dotnet libman update installs deprecated package versions

Open

#724 opened on Feb 14, 2024 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 3/5
Estimated time: 1-2 days
Newbie friendliness: 35/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: csharp
Domain: cli, tooling

Research direction

Start by reproducing the issue with the shown libman.json entry and dotnet libman update datatables.net, focusing on the cdnjs provider and its version selection. Trace how deprecated versions are returned and selected; done means the update skips deprecated versions and retains the expected non-deprecated version.

Written by the indexing model from the issue text.

Description

Describe the bug

If a deprecated version of a package exists with a higher version number than the currently installed version, the tool will install the deprecated version. This only seems to happen with the cdnjs provider.

To Reproduce

Steps to reproduce the behavior:

Add the following entry under libraries in libman.json:

    {
      "provider": "cdnjs",
      "library": "datatables.net@1.13.10",
      "destination": "wwwroot/assets/libs/datatables.net"
    }

Run dotnet libman update datatables.net and the command will update to version 2.1.1 which is deprecated.

Expected behavior

Deprecated package versions should be ignored when updating.

Additional context

2.1.175+29a28921bd.RR

Dominant language: C#
Stars: 486
Forks: 91
PR merge metrics: No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

CS0162 "Unreachable code detected" warning from a MSBuildTemp .tmp file in every game project Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 90/100

stride3d/stride#3477 · Opened Sep 23, 2026
docs: update contribution guidelines to account for AI-generated contributions Open

Type: enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

apache/arrow-adbc#4809 · Opened Sep 23, 2026
[quality-improver] CiRunSummaryAggregateReader.ValidateModule provenance cross-check guards are untested on the throwing path Open

type/automation type/tech-debt

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

microsoft/testfx#11477 · Opened Sep 23, 2026
.NET 11 isolated: feed entries using the new `Azure.Functions.Sdk` MSBuild SDK are misdetected as in-process, so no templates are found Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

microsoft/vscode-azurefunctions#5197 · 1 comment · Opened Sep 23, 2026
reactor-build-and-check says mur is 'selfhost only', but mur.exe ships in the same skill-kit zip as that skill Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

microsoft/microsoft-ui-reactor#1274 · Opened Sep 23, 2026

More C# issues