Skip to main content

Sonatype Nexus Repository 3.60.0 Release Notes

Released September 7, 2023

There is a known issue in Sonatype Nexus Repository 3.59.0 & 3.60.0 impacting deployments using OrientDB and configured to have LDAP and SAML users that have the exact same User ID. If you are using OrientDB and have migrated authentication from LDAP to SAML you are advised not to upgrade to Nexus Repo 3.59.0 or 3.60.0.

Highlights in This Release

Important Bug Fix

This release fixes the Repair - Reconcile component database from blob store task issue noted in the Sonatype Nexus Repository 3.59.0 Release Notes. Details are contained in the Bug Fixes table.

Improved Performance for Deployments Using Crowd PRO

This release includes refactored caching for deployments using Atlassian Crowd; this also enables caching for formats that use bearer token realms.

Support for Cocoapods Stored on Google Open Source

Sonatype Nexus Repository's Cocoapods proxy repositories can now serve Cocoapods packages from googlesource.com (Git at Google).

Improved Performance for Deployments Using Crowd

In this release, we have refactored caching for deployments using Atlassian Crowd to improve performance and avoid calls to the Crowd Server every time user information is needed. This refactoring also enables caching and improves performance for formats using bearer token realms (i.e., Conan, Docker, and npm formats). You must enable the Crowd realm for this to take effect. See our realms documentation for details on configuring realms and our Crowd help documentation for details on Crowd support.

Support for Cocoapods Stored on Google Open Source

Sonatype Nexus Repository's Cocoapods proxy repositories can now serve Cocoapods packages from goglesource.com (Git at Google). See our Cocoapods documentation for full details on using this format.

Removed Local Authorizing Realm from User Interface and API

Our realms documentation recommends that you keep our default Local Authorizing and Local Authenticating realms enabled as a best practice. Disabling these realms can cause issues and also prevent system recovery if restoration is ever necessary. The Local Authorizing realm in particular is essential to the Sonatype Nexus Repository function. To prevent administrators from accidentally deleting the Local Authorizing realm, we've removed it from the user interface and API.

Bug Fixes

Description

NEXUS-40141

Fixed the previously reported Repair - Reconcile component database from blob store task issue. The bug caused the task to soft-delete the blob .properties and .bytes files for NuGet v2 proxy and hosted repositories. It also failed to restore the desired content for RubyGems, NuGet v2 (proxy or hosted), or P2 repositories; however, there was no soft deletion associated with RubyGems or P2 repositories.

NEXUS-39918

Clarified search restrictions in high availability environments to explain that searches cannot begin with a special character followed by a wildcard. Attempts to perform such searches will now result in appropriate descriptive messaging.

NEXUS-39825

NuGet v3 search now returns the complete list of component versions even when the component name has a dot after a digit.

NEXUS-38670

Improved APT upload performance and speed.

NEXUS-37537

The lastDownloaded attribute for hosted Helm assets now updates as expected in deployments using PostgreSQL or H2.

NEXUS-37024

The Global Webhook capability with Audit Type now works as expected.