Enable Central Package Management with transitive pinning - #20084

Merged

T-Gro merged 27 commits into

mainfrom

t-gro-enable-cpm-transitive-pinning

Aug 4, 2026

Commits on Jul 22, 2026

Add Directory.Packages.props + eng/Packages.props (CPM central list)

T-Gro
and
Copilot
committed
c311f3b
Opt auxiliary/consumer subtrees out of CPM

T-Gro
and
Copilot
committed
bf9c626
CPM: reference MIBC optimization packages by identity only

T-Gro
and
Copilot
committed
9a09158
CPM: remove inline Version from centralized PackageReferences

T-Gro
and
Copilot
committed
7387398
CPM: VersionOverride for VS.Threading/StreamJsonRpc divergences

T-Gro
and
Copilot
committed
1903144
CPM: resolve NU1109 downgrades (S.S.C.Xml 10.0.9, DI 10.0.0)

T-Gro
and
Copilot
committed
7696ccc
CPM: resolve NU1109 for System.Collections.Immutable / System.Reflection.Metadata

T-Gro
and
Copilot
committed
4fb9219
CPM: resolve VS-integration NU1109 + MIBC opt-out NU1015

T-Gro
and
Copilot
committed
51cf071
CPM: suppress NU1507 multi-source warning after project bodies

T-Gro
and
Copilot
committed
bf26b87
CPM: darc-aware System.* central floor to preserve nuspec + source-build

T-Gro
and
Copilot
committed
4714094
CPM: version test-package refs in ImportDirectoryPackagesProps opt-out subtrees

T-Gro
and
Copilot
committed
9198902
CPM: address review nits (dead no-ops, comment noise, docs)

T-Gro
and
Copilot
committed
796f537
CPM: round 2 review polish (comment grouping, consistency)

T-Gro
and
Copilot
committed
6d4cc5a

Commits on Jul 23, 2026

CPM: remove dead version properties

T-Gro
and
Copilot
committed
043e6de
CPM: inline single-use package versions into eng/Packages.props

T-Gro
and
Copilot
committed
4cbcb02
CPM: drop direct package references now covered by transitive pinning

T-Gro
and
Copilot
committed
b171ea3
CPM: compaction round 1 — single-source floor, bind VSEditor, dedup comment, extract test predicate

T-Gro
and
Copilot
committed
82b2ff5
CPM: compaction round 2 — drop dead xunit ItemGroup, trim duplicated policy comment

T-Gro
and
Copilot
committed
44ea24b

Commits on Jul 24, 2026

CPM: single-source xunit.v3.runner.console onto $(XunitVersion)

T-Gro
and
Copilot
committed
e7260a3
CPM: apply the dotnet/runtime central floor in source-build too

T-Gro
and
Copilot
committed
03e95d4
Restore tool-version properties read by the test harness

T-Gro
and
Copilot
committed
1a6d050
CPM: do not centrally manage the implicit Microsoft.VSSDK.BuildTools ref

T-Gro
and
Copilot
committed
865d935
CPM: centrally pin Microsoft.VisualStudio.ComponentModelHost 18.9.453

T-Gro
and
Copilot
committed
566bd9c
CPM: drop StreamJsonRpc VersionOverride in FSharp.Compiler.LanguageServer

T-Gro
and
Copilot
committed
2abbf7d

Commits on Aug 3, 2026

Merge origin/main into t-gro-enable-cpm-transitive-pinning

T-Gro
and
Copilot
committed
80ebbbd
Clean up #20058 per-project vuln workarounds via CPM transitive pinning

T-Gro
and
Copilot
committed
4c44a42

Commits on Aug 4, 2026

Merge origin/main into CPM branch (adopt #20099 ExternalAccess rename)

T-Gro
and
Copilot
committed
cac2f1c