Sonatype

No entries match these filters. Clear filters

1. Nexus Repository Cloud September 30, 2026 Sep 30, 2026 · release notes

   Yum staging profiles now auto-generate metadata via Yum: Generate Metadata; build promotion supports automatic metadata merging.

   • Adds automatic Yum: Generate Metadata capability to repositories created from Yum-enabled staging profiles
   • Enables automatic metadata merging across promoted repositories for build promotion profiles

   2 details in Everything

2. Nexus Repository Cloud September 16, 2026 Sep 16, 2026 · release notes

   Swift proxy repo support in Repository Firewall; OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. proxy URL validation; role privilege checks; npm/PyPI metadata caching

   • Sonatype Repository Firewall now enforces policy, quarantine, and Health Check reporting for Swift proxy repositories
   • OCI proxy repositories validate Remote Storage URLs via the UI and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., requiring http:// or https:// prefixes
   • Role creation and updates enforce that users hold every privilege and child role they assign
   • Configuration options filter independently by deployment environment (self-hosted vs cloud) and licensed edition
   • Fully processed npm and PyPI package metadata is cached in proxy repositories with Firewall enabled

   5 details in Everything

3. Nexus Repository Cloud September 10, 2026 Sep 10, 2026 · release notes

   Nexus One UI becomes default; service account tokens add HTTP Basic auth and auto health checks across proxy repos.

   • Nexus One UI is now the default experience for all users
   • Service account tokens (sat.<value>) now support HTTP Basic authentication across all supported repository formats
   • Sonatype Nexus Repository Health Check now operates automatically across proxy repositories

   3 details in Everything

4. Nexus Repository Cloud September 2, 2026 Sep 2, 2026 · release notes

   Nexus Repository Cloud adds preemptive Conda auth, Hugging Face chained proxy pagination fixes, and UI enhancements.

   • Supports preemptive authentication for Conda proxy repositories
   • Rewrites Link headers for paginated Hugging Face repositories in chained proxy configurations
   • Adds searchable privilege and contained-role selection in role creation

   3 details in Everything

5. Sonatype Nexus Repository 3.96.0 - 3.96.4 Release Notes Sep 2026 · release notes

   Sonatype Nexus Repo 3.96 adds Azure direct download, OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs./SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./LDAD/Crowd UI config, npm abbreviated packument, and audit logging improvements.

   • Adds Azure Direct Download for Azure Blob Stores using short-lived SAS URLs to reduce server proxy load.
   • Moves LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. and Atlassian Crowd configuration pages to the Nexus One UI.
   • Adds dedicated Audit Log page in Nexus One UI with persistent storage, configurable retention, and filtering.
   • Adds support for npm abbreviated packument format to reduce metadata transfer sizes during install.
   • Enables gzip compression for npm JSON responses when clients send Accept-Encoding header.

   +2 more show less

   • Limits Maven POM name and description metadata fields to 10,000 characters.
   • Removes the legacy Nexus Repository 2-to-3 Upgrade Wizard from the product.

   7 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The legacy Nexus Repository 2-to-3 Upgrade Wizard is removed; users must use external documentation for migration.
6. Nexus Repository Cloud August 26, 2026 Aug 26, 2026 · release notes

   Nexus Repository Cloud August 2026 adds Dart/Flutter support in Firewall, OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. cache API, PyPI index paths, and UI enhancements

   • Sonatype Repository Firewall now supports the Dart/Flutter (pub) format with automatic quarantine for policy violations
   • Layer Download Timeout setting configurable per Docker proxy repository in Firewall settings
   • Security Management API adds OAuth2 user record caching for locally cached identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. records
   • PyPI proxy REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. adds custom index paths for non-standard PyPI-compatible registries

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Firewall policy enforcement now applies to existing pub proxy repositories, which may affect package availability based on configured policies
7. Nexus Repository Cloud August 18, 2026 Aug 18, 2026 · release notes

   Nexus Repository Cloud adds real-time permission previews, sortable Unified Search, and storage metrics to the UI.

   • Adds real-time permission previews in the user and role management interface

   1 detail in Everything

8. Nexus Repository Cloud August 12, 2026 Aug 12, 2026 · release notes

   Nexus Repository Cloud Aug 12 2026 adds Delete User to Edit page, removes legacy migration wizard, and enhances Nexus One UI.

   • Moves the Delete User action from the users list to the Edit User page as a dedicated toolbar button with a type-to-confirm dialog.
   • Removes the deprecated Nexus Repository 2-to-3 migration wizard from the Classic UI.
   • Expands OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificate management capabilities in the Nexus One UI.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The deprecated Nexus Repository 2-to-3 migration wizard is no longer available in the Classic UI.
9. Nexus Repository Cloud July 29, 2026 Jul 29, 2026 · release notes

   New Composer support, Terraform non-URL auth, and npm metadata compression/optimization in Nexus Repository Cloud.

   • Adds Composer hosted and group repository support
   • Enables Terraform repositories to authenticate via standard Authorization: Bearer headers instead of embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. credentials in URLs
   • Gzip-compresses npm package metadata for clients that support it, reducing cloud egress by up to 5–7x
   • Implements pre-processing authentication rate limiting across all supported endpoints (npm, pub, Ansible Galaxy, Terraform)
   • Enables Yum group repositories to merge and serve modules.yaml.gz metadata from member repositories

   +1 more show less

   • Supports the npm abbreviated packument format, reducing package metadata payloads by up to 89%

   6 details in Everything

10. Nexus Repository Cloud July 22, 2026 Jul 22, 2026 · release notes

    New NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. registries, Hugging Face API/auth improvements, expanded Cleanup Policies with REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., and new AWS STSAWS STSAWS Security Token Service, an Amazon Web service that issues short-lived credentials for IAM roles, letting tools authenticate to AWS APIs without storing long-term secrets. proxy support.

