Download and Compatibility
View the Release Notes for a description of the latest features and improvements. If you have not received a license key, please contact your Sales Executive directly, or send an email to sales@sonatype.com.
Download Our Latest Releases
| Sonatype Application | Latest Version | Download | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Sonatype IQ Server & CLI | 161 | nexus-iq-server-latest.tar.gz (ASC, SHA1) nexus-iq-server-latest.zip ( ASC , SHA1) The command-line scanner (CLI) is included in the bundle. Upgrading from version 151 and below to any version 152 and above can take substantially longer. This is due to the schema expansion introduced for enhanced product experience. More information is available in the Integration space under Cloud Deployments. | |||||||||||||||
CLI | 161 |
| |||||||||||||||
Sonatype Repository Firewall | Please review our Sonatype Repository Firewall documentation | ||||||||||||||||
Sonatype Nexus Repository | 3.0 or greater | Please see Download Sonatype Nexus Repository | |||||||||||||||
Sonatype Repository Firewall for Artifactory | 2.4.5 | nexus-iq-artifactory-plugin-2.4.5.zip (ASC, SHA1) Updating from 1.* to 2.0 requires IQ 119 and data migration. Please see 1.x to 2.0 Migration in the help docs for more information. | |||||||||||||||
CI Integrations | |||||||||||||||||
Maven | 2.46.0 | This plugin is automatically downloaded when invoked. | |||||||||||||||
Bamboo | 2.32.0 | nexus-iq-bamboo-plugin-2.32.0-01.obr (ASC, SHA1) The Sonatype IQ for Bamboo plugin is available through the Atlassian Marketplace. Requires IQ Server Version v70 and higher | |||||||||||||||
Jenkins | 3.x | Available to update through the Jenkins Update Center Version 3.6x and higher requires IQ Server Version v69 and higher Please see this page for installation notes and alternative methods: Sonatype Platform Plugin for Jenkins | |||||||||||||||
Hudson/Jenkins 1 | 2.21.5 | This plugin is deprecated and is no longer receiving updates. We suggest that you install the Jenkins 3.x plugin and migrate your jobs between plugins; however, note there is no automated process to migrate. | |||||||||||||||
Azure DevOps | 1.7.0 | Available to update through the Visual Studio Marketplace. | |||||||||||||||
IDE Integrations | |||||||||||||||||
Eclipse | 3.1.0 | The Sonatype Lifecycle Plugin for Eclipse is available for download on the Eclipse marketplace. Eclipse Plugin Zip: com.sonatype.clm.ide.eclipse.site-3.1.0.20230526-2126.zip (ASC, SHA1) Eclipse Update Site: https://download.sonatype.com/clm/eclipse/releases The update site above is not directly browsable, enter it into the list of update sites in Eclipse under "Help -> Preferences -> Install/Update -> Available Software Update Sites. The plugin zip can be installed into Eclipse by using "Help -> Install New Software -> Add... -> Archive...". IBM Rational Application Developer (RAD) is not tested but should work. Note that the plugin requires Eclipse 4.13 and greater, RAD versions based on Eclipse older than this might not work. | |||||||||||||||
IDEA | 4.9.0 | Sonatype Lifecycle Plugin for IntelliJ IDEA is available for download on the JetBrains marketplace. Latest Sonatype Lifecycle Plugin for IDEA Zip: nexus-iq-idea-plugin-4.9.0-03.zip (ASC, SHA1) | |||||||||||||||
Visual Studio | 1.3.0 | The "Sonatype Lifecycle Plugin for Visual Studio" extension is installable from within Visual Studio using the Extensions and Updates dialog box. The extension may also be downloaded from the Visual Studio Marketplace. | |||||||||||||||
Reporting Tools | |||||||||||||||||
Sonatype Lifecycle Plugin for Jira | 1.9.0 | The Sonatype Lifecycle Plugin for Jira is available through the Atlassian Marketplace. | |||||||||||||||
SonarQube | This plugin is deprecated and is no longer receiving updates. A historical version that is only compatible with the 6.x branch of SonarQube is available as sonatype-clm-sonarqube-1.2.0-02.jar (ASC, SHA1). |
Compatibility of Sonatype Lifecycle Integrations
Sonatype encourages the use of an IQ Server release no older than six months. If you are using an older version of Sonatype IQ Server, or any of the associated integrations, and wish to upgrade to the latest version, please contact our Support Team.
Compatibility of IQ Server with versions of our associated integrations are:
Sonatype Nexus Repository 2 compatibility with IQ Server
| Nexus Repository 2 | IQ Server | Compatibility |
|---|---|---|
| 2.12 and higher | All versions |
|
Sonatype Nexus Repository 3 compatibility with IQ Server
| Nexus Repository 3 | IQ Server | Compatibility |
|---|---|---|
| 3.30 and higher | 106 and higher |
|
| 3.6 through 3.29.2* | 1.35 and higher |
|
| 3.5** | 1.33 and higher |
|
*Nexus Repository 3.8 is the first version that fully supports Repository Firewall with High Availability Clustering (HA-C).**Nexus Repository 3.5 is the first version that has Repository Firewall properly supported for all repository formats (including NuGet). Previous versions have known issues and are not listed on this page.
