V2024.12.06

What's Changed

• add nuget trends content to csproj by @bruno-garcia in #9982
• ignore rider temp files by @SimonCropp in #9987
• [ReleasePrep][2024.06.17]RI of dev into main by @v-manil2 in #10024
• Remove DMCA message from SR edit dialog by @drewgillies in #10028
• use Count instead of Where+Count by @SimonCropp in #10016
• remove redundant Wheres by @SimonCropp in #10017
• Fix trucated typo by @SimonCropp in #9996
• Fix varibles typo by @SimonCropp in #10005
• use Array.Empty where possible by @SimonCropp in #9999
• remove some redundant type checks by @SimonCropp in #10015
• remove TestDataResourceUtility.GetResourceString by @SimonCropp in #9993
• use char based StringBuilder.Append where possible by @SimonCropp in #10012
• [UI] Add new themes into website by @martinrrm in #9926
• migrate account deleter.facts.csproj to sdk project by @SimonCropp in #9988
• elide Task.FromResult asyncs by @SimonCropp in #9997
• Remove duplicate dictionary lookups by @SimonCropp in #10003
• remove un used obfuscatedIpAddress StringBuilder by @SimonCropp in #10006
• remove un used updateUriBuilder variable by @SimonCropp in #10007
• remove un use GetBlobReference and container in CloudBlobCoreFileStorageService by @SimonCropp in #10010
• remove redundant string interpolation by @SimonCropp in #10011
• discard some variables by @SimonCropp in #10014
• remove un used thirdPartyPackageManager variable by @SimonCropp in #10008
• [Dark Theme] Fix reserved icon error and updated default icon image by @martinrrm in #10041
• Remove elmah table usage from gallery by @drewgillies in #10021
• Addtional typo by @SimonCropp in #10037
• remove redundant ToArray by @SimonCropp in #9998
• migrate GitHubVulnerabilities2Db.Facts to sdk csproj by @SimonCropp in #10000
• [Dark Theme] Revert NuGet trends image by @martinrrm in #10045
• fix some incorrect as usage and better leverage Assert.IsType by @SimonCropp in #10038
• Remove AzureEntityList by @drewgillies in #10044
• Using Azure.Storage.Blobs for storage access by @agr in #10018
• Remove activePackageSource from NuGet.config by @donnie-msft in #10048
• move to 8.0.301 sdk by @SimonCropp in #9986
• More arguments for UsingMsi method. by @agr in #10052
• Support service principal by @lyndaidaii in #10043
• Explicitly triggering release pipelines by @agr in #10057
• migrate NuGet.Services.Entities.Tests to sdk csproj by @SimonCropp in #9992
• migrate NuGet.Services.DatabaseMigration.Facts to sdk csproj by @SimonCropp in #10001
• fix constraint typo by @SimonCropp in #10050
• remove some redundant ToString by @SimonCropp in #10051
• remove some redundant scoped variables by @SimonCropp in #10009
• MSI auth support for NuGetGallery by @agr in #10059
• FI main to dev by @agr in #10062
• [Dark Theme] Render default package image on error by @martinrrm in #10061
• [ReleasePrep][2024.07.02]RI of dev into main by @v-manil2 in #10054
• Fixed tooltip layout by @Goodyear2017 in #10064
• Make tooltip block sitewide accessible and fix warning icon accessibility issue by @Goodyear2017 in #10060
• Bump Azure.Identity from 1.11.3 to 1.11.4 in /src/NuGetGallery.Core by @dependabot in #10063
• Update Trusted-Image-Domains.json by @guibranco in #10072
• Update to latest Xunit and Moq, fix test bugs, stop suppressing analyzers by @joelverhagen in #10077
• Bump braces from 3.0.2 to 3.0.3 in /src/Bootstrap by @dependabot in #10023
• Clean up build infra to make a repository merge easier by @joelverhagen in #10076
• Move to latest ServerCommon build tools by @joelverhagen in #10079
• Fix gallery functional tests now that CPM is enabled by @joelverhagen in #10080
• Remove unnecessary usings by @joelverhagen in #10084
• Merge branch main into dev by @joelverhagen in #10088
• [ReleasePrep][2024.07.29]FI of main into dev by @v-ankikadas in #10086
• Move test projects to SDK-based .csproj by @joelverhagen in #10087
• Move gallery projects (except web) to SDK-based .csproj by @joelverhagen in #10089
• [ReleasePrep][2024.07.30]RI of dev into main by @v-ankikadas in #10090
• Merge NuGet.Jobs repository into NuGetGallery by @joelverhagen in #10091
• Merge NuGet.Jobs-CI into NuGetGallery-CI as a stage by @joelverhagen in #10093
• Add package version to query string for v2 CDN endpoint (#10082) by @clairernovotny in #10083
• [Dark Mode] Fix table row colors in dark mode by @martinrrm in #10096
• Fix connection string for orchestrator lease service by @joelverhagen in #10100
• Update System.Formats.Asn1 package by @erdembayar in #10098
• Fetch and copy HTTP headers if they are being updated by @joelverhagen in #10101
• Fix flaky test CanRetryOnConflict by @joelverhagen in #10104
• Move to latest ServerCommon version by @joelverhagen in #10106
• Update to latest ServerCommon (v2.123.0) by @joelverhagen in #10108
• Merge ServerCommon repository into NuGetGallery by @joelverhagen in #10109
• Change font weight of package list page links by @Goodyear2017 in #10105
• Remove Focus on Package Page Tables by @Goodyear2017 in #10103
• Add a Python module for log version parsing by @clairernovotny in #10107
• Fix Db2Catalog and Catalog2Dnx with new SDK changes by @joelverhagen in #10110
• Fix endpoint suffix (Azure China) not being used by @joelverhagen in #10112
• Update to latest 7za.exe (v9.20 to v24.07) by @joelverhagen in #10119
• UserAgentParser parsing by @clairernovotny in #10114
• Add auth to V3 monitoring search cursor URLs by @joelverhagen in #10115
• Packaging for LogIntegration by @clairernovotny in #10122
• Set PackageVersion in MSBuild to allow different versions at pack time by @joelverhagen in #10124
• Fix Monitoring2Monitoring blob name generation, handle size mismatch when checking if blobs are synchronized by @joelverhagen in #10123
• First ResolveUri in NuGet.Services.Storage by @joelverhagen in #10129
• Move to 5.0.0-*, put all dependency packages in NuGet.Server.Common.sln by @joelverhagen in #10130
• Fix NuGetBuildExtensions import, unify props/targets by @joelverhagen in #10132
• Add client name translation by @clairernovotny in #10134
• Disable public blob access on search containers by @joelverhagen in #10136
• Merge branch dev into main (NuGet.Jobs and ServerCommon merge) by @joelverhagen in https://github.com/NuGet/NuGetGaller...

