Include flags flow incorrectly to transitively pinned centrally managed dependencies

[marcin-krystianc]

NuGet Product Used

dotnet.exe

Product Version

7.0.100

Worked before?

no

Impact

It bothers me. A fix would be nice

Repro Steps & Context

The graph flattening procedure doesn't work correctly for centrally managed transitive dependencies - in certain scenarios it includes too many assets.

https://github.com/marcin-krystianc/TestSolutions/tree/master/CpvmPrivateAssetsIssue4-IncludeFlags

App:

<Project Sdk="Microsoft.NET.Sdk">
  <PropertyGroup>
    <TargetFramework>netstandard2.0</TargetFramework>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <ItemGroup>
    <ProjectReference Include="..\Lib1\Lib1.csproj" />
  </ItemGroup>
</Project>

Lib1:

<Project Sdk="Microsoft.NET.Sdk">
  <PropertyGroup>
    <TargetFramework>netstandard2.0</TargetFramework>	
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <ItemGroup>
    <ProjectReference Include="..\Lib2\Lib2.csproj" IncludeAssets="Runtime" />
  </ItemGroup>
</Project>

Lib2:

<Project Sdk="Microsoft.NET.Sdk">
  <PropertyGroup>
    <TargetFramework>netstandard2.0</TargetFramework>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>  
  <ItemGroup>
    <PackageReference Include="Newtonsoft.Json" />
  </ItemGroup> 
</Project>

and Directory.Packages.props:

<Project>
    <ItemGroup>
        <PackageVersion Include="Newtonsoft.Json" Version="13.0.1" />
    </ItemGroup>
</Project>

The expected content of centralTransitiveDependencyGroups for App project is:

"centralTransitiveDependencyGroups": {
    ".NETStandard,Version=v2.0": {
      "Newtonsoft.Json": {
        "include": "Runtime",
        "version": "[13.0.1, )"
    }
  }
}

but .NET 7.0.100 produces:

"centralTransitiveDependencyGroups": {
  ".NETStandard,Version=v2.0": {
    "Newtonsoft.Json": {
      "include": "Runtime, Compile, Native, BuildTransitive",
      "suppressParent": "None",
      "version": "[13.0.1, )"
    }
  }
}

Verbose Logs

No response