|
| 1 | +--- |
| 2 | +title: NuGet 7.3 Release Notes |
| 3 | +description: Release notes for NuGet 7.3 including new features, bug fixes, and DCRs. |
| 4 | +author: nkolev92 |
| 5 | +ms.date: 1/28/2026 |
| 6 | +ms.topic: release-notes |
| 7 | +--- |
| 8 | + |
| 9 | +# NuGet 7.3 Release Notes |
| 10 | + |
| 11 | +NuGet distribution vehicles: |
| 12 | + |
| 13 | +| NuGet version | Available in Visual Studio version | Available in .NET SDK(s) | |
| 14 | +|:---|:---|:---| |
| 15 | +| [**7.3.0**](https://nuget.org/downloads) | [Visual Studio 2026 version 18.3.0](https://visualstudio.microsoft.com/downloads/) | [10.0.200](https://dotnet.microsoft.com/download/dotnet/10.0)<sup>1</sup> | |
| 16 | + |
| 17 | +<sup>1</sup> Installed with Visual Studio 2026 with any .NET workload |
| 18 | + |
| 19 | +## Summary: What's New in 7.3.0 |
| 20 | + |
| 21 | +* Support for managing audit sources in Visual Studio options UI - [#13955](https://github.com/NuGet/Home/issues/13955) |
| 22 | + |
| 23 | +* `Manage NuGet Packages` in vulnerability gold bar could take you to a view with vulnerability filter selected - [#13050](https://github.com/NuGet/Home/issues/13050) |
| 24 | + |
| 25 | +* Vulnerability InfoBar in Visual Studio now has "How to fix with GitHub Copilot" link to NuGet's MCP Server documentation - [#14680](https://github.com/NuGet/Home/issues/14680) |
| 26 | + |
| 27 | +* Add `dotnet nuget download` command - [#12513](https://github.com/NuGet/Home/issues/12513) |
| 28 | + |
| 29 | +### Issues fixed in this release |
| 30 | + |
| 31 | +* Use a deterministic order for adding files to nuget packages - [#14448](https://github.com/NuGet/Home/issues/14448) |
| 32 | + |
| 33 | +* Audit Sources region is collapsed until needed in VS Options - [#14665](https://github.com/NuGet/Home/issues/14665) |
| 34 | + |
| 35 | +* IAssetsLogMessage.TargetGraphs and IRestoreLogMessage.TargetGraphs should use the alias TargetFramework instead of the effective target framework - [#14528](https://github.com/NuGet/Home/issues/14528) |
| 36 | + |
| 37 | +* [Localization] The string ‘Machine-wide package sources are provisioned by Visual Studio workloads and can only be enabled or disabled’ was not localized - [#14716](https://github.com/NuGet/Home/issues/14716) |
| 38 | + |
| 39 | +* [Localization] The string ‘Use separate sources for vulnerability audit’ in ‘Options->NuGet Package Manager->Package Sources’ page was not localized - [#14715](https://github.com/NuGet/Home/issues/14715) |
| 40 | + |
| 41 | +* Tooltips are not appearing via keyboard navigation on Package List - [#14683](https://github.com/NuGet/Home/issues/14683) |
| 42 | + |
| 43 | +* Package Owners are no longer separated with a space in the Package Item ToolTip - [#14682](https://github.com/NuGet/Home/issues/14682) |
| 44 | + |
| 45 | +* No warning NU1905 shows when no audit sources are configured however the info said it would in Options->NuGet Package Manager->Package Sources->Audit source part - [#14678](https://github.com/NuGet/Home/issues/14678) |
| 46 | + |
| 47 | +* Static graph restore with duplicate PackageVersion crashes - [#14676](https://github.com/NuGet/Home/issues/14676) |
| 48 | + |
| 49 | +* `dotnet list package` error `Sequence contains no matching element` targeting `netcoreapp3.1` when package with build targets that fails the build is part of the deps - [#14670](https://github.com/NuGet/Home/issues/14670) |
| 50 | + |
| 51 | +* NuGet.Packaging should reference System.Security.Cryptography.Pkcs v8 for net8.0 targets - [#14636](https://github.com/NuGet/Home/issues/14636) |