    • Adds Chocolatey registry support in NuGet hosted, proxy, and group repositories
    • Adds Microsoft Symbol Server support in NuGet hosted, proxy, and group repositories
    • Enables Hugging Face /tree/ API for snapshot downloads in large repositories
    • Adds bearer tokenbearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. authentication support for Hugging Face repositories compatible with huggingface-cli login
    • Extends Retain Select Versions cleanup policy to additional repository formats

    +5 more show less

    • Adds a new REST API endpoint for executing cleanup operations on demand
    • Improves Azure blob store error reporting by returning specific HTTP codes for configuration failures
    • Enforces repository browse permissions on the content selector preview endpoint and limits response metadata
    • Enables pre-emptive authentication for PyPI proxy repositories to support private instances like GitLab.com
    • Adds optional AWS session token configuration for Amazon ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. proxy repositories to support temporary credentials (STSSTSAWS Security Token Service, an Amazon Web Services API that issues short-lived credentials for IAM roles, letting cyber tools authenticate to AWS without storing long-term secrets./SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.)

    10 details in Everything

11. Nexus Repository Cloud July 8, 2026 Jul 8, 2026 · release notes

    Nexus Repository Cloud July 8, 2026 adds per-repo URL encoding and preemptive auth for PyPI proxies.

    • Adds repository-specific URL encoding rules for proxy repositories (e.g. encoding + as %2B for PyPI)
    • Adds preemptive authentication support to PyPI proxy repositories

    2 details in Everything

12. Nexus Repository Cloud July 1, 2026 Jul 1, 2026 · release notes

    Nexus Repository Cloud enforces authentication rate limits returning 429 on excess attempts.

    • Adds enforcement of authentication rate limits, returning 429 Too Many Requests when exceeded.

    1 detail in Everything

13. Nexus Repository Cloud June 26, 2026 Jun 26, 2026 · release notes

    Adds native OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. repos and AWS ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. proxy support to Nexus Repository Cloud

    • Added native OCI hosted, proxy, and group repository types.
    • Added AWS ECR support within Docker proxy repositories for centralized image caching.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Content Disposition setting is removed for Maven and Raw repositories in cloud deployments.
14. Nexus Repository Cloud June 3, 2026 Jun 3, 2026 · release notes

    Nexus Repository Cloud adds Docker pull command generation, Conan V2 defaults, and exclusive URL encoding via Preserve Encoded Characters.

    • Generates docker pull commands that correctly reference your Sonatype Nexus Repository registry
    • Adds Preserve Encoded Characters setting in each proxy repository's configuration to control URL encoding exclusively
    • Conan proxy repositories now default to Protocol Version V2 and set Remote Storage URL example to https://center2.conan.io

    3 details in Everything

15. Sonatype Nexus Repository 3.93.0 - 3.93.2 Release Notes Jun 2026 · release notes

    Adds Go, Ansible Galaxy, and Alpine repo support; new User Token API lookup, OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs./OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., uploader metadata permissions, IP Allow List, auth rate limits, and HPA Hel

    • Support for Go Hosted and Group Repositories
    • Support for Ansible Galaxy repository format
    • Support for Alpine Repository Format
    • New nameCode Parameter in User Token API to look up user token ownership
    • Granular Control of Uploader Metadata Visibility via nexus:uploader-metadata:read permission

    +6 more show less

    • Enhanced PyPI Repository Compatibility with PEP 658 inline metadata and PEP 691 JSON-based Simple API
    • New Endpoints in Security management: user roles API for programmatic role assignment management
    • IP Allow List feature available in Pro and Cloud editions to restrict access by source IP
    • OAuth2/OIDC Configuration REST API for managing authentication settings via REST
    • Authentication Attempt Rate Limits with nexus.auth.ratelimit.* configuration properties
    • Expanded Enterprise Deployment Options for Kubernetes supporting Helm chart 93.0.0+ with HPA and Azure Workload Identity

    11 details in Everything

16. Nexus Repository Cloud May 27, 2026 May 27, 2026 · release notes

    Nexus Repository Cloud adds dynamic upstream service discovery for Terraform proxy repositories.

    • Terraform proxy repositories now dynamically detect upstream service discovery paths, improving compatibility with compliant registries such as OpenTofu registries and registry.coder.com

    1 detail in Everything

17. Nexus Repository Cloud May 21, 2026 May 21, 2026 · release notes

    Nexus Repository Cloud adds Alpine APK support, dynamic Terraform proxy discovery, immediate session invalidation on password change, and UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. v4 API keys.

    • Adds steps for Alpine Linux (APK) repository support (hosted, proxy, group types) with APKINDEX generation and RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-based index signing
    • Terraform proxy repositories now dynamically read service discovery paths from upstream registries
    • Password change immediately invalidates all active sessions across devices and browsers
    • API keys for NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., npm, Docker, and Conan formats now use UUID v4 generation

    4 details in Everything

18. Nexus Repository Cloud May 13, 2026 May 13, 2026 · release notes

    Nexus Repository Cloud adds GO/Ansible repo support, new User Token API parameter, and uploader metadata permission.

    • Adds nameCode parameter to the User Token API to identify a token's owner and authentication realm by token name code
    • Adds a new nexus:uploader-metadata:read permission to control access to asset uploader usernames and IP addresses in the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and browse UI
    • Added support for GO hosted and group repositories
    • Added support for Ansible proxy, hosted, and group repositories

    4 details in Everything

19. Nexus Repository Cloud May 8, 2026 May 8, 2026 · release notes

    New IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. API endpoints for programmatic role management; IP Allow List GA; H2 source support in Instance Migrator

    • Added new Security management user roles API endpoints (get, replace, add, remove) to allow administrators to programmatically manage user role assignments in cloud deployments
    • The IP Allow List feature is now generally available in Sonatype Nexus Repository Pro and Cloud editions
    • The Instance Migrator now supports H2 databases as a migration source

    3 details in Everything

20. 3.92.0 May 7, 2026 · release notes

    Nexus Repository 3.92.0 adds Nexus One UI toggle, Dart/Flutter/Conda/Helm repo support, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. API, and Firewall webhooks.

