Changelog for nexus3-3.37.1.01-1.el6.1.x86_64.rpm :

* Sat Dec 18 2021 Julio González Gil - 3.37.1.01-1- Update to Nexus 3.37.1-01- Bugfixes:
* logback library update to fix a low/moderate vulnerability, as a precautionary measure. No known exploit of Nexus Repository via logback at this time.
* Fri Nov 26 2021 Julio González Gil - 3.37.0.01-1- Update to Nexus 3.37.0-01- Bugfixes:
* NEXUS-17624: YUM repomd.xml not deleted from empty level-1 hosted repository
* NEXUS-19089: large set of dirs/files under directpath/nexus-repository-docker dir
* NEXUS-21878: failing to start one docker connector on startup prevents all other not started docker connectors from starting
* NEXUS-22125: Unable to query image tags via Registry API for proxied gcr.io
* NEXUS-26970: Docker proxy repository returns 502 when remote returns 401
* NEXUS-27033: Deploy of newly tagged multiarch manifest not permitted when redeploy is disabled
* NEXUS-27631: Download of docker manifest via UI fails if there is no history in the manifest
* NEXUS-27674: Unable to download conda component that was released from quarantine
* NEXUS-27788: \"Docker - Delete incomplete uploads\" task blocks all docker uploads
* NEXUS-28717: \"Docker - Delete unused manifests and images\" task attempts to read files from the wrong Blob Store.
* NEXUS-28855: Blob store space used constraint says “in MB” but it stores in bytes
* NEXUS-28918: Search API does not sort alpha-numeric versions correctly
* NEXUS-28921: Browse page is empty after migrating to the New DB because Rebuild repository browse tree task fails to be stored due to long name
* NEXUS-29234: java.lang.NumberFormatException for S3 blob stores on upgrade
* NEXUS-29342: Yum generated temp files are not deleted
* NEXUS-29343: Intermittent MissingBlobExceptions for Concurrent Requests
* NEXUS-29380: NX3: reconcile from blob store task can generate invalid npm version entries in metadata
* NEXUS-29433: fetching identical group npm package metadata concurrently can result in uncooperative threads and increased blobstore and database load- Improvements:
* NEXUS-16580: Migrate nx2 artifact information to nx3 during migration
* NEXUS-27145: Allow rebuild maven metadata task to fix invalid blob references for maven-metadata.xml
* NEXUS-28844: option to rebuild npm package metadata per repo or package
* NEXUS-28896: improve INSERT performance into format specific browse_node tables
* New \"Repair - Rebuild npm metadata\" Task
* The \"Repair - Rebuild Maven repository metadata\" Task Fixes Invalid Blob References for maven-metadata.xml
* Retain Information About Assets Migrated from Nexus Repository Version 2 to Version 3
* Improved S3 Blob Store Performance
* Replication Support for NuGet and PyPI (PRO only)
* Improved Performance for those Migrating to Nexus Repository 3 with an External PostgreSQL Database (PRO only)
* Improved Resilient Deployment Options (PRO only)
* Tue Nov 09 2021 Julio González Gil - 3.36.0.01-1- Update to Nexus 3.36.0-01- Bugfixes:
* NEXUS-29088: Running the replication backfill blob attributes task will now process all blobs as expected.
* NEXUS-29319: This release includes a security fix for an incorrect access control. See the CVE-2021-42568 for full details.
* NEXUS-29407: This release includes a security fix for a server side request forgery vulnerability. See CVE-2021-43293 for full details.
* NEXUS-21814: Repair - Reconcile component database from blobstore may not process PyPI assets correctly
* NEXUS-27629: logging is too verbose when the submitted application id from npm audit is not found in the connected IQ server
* NEXUS-28714: Content validation does not work properly for OCI
* NEXUS-28717: \"Docker - Delete unused manifests and images\" task attempts to read files from the wrong Blob Store.
