Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
No xml:base attribute in service node of nuget endpoint response
-
Hitting a nuget feed endpoint in proget returns the following:
<service xmlns="http://www.w3.org/2007/app"> <workspace> <title xmlns="http://www.w3.org/2005/Atom">Default</title> <collection href="Packages"> <title xmlns="http://www.w3.org/2005/Atom">Packages</title> </collection> </workspace> </service>
The root node,
service
, contains noxml:base
attribute which is seen in other v2 endpoints, e.g. https://www.nuget.org/api/v2:<service xmlns="http://www.w3.org/2007/app" xmlns:atom="http://www.w3.org/2005/Atom" xml:base="https://www.nuget.org/api/v2">
It appears Dependabot uses the base attribute to build it's list of nuget sources from nuget.configs. As a result of the ProGet not returning a base attribute in the response Dependabot is not able to query the feed for updates to packages.
Is there a reason this attribute is not set? I see there is a Web.BaseUrl config setting in ProGet's advanced settings so I was wondering if setting this would result in the attribute showing up?
Thanks
-
I can't say why it's like that, probably because NuGet.org didn't have it a long time ago?
One important note; changing this could break a lot of the tools we do support and integrate with --- which include older versions of NuGet client that NuGet.org no longer supports.
Can you bring this up with Dependabot team? It should be a totally trivial fix on their end, and it's not necessary at all for them to use it.
-
@atripp Thanks for the reply. I submitted a Pull Request myself to the dependabot-core repo.