v2024.12.05

security patch:

XSS Vulnerability in NuGetGallery's Markdown Autolinks Processizx

v2023.04.25

What's Changed

• MaxSupportedMinClientVersion update. by @agr in #9406
• [WCP]alt attribute for img tag by @lyndaidaii in #9404
• Update Fabric Core to 11.0.1 by @dannyjdev in #9407
• URL redirect and ValidateIssuer CodeQL bugs by @advay26 in #9398
• [2FA] Update link msa/aad account page with legacy password account information. by @dannyjdev in #9408
• add domain avatars.githubusercontent.com by @lyndaidaii in #9425
• Update the issue template list to talk about sign in issues by @joelverhagen in #9432
• [A11y] Search page a11y fixes for tags and framework filter buttons by @advay26 in #9429
• [ReleasePre][2023.03.28]FI of main into dev by @lyndaidaii in #9443
• [ReleasePre][2023.03.28]FI of dev into main by @lyndaidaii in #9442
• Handle missing X-Forwarded-For header in TableErrorLog by @joelverhagen in #9444
• Fix accessibility issue - add missing header tag by @TheoT12 in #9446
• Fix accessibility issue - role required when aria-expanded attribute is used by @TheoT12 in #9445
• [A11y]The focus order is not in left to right order by @lyndaidaii in #9452
• [A11y] Fix Framework filter tooltip's confusing double behavior by @advay26 in #9454
• [A11y bug] More Information link on search results page is ambiguous. by @dannyjdev in #9458
• [ReleasePrep][2023.04.05]RI of dev into main by @advay26 in #9455
• Keyboard focus is not clearly visible by @lyndaidaii in #9456
• [A11y][Organizations]Ensures select element has an accessible name by @ryuyu in #9459
• Tooltip/popover placement update by @agr in #9457
• [A11y] TFM table differentiate versions for screen readers by @dannyjdev in #9463
• [A11y bug] Package Manager tab on Package details reads as both selected and expanded by @dannyjdev in #9460
• Disallow aria-expanded for collapsible elements without an allowed role by @TheoT12 in #9464
• Getting back the error message when uploading large files. by @agr in #9469
• Keyboard focus on owner list on package detail page by @lyndaidaii in #9470
• [A11y] Make screen readers start with packages list on Search Page. by @dannyjdev in #9465
• Add wakatime.com domain to whitelisted domains by @guibranco in #9448
• [a11y] remove span element in version history table by @TheoT12 in #9476
• [A11y] Add screen reader description to More information and Add new links by @dannyjdev in #9477
• [Search DV] Display deprecation and vulnerabilities on search page. by @dannyjdev in #9440
• [ReleasePrep][2023.04.25]RI of dev into main by @joelverhagen in #9483

