{"action":"closed","issue":{"url":"https://api.github.com/repos/aspnet/Coherence/issues/40","labels_url":"https://api.github.com/repos/aspnet/Coherence/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Coherence/issues/40/comments","events_url":"https://api.github.com/repos/aspnet/Coherence/issues/40/events","html_url":"https://github.com/aspnet/Coherence/issues/40","id":114263091,"number":40,"title":"Set up a gated dependency pull for IdentityModel packages","user":{"login":"Tratcher","id":1821173,"avatar_url":"https://avatars.githubusercontent.com/u/1821173?v=3","gravatar_id":"","url":"https://api.github.com/users/Tratcher","html_url":"https://github.com/Tratcher","followers_url":"https://api.github.com/users/Tratcher/followers","following_url":"https://api.github.com/users/Tratcher/following{/other_user}","gists_url":"https://api.github.com/users/Tratcher/gists{/gist_id}","starred_url":"https://api.github.com/users/Tratcher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Tratcher/subscriptions","organizations_url":"https://api.github.com/users/Tratcher/orgs","repos_url":"https://api.github.com/users/Tratcher/repos","events_url":"https://api.github.com/users/Tratcher/events{/privacy}","received_events_url":"https://api.github.com/users/Tratcher/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/aspnet/Coherence/labels/3%20-%20Done","name":"3 - Done","color":"CCCCCC"}],"state":"closed","locked":false,"assignee":{"login":"Tratcher","id":1821173,"avatar_url":"https://avatars.githubusercontent.com/u/1821173?v=3","gravatar_id":"","url":"https://api.github.com/users/Tratcher","html_url":"https://github.com/Tratcher","followers_url":"https://api.github.com/users/Tratcher/followers","following_url":"https://api.github.com/users/Tratcher/following{/other_user}","gists_url":"https://api.github.com/users/Tratcher/gists{/gist_id}","starred_url":"https://api.github.com/users/Tratcher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Tratcher/subscriptions","organizations_url":"https://api.github.com/users/Tratcher/orgs","repos_url":"https://api.github.com/users/Tratcher/repos","events_url":"https://api.github.com/users/Tratcher/events{/privacy}","received_events_url":"https://api.github.com/users/Tratcher/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/aspnet/Coherence/milestones/4","html_url":"https://github.com/aspnet/Coherence/milestones/1.0.0-rc2","labels_url":"https://api.github.com/repos/aspnet/Coherence/milestones/4/labels","id":1407376,"number":4,"title":"1.0.0-rc2","description":null,"creator":{"login":"muratg","id":1808428,"avatar_url":"https://avatars.githubusercontent.com/u/1808428?v=3","gravatar_id":"","url":"https://api.github.com/users/muratg","html_url":"https://github.com/muratg","followers_url":"https://api.github.com/users/muratg/followers","following_url":"https://api.github.com/users/muratg/following{/other_user}","gists_url":"https://api.github.com/users/muratg/gists{/gist_id}","starred_url":"https://api.github.com/users/muratg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muratg/subscriptions","organizations_url":"https://api.github.com/users/muratg/orgs","repos_url":"https://api.github.com/users/muratg/repos","events_url":"https://api.github.com/users/muratg/events{/privacy}","received_events_url":"https://api.github.com/users/muratg/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":1,"state":"open","created_at":"2015-11-11T21:10:35Z","updated_at":"2015-12-01T23:25:24Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-10-30T12:48:51Z","updated_at":"2015-12-01T23:25:24Z","closed_at":"2015-12-01T23:25:24Z","body":"The security repo depends on a few different IdentityModel packages. It currently resolves these from a myget feed. However, sometimes those packages depend on a later version of CoreCLR than us, so it fails trying to restore dependencies. They also sometimes make breaking changes.\r\n\r\nEstablish a gated CI build that pulls from their feed (nightly or release) compiles and tests Security (and MusicStore?), and pushes the verified packages to our own feed.\r\n\r\nOne related issue we have is that the IdentityModel packages maintain their build numbers when shipped to nuget.org (http://www.nuget.org/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect/2.0.0-beta8-210131116). When our project.json references use -rc1-*, our final nuget.org release builds end up targeting -rc1 of their packages. We could work around this by automatically stamping the needed build number into the project json, or perhaps stamping it directly into the output packages."}}