Repository navigation
Add new NuGet cert hash - #56242
Merged
Merged
Add new NuGet cert hash#56242
Conversation
The new certificate will be live soon. Add the new cert hash.
|
Azure Pipelines: Successfully started running 1 pipeline(s). 2 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The focused certificate allowlist update has no unresolved review issues.
Pull request overview
Adds the upcoming Microsoft NuGet signing certificate SHA-256 thumbprint to first-party package verification.
Changes:
- Adds the new certificate hash to the trusted allowlist.
File summaries
| File | Description |
|---|---|
src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs |
Adds the new trusted certificate thumbprint. |
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0
- Review effort level: Lite
marcpopMSFT
approved these changes
Sep 11, 2026
Member
Author
|
/backport to release/11.0.1xx |
Contributor
|
Started backporting to |
Member
Author
|
/backport to release/10.0.1xx |
Member
Author
|
/backport to release/10.0.4xx |
Contributor
|
Started backporting to |
Contributor
|
Started backporting to |
This was referenced Sep 11, 2026
mmitche
had a problem deploying
to
copilot-pat-pool
September 11, 2026 14:17 — with 
GitHub Actions
Failure
GitHub Actions
Failure
Member
Author
|
/backport to release/9.0.1xx |
Contributor
|
Started backporting to |
Member
Author
|
/backport to release/8.0.1xx |
Contributor
|
Started backporting to |
Contributor
|
@mmitche backporting to git am output$ git cherry-pick 7487ae326d70d04b9f03042c49e8a82bd25e3077
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: could not apply 7487ae326d... Add new NuGet cert hash (#56242)
hint: After resolving the conflicts, mark them with
hint: "git add/rm <pathspec>", then run
hint: "git cherry-pick --continue".
hint: You can instead skip this commit with "git cherry-pick --skip".
hint: To abort and get back to the state before "git cherry-pick",
hint: run "git cherry-pick --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch
Applying: Add new NuGet cert hash
Using index info to reconstruct a base tree...
M src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
Falling back to patching base and 3-way merge...
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Add new NuGet cert hash
Error: The process '/usr/bin/git' failed with exit code 128 |
Contributor
|
@mmitche backporting to git am output$ git cherry-pick 7487ae326d70d04b9f03042c49e8a82bd25e3077
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: could not apply 7487ae326d... Add new NuGet cert hash (#56242)
hint: After resolving the conflicts, mark them with
hint: "git add/rm <pathspec>", then run
hint: "git cherry-pick --continue".
hint: You can instead skip this commit with "git cherry-pick --skip".
hint: To abort and get back to the state before "git cherry-pick",
hint: run "git cherry-pick --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch
Applying: Add new NuGet cert hash
Using index info to reconstruct a base tree...
M src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
Falling back to patching base and 3-way merge...
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Add new NuGet cert hash
Error: The process '/usr/bin/git' failed with exit code 128 |
Member
Author
|
/backport to release/9.0.3xx |
Member
Author
|
/backport to release/8.0.4xx |
Contributor
|
Started backporting to |
Contributor
|
@mmitche backporting to git am output$ git cherry-pick 7487ae326d70d04b9f03042c49e8a82bd25e3077
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: could not apply 7487ae326d... Add new NuGet cert hash (#56242)
hint: After resolving the conflicts, mark them with
hint: "git add/rm <pathspec>", then run
hint: "git cherry-pick --continue".
hint: You can instead skip this commit with "git cherry-pick --skip".
hint: To abort and get back to the state before "git cherry-pick",
hint: run "git cherry-pick --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch
Applying: Add new NuGet cert hash
Using index info to reconstruct a base tree...
M src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
Falling back to patching base and 3-way merge...
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Add new NuGet cert hash
Error: The process '/usr/bin/git' failed with exit code 128 |
Contributor
|
Started backporting to |
Contributor
|
@mmitche backporting to git am output$ git cherry-pick 7487ae326d70d04b9f03042c49e8a82bd25e3077
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: could not apply 7487ae326d... Add new NuGet cert hash (#56242)
hint: After resolving the conflicts, mark them with
hint: "git add/rm <pathspec>", then run
hint: "git cherry-pick --continue".
hint: You can instead skip this commit with "git cherry-pick --skip".
hint: To abort and get back to the state before "git cherry-pick",
hint: run "git cherry-pick --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch
Applying: Add new NuGet cert hash
Using index info to reconstruct a base tree...
M src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
Falling back to patching base and 3-way merge...
Auto-merging src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
CONFLICT (content): Merge conflict in src/Cli/dotnet/NugetPackageDownloader/FirstPartyNuGetPackageSigningVerifier.cs
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Add new NuGet cert hash
Error: The process '/usr/bin/git' failed with exit code 128 |
This was referenced Sep 11, 2026
This was referenced Sep 22, 2026
joeloff
pushed a commit
to joeloff/sdk
that referenced
this pull request
Sep 28, 2026
This was referenced Oct 29, 2026
This branch had an error being deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The new certificate will be live soon. Add the new cert hash.