New Contributors

• @guibranco made their first contribution in #9448

Full Changelog: v2023.02.27...v2023.04.25

v2023.02.27

What's Changed

• Update NuGetGallery.Services to address CG alerts by @joelverhagen in #9274
• Address accessibility for syntax highlighting by @lyndaidaii in #9273
• Fix Support link by @lyndaidaii in #9276
• Update Download table heading by @toseni in #9267
• Add instructions to install MSBuildSdk packages by @ianrathbone in #9268
• Added CSRF token checks to address CodeQL bugs by @advay26 in #9278
• Make thiner border for focused links by @MRmlik12 in #9277
• Fix bug around handling security advisories with 100 or more affected packages by @joelverhagen in #9279
• Correct link for email of new account verification by @lyndaidaii in #9284
• Use package's NormalizedVersion to create support requests by @drewgillies in #9285
• Upload page UX polish by @lyndaidaii in #9281
• Merge branch "main" into dev by @joelverhagen in #9296
• Return 404 when the null version is provided to the license endpoint by @joelverhagen in #9297
• Change VerifyGitHubVulnerabilities into a job by @joelverhagen in #9298
• Swap Package Manager and dotnet CLI tabs in display package UI by @drewgillies in #9302
• [ReleasePrep][2022.11.09]RI of dev into main by @ryuyu in #9305
• [A11y] Correct role attribute for package lists by @advay26 in #9303
• [A11y] Change role attribute of Recaptcha iframe by @advay26 in #9306
• [A11y] Removed incorrect role attribute from breadcrumb headings by @advay26 in #9311
• Update to latest client SDK to bring .NET 7 support onto the frameworks tab by @joelverhagen in #9312
• [A11y] Make aria-hidden elements not focusable by @camigthompson in #9314
• changed dotnet new example by @vlada-shubina in #9309
• [A11y] Remove aria-hidden attribute for prefix reserved element by @camigthompson in #9315
• [ReleasePre][2022.11.22] FI of dev into main by @lyndaidaii in #9317
• Add domain flat.badgen.net by @lyndaidaii in #9318
• Audit the AddCredential action after we commit to the DB by @joelverhagen in #9324
• Added support for .NET Framework 4.8.1 by @advay26 in #9327
• Selectively render the vulnerable element on manage packages page by @joelverhagen in #9328
• add document about how to deploy locally by @xiaoxstz in #9333
• Move the error message container outside of the Upload section by @joelverhagen in #9338
• Remove the client secret from AAD V2 authenticator by @joelverhagen in #9340
• Removes en-us to improve documentation localization by @JonDouglas in #9325
• [ReleasePrep][2023.01.01]RI of dev into main by @ryuyu in #9345
• [A11y][Fastpass] Remove aria-expanded attribute where not allowed by @camigthompson in #9348
• [A11y][Fastpass] Add role attribute where aria-label attribute is used by @camigthompson in #9349
• Search-by-TFM Frontend changes by @advay26 in #9342
• Search-by-TFM feature flight UI bug fix by @advay26 in #9357
• More telemetry for downloads service. by @agr in #9361
• [ReleasePrep][2023.01.26]RI of dev into main by @agr in #9362
• [TFM] net6.0-windows7.0 compatibility added. by @dannyjdev in #9364
• Update readme link by @lyndaidaii in #9358
• redirect to external privacy link by @lyndaidaii in #9347
• AAD account checks on packages for safety reports by @drewgillies in #9360
• Search-by-TFM Bug Bash feedback by @advay26 in #9366
• [ReleasePrep][2023.02.08] RI of dev into main by @zhhyu in #9383
• Add new domain for image allowlist by @lyndaidaii in #9378
• Fix two small UI issues (README bg color, Script & Interactive info) by @joelverhagen in #9385
• Modify warning message on display package page when missing readme by @lyndaidaii in #9365
• Search page A11y fixes by @advay26 in #9387
• Added null checks to mitigate exceptions on the '/profiles' pages by @advay26 in #9388
• Tags sometimes spill over into the next line when there are multiple of them by @advay26 in #9391
• Putting back missing word by @agr in #9394
• [ReleasePrep][2023.02.23]RI of dev into main by @RiadGahlouz in #9401

