You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hash the root .nuspec like dnx instead of SHA512 of the whole nupkg.
Package hash
.nupkg.sha512 (and .nupkg.metadatacontentHash) is now Base64(SHA512(root nuspec)) — the same shortcut dnx writes via CryptoHashProvider("SHA512").CalculateHash(reader.GetNuspec()).
Restore hashes the entire nupkg. Tool packages are never part of a plain dotnet restore, can be large (Native AOT RID payloads), and only the manifest is needed to recognize an install. Packages already extracted by dnx stay cache hits.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Hash the root
.nuspeclikednxinstead of SHA512 of the whole nupkg.Package hash
.nupkg.sha512(and.nupkg.metadatacontentHash) is nowBase64(SHA512(root nuspec))— the same shortcutdnxwrites viaCryptoHashProvider("SHA512").CalculateHash(reader.GetNuspec()).Restore hashes the entire nupkg. Tool packages are never part of a plain
dotnet restore, can be large (Native AOT RID payloads), and only the manifest is needed to recognize an install. Packages already extracted bydnxstay cache hits.Sponsors
The following sponsors made this release possible: @clarius, @MFB-Technologies-Inc, @sandrock, @drivenet, @Keflon, @tbolon, @kfrancis, @rbnswartz, @jfoshee, @Mrxx99, @eajhnsn1, @Jonathan-Hickey, @KenBonny, @SimonCropp, @agileworks-eu, @arsdragonfly, @vezel-dev, @ChilliCream, @4OTC, @DominicSchell, @adalon, @torutek, @mccaffers, @SeikaLogiciel, @wizardness, @eska-gmbh, @geodata-no.
Thanks 💜
🔗 View Release
All reactions