Skip to main content

Sonatype Nexus Repository 3.66.0 Release Notes

Released March 5, 2024

Highlights in This Release

Usage Alerts for Deployments Using Embedded Databases

To help customers identify when it is time to evaluate their deployment model, Sonatype Nexus Repository OSS and Pro deployments that use an embedded database (OrientDB or H2) will now see in-product warnings when usage levels approach or exceed certain thresholds. Read more below

Visual Progress Tracking forRepair - Rebuild repository browseTask

When running the Repair - Rebuild repository browse task, the Status updates to show users how many assets are completed out of the total number of assets that must be processed. This improvement applies to deployments using PostgreSQL and H2 databases only. Read more below

Usage Alerts for Deployments Using Embedded Databases

As software development becomes more central and mission-critical to business operations, it’s important to ensure that your Sonatype Nexus Repository is deployed appropriately for your scale.

While embedded databases are appropriate for disposable edge caches, test deployments, and low-concurrency team usage, an external PostgreSQL database is recommended for more demanding use. This is particularly true for higher-concurrency use, or in any situation where Nexus Repository is the system of record for the components that it stores.

To help customers identify when it is time to evaluate their deployment model, Sonatype Nexus Repository OSS and Pro deployments that use an embedded database (OrientDB or H2) will now see in-product warnings when usage levels approach or exceed one of the following thresholds:

  • 20,000 requests per day

  • 100,000 components

usage_metrics_3_66.png

When your Sonatype Nexus Repository usage approaches recommended levels for your deployment, you should implement more suitable architecture as soon as possible. To help you determine what that looks like, we’ve created a series of reference architectures illustrating appropriate deployment models for different scales. See the Sonatype Nexus Repository Reference Architectures section of our help documentation for full details.

Visual Progress Tracking for Repair - Rebuild Repository Browse Task

We understand the importance of tracking progress for tasks that can take some time to complete. While we have previously made performance improvements to the Repair - Rebuild repository browse task, with this release, we have also made it possible for those using a PostgreSQL or H2 database to view the task’s progress in the user interface. Tracking task progress was previously possible only through viewing task log files.

When running the Repair - Rebuild repository browse task, the Status updates to show users how many assets are completed out of the total number of assets that must be processed. This functionality is available only for those using an H2 or PostgreSQL database and also works in high-availability deployments.

User Interface Improvements for Roles

To make it easier for administrators to see and manage applied privileges and roles, we’ve modified our user interface to move away from the previous transfer list methodology. Now, administrators will see a single column listing applied privileges and a button to modify the privileges applied to that role. Selecting the button opens a modal where administrators can filter by keyword and select privileges to apply to that role.

Screenshot_2024-02-26_at_9_22_46_AM.png
Screenshot_2024-02-26_at_9_27_13_AM.png

Administrators can take the same steps to apply roles to other roles.

For full details on creating and managing roles, see our Roles help documentation.

Dependency Updates

This release includes the following dependency updates:

  • org.jboss.resteasy : resteasy-multipart-provider : 3.15.3.Final upgraded to 3.15.6.Final

  • AWS SDK dependencies from 1.12.299 to 1.12.658

Bug Fixes in Nexus Repository 3.66.0

Issue ID

Description

NEXUS-41360

Database Migrator: Resolved an issue that was causing some older versions of the Database Migrator to require very high heap.

NEXUS-41096

Added a new script to the help documentation for those on PostgreSQL or H2 migrating from LDAP to SAML user tokens.

NEXUS-41062

The merged metadata summary on the Browse screen now shows the correct information for group Maven repositories.

NEXUS-41068

Resolved an issue where the support zip download was not working as expected in HA environments with a nexus-context path.

NEXUS-41052

The metadata for hosted npm repositories in PostgreSQL deployments no longer duplicates the "_id" property.

NEXUS-40983

NuGet searches with the -PreRelease option now return the expected results.

NEXUS-40900

Fixed an issue with HA nodes upgrading before nodes with older versions have been shut down. Startup will halt with a warning until the older nodes have been gracefully shut down.

NEXUS-40673

Resolved an issue where a 403 error message was displayed on the welcome page for anonymous users.

NEXUS-40612

Disabling the usage metrics flag will also remove the metric aggregation task.

NEXUS-40377

The custom search page will no longer display uncaught type errors when adding new criteria.

NEXUS-39915

The migration of asset timestamp metadata will now be done as expected for raw repositories when moving from Nexus Repository 2 to 3. A fix for Maven and NuGet will be covered in a future release.

NEXUS-39677

The blob store API now returns 404 response codes for non-existent S3-type blob store names.

NEXUS-38842

The export assets task no longer logs WARN messages when running correctly.

NEXUS-35478

The Swagger API UI documentation for repositories will now show that the "blobStoreName" parameter is mandatory.

NEXUS-32494

Database Migrator: The database migrator tool will not run for incompatible older versions of Nexus Repository while returning a message to upgrade.

NEXUS-31786

Database Migrator: The database migrator tool now includes more details on assets when logging errors.

NEXUS-28593

The InterruptedException will no longer be logged when recording a successful audit event.

NEXUS-26581

Export will no longer report errors when the directory has not been pre-created.