Sonatype Nexus Repository 3.87.0 - 3.87.2 Release Notes

NEXUS-49171

APT repository metadata is now properly updated in both the source and target hosted repositories after performing a component move via the REST API.

NEXUS-48894

Docker pull requests against repositories with Repository Firewall enabled no longer fail due to a missing base URL; the system now derives it from the inbound request instead of requiring manual configuration.

NEXUS-48777

Docker login requests now succeed for users with access to at least one Docker repository, even when path-based routing is enabled.

NEXUS-48729

Deleting an individual npm metadata asset from the Browse page now correctly updates the UI without falsely indicating that the entire package directory has been removed.

NEXUS-48561

The proprietary component synchronization process now excludes orphaned Maven components without assets, preventing unintended quarantining of valid open source components.

NEXUS-48463

Routing rules now apply correctly to Huggingface proxy repositories.

NEXUS-48330

Nexus Repository now correctly caches and reuses remote ETags for npm package root requests when PCCS is enabled.

NEXUS-48259

Nexus Repository now consistently serves PyPI package metadata for proxy repositories protected by PCCS, regardless of whether the request URL includes a trailing slash.

NEXUS-48000

APT hosted repositories now generate Filename fields in metadata without a leading slash.

NEXUS-47603

Scoped npm packages in hosted repositories now appear with their full names (including the scope prefix) in search results.

NEXUS-47551

Outbound requests for scoped npm packages now correctly encode slashes, ensuring compatibility with strict registries and restoring support for scoped package installs in environments that require encoded URLs.

NEXUS-47148

Added validation for Composer package distribution types to prevent errors when processing certain upstream package metadata.

NEXUS-45796

Tag association requests in Sonatype Nexus Repository no longer return 404 errors immediately after uploading a component.

NEXUS-42101

Ensured that group-level maven-metadata.xml files are updated correctly when a version is deleted from a member repository.

NEXUS-36481

Docker group repository searches now handle invalid responses from member proxy repositories more gracefully.

NEXUS-27439

Anonymous access settings for Docker repositories in Sonatype Nexus Repository now correctly respect per-repository configurations, ensuring global anonymous permissions no longer override repository-level restrictions.

NEXUS-49753

Repository permission checks now defer evaluation of content selectors using the path variable to the asset level, restoring search and tag operations that failed after upgrading to 3.86.0 - 3.86.2.

NEXUS-49653

Authenticated users who navigate to the /saml endpoint are now automatically redirected to the application home page.

NEXUS-48888

Search queries containing slashes (/) now correctly encode the character, preventing 404 errors.

NEXUS-48889

Search queries using double quotes for exact matches now return correct results in High Availability (HA) Sonatype Nexus Repository deployments, aligning behavior with documented expectations.

NEXUS-48542 & NEXUS-48540

New login experience properly handles deep links. Users who log in with a username and password are now correctly redirected to their intended destination after authentication.

NEXUS-48410

The Blob Stores UI now displays Used Size instead of Total Size to more accurately reflect current storage usage and reduce confusion for administrators.

NEXUS-47018

Anonymous users with only nx-search-read and nx-repository-view-*-*-browse privileges can now successfully perform search operations as expected.

NEXUS-46707

The licensing UI now displays a more accurate message when updating a license, clarifying that a restart is only required if installing a license for the first time.

NEXUS-44162

The Blob Store and Repositories pages now display a "Calculating..." message while metrics are still being processed after a database migration.

NEXUS-43689

Creating LDAP server connections via the Swagger UI now works as expected.

NEXUS-27044

Enhanced LDAP logging to include full exception details and complete query information.

NEXUS-25658

Users only need edit and read privileges for a specific repository to access the Invalidate Cache button.

NEXUS-49200

You can no longer accidentally create blob stores with invalid names via the API.

NEXUS-49091

Cleanup policies now properly delete components when using the H2 database.

NEXUS-49031

Corrupted or unreadable blob properties files are now automatically deleted across all supported blob stores, allowing recovery tasks to proceed and preventing component download failures.

NEXUS-48143

Improved error handling in file and S3 blob stores now suppresses misleading warnings when simultaneous requests temporarily fail to update blob property files.

NEXUS-48087

Repository deletions now complete successfully even when group cleanup operations encounter issues; affected groups are logged for review.

NEXUS-47545

Failures during S3 blob store creation are now logged at the error level with full exception details, making it easier to diagnose issues without requiring debug-level logging.

NEXUS-49043

Improved performance of the Users page by optimizing role mapping queries to prevent timeouts in environments with a large number of user roles.

NEXUS-49032

Support zip generation no longer logs serialization errors or truncates logs when SAML is configured.

NEXUS-48160

Task-specific log files are now preserved when deploying via Helm charts, improving troubleshooting by maintaining separate logs per task type while still supporting the combined allTasks.log output for Kubernetes environments.

NEXUS-47926

Improved the asset export task to gracefully handle missing blobs by skipping over them and logging warnings, allowing the export to complete successfully even if some blobs are unavailable.

NEXUS-47826

Improved reliability of the rolling upgrade process by preventing timeouts during schema changes from leaving the system in a failed or partially upgraded state.

NEXUS-42345

Added a global configuration option to control URL escaping behavior for proxy repositories. Details are included in the Configuring the Runtime Environment help documentation.

NEXUS-40172

The nodeHeartbeatExport.json file is now compressed as a ZIP archive, significantly reducing its size and making it easier to manage during support zip generation and HA troubleshooting.

NEXUS-21637

Improved support zip generation to prevent duplicate file path errors.

NEXUS-49379

Ensured the default-features value in Cargo manifests defaults to true and updated attribute names to align with Cargo documentation.

NEXUS-49154

Refactored schema management to ensure all database changes are handled through Flyway migrations, preventing startup delays and outages caused by schema modifications under load.

NEXUS-49120

Sonatype Nexus Repository no longer includes commons-lang 2.x as a dependency; all usage has been migrated to commons-lang3.

NEXUS-48505

Corrected the Components API response to include the appropriate blob store name instead of returning null.

NEXUS-47905

The archetype-catalog.xml file is now automatically updated after deploying new SNAPSHOT base versions of Maven archetypes, eliminating the need to manually delete the file to reflect recent changes.

NEXUS-36020

REST API updates to Maven repositories now validate deployment policy values correctly.

NEXUS-25475

Updated the REST API to accept writePolicy values regardless of letter casing, preventing repository misconfiguration and ensuring Docker pushes to group repositories work as expected.

NEXUS-46449

Tag association and disassociation with components are now recorded in the audit log.