    • Adds Settings > System > Nexus One UI toggle to preview the redesigned user interface
    • Adds Pub repository type for Dart and Flutter package management
    • Adds hosted and group repository support for Conda packages
    • Adds Helm group repository support for exposing multiple Helm repos via a single URL
    • Updates Instance Migrator to support migrating Swift, Terraform, and Conda hosted repositories

    +5 more show less

    • Exposes HikariCP database connection pool metrics via the Service Metrics Data API
    • Enables SSRF protection by default for new installations and adds an administrative API endpoint for managing it
    • Retains daily storage metrics indefinitely in the Usage Insights dashboard
    • Adds webhook support for Sonatype Repository Firewall events
    • Adds Bulk Waivers capability and associated API for managing quarantined components

    10 details in Everything

21. Nexus Repository Cloud April 29, 2026 Apr 29, 2026 · release notes

    Adds Nexus One UI preview and PEP 658/691 support to PyPI proxy repos

    • Enables Switch to Nexus One UI toggle for preview of new interface (requires enabling via Settings > System > Nexus One UI) in v3.92.0+
    • Adds PEP 658 and PEP 691 JSON API support to PyPI proxy repositories, caching responses for performance

    2 details in Everything

22. Nexus Repository Cloud April 22, 2026 Apr 22, 2026 · release notes

    Adds Instance Migrator for migrating Swift repositories between Nexus Repository instances

23. Nexus Repository Cloud April 20, 2026 Apr 20, 2026 · release notes

    New Dart/Conda/Helm repo support, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. protection API, and migration updates in Nexus Repository Cloud

    • Adds Dart (pub) package format support.
    • Adds Conda hosted and group repository support.
    • Adds Helm group repository support for aggregating multiple Helm repositories (disabled by default; configurable via system property).
    • The Instance Migrator now supports migrating Terraform and Conda hosted repositories between Nexus Repository instances.
    • Usage Insights dashboard retains daily storage metrics indefinitely.

    +1 more show less

    • Adds an admin REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. (GET/PUT /v1/security/ssrf-protection) for managing SSRF protection settings dynamically.

    6 details in Everything

24. 3.90.3 Apr 8, 2026 · release notes

    Sonatype Nexus Repository 3.90.3 adds skipProcessing to BlobRepositoryMismatchTask

    • Added skipProcessing configuration option to BlobRepositoryMismatchTask for eligible direct upgrades

    1 detail in Everything

25. 3.91.0 Apr 7, 2026 · release notes

    Sonatype Nexus Repo 3.91 adds Swift group repos, global firewall webhooks, and Alpine Docker default.

    • Adds support for Swift group repositories to aggregate multiple Swift package sources into a single endpoint
    • Adds global webhooks in Repository Firewall to notify systems when components are quarantined or blocked due to policy violations
    • Updates Docker image tagging strategy to make Alpine-based images the default variant for tags 3.91.0, 3.91.0-alpine, and latest

    3 details in Everything

26. Nexus Repository Cloud March 25, 2026 Mar 25, 2026 · release notes

    Nexus Repository Cloud March 25 adds Instance Migrator for OrientDB migration and Yum metadata regeneration.

    • Added Instance Migrator to migrate OrientDB-based Nexus Repository 3.70.5 instances to Nexus Repository Cloud or self-hosted Nexus Repository version 3.90.2+
    • Yum repository migrations now automatically regenerate repository metadata, including repomd.xml and associated .xml.gz files

    2 details in Everything

27. 3.70.5 Mar 23, 2026 · release notes

    Release 3.70.5 adds the Instance Migrator feature for seamless migration of self-hosted Nexus Repository data and configuration to Cloud or newer self-hosted versions.

28. 3.90.2 Mar 23, 2026 · release notes

    New Instance Migrator enables zero-downtime migration from Nexus Repository 3.70.5 to Cloud or 3.90.2+

    • Adds the Instance Migrator tool for migrating OrientDB-based Nexus Repository 3.70.5 deployments to Nexus Repository Cloud or self-hosted 3.90.2+ without service interruption.
    • Preserves hosted repository content, configurations, users, roles, and authentication mappings during migration.

    2 details in Everything

29. Nexus Repository Cloud March 11, 2026 Mar 11, 2026 · release notes

    Nexus Repository Cloud adds Swift group repositories to aggregate multiple Swift package sources.

30. 3.90.0 Mar 5, 2026 · release notes

    Sonatype 3.90 adds Terraform group repos, Swift hosted repos, Recovery Mode, User Token API, and PCCS visibility.

    • Support for Terraform group repositories aggregates multiple Terraform hosted/proxy repos into a single endpoint with configurable TTLs and conflict resolution.
    • Support for Swift hosted repositories enables publishing and managing Swift packages as .zip files with MIME type validation.
    • New Recovery Mode provides a controlled operational state to prevent background tasks from interfering with data repair operations.
    • Re-enabled Repair - Execute Data Repair Plan task is now active by default, restoring the data reconciliation workflow.
    • New User Token API allows administrators to create, view, and delete user tokens via API endpoints.

    +2 more show less

    • sonatype_filtered_versions field in npm metadata exposes versions filtered out by Repository Firewall policies (PCCS).
    • Granular Permissions for Log Management API introduces nexus:logging:read permission and nx-logging-read privilege, removing the need for broad nexus:* access.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed Legacy Application Health Check plugin and Hosted Repository Analysis capabilities (self-hosted only).
31. Nexus Repository Cloud March 4, 2026 Mar 4, 2026 · release notes

    Nexus Repository Cloud adds global webhooks for Repository Firewall quarantine events

32. Nexus Repository Cloud February 25, 2026 Feb 25, 2026 · release notes

    Swift/Terraform repo support and User Token API (CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.) added to Nexus Repository Cloud.

    • Adds Swift hosted repository format
    • Adds Terraform group repository format
    • Adds POST /api/admin/users/tokens, GET /api/admin/users/tokens, and DELETE /api/admin/users/tokens/{id} endpoints for User Token API

    3 details in Everything

33. Nexus Repository Cloud February 11, 2026 Feb 11, 2026 · release notes

    Sonatype Nexus Repository Cloud enables proxy URL validation by default and adds quarantine audit logging to Sonatype Repository Firewall.

