Sonatype Nexus Repository 3.92.0 - 3.92.3 Release Notes

You can now preview a redesigned user experience in Sonatype Nexus Repository using a Switch to Nexus One UI toggle. This update introduces a more streamlined interface built to reduce clicks, improve navigation, and make repository search and browsing more intuitive. The new design aligns Nexus Repository with Sonatype’s other solutions, creating a more consistent experience across the Sonatype platform while lowering training overhead and cognitive load for users.

To access the preview, an administrator must first enable the feature under Settings > System > Nexus One UI. Some areas are still under development and will appear as Coming Soon, including Users, Roles, Privileges, Upgrade, and Licensing. You can also provide feedback directly within the UI to help guide ongoing improvements as we continue to expand coverage and accelerate feature delivery.

Sonatype Nexus Repository now supports Pub repositories, enabling you to manage Dart and Flutter packages directly within your repository manager. With support for proxy, hosted, and group repositories, you can centralize access to public packages from pub.dev, publish internal packages with versioned metadata and checksums, and aggregate multiple repositories into a single endpoint. This integration helps improve control over package consumption and distribution while reducing reliance on external sources.

For full details, see the Pub repositories help documentation.

Sonatype Nexus Repository now includes hosted and group repository support for Conda, providing a complete solution for managing Python and data science packages.

With hosted repositories, you can publish proprietary Conda packages with full version control and automatically generated metadata. Group repositories allow you to combine proxy, hosted, and other group repositories into a single endpoint, simplifying client configuration and enabling unified package resolution. These enhancements make it easier to manage Conda ecosystems at scale while improving consistency and efficiency across development workflows.

For full details, see the Conda repositories help documentation.

Sonatype Nexus Repository now supports Helm group repositories, allowing you to expose multiple Helm repositories through a single URL. By combining proxy, hosted, and other group repositories into one endpoint, you can simplify dependency management and reduce the need for complex client-side configuration.

For dull details, see the Helm repositories help documentation.

The Sonatype Nexus Repository Instance Migrator now supports migrating Swift, Terraform, and Conda hosted repositories, making it easier to move modern package ecosystems between instances. This enhancement helps you migrate critical artifacts and repository configurations with greater confidence, reducing manual effort and minimizing disruption during upgrades, consolidations, or infrastructure changes.

The migrator focuses on transferring essential package assets, such as Swift package archives and manifests, Terraform provider and module packages (including associated checksum and signature files), and Conda package binaries across supported architectures. Automatically generated metadata is excluded during migration and regenerated on the target instance, helping ensure consistency and integrity without unnecessary data transfer. This approach streamlines migrations while preserving repository structure and expected package behavior.

For setup and technical details, see the Instance Migrator help documentation.

Sonatype Nexus Repository now exposes HikariCP database connection pool metrics through the Service Metrics Data API, providing deeper insight into system health and database utilization. You can track active, idle, total, and pending connections across connection pools, helping you better understand real-time demand and identify potential bottlenecks.

With this added visibility, you can make more informed decisions about connection pool sizing and quickly troubleshoot performance issues without relying on external monitoring. Note that this API does not appear in the in-product Swagger; instead, check out our Service Metrics Data API help documentation for details.

Sonatype Nexus Repository now enables SSRF protection by default for new installations, helping you secure outbound connections and reduce exposure to malicious requests without requiring additional setup. Existing installations are not impacted by this change, avoiding unintended service disruption. You can review your configuration, add trusted internal endpoints to an allowlist, and enable protection when ready.

This release also introduces a new administrative API to manage SSRF protection settings, giving you more flexible and centralized control over enablement and configuration. For full details, see the help documentation on securing Nexus Repository.

The Usage Insights dashboard now retains daily storage metrics indefinitely, giving you a complete and uninterrupted view of storage trends over time. By aligning storage retention with the existing egress metrics model, this update eliminates gaps in historical data and provides more reliable long-term visibility.

With continuous access to storage usage history, you can better analyze growth patterns, support capacity planning, and make more informed decisions about repository management without losing critical historical context.

Sonatype Repository Firewall now supports webhooks, providing real-time notifications when components are blocked or quarantined due to policy violations. This allows you to integrate Firewall events with external systems for faster incident response, alerting, and automation.

Webhook payloads include key details such as policy violations, threat levels, and component identifiers, helping you quickly understand and act on security events. Notifications also distinguish between new quarantines and repeated access attempts, giving you clear and actionable insight into Firewall activity.

For full details, see the Firewall Webhooks help documentation.

Sonatype Repository Firewall now supports Bulk Waivers, allowing you to waive multiple policy violations at one time while applying consistent scope, expiration, and context. This reduces manual effort and helps prevent inconsistencies when managing quarantined components across repositories.

Bulk Waivers are available directly from Repository Results or Component Details, making it easier to take action where quarantine status is visible. Built-in safeguards for unknown or unclaimed components help maintain control, while a complete audit trail ensures traceability for all actions.

For full details, see the Firewall Bulk Waivers and Bulk Waivers API help documentation.