Posts made by aristo_4359

I noticed this mechanism when I migrated from Artifactory to Proget in my company but only able to comment now. I would say thank you very much for you guys for addressing this, especially since it is done before the migration in my company.

I saw in Inedo that PGV-2330205 and PGV-2425402 are applied to 'all' version of SheetJS
https://security.inedo.com/vulnerability/details/PGV-2330205 and https://security.inedo.com/vulnerability/details/PGV-2425402

While as per descriptions in both articles, if you already use version 0.19.2 (or later) for PGV-2330205 and 0.20.2 (or later) for PGV-2425402, the vulnerabilities are supposed to be fixed already, but the package in my Proget server is still displaying vulnerabilities , specifically in my case in version 0.20.3 . I know how to suppress them for entire versions of SheetJs but I think this probably should be addressed for inedo for everyone. I do not know if it is possible to suppress for just specific package or package version, ideally matching SemVer.

Also note that previously I tried to use expiration for reassessing vulnerability and it seems it is unable to set the expiration and it was complaining about time format.

Thank you

Hello , I tried to import conan packages from artifactory. As I am not seeing direct import packages from artifactory like other feeds I assume it is not supported, so I tried to import from exported files from the artifactory. However there is no packages being imported, and execution log is empty. I double checked to ensure the import folder is readable to Network Service and it should be, so I wonder what I should check next?

Thanks, Steve, "All Versions" is the one I used currently and works for now but my specific question is whether I can search by version.

If a package have many versions, the "all versions" can load a bit slower, and additionally I would like to search a specific version for multi operation, such as bulk delete, for example. It is fine not to have this, I just wonder if it is available.

I suspect this is already available in your internal API since you have this in pgutil
https://docs.inedo.com/docs/proget/api/packages/list-versions, however I can not find any way to be able to specify version in the UI. If I put version in the search string it seems it only check package name. Is this available in the UI anywhere?

Thank you very much

Just wondering whether it is possible when importing from another services such as from Artifactory, the publish date to follow original publish date instead of import date? Or may be a way to update current publish date following the original one?

Thank you

Thank you, I only have one type of rpm package
The name and versioning are like the following

• ssdh:0.5.0.177-1.el.7.centos
• ssdh:0.5.0.179-1.el.7.centos

The API will call like this

POST https://artifacttest02.dev.petrolink.net/packages/bulk-delete
AHAntiCsrfToken=Tps3B1Cx9nbQARqwWTHx6rE0NqoFG4N8Ujyn6fPvO%2FTQXJRFIHFbkuNblk7ds7E862rGTM9eRWP%2BSXgvnC70Pw%3D%3D&ids=7%3A%3Assdh%3A0.5.0.177-1.el.7.centos%2C7%3A%3Assdh%3A0.5.0.179-1.el.7.centos

Response Status code is 200

Thank you, however I am not sure since I have not retested the installation, from my memory, it does not seems to add write permission either for my local (windows 11), as I was not seeing the Network Service there initially and had to add manually add network service. Same case in a separate testing server (Windows Server 2025 Standard). If you see that in older Windows may be because in later windows this behavior is changed, but not sure.

Ok thank you for confirmation. The whoami is useful for troubleshooting things, though not necessary for day to day, so it would be useful to be implemented.

I was stuck with an issue unable to publish to npm feed. Had this available, I would be able to fix it quicker (the issue had multiple sub-issues) as I was not even sure whether I was logged in correctly or not.

I think you found same issue like me, you probably need to grant read permission for NetworkService to C:\ProgramData\Inedo and C:\ProgramData\ProGet . You may also need to do the same if you do any other data storage. The Installer does not add the read permission.

I am not sure whether this is documented somewhere but it seems proget does not support cli "npm whoami" as it returns 404, is it true? If it is not true can you give either how to do it or which documentation for doing that?

I am talking about https://docs.npmjs.com/cli/v11/commands/npm-whoami

Hello not sure whether this has been reported, using 2025.9 (Build 16) version, I have 2 RPM feeds and when I check bulk edit for deleting multiple packages, it does not seems to work on both feeds. I can see the API call sent correctly (POST and payload are sent) and returned 200 but there is nothing done on rpm packages. I checked npm feed and it seems to work in npm so likely rpm feed specific issue (though I do not check other feed types)

Also a suggestion, when user delete package the page ideally stay on same page, instead redirecting to main feed on deleting single package and redirecting to first page when deleting using bulk edit