    • proxy.url.validation is enabled by default to block outbound connections to private network addresses, localhost, and cloud metadata endpoints
    • Sonatype Repository Firewall writes firewall.quarantine audit log events when components are newly quarantined or when users attempt to download already quarantined components (requires self-hosted IQ version 201 or Sonatype Lifecycle Cloud)

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Outbound connections to private network addresses, localhost, and cloud metadata endpoints are now blocked by default unless proxy.url.validation is explicitly disabled or configured.
34. Nexus Repository Cloud February 4, 2026 Feb 4, 2026 · release notes

    Sonatype Nexus Repository Cloud adds sonatype_filtered_versions field to PyPI package metadata

35. 3.89.0 Feb 3, 2026 · release notes

    Nexus Repository 3.89.0 adds Swift proxy format support, hosted Terraform repositories, and expanded Terraform authentication options.

    • Adds Swift proxy repository format to integrate Swift Package Manager (SPM) workflows
    • Adds Terraform hosted repository format for distributing versioned source archives, platform-specific binaries, and providers as .zip files
    • Enables anonymous access to Terraform repositories when enabled

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. login fails if the SAML2_AUTH_REQUEST cookie is blocked by browser or infrastructure policies.
36. Nexus Repository Cloud January 28, 2026 Jan 28, 2026 · release notes

    Sonatype Nexus Repository Cloud adds Swift proxy and Terraform hosted repository support.

    • Adds Swift proxy repositories for caching external Swift package registries
    • Adds Terraform hosted repositories for storing private provider modules

    2 details in Everything

37. 3.88.0 Jan 13, 2026 · release notes

    Nexus Repository 3.88.0 adds Terraform proxy repos, SQL search, new APIs/configs for capabilities and security

    └──▷ USE IT
    Enable URL validation to block private network access for SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. protection in nexus.properties.
    env copy

    nexus.proxy.allowPrivateNetworks=false

    • Adds proxy repository support for Terraform to cache providers and modules from registry.terraform.io
    • Replaces Elasticsearch with SQL database for all search operations to improve consistency and simplify deployment
    • Adds GET /v1/capabilities/types API endpoint to programmatically retrieve capability types and metadata
    • Introduces Repository: Browse Trim capability and Repair - Repository trim browse tree task to manage empty browse nodes
    • Adds nexus.security.password.iterations and nexus.security.secrets.iterations config keys in nexus.properties to control PBKDF2 encryption strength

    +1 more show less

    • Adds optional URL validation for SSRF protection via nexus.proxy.allowPrivateNetworks=false config key in nexus.properties

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Repair - Execute Data Repair Plan task is disabled by default and fails if attempted, requiring nexus.reconcile.task.enabled=true to re-enable manually until support is restored
    • !SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. authentication now strictly requires the entityId in the IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. response to match the entityId configured in Nexus Repository
38. Nexus Repository Cloud January 9, 2026 Jan 9, 2026 · release notes

    Nexus Repository Cloud adds support for Terraform proxy repository format.

39. 3.87.0 Dec 2, 2025 · release notes

    Nexus Repository 3.87 adds NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. Release Integrity via Firewall, new Configuration API, and OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs./JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auto-enablement.

    • Repository Firewall now provides Release Integrity protection for NuGet components
    • New Configuration API allows programmatic export/import of repository configuration and metadata migration between instances
    • OAuth2 realm is automatically enabled when nexus.jwt.enabled is set to true in Pro

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Java 21 is now the minimum required Java version; older versions will fail to run.
    • !AWS SDK for S3 blob stores upgraded from 1.x to 2.33.5, making non-AWS S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. storage (e.g., Dell) incompatible.
40. 3.86.0 Nov 5, 2025 · release notes

    Sonatype Nexus Repository 3.86.0 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., license expiry alerts, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. user REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Docker scanning support

    • Adds OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. (OIDC) authentication for Single Sign-On integration with providers like Okta, Keycloak, and Azure AD
    • Adds License Expiry Notification capability to send email alerts before Pro license expiration
    • Adds new REST API endpoints for managing SAML-backed user records in Nexus Repository Pro and Cloud
    • Adds Firewall for Docker Scanning support for OCI-compliant images including multi-architecture manifest lists and uncompressed layers

    4 details in Everything

41. 3.85.0 Oct 7, 2025 · release notes

    Nexus Repository Cloud adds predictable S3 bucket URLs; Firewall API standardizes /api/v2/firewall/ paths.

    • Adds predictable S3 bucket URL format for binary downloads in Nexus Repository Cloud to simplify outbound traffic configuration
    • Standardizes Firewall API endpoint path to /api/v2/firewall/ for all non-malware endpoints

    2 details in Everything

42. 3.84.0 Sep 9, 2025 · release notes

    Sonatype Nexus Repository 3.84.0 adds OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. manifest and RPM support in Container Scanning, plus HA concurrency improvements.

    • Sonatype Repository Firewall now supports container images using the OCI Image Manifest Specification and Linux distributions with RPM package formats for scanning.
    • High availability deployments handle concurrent requests for the same asset more reliably by reducing transient read failures on blob attributes.

    2 details in Everything

43. 3.83.0 Aug 12, 2025 · release notes

    Sonatype Nexus 3.83.0 adds container policy enforcement via Firewall, path-based Docker routing, configurable password hashing, and a new data consistency repair task.

    • Adds automated detection and quarantine of non-compliant Docker images through Repository Firewall with a new Containers dashboard for violations.
    • Adds support for Docker Registry path-based repository routing to simplify deployment without custom subdomains.
    • Adds configurable password hashing algorithms (SHA-512, PBKDF2WithHmacSHA256, PBKDF2WithHmacSHA1) and secrets encryption options.
    • Adds a new Verify and Repair Data Consistency task to recover missing component metadata, with support for scoping by blob store/repository and a Dry Run option.
    • Removes legacy Repair - Reconcile component database from blob store task in favor of the new consistency task.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The legacy Repair - Reconcile component database from blob store task is removed; any scheduled tasks using this name are automatically deleted during upgrade.
44. 3.82.0 Jul 9, 2025 · release notes

    Sonatype Nexus Repository 3.82.0 adds a new Capabilities API for programmatic management and improves quarantine message clarity.

    • Introduces the Capabilities API allowing administrators to programmatically view, create, update, and delete Capabilities via automation
    • Improves quarantine message behavior in CLI output for npm and NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. formats when a component is blocked by Repository Firewall

    2 details in Everything

45. 3.81.1 Jun 11, 2025 · release notes

    Nexus Repository 3.81.1 moves metrics endpoints to /service/rest/metrics and fixes NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. restore.

    • Moves all metrics REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints under the /service/rest/metrics prefix (e.g., /service/rest/metrics/prometheus, /service/rest/metrics/data).

    1 detail in Everything

46. 3.81.0 Jun 10, 2025 · release notes

    Nexus Repository 3.81.0 adds egress monitoring in Licensing Usage tab and Zscaler integration for Repository Firewall.

    • Adds Total Egress data to the Usage tab under Settings > System > Licensing for on-prem instances
    • Integrates Sonatype Repository Firewall with Zscaler for malware protection

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropwizard metrics org_eclipse_jetty_webapp_WebAppContext_2xx_responses_total are removed and replaced by org_eclipse_jetty_ee8_nested_ContextHandler_CoreContextHandler_2xx_responses_total and org_eclipse_jetty_ee8_nested_ContextHandler_CoreContextHandler_requests_count
    • !Customized Jetty configuration must be updated due to the upgrade from Jetty 9 to Jetty 12
47. 3.80.0 May 6, 2025 · release notes

    Nexus Repo 3.80 adds Hugging Face support for Firewall, Usage Center HA visibility, and new compact blob store task.

    • Adds Hugging Face component analysis to Sonatype Firewall (requires IQ 191)
    • Adds Admin - Compact blob store task with Blob Older Than property for S3 cleanup
    • Makes Usage Center accessible in UI for High Availability deployments
    • Adds Historical Usage table under the Licensing > Usage section

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Renamed logging module from nexus-pax-logging to nexus-logging; custom Jetty configs referencing org.sonatype.nexus.pax.logging will break unless updated to org.sonatype.nexus.logging
    • !Removed Expiration Days setting from S3 blob store configuration; cleanup now requires the Admin - Compact blob store task
48. 3.79.0 Apr 1, 2025 · release notes

    Nexus 3.79.0 adds Malware Defense Evaluation and Firewall REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services., plus AWS S3 pre-signed URL support for Pro users.

    • Adds the GET /service/rest/malware/evaluate API for on-demand malware checks against threat intelligence, returning attackVector and threatTypes fields (requires IQ Server 189+)
    • Adds the Firewall REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoints to manage protected namespaces for Namespace Confusion mitigation, including wildcard support and a DELETE method to clear all protected namespaces for a format
    • Enables pre-signed URL downloads for AWS S3 blob stores in Nexus Repository Pro to bypass server load for large binary artifacts

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Firewall Classic is sunset and replaced by Sonatype Repository Firewall
49. 3.78.0 Mar 4, 2025 · release notes

    Sonatype Nexus Repository 3.78.0 introduces ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Docker images, Spring Boot migration, npm Firewall integration, and removes legacy components

    • ARM Docker images now available for deployment on ARM infrastructure alongside existing x86_64 versions
    • npm Audit security enhanced with full Sonatype Repository Firewall integration for npm versions 7 and 8
    • Nexus Repository migrates to Spring Boot architecture packaged as a single uber-jar, dropping Apache Karaf/OSGi support

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Custom OSGi bundle deployment is no longer supported due to the migration from Apache Karaf to Spring Framework
    • !The jetty-rewrite module is removed during the upgrade to Jetty 12, invalidating any customizations in jetty config files
    • !The Log4J Visualizer feature has been removed and is no longer available
    • !The Bower format has been officially sunset and is no longer supported
50. 3.77.0 Feb 4, 2025 · release notes

    Nexus Repository 3.77.0 adds Hugging Face proxy repos, automatic malware removal tasks, Conan v2 replication, Helm staging for Pro, and EULA API.

    • Adds Hugging Face Proxy repository format to manage and cache pre-trained AI/ML models
    • Adds Automatic Malware Management task configuration to automatically remove detected malware from proxy repositories (Pro only)
    • Adds Content Replication support for Conan v2 format in Pro edition
    • Adds Helm staging functionality for Pro customers using H2 or PostgreSQL databases
    • Adds status check alert for deployments using embedded H2 database when usage exceeds recommended limits

    +1 more show less

    • Adds new EULA REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. endpoint to accept Community Edition End User License Agreement during upgrade

    6 details in Everything

51. 3.76.0 Jan 7, 2025 · release notes

    Sonatype Nexus Repository 3.76.0 adds native Conan 2.0 support, a Malware Remediation task, and auto-populated GCP blob store region.

    • Adds Conan 2.0 format support for C/C++ package management in Nexus Repository Pro
    • Adds a dedicated Malware Remediation task to inspect proxy repositories for malicious components
    • Automatically detects and populates the region field when creating new GCP blob stores

    3 details in Everything

52. 3.75.0 Dec 3, 2024 · release notes

    Nexus Repository 3.75.0 adds native PHP/Composer proxy support, Google Cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. for GCS blob stores, and explicit Cargo auth control.

    • Adds native Proxy PHP/Composer repository support to Nexus Repository Pro, enabling storage and retrieval of Composer components alongside other dependencies.
    • Adds option to enable Google Cloud Key Management ServiceKey Management ServiceA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. (KMS) encryption for new Google Cloud Storage (GCS) blob stores by providing a KMS Key ID.
    • Adds Hide button to the Malware Warning banner to dismiss it during the current session.
    • Improves Cargo package browsing in the UI by extracting and displaying attributes (name, license, authors, vendor, description, version, homepage) from cargo.toml files.
    • Adds new checkbox Restrict repository content to authenticated users for Cargo proxy and group repositories that sets auth-required: true in /config.json responses.

    5 details in Everything

53. 3.74.0 Nov 5, 2024 · release notes

    GCP HA support, blob store enhancements, and expanded Conan search capabilities in Nexus Repository 3.74.0.

    • Adds Google Cloud Platform support for highly available Nexus Repository deployments on GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. (Pro Only)
    • Adds native Google Cloud Blob Store support for artifact storage (Pro Only)
    • Enables automatic license distribution across clustered deployments via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. or UI
    • Allows definition of custom region lists for AWS Blob Store configuration
    • Supports AWS S3 failover buckets for cross-region high availability (Pro Only)

    +2 more show less

    • Adds External Secrets Operator support for managing sensitive configuration in HA deployments (Pro Only)
    • Introduces strict base version matching and expanded search fields for Conan format

    7 details in Everything

54. 3.73.0 Oct 10, 2024 · release notes

    Sonatype Nexus Repository 3.73.0 adds Rust/Cargo support, malware warnings, re-encryption key rotation, and parent_id indexing.

    • Adds native support for the Rust / Cargo format (Pro only), enabling hosted, proxy, and group repositories with Cargo's sparse protocol for versions 1.68+.
    • Introduces a Malware Warning Banner in the Nexus Repository UI to alert administrators and users when open-source malware components are detected in repositories.
    • Enables administrators to rotate the encryption key used for reversible storage of sensitive data (e.g., passwords) via the re-encryption feature.
    • Adds a new index on parent_id to improve getByDisplayPath query performance, running on startup.

    4 details in Everything

55. 3.72.0 Sep 4, 2024 · release notes

    Sonatype Nexus Repository 3.72.0 adds configurable DB refetch limit for search in HA, new CSV columns, and zero-downtime upgrade support.

    • Enables zero-downtime upgrades on rolling HA deployments
    • Adds publication and last downloaded date columns to Cleanup Preview CSV
    • Adds configurable database refetch limit for Search capability

    3 details in Everything

56. 3.71.0 Aug 8, 2024 · release notes

    Nexus Repository 3.71.0 defaults to H2 database, adds OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Docker support and new HTTP Config REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.

    • Sets H2 as the default embedded database for all new installations, including OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees.
    • Enables rolling upgrades for High Availability (HA) deployments in preparation for 3.72.0
    • Adds OCI Distribution Spec 1.0/1.0.1 compliance for Docker repositories
    • Exposes a new HTTP Configuration REST API to retrieve, update, and reset HTTP settings

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Requires migration to H2 or external PostgreSQL database; Java 8/11 and OrientDB are no longer supported for upgrades
    • !Requires upgrade to Java 17 for all installations of version 3.71.0 and later
57. 3.69.0 Jun 4, 2024 · release notes

    Sonatype Nexus Repository 3.69.0 adds Java 17 support for H2/PostgreSQL deployments, user token expiration configuration, and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. API/UI improvements

    • Adds sonatype/nexus3:3.69.0-java17 Docker image to support running Nexus Repository Pro on Java 17 with H2 or PostgreSQL databases
    • Adds configurable user token expiration for Sonatype Nexus Repository Pro deployments, allowing administrators to set a defined expiry period for user authentication tokens
    • Extends the Users API's delete endpoint with an optional user realm source parameter to uniquely identify users across multiple LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. servers
    • Adds UI capability in the user administration section to manually delete cached authenticated SAML user records

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !OrientDB databases no longer support Java 17; attempting to use Java 17 with OrientDB will prevent Nexus Repository from starting
58. 3.68.0 May 7, 2024 · release notes

    Nexus Repository 3.68.0 adds repository size viewing, SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data./SHA512 generation for raw uploads, role wildcards, and removes legacy HA-C.

    • Adds repository size visibility in the UI and via GET v1/repositories/{repositoryName} / GET v1/repositories APIs for Pro deployments on PostgreSQL
    • Generates SHA256 and SHA512 checksums when uploading to raw repositories via API
    • Supports asterisk (*) wildcards in the search bar when filtering privileges and roles

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Nexus Repository will not start for any deployments that use legacy High Availability Clustering (HA-C); migration is required before upgrading to 3.68.0.
59. 3.67.0 Apr 2, 2024 · release notes

    Nexus Repository 3.67.0 adds official Java 11 runtime support alongside existing Java 8 option.

    • Adds the ability to run Nexus Repository on Java 11 or Java 8
    • Provides specific Docker image tags for selecting the Java runtime version

    2 details in Everything

60. 3.66.0 Mar 5, 2024 · release notes

    Nexus Repository 3.66.0 adds embedded DB usage alerts and UI progress tracking for Repair tasks.

    • Adds in-product usage alerts when deployments with embedded databases (OrientDB or H2) approach 20,000 requests per day or 100,000 components

    1 detail in Everything

61. 3.65.0 Feb 6, 2024 · release notes

    Nexus Repository 3.65.0 adds version-retention cleanup for Maven/Docker and group repo blob store changes via UI task

    • Adds retain.latest option to cleanup policies for Maven and Docker formats on PostgreSQL Pro deployments
    • Enables Admin - Change repository blob store task on group repositories in PostgreSQL-backed Pro instances

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Component search and tagging queries now return fewer results due to improved precision; keyword searches like nexus-core no longer match nexus-main-core.
    • !Tag association for components now uses exact matches instead of loose string matching (e.g., tag on version 1.0.0 applies only to that exact version).
62. 3.63.0 Dec 5, 2023 · release notes

    New HA Helm chart configurability, audit logging enhancements, and repository filtering

    • Adds additionalVolumes, additionalVolumeMounts, additionalContainers, statefulsetAnnotations, podAnnotations, nodeSelectors, hostAliases, preStartCommand, postStartCommand, initContainers, tlsSecrets for ingress, additionalLabels, additionalSelectors, ingressAndServiceForDockerRegistries, securityContext, serviceAnnotations, and existingPersistentVolumeClaim to the High Availability Helm Chart
    • Adds audit logging for SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. user login, logout, and config-changed events
    • Adds audit logging for local authentication, LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., and Crowd user login and logout events
    • Enables filtering the Repositories table by blob store name

    4 details in Everything

63. 3.62.0 Nov 7, 2023 · release notes

    Nexus Repository 3.62.0 adds PostgreSQL cleanup preview CSVs, combined HA Helm chart, expanded audit logging, and a deployment pattern library.

    • Adds cleanup CSV export capability in the UI for Pro deployments using PostgreSQL to preview policy removals
    • Provides a single combined Helm chart for High Availability deployments across AWS, Azure, and on-premises environments
    • Publishes a new Deployment Pattern Library covering resiliency, scalability, and distribution use cases
    • Adds Clear Cache and Change (server) order audit log entries for LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. events across all databases
    • Adds routing rule creation, update, and deletion audit log entries for H2 and PostgreSQL deployments

    +1 more show less

    • Improves Support Zip generation for HA deployments with per-node download persistence and bulk configuration

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The separate AWS and Azure High Availability Helm charts are no longer available; customers must migrate to the combined chart.
64. 3.61.0 Oct 4, 2023 · release notes

    Sonatype Nexus Repository 3.61.0 adds OpenShift HA operator, PyPI policy compliance, proxy blob store changes, and usage metrics.

    • Publishes a new Nexus Repository HA Certified Operator for OpenShift to support PostgreSQL-based High Availability deployments
    • Extends the Admin - Change repository blob store task to support proxy repositories in addition to hosted ones
    • Enables policy-compliant component selection for PyPI format to exclude versions quarantined by Sonatype Repository Firewall
    • Improves Azure Blob Store upload performance by eliminating redundant copy operations during component uploads

    4 details in Everything

65. 3.60.0 Sep 7, 2023 · release notes

    Support for Google Open Source Cocoapods proxies and refactored Crowd caching improves performance.

    • Adds support for serving Cocoapods packages from googlesource.com in proxy repositories
    • Refactors caching for Atlassian Crowd deployments to improve performance and enable bearer tokenbearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. realm caching

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Local Authorizing realm has been removed from the user interface and API, preventing accidental deletion via those surfaces.
66. 3.59.0 Aug 15, 2023 · release notes

    Nexus Repository 3.59.0 adds outbound request logging and LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. password encoder support

    • Adds an outbound request log ($data-dir/log/outbound-request.log) that records date/time, authenticated user id, method, url, response status code, bytes sent/received, and response time for debugging network issues.
    • Expands the audit log ($data-dir/log/audit/audit.log) to include entries for content selector creation, update, or deletion.

    2 details in Everything

67. 3.58.0 Jul 17, 2023 · release notes

    Nexus 3.58.0 re-enables Pro blob store migration for non-OrientDB DBs and allows Firewall quarantine text customization.

68. 3.57.0 Jul 5, 2023 · release notes

    Sonatype Nexus 3.57.0 adds Default Role alert, Blob Store and Last Updated columns in UI

    • Adds a Default Role capability allowing administrators to select a configured role granted to all authenticated users.
    • Adds an alert on the Roles screen showing which role is currently configured as the default.
    • Adds a Blob Store column to the Manage repositories table to identify blob store assignments.
    • Adds a Last Updated column to the search results table to allow sorting by latest or oldest builds.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Component IQ and IQ Application fields in the component browse view are renamed to Sonatype Lifecycle Component and Application respectively.
69. 3.56.0 Jun 19, 2023 · release notes

    Sonatype Nexus Repository 3.56.0 adds AWS me-central-1 region support and timeouts for Cleanup Policy preview.

    • Adds me-central-1 as a selectable region option when creating an S3 blobstore
    • Adds a 1-minute timeout to the Cleanup Policy preview feature to prevent unreasonable wait times

    2 details in Everything

70. 3.55.0 Jun 5, 2023 · release notes

    Nexus Repository 3.55.0 adds Conan v1 endpoint support, optional Helm chart components, and Welcome Page quick actions.

    • Adds /v2/users/authenticate Conan endpoint for hosted Conan repositories
    • Makes Fluentbit, External DNS, Docker Ingress, and service optional in the Resiliency Helm Chart
    • Adds quick actions to the Welcome Page for System Health, Cleanup Policies, Browse, Search, Release Notes, Documentation, and Community

    3 details in Everything

71. 3.54.1 May 22, 2023 · release notes

    Nexus Repository 3.54.1 adds Threshold field for exporting unused assets.

    • Threshold (in days) of unused assets to include field in Repository - Export assets task
    • Renamed IQ Audit and Quarantine capability to Firewall Audit and Quarantine

    2 details in Everything

72. 3.50.0 Mar 27, 2023 · release notes

    Sonatype Nexus Repository 3.50.0 adds High Availability deployment patterns and Conan revisions support for Pro customers.

    • Adds High Availability (HA) deployment options for Sonatype Nexus Repository Pro on AWS, Azure, Kubernetes, or manual setups to achieve active-active failover and auto-scaling capabilities
    • Enables Conan revisions support for hosted repositories using H2 or PostgreSQL databases, allowing artifact immutability while maintaining a single Conan reference

    2 details in Everything

73. 3.49.0 Mar 6, 2023 · release notes

    Admin-Cleanup task uses batch delete by default; H2/PostgreSQL Apt repos require metadata rebuild.

    • Admin - Cleanup unused asset blobs task uses batch delete by default

    1 detail in Everything

74. 3.48.0 Feb 27, 2023 · release notes

    Sonatype Nexus Repository 3.48.0 introduces new Content Replication PRO feature, improved NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. v2 pagination performance on PostgreSQL.

    • Adds Content Replication PRO for Docker, Maven, npm, NuGet v3, R, Raw, RubyGems and Apt formats to automatically replicate artifacts between instances via HTTP on a schedule
    • Improves NuGet v2 repository pagination performance on PostgreSQL deployments by optimizing retrieval times from multiple seconds to milliseconds

    2 details in Everything

75. 3.43.0 Nov 7, 2022 · release notes

    Nexus Repository 3.43.0 adds NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. V2 support for H2/PostgreSQL deployments and mirrors PyPI Yank attribute.

    • Adds NuGet V2 repository support for deployments using H2 or PostgreSQL databases
    • Adds support for mirroring the PyPI Yank attribute as defined in PEP 592

    2 details in Everything

76. 3.41.0 Jul 27, 2022 · release notes

    New database migrator flags, blobstore cleanup task, and SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.-only PyPI hashing in Nexus Repository 3.41.0.