* NEXUS-28779: Use cases for name and type properties for datastores can be confusing
* NEXUS-29338: Image push after Nexus Repository upgrade not possible- Improvements:
* NEXUS-24332: Optimized How Yum Metadata is Rebuilt
* Faster Migration from Nexus Repository 2 to Nexus Repository 3
* Replication Improvement: Use Truststore Certificates for Replication Connection (PRO only)
* Improvements to Database Migration to H2 or PostgreSQL (PRO only) > Added OrientDB Health Check to Database Migration (PRO only) > NEXUS-28789: Added Nexus Repository Database Version Check PRO (PRO only)
* Documentation Improvement: New Resiliency Example Using Azure (PRO only)
* Thu Oct 14 2021 Julio González Gil - 3.35.0.02-1- Update to Nexus 3.35.0-02- Bugfixes:
* NEXUS-20284: Default content type for raw repositories is now \"text/plain\"
* NEXUS-26313: WWW-AUTHENTICATE header does not include needed scope of token
* NEXUS-26642: A removed docker asset at a remote will cause an already cached docker asset to be removed from a proxy repository when component age expires
* NEXUS-27125: npm proxy repo audit requests may trigger IllegalStateException Missing org.sonatype.nexus.repository.view.matchers.token.TokenMatcher$State while getting cached content
* NEXUS-27318: Maven - Publish Maven Indexer files task leaks inputstream
* NEXUS-27372: Delete of npm package tarball silently fails if the version isn\'t in package root metadata
* NEXUS-27628: Application id is not logged at any level when provided by npm audit command
* NEXUS-28166: Yum metadata not refreshed because of relying on \"metadata_generation_time\"
* NEXUS-28621: Nexus DB Migrator 3.33.0 fails with java.lang.StringIndexOutOfBoundsException error
* NEXUS-28805: Migrator attempts to migrate tagged components before tags have been processed resulting in NullPointerException executing step processComponentStep
* NEXUS-28842: Github npm package registry does not work with Nexus Repo 3
* NEXUS-28898: Contention rebuilding Maven hosted archetype-catalog.xml during repository 2 to 3 migration
* NEXUS-28908: Stuck RUNNABLE postgresql queries on SocketInputStream.socketRead0(Native Method)
* NEXUS-28922: Azure Blobstore creation fails with using Nexus 3.34.0-01 with PostgresDB- Improvements:
* NEXUS-16580: Migrate nx2 artifact information to nx3 during migration
* NEXUS-28686: Provide an option to not migrate repository content for repositories that are selected for migration from repo 2 to repo 3
* NEXUS-28891: Avoid building browse feature information during repository 2 to 3 migration to improve migration performance
* NEXUS-28924: Option to force the migration process to end without abort before all content is migrated
* Firewall Integration Improvement: Policy-Compliant Component Selection for npm
* Faster Imports with Hardlink Support for All Formats
* Improvements to Repository Replication (PRO only): > Replicator Now Supports Docker and npm Formats > Replicator Now Runs Continuously by Default > New Replication Administrator Role
* Updated Database Migrator for Easier Migration Between PostgreSQL and H2 Databases (PRO only)
* Conan Hosted Support for PostgreSQL and H2 Databases (PRO only)
* Sun Sep 26 2021 Julio González Gil - 3.34.1.01-1- Update to Nexus 3.34.1-01- Bugfixes:
* NEXUS-28768: To facilitate migrating from Nexus Repository 2 to Nexus Repository 3, the npm package.json author field can now accept both map and string values
* NEXUS-28815: NullPointerException at com.sonatype.nexus.migration.repository.migrators.datastore.NpmRepositoryMigrator.recordMetadata
* NEXUS-28821: org.sonatype.nexus.datastore.api.DuplicateKeyException in org.sonatype.nexus.repository.content.browse.store.BrowseNodeStore.mergeBrowseNode- Improvements:
* NEXUS-28522: change the default location for storing import task metadata
* NEXUS-28819: log in repo 3 application log the 2 to 3 migration state to make it easy to determine why migration cannot be ended gracefully
* Sun Sep 05 2021 Julio González Gil - 3.34.0.01-1- Update to Nexus 3.34.0-01- Bugfixes:
* NEXUS-27932: \"Manifest invalid\" message when running the Docker GC task.
* NEXUS-28394: Last downloaded field not properly updating when installing or downloading through R proxy
* NEXUS-28458: logged ERROR LastShutdownTimeServiceImpl \'Failed to process file - Assuming no previous start time\' on startup
* NEXUS-28620: Nexus Database Migrator fails when symlink is used for data directory or data directory not in standard location
* NEXUS-28807: Nexus-3-0 Stage-release Violations - 08/27/21 12:19 AM
* NEXUS-28808: Policy violation of com.thoughtworks.xstream : xstream: 1.4.17
* NEXUS-28853: This release includes a security fix for an HTTP header injection. See the CVE-2021-40143 advisory for full details. If you are using an earlier version, you should upgrade to this release immediately- Improvements:
* NEXUS-28266: make S3 Connection Time to Live (TTL) setting configurable to help avoid socket connect timeouts
* Repository Replication (PRO only)
* NEXUS-28780: New Formats Supported for PostgreSQL and H2 Databases (PRO only): > NEXUS-28677: CocoaPods Format support in Postgres (PRO only) > NEXUS-28678: Go Format support in Postgres (PRO only) > NEXUS-28781: Rubygems Format support in Postgres (PRO only)
* Fri Sep 03 2021 Julio González Gil - 3.33.1.01-1- Update to Nexus 3.33.1-01- Bugfixes:
* NEXUS-28081: Nexus 2 migration to Nexus 3 fails due to permissions of unsupported formats on PostgreSQL databases- Improvements:
* Updated Eclipse Jetty Version to 9.4.43.v20210629
* Changes to Cloud Resiliency Architecture Example: remove the dependency on Amazon Elastic File System (EFS). The improved example provides new YAML files to help you set up Fluent Bit and CloudWatch in order to externalize your logs. This will allow you to capture comprehensive logs even if Nexus Repository runs on separate nodes within the same day.
* Thu Aug 05 2021 Julio González Gil - 3.33.0.01-1- Update to Nexus 3.33.0-01- Bugfixes:
* NEXUS-27428: redundant download count attribute for NuGet v3
* NEXUS-28277: Fetching group npm package metadata concurrently can cause OConcurrentModificationException
* NEXUS-28362: slow request processing due to group trying to locate blobs in the wrong blobstore
* NEXUS-28381: Webhook ConnectionPoolTimeoutException: Timeout waiting for connection from pool after sending 20 requests
* NEXUS-28442: XSS injection- Improvements:
* NEXUS-28543: Conda Format support in Postgres (PRO only)
* NEXUS-28544: Git LFS Format support in Postgres (PRO only
* NEXUS-28545: R Format support in Postgres (PRO only
* NEXUS-28561: Conan Format support in Postgres (PRO only
* NEXUS-28562: npm format support in Postgres (PRO only
* Improvements to Resilient Nexus Repository Deployment Architecture
* Fri Jul 09 2021 Julio González Gil - 3.32.0.03-1- Update to Nexus 3.32.0-03- Bugfixes:
* NEXUS-27469: Using AzureBlobStore causes docker image upload failure with \'digest invalid\' error
* NEXUS-27617: Unable to configure SAML on docker image due to bug in included OpenJDK
* NEXUS-27753: The latest package version doesn\'t change in package root after component deleting
* NEXUS-28247: Docker GC Task incorrectly removing manifests and layers- Improvements:
* NEXUS-28203: Replication (Product Preview, PRO only)
* NEXUS-28205: APT Format support in PostgreSQL
* Fri Jun 25 2021 Julio González Gil - 3.31.1.01-1- Update to Nexus 3.31.1-01- Bugfixes:
* CVE-2021-34553: Information disclosure vulnerability fixed. Sonatype Nexus Repository 3 up to 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a crafted GET request) without having been granted access.
