Skip to content

NuGet packages are not deterministic #4110

@martincostello

Description

@martincostello

Describe the bug

Viewing AWSSDK.Core 4.0.2 in NuGet Package Explorer shows various warnings about the build of the package with respect to Source Link and determinism:

Image

The NuGet packages should be built with ContinuousIntegrationBuild=true, Deterministic=true and EmbedUntrackedSources=true to resolve this.

.NET global tools such as dotnet-validate and meziantou.framework.nugetpackagevalidation.tool can be used to verify this.

For Amazon.Lambda.Core at least, this doesn't appear to be a regression and these have never been enabled.=true` to resolve this.

.NET global tools such as dotnet-validate and meziantou.framework.nugetpackagevalidation.tool can be used to verify this.

Regression Issue

  • Select this option if this issue appears to be a regression.

Expected Behavior

Packages should be deterministic and have no untracked sources.

Current Behavior

NuGet packages are not deterministic and have untracked sources.

Reproduction Steps

View NuGet packages in NuGet Package Explorer.

Possible Solution

Set ContinuousIntegrationBuild=true, Deterministic=true and EmbedUntrackedSources=true=true MSBuild properties when building the NuGet packages for publishing to NuGet.org.

Additional Information/Context

No response

AWS .NET SDK and/or Package version used

I checked these two, but I imagine all the packages produced from this repository have the same issue:

AWSSDK.Core 4.0.2
AWSSDK.Lambda 4.0.6.1

Targeted .NET Platform

Any

Operating System and version

Any

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature-requestA feature should be added or improved.p2This is a standard priority issuequeued

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions