Revise NU1302 documentation with new scenarios #3471

Nigusu-Allehu · 2025-09-23T19:55:44Z

Fixes: NuGet/Home#14418
Updated the documentation for NuGet Error NU1302 to include additional scenarios and solutions for handling HTTP sources.

Updated the documentation for NuGet Error NU1302 to include additional scenarios and solutions for handling HTTP sources.

Copilot

Pull Request Overview

Updates the NU1302 error documentation to include a new scenario where HTTPS package sources contain HTTP resource endpoints, providing comprehensive guidance for both the original HTTP source scenario and the new mixed HTTPS/HTTP resource scenario.

Added Scenario 2 documentation for HTTPS sources with HTTP resources
Provided clear solutions including updating sources to HTTPS and allowing insecure connections
Maintained consistent structure and formatting with the existing documentation

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

docs/reference/errors-and-warnings/NU1302.md

learn-build-service-prod · 2025-09-23T19:56:43Z

Learn Build status updates of commit 17d9565:

💡 Validation status: suggestions

File	Status	Preview URL	Details
docs/reference/errors-and-warnings/NU1302.md	💡Suggestion	View	Details

docs/reference/errors-and-warnings/NU1302.md

Line 69, Column 74: [Suggestion: learn-site-link-broken - See documentation] Link '/api/overview' points to a learn site page that doesn't exist. Check the path or URL and update the link.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

learn-build-service-prod · 2025-09-23T19:58:21Z

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

Co-authored-by: Copilot <[email protected]>

learn-build-service-prod · 2025-09-23T20:00:12Z

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

learn-build-service-prod · 2025-09-23T20:00:17Z

Learn Build status updates of commit 062c2df:

⚠️ Validation status: warnings

File	Status	Preview URL	Details
docs/reference/errors-and-warnings/NU1302.md	⚠️Warning	View	Details

docs/reference/errors-and-warnings/NU1302.md

Line 69, Column 74: [Warning: file-not-found - See documentation] Invalid file link: '../../api/overview'.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

learn-build-service-prod · 2025-09-23T20:01:04Z

Learn Build status updates of commit c8f548d:

⚠️ Validation status: warnings

File	Status	Preview URL	Details
docs/reference/errors-and-warnings/NU1302.md	⚠️Warning	View	Details

docs/reference/errors-and-warnings/NU1302.md

Line 69, Column 74: [Warning: file-not-found - See documentation] Invalid file link: '../../api/overview'.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

learn-build-service-prod · 2025-09-23T20:01:16Z

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

Copilot

Pull Request Overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

docs/reference/errors-and-warnings/NU1302.md

Co-authored-by: Copilot <[email protected]>

Copilot

Pull Request Overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

docs/reference/errors-and-warnings/NU1302.md

learn-build-service-prod · 2025-09-23T20:06:01Z

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

learn-build-service-prod · 2025-09-23T20:06:01Z

Learn Build status updates of commit 68768f5:

⚠️ Validation status: warnings

File	Status	Preview URL	Details
docs/reference/errors-and-warnings/NU1302.md	⚠️Warning	View	Details

docs/reference/errors-and-warnings/NU1302.md

Line 69, Column 78: [Warning: file-not-found - See documentation] Invalid file link: '../../api/overview'.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

donnie-msft · 2025-10-08T19:11:39Z

docs/reference/errors-and-warnings/NU1302.md

+
+## Scenario 2
+
+> You are using a NuGet source 'https://contoso/v3/index.json' that contains an 'HTTP' service index resource endpoint: 'http://contoso/v3-flatcontainer/contoso/index.json'. This is insecure and not recommended. To allow HTTP resources, you must explicitly set 'allowInsecureConnections' to true in your NuGet.Config file. For more information, visit https://aka.ms/nuget-https-everywhere.


I know I've left this feedback on another doc as well, but would it make sense to delete the self-referencing URL from the docs page? Same applies to Scenario 1

Suggested change

> You are using a NuGet source 'https://contoso/v3/index.json' that contains an 'HTTP' service index resource endpoint: 'http://contoso/v3-flatcontainer/contoso/index.json'. This is insecure and not recommended. To allow HTTP resources, you must explicitly set 'allowInsecureConnections' to true in your NuGet.Config file. For more information, visit https://aka.ms/nuget-https-everywhere.

> You are using a NuGet source 'https://contoso/v3/index.json' that contains an 'HTTP' service index resource endpoint: 'http://contoso/v3-flatcontainer/contoso/index.json'. This is insecure and not recommended. To allow HTTP resources, you must explicitly set 'allowInsecureConnections' to true in your NuGet.Config file.

donnie-msft · 2025-10-08T19:13:13Z

docs/reference/errors-and-warnings/NU1302.md

+
+#### Option 2: Allow Insecure Connections (If Necessary)
+
+If you must use the source, explicitly allow insecure connections by adding the `allowInsecureConnections` flag in the `NuGet.Config`:


Should we call out the VS Options support for enabling this flag as well?

Suggested change

If you must use the source, explicitly allow insecure connections by adding the `allowInsecureConnections` flag in the `NuGet.Config`:

If you must use the source, explicitly allow insecure connections by adding the `allowInsecureConnections` flag in the `NuGet.Config`:

For information about managing the setting in Visual Studio, see [NuGet Options in Visual Studio](../../consume-packages/nuget-visual-studio-options.md#allow-insecure-connections)

donnie-msft · 2025-10-08T19:16:05Z

docs/reference/errors-and-warnings/NU1302.md

+
+### Issue
+
+The package source you configured is **HTTPS**, but one of its resources (indicated in the error message) is **HTTP**.


