Skip to content

Commit ec42965

Browse files
authored
Remove mention of NuGet Audit auditing all dependencies in .NET 9 SDKs because we rolled that back. (#45333)
1 parent 081dbf0 commit ec42965

File tree

2 files changed

+0
-5
lines changed

2 files changed

+0
-5
lines changed

docs/core/whats-new/dotnet-9/overview.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,6 @@ For more information, see [What's new in the .NET 9 libraries](libraries.md).
4545
The .NET 9 SDK introduces _workload sets_, where all of your workloads stay at a single, specific version until explicitly updated. For tools, a new option for [`dotnet tool install`](../../tools/dotnet-tool-install.md) lets users (instead of tool authors) decide whether a tool is allowed to run on a newer .NET runtime version than the version the tool targets. In addition:
4646

4747
- Unit testing has better MSBuild integration that allows you to run tests in parallel.
48-
- NuGet security audits run on both direct and transitive package references, by default.
4948
- The terminal logger is enabled by default and also has improved usability. For example, the total count of failures and warnings is now summarized at the end of a build.
5049
- New MSBuild script analyzers ("build checks") are available.
5150
- The SDK can detect and adjust for version mismatches between the .NET SDK and MSBuild.

docs/core/whats-new/dotnet-9/sdk.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -111,10 +111,6 @@ The message lines of the warning no longer have the repeated project and locatio
111111

112112
If you have feedback about the terminal logger, you can provide it in the [MSBuild repository](https://github.com/dotnet/msbuild/issues).
113113

114-
## NuGet security audits
115-
116-
Starting in .NET 8, `dotnet restore` [audits NuGet package references for known vulnerabilities](../../tools/dotnet-restore.md#audit-for-security-vulnerabilities). In .NET 9, the default mode has changed from auditing only _direct_ package references to auditing both _direct_ and _transitive_ package references.
117-
118114
## Faster NuGet dependency resolution for large repos
119115

120116
The NuGet dependency resolver has been overhauled to improve performance and scalability for all `<PackageReference>` projects. Enabled by default, the new algorithm speeds up restore operations without compromising on functionality, strictly adhering to the core dependency resolution rules.

0 commit comments

Comments
 (0)