* NEXUS-28078: Docker - Delete unused manifests and images task may delete referenced layers if the database query to select components encounters limits
* Thu Jun 17 2021 Julio González Gil - 3.31.0.01-1- Update to Nexus 3.31.0-01- Bugfixes:
* NEXUS-26177: Deleting an npm repository or invalidating the cache breaks npm audit.
* NEXUS-26312: \"Last downloaded\" not updating consistently in NuGet.
* NEXUS-26358: WARN messages from SupportRestorer Can\'t find file to restore data
* NEXUS-27614: PyPI can swallow errors when the simple index is being re-written.
* NEXUS-26683: \"Remove a member from a blob store group\" task can\'t remove a blob store if one bytes file is missing
* NEXUS-26732: Race Condition in Docker format can cause assets to be mistakenly deleted.
* NEXUS-26737: Deleting manifest with Docker API does not delete all tags.
* NEXUS-26829: Copy and config links incorrect for nuget V3 proxy repos
* NEXUS-26845: HTTP error status code not logged on proxy repository automatic blocking
* NEXUS-26938: Use HEAD request to determine whether remote content has changed instead of conditional GET to avoid hitting DockerHub rate limit prematurely.
* NEXUS-26971: Incorrect results can be returned when using npm show with group repositories.
* NEXUS-27014: Cleanup policies and tasks do not fully consider Docker layers can be referenced by manifests in other repositories.
* NEXUS-27015: IllegalArgumentException on Publish Maven Index task.
* NEXUS-27130: GA maven-metadata.xml fails to refresh if a GAV is deleted via Browse\'s \"Delete Folder\" button
* NEXUS-27182: Blob paths traversal
* NEXUS-27427: Blank values for NuGet attributes.
* NEXUS-27436: npm metadata rebuild failing due to NPE.
* NEXUS-27563: S3 connection pool exhaustion when merging repomd.xml in group repositories.
* NEXUS-27564: Yum Group repomd.xml merge connection pool exhaustion causes problems.- Improvements:
* NEXUS-20252: Support Staging with PyPI format.
* NEXUS-23959: Define BlobStoreApiSoftQuota type allowableValues
* NEXUS-24311: Added hardlinks to import/export.
* NEXUS-26617: Upgrade karaf to 4.3.0
* NEXUS-26931: Added UI validation to ensure container name is all lower case alphanumeric.
* NEXUS-27597: Add ability to run `Repair - Reconcile component database from blob store` against a subset by time
* NEXUS-27683: StorageFacetCleanupTaskManager should remove & schedule task.
* NEXUS-27953: Upgrade Eclipse Jetty to 9.4.42.v20210604.
* Fri Apr 23 2021 Julio González Gil - 3.30.1.01-1- Update to Nexus 3.30.1-01- Bugfixes:
* Security fix for CVE-2021-30635 (Information Disclosure). See https://support.sonatype.com/hc/en-us/articles/1500006879561 for details.
* Security fix for CVE-2021-29159 (XSS vulnerability). See https://support.sonatype.com/hc/en-us/articles/1500005031082 for details.
* Security fix for CVE-2021-29158 (Sensitive Information Disclosure). See https://support.sonatype.com/hc/en-us/articles/1500006126462 for details.
* NEXUS-27384: Upgrade Eclipse Jetty to 9.4.40.v20210413
* NEXUS-26789: Performance improvement to rebuilding GA maven-metadata.xml
* NEXUS-26501: Package content is out of specification when downloading from NuGet hosted
* NEXUS-27013: Raw proxy is encoding slashes for outbound requests
* NEXUS-26855: Non-indexed raw proxy repositories cannot be browsed
* Fri Mar 05 2021 Julio González Gil - 3.30.0.01-1- Update to Nexus 3.30.0-01- Bugfixes:
* NEXUS-12022: Allow configuring HTTPS Maven proxy repositories with pre-emptive authentication
* NEXUS-18610: Raw proxy errors on URL encoded space and plus (+) characters
* NEXUS-19181: staging NullPointerException when moving docker assets via DockerComponentDirector.maybeCopyAssets
* NEXUS-23750: Does not support npm GitHub Package Registry
* NEXUS-24485: Docker Manifest generation is incorrect for Redeploy Disabled repositories.
