Base solution for your next web application
Open Closed

Unable to Restore ABP 11.2.0 NuGet Packages in ASP.NET Zero v15.3.0 Project #12675


User avatar
0
[email protected] created

Hello Support Team,

I downloaded a new ASP.NET Core & Angular v15.3.0 project targeting .NET 10 from the ASP.NET Zero project generator.

I opened the solution in Visual Studio 2026, but NuGet package restoration fails with multiple NU1102 errors.

Some of the errors are:

Unable to find package Abp.Zero.Common with version (>= 11.2.0) Found 134 version(s) in nuget.org [Nearest version: 10.4.0]

Unable to find package Abp with version (>= 11.2.0) Found 274 version(s) in nuget.org [Nearest version: 10.4.0]

Unable to find package Abp.Web.Common with version (>= 11.2.0) Found 168 version(s) in nuget.org [Nearest version: 10.4.0]

The enabled package sources are:

nuget.org Microsoft Visual Studio Offline Packages DevExpress 24.2 Local DevExpress

I have already tried clearing the NuGet cache, restoring the packages, and rebuilding the solution, but the issue remains.

Markdown is supported
Copy & paste or drag & drop images (max 30 MB per image)

8 Answer(s)
  • User Avatar
    0
    [email protected] created

    any Update?

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    oguzhanagir created
    Support Team

    Hi @[email protected]

    Your NuGet API Key has now been assigned to your account. It is visible as NuGet API Key on the https://aspnetzero.com/LicenseManagement page.

    You only need to add this URL as a NuGet source in your project: https://nuget.aspnetzero.com/YOUR-API-KEY/v3/index.json.

    If this process doesn't resolve your issue, please don't hesitate to contact us.

    Thank you.

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    [email protected] created

    Hello Support Team,

    I am experiencing an issue while running the Entity Framework Core migration command:

    Update-Database

    The project builds successfully, but the command stops with the following error:

    The running command stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop.

    Warning NU1902: Package 'AngleSharp' 0.17.1 has a known moderate severity vulnerability.

    Could you please advise on the recommended way to resolve this issue? Should I upgrade the AngleSharp package, update another dependent package, or change the PowerShell ErrorActionPreference setting?

    Please also confirm whether upgrading AngleSharp may cause compatibility issues with the current project.

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    [email protected] created

    any update?

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    [email protected] created

    Hi @ismcagdas any update?

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    oguzhanagir created
    Support Team

    Hi @[email protected]

    Thank you for reporting this issue.

    The database migration itself is not failing. The build completes successfully, but the EF Core Package Manager Console treats the NU1902 NuGet security warning as a terminating PowerShell error because it runs with ErrorActionPreference set to Stop.

    AngleSharp 0.17.1 is included transitively through HtmlSanitizer. We do not recommend upgrading AngleSharp directly because HtmlSanitizer also depends on compatible versions of AngleSharp and AngleSharp.Css. Updating only one of these packages may cause dependency or runtime compatibility issues.

    We have identified this dependency/tooling issue and plan to update the related package set in the next ASP.NET Zero version.

    In the meantime, you can apply the migrations using the .Migrator project, which is the recommended ASP.NET Zero approach:

    1. Set Intelly.Migrator as the startup project.
    2. Verify its connection string in appsettings.json.
    3. Run the project.

    Alternatively, since the project has already built successfully, you can use the EF Core CLI from the Intelly.EntityFrameworkCore directory:

    dotnet ef database update --startup-project ../Intelly.Web.Host/Intelly.Web.Host.csproj --no-build
    

    The warning may still be displayed, but it should not stop the CLI command.

    We do not recommend changing the global PowerShell ErrorActionPreference, as this can hide unrelated errors. Also, please note that suppressing NU1902 would only bypass the tooling issue; it would not resolve the reported security vulnerability.

    The advisory affects specially crafted, untrusted HTML processed by the HTML sanitizer. It is not related to Entity Framework migrations.

    Best regards

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    [email protected] created

    Hello ASP.NET Zero Support Team,

    I am trying to create a new Entity Framework Core migration using the Package Manager Console.

    Command:

    Add-Migration "Added_Tables_ApplicationSetup"

    The default project is:

    src\Intelly.EntityFrameworkCore

    The project builds successfully, but the migration command stops with the following message:

    The running command stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop:

    warning NU1902: Package 'AngleSharp' 0.17.1 has a known moderate severity vulnerability: https://github.com/advisories/GHSA-pgww-w4g6-26qg

    The warning appears to originate from:

    src\Intelly.Web.Host\Intelly.Web.Host.csproj

    Could you please advise:

    Why is this NuGet warning stopping Add-Migration even though the build succeeds? Which version of AngleSharp is compatible with this ASP.NET Zero version? Should we update AngleSharp directly, update another package that depends on it, or temporarily suppress NU1902? Is there a recommended ASP.NET Zero procedure for resolving this issue without causing dependency conflicts?

    I have attached a screenshot of the Package Manager Console output.

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)
  • User Avatar
    0
    oguzhanagir created
    Support Team

    Hi @[email protected]

    This security issue arose after updating the ABP packages and releasing a new version. We will fix this issue in the next version. For now, you can follow the steps below for a temporary solution. If you wish to temporarily remove this warning, you can update the AngleSharp package to its latest version in the Top Level location where it is used. However, package incompatibility issues may arise, so you should be careful when updating. This issue will be addressed in the next ABP release.

    Open a terminal under your EntityframeworkCore project and execute the following commands:

    If you want to add migrations: dotnet ef migrations add Your_Migration_Name

    To update the database, use the following command: dotnet ef database update

    You need to have dotnet ef installed on your local machine.

    This will solve your migration creation or database update problem.

    If the problem persists, please do not hesitate to contact us.

    Thank you.

    Markdown is supported
    Copy & paste or drag & drop images (max 30 MB per image)