Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    No xml:base attribute in service node of nuget endpoint response

    Scheduled Pinned Locked Moved Support
    3 Posts 2 Posters 25 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P Offline
      pero.p
      last edited by

      Hitting a nuget feed endpoint in proget returns the following:

      <service xmlns="http://www.w3.org/2007/app">
         <workspace>
            <title xmlns="http://www.w3.org/2005/Atom">Default</title>
                <collection href="Packages">
                     <title xmlns="http://www.w3.org/2005/Atom">Packages</title>
                </collection>
          </workspace>
      </service>
      

      The root node, service, contains no xml:base attribute which is seen in other v2 endpoints, e.g. https://www.nuget.org/api/v2:

      <service xmlns="http://www.w3.org/2007/app" xmlns:atom="http://www.w3.org/2005/Atom" xml:base="https://www.nuget.org/api/v2">
      

      It appears Dependabot uses the base attribute to build it's list of nuget sources from nuget.configs. As a result of the ProGet not returning a base attribute in the response Dependabot is not able to query the feed for updates to packages.

      Is there a reason this attribute is not set? I see there is a Web.BaseUrl config setting in ProGet's advanced settings so I was wondering if setting this would result in the attribute showing up?

      Thanks

      1 Reply Last reply Reply Quote 0
      • atrippA Offline
        atripp inedo-engineer
        last edited by

        I can't say why it's like that, probably because NuGet.org didn't have it a long time ago?

        One important note; changing this could break a lot of the tools we do support and integrate with --- which include older versions of NuGet client that NuGet.org no longer supports.

        Can you bring this up with Dependabot team? It should be a totally trivial fix on their end, and it's not necessary at all for them to use it.

        P 1 Reply Last reply Reply Quote 0
        • P Offline
          pero.p @atripp
          last edited by

          @atripp Thanks for the reply. I submitted a Pull Request myself to the dependabot-core repo.

          1 Reply Last reply Reply Quote 0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          • 1 / 1
          • First post
            Last post
          Inedo Website Home • Support Home • Code of Conduct • Forums Guide • Documentation