* NEXUS-25148: Incremental yum rebuilds with only COMPS files are ignored
* NEXUS-25501: Logout with anonymous off fires JS error, can malform page
* NEXUS-25626: Docker redeploy on the latest tag fails when more than one tag exists for the image
* NEXUS-25733: NuGet v3 repository index.json generation
* NEXUS-25783: Browse of NuGet packages from visual studio fails if user doesn\'t have browse privileges to all group members
* NEXUS-25784: Browse request to NuGet v3 search URL in group fails completely if one of the group\'s members has DNS lookup failure
* NEXUS-25868: Podman push of new image tag fails when docker cli push succeeds for the same actions
* NEXUS-25904: The \"admin - change repository blob store\" task should not allow selection of a promoted blob store
* NEXUS-25908: nuget restore does not resolve inbound normalized package versions to unnormalized published versions using NuGet v3
* NEXUS-25924: If the remote of a NuGet v3 proxy is not reachable it breaks requests to a NuGet group
* NEXUS-25985: \"Docker - Delete unused manifests and images\" task deletes digest manifests referenced by other manifests
* NEXUS-26003: Helm proxy : difference between helm index file and real artifact url
* NEXUS-26036: wrong issuer displayed for trusted SSL certificates
* NEXUS-26093: Create proxy repository in API UI fails due to password missing from Authentication JSON
* NEXUS-26099: No way to set \"useTrustStore\" in proxy repository REST API
* NEXUS-26118: pip search does not work
*via
* NXRM PyPI proxy to NXRM PyPI repository and authentication is required
* NEXUS-26129: Promoting a nested blob store causes it to be removed entirely
* NEXUS-26132: upgrade of NXRM 2 to NXRM 3 maven assets fails due to IllegalStateException: Missing {attributes:checksum} sha256
* NEXUS-26315: Cleanup Policy List shows Error 500 after Upgrade 3.28.0 to 3.29.2
* NEXUS-26355: sha512 or sha256 hashes are processed by expensive repository content validation
* NEXUS-26379: DockerFacetUtils.findAssetByContentDigest() causes poor performance under load
* NEXUS-26453: saving the s3 blobstore config can break async tmp blob deletes by not restarting the async delete thread pool
* NEXUS-26473: Thread cooperation does not work when recovering from missing blobs in proxy repositories
* NEXUS-26483: Nexus UI causes Uncaught TypeError when the username contains \'api\' string with privilege \'nx-api-reader\'
* NEXUS-26504: Newly created compact blob store task has \"multinode=true\"
* NEXUS-26605: Rebuild metadata fails to rebuild corrupt metadata files
* NEXUS-26611: conda proxy repositories do not support inbound conditional HTTP GET HEAD
* NEXUS-26676: IllegalOperationException: Repair - Rebuild Maven repository metadata- Improvements:
* NEXUS-24446: Add Azure Blob Storage support to NXRM blob store
* NEXUS-25275: improve docker repository human readable error response messages
* NEXUS-25623: Provide a different status than Quarantined for components Pending Quarantine
* NEXUS-25909: Protect inbound HTTPS connections against Weak Diffie-Hellman Keys and Logjam by default
* NEXUS-26196: Allow enabling truststore with Repository Management REST API
* NEXUS-26319: remove reference to sonatype-public-grid from pom files
* NEXUS-26606: Upgrade Eclipse Jetty to 9.4.38.v20210224
* Fri Jan 08 2021 Julio González Gil - 3.29.2.02-1- Update to Nexus 3.29.2-02- Bugfixes:
* NEXUS-26251: Interface for Cleanup Policies erroneously interprets and persists values as seconds instead of days. If you installed 3.29.1 and modified or created a cleanup policy you must confirm that these fields have the intended values.
* Fri Dec 25 2020 Julio González Gil - 3.29.1.01-1- Update to Nexus 3.29.1-01- Bugfixes:
* NEXUS-24391: \'Destination already contains component\' error when using staging API
* NEXUS-25504: Unable to pull images from hosted docker repo after move to new blobstore
* NEXUS-25600: Repository Import Ignores Validation
* NEXUS-25611: Installing via helm proxy errors if not using official remote
* NEXUS-25801: Group repository registration API requests may fail
* NEXUS-25902: Source blob store is not logged in repository move task
* NEXUS-25903: Repository blob store set incorrectly after error in \"admin - change repository blob store\" task
* NEXUS-25936: npm audit fails with 500 response using group and anonymous
* Sat Dec 05 2020 Julio González Gil - 3.29.0.02-1- Update to Nexus 3.29.0-02- Bugfixes:
* NEXUS-16575: Raw repo url returns Error 404
* NEXUS-19840: /service/metrics/healthcheck returns 500 status code if a single healthcheck fails. It is deprecated now and scheduled for removal. It is recommended to use the alternative endpoint /service/rest/v1/status/check which has a near equivalent JSON response, except it does not return 500 status when one or more system status checks fail
* NEXUS-23733: Creating more than one file based blobstore using the same root path is not prevented
* NEXUS-23827: PACKAGES.gz cannot be updated if repository doesn\'t allow redeploy
* NEXUS-24331: deployment of rpm to a single directory causes metadata rebuild for entire repository
* NEXUS-24913: npm audit caching prevents policy updates
* NEXUS-25105: HTTP 500 response when attempting to delete LDAP user via REST API
* NEXUS-25116: Getting Metadata hashes via a Maven group returns 404 Not found
* NEXUS-25147: Rebuild metadata task leaves sha256 and sha512 files untouched for metadata files
* NEXUS-25158: HeaderPatternFilter may reject implicit Host value due to certain combinations of X-Forwarded headers
* NEXUS-25186: possible that requests abruptly terminating will not appear in request.log
* NEXUS-25291: NuGet V3 Proxy can be configured only using a specific remote in UI field
* NEXUS-25292: Bad blob file reference breaks repository export
* NEXUS-25304: Health check details can fail with NPE if IQ server is setup but disabled
* NEXUS-25357: NuGet Proxy does not work with some third-party V3 repositories
* NEXUS-25420: NXRM to NXRM Nuget v3 proxying still results in direct requests to nuget.org
* NEXUS-25464: Blob reference not updated in asset after change repository
* NEXUS-25478: Nuget V3 Group packages incorrectly sorted in page causing some installs to fail
* NEXUS-25502: yum metadata is rebuilt after downloading it which can cause build failures
* NEXUS-25510: Error Response Code 429 (Rate Limiting) does not autoblock
* NEXUS-25521: Encoded proxy URL causes startup failure
* NEXUS-25527: Crowd \"Verify connection\" button deletes all inputted values
* NEXUS-25529: Security management: Users API does not show \"externalRoles\" for Crowd
* NEXUS-25575: Password Validator Message not shown when changing your password.
* NEXUS-25604: Some newly deployed rpm files not showing up in primary.xml.gz, despite logging saying they are being added
* NEXUS-25605: Proxy repositories to github package registry can fail query requests when accessed in a group repository
* NEXUS-25609: Exception processing payloads for a single NuGet group member repository can stop all group member processing
* NEXUS-25628: yum metadata missing provides entries when multiple versions are provided by a package
* NEXUS-25650: Nexus-3-0 Develop Violations - 10/29/20 12:15 AM
* NEXUS-25775: WARN messages WebResourceServiceImpl - Overlapping resources on path /static/img/sonatype-logo-with-hexagon.png
* NEXUS-25829: CVE-2020-29436: Fixes an XXE Vulnerability
* NEXUS-25830: ClassCastException Long cannot be cast to Date for NuGet v3 registrations index
* NEXUS-25928: Nexus-3-0 Develop Violations - 11/19/20 12:14 AM- Improvements:
* NEXUS-14631: Add more attributes to REST resource for asset
* NEXUS-19021: Nothing is logged at default levels when roles are added or removed
* NEXUS-20267: only allow the most secure cipher suites and TLS protocol versions for inbound HTTPS connections by default. See also NEXUS-25786 below.
* NEXUS-25307: Protect against deletion of related blob stores while the Change Repo Blob Store task is executing
* NEXUS-23331: Add the support of helm push plugin
* NEXUS-25423: Add caching of catalog dates for npm component queries to IQ
* NEXUS-25424: Add configuration for Orient\'s \"network.binary.maxLength\"
* NEXUS-25506: change the Remote URL of the default nuget.org-proxy proxy repository to api version 3 compatible https://api.nuget.org/v3/index.json. Applies only to new installations. Upgrading will not modify any existing remote URLs, although users are encouraged to start migrating away from using NuGet V2 API URLs such as the previous default (https://www.nuget.org/api/v2/).
* NEXUS-25774: upgrade Eclipse Jetty to 9.4.33.v20201020
* NEXUS-25786: explicitly disable TLS 1.0 and 1.1 for inbound HTTPS connections by default. Only applies to Eclipse Jetty-based direct inbound HTTPS connections (no reverse proxy). You are encouraged to use the new settings, but if for some reason you still the new TLS versions or cipher suites, check https://support.sonatype.com/hc/en-us/articles/213465098
* Wed Oct 28 2020 Julio González Gil - 3.28.1.01-1- Update to Nexus 3.28.1-01- Bugfixes:
* NEXUS-25507: Fixed an issue that caused the Change repository blob store task to spawn too many threads.
* Fri Oct 02 2020 Julio González Gil - 3.28.0.01-1- Update to Nexus 3.28.0-01- Bugfixes:
* NEXUS-21107: Raw repo folders with special characters created using UI cannot be deleted
* NEXUS-23968: PyPiHostedFacet does not delete TempBlob on getIndex
* NEXUS-23977: Large docker image upload does not work well with slow inbound network
* NEXUS-24227: archetype-catalog.xml is imported by import task to a maven repository
* NEXUS-24682: Helm repositories require the packages to be relative to the index.yaml
* NEXUS-24718: Running \"docker delete unused manifests and images\" task when blob storage is not available deletes all layers
* NEXUS-24830: npm audit error with quarantined components
* NEXUS-24833: After doing \"Export assets\" task then \"Import external files\" does not preserve lastBlobUpdated (last_updated)
* NEXUS-24846: Wrong Timezone used for Apt Release file
* NEXUS-24868: Group does not export semver2 endpoints `RegistrationsBaseUrl/Versioned` when used as NuGet V3
* NEXUS-24916: SAML configuration error root causes are swallowed and not logged at default levels
* NEXUS-24918: npm audit should not fail if package.json contains a dependency that can\'t be found
* NEXUS-24998: Continuation token fails intermittently with 406 response but then eventually works.
