Skip to main content

Sonatype Nexus Repository 3.82.0 Release Notes

Released July 9, 2025

What's New and Noteworthy in This Release?

Sonatype Nexus Repository 3.82.0 includes the following new features and enhancements:

New Capabilities API

Sonatype Nexus Repository now provides a new Capabilities API, giving administrators more flexibility and control when managing system-level features through automation.

With this API, you can programmatically view, create, update, and delete Capabilities in your Nexus Repository instance. This allows for faster setup, consistent configuration across environments, and easier integration into infrastructure-as-code workflows. This improves efficiency and reduces the risk of manual errors in administrative tasks.

For full details, see the Capabilities API help documentation.

Quarantine Message Behavior Restored and Improved

Sonatype previously noted a regression in Nexus Repository 3.81.x that prevented quarantine messages from being returned as expected when a component was blocked by Sonatype Repository Firewall. Updates in this release restore expected quarantine message behavior and introduce enhancements to improve clarity for users and automation.

Those using npm and NuGet formats will now see clearer quarantine messages directly in their CLI output when a component is blocked by Repository Firewall. These messages include the reason for the quarantine, helping developers quickly understand and address policy violations without additional troubleshooting.

Bug Fixes

This release includes the following notable bug fixes:

Issue ID

Description

NEXUS-47645

The Blob Store undelete process now handles self-referencing properties files without triggering a stack overflow. This prevents unexpected shutdowns of the GCP connection pool and eliminates the need for a restart.

NEXUS-47455

The UI: Settings capability now correctly updates the page title as configured.

NEXUS-47234

The /search/assets API now correctly supports the maven.baseVersion parameter in HA mode.

NEXUS-47027

The package-ids endpoint for NuGet v2 repositories now returns a maximum of 30 package IDs as a JSON array, aligning with the NuGet tab-completion API specification. This prevents excessive memory usage and improves performance when clients like MSBuild query the endpoint with empty or broad parameters.

NEXUS-47013

The npm audit bulk endpoint now accepts requests from users with read-only permissions, eliminating the need for view-add privileges. This ensures that audit operations work as expected for read-access users, including anonymous users if authentication is not required.

NEXUS-29739

The Browse UI for NuGet v3 group repositories now displays the correct path and generates working download links. Requests with or without the index segment are normalized, preventing 404 errors when accessing assets like index.json.