ci: use NuGet lock file for deterministic dotnet restore in typespec-vs

.github/workflows/core-ci.yml

@@ -40,7 +40,7 @@ jobs:
         run: pnpm install
 
       - name: Restore .NET dependencies
-        run: dotnet restore
+        run: dotnet restore --locked-mode
         working-directory: packages/typespec-vs
 
       - name: Build

.gitignore

@@ -216,6 +216,9 @@ packages/*/etc/
 
 # csharp emitter
 !packages/http-client-csharp/package-lock.json
+
+# typespec-vs NuGet lock file for deterministic CI restores
+!packages/typespec-vs/src/packages.lock.json
 packages/http-client-csharp/generator/artifacts/
 packages/http-client-csharp/debug/
 packages/http-client-csharp/generated-defs/**/*.js

.prettierignore

@@ -14,6 +14,9 @@ pnpm-lock.yaml
 # Agentic workflow lock file
 **/*.lock.yml
 
+# NuGet lock file
+**/*.lock.json
+
 # Emu spec file, formatting is wrong
 packages/spec/src/spec.emu.html
 

cspell.yaml

@@ -351,6 +351,7 @@ ignorePaths:
   - packages/typespec-vscode/test/scenarios/**
   - pnpm-lock.yaml
   - "**/*.lock.yml"
+  - "**/*.lock.json"
   - pnpm-workspace.yaml
   - "**/dependabot.yml"
   - "**/*.mp4"

eng/tsp-core/pipelines/templates/install.yml

@@ -35,6 +35,6 @@ steps:
     retryCountOnTaskFailure: 3
 
   - ${{ if parameters.useDotNet }}:
-      - script: dotnet restore
+      - script: dotnet restore --locked-mode
         displayName: Restore .NET Dependencies
         workingDirectory: packages/typespec-vs

packages/typespec-vs/src/Microsoft.TypeSpec.VS.csproj

@@ -11,6 +11,7 @@
     <!-- https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/9.0/nugetaudit-transitive-packages -->
     <NuGetAuditMode>all</NuGetAuditMode>
     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
+    <RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
     <!-- Official build will pass in the real version from package.json, see scripts/build.js -->
     <Version>42.42.42</Version>
     <!-- Only deploy extension when building inside Visual Studio-->
@@ -45,8 +46,8 @@
   <ItemGroup>
     <!-- Use 17.0.x or latest 16.x if no 17.0.x for compatible API-->
     <PackageReference Include="Microsoft.VisualStudio.SDK" Version="17.14.40265" ExcludeAssets="Runtime" />
-    <PackageReference Include="Microsoft.VisualStudio.Workspace" Version="17.12.19" ExcludeAssets="Runtime" />
-    <PackageReference Include="Microsoft.VisualStudio.Workspace.VSIntegration" Version="17.12.19" ExcludeAssets="Runtime" />
+    <PackageReference Include="Microsoft.VisualStudio.Workspace" Version="17.12.19" ExcludeAssets="Runtime" NoWarn="NU1603" />
+    <PackageReference Include="Microsoft.VisualStudio.Workspace.VSIntegration" Version="17.12.19" ExcludeAssets="Runtime" NoWarn="NU1603" />
     <!-- https://github.com/advisories/GHSA-w3q9-fxm7-j8fq -->
     <PackageReference Include="Microsoft.Build" Version="17.14.28"/>
     <PackageReference Include="Microsoft.VSSDK.BuildTools" Version="17.14.2120">