* NEXUS-24999: query params for yum related db query not logged
* NEXUS-25036: repositories with version policy of RELEASE should avoid processing any SNAPSHOT related requests
* NEXUS-25039: Download of docker tags from hosted repository can fail with 400 response
* NEXUS-25156: Npm Audit doesn\'t fail fast when no IQ server is configured
* NEXUS-25190: Newly deployed RPM files do not always appear in yum metadata files
* NEXUS-25294: DockerFacetUtils.findAssetByContentDigest NXRM 3.0.0-M7 backwards compatibility code is non-performant under load
* NEXUS-25296: 502 error if a nuget-v3 group contains a proxy with different nuget version
* NEXUS-25340: IllegalArgumentException: Invalid range for Docker Pushes
* NEXUS-25347: org.eclipse.jetty loggers do not log messages if levels are edited
* NEXUS-25378: docker PUT and PATCH requests may write to the same blob causing docker pushes to fail due to InvalidContentException: Content type could not be determined- Improvements:
* NEXUS-24842: Slow performance pushing large images to S3 based blobstore
* NEXUS-12016: Moving repositories between blob stores (PRO only)
* NEXUS-14448: Include IQ link in Maven output when a component blocked by Firewall
* NEXUS-18283: Ability to Add Custom AWS S3 Regions to Blobstore Configuration
* NEXUS-19858: Confirmation when promoting a blob store
* NEXUS-24904: nxrm 3.26.0 introduces new ERROR level log messages from org.eclipse.jetty.util.log.StdErrLog
* NEXUS-25099: Group deployment for NPM (PRO only)
* NEXUS-25117: add configurability to how S3 temporary blobs are deleted
* NEXUS-19572: Go specific search- Other:
* NEXUS-25336: Replace Google (Guava) Supplier with Java Supplier, people consuming or implementing them will need to update those usages to java.util.function.Supplier.
* NEXUS-25209: Use DB-agnostic TempBlob where possible. Any scripts or third party plugins using org.sonatype.nexus.repository.storage.TempBlob will need to change to use of org.sonatype.nexus.repository.view.payloads.TempBlob.
* NEXUS-25162: Consolidate implementations of WritePolicy. org.sonatype.nexus.repository.storage.WritePolicy has been moved to org.sonatype.nexus.repository.config.WritePolicy. This will impact any groovy scripts using the org.sonatype.nexus.script.plugin.RepositoryApi to create repositories.
* Sat Sep 05 2020 Julio González Gil - 3.27.0.03-1- Update to Nexus 3.27.0-03- Bugfixes:
* NEXUS-24298: Yum proxy needs to be more lenient about gzip encoding
* NEXUS-24464: NuGet Signature validation goes out to https://api.nuget.org
* NEXUS-24691: OCI annotations result in errors
* NEXUS-24802: Spurious warnings logged when running reconcile task against group blob store
* NEXUS-24837: Metadata query cache age and Maximum metadata age timeouts are ignored for metadata requests
* NEXUS-24869: Moving away from the Logging page asks \"Unsaved changes\"
* NEXUS-24901: some rpms in a yum hosted repo are not added to a rebuilt hosted repo primary.xml metadata file
* NEXUS-24917: npm audit fails for packages that are not all lowercase
* NEXUS-24925: Unneeded JSESSIONID cookies returned
* NEXUS-24988: Snapshot remover deletes GAV level maven-metadata.xml files, resulting in 404 responses
* NEXUS-25019: CVE-2020-24622: S3 secret key can be exposed by admin user- Improvements:
* NEXUS-10471: Allow deployment to Docker group repositories (PRO only)
* NEXUS-21118: remove reference to deprecated Jetty socket linger time soLingerTime
* NEXUS-25098: REST API for Conda repositories
* Sun Aug 16 2020 Julio González Gil - 3.26.1.02-1- Update to Nexus 3.26.1.04-1- Bugfixes:
* NEXUS-24867: Fix an issue starting server when multiple SSL certificates are present in the configured keystore.
* Tue Aug 11 2020 Julio González Gil - 3.26.0.04-1- WARNING: Eclipse Jetty Version may Require Configuration Change On Upgrade Check https://issues.sonatype.org/browse/NEXUS-24867 for details or update straight to 3.26.1.02-1- Update to Nexus 3.26.0-04- Bugfixes:
* NEXUS-23065: `Docker - Delete incomplete uploads` task will stop if it errors reading a single asset
* NEXUS-23417: During upgrade of PyPI proxy in 3.22, browse nodes are rebuilt too quickly.
* NEXUS-24226: Prometheus metrics endpoint may be using more CPU than expected.
* NEXUS-24317: NuGet v3 proxy: index.json still available after remote changing
* NEXUS-24592: CVE-2020-15868 - Access controls bypass
* NEXUS-24601: Search API sorting doesn\'t work
* NEXUS-24619: Export filenames that are supported in windows (and import those files properly as well)
* NEXUS-24671: Audit log is not recording events even if feature is enabled- Improvements:
* NEXUS-24788: Import and Export for Docker, PyPI, Rubygems and Yum (PRO only)
* NEXUS-23928: Update /beta/repositories REST endpoints updated to /v1. Beta endpoints still work.
* NEXUS-23930: Update v1 REST endpoints for Security API. Beta endpoints still work.