New Contributors

• @toseni made their first contribution in #9267
• @ianrathbone made their first contribution in #9268
• @MRmlik12 made their first contribution in #9277
• @vlada-shubina made their first contribution in #9309
• @xiaoxstz made their first contribution in #9333
• @JonDouglas made their first contribution in #9325

Full Changelog: v2022.10.19...v2023.02.27

v2022.10.19

What's Changed

• Report services are not using Blob storage SDK classes anymore. by @agr in #8484
• [nonGallery] Fix break in githubvulnerabilities2db dependency injection by @drewgillies in #8516
• [nonGallery] return backfill to order by date, batch size 1000 by @drewgillies in #8510
• Update CODEOWNERS to point at gallery group by @skofman1 in #8524
• Add survey banner by @lyndaidaii in #8526
• add feature flag for banner by @lyndaidaii in #8527
• [nonGallery] adjust backfill logic - remove redundant catch, process null TFMs by @drewgillies in #8528
• [ReleasePrep][2021.04.15]RI dev into main by @agr in #8530
• [a11y] Add popovers to verification checkmarks by @drewgillies in #8521
• [A11y] Make announcers read the version history table data correctly. by @dannyjdev in #8529
• [A11Y] Screenreader does not read required keyword for the control “Package Owner". by @dannyjdev in #8537
• [nonGallery] Adjust try blocks in TFM backfill, repair empty TFM metadata case by @drewgillies in #8531
• Adjust support request hint to include DMCA text by @drewgillies in #8536
• [Hotfix]change sql get vulnerabilities by package id by @lyndaidaii in #8540
• Added links to best practices page on package upload page by @sophiamfavro in #8542
• [A11y] Remove collapse from cancel button in ApiKey page. by @dannyjdev in #8539
• [A11y] Moved aria-labelledby so that announcer says correctly radio button grouping. by @dannyjdev in #8538
• Fixing build warning by @agr in #8518
• Agr blobs by @agr in #8517
• Revert "[Hotfix]change sql get vulnerabilities by package id" by @loic-sharma in #8555
• fixed missing flights for icons and readMes by @sophiamfavro in #8558
• [ReleasePrep][2021.04.26] RI of dev into main by @loic-sharma in #8553
• Resize image in readme by @lyndaidaii in #8568
• Change the link of trusted domains by @lyndaidaii in #8571
• Hide Licence file section on package upload if empty by @rocklan in #8550
• show some content of readme if is too long by @lyndaidaii in #8570
• Display version metadata only in an info box by @rocklan in #8554
• Add NUKE tab for dotnet tools by @matkoch in #8578
• [non-Gallery] Add a non-locked monitoring cursor for inspection during backfill job by @drewgillies in #8577
• Add banner to all pages by @lyndaidaii in #8579
• [ReleasePrep][2021.05.18]RI dev into main by @lyndaidaii in #8586
• Add caching to package details page vulnerabilities query by @drewgillies in #8580
• [ReleasePrep][2021.05.23]RI dev into main by @drewgillies in #8593
• Gallery instance uptime tracking by @agr in #8583
• New Display Package Page: created flight and setup for implementation of new page by @sophiamfavro in #8591
• Fix for package icons show up in search results in certain widths by @rocklan in #8551
• Created gird for new page layout of Display Package Page for redesign by @sophiamfavro in #8612
• [ReleasePrep][2021.06.01]RI of dev into main by @ryuyu in #8615
• Add link for reserved namespace error during package upload by @lyndaidaii in #8610
• Add accessible popovers to reserved checkmarks by @drewgillies in #8622
• Add accessible popovers to vulnerability alerts by @drewgillies in #8624
• [Readme]Add message for readme during validation by @lyndaidaii in #8608
• [nonGallery] Ingest withdrawn data in GitHub GraphQL by @drewgillies in #8544
• Set default flags in local environment by @lyndaidaii in #8630
• Tabs for the new Display Package page redesign by @sophiamfavro in #8625
• [ReleasePrep][2021.06.10]RI of dev into main by @agr in #8633
