Support

• S

  ProGet: Handling of deprecated NuGet packages
  proget • 9 Jul 2023, 07:09 • sebastian...   25 Jul 2023, 04:05

  8
  0
  Votes
  8
  Posts
  47
  Views

  25 Jul 2023, 04:05

  Hi @sebastian There is no plan to add user-configurable scheduled job capabilities to ProGet, and it's unlikely we would consider that since they are really hard to support. We do have our Otter product that's designed for that However, in ProGet 2022, we considered a periodic "check" for packages in a feed against the source; the use case was "is a newer patch version available" - and if so, then an issue would be raised about using an out-of-date package. We obviously didn't implement that. But it seems we could take a similar approach and then also check for unlisting/deprecation as well. This might be something that comes up in our ProGet 2024 planning. But in either case, it still involves lots and lots of web calls to check each package against the source - so I would start with a a script and see what you find out. Thanks, Alana
• D

  Link between SCA Project and Package
  17 Jul 2023, 19:58 • dan.brown_0128   19 Jul 2023, 13:28

  6
  0
  Votes
  6
  Posts
  30
  Views

  19 Jul 2023, 13:28

  Hi @dan-brown_0128, The only linkage between the SCA project and the NuGet package/feed (and other feed types when associated) is that the SCA project will look at all the associated NuGet packages' feeds to pull their relevant license and vulnerability data for each associated package. The then displays that information in the SCA project and creates issues if it finds problems (blocked license, blocked due to vulnerability, missing package, etc...). Thank, Rich
• R

  Workstation/Server with Dual Choco Feeds
  19 Jul 2023, 12:02 • rmusick_7875   19 Jul 2023, 12:26

  2
  0
  Votes
  2
  Posts
  6
  Views

  19 Jul 2023, 12:26

  Hi @rmusick_7875 , Unless you build your own GUI client, I don't think what you're doing is going to be possible or feasible to implement; dependencies need to be be in the same feed. I suppose you could try "Unlisting" the packages, but I don't know if the Chocolatey GUI client uses the Listed indicated to determine if a package should be listed. Cheers, Alana
• C

  NuGet Feed API Endpoint URL Returns 404
  nuget api network • 18 Jul 2023, 20:43 • cole.bagshaw_3056   18 Jul 2023, 21:57

  3
  0
  Votes
  3
  Posts
  9
  Views

  C 18 Jul 2023, 21:57

  Hi @stevedennis, Thanks for the reply. It turns out my default nginx server was intercepting all http traffic and not allowing requests to get to the Proget server. I solved the issue by disabling the default server (removing it from sites-enabled) and making some config changes to the Proget nginx config file to stop the server from redirecting http traffic to https.
• P

  OT - Minor Bug In Job Template
  18 Jul 2023, 14:53 • philippe.camelio_3885   18 Jul 2023, 16:01

  2
  0
  Votes
  2
  Posts
  4
  Views

  18 Jul 2023, 16:01

  Hi @philippe-camelio_3885, Good catch! I created a ticket, OT-494, to track the fix. We should have this released in the next two versions of Otter (2022.12 or 2022.13). Thanks, Rich
• R

  NuGet Upload Difference between Enterprise and Basic Edition
  17 Jul 2023, 18:21 • richard.gagliano_3594   18 Jul 2023, 15:45

  3
  0
  Votes
  3
  Posts
  12
  Views

  R 18 Jul 2023, 15:45

  Hi Alana, Thanks for confirming the consistent behavior between the two versions, and pointing us in the right direction. As you pointed out, the issue did stem from our CI/CD API key being overprivileged in our Enterprise edition instance. I reduced the privileges for the key, and duplicate packages are being skipped. Thanks for your assistance. Rich
• P

  OT - running shell script displays an error message while it should not
  otter linux • 17 Jul 2023, 12:20 • philippe.camelio_3885   18 Jul 2023, 08:40

  3
  0
  Votes
  3
  Posts
  11
  Views

  P 18 Jul 2023, 08:40

  Hi @atripp Thanks for the tips. Best regards Philippe
• P

  BM - Editing OSCall Operation using Visual Editor not working anymore
  15 Jul 2023, 08:52 • philippe.camelio_3885   17 Jul 2023, 02:38

  2
  0
  Votes
  2
  Posts
  7
  Views

  17 Jul 2023, 02:38

  Hi @philippe-camelio_3885 , thanks for reproting this; definitely looks like a regression of some kind. We'll get it fixed ASAP via BM-3860 -- but sounds like you found a temporary work-around for now :)
• J

  BuildMaster Service logon account
  13 Jul 2023, 15:39 • Justinvolved   16 Jul 2023, 08:15

  2
  0
  Votes
  2
  Posts
  9
  Views

  16 Jul 2023, 08:15

  Hi @Justinvolved , You should be able to see some kind of error message on Windows Event Logs, but my guess is that the account doesn't have access to the BuildMaster SQL Server database .. you'll need to grant that. Cheers, Alana
• V

  BuildMaster Create-Artifact - Handle does not support synchronous operations.
  10 Jul 2023, 12:17 • vishal_2561   13 Jul 2023, 10:57