* NEXUS-24416: Yum repodata metadata handles multiple level rebuild better
* NEXUS-24858: Repair - Reconcile component database from blob store task now includes NuGet format
* Fri Jul 31 2020 Julio González Gil - 3.25.1.04-1- Bugfixes:
* NEXUS-24711: Fix UI login when using custom web context paths
* Thu Jul 30 2020 Julio González Gil - 3.25.1.02-1- WARNING: A critical bug has been discovered in version 3.25.1-02, if a custom web context path is being used (e.g. \"/nexus\") UI logins will not work. This is not the case with default installations performed by this package. But if you are using a custom web context wait until NEXUS-24711 is fixed with a new release- Update to Nexus 3.25.1-02- Bugfixes:
* NEXUS-24596: CVE-2020-15871 Remote Code Execution vulnerability (https://support.sonatype.com/hc/en-us/articles/360052192693)- Improvements:
* NEXUS-24488: Avoid excessive database queries in OSSIndex integration
* NEXUS-24489: Batch requests from browse UI for OSSIndex
* NEXUS-24128: REST API delete requests for Maven components can have slow performance
* NEXUS-24112: Staging move of Maven components can be very slow due to metadata rebuilds
* NEXUS-24612: Unable to browse repository - OssIndexVulnerabilityClient Timeout
* Tue Jul 14 2020 Julio González Gil - 3.25.0.03-1- Update to Nexus 3.25.0-03- Bugfixes:
* NEXUS-20640: docker push may fail with blob upload unknown due to race condition
* NEXUS-20829: Correct the upgrade screen to state that multiple upgrades from Nexus 2.x to 3.y is not supported.
* NEXUS-23550: p2 proxy repository does not work with IQ update site
* NEXUS-23759: context missing from MavenRestoreBlobStrategy - Skipping as no maven coordinates found and is not maven metadata
* NEXUS-23830: docker anonymous pull fails with 401 when user tokens are enabled
* NEXUS-23887: LDAP connection UI looks broken, constantly prompts for password
* NEXUS-23895: Save of LDAP user and group settings fails with error.
* NEXUS-24098: Snapshot GAV metadata rebuilt incorrectly if packaging has multiple segments
* NEXUS-24124: OCI - Docker repos should respect accept headers
* NEXUS-24132: Import Attributes fail if an asset has a null componentId
* NEXUS-24194: NuGet V3 Hosted - Search prerelease flag does not work
* NEXUS-24222: Reduce likelihood of OOM when accessing NuGet feed
* NEXUS-24248: NuGet v3 proxy fails to work with HA-C
* NEXUS-24267: download of podspec.json file through proxy repo which does not exist at the remote causes NullPointerException and 500 status code
* NEXUS-24283: Repository export errantly tries to validate delta files for every asset, even in other repositories
* NEXUS-24334: NPM Audit logs error on retrieving package
* NEXUS-24355: Nuget V3 - Impossible to use hosted/group/proxy as remote for proxy
* NEXUS-24457: npm package metadata dist-tags section can be empty when merged from a group repository member group repository- Improvements:
* NEXUS-10886: NuGet v3 JSON format support
* NEXUS-10886: Iport for npm and NuGet formats (PRO only)
* NEXUS-20642: add thread id to audit log entries
* NEXUS-24256: Enforce Password Complexity Requirement
* NEXUS-24568: Cache npm audit results to improve performance
* NEXUS-23923: Email REST API out of beta
* NEXUS-24288: OSS Index Link Integration (OSS Only)
* Sat Jun 13 2020 Julio González Gil - 3.24.0.02-1- Update to Nexus 3.24.0-02- Bugfixes:
* NEXUS-17288: Image broken on logger edit
* NEXUS-19529: viewing the UI repositories list will trigger s3 blobstore metrics retrieval even if that blobstore is not used
* NEXUS-23071: /beta/repositories/{format}/group/{repositoryName} example model is wrong
* NEXUS-23082: Update embedded Java version to latest Java 8
* NEXUS-23418: rest api proxy repository httpClient authentication does not take effect
* NEXUS-23551: Yum Authenticating against RHEL servers in AWS
* NEXUS-23712: items added or removed from yum metadata files when metadata is rebuilt may not be logged
* NEXUS-23761: beta/repositories/{format}/hosted/{repositoryName} has invalid parameters in example
* NEXUS-23800: Race condition in lazy maven metadata rebuild causes build failures, slow builds
* NEXUS-23872: Unable to set repository HTTP client auth via REST
* NEXUS-23903: long running database queries for docker repositories can lead to thread and db connection pool exhaustion
* NEXUS-23980: \'USER_ROLE_MAPPING\' was not found in database \'component\' exceptions seen with docker- Improvements:
* NEXUS-23588: Repository Management API missing yum proxy
* NEXUS-23650: Allow REST API to Enable/Disable Anonymous Access
* NEXUS-23798: REST API to enable User Tokens
* NEXUS-23854: Export for Raw and Maven formats (Pro Only)
* NEXUS-23870: \"Node already has an asset\" for browse tree rebuild should not fail Transactions status check
* NEXUS-23897: Memory settings in docker image are too low
* NEXUS-23970: NuGet v3 Hosted
* NEXUS-24091: REST API for Cocoapods repositories
* NEXUS-24092: REST API for Raw repositories
* NEXUS-24093: REST API for RubyGems repositories
* Wed May 06 2020 Julio González Gil - 3.23.0.03-1- Update to Nexus 3.23.0-03- Bugfixes:
* NEXUS-23360: Docker: Infinite loop for authorization to registry.connect.redhat.com
* NEXUS-23548: Helm Chart Repository API version format incorrect
* NEXUS-20349: NuGet repository returns multiple versions as islatest=true
* NEXUS-23420: NonResolvablePackageException thrown when downloading a package through the PyPI group
* NEXUS-23398: Retrieval of some packages from PyPI fails
* NEXUS-23487: PyPI repository returns 500 error response if remote returns an invalid response.
