Support

• P

  [OTTER]Gitlab Secure Ressource gone
  14 Mar 2024, 14:58 • philippe.camelio_3885   21 May 2024, 18:26

  13
  0
  Votes
  13
  Posts
  33
  Views

  P 21 May 2024, 18:26

  @atripp Thank you for your time and the fix. I can wait for the next release. Best regards PhilippeC.
• P

  |OTTER] Status filter not working for "any error"
  otter • 1 Apr 2024, 08:55 • philippe.camelio_3885   21 May 2024, 18:23

  4
  0
  Votes
  4
  Posts
  12
  Views

  P 21 May 2024, 18:23

  @atripp Thanks for the update
• 

  Deleting Debian Packages don't work
  14 May 2024, 06:56 • Scati   20 May 2024, 05:52

  7
  0
  Votes
  7
  Posts
  15
  Views

  20 May 2024, 05:52

  Hi @gdivis, pgutil packages delete --source=scati --feed=stable --package="pacomalarmprocessor" --version=7.2.1.0-1 --qualifier="arch=amd64&component=scati&distro=bionic" It works perfect with that command. Thank you. Keep up the good work.
• C

  [ProGet] Alpine Feed Connector - Package Caching Broken
  11 Dec 2023, 22:46 • chowarth_6088   16 May 2024, 01:56

  6
  0
  Votes
  6
  Posts
  29
  Views

  16 May 2024, 01:56

  Hi @artur-wisniowski_4029, We'll get this fixed, but it's unlikely to be in this week's release. ProGet hashs the complete package file for every package uploaded to it, while the APK spec says to hash only over a certain tar segment of the package. We've been returning ProGet's hash of the package file as the checksum and this is incorrect as you've noted. We'll post here again when we have a fix date, but I'd expect it will be either next week or the week after. Thanks!
• P

  ProGet Npm Feed cache
  14 May 2024, 07:06 • pawel.ostrowski_5669   15 May 2024, 00:11

  4
  0
  Votes
  4
  Posts
  22
  Views

  15 May 2024, 00:11

  Hi @pawel-ostrowski_5669 , ProGet dynamically generates these indexes based on an aggregation of locally stored packages and connector results on each request, so caching doesn't make a lot of sense. npmjs.org, on the other hand, needs to only update indexes when a new version is uploaded, so the cache duration can be a long time. Thanks, Steve
• P

  Import SBOM
  14 May 2024, 18:57 • pbinnell_2355   14 May 2024, 23:16

  2
  0
  Votes
  2
  Posts
  8
  Views

  14 May 2024, 23:16

  Hi @pbinnell_2355 , It looks like you have Windows Integrated Authentication enabled. Curl does not support this, but with powerShell you would need to add -UseDefaultCredentials Thanks, Steve
• A

  ProGet: Vulnerability scanning of Chocolatey feeds
  11 May 2024, 10:50 • am.infrastruktur_3111   11 May 2024, 15:29

  2
  0
  Votes
  2
  Posts
  9
  Views

  11 May 2024, 15:29

  Hi @am-infrastruktur_3111 , Chocolatey packages are scanned for viruses, so you will see those pop up. For example, pathdebug 0.3.4 should show up in ProGet's vulnerability system: https://security.inedo.com/vulnerability/details/PGV-2420934 Otherwise, there is unfortunately no standardized/consistent naming for Windows software (unlike APK, APT, RPM, etc), so there's no way to associate a vulnerability report like CVE-2024-21392 with a software package. In this case, Microsoft calls the effected software ".NET 8.0", not .NET or dotnet, etc. In Other reports, they call it ".NET8", etc. And you can see that it translates a little weird n the CVE report as well: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392 ".NET 8.0 affected from 1.0.0 before 8.0.3 " - weird, right? This is a known issue in the industry for many years, and it would need to be address by Microsoft first. It's sadly not on their priority list. Best, Alana
• P

  Two tier nuget Feeds and controlling build server access with minimum changes to yaml build/pipelines
  8 May 2024, 17:59 • pbinnell_2355   10 May 2024, 16:23

  6
  0
  Votes
  6
  Posts
  12
  Views

  10 May 2024, 16:23

  Ultimately this is going to involve training for your developers. Just like instituting a code review process will be new and uncomfortable at first, a package review process will be the same. Developers will not like it and they will complain. However, 99% of the time, developers will be fine using the approved feed. 1% of the time (when they want to test a new package or upgrade), then will use the unapproved feed. They'll just need to learn how to switch package sources (it's a drop-down in Visual Studio) and then learn not commit commit these package references. My advise is to make it incumbent upon developers to not commit code/configuration that depends on unapproved packages. If they do, then it will "break the build" because the packages aren't available. This is an expected behavior - it would be like if a developer decided to upgrade to .NET9-beta. "Don't break the build" is a common mantra on development teams, and it means developers can't commit code changes that will do that. Just extend that to using unapproved packages.
• 

  GPG error updating Debian repositories
  17 Apr 2024, 09:44 • Scati   10 May 2024, 06:54

  12
  0
  Votes
  12
  Posts
  40
  Views

  10 May 2024, 06:54

  Fix verified on 2024.2 version. Thank you.
• 

  Date in Debian feed release file malformed
  debian • 25 Apr 2024, 07:48 • Scati   10 May 2024, 06:43