  5
  0
  Votes
  5
  Posts
  12
  Views

  V 13 Jul 2023, 10:57

  Hi @rhessinger , Verbose doesn't have much details, all "Capturing files..." messages. I changed buildmasteragent root directory and its working now, so as you said it might be something at OS level. Thanks.
• J

  ProGet NuGet upload user tracking
  19 Jan 2023, 08:36 • jw   11 Jul 2023, 16:11

  16
  0
  Votes
  16
  Posts
  54
  Views

  11 Jul 2023, 16:11

  Hi @jw , Ah, I can see how that would happen; I logged this as PG-2425 and we'll try to get it fixed in the upcoming maintenance release. Steve
• C

  ProGet: Vulnerability assessment types - missing vulnerabilities
  11 Jul 2023, 07:22 • caterina   11 Jul 2023, 14:16

  2
  0
  Votes
  2
  Posts
  13
  Views

  11 Jul 2023, 14:16

  Hello, This is most likely related to PG-2395 (ProGet 2022.30 fix) and PG-2390 (ProGet 2023.9 fix). We added support to handle when OSS Index removes vulnerabilities from their list. Unfortunately, this has brought to light the unreliability of the data returned from OSS Index. It looks like vulnerabilities are constantly removed and re-added, which caused assessments to be cleared out on vulnerabilities. In PG-2395 and PG-2390, we have updated ProGet to only add a comment if we see that OSS Index deleted it. This way the assessment is not lost when OSS Index removes the vulnerability. Thanks, Rich
• C

  Wrong version shown in Usage&Statistics
  7 Jul 2023, 12:23 • caterina   7 Jul 2023, 16:04

  2
  0
  Votes
  2
  Posts
  13
  Views

  7 Jul 2023, 16:04

  Hi @caterina , This behavior is intentional, but not ideal. It should only navigation - such as the "Usage & Statics" page on a package, or the "List Projects" page which has a "Latest Release" column. As long as the Release is active, you'll still see new issues come up. That's really what determines if a release is scanned or not - Active or not. The reason for this... an SCA Release's "Release Number" is a free-form field, which means there are no sorting rules. So we can't practically/easily determine what the "highest" number. Instead, we just use the order in which it was created for display purposes. Thanks, Steve
• F

  Proget not listing npm tags
  6 Jul 2023, 04:41 • falam_3608   6 Jul 2023, 14:49

  5
  0
  Votes
  5
  Posts
  11
  Views

  6 Jul 2023, 14:49

  Hi @falam_3608, That's great to hear. The will also be released in ProGet 2023.11. You will not need to roll anything back upon the next upgrade, InedoHub handles these automatically. Thanks, Rich
• B

  Build error - "Package source __ahempty not found."
  5 Jul 2023, 23:06 • bardmorgan_7142   6 Jul 2023, 02:31

  2
  0
  Votes
  2
  Posts
  5
  Views

  6 Jul 2023, 02:31

  Hi @bardmorgan_7142 , That error seems to be a UI-related error with the Build Script Template editor. Basically that __ahempty value is meant to trigger a validation warning to force you to pick a package source. When you edit the build script, what do you have set for the package source drop-downs? It should be a ProGet feed, at least for publishing. But it's not required. Also, if you "Edit As OtterScript", you should be able to see where the __ahempty is being added to the script, and hopefully fix. Seeing taht would help us debug it :) Cheers, Alana
• 

  How to download private GPG key of an APT repository
  1 Jul 2023, 07:54 • hwittenborn   5 Jul 2023, 13:11

  11
  0
  Votes
  11
  Posts
  22
  Views

  5 Jul 2023, 13:11

  I'm pretty sure it's just due to Microsoft SQL's CLI cutting off the XML output @atripp, as the XML object would just be unfinished when viewing in my terminal. I'm gonna whip together a quick CLI to try to pull it out programmatically later today, and then I can let you know if it all works. I'm quite confident that's what's been causing my issue though.
• ?

  Universal Package Upload large files >~2GB fails
  proget packages • 7 Apr 2017, 10:08 • Marcus Adams   5 Jul 2023, 11:46

  12
  1
  Votes
  12
  Posts
  86
  Views

  J 5 Jul 2023, 11:46

  Did the multi-part API get implemented for universal packages? This is still an issue.
• J

  FTP Extension
  3 Jul 2023, 13:51 • Justinvolved   3 Jul 2023, 18:23

  4
  0
  Votes
  4
  Posts
  8
  Views

  J 3 Jul 2023, 18:23

  Hey Steve, Seems something was stuck somewhere, I re-created the resource and reset the service and now I can connect. Cheers, Justin
• J

  Proget Vulnerability Scan: "Padding is invalid and cannot be removed"
  17 Oct 2022, 14:33 • john.a.henson_0753   3 Jul 2023, 14:48

  6
  0
  Votes
  6
  Posts
  14
  Views

  3 Jul 2023, 14:48

  @vishal_2561 please restart the BUildMaster service and wait for a few minutes for the servers to update; if there's still issues, please post details to a new topic :)
• N

  Chocolatey PUT request - The specified network name is no longer available
  23 May 2023, 09:45 • norbert   3 Jul 2023, 11:58

  3
  0
  Votes
  3
  Posts
  10
  Views

  N 3 Jul 2023, 11:58

  Hi, seems like we're dealing with a loopback issue on the IIS itself. Pushing from other servers on the network works. Thank you! :)