NuGet

NuGet

@nuget.org

#NuGet is the package manager for .NET. Packages: http://NuGet.org Docs: http://docs.microsoft.com/nuget GitHub: http://github.com/nuget/home

294 followers1 following17 posts

🍂 October's almost here, which means November 1 is close! 🔑 Any NuGet.org API keys created before Aug 17 will expire that day. Check your publishing workflows now, or better yet, switch to Trusted Publishing and skip the key rotation entirely 🚀 #dotnet #NuGet

nuget.orgNuGet Gallery | HomeThe NuGet Gallery is the central package repository for NuGet, the package manager for .NET.
NuGet@nuget.org

We're improving NuGet ecosystem supply-chain security by reducing API key durations. They drop to 30d on August 17th. NuGet Trusted Publishing avoids the need to manage API keys. PTAL if you publish packages. devblogs.microsoft.com/dotnet/stren...

⚠️ Action required: Microsoft's NuGet author-signing certificate changes starting Sept 23, 2026. If you allow-list Microsoft in trustedSigners or use dotnet nuget verify with fingerprints, add the new cert now to avoid NU3034 install failures. devblogs.microsoft.com/dotnet/micro...

devblogs.microsoft.comMicrosoft is updating its author-signing certificate starting September 23, 2026 - .NET BlogStarting September 23, 2026, Microsoft is updating the author-signing certificate used for NuGet packages. Customers using trusted signer policies or certificate fingerprint verification should add th...

We're improving NuGet ecosystem supply-chain security by reducing API key durations. They drop to 30d on August 17th. NuGet Trusted Publishing avoids the need to manage API keys. PTAL if you publish packages. devblogs.microsoft.com/dotnet/stren...

devblogs.microsoft.comStrengthening NuGet Supply Chain Security: Reducing API Key Lifetime - .NET BlogNuGet API key durations will be reduced to 30 days starting August 17th. This change will significantly strengthen the integrity of the NuGet supply chain.

🚀 NuGet Pruning is cleaner restores and fewer false positives. Better security signals. In .NET 10, NuGet package pruning removes platform-provided dependencies from your graph, so you only see what actually matters: actionable alerts. Learn more: devblogs.microsoft.com/dotnet/nuget...

devblogs.microsoft.comNuGet Package Pruning: Cleaner Dependencies and Actionable Vulnerability Reports - .NET BlogPackage pruning in .NET 10 removes platform-provided packages from your dependency graph. With transitive auditing enabled by default, projects with these defaults have 70% fewer transitive vulnerabil...

Hi .NET developers, What's your experience with making tools and libraries better for AI and agentic development? Anything NuGet can do to make that experience better?

NuGet team would really value your input on a new feature proposal to add DNS hostname for audit: 📜https://github.com/NuGet/Home/pull/14720 We’re especially looking for input on design, edge cases, and compatibility or migration. Thanks for supporting the NuGet community. #NuGet #DotNet

NuGet7 in .NET10 performance & security highlights: 🔒 Better vulnerability detection (CLI + VS) 🧩 Removed platform‑supplied packages → cleaner graphs ⚡ Faster, lower‑memory restore—lock files shine (new algo) → aka.ms/nugetrestore... More at aka.ms/nuget7 #VisualStudio2026

aka.msHow we ended up rewriting NuGet Restore in .NET 9 - .NET BlogLearn about the journey that led to a full rewrite of the NuGet Restore algorithm in .NET 9, achieving break-through scale and performance.

🚀 We just published a preview of the @nuget MCP server! It assists you with NuGet package information and management right in your Copilot workflows. Use it in developer tools and the GitHub Coding Agent. 🔧🤖 #NuGet #Copilot #dotnet devblogs.microsoft.com/dotnet/nuget...

devblogs.microsoft.comAnnouncing the NuGet MCP Server Preview - .NET BlogWe've released a preview of the NuGet MCP Server, which extends Copilot by providing realtime information about packages and adds advanced functionality around updating packages.

You are up to date.