Sonatype Nexus Repository 3.57.0 - 3.57.1 Release Notes
Note Critical Fix for 3.57.0 and 3.58.0 Deployments Using Sonatype Repository Firewall (3.57.1) This release fixes a critical bug that could allow users to unintentionally download quarantined components. The bug impacts 3.57.0 and 3.58.0 Sonatype Nexus Repository deployments using Sonatype Repository Firewall. Default Role Alert (3.57.0) In this release, we added a Default Role alert to inform administrators when the Default Role capability is enabled and what role is configured as the default role granted to all authenticated users. Helpful New Columns in Repositories and Search Results Tables (3.57.0) This release includes multiple UX enhancements, including a new Blob Store column in the Repositories table and a sortable Last Updated column to Search results. |
Critical Fix for 3.57.0 and 3.58.0 Deployments Using Sonatype Repository Firewall
This release fixes a critical bug impacting Sonatype Nexus Repository3.57.0and3.58.0deployments that use Sonatype Repository Firewall.
This bug could allow for users to unintentionally download quarantined components. We have retracted versions 3.57.0 and 3.58.0; please use 3.57.1 or 3.58.1 instead.
Default Role Alert
The Default Role capability allows administrators to select a configured role to be granted to all authenticated users. This means all authenticated users will have the privileges granted to the default role. To make it easier for you to see what role (if any) is configured as your default role, we added an alert to the Roles screen providing this information when you have a default role configured.
Blob Store Column in Repositories Table
To make it easier for you to identify the blob stores to which your repositories belong, we added a Blob Store column to the Manage r epositories table providing this information.
 |
Last Updated Column in Search Results
In order to allow you to easily sort your search results by latest or oldest builds, we've added a Last Updated column to the search results table.
 |
Improvements in Support of Sonatype Repository Firewall
We continue to make changes in Sonatype Nexus Repository to continually progress in unifying Sonatype's product suite. To this end, we have made changes to ensure that highly available (HA) Sonatype Nexus Repository deployments can support the new Sonatype Repository Firewall SaaS offering. We have also added validation to ensure that Sonatype Nexus Repository and Firewall only exchange information when Firewall configuration is enabled to avoid data becoming out of sync.
In the UI, we've renamed the Component IQ and IQ Application fields in the component browse view to Sonatype Lifecycle Component and Application respectively.
We’ve also modified the policy-compliant component selection checkbox so that it is disabled until and unless both the Firewall - Audit and Quarantine capability is enabled and the Enable Quarantine checkbox that appears within that capability is checked. This is to prevent the Nexus Repository from getting into an inconsistent state with the Firewall server.
Bug Fixes | Description |
|---|---|
NEXUS-24088 | You can now properly remove an S3 blob store from a group even when it references an S3 bucket that is no longer accessible; such blob stores no longer cause UI errors. |
NEXUS-24726 | Made enhancements to the Search APIs to improve the behavior for query parameters on fields that accept empty values. An empty value for most fields is now treated as “specifically empty" instead of the former behavior of treating it like a wildcard. However, note that therepositoryandformatparameters should not be empty as every component is both stored in a repository and has a format. |
NEXUS-27710 | Fixed errors that were sporadically preventing startup in some cases due to a corrupted org.apache.karaf.features.cfg file. |
NEXUS-29638 | Downloading a pom.xml that uses unicode characters no longer fails due to calling |
NEXUS-31461 | Searching for Maven versions now returns versions in alpha-numeric order as expected. |
NEXUS-31492 | Raw proxy URL no longer encodes special characters for outbound requests. |
NEXUS-35917 | The Repair - Reconcile component database from blob store task with only Integrity Check option selected now removes stale objects from S3 blob stores as expected. |
NEXUS-36599 | Browse privileges are no longer required to execute a NuGet search; only Read is needed. |
NEXUS-38662 | Deleting large repositories is no longer impeded by errors where Sonatype Nexus Repository looks for |
NEXUS-38791 | Running a search for Maven assets in an HA environment now returns the versions in descending order. |
NEXUS-38851 | npm exports no longer skip assets with an |
NEXUS-39169 | The permissions required for the search API are now consistent between HA and non-HA environments. Searching a group repository from the API only requires the user to have read permissions for the group. |