Support

• P

  getting socket timeout for node-forge npm package
  26 May 2024, 18:17 • parthu.reddy   27 May 2024, 08:36

  5
  0
  Votes
  5
  Posts
  15
  Views

  P 27 May 2024, 08:36

  @atripp Ohh, sorry my mistake, changed it to proget, same problem actually. Will check at our end.
• P

  ENOAUDIT
  26 May 2024, 15:17 • parthu.reddy   27 May 2024, 07:18

  3
  0
  Votes
  3
  Posts
  11
  Views

  P 27 May 2024, 07:18

  @atripp Thanks
• R

  ProGet 2023 - IIS App pool stopping
  15 Mar 2024, 14:55 • rick.kramer_9238   24 May 2024, 17:44

  16
  0
  Votes
  16
  Posts
  53
  Views

  R 24 May 2024, 17:44

  @stevedennis I swtiched from "V3: Active Directory (LDAP)" to "V4: Active Directory/LDAP (Preview)" and all is good now. Logon went from two/three minutes down to one second.
• D

  'Inedo.ProGet.Web.Security.UserNotFoundException' on application startup
  15 May 2024, 14:13 • Darren.Gipson_6156   24 May 2024, 17:42

  18
  0
  Votes
  18
  Posts
  60
  Views

  24 May 2024, 17:42

  Hi @Darren-Gipson_6156, No problem! Glad it is working. ProGet 2024.6 will include a fix for this issue, PG-2695. So hopefully this won't happen again! Thanks, Rich
• C

  Error installing package: @ClearPackageData_Indicator is not a parameter for procedure FeedPackageVersions_CreateOrUpdatePackageVersion.
  24 May 2024, 12:03 • chris.blyth_5143   24 May 2024, 14:07

  4
  0
  Votes
  4
  Posts
  4
  Views

  C 24 May 2024, 14:07

  I have done more digging and you are right. My windows service wasn't actually pointing to the exe that was updated If i run the updated service, funnily enough it works!
• P

  This artifact cannot be downloaded because it is Noncompliant: Artifact does not have an associated .pom.
  23 May 2024, 14:19 • parthu.reddy   24 May 2024, 12:53

  4
  0
  Votes
  4
  Posts
  11
  Views

  24 May 2024, 12:53

  In that case please just upgrade and it should be resolved :)
• R

  Deprecating or unlisting all versions
  23 May 2024, 14:28 • rick.kramer_9238   24 May 2024, 01:19

  2
  0
  Votes
  2
  Posts
  5
  Views

  24 May 2024, 01:19

  Hi @rick-kramer_9238, You could do this via the API; it would involve first Querying Package Versions, and then for each version returned, Setting Package Status. I think it'd be a "relatively easy" script to write - so if you create one that can do it, please share :) Hope that helps, Alana
• F

  ProGet 2024 API changes
  22 May 2024, 12:11 • forbzie22_0253   23 May 2024, 01:49

  2
  0
  Votes
  2
  Posts
  11
  Views

  23 May 2024, 01:49

  Hi @forbzie22_0253 , This refers to Delete Package, which was introduced in ProGet 2023: https://docs.inedo.com/docs/proget-api-packages-delete We don't really document/track what Native APIs change between releases, so I'm not really sure: https://docs.inedo.com/docs/proget-api-http#native-api-endpoints You can do a comparison in the /api/reference page. Thanks, Alana
• P

  [BM / OT] Renaming "user/password" or "private key" credentials breaks Linux config
  11 Apr 2024, 12:11 • philippe.camelio_3885   21 May 2024, 18:28

  13
  0
  Votes
  13
  Posts
  46
  Views

  P 21 May 2024, 18:28

  @atripp I thought the fix was for Otter !
• P

  [OTTER]Gitlab Secure Ressource gone
  14 Mar 2024, 14:58 • philippe.camelio_3885   21 May 2024, 18:26

  13
  0
  Votes
  13
  Posts
  33
  Views

  P 21 May 2024, 18:26

  @atripp Thank you for your time and the fix. I can wait for the next release. Best regards PhilippeC.
• P

  |OTTER] Status filter not working for "any error"
  otter • 1 Apr 2024, 08:55 • philippe.camelio_3885   21 May 2024, 18:23

  4
  0
  Votes
  4
  Posts
  12
  Views

  P 21 May 2024, 18:23

  @atripp Thanks for the update
• 

  Deleting Debian Packages don't work
  14 May 2024, 06:56 • Scati   20 May 2024, 05:52

  7
  0
  Votes
  7
  Posts
  15
  Views

  20 May 2024, 05:52

  Hi @gdivis, pgutil packages delete --source=scati --feed=stable --package="pacomalarmprocessor" --version=7.2.1.0-1 --qualifier="arch=amd64&component=scati&distro=bionic" It works perfect with that command. Thank you. Keep up the good work.
• C