• Utilize vulnerabilities caching service for in manage packages page by @drewgillies in #8620
• [online safety] Add safety categories to report abuse form by @drewgillies in #8635
• Styled Header for new display package page by @sophiamfavro in #8639
• remove bullet point for tasklist by @lyndaidaii in #8629
• [Readme]Reduce space when display content in readme container by @lyndaidaii in #8609
• Fixed ImageDomainValidator for GitHub URLs by @nils-a in #8646
• Added warning banner for owners that description is in README tab by @sophiamfavro in #8656
• [Microbuild] NuGetGallery Update ServerCommon commit on build.ps1. by @dannyjdev in #8661
• [ReleasePrep][2021.06.28]FI of main into dev by @dannyjdev in #8663
• [ReleasePrep][2021.06.28]RI of dev into main by @dannyjdev in #8664
• Sidebar for New Display Package Page by @sophiamfavro in #8650
• Make the package downloads box a bit bigger for macOS by @joelverhagen in #8682
• Strip html comments from markdown by @CyberAndrii in #8667
• Improve API key expiration warnings by @loic-sharma in #8676
• modify pettry link by @lyndaidaii in #8658
• [ReleasePrep][2021.7.16]NuGetGallery of main into dev by @lyndaidaii in #8688
• Include app.codacy.com in trusted domain by @Tagliatti in #8687
• Fix newline breaks in markdown by @CyberAndrii in #8673
• Add npm audit warnings for Bootstrap JS by @joelverhagen in #8695
• [ReleasePrep][2021-07-20] RI of dev to main by @shishirx34 in #8696
• [Redesign] Update installation instructions by @loic-sharma in #8690
• Display NuGet Package Explorer link on details page. by @dannyjdev in #8697
• [AccountDeleter]Adding stubbed definition for missing DI objects. by @ryuyu in #8677
• [Redesign] Fix registration's link to the README by @loic-sharma in #8699
• Add admin panel for bulk unlisted or relisting packages by @joelverhagen in #8691
• new issue templates using forms by @zkat in #8683
• [Redesign] Add telemetry by @loic-sharma in #8701
• [Redesign] Improve Lighthouse score by @loic-sharma in #8707
• [Redesign] Add preview banner & URL by @loic-sharma in #8705
• [Redesign] Fix a few bugs by @loic-sharma in #8709
• Fixed line endings in DisplayPackage.cshtml by @agr in #8713
• [Redesign] Fix spacing of dependency groups by @loic-sharma in #8721
• [Redesign] Fix Safari font issue by @loic-sharma in #8723
• [Redesign] Fix README alerts if package hasn't passed validation by @loic-sharma in #8718
• [Redesign] Fix visual issues on narrow screens by @loic-sharma in #8724
• [Redesign] Address sidebar feedback by @loic-sharma in #8725
• [Redesign] Remove extra space on README warnings by @loic-sharma in #8730
• [ReleasePrep][2021.08.03]FI of master/main into dev by @zhhyu in #8733
• [ReleasePrep][2021.08.03]RI of dev into main by @zhhyu in #8734
• Render a canonical tag on each page by @MatthewSteepl...

v2021.04.08

Deployment: #8512

Changes:
Add dotnet local tool instructions tab (#8433)
Update Service Bus libraries from ServerCommon (#8420)
Update to new y18n version per npm audit (#8471)
Update DI for alt stats container (#8472)
reject empty readme file & fix error message for invalid extension (#8473)
improved the #r directive instructions (#8405)
a11y fix - remove horizontal scrollbar from page (#8499)
Added mandatory styles to add organizations page (#8500)
Preparing ErrorLog for secret refresh. (#8485)
CloudAuditService preparing for secret refresh (#8486)
show more link jumps problem (#8501)
Introduce a version-specific ID column for display purposes (#8504)

v2020.06.09

Addressed a cross-site scripting vulnerability detailed in CVE-2020-1340

v2019.01.14

20e0683 Not null the createdby on delete account (#6808)
04b8a6a License expression display in Gallery (#6784)
f5699cb Add DeleteIfExistsAsync and CreateAsync container APIs (#6812)
06e5747 Embedded license preview when uploading a package through UI (#6807)

NuGet Gallery release

v2018.12.12

Tag for the gallery release on 12/12/2018