Skip to content

Commit 6f32e07

Browse files
committed
Update links
1 parent 9dfbb5e commit 6f32e07

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

docs/concepts/Auditing-Packages.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -160,7 +160,7 @@ If security vulnerabilities are found and updates are available for the package,
160160
If a known vulnerability exists in a top-level package's transitive dependencies, you have these options:
161161

162162
- Add the fixed package version as a direct package reference. **Note:** Be sure to remove this reference when a new package version update becomes available and be sure to maintain the defined attributes for the expected behavior.
163-
- Use [Central Package Management with the transitive pinning functionality](../consume-packages/Central-Package-Management.md#transitive-pinning).
163+
- Use [Central Package Management with the transitive pinning functionality](../consume-packages/Central-Package-Management.md#pinning-transitive-packages-to-different-versions).
164164
- [Suppress the advisory](#excluding-advisories) until it can be addressed.
165165
- File an issue in the top-level package's tracker to request an update.
166166

docs/reference/errors-and-warnings/NU1011.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ The use of floating versions introduces the possibility for a bad package to be
2828
This can lead to a situation where you made no changes in your repository but suddenly something is broken due to a problem in a new package and there is no way for you to get back into a good state without removing the floating version or pushing a newer version of the package which is fixed.
2929
Using non-floating versions means that every upgrade to a package is backed by a commit in your repository, making it easy to determine what change caused the break and allows you to revert a commit to get back into a good state.
3030

31-
Also, when using the [transitive pinning](../../consume-packages/Central-Package-Management.md#transitive-pinning) feature of [Central Package Management](../../consume-packages/Central-Package-Management.md), using a floating version as an override could make restores of different projects end up with different versions for the package that what is supposed to be pinned, thus going against the promise of using the centrally defined version.
31+
Also, when using the [transitive pinning](../../consume-packages/Central-Package-Management.md#pinning-transitive-packages-to-different-versions) feature of [Central Package Management](../../consume-packages/Central-Package-Management.md), using a floating version as an override could make restores of different projects end up with different versions for the package that what is supposed to be pinned, thus going against the promise of using the centrally defined version.
3232

3333
NuGet recommends you use automation like [Dependabot](https://docs.github.com/code-security/dependabot/working-with-dependabot) to keep package versions up-to-date which provides
3434
a streamlined way of updating package versions while integrating into your existing developer workflow of a pull request, automated build validation, and testing all backed by a commit in your repository.

0 commit comments

Comments
 (0)