Proposal: support NuGet Central Package Management lock files

[hcoona]

NuGet Central Package Management can generate lock files, see Enable repeatable package restores using a lock file.

Considered the well integration with Visual Studio and broadly adoption, I propose our rules_dotnet support NuGet.

[tomdegoede]

When working on this this we definitely took this as first direction. Unfortunately the hash in the NuGet lockfile turned out differ from the file hash of the downloaded nupkg which made it incompatible with Bazel's download logic. If this has changed now I'm keen to implement this.

[hcoona]

Glade to learn the background! Should we file a proposal to NuGet to support this kind of hash?

[hcoona]

I see a discussion about NuGet support single lock file may also helps to us. NuGet/Home#12409

[romaromaniv]

Hi @tomdegoede ,

It will be greatfull to get any updates about the feature!

• what is feedback from development team?
• what is priority?
• potential blockers?

Our solution need the feature. We have 100+ projects.

Thanks in advance.

[tomdegoede]

@romaromaniv you can leverage the custom lockfile format. NuGet lock files are not compatible and only work per project.

[romaromaniv]

@tomdegoede thanks for the quick reply.

Could you please provide some more details - what means "the custom lockfile format"?

[tomdegoede]

This issue proposed the NuGet lockfile, but bazel_dotnet uses its own format. Please look at the examples.