#nuget — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #nuget, aggregated by home.social.
-
At work we have five different environment variables for specifying the GitHub token for the same NuGet package source. And both per-repository NuGet.Config and machine-wide NuGet.Config for this source. A long history of teams not communicating is my guess.
I digged through all configurations to discover this, but we should really consolidate... Well, at least I now have a wrapper for dotnet which sets these variables to avoid biting me when I cross team boundaries.
-
At work we have five different environment variables for specifying the GitHub token for the same NuGet package source. And both per-repository NuGet.Config and machine-wide NuGet.Config for this source. A long history of teams not communicating is my guess.
I digged through all configurations to discover this, but we should really consolidate... Well, at least I now have a wrapper for dotnet which sets these variables to avoid biting me when I cross team boundaries.
-
At work we have five different environment variables for specifying the GitHub token for the same NuGet package source. And both per-repository NuGet.Config and machine-wide NuGet.Config for this source. A long history of teams not communicating is my guess.
I digged through all configurations to discover this, but we should really consolidate... Well, at least I now have a wrapper for dotnet which sets these variables to avoid biting me when I cross team boundaries.
-
At work we have five different environment variables for specifying the GitHub token for the same NuGet package source. And both per-repository NuGet.Config and machine-wide NuGet.Config for this source. A long history of teams not communicating is my guess.
I digged through all configurations to discover this, but we should really consolidate... Well, at least I now have a wrapper for dotnet which sets these variables to avoid biting me when I cross team boundaries.
-
At work we have five different environment variables for specifying the GitHub token for the same NuGet package source. And both per-repository NuGet.Config and machine-wide NuGet.Config for this source. A long history of teams not communicating is my guess.
I digged through all configurations to discover this, but we should really consolidate... Well, at least I now have a wrapper for dotnet which sets these variables to avoid biting me when I cross team boundaries.
-
📰 News: Polly NuGet Adds OSMF EULA
-
📰 News: Polly NuGet Adds OSMF EULA
-
📰 News: Polly NuGet Adds OSMF EULA
-
📰 News: Polly NuGet Adds OSMF EULA
-
📰 News: Polly NuGet Adds OSMF EULA
-
I don't develop using #npm, and I guess this happens with #pypi and #nuget as well.
What's the answer? Only install stuff completely manually? Don't store credentials on your dev PCs, only in your e.g. smartphone and enter them manually? Let humans manually verify each upload to package registries? /s -
I don't develop using #npm, and I guess this happens with #pypi and #nuget as well.
What's the answer? Only install stuff completely manually? Don't store credentials on your dev PCs, only in your e.g. smartphone and enter them manually? Let humans manually verify each upload to package registries? /s -
I don't develop using #npm, and I guess this happens with #pypi and #nuget as well.
What's the answer? Only install stuff completely manually? Don't store credentials on your dev PCs, only in your e.g. smartphone and enter them manually? Let humans manually verify each upload to package registries? /s -
I don't develop using #npm, and I guess this happens with #pypi and #nuget as well.
What's the answer? Only install stuff completely manually? Don't store credentials on your dev PCs, only in your e.g. smartphone and enter them manually? Let humans manually verify each upload to package registries? /s -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
-
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
In case you missed it earlier...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe… -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the .NET blog...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
From the archives...
Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet -
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
Как я посадил WireMock.Net на gRPC стероиды
WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf
https://habr.com/ru/articles/1063162/
#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
I just released version 0.9 of ConsoleRenderer!
This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!
This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.
The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.
-
A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.
#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer
https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social
-
A malicious NuGet package, Braintree.Net, acts as a credit card skimmer and steals merchant API keys. The Braintree NuGet typosquat hits .NET devs.
#NuGet #Typosquat #SupplyChainAttack #Malware #CreditCardSkimmer
https://securityonline.info/braintree-nuget-typosquat/?utm_source=mastodon&utm_medium=jetpack_social
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.
https://git.jordanwages.com/wagesj45/CapyKit
Documentation: https://capykit.happycapy.net/
Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/
-
I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/