Hi, @rhessinger!

Thank you for looking into this. I will do some retesting as soon as the 2025.2 is released.

Thanks,
Petter

Hi!

We’re currently evaluating ProGet and have encountered several issues with version 2025.0 (Build 27) (+ MSSQL), primarily while testing the Debian feed. We did not have the same issues with 2024.38 (Build 1), everything worked as expected.

Issues encountered:

1. License Management – Unable to remove assigned license
Once a license is assigned to a package with "Unknown licensing", there doesn’t appear to be any way to remove it. Is this expected behavior?

2. "Set Package Status" Causes a 500 error
Clicking Set Package Status results in a 500 Internal Server Error:

An error occurred in the web application: Object reference not set to an instance of an object.
URL: http://proget.example.com/packages/status?feedId=5&packageName=netcat-traditional&version=1.10-48
Referrer: https://proget.example.com/feeds/petter-ubuntu/netcat-traditional/1.10-48/metadata
User: Admin
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Stack trace:    at Inedo.ProGet.WebApplication.Pages.Packages.SetPackageStatusPage.CreateChildControlsAsync() in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp\_E565156\Src\src\ProGet\WebApplication\Pages\Packages\SetPackageStatusPage.cs:line 38
   at Inedo.ProGet.WebApplication.Pages.ProGetSimplePage.InitializeAsync() in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp\_E565156\Src\src\ProGet\WebApplication\Pages\ProGetSimplePage.cs:line 69
   at Inedo.Web.PageFree.SimplePageBase.ExecutePageLifeCycleAsync()
   at Inedo.Web.PageFree.SimplePageBase.ProcessRequestAsync(AhHttpContext context)
   at Inedo.Web.AhWebMiddleware.InvokeAsync(HttpContext context)
::Web Error on 06/18/2025 12:13:27::

3. Unable to block specific packages manually
We couldn’t find a way to manually block specific packages. Is this supported?

4. Feed/Global Policies not enforcing blocking as expected
Packages marked as Noncompliant are still downloadable, despite both feed-level and global policies set to deny such downloads. This also includes filtered packages via connectors.

5. Deleting "Local Packages" fails
Attempting to delete local packages appears ineffective — they reappear immediately after deletion. Is there a proper method to permanently remove them?

6. Inconsistent feed policy messaging
The UI sometimes shows contradictory messages — e.g., the title says “Blocked” while the accompanying text says “not prevented from being downloaded.” We’ve observed this inconsistency across both the Debian and npm feeds.

7. npm Packages not blocked despite being Noncompliant
Example: We are able to download an npm package that is marked as Non-compliant, even though our policies should block it.

8. Rollback to 2024 failed
https://docs.inedo.com/docs/proget-upgrade-2025 says
"However, if you need to rollback to ProGet 2024, you can do so without restoring the database by simply using the Inedo Hub. While there are database schema changes, they are all backwards-compatible with ProGet 2024, which means you can safely rollback your ProGet installation if there's a showstopper bug, and then upgrade later."

When we tried to roll back to 2024 we got database issues with missing procedures like:

Unhandled exception: Could not find stored procedure 'PackageContainerScanners_GetScanners'.

Note that we did a fresh install of 2025 on a clean database. Then we rolled back to 2024. Maybe it would have worked if we installed 2024 first, then upgraded to 2025 and then rolled back to 2024.

Thanks,
Petter