NuGet.Server 3.4.2

This release fixes the denial-of-service (DOS) vulnerability in Newtonsoft.Json prior to 13.0.1.
GHSA-5crp-9r3c-p9vr

PR: #103

NuGet.Server 3.4.1

This release fixes a bug where UNC style file paths would cause NuGet.Server start-up to fail. UNC style paths are like //fileserver/Framework/NuGet/server.png. Thanks to @dac11 for reporting the issue (NuGet/NuGetGallery#7414) and helping with the investigation.

NuGet.Server 3.4.0

This release fixes the HTTP status code returned by NuGet.Server when a duplicate package is pushed. Per protocol specification, an HTTP 409 should be returned. Previous, an HTTP 406 was returned. This enables the NuGet 5.1 -SkipDuplicate feature to work as expected with NuGet.Server.

Thanks @jacksga for noticing this and providing PR #85 which fixes the issue!

NuGet.Server 3.3.0

This release updates the Microsoft.Data.OData, Microsoft.Data.Edm, and System.Spatial dependencies from 5.7.0 to 5.8.4.

NuGet.Server 3.2.1

This release supersedes 3.2.0, which is now unlisted on nuget.org.

It was brought to our attention by @Levente0xFFFF that a breaking change was introduced in 3.2.0 which broke the scenario around hosting multiple feeds in one web app. To fix this breaking change, we changed the default behavior of NuGetV2WebApiEnabler.UseNuGetV2WebApiFeed that changed in 3.2.0. Now, this API does not register the legacy push route /api/v2/package unless an overload is called which specifies enableLegacyPushRoute: true.

Note that the NuGet.Server 3.2.1 example C# file that is dropped into your project upon installation has this boolean property specified. If you installed NuGet.Server 3.2.0 and upgrade to 3.2.1, you will need to specify this boolean to enable the legacy push route.

NuGetV2WebApiEnabler.UseNuGetV2WebApiFeed(
    config,
    "NuGetDefault",
    "nuget",
    controllerName,
    enableLegacyPushRoute: true); // This last parameter is what you need.

NuGet.Server 3.2.0

This release is superceded by 3.2.1. Please use it instead.

This release introduces the following changes:

1. Add route to match older NuGet.Server uploads (#62) - thanks @ericcoleman!
2. Add allowRemoteCacheManagement to allow remote cache clearing (#59) - thanks @ezverev!
3. Add initialCacheRebuildAfterSeconds and cacheRebuildFrequencyInMinutes config to change cache rebuild behavior (#72)
4. Fix bug that causes too many cache rebuilds caused by late file system events (#72) - thanks for reporting the issue @ikalafat!

The package is available on nuget.org here:
https://www.nuget.org/packages/NuGet.Server/3.2.0

NuGet.Server 3.1.2

This release fixes the issue below

1. NuGet/NuGetGallery#5505: Use includeDelisted query parameter
   (#56). Thanks @patricksadowski!

The package is available on NuGet.org here:
https://www.nuget.org/packages/NuGet.Server/3.1.2

NuGet.Server 3.1.1

This release fixes the one issue and introduces a default exception logger to the NuGetODataConfig template.

1. Normalized directories before comparing paths in file changed event (#54). Thanks @cosminpopescu!
2. Add TraceExceptionLogger so unhandled exceptions are logged to Trace (#53).

The package is available on NuGet.org here:
https://www.nuget.org/packages/NuGet.Server/3.1.1

NuGet.Server 3.1.0

This release fixes the one issue and introduces a new configuration option.

1. Don't extract the entire package to the %TMP% directory (#48) (issues NuGet/NuGetGallery#3275 and NuGet/NuGetGallery#5230)
2. Add the cache file name configurable (#49). Thanks @apeneve!

The package is available on NuGet.org here:
https://www.nuget.org/packages/NuGet.Server/3.1.0

NuGet.Server 3.0.2

This fixes the one issue that only applies to the 3.x train of NuGet.Server:

• NuGet/NuGetGallery#5193: unable to list or publish the packages using NPE with Nuget Server version 3.0.1.0

Package on NuGet.org: https://www.nuget.org/packages/NuGet.Server/3.0.2