| 52 | + |
| 53 | +* "Clear NuGet local resources" button is hidden until NuGet VSIX loads - [#14625](https://github.com/NuGet/Home/issues/14625) |
| 54 | + |
| 55 | +* Dependency resolver allocating and resizing HashSet - [#14611](https://github.com/NuGet/Home/issues/14611) |
| 56 | + |
| 57 | +* NuGetEnvironment.GetFolderPath should cache results - [#14602](https://github.com/NuGet/Home/issues/14602) |
| 58 | + |
| 59 | +* Use TargetAlias in AssetsFileDependencies snapshot - [#14584](https://github.com/NuGet/Home/issues/14584) |
| 60 | + |
| 61 | +* LockFileTarget and IRestoreTargetGraph are labeled with an alias - [#14577](https://github.com/NuGet/Home/issues/14577) |
| 62 | + |
| 63 | +* Cannot set `updatePackageLastAccessTime` config via `dotnet nuget config set` - [#14576](https://github.com/NuGet/Home/issues/14576) |
| 64 | + |
| 65 | +* dotnet package update should support multiple projects - [#14309](https://github.com/NuGet/Home/issues/14309) |
| 66 | + |
| 67 | +* Migrator (PC to PR) shouldn't suggest using project.json project - [#14240](https://github.com/NuGet/Home/issues/14240) |
| 68 | + |
| 69 | +* Include prerelease checkbox is truncated in PM UI for any width - [#14221](https://github.com/NuGet/Home/issues/14221) |
| 70 | + |
| 71 | +* `dotnet restore` fails to invalidate lock file and produce puzzling error messages - [#14198](https://github.com/NuGet/Home/issues/14198) |
| 72 | + |
| 73 | +* dotnet list package --format=json outputs warning "(A) : Auto-referenced package." - [#13080](https://github.com/NuGet/Home/issues/13080) |
| 74 | + |
| 75 | +* [Bug Bash] The vulnerability filter “show only vulnerable” checkbox is truncated when the PM UI width is not wide enough to display all controls - [#13002](https://github.com/NuGet/Home/issues/13002) |
| 76 | + |
| 77 | +* [Bug]: NuGet.Common.dll RuntimeEnvironmentHelper.GetIsMacOSX throws a first-chance exception - [#11433](https://github.com/NuGet/Home/issues/11433) |
| 78 | + |
| 79 | +* [Bug]: KeyNotFoundException in LockFileBuilder.CreateLockFile - [#11028](https://github.com/NuGet/Home/issues/11028) |
| 80 | + |
| 81 | +[List of commits in this release](https://github.com/NuGet/NuGet.Client/compare/7.0.2.3...7.3.0.70) |
| 82 | + |
| 83 | +### Community contributions |
| 84 | + |
| 85 | +Thank you to all the contributors who helped make this NuGet release awesome! |
| 86 | + |
| 87 | +* [SimonCropp](https://github.com/NuGet/NuGet.Client/pull/6719) |
| 88 | + * [6719](https://github.com/NuGet/NuGet.Client/pull/6719) Remove un used parameters |
| 89 | + * [6716](https://github.com/NuGet/NuGet.Client/pull/6716) Avoid the perf hit of using linq .Count() |
| 90 | + * [6721](https://github.com/NuGet/NuGet.Client/pull/6721) Remove un used members |
| 91 | +* [omajid](https://github.com/NuGet/NuGet.Client/pull/6963) |
| 92 | + * [6963](https://github.com/NuGet/NuGet.Client/pull/6963) Ensure stable order of files in the nuget package |
| 93 | +* [nareshjo](https://github.com/NuGet/NuGet.Client/pull/6994) |
| 94 | + * [6994](https://github.com/NuGet/NuGet.Client/pull/6994) Prevent dictionary allocations in LockFileItem.Equals |
| 95 | +* [bradselw](https://github.com/NuGet/NuGet.Client/pull/6924) |
| 96 | + * [6924](https://github.com/NuGet/NuGet.Client/pull/6924) Addressing SFI-ES2.1.2 in DartLab pipelines |
| 97 | +* [dkurepa](https://github.com/NuGet/NuGet.Client/pull/6951) |
| 98 | + * [6951](https://github.com/NuGet/NuGet.Client/pull/6951) Set source tag to VMR main |
0 commit comments