dotnetCorePackages.dotnet_{8..10}.vmr: ignore dotnet audit errors in fetch-deps

pkgs/development/compilers/dotnet/stage0.nix

@@ -113,6 +113,7 @@ let
                       -s //Project -t elem -n Import \
                       -i \$prev -t attr -n Project -v "${./record-downloaded-packages.proj}" \
                       repo-projects/Directory.Build.targets
+
                     # make nuget-client use the standard arcade package-cache dir, which
                     # is where we scan for dependencies
                     xmlstarlet ed \
@@ -121,6 +122,15 @@ let
                       -s \$prev -t elem -n EnvironmentVariables \
                       -i \$prev -t attr -n Include -v 'NUGET_PACKAGES=$(ProjectDirectory)artifacts/sb/package-cache/' \
                       repo-projects/nuget-client.proj
+
+                    # https://github.com/dotnet/dotnet/pull/546
+                    for proj in arcade nuget-client; do
+                      xmlstarlet ed \
+                        --inplace \
+                        -s //Project -t elem -n PropertyGroup \
+                        -s \$prev -t elem -n NoWarn -v '$(NoWarn);NU1901' \
+                        src/$proj/Directory.Build.props
+                    done
                   '';
                 buildFlags = [ "--online" ] ++ old.buildFlags;
                 prebuiltPackages = null;