| 19 Dec 2024 |
 6pak | anyone can upload there | 12:24:31 |
| 6pak | and if you rely on a internal package thats not on nuget.org | 12:24:40 |
| 6pak | anyone can claim the package id there | 12:24:46 |
| 6pak | and you will just restore that instead if you dont have package source mappings setup | 12:25:03 |
 GGG | fair | 12:25:12 |
| 6pak | custom sources without mapping is a big security risk | 12:25:17 |
| 6pak | and shouldn't be allowed imo | 12:25:20 |
| 6pak | like at all | 12:25:27 |
| GGG | I guess that's the point of having nuget lockfiles | 12:25:36 |
| GGG | if they didn't suck so much | 12:25:39 |
| GGG | * if only they didn't suck so much | 12:25:46 |
| 6pak | not really | 12:25:51 |
| 6pak | someone can upload a newer version on nuget.org | 12:25:59 |
| 6pak | and just wait for you to click upgrade in VS ui | 12:26:05 |
| 6pak | without realizing you are switching sources | 12:26:09 |
| 6pak | lockfile doesn't specify the source | 12:26:18 |
| 6pak | especially because the order is random, like wtf | 12:27:17 |
| 6pak | I thought that when I add nuget first then all the regular dependencies will be official | 12:27:37 |
| 6pak | but turns out if you add a nightly nuget repo for some random dependency, they can take over any package | 12:27:59 |
| GGG | yeah | 12:28:06 |
| GGG | that's pretty fucked up | 12:28:13 |
| 6pak | * I thought that when I add nuget.org first then all the regular dependencies will be official | 12:28:54 |
| 20 Dec 2024 |
 Whovian9369 | Hey gang, me again :P Anyone up for helping me troubleshoot dotnet stuff that I brought up yesterday? I'm having issues with the lts output of https://github.com/Whovian9369/aaru-nix-flake
Log showing the issue: https://termbin.com/kq8r
| 21:28:53 |
| Whovian9369 | * Hey gang, me again :P Anyone up for helping me troubleshoot dotnet stuff that I brought up recently? I'm having issues with the lts output of https://github.com/Whovian9369/aaru-nix-flake
Log showing the issue: https://termbin.com/kq8r
| 21:31:22 |
| 23 Dec 2024 |
 Corngood | It looks like it's some sort of incompatibility with EntityFramework. Do you know which the upstream project was meant to build with? | 00:43:00 |
| Corngood | * It looks like it's some sort of incompatibility with EntityFramework. Do you know which SDK the upstream project was meant to build with? | 00:43:11 |
| Whovian9369 | (Good timing, I was just about to close Element, haha.)
iirc upstream's LTS (v5.3.2) is meant to build with netcoreapp3.1, but can be forced into playing nice with Net 7 by swapping out the TargetFramework with the wanted version | 00:45:07 |
| Whovian9369 | Which I do to multiple csproj in the flake via substituteInPlace at https://github.com/Whovian9369/aaru-nix-flake/blob/620ef8866395544b5aad55b7dac83fa63a988731/lts.nix#L58-L78 | 00:46:01 |
| Whovian9369 | (I remember consulting the upstream dev at the time, and that's what was suggested.) | 00:47:02 |
| 6pak | try updating efcore | 00:47:18 |
