Remove temporary nuget.org feed from NuGet.config

[Mitch Denny (mitchdenny)]

Description

Remove the temporary nuget-org package source and its package source mapping entries (Sigstore, Tuf, NSec.Cryptography, libsodium) from NuGet.config. These packages should be resolved from the normal internal feeds (dotnet-public, dotnet-eng) which already have wildcard * pattern mappings.

The package references in Aspire.Cli.csproj and Directory.Packages.props are unchanged.

Fixes # (issue)

Checklist

• Is this feature complete?
  • Yes. Ready to ship.
  • No. Follow-up changes expected.
• Are you including unit tests for the changes and scenario tests if relevant?
  • Yes
  • No
• Did you add public API?
  • Yes
    • If yes, did you have an API Review for it?
      • Yes
      • No
    • Did you add <remarks /> and <code /> elements on your triple slash comments?
      • Yes
      • No
  • No
• Does the change make any security assumptions or guarantees?
  • Yes
    • If yes, have you done a threat model and had a security review?
      • Yes
      • No
  • No
• Does the change require an update in our Aspire docs?
  • Yes
    • Link to aspire.dev issue:
      • New issue
  • No

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 14877

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 14877"

[Copilot]

Pull request overview

Removes the temporary nuget-org package source and its associated package source mapping entries from the repo’s root NuGet.config, relying instead on existing internal feeds (dotnet-public, dotnet-eng) to resolve those packages.

Changes:

• Removed the nuget-org package source entry from NuGet.config.
• Removed packageSourceMapping rules that explicitly mapped Sigstore/Tuf-related packages to nuget-org.

[James Newton-King (JamesNK)]

Build is failing because of this change.