Download and Compatibility

View the Release Notes for a description of the latest features and improvements.  If you have not received a license key, contact your Sales Executive directly, or send an email to sales@sonatype.com.

Download Our Latest Releases

Sonatype ApplicationLatest VersionDownload

Sonatype IQ Server & CLI

167

nexus-iq-server-latest.tar.gz (ASC, SHA1)

nexus-iq-server-latest.zip ( ASC , SHA1)

The command-line scanner (CLI) is included in the bundle.

Upgrading from version 151 and below to any version 152 and above can take substantially longer. This is due to the schema expansion introduced for enhanced product experience.

More information is available in the Integration space under Cloud Deployments.

CLI

167
PlatformLinkNotes
Cross-platform
(Java)		nexus-iq-cli-latest.jar (ASC, SHA1)Requires the Java Virtual Machine
Windows

nexus-iq-cli-1.167.0-01+683-windows.zip (ASC, SHA1)

Requires the Visual C++ Runtime. This is included in the zip, or it can be installed from Microsoft (direct link) in which case it will be kept updated by Windows Update.
Mac OSX

nexus-iq-cli-1.167.0-01+683-mac.pkg (ASC, SHA1)

Alternative install: Homebrew

Delivered as a Mac pkg installer, the executable will be installed in the /usr/local/bin directory.

Tested on:

  • M1 chip
  • Intel chip

Linux

nexus-iq-cli-1.167.0-01+683-unix.zip (ASC, SHA1)

Alternative install: Deb and RPM

Tested on:

  • Centos 7.1+
  • RHEL 7.3+
  • Debian 8+
  • Ubuntu 14.04+

Sonatype Repository Firewall


Review our Sonatype Repository Firewall documentation

Sonatype Nexus Repository

3.0 or greaterFound in the repository help documentation at Download Sonatype Nexus Repository

Sonatype Repository Firewall for Artifactory

2.4.8

nexus-iq-artifactory-plugin-2.4.8.zip (ASC, SHA1)

Updating from 1.* to 2.0 requires IQ 119 and data migration.
Review 1.x to 2.0 Migration in the help documentation for more information.

The release notes are available in the Repository Firewall for Artifactory plugin documentation

CI Integration



Maven

2.47.5

This plugin is automatically downloaded when invoked through Maven

The release notes are found in the help documentation

Bamboo

2.38.0

nexus-iq-bamboo-plugin-2.38.0-01.obr (ASC, SHA1)

The release notes are available on the Atlassian Marketplace

Jenkins

3.x

Installation details are found in the Sonatype Platform Plugin for Jenkins documentation.

The release notes are available on the Jenkins Update Center 

Temporary Distribution Issue with Plugin

Sonatype is actively working to resolve a distribution issue for the nexus-jenkins-plugin. This is a temporary distribution issue on jenkins.io and could affect automatic upgrades of the plugin. It does not affect the existing installations or functionalities of the plugin.

Latest version of the plugin is available for download here nexus-jenkins-plugin-3.17.518

Hudson/Jenkins 1

2.21.5

This plugin is deprecated and is no longer receiving updates. We suggest that you install the Jenkins 3.x plugin and migrate your jobs between plugins; however, note there is no automated process to migrate.

[DEPRECATED] Sonatype IQ for Hudson/Jenkins 1.x

nexus-iq-jenkins-plugin-2.21.5-01.hpi (ASC, SHA1)

Azure DevOps

1.7.6The installation instructions and release notes are available on the Visual Studio Marketplace

IDE Integration



Eclipse

3.1.0

The release notes are available on the Eclipse Marketplace

Eclipse Update Site: https://download.sonatype.com/clm/eclipse/releases

The update site is not directly browsable, enter it into the list of update sites in Eclipse under "Help -> Preferences -> Install/Update -> Available Software Update Sites.

Eclipse Plugin Zip: com.sonatype.clm.ide.eclipse.site-3.1.0.20230526-2126.zip (ASC, SHA1)

The plugin zip can be installed into Eclipse by using "Help -> Install New Software -> Add... -> Archive...".

  • IBM Rational Application Developer (RAD) is not tested but should work.
  • The plugin requires Eclipse 4.13 and greater, RAD versions based on Eclipse older than this may not work.

IDEA

4.10.0

The release notes are available on the JetBrains Marketplace

Latest Sonatype Lifecycle Plugin for IDEA Zip: nexus-iq-idea-plugin-4.10.0-01.zip (ASC, SHA1)

Visual Studio

1.3.0

The "Sonatype Lifecycle Plugin for Visual Studio" extension is installable from within Visual Studio using the Extensions and Updates dialog box.

