Skip to content

Update 1 NuGet dependencies #84

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 13, 2025
+7 −7
Merged

Update 1 NuGet dependencies #84

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Sockets.UdpClient.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
<tags>nanoFramework C# csharp netmf netnf Udp</tags>
<dependencies>
<dependency id="nanoFramework.CoreLibrary" version="1.17.11" />
<dependency id="nanoFramework.System.Net" version="1.11.43" />
<dependency id="nanoFramework.System.Net" version="1.11.46" />
</dependencies>
</metadata>
<files>
Expand Down
4 changes: 2 additions & 2 deletions nanoFramework.System.Net.Sockets.UdpClient/nanoFramework.System.Net.Sockets.UdpClient.nfproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,8 +51,8 @@
<Reference Include="System.IO.Streams, Version=1.1.96.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.IO.Streams.1.1.96\lib\System.IO.Streams.dll</HintPath>
</Reference>
<Reference Include="System.Net, Version=1.11.43.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.43\lib\System.Net.dll</HintPath>
<Reference Include="System.Net, Version=1.11.46.0, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Net.1.11.46\lib\System.Net.dll</HintPath>
</Reference>
<Reference Include="System.Threading, Version=1.1.52.34401, Culture=neutral, PublicKeyToken=c07d481e9758c731">
<HintPath>..\packages\nanoFramework.System.Threading.1.1.52\lib\System.Threading.dll</HintPath>
Expand Down
2 changes: 1 addition & 1 deletion nanoFramework.System.Net.Sockets.UdpClient/packages.config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
<package id="nanoFramework.CoreLibrary" version="1.17.11" targetFramework="netnano1.0" />
<package id="nanoFramework.Runtime.Events" version="1.11.32" targetFramework="netnano1.0" />
<package id="nanoFramework.System.IO.Streams" version="1.1.96" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.43" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Net" version="1.11.46" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Text" version="1.3.42" targetFramework="netnano1.0" />
<package id="nanoFramework.System.Threading" version="1.1.52" targetFramework="netnano1.0" />
<package id="Nerdbank.GitVersioning" version="3.9.50" targetFramework="netnano1.0" developmentDependency="true" />
Expand Down
6 changes: 3 additions & 3 deletions nanoFramework.System.Net.Sockets.UdpClient/packages.lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,9 @@
},
"nanoFramework.System.Net": {
"type": "Direct",
"requested": "[1.11.43, 1.11.43]",
"resolved": "1.11.43",
"contentHash": "USwz59gxcNUzsiXfQohWSi8ANNwGDsp+qG4zBtHZU3rKMtvTsLI3rxdfMC77VehKqsCPn7aK3PU2oCRFo+1Rgg=="
"requested": "[1.11.46, 1.11.46]",
"resolved": "1.11.46",
"contentHash": "cowzYj1VZHdo2Ey+AmIt3u8+rXQHu+q7KuQq1C46SKhSZoVW5PTMaLOvOZ2sXN1ySiHTLqSebRJEKomcA+XnxA=="
},
Comment on lines 23 to 28
Copy link

@coderabbitai coderabbitai bot Nov 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Dependency update looks good; verify no security issues or breaking changes.

The nanoFramework.System.Net dependency has been correctly updated from 1.11.43 to 1.11.46 with consistent version pinning and an appropriately updated content hash. The patch-level bump suggests backward compatibility, but please verify there are no security advisories or breaking changes in this version range.

🌐 Web query:

What are the changes between nanoFramework.System.Net version 1.11.43 and 1.11.46? Are there any security advisories?

💡 Result:

Short answer: There are no published differences because nanoFramework.System.Net version 1.11.46 does not appear to be published on NuGet — the latest listed release is 1.11.43 (published 2025-04-24). [1]

What I checked

  • NuGet package versions list for nanoFramework.System.Net shows 1.11.43 as the latest published version (1.11.43 — 2025‑04‑24); no 1.11.46 entry is present. [1]
  • I found no vendor security advisory specifically calling out a vulnerability or CVE for nanoFramework.System.Net (public nanoFramework posts describe ongoing TLS/mbedTLS upgrades and network security improvements, but not a security advisory against 1.11.43→1.11.46). [2][3]

Conclusion / recommendation

  • If you meant a different package/version, or you have a private build (1.11.46) you want compared, share the release notes or the package — I can compare the assemblies/changelogs.
  • If you’re concerned about security: upgrade to the latest published nanoFramework releases and follow the project’s TLS/mbedTLS migration notes; open-source advisories would be posted by the project on their site/GitHub. [2][3]

Sources

  1. nuget.org package page and versions list for nanoFramework.System.Net.
  2. .NET nanoFramework blog posts on network/TLS updates (mbedTLS / TLS 1.3, network improvements).
  3. .NET nanoFramework docs (System.Net / System.Net.Security).

Dependency version 1.11.46 does not exist on NuGet; package restore will fail.

The PR pins nanoFramework.System.Net to version 1.11.46, but this version does not appear to be published on NuGet — the latest listed release is 1.11.43 (published 2025-04-24). This will cause build failures when restoring dependencies. Verify the intended version: either revert to the latest published 1.11.43 or confirm 1.11.46 is a valid pre-release/private build and update accordingly.

🤖 Prompt for AI Agents 
In nanoFramework.System.Net.Sockets.UdpClient/packages.lock.json around lines
23-28, the lock pins nanoFramework.System.Net to 1.11.46 which does not exist on
NuGet and will break restore; replace the resolved/requested version with the
latest published 1.11.43 (or the exact published version you intend to use),
regenerate the lock file (dotnet restore / update packages) so contentHash and
resolved entries are updated, or if 1.11.46 is a valid private/pre-release build
add the appropriate NuGet feed and authentication to the project feeds and CI
and then regenerate the lock file to reflect the private package metadata.

"nanoFramework.System.Text": {
"type": "Direct",
Expand Down