{"action":"created","issue":{"url":"https://api.github.com/repos/NuGet/Home/issues/1360","labels_url":"https://api.github.com/repos/NuGet/Home/issues/1360/labels{/name}","comments_url":"https://api.github.com/repos/NuGet/Home/issues/1360/comments","events_url":"https://api.github.com/repos/NuGet/Home/issues/1360/events","html_url":"https://github.com/NuGet/Home/issues/1360","id":105593370,"number":1360,"title":"Support package restore to work with \"highest\" while following constraints","user":{"login":"giggio","id":334958,"avatar_url":"https://avatars.githubusercontent.com/u/334958?v=3","gravatar_id":"","url":"https://api.github.com/users/giggio","html_url":"https://github.com/giggio","followers_url":"https://api.github.com/users/giggio/followers","following_url":"https://api.github.com/users/giggio/following{/other_user}","gists_url":"https://api.github.com/users/giggio/gists{/gist_id}","starred_url":"https://api.github.com/users/giggio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giggio/subscriptions","organizations_url":"https://api.github.com/users/giggio/orgs","repos_url":"https://api.github.com/users/giggio/repos","events_url":"https://api.github.com/users/giggio/events{/privacy}","received_events_url":"https://api.github.com/users/giggio/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-09-09T13:10:38Z","updated_at":"2015-09-09T19:38:21Z","closed_at":null,"body":"**Note**: This is coming as a parallel request to an update on `dnu`. See https://github.com/aspnet/dnx/issues/2657\r\n\r\nWe need to be able to tell nuget (and VS) to restore the highest available version from a dnx package. Right now it always resolves to lowest.\r\n\r\nFor example, if my app dependes on \"[1,2)\", this means I depend on at least version 1, and I accept anything up to version 2. But if 1.0.0 and 1.1.0 exist, nuget will always get 1.0.0.\r\nThere is no config at this moment that allows nuget to get the highest available version that works with a version spec. A higher version will only be selected if there is another package restricting the dependence to a higher range.\r\n\r\nThis is really important for package authors for fixing security issues, releasing minors, etc.\r\n\r\nNode is a good example on how to work this. \r\nNode allows patch updates with `~`, like `~1.0.0` (anything from 1.0.0 to 1.1.0 - not included) and minor updates with `^`, like `^1.0.0` (anything from 1.0.0 to 2.0.0 - not included).\r\nNode also allow for wildcards with the `x`, like `1.x` (anything greater or equal to 1.0 and lower than 2)."},"comment":{"url":"https://api.github.com/repos/NuGet/Home/issues/comments/139024144","html_url":"https://github.com/NuGet/Home/issues/1360#issuecomment-139024144","issue_url":"https://api.github.com/repos/NuGet/Home/issues/1360","id":139024144,"user":{"login":"yishaigalatzer","id":1238711,"avatar_url":"https://avatars.githubusercontent.com/u/1238711?v=3","gravatar_id":"","url":"https://api.github.com/users/yishaigalatzer","html_url":"https://github.com/yishaigalatzer","followers_url":"https://api.github.com/users/yishaigalatzer/followers","following_url":"https://api.github.com/users/yishaigalatzer/following{/other_user}","gists_url":"https://api.github.com/users/yishaigalatzer/gists{/gist_id}","starred_url":"https://api.github.com/users/yishaigalatzer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yishaigalatzer/subscriptions","organizations_url":"https://api.github.com/users/yishaigalatzer/orgs","repos_url":"https://api.github.com/users/yishaigalatzer/repos","events_url":"https://api.github.com/users/yishaigalatzer/events{/privacy}","received_events_url":"https://api.github.com/users/yishaigalatzer/received_events","type":"User","site_admin":false},"created_at":"2015-09-09T19:38:20Z","updated_at":"2015-09-09T19:38:20Z","body":"So to answer your questions:\r\n\r\nin project.json\r\n\r\n1.* means literally a wildcard match so it will match 1.1, 1.2 and 1.3 etc.\r\n\r\nThere is no way to specify greater than 1.3 and smaller than 2.0, and I agree that's something that should be added.\r\n\r\nYou cannot specify 1.* for a dependency only on the project.json level (so not in the nuspec).\r\n\r\n1.2.* means, 1.2, 1.2.1, 1.2.3, etc"}}