System.Management.Automation 7.3.1 depends on a missing nuget package

[daviddenis-stx]

Prerequisites

• Write a descriptive title.
• Make sure you are able to repro it on the latest released version
• Search the existing issues.
• Refer to the FAQ.
• Refer to Differences between Windows PowerShell 5.1 and PowerShell.

Steps to reproduce

Building a project dependent on System.Management.Automation 7.3.1 will complain about missing System.Runtime.CompilerServices 7.0.0-preview.3.22119.2 (which is not pushed to nuget.org at the time of writing this, only preview.2 is). It's perhaps transient ?

A quick workaround is to add https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet7/nuget/v2 to your NuGet.Config

Expected behavior

Should find the dependant System.Runtime.CompilerServices.Unsafe package, and build correctly

Actual behavior

error NU1102: Unable to find package System.Runtime.CompilerServices.Unsafe with version (>= 7.0.0-preview.3.22119.2)
error NU1102:   - Found 58 version(s) in nuget-org [ Nearest version: 7.0.0-preview.2.22152.2 ]

Error details

No response

Environment data

7.3.1

Visuals

No response

[nightroman]

Same here. Looking forward for the update because 7.3.1 is needed for

Microsoft Security Advisory CVE-2022-41076: PowerShell Remote Code Execution Vulnerability

[Balkoth]

Error NU1102 Unable to find package System.Runtime.CompilerServices.Unsafe with version (>= 7.0.0-preview.3.22119.2)

• Found 58 version(s) in nuget.org [ Nearest version: 7.0.0-preview.2.22152.2 ]
• Found 0 version(s) in Microsoft Visual Studio Offline Packages

[TravisEz13]

Until we have a better fix, you can work around this by adding the following line to the .csproj that references the SDK or SMA.

<PackageReference Include="System.Runtime.CompilerServices.Unsafe" Version="7.0.0-preview.2.22152.2" NoWarn="NU1605" />

[jak-hammond]

I came across this KB article stating that no new versions of this package will be created, so will that ultimately lead to it's removal as a dependency here and be covered by the main framework?

[adityapatwardhan]

@jak-hammond thanks for the link to the KB article. I have created PR to remove the dependency.