  [ProGet] Alpine Feed Connector - Package Caching Broken
  11 Dec 2023, 22:46 • chowarth_6088   16 May 2024, 01:56

  6
  0
  Votes
  6
  Posts
  29
  Views

  16 May 2024, 01:56

  Hi @artur-wisniowski_4029, We'll get this fixed, but it's unlikely to be in this week's release. ProGet hashs the complete package file for every package uploaded to it, while the APK spec says to hash only over a certain tar segment of the package. We've been returning ProGet's hash of the package file as the checksum and this is incorrect as you've noted. We'll post here again when we have a fix date, but I'd expect it will be either next week or the week after. Thanks!
• P

  ProGet Npm Feed cache
  14 May 2024, 07:06 • pawel.ostrowski_5669   15 May 2024, 00:11

  4
  0
  Votes
  4
  Posts
  22
  Views

  15 May 2024, 00:11

  Hi @pawel-ostrowski_5669 , ProGet dynamically generates these indexes based on an aggregation of locally stored packages and connector results on each request, so caching doesn't make a lot of sense. npmjs.org, on the other hand, needs to only update indexes when a new version is uploaded, so the cache duration can be a long time. Thanks, Steve
• P

  Import SBOM
  14 May 2024, 18:57 • pbinnell_2355   14 May 2024, 23:16

  2
  0
  Votes
  2
  Posts
  8
  Views

  14 May 2024, 23:16

  Hi @pbinnell_2355 , It looks like you have Windows Integrated Authentication enabled. Curl does not support this, but with powerShell you would need to add -UseDefaultCredentials Thanks, Steve
• A

  ProGet: Vulnerability scanning of Chocolatey feeds
  11 May 2024, 10:50 • am.infrastruktur_3111   11 May 2024, 15:29

  2
  0
  Votes
  2
  Posts
  9
  Views

  11 May 2024, 15:29

  Hi @am-infrastruktur_3111 , Chocolatey packages are scanned for viruses, so you will see those pop up. For example, pathdebug 0.3.4 should show up in ProGet's vulnerability system: https://security.inedo.com/vulnerability/details/PGV-2420934 Otherwise, there is unfortunately no standardized/consistent naming for Windows software (unlike APK, APT, RPM, etc), so there's no way to associate a vulnerability report like CVE-2024-21392 with a software package. In this case, Microsoft calls the effected software ".NET 8.0", not .NET or dotnet, etc. In Other reports, they call it ".NET8", etc. And you can see that it translates a little weird n the CVE report as well: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392 ".NET 8.0 affected from 1.0.0 before 8.0.3 " - weird, right? This is a known issue in the industry for many years, and it would need to be address by Microsoft first. It's sadly not on their priority list. Best, Alana
• P

  Two tier nuget Feeds and controlling build server access with minimum changes to yaml build/pipelines
  8 May 2024, 17:59 • pbinnell_2355   10 May 2024, 16:23

  6
  0
  Votes
  6
  Posts
  12
  Views

  10 May 2024, 16:23

  Ultimately this is going to involve training for your developers. Just like instituting a code review process will be new and uncomfortable at first, a package review process will be the same. Developers will not like it and they will complain. However, 99% of the time, developers will be fine using the approved feed. 1% of the time (when they want to test a new package or upgrade), then will use the unapproved feed. They'll just need to learn how to switch package sources (it's a drop-down in Visual Studio) and then learn not commit commit these package references. My advise is to make it incumbent upon developers to not commit code/configuration that depends on unapproved packages. If they do, then it will "break the build" because the packages aren't available. This is an expected behavior - it would be like if a developer decided to upgrade to .NET9-beta. "Don't break the build" is a common mantra on development teams, and it means developers can't commit code changes that will do that. Just extend that to using unapproved packages.
• 

  GPG error updating Debian repositories
  17 Apr 2024, 09:44 • Scati   10 May 2024, 06:54

  12
  0
  Votes
  12
  Posts
  40
  Views

  10 May 2024, 06:54

  Fix verified on 2024.2 version. Thank you.
• 

  Date in Debian feed release file malformed
  debian • 25 Apr 2024, 07:48 • Scati   10 May 2024, 06:43

  3
  0
  Votes
  3
  Posts
  10
  Views

  10 May 2024, 06:43

  Fix verified on 2024.2 version. Thank you.
• P

  pgutil not working in CI/CD yaml pipeline
  9 May 2024, 15:52 • pbinnell_2355   9 May 2024, 18:13

  2
  0
  Votes
  2
  Posts
  8
  Views

  9 May 2024, 18:13

  Hi @pbinnell_2355, Looks like the example code was incorrect. I've updated it. When a dotnet tool is installed globally, you run it by just running the tool name directly, so pgutil instead of dotnet pgutil Hope this help! -Greg