Sonatype Lifecycle for Nexus Repository Pro
Sonatype Lifecycle for Nexus Repository Pro does not require the installation of any specialized components. However, the Lifecycle capabilities do require a user to have a modern browser.
For information on Sonatype Nexus Repository requirements please see either Nexus Repository 2 System Requirements or Nexus Repository 3 System Requirements.
Sonatype Lifecycle CLI
Use only Java 8 for versions before release 89. Starting with release 89, Java 11 is also supported.
The version of Java running the CLI does not affect the version of Java that can be used to compile a scanned Java application.
Sonatype Lifecycle for Bamboo
| Sonatype Lifecycle for Bamboo Version | IQ Server Version | Bamboo Version | Java Runtime |
|---|---|---|---|
| 2.0 and higher | 70 and higher | 6.8 through 9.0 | JDK 8, JDK 11 (starting with Bamboo 8) |
| 1.14 through 2.0 | 70 and higher | 5.10 through 7.2 | JDK 8 |
| 1.13 | 69 and higher | 5.10 through 7.2 | JDK 8 |
| 1.9 through 1.12.1 | 50 and higher | 5.10 through 7.2 | JDK 8 |
| 1.8 | 1.45 and higher | 5.10 through 7.2 | JDK 8 |
| 1.1 through 1.7 | All versions | 5.10 through 7.2 | JDK 8 |
Sonatype Platform Plugin for Jenkins
Review the Sonatype Platform Plugin for Jenkins changelog before upgrading the plugin.
| Jenkins Plugin Version | IQ Server Version | Jenkins | Java Runtime |
|---|---|---|---|
| 3.16.444.v52b_e5e2db_503 and higher | 144 and higher | 2.303.3 (LTS) or higher | JDK 8, 11 |
| 3.6.20190722-122200.83d1447 through 3.15.438.vf87a_0dc45166 | 69 and higher | 2.249.1 (LTS) or higher | JDK 8, 11 |
| 3.3.20180830-142202.6bdf614 through 3.5.20190425-152158.c63841b | 50 and higher | 2.249.1 (LTS) or higher | JDK 8, 11 |
| 3.0.20180425-130011.728733c through 3.3.20180801-112343.4970c8a | 47 and 48 | 2.249.1 (LTS) or higher | JDK 8, 11 |
| 1.1 through 3.0.20180214-134325.e135900 | 26 - 46 | 2.249.1 (LTS) or higher | JDK 8 |
Required Jenkins plugins:
- Pipeline: Step API 2.22 or newer
- Credentials 2.3.14.1 or newer
- Plain Credentials 1.3 or newer
- Structs 1.20 or newer
For plugin 3.16.449.v50228c7ca_222 version and higher:
- Pipeline: API 2.41 or newer
Newer versions of the above plugins, if installed, may require newer versions of Jenkins, which indirectly will increase the minimum required Jenkins version for the Sonatype Platform Plugin.
Hudson/Jenkins 1 Plugin
This plugin is deprecated and is no longer receiving updates. We suggest that you install the Jenkins 3.x plugin and migrate your jobs between plugins; however, note there is no automated process to migrate.
IQ Azure DevOps Extension
| IQ Azure DevOps Extension Version | IQ Server Version | Supported Environment | Java Runtime |
|---|---|---|---|
| 1.2.0 and higher | 66 and higher | Azure DevOps Services (hosted) Azure DevOps Server 2019 | JDK 8, JDK 11 |
| 1.0.0 through 1.1.0 | 66 and higher | Azure DevOps Services (hosted) | JDK 8, JDK 11 |
Optional Organization ID parameter
To use the optional organization ID parameter on plugin version 1.5.0 or higher, IQ Server 143 or higher is required
Sonatype Lifecycle for Eclipse
| Sonatype Lifecycle for Eclipse Version | IQ Server Version | Eclipse Version | M2e Version | Java Runtime |
|---|---|---|---|---|
| 2.8 and higher | 66 and higher | 4.13 (2019-09) - 4.24 (2022-06) | 1.13 through 1.18 | JDK 8+ |
The Eclipse plugin will use the system browser. The recommended browsers are Chrome, Firefox, or Microsoft Edge. For Linux environment, the libwebkit that matches the Eclipse GTK version is required (e.g. libwebkitgtk-3.0-0).
