How to pin a package and prevent from accidentally updating?

[darthkurak]

Hi! I am trying to pin a package in my CPM "Directory.Packages.props" file.
I did for example <PackageVersion Include="Azure.Core" Version="[1.36.0]" />
BUT,
dotnet add package 1.37.0 - will change it to 1.37.0, and i will get only warning NU1608.
Also, the Rider Nuget manager seems to ignore this and shows me an update, and when updating - changes the version.
Am I doing something wrong?
How actually in Nuget world, having CPM, i can pin some package and prevent it from accidentally updating?

[legrab]

Im also wondering about this myself

[MatthewChudleigh]

I'd like this too. In the meantime, I hacked together this approach:

Add something along the lines of the following to your Directory.Packages.props

<Project>
<PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
  </PropertyGroup>
  <ItemGroup>
    <PackageVersion Include="SomeLibrary" Version="1.2.3" />
    ...
  </ItemGroup
...
<Target Name="CheckPackageVersion" BeforeTargets="Build">
    <Error Condition="'%(PackageVersion.Identity)' == 'SomeLibrary' AND '%(PackageVersion.Version)' != '1.1.1'" Text="Invalid package version for SomeLibrary. Expected: 1.1.1." />
</Target>
</Project>

It should fail to build because e.g., SomeLibrary 1.2.3 != 1.1.1.
The text can be used to explain to the developer why they should keep the current version.