The release notes are available on the Visual Studio Marketplace

Reporting



Sonatype Lifecycle Plugin for Jira

1.9.1

Review the help documentation for installation instructions

The release notes are available on the Atlassian Marketplace

SonarQube


This plugin is deprecated and is no longer receiving updates. A historical version that is only compatible with the 6.x branch of SonarQube is available as sonatype-clm-sonarqube-1.2.0-02.jar (ASC, SHA1).

Compatibility of Sonatype Lifecycle Integrations

Sonatype encourages using an IQ Server release no older than six months. If you are using an older version of Sonatype IQ Server, or any of the associated integrations, and wish to upgrade to the latest version, contact our Support Team.

IQ Server works with Java 17, if the --add-opens java.base/java.lang=ALL-UNNAMED VM parameter is added at runtime.

Compatibility of IQ Server with versions of our associated integrations are:

Sonatype Nexus Repository 2 compatibility with IQ Server

Nexus Repository 2IQ ServerCompatibility
2.12 and higherAll versions

Sonatype Nexus Repository 3 compatibility with IQ Server

Nexus Repository 3IQ ServerCompatibility
3.30 and higher106 and higher

3.6 through 3.29.2*1.35 and higher

3.5**1.33 and higher


*Nexus Repository 3.8 is the first version that fully supports Repository Firewall with High Availability Clustering (HA-C).

**Nexus Repository 3.5 is the first version that has Repository Firewall properly supported for all repository formats (including NuGet). Previous versions have known issues and are not listed on this page.


Sonatype Lifecycle for Nexus Repository Pro

Sonatype Lifecycle for Nexus Repository Pro does not require the installation of any specialized components. However, the Lifecycle capabilities do require a user to have a modern browser.

For information on Sonatype Nexus Repository requirements:

Sonatype Lifecycle CLI

Java 11 is supported as of release 89.  Use Java 8 for earlier versions. 

Lifecycle CLI also works with Java 17, if the --add-opens java.base/java.lang=ALL-UNNAMED VM parameter is added.

Sonatype Lifecycle for Bamboo

Sonatype Lifecycle for Bamboo VersionIQ Server VersionBamboo VersionJava Runtime
2.0 and higher70 and higher6.8 through 9.0JDK 8, JDK 11 (starting with Bamboo 8)
1.14 through 2.070 and higher

5.10 through 7.2

JDK 8
1.1369 and higher

5.10 through 7.2

JDK 8
1.9 through 1.12.1 50 and higher

5.10 through 7.2

JDK 8
1.81.45 and higher

5.10 through 7.2

JDK 8
1.1 through 1.7All versions

5.10 through 7.2

JDK 8

Sonatype Platform Plugin for Jenkins

Required Jenkins plugins:

  • Pipeline: Step API 2.22 or newer
  • Credentials 2.3.14.1 or newer
  • Plain Credentials 1.3 or newer
  • Structs 1.20 or newer

For plugin 3.16.449.v50228c7ca_222 version and higher:

  • Pipeline: API 2.41 or newer

Updated to the required plugins may require newer versions of Jenkins.  Review the Jenkins plugin release notes before upgrading.

Jenkins Plugin VersionIQ Server VersionJenkinsJava Runtime
3.16.497 and higher144 and higher2.303.3 (LTS) or higherJDK 8, 11, 17
3.16.444 through 3.16.491144 and higher

2.303.3 (LTS) or higher

JDK 8, 11
3.6.20190722-122200.83d1447 through 3.15.43869 and higher

2.249.1 (LTS) or higher

JDK 8, 11
3.3.20180830-142202.6bdf614 through 3.5.20190425-152158.c63841b50 and higher

2.249.1 (LTS) or higher

JDK 8, 11
3.0.20180425-130011.728733c through 3.3.20180801-112343.4970c8a47 and 48

2.249.1 (LTS) or higher

JDK 8, 11
1.1 through 3.0.20180214-134325.e13590026 - 46

2.249.1 (LTS) or higher

JDK 8

Hudson/Jenkins 1 Plugin

This plugin is deprecated and is no longer receiving updates.  Install the Jenkins 3.x plugin and migrate your jobs between plugins.

