Azure Functions
An Azure service that provides an event-driven serverless compute platform.
Getting package error from Microsoft.Azure.Functions.Worker.Sdk having hard dependency on Newtonsoft.Json v10.0.2
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 34%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENB%3C/text%3E%3C/svg%3E)
Navaneethan Balakrishnan
0
Reputation points
I am getting the below nuget feed error when I use Microsoft.Azure.Functions.Worker.Sdk for my azure functions.
The feed - lists package 'Newtonsoft.Json.10.0.2' but multiple attempts to download the nupkg have failed. The feed is either invalid or required packages were removed while the current operation was in progress. Verify the package exists on the feed and try again.
10.0.2 is a vulnerable version and I cannot use it for sure. I tried all the solutions such as forcing the package in csproj file to 13.0.3, setting PrivateAssets, ExcludeAssets, clearing nuget cache...
But nothing helps. I am using .NET8.0 and hence only Azure functions v4 is possible. Downgrading the newtonsoft also not possible as other package depends on version >13.0.1
Can anyone help me on this please.
Azure Functions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 54%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHB%3C/text%3E%3C/svg%3E)
Harish Badijana 15 Reputation points Microsoft External Staff Moderator2025-08-11T06:40:35.18+00:00 @Navaneethan Balakrishnan we understand that You're facing an issue with Microsoft.Azure.Functions.Worker.Sdk when targeting .NET 8.0 and Azure Functions v4, where the SDK tries to restore outdated and vulnerable versions of Newtonsoft.Json, such as 10.0.2, despite explicitly referencing new versions like 13.0.3.
The Azure Functions SDK dynamically generates a temporary worker extension project during the build process. This project targets net6.0 even if your main project targets .NET 8.0.
This Includes transitive dependencies like Microsoft.Azure.WebJobs.Extensions.DurableTask, which pull in older versions of Newtonsoft.Json (e.g., 9.0.1, 10.0.1, 11.0.2).
It Causes NuGet to restore outdated packages even if your main project references newer ones.
This kind of behaviour is not caused by NuGet itself but by how the SDK handles worker extensions during build.
Instead of attempts like forcing the version in .csproj, using PrivateAssets, ExcludeAssets, and clearing the NuGet cache,Try these:
Use SDK version 2.0.0 or later for better compatibility with .NET 9+.
Consider disabling IncludeEmptyEntriesInMessagePayload if unnecessary
Ensure you're not referencing both Microsoft.NET.Sdk.Functions and Microsoft.Azure.Functions.Worker.Sdk in the same project, as they support different hosting models i.e., in-process vs. isolated
I hope this helps in resolving the issue, do let me know if you have any further questions on this
-
Harish Badijana 15 Reputation points Microsoft External Staff Moderator
2025-08-12T04:11:16.62+00:00 @Navaneethan Balakrishnan Just checking to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this.
Sign in to comment
Sign in to answer