  3
  0
  Votes
  3
  Posts
  10
  Views

  10 May 2024, 06:43

  Fix verified on 2024.2 version. Thank you.
• P

  pgutil not working in CI/CD yaml pipeline
  9 May 2024, 15:52 • pbinnell_2355   9 May 2024, 18:13

  2
  0
  Votes
  2
  Posts
  9
  Views

  9 May 2024, 18:13

  Hi @pbinnell_2355, Looks like the example code was incorrect. I've updated it. When a dotnet tool is installed globally, you run it by just running the tool name directly, so pgutil instead of dotnet pgutil Hope this help! -Greg
• R

  Package Vulnerabilities - API
  3 May 2024, 16:28 • rick.edwards_9161   9 May 2024, 16:21

  6
  0
  Votes
  6
  Posts
  21
  Views

  9 May 2024, 16:21

  @rick-edwards_9161 that is correct, these will only be developed for ProGet 2024
• S

  ProGet Lock Issues
  3 May 2024, 06:27 • scott.wright_8356   7 May 2024, 22:45

  5
  0
  Votes
  5
  Posts
  26
  Views

  S 7 May 2024, 22:45

  I set our metadata caching to 10000 queries over 24 hours. I will reduce to the default first and monitor. Thanks Dean
• P

  [OT] Modifying a server configuration triggers a full "Server Check"
  28 Apr 2024, 13:37 • philippe.camelio_3885   6 May 2024, 19:07

  9
  0
  Votes
  9
  Posts
  18
  Views

  P 6 May 2024, 19:07

  Hi Dean Thank you This is helpfull. I will dig a little bit and let you know if I found something. Best regards PhilippeC.
• J

  ProGet: Exception when NuGet README links to image that is not contained in the package
  3 May 2024, 14:25 • jw   6 May 2024, 15:05

  6
  0
  Votes
  6
  Posts
  16
  Views

  6 May 2024, 15:05

  @jw we'll definitely keep this in mind, it doesn't look trivial based on our usage of that marked library Personally, I always try to keep the Diagnostic Center clean and empty, so when new issues show up I can easily spot and address them. Sifting through messages that are basically spam, without being able to filter or ignore them costs me more of my time that I would like to invest for monitoring. We do not recommend using the Diagnostic Center for proactive monitoring. It's only intended as a tool for troubleshooting things like connector or 500 errors that you / end-users encounter. There are a lot of non-problem errors and warnings logged that aren't worth time even looking at.
• J

  ProGet SCA: Add license type issue
  3 May 2024, 15:11 • jw   6 May 2024, 07:26

  3
  0
  Votes
  3
  Posts
  12
  Views

  J 6 May 2024, 07:26

  Makes sense, thanks for the quick fix. Cheers
• V

  Errors in PackageAnalyzer logs
  12 Apr 2024, 11:29 • v.makkenze_6348   2 May 2024, 06:42

  11
  0
  Votes
  11
  Posts
  44
  Views

  V 2 May 2024, 06:42

  Thanks I made a backup and ran the script and it did clean up quite a few rows. I'll try upgrading to 2024 again next week after we released :)
• J

  ProGet 2024 default font size
  30 Apr 2024, 15:25 • jw   30 Apr 2024, 16:58

  2
  0
  Votes
  2
  Posts
  10
  Views

  30 Apr 2024, 16:58

  Maybe I'm getting old and 14px seemed to small In addition, we don't display a lot of textual information so the larger font size seemed to fill out the whitespace nicer, particularly in tables (which there are a lot). I was never really all that happy with how this filled out whitespace (from ProGet 2023): I'm not thrilled about ProGet 2024, but it felt like an improvement... and most importantly, "something different" than past few years: That said, for ProGet 2025 I'd love to do a much more notable style refresh (logos? etc?), perhaps even some navigation tweaks. So open to ideas there
• R

  Custom endpoint URL
  30 Apr 2024, 15:09 • rmusick_7875   30 Apr 2024, 15:46

  2
  0
  Votes
  2
  Posts
  5
  Views

  30 Apr 2024, 15:46

  Hi @rmusick_7875, I'm afraid API endpoints are not customizable and we do not support doing "reverse proxy" or otherwise rewriting the URLs. Hopefully this will be a good chance to make the endpoint-url more easy to configure/change - this will be important, as you may wish to move to multiple feeds, etc. Good luck, Steve
• G

  ProGet: Chocolately unable to connect
  30 Apr 2024, 08:55 • greg.swiderski_0221   30 Apr 2024, 14:49

  2
  0
  Votes
  2
  Posts
  13
  Views

  30 Apr 2024, 14:49

  Hi @greg-swiderski_0221 , It looks like there is an "Object reference not set to an instance of an object" error that's occurring while trying to connect: 2024-04-30 09:52:41,341 8256 [WARN ] - Unable to connect to source 'http://localhost:8624/nuget/approved-choco/': Object reference not set to an instance of an object. That error is presumably occurring from the Chocolatey client (choco), and unfortunately there's no way to know what it means. Most likely, it's an "error reporting an error" message, but it's hard to say. You could use some HTTP monitoring software (Fiddler Classic, Wireshark), and see if ProGet is returning an error of some kind.... but even if so, choco should report that error. I would check with the chocolatey team on this one. Thanks, Steve