microsoft
Default runtime is dependent / refers to daily feed with mostly preview packages
Describe the bug
When creating a new project, the default runtime is dependent on the nightly builds. Our client is concerned that this will create instability during development. We are unsure of how this feed is used as the Composer UI does not expose the feed but it is getting caught by their automated dependency checking scans.
Version
Version: 2.1.0 Electron: 8.2.4 Chrome: 80.0.3987.165 NodeJS: 12.13.0 V8: 8.0.426.27-electron.0
Browser
- [ X] Electron distribution
- [ ] Chrome
- [ ] Safari
- [ ] Firefox
- [ ] Edge
OS
- [X] macOS
- [X] Windows
- [ ] Ubuntu
To Reproduce
Steps to reproduce the behavior:
- Create a new EmptyBot project
- Once project is created open the nuget.config
- Scroll down to "add key" statement for the package sources
- See issue: add key="BotBuilder.myget.org" value="https://botbuilder.myget.org/F/botbuilder-v4-dotnet-daily/api/v3/index.json" protocolVersion="3"
Expected behavior
Would expect that the default project would not include daily / preview feeds by default.
Screenshots
Additional context
@pavolum Can you take a look at this or assign to the appropriate person.
This feed doesn't exists now. We can´t build and publish the proyects.
https://botbuilder.myget.org/F/botbuilder-v4-dotnet-daily/api/v3/index.json