IQ Azure DevOps Extension

The organization ID parameter requires at least version 1.5.0 of the plugin and IQ Server 143 or higher

IQ Azure DevOps Extension VersionIQ Server VersionSupported EnvironmentJava Runtime
1.2.0 and higher66 and higherAzure DevOps Services (hosted)
Azure DevOps Server 2019		JDK 8, JDK 11
1.0.0 through 1.1.066 and higherAzure DevOps Services (hosted)JDK 8, JDK 11

Sonatype Lifecycle for Eclipse

The Eclipse plugin will use the system browser. The recommended browsers are Chrome, Firefox, or Microsoft Edge.

For Linux environment, the libwebkit that matches the Eclipse GTK version is required (e.g. libwebkitgtk-3.0-0).

Sonatype Lifecycle for Eclipse VersionIQ Server VersionEclipse VersionM2e VersionJava Runtime
2.8 and higher66 and higher4.13 (2019-09) - 4.24 (2022-06)

1.13 through 1.18

JDK 8+

Sonatype CLM for Maven Plugin 

Sonatype CLM for Maven requires Maven 3.3.1 or newer in order to run with Java 16 or newer.

The organization ID parameter requires at least version 2.33.0 of the plugin and IQ Server 143 or higher

Plugin VersionIQ Server VersionMaven VersionJava Runtime
2.32.0 and higher69 and higher3.2.3 through 3.9.1JDK 8+
2.13.0 through 2.31.069 and higher

2.1 through 3.6.3

JDK 8+
2.9.x through 2.12.150 and higher

2.1 through 3.6.3

JDK 7, JDK 8
2.8.145 and higher

2.1 through 3.6.3

JDK 7, JDK 8
2.3 through 2.8All versions

2.1 through 3.6.3

JDK 7, JDK 8

SonarQube Plugin compatibility with IQ Server

This plugin is deprecated and is no longer receiving updates.

Sonatype Lifecycle for IDEA

Plugin VersionDevelopment EnvironmentVersionIQ Server VersionJava Runtime
4.4 or laterIDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community		2022.1 or higher129 or higherJBRSDK 11, JBRSDK 17
4.2 - 4.3IDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community		2021.2 through 2021.3.x129 or higherJBRSDK 11
4.1IDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community		2020.3 through 2021.3.x

129 or higher

JBRSDK 11
4.0IDEA Ultimate, IDEA Community, WebStorm2020.3 through 2021.3.x

67 or higher

JBRSDK 11
3.xIDEA Ultimate, IDEA Community, WebStorm2020.2.x67 or higherOracle JDK 8, JBRSDK 8, JBRSDK 11
2.xIDEA Ultimate, IDEA Community2016.2 through 2020.1.x67 or higherOracle JDK 8, JBRSDK 8, JBRSDK 11
1.xIDEA Ultimate, IDEA Community14.1.x through 15.0.366 or higherOracle JDK 8, JBRSDK 8

Sonatype Lifecycle for Visual Studio

Plugin VersionIQ Server VersionVisual StudioMicrosoft .NET
1.0 and higher32 and higher

Community 2015-2019

Professional 2015-2019

Enterprise 2015-2019

4.5 or higher

Firewall for Artifactory

Firewall for Artifactory Plugin VersionIQ Server VersionArtifactory Version
2.2 and higher

119 and higher

Tested on multi-node clusters

Tested on JFrog Artifactory Enterprise 7.2.6

Sonatype Lifecycle for Jira

Plugin VersionIQ Server VersionJira Version
1.x

98 and higher

  • Compatible with Jira Server and Jira Data Center.
  • For more details check the plugin's Atlassian Marketplace listing.

NOTE: To create notifications for Jira Cloud, see Configure Notifications through Jira Cloud.

Sonatype Lifecycle for SCM

Minimum Sonatype IQ Server versions:

Feature \ SCMAzure DevOpsBitbucket CloudBitbucket ServerGitHubGitLab
Automated  Commit FeedbackIQ 122IQ 90IQ 90IQ 67IQ 71
Automated Pull RequestsIQ 122IQ 90IQ 90IQ 79IQ 97
Pull Request CommentingIQ 122
IQ 95IQ 88IQ 98
Pull Request Line Commenting

IQ 95IQ 95IQ 99
Bitbucket Code InsightsN/A
IQ 95N/AN/A

Sonatype Lifecycle Fortify SSC Integration

Sonatype Lifecycle Fortify SSC IntegrationIQ Server VersionFortify Software Security Center
1.0 and higher

98 and higher

Find the complete list of supported versions on the Microfocus Marketplace.