Skip to content

Code Quality: Enable NuGet Transitive Pinning#18177

Open
dfederm wants to merge 1 commit intofiles-community:mainfrom
dfederm:feature/transitive-pinning
Open

Code Quality: Enable NuGet Transitive Pinning#18177
dfederm wants to merge 1 commit intofiles-community:mainfrom
dfederm:feature/transitive-pinning

Conversation

@dfederm
Copy link

@dfederm dfederm commented Feb 18, 2026

Resolved / Related Issues
N/A

Steps used to test these changes
Build (no behavioral changes expected)

Changes
This enables Transitive Pinning which essentially makes your Directory.Packages.props a partial lock file. If a package is listed in Directory.Packages.props, that will be the version, even if a project doesn't explicitly reference that package and it's just a transitive dependency. This is the primary benefit of transitive pinning, to ensure all projects within the repo are using the same version of all packages. It also allows security issues in transitive dependencies to be more easily addressed by simply updating Directory.Packages.props instead of adding a top-level dependency to all impacted projects, which is far messier and less maintainable.

@yair100 yair100 requested a review from hez2010 February 18, 2026 02:50
@yair100 yair100 changed the title Enable NuGet Transitive Pinning Code Quality: Enable NuGet Transitive Pinning Feb 18, 2026
@yair100
Copy link
Member

yair100 commented Feb 18, 2026

Thank you for the pull request.

In the future, it's recommended to only open pull requests for issues marked 'Ready to build', this helps prevent extra work in the event we don't end up accepting a change.

In any event, since the work is already done, we'll take a look 🙂

@yair100 yair100 added ready for review Pull requests that are ready for review labels Feb 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready for review Pull requests that are ready for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments