From 5f14e7a1302f615f42c0fb87428ab9aeb879f1e1 Mon Sep 17 00:00:00 2001 From: Sadeq Abu-Hattem Date: Thu, 5 Nov 2026 21:12:24 +0200 Subject: [PATCH] Keep Source Link out of the packages' dependencies Microsoft.SourceLink.GitHub was referenced without PrivateAssets="All", so every published package from 1.0.0-preview.1 to preview.3 lists it as a dependency. Applications that install Settings download it, and its buildTransitive targets then run in their builds and warn "Source control information is not available". It is build-time only: it embeds source-control metadata into the PDBs, which still happens. Media, MultiLingual and Auditing already mark it PrivateAssets="All". Verified: packed locally, all six packages list the same dependencies as the published 1.0.0-preview.3 except for Microsoft.SourceLink.GitHub, which is gone; unit tests (210 x2) pass; and the two DotNetBoost samples, built against this source, no longer show the warning. Co-Authored-By: Claude Opus 5.5 --- Directory.Build.props | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Directory.Build.props b/Directory.Build.props index 0cd18a7..6a57985 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -39,6 +39,10 @@ - + +