Sonatype Nexus Repository 3.78.0 - 3.78.2 Release Notes

NEXUS-46461

Sonatype Nexus Repository correctly loads the license file specified by the nexus.licenseFile property in nexus.properties during initialization.

NEXUS-46451

The startup script for macOS distributions now correctly identifies the embedded JDK home, resolving the previous issue where startup failed due to an incorrect path.

NEXUS-46408

Installations set up to use systemd as described in our Run as a Service documentation now start as expected.

NEXUS-46377

Sonatype Nexus Repository's Windows service installation now explicitly uses the embedded JDK, resolving an issue where the service could incorrectly select a system-installed JDK.

NEXUS-46370

Sonatype Nexus Repository's Unix distribution archive now preserves the user and group ownership of unpacked files, resolving an issue where files were incorrectly owned by a specific user ID.

NEXUS-46362

Removed unnecessary warning about JAVA_HOME not being set from all possible places where it might be set.

NEXUS-46359

Sonatype Nexus Repository now respects the karaf.data and karaf.log properties specified in nexus.vmoptions as expected.

NEXUS-46318 & NEXUS-46401

Sonatype Nexus Repository now allows users to specify a custom JVM using the APP_JAVA_HOME environment variable or the app_java_home property in nexus.rc, restoring the ability to override the embedded JDK. See Obtaining a Suitable JRE.

NEXUS-46354

Corrected a NEXUS_DATA environment variable injection issue, resolving file lock errors in Kubernetes deployments.

NEXUS-46353

Nexus Repository Kubernetes deployments now correctly load and persist licenses upon initial installation, resolving a "License is not valid" error that occurred in some deployments.

NEXUS-46345

Corrected the URL used to retrieve Composer packages.json metadata.

NEXUS-46319

Restored missing Tasks REST API endpoints.

NEXUS-46313

Nexus Repository now starts correctly when installed in directories containing spaces.

NEXUS-46310

The bin/nexus script now correctly recognizes and applies the run_as_user setting described in our run as a service documentation.

NEXUS-46168

Adjusted the Reconciliation task so that it can restore missing properties files in cloud blob stores with date-based layout enabled and volume/chapter folder structure.

NEXUS-46008

Restored missing log line fields and daily rotation of the request.log.

NEXUS-46087

Improved upload performance by preventing excessive asynchronous event queuing, which eliminates latency spikes and ensures background processing remains efficient.

NEXUS-46004

Improved npm audit security with Firewall integration.

NEXUS-45997

Fixed a NullPointerException that impacted some Helm proxy repositories on Nexus Repository version 3.77.0.

NEXUS-45925

The tarball download URLs in npm group repository metadata now matches those returned by npm proxy repositories as expected.

NEXUS-45855

Made changes to prevent heavy loads from causing browse node event handling to time out.

NEXUS-45773

Ensured correct migration of privileges and roles from Nexus Repository 2 to 3 by aligning privilege names and IDs.

NEXUS-45729

Maven metadata GET requests to a group repository are no longer much slower than direct requests to member repositories.

NEXUS-45673

Corrected P2 proxy repository functionality to allow proxying JAR files that do not have a MANIFEST entry as the first or second JAR entry.

NEXUS-45639

Fixed an error preventing blobstore loading during the Repair - Recalulcate blob store storage task by correcting a method name case mismatch.

NEXUS-45432

Corrected download URLs in npm package metadata for non-scoped, version-specific requests.

NEXUS-45364

Enabled configuration of the Apache Velocity parser pool size to prevent resource exhaustion during high-volume PyPi component index requests.

NEXUS-45139

Corrected repository root URL HEAD request responses to comply with HTTP/1.1 specifications, ensuring they now return the same status as GET requests.

NEXUS-44544

Improved component search results by displaying an empty field instead of the Unix epoch date when the last updated value is null.

NEXUS-44016

Corrected npm latest tag resolution to prevent canary versions from being selected when the true latest version is removed.

NEXUS-44007

Resolved Java XML bind warning messages that occurred in some instances when starting Nexus Repository with Java 17.

NEXUS-43115

Expanded documentation on installing Sonatype Nexus Repository using the OpenShift operator.

NEXUS-40991

Ensured consistent favicon display across all static and dynamic pages in Nexus Repository.

NEXUS-34688

Prevented unnecessary load on IQ Server by ensuring the IQ: Audit and Quarantine capability is only configurable for supported repository formats.

NEXUS-30693

Improved logging for the Repair - Reconcile component database from blob store task to include the settings used during execution.