The language is slightly strong here with so many "you"s. It may be configured by a machine-wide config, or on CI, etc.
Can we emphasize the configuration (NuGet.Config) is setup a particular way?

Suggested change

The package source you configured is **HTTPS**, but one of its resources (indicated in the error message) is **HTTP**.

A configured package source uses **HTTPS**, but one of its resources (indicated in the error message) uses **HTTP**.

kartheekp-ms · 2025-10-13T23:57:05Z

docs/reference/errors-and-warnings/NU1302.md

+NuGet requires that all sources and their resources use HTTPS.
+If you want to continue using this source despite its HTTP resource, you must set the `allowInsecureConnections` flag to true in your NuGet.config file.
+
+To learn more about NuGet Sources and Resource Endpoints, take a look at the [NuGet Sources and Resource Endpoints overview](../../api/overview).


NuGet Sources and Resource Endpoints word was repeated twice in the same sentence.

One suggestion below but open for alternatives.

Suggested change

To learn more about NuGet Sources and Resource Endpoints, take a look at the [NuGet Sources and Resource Endpoints overview](../../api/overview).

To learn more about package sources and resource endpoints, take a look at the [NuGet Server API](../../api/overview).

Revise NU1302 documentation with new scenarios

17d9565

Updated the documentation for NuGet Error NU1302 to include additional scenarios and solutions for handling HTTP sources.

Copilot AI review requested due to automatic review settings September 23, 2025 19:55

Nigusu-Allehu requested review from a team as code owners September 23, 2025 19:55

Nigusu-Allehu self-assigned this Sep 23, 2025

Copilot AI reviewed Sep 23, 2025

View reviewed changes

docs/reference/errors-and-warnings/NU1302.md Outdated Show resolved Hide resolved

Nigusu-Allehu and others added 2 commits September 23, 2025 12:59

link

062c2df

Update docs/reference/errors-and-warnings/NU1302.md

c8f548d

Co-authored-by: Copilot <[email protected]>

Nigusu-Allehu requested a review from Copilot September 23, 2025 20:01

Copilot AI reviewed Sep 23, 2025

View reviewed changes

docs/reference/errors-and-warnings/NU1302.md Outdated Show resolved Hide resolved

Update docs/reference/errors-and-warnings/NU1302.md

68768f5

Co-authored-by: Copilot <[email protected]>

Nigusu-Allehu requested a review from Copilot September 23, 2025 20:05

Copilot AI reviewed Sep 23, 2025

View reviewed changes

docs/reference/errors-and-warnings/NU1302.md Show resolved Hide resolved

nkolev92 approved these changes Oct 8, 2025

View reviewed changes

donnie-msft reviewed Oct 8, 2025

View reviewed changes

Nigusu-Allehu mentioned this pull request Oct 9, 2025

Document errors for http usage for .NET 10 NuGet/Home#14567

Closed

kartheekp-ms reviewed Oct 13, 2025

View reviewed changes


		## Scenario 2

		> You are using a NuGet source 'https://contoso/v3/index.json' that contains an 'HTTP' service index resource endpoint: 'http://contoso/v3-flatcontainer/contoso/index.json'. This is insecure and not recommended. To allow HTTP resources, you must explicitly set 'allowInsecureConnections' to true in your NuGet.Config file. For more information, visit https://aka.ms/nuget-https-everywhere.


		#### Option 2: Allow Insecure Connections (If Necessary)

		If you must use the source, explicitly allow insecure connections by adding the `allowInsecureConnections` flag in the `NuGet.Config`:


		### Issue

		The package source you configured is HTTPS, but one of its resources (indicated in the error message) is HTTP.

	The package source you configured is HTTPS, but one of its resources (indicated in the error message) is HTTP.
	A configured package source uses HTTPS, but one of its resources (indicated in the error message) uses HTTP.

	To learn more about NuGet Sources and Resource Endpoints, take a look at the [NuGet Sources and Resource Endpoints overview](../../api/overview).
	To learn more about package sources and resource endpoints, take a look at the [NuGet Server API](../../api/overview).

Uh oh!

Revise NU1302 documentation with new scenarios #3471

Are you sure you want to change the base?

Revise NU1302 documentation with new scenarios #3471

Uh oh!

Conversation

Nigusu-Allehu commented Sep 23, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

💡 Validation status: suggestions

docs/reference/errors-and-warnings/NU1302.md

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

PoliCheck Scan Report

✅ No issues found

More information about PoliCheck

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

PoliCheck Scan Report

✅ No issues found

More information about PoliCheck

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

⚠️ Validation status: warnings

docs/reference/errors-and-warnings/NU1302.md

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

⚠️ Validation status: warnings

docs/reference/errors-and-warnings/NU1302.md

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

PoliCheck Scan Report

✅ No issues found

More information about PoliCheck

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

PoliCheck Scan Report

✅ No issues found

More information about PoliCheck

Uh oh!

learn-build-service-prod bot commented Sep 23, 2025

⚠️ Validation status: warnings

docs/reference/errors-and-warnings/NU1302.md

Uh oh!

donnie-msft Oct 8, 2025

Choose a reason for hiding this comment

Uh oh!

donnie-msft Oct 8, 2025

Choose a reason for hiding this comment

Uh oh!

donnie-msft Oct 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

donnie-msft Oct 8, 2025

Choose a reason for hiding this comment

Uh oh!

kartheekp-ms Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

donnie-msft Oct 14, 2025 •

edited

Loading

kartheekp-ms Oct 13, 2025 •

edited

Loading