Microsoft NuGet team plans to disable selected NuGet V2 OData endpoints by the end of January 2021.
After receiving this information from the NuGet team, JFrog acted on several levels:
- We implemented a new download mechanisms to rely only on NuGet V3 endpoints, both in Artifactory 7.8.1 / 6.22 and above. Artifactory will now uses V3 endpoints by default and if it fails to serve the request, it will retry using V2 endpoints unlike previous behavior where downloads always rely on V2 endpoint.
- We tested several users' flow using nuget.org pre-production environment with all of the deprecated OData queries already disabled to evaluate the impact on various Artifactory versions.
The tests were done on both Artifactory versions 6.x and 7.x, with and without the new V3 download mechanism – we did not encounter any issues when using the versions below:
Artifactory 7.7.8 using NuGet feed V2
Artifactory 7.7.8 using NuGet feed V3
Artifactory 7.10.5 using NuGet feed V2
Artifactory 7.10.5 using NuGet feed V3
Artifactory 6.21.0 using Nuget feed V2
Artifactory 6.21.0 using Nuget feed V3
Artifactory 6.23.1 using Nuget feed V2
Artifactory 6.23.1 using Nuget feed V3
Based on this investigation, together with the NuGet team’s information, we cannot find any impact on Artifactory NuGet users from all versions using the official NuGet clients.
As a reference, you may refer to this GitHub issue where NuGet team provide more information about the potential affected endpoints.