Commit a635591
committed
Enable NuGet lock file for reproducible builds (MINOR)
Enabled packages.lock.json for deterministic dependency resolution:
Project Changes:
- Added RestorePackagesWithLockFile=true to .csproj
- Added RestoreLockedMode=true for CI environments
- Generated initial packages.lock.json with all dependencies
Lock File Contents:
- Direct dependencies: Microsoft.Win32.Registry 5.0.0
- Transitive dependencies tracked:
- System.Security.AccessControl 5.0.0
- System.Security.Principal.Windows 5.0.0
- Microsoft.NETCore.Platforms 5.0.0
- Includes content hashes for security verification
Workflow Changes:
- Re-enabled setup-dotnet built-in cache
- Now uses packages.lock.json for cache key
- Both build and release jobs benefit from caching
Benefits:
✅ Reproducible builds - Exact dependency versions locked
✅ Security - Content hashes prevent tampering
✅ Faster CI - Better caching with lock file
✅ Dependency tracking - All transitive deps visible
✅ Supply chain protection - Prevents dependency confusion
Locked Mode in CI:
- RestoreLockedMode ensures CI uses exact locked versions
- Prevents unexpected dependency updates in builds
- Fails if lock file is out of sync (forces explicit updates)1 parent 9068376 commit a635591
3 files changed
Lines changed: 76 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
60 | 60 | | |
61 | 61 | | |
62 | 62 | | |
| 63 | + | |
| 64 | + | |
63 | 65 | | |
64 | 66 | | |
65 | 67 | | |
| |||
151 | 153 | | |
152 | 154 | | |
153 | 155 | | |
| 156 | + | |
| 157 | + | |
154 | 158 | | |
155 | 159 | | |
156 | 160 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
25 | 29 | | |
26 | 30 | | |
27 | 31 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
| 43 | + | |
| 44 | + | |
| 45 | + | |
| 46 | + | |
| 47 | + | |
| 48 | + | |
| 49 | + | |
| 50 | + | |
| 51 | + | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
| 55 | + | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
| 59 | + | |
| 60 | + | |
| 61 | + | |
| 62 | + | |
| 63 | + | |
| 64 | + | |
| 65 | + | |
| 66 | + | |
| 67 | + | |
| 68 | + | |
0 commit comments