be disabled when no package source mapping is selected in the “Package Source Mappings” list - [#13115](https://github.com/NuGet/Home/issues/13115)

Create NuGet 7.0 Release Notes (#3499)

7546033

donnie-msft added the do-not-merge label Nov 10, 2025

nkolev92 approved these changes Nov 10, 2025

View reviewed changes

donnie-msft changed the title ~~[BLOCKED UNTIL RELEASE][Main to live] Create NuGet 7.0 Release Notes (#3499)~~ [Main to live] Create NuGet 7.0 Release Notes Nov 11, 2025

donnie-msft marked this pull request as ready for review November 11, 2025 17:32

donnie-msft requested review from a team as code owners November 11, 2025 17:32

Copilot AI review requested due to automatic review settings November 11, 2025 17:32

donnie-msft merged commit 0f9eb0d into live Nov 11, 2025
7 checks passed

Copilot started reviewing on behalf of donnie-msft November 11, 2025 17:33 View session

Copilot finished reviewing on behalf of donnie-msft November 11, 2025 17:36

Copilot AI reviewed Nov 11, 2025

View reviewed changes

donnie-msft removed the do-not-merge label Nov 11, 2025


		## Summary: What's New in 7.0.0

		* Projects that target .NET 10 warn for vulnerabilities in transitive packages by defaulting to NuGetAuditMode=all [#14161](https://github.com/nuget/home/issues/14161)


		* Add package ID validation during restore - [#14407](https://github.com/NuGet/Home/issues/14407)

		* Project.json is no longer supported in 7.0. Visual Studio 2026 automatically migrated project.json projects to PackageReference


		* Don't use reflection based deserialization in NuGet.Protocol - [#14470](https://github.com/NuGet/Home/issues/14470)

		* JsonSerializerIsReflectionDisabled on update to Nuget.Protocols 6.13.1 in apps with JsonSerializerIsReflectionEnabledByDefault set to false - [#14111](https://github.com/NuGet/Home/issues/14111)


		* [Bug Bash] Newly added package source mapping shouldn’t be case-sensitive in “Option->NuGet Package Manager->Package Source Mapping” window - [#13210](https://github.com/NuGet/Home/issues/13210)

		* [Bug Bash] New added package source mapping will lost after switching back to the "Package Source Mapping" tab from other tab in “Option->NuGet Package Manager” window - [#13150](https://github.com/NuGet/Home/issues/13150)

	* [6601](https://github.com/NuGet/NuGet.Client/pull/6601) enable nullabe in NuGetInstallCommandTest
	* [6601](https://github.com/NuGet/NuGet.Client/pull/6601) enable nullable in NuGetInstallCommandTest

		* [6519](https://github.com/NuGet/NuGet.Client/pull/6519) Make LockFileLibrary immutable for performance and sanity reasons


		* Package pruning will lead to a one-time diff in packages lock file - [#14272](https://github.com/NuGet/Home/issues/14272)

		* Pruning privatizes a direct references by apply PrivateAssets=all and IncludeAssets=none - [#14196](https://github.com/NuGet/Home/issues/14196)


		* Remove PackageSpec.Dependencies - [#14446](https://github.com/NuGet/Home/issues/14446)

		* Clean up Package Spec redudant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)

	* Clean up Package Spec redudant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)
	* Clean up Package Spec redundant APIs - [#6231](https://github.com/NuGet/Home/issues/6231)


		* [Bug Bash] New added package source mapping will lost after switching back to the "Package Source Mapping" tab from other tab in “Option->NuGet Package Manager” window - [#13150](https://github.com/NuGet/Home/issues/13150)

		* [Bug Bash] The “Remove” button should be disable when no package source mapping is selected in the “Package Source Mappings” list - [#13115](https://github.com/NuGet/Home/issues/13115)

[Main to live] Create NuGet 7.0 Release Notes #3507

[Main to live] Create NuGet 7.0 Release Notes #3507

Uh oh!

Conversation

donnie-msft commented Nov 10, 2025

Uh oh!

learn-build-service-prod bot commented Nov 10, 2025

✅ Validation status: passed

Uh oh!

learn-build-service-prod bot commented Nov 10, 2025

PoliCheck Scan Report

✅ No issues found

More information about PoliCheck

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Key Changes

Reviewed Changes

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants