Query Package Versions Endpoint doesn't respect version parameter

mlorenzschleipen_5169

According to the documentation on "Query Package Versions Endpoint" a package version query with name and version parameter should return either a single or an empty object.
If I query for e.g. Newtonsoft.Json via the said endpoint with parameters name and version...

http://[pro-get-server]/api/packages/[feed-name]/versions?name=Newtonsoft.Json&version=13.0.3

... the following response is returned:

[
    {
        "purl": "pkg:nuget/Newtonsoft.Json@13.0.3",
        "name": "Newtonsoft.Json",
        "version": "13.0.3",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:51:52.287Z",
        "publishedBy": "Anonymous",
        "size": 2441966,
        "md5": "94d7f4cce0663c6a30340fe6fec831da",
        "sha1": "f418efd4238eb069cf38d1c86f4edc34444777dd",
        "sha256": "872fc189e638ab1056555b03aaa38f68bcb54286e221aa646eb1129babf63c77",
        "sha512": "99b252bc77d1c5f5f7b51fd4ea7d5653e9961d7b3061cf9207f8643a9c7cc9965eebc84d6467f2989bb4723b1a244915cc232a78f894e8b748ca882a7c89fb92"
    },
    {
        "purl": "pkg:nuget/Newtonsoft.Json@11.0.1",
        "name": "Newtonsoft.Json",
        "version": "11.0.1",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:53:03.103Z",
        "publishedBy": "Anonymous",
        "size": 2412261,
        "md5": "b087e1b8954097ee118ca6b493628f6e",
        "sha1": "b521555306d863b5c2b96b3dbd59bf9b4f68d5c8",
        "sha256": "95b47bae94bf117809f13a90b29b8822a02c8a8aeb65bd6838ae07170f90c8fc",
        "sha512": "c2b7f92c15f5a2627ff0789829bcb6dae055ecc3c27f0c57598dfdc36f156498d874dd426f77a24e4916939800924756f8dfc0d218129aab623e8030b1bd3baa"
    },
    {
        "purl": "pkg:nuget/Newtonsoft.Json@13.0.1",
        "name": "Newtonsoft.Json",
        "version": "13.0.1",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:54:10.927Z",
        "publishedBy": "Anonymous",
        "size": 2065787,
        "md5": "9ccdca806bf03be5e3b34987183c98af",
        "sha1": "c13425635afd5117999d4a419927e1d4217b60be",
        "sha256": "2b6b52556e27e1b7913f33eedeb95568110c746bd64afff74357f1683878323a",
        "sha512": "83731b662eaf05379a23f8446ef47bbc111349dd4358b7bd8b51383fe9cf637e2fe62f78cea52a0d7bdd582dc6fbbb5837d4a7b1d53dcf37a0ae7473e21ee7b1"
    },
    {
        "purl": "pkg:nuget/Newtonsoft.Json@11.0.2",
        "name": "Newtonsoft.Json",
        "version": "11.0.2",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:55:08.597Z",
        "publishedBy": "Anonymous",
        "size": 2409669,
        "md5": "cceef905d79cd7cd5d8e22ea68fe7fb6",
        "sha1": "5703f14d06c5de46adc5b4699af3a4dacbb84956",
        "sha256": "6219406c67f0a31433c5bdc779fe22c95f5e19d3d024935dd868124748ec049d",
        "sha512": "ce76466f0b3b138040f63c4d67b16e888448dc2f61ae06ad5504932a121865834eb9de0ce557c6953622e917583b9b10ade6c5b85fe0f54115de13b10cc5c5e9"
    },
    {
        "purl": "pkg:nuget/Newtonsoft.Json@9.0.1",
        "name": "Newtonsoft.Json",
        "version": "9.0.1",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:56:05.61Z",
        "publishedBy": "Anonymous",
        "size": 1613054,
        "md5": "807be6e600e6b0a623974cd0fee9f388",
        "sha1": "12b661258d77111d3bc7147cbad970afdcb33d15",
        "sha256": "998081ae052120917346e2cb57d488888147a2fcdf47c52ea9f83a7b4f049e55",
        "sha512": "da8917a5347051c8106f4ea9bade4bc300a3b60a05a3be3390f92c8dcbcea67223c7b4da8065b9228042000e25b99c75fad7e2221a0daa8888ed8ef3c161b228"
    },
    {
        "purl": "pkg:nuget/Newtonsoft.Json@10.0.3",
        "name": "Newtonsoft.Json",
        "version": "10.0.3",
        "totalDownloads": 3,
        "downloads": 1,
        "published": "2024-02-13T14:56:06.9Z",
        "publishedBy": "Anonymous",
        "size": 2076432,
        "md5": "a4563d4f661ff66ce522633f423468d2",
        "sha1": "87cc229ffe442cc684f04a0a1d5f7e4c935d2faf",
        "sha256": "5841c28e9f8e32be5ac5742316c87b4cc0c4fedb44df99ccbf94413dd7317e1b",
        "sha512": "328013166e9827293939da837710d67ca7b97646370b282ed30ae928f1ff2db5ad3264ae0ffdc6fc92089edf6c20937b84a40e1580886f65232dcdaf3b96f241"
    }
]

The same response is returned if version is set to 14.0.0 (which does not exist yet).
It appears to me that version parameter isn't processed at all.

ProGet Basic Edition
Version 2023.28 (Build 17)

atripp

Hi @mlorenzschleipen_5169 ,

Thank you for the reproduction information; I was able to reproduce this and we will fix via PG-2578.

It's a bit close to our maintenance release window (we ship later today), so it's scheduled for PRoGet 2023.30 (May 1). Let us know if you are interested ina pre-release, and we can get it as soon as available.

Thanks,
Alana

mlorenzschleipen_5169

Hi Alana,

Thank you for your reply. We have a workaround for the problem so there is no need for a pre-release version. We will wait for the May release instead.

Regards,
Markus

gdivis

Hi @mlorenzschleipen_5169,

Just wanted to let you know that May 1 was a typo - the release date is actually March 1, so a lot sooner :)

-Greg