Sonatype CLM for Maven Plugin
| Plugin Version | IQ Server Version | Maven Version | Java Runtime |
|---|---|---|---|
| 2.32.0 and higher | 69 and higher | 3.2.3 through 3.9.1 | JDK 8+ |
| 2.13.0 through 2.31.0 | 69 and higher | 2.1 through 3.6.3 | JDK 8+ |
| 2.9.x through 2.12.1 | 50 and higher | 2.1 through 3.6.3 | JDK 7, JDK 8 |
| 2.8.1 | 45 and higher | 2.1 through 3.6.3 | JDK 7, JDK 8 |
| 2.3 through 2.8 | All versions | 2.1 through 3.6.3 | JDK 7, JDK 8 |
Java 16 or newer
Sonatype CLM for Maven requires Maven 3.3.1 or newer in order to run with Java 16 or newer.
On top of that, the following entry must be added to the .mvn/jvm.config file, located in the project's root folder. The .mvn/jvm.config file has to be created if none exists.
--add-opens java.base/java.util=ALL-UNNAMED
Optional Organization ID parameter
To use the optional organization ID parameter on plugin version 2.33.0 or higher, IQ Server 143 or higher is required
SonarQube Plugin compatibility with IQ Server
This plugin is deprecated and is no longer receiving updates.
Sonatype Lifecycle for IDEA
| Plugin Version | Development Environment | Version | IQ Server Version | Java Runtime |
|---|---|---|---|---|
| 4.4 or later | IDEA Ultimate, IDEA Community, WebStorm, PyCharm Professional, PyCharm Community | 2022.1 or higher | 129 or higher | JBRSDK 11, JBRSDK 17 |
| 4.2 - 4.3 | IDEA Ultimate, IDEA Community, WebStorm, PyCharm Professional, PyCharm Community | 2021.2 through 2021.3.x | 129 or higher | JBRSDK 11 |
| 4.1 | IDEA Ultimate, IDEA Community, WebStorm, PyCharm Professional, PyCharm Community | 2020.3 through 2021.3.x | 129 or higher | JBRSDK 11 |
| 4.0 | IDEA Ultimate, IDEA Community, WebStorm | 2020.3 through 2021.3.x | 67 or higher | JBRSDK 11 |
| 3.x | IDEA Ultimate, IDEA Community, WebStorm | 2020.2.x | 67 or higher | Oracle JDK 8, JBRSDK 8, JBRSDK 11 |
| 2.x | IDEA Ultimate, IDEA Community | 2016.2 through 2020.1.x | 67 or higher | Oracle JDK 8, JBRSDK 8, JBRSDK 11 |
| 1.x | IDEA Ultimate, IDEA Community | 14.1.x through 15.0.3 | 66 or higher | Oracle JDK 8, JBRSDK 8 |
Sonatype Lifecycle for Visual Studio
| Plugin Version | IQ Server Version | Visual Studio | Microsoft .NET |
|---|---|---|---|
| 1.0 and higher | 32 and higher | Community 2015-2019 Professional 2015-2019 Enterprise 2015-2019 | 4.5 or higher |
Seeing Sonatype Recommended Versions for remediating a policy violation requires IQ Server Release 66 or higher.
Seeing the button to automatically migrate a component version requires IQ Server Release 67 or higher.
Firewall for Artifactory
| Firewall for Artifactory Plugin Version | IQ Server Version | Artifactory Version |
|---|---|---|
| 2.2 and higher | 119 and higher Tested on multi-node clusters | Tested on JFrog Artifactory Enterprise 7.2.6 |
Sonatype Lifecycle for Jira
| Plugin Version | IQ Server Version | Jira Version |
|---|---|---|
| 1.x | 67 and higher 98 and higher for Automated Workflow Transition | Compatible with Jira Server and Jira Data Center. For more details on the Jira Server versions supported please check the plugin's Atlassian Marketplace listing. NOTE: To create notifications for Jira Cloud, see Configure Notifications through Jira Cloud. |
Sonatype Lifecycle for SCM
Minimum Sonatype IQ Server versions:
| Feature \ SCM | Azure DevOps | Bitbucket Cloud | Bitbucket Server | GitHub | GitLab |
|---|---|---|---|---|---|
| Automated Commit Feedback | IQ 122 | IQ 90 | IQ 90 | IQ 67 | IQ 71 |
| Automated Pull Requests | IQ 122 | IQ 90 | IQ 90 | IQ 79 | IQ 97 |
| Pull Request Commenting | IQ 122 | IQ 95 | IQ 88 | IQ 98 | |
| Pull Request Line Commenting | IQ 95 | IQ 95 | IQ 99 | ||
| Bitbucket Code Insights | N/A | IQ 95 | N/A | N/A |
Sonatype Lifecycle Fortify SSC Integration
| Sonatype Lifecycle Fortify SSC Integration | IQ Server Version | Fortify Software Security Center |
|---|---|---|
| 1.0 and higher | 98 and higher | To see the complete list of supported versions, check the listing on the Microfocus Marketplace. |