From 602503e3ba62cc3040d573ab267dd495597a20fa Mon Sep 17 00:00:00 2001
From: Timothee Guerin <timothee.guerin@outlook.com>
Date: Mon, 1 Jun 2026 10:04:14 -0400
Subject: [PATCH] Revert "Remove obsolete transitive NuGet overrides from
 typespec-vs (#10824)"

This reverts commit 5fe495792abb18de0fb3d3a94617e0685409eb9e.
---
 ...e-unnecessary-nuget-package-2026-4-28-12-59-38.md |  7 -------
 .../typespec-vs/src/Microsoft.TypeSpec.VS.csproj     | 12 ++++++++++++
 2 files changed, 12 insertions(+), 7 deletions(-)
 delete mode 100644 .chronus/changes/copilot-remove-unnecessary-nuget-package-2026-4-28-12-59-38.md

diff --git a/.chronus/changes/copilot-remove-unnecessary-nuget-package-2026-4-28-12-59-38.md b/.chronus/changes/copilot-remove-unnecessary-nuget-package-2026-4-28-12-59-38.md
deleted file mode 100644
index b8e1f4edbc2..00000000000
--- a/.chronus/changes/copilot-remove-unnecessary-nuget-package-2026-4-28-12-59-38.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-changeKind: fix
-packages:
-  - typespec-vs
----
-
-Remove obsolete explicit Visual Studio transitive NuGet package overrides.
\ No newline at end of file
diff --git a/packages/typespec-vs/src/Microsoft.TypeSpec.VS.csproj b/packages/typespec-vs/src/Microsoft.TypeSpec.VS.csproj
index d8c02f42255..804b1067d02 100644
--- a/packages/typespec-vs/src/Microsoft.TypeSpec.VS.csproj
+++ b/packages/typespec-vs/src/Microsoft.TypeSpec.VS.csproj
@@ -31,6 +31,10 @@
       Link="TextMate/typespec.tmLanguage" />
     <Content Update="@(Content)" IncludeInVSIX="true" CopyToOutputDirectory="PreserveNewest" />
     <Reference Include="System.ComponentModel.Composition" />
+    <!-- The 'MessagePack' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.SDK', 'Microsoft.VisualStudio.Workspace' and 'Microsoft.VisualStudio.VSIntegration' -->
+    <!-- Have to add it explicitly here because the version used by 'Microsoft.VisualStudio...' report vulnerabilities now -->
+    <!-- TODO: [#5368] remove this explicit reference after 'Microsoft.VisualStudio...' releases new version having 'MessagePack' updated to vulnerability free version-->
+    <PackageReference Include="MessagePack" Version="2.5.192" />
     <PackageReference Include="Microsoft.NETFramework.ReferenceAssemblies" Version="1.0.2" />
     <Content Include="Icons\logo.png">
       <CopyToOutputDirectory>Always</CopyToOutputDirectory>
@@ -43,8 +47,16 @@
     </Content>
   </ItemGroup>
   <ItemGroup>
+    <!-- The 'Microsoft.VisualStudio.Composition' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.Workspace' -->
+    <!-- Have to add it explicitly here because otherwise 'Microsoft.VisualStudio.Workspace" will report warning NU1603 because its desired version not found and higher version will be used -->
+    <!-- TODO: [#5368] remove this explicit reference after 'Microsoft.VisualStudio...' releases new version without the warning-->
+    <PackageReference Include="Microsoft.VisualStudio.Composition" Version="17.13.41" />
     <!-- Use 17.0.x or latest 16.x if no 17.0.x for compatible API-->
     <PackageReference Include="Microsoft.VisualStudio.SDK" Version="17.14.40265" ExcludeAssets="Runtime" />
+    <!-- The 'Microsoft.VisualStudio.Shell.15.0' is not used directly but referenced by nuget package 'Microsoft.VisualStudio.Workspace.VSIntegration' -->
+    <!-- Have to add it explicitly here because otherwise 'Microsoft.VisualStudio.Workspace.VSIntegration" will report warning NU1603 because its desired version not found and higher version will be used -->
+    <!-- TODO: [#5368] remove this explicit reference after 'Microsoft.VisualStudio...' releases new version without the warning-->
+    <PackageReference Include="Microsoft.VisualStudio.Shell.15.0" Version="17.14.40264" />
     <PackageReference Include="Microsoft.VisualStudio.Workspace" Version="17.12.19" ExcludeAssets="Runtime" />
     <PackageReference Include="Microsoft.VisualStudio.Workspace.VSIntegration" Version="17.12.19" ExcludeAssets="Runtime" />
     <!-- https://github.com/advisories/GHSA-w3q9-fxm7-j8fq -->