    • Adds --preserve-export and -y / --assume-yes optional parameters to the Database Migrator for preserving OrientDB JSON exports and skipping shutdown confirmation prompts.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Hosted PyPI repositories now exclusively provide SHA256 hashes instead of MD5 in the /simple web interface, a change that cannot be reverted after upgrading.
77. 3.40.0 Jun 22, 2022 · release notes

    Nexus Repository 3.40.0 adds Docker subdomain connector and configurable Maven metadata rebuild strategy

    • Adds Docker Subdomain Connector PRO to eliminate reverse proxy requirement for scaling port connectors
    • Enables new SQL-based Maven metadata rebuild implementation by default and exposes nexus.maven.datastore.legacy.rebuild config key to revert to legacy behavior

    2 details in Everything

78. 3.38.1 Mar 29, 2022 · release notes

    Nexus Repository 3.38.1 improves npm policy-compliant selection and expands Log4j Visualizer with a new consumption chart.

    • Adds a Log4j Consumption chart to the Log4j Visualizer to display trend lines for vulnerable (CVE-2021-44228) vs. unaffected log4j component downloads

    1 detail in Everything

79. 3.38.0 Mar 2, 2022 · release notes

    Adds GET /v1/repositories/{repositoryName} endpoint, Assets API uploader fields, and NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. version status check to Nexus Repository 3.38.0

    • Added GET method to the Repository Management API: GET /v1/repositories/{repositoryName} to discover basic repository information without declaring a format.
    • Expanded Assets API with uploader, uploaderIp, and fileSize fields in responses to identify component uploaders.
    • Added Asset Name Matcher criteria for Yum Cleanup Policies to remove components matching regex patterns.
    • Added Apple M1 Chip support for building Nexus Repository.

    4 details in Everything

80. 3.37.2 Dec 28, 2021 · release notes

    Adds a Log4j Visualizer to monitor Maven log4j-core downloads impacted by CVE-2021-44228

81. 3.37.0 Nov 24, 2021 · release notes

    Nexus Repository 3.37.0 adds NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code./PyPI replication, npm metadata repair task, and improved migration/resilience features.

    • Repository replication now supports NuGet and PyPI formats (PRO).
    • Adds Repair - Rebuild npm metadata task for recovering corrupted hosted repository metadata.
    • Migrating assets from Nexus Repository 2 to 3 now retain creation timestamp and creator information.

    3 details in Everything

82. 3.36.0 Oct 27, 2021 · release notes

    Nexus Repository 3.36.0 adds Nexus Truststore for replication and OrientDB health checks during DB migration

    • Adds Use certificate connected to the Nexus Truststore option to replication connections to use certificates from the Nexus Truststore
    • Adds an optional parameter to the Database Migrator utility to check for OrientDB corruption before migration

    2 details in Everything

83. 3.35.0 Oct 12, 2021 · release notes

    Nexus Repository 3.35.0 adds continuous Docker/npm replication, hardlink imports, Firewall quarantined version removal, and Database Migrator updates.

    • Repository replication now supports source and target repositories in Docker and npm formats
    • Replicator runs continuously by default without a separate bash script
    • New Replication Administrator preconfigured role includes all six replication privileges
    • Hard link support for import added to Docker, npm, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., PyPI, RubyGems, and Yum formats
    • Database Migrator utility now supports migration between PostgreSQL and H2 databases

    +3 more show less

    • Conan hosted format is now supported on PostgreSQL and H2 database options
    • New Remove Quarantined Versions option in Nexus Repository settings for npm policy compliance
    • Raw repository assets now correctly default to application/octet-stream content type

    8 details in Everything

84. 3.33.0 Aug 4, 2021 · release notes

    Nexus Repository Manager 3.33.0 adds npm, Conan, Conda, Git LFS, and R support for Postgres/H2 backends and an Elasticsearch index loading feature.

    • Adds npm, Conan, Conda, Git LFS, and R format support for Pro customers on Postgres and H2 database backends
    • Adds the ability to load your Elasticsearch index on node startup for automatic failover availability

    2 details in Everything

85. 3.32.0 Jul 8, 2021 · release notes

    Nexus Repo 3.32.0 adds repository replication product preview and APT format support in Postgres

    • Adds repository replication as a Product Preview feature for Nexus Repository Pro customers, allowing content copying from source to target repositories
    • Adds APT format support when using PostgreSQL as the backend database

    2 details in Everything

86. 3.31.0 Jun 16, 2021 · release notes

    Nexus Repository Manager 3.31.0 adds external PostgreSQL database support for Pro editions.

    • Enables Nexus Repository Pro to use an externalized PostgreSQL database instead of the embedded OrientDB, supporting Maven, Docker, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. V3, PyPI, Helm, Raw, and Yum formats.

    1 detail in Everything

87. 3.30.0 Mar 4, 2021 · release notes

    Azure Blob Store support, GPG for Yum repos, namespace confusion policy condition, and mandatory 2048-bit TLS keys in Nexus Repository Manager 3.30.0

    • Adds Azure Blob storage as a backend for new blobstore instances (PRO)
    • Adds GPG signing configuration support for Yum repositories to allow binary signature verification
    • Adds a policy condition in Nexus IQ to help prevent namespace confusion attacks by quarantining external packages matching proprietary component names

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Nexus Repository Manager now enforces a minimum of 2048-bit TLS keys; connections using weaker keys will be rejected
88. 3.29.0 Dec 4, 2020 · release notes

    Nexus Repository Manager 3.29.0 adds npm quarantine filtering, SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data./512 hash generation, TLS 1.2 enforcement, and NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. V3 default URL.

    • Support for Maven and Gradle SHA256/SHA512 Hashing created automatically during UI Upload
    • Remote URL of nuget.org-proxy Defaults to V3 (https://api.nuget.org/v3/index.json) for New Installs
    • Direct inbound HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. Connection Ciphers and TLS Protocols now default to TLS v1.2 only in jetty-https.xml

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !/service/metrics/healthcheck endpoint is deprecated and scheduled for eventual removal; use /service/rest/v1/status/check instead