* NEXUS-23379: Invalid content returned through proxy prevents valid content from being retreived
* NEXUS-23616: Blob Store API allows users to create a blobstore without path- Improvements:
* NEXUS-11468: Import for Raw and Maven formats (requires Pro license)
* NEXUS-16954: Nexus Intelligence via npm audit
* NEXUS-21087: (Docker) Support OCI registry format
* NEXUS-23436: Clearer anonymous panel for upgrade wizard
* Fri Apr 17 2020 Julio González Gil - 3.22.1.02-1- Update to Nexus 3.22.1-02- Bugfixes
* CVE-2020-11753: Improper access controls allowed privileged user to craft requests in such a manner that scripting tasks could be created, updated or executed without use of the user interface or REST API
* NEXUS-23281: Requesting a SNAPSHOT artifact from a RELEASE Repo returns HTTP 400
* NEXUS-23348: SAML - New UI Login SSO Button does not respect the nexus-context-path
* NEXUS-23352: Conan integration in 3.22.0 does not handle Header Only packages
* NEXUS-23359: SAML - NPE thrown if IdP metadata does not contain SingleLogoutService element
* NEXUS-23399: NuGet v3 proxy repository will not serve cached content if remote is blocked
* NEXUS-23441: Already cached NuGet v2 proxy repository content will return 502 if Component Max Age expires and the remote is not available
* NEXUS-23504: Privileged user can create, modify and execute scripting tasks
* NEXUS-23556: CVE-2020-11415: LDAP system credentials can be exposed by admin user- Improvements:
* NEXUS-23396: Admin - Cleanup repositories using their associated policies task should lazily mark maven metadata for rebuild
* Sat Mar 28 2020 Julio González Gil - 3.22.0.02-1- Update to Nexus 3.22.0-02- Bugfixes
* CVE-2020-11444: Improper access controls allowed authenticated users to craft requests in such a manner that configuration for other users in the system could be affected
* NEXUS-16159: \"Require user tokens for repository authentication\" now enforced properly
* NEXUS-19437: a blobstore in any other state than STARTED cannot be removed
* NEXUS-21011: Compact blob store task cannot hard delete blob assets when the blobstore is out of space
* NEXUS-21808: DockerTokenDecoder.dumpToken(String) method may fail to parse docker bearer tokens causing IndexOutOfBoundsException
* NEXUS-22054: \"Repair - reconcile component database from blob store\" task does not remove invalid component db references.
* NEXUS-22245: Cannot Delete NPM Scoped Folder via UI
* NEXUS-22602: Running metadata rebuild task with GA restrictions fails
* NEXUS-22666: concurrent uploads to the same maven GA may result in 500 response due to OConcurrentModificationException
* NEXUS-22669: First staging move to npm hosted repo fails with 500 error.
* NEXUS-22729: Cleanup Policy task results in removal of maven-metadata from non-timestamped snapshots
* NEXUS-22760: POST /service/extdirect/poll/rapture_State_get lists all tasks from the database
* NEXUS-22770: Change in stored Pypi proxy package paths creates duplicate assets and breaks browse node creation
* NEXUS-22802: AnonymousSettings.jsx does not respect nexus-context-path
* NEXUS-22853: Too many tasks scheduled if an upgrade requires rebuilding the browse_node table
* NEXUS-22896: performance regression in search REST API
* NEXUS-23048: Problem proxying NuGet packages hosted by GitHub Packages
* NEXUS-23072: Anonymous Access icon missing
* NEXUS-23104: Offline repositories allow UI upload
* NEXUS-23236: org.sonatype.nexus.quartz.internal.orient.JobStoreImpl is a concurrency bottleneck
* NEXUS-23272: Inability to add
* permission to user on 3.21.2- Improvements
* NEXUS-5716: add a way to configure default privileges for any signed-in users
* NEXUS-20939: SAML integration
* NEXUS-22820: Process search index updates in the background in a non-blocking fashion
* NEXUS-21910: Additional REST provisioning support for npm, NuGet and PyPI repositories
* Tue Mar 24 2020 Julio González Gil - 3.21.2.03-1- Update to Nexus 3.21.2-03- Bugfixes
* NEXUS-23205: Disabled Groovy Scripting By Default. In order to make NXRM more secure, Groovy scripting engine is now disabled by default. This affects Groovy scripts as used through the REST API and through scheduled tasks. Scripts which are present from an upgraded version will continue to be executable but their script source will not editable. For more information (including how to re-enable Groovy scripting), see https://issues.sonatype.org/browse/NEXUS-23205
* Sat Feb 29 2020 Julio Gonzalez Gil - 3.21.1.01-1- Update to Nexus 3.21.1-01- Remove a broken menu entry incorrectly appearing for some users
* Sat Feb 29 2020 Julio Gonzalez Gil - 3.21.0.05-1- Update to Nexus 3.21.0-05- Bugfixes:
* NEXUS-18186: Disabling redeploy for a private Docker repo breaks the \"latest\" tag
* NEXUS-21730: Audit log does not log all attributes for repository change events
* NEXUS-21329: \"Remove a member from a blob store group\" task processes missing files in the source blob store
* NEXUS-18905: Cleanup tasks fail with \"No search context found for id\" error
* NEXUS-13306: Usernames containing non URL safe characters cannot authenticate using the Crowd realm
* NEXUS-16009: Browse tree for NuGet proxy repositories shows packages that are not locally cached
* NEXUS-22051: PyPI group merge is not case sensitive
* NEXUS-22351: R PACKAGES file lost on upgrade to 3.20.x
* NEXUS-17477: Unable to install hosted gem which has multiple version requirements
* NEXUS-22052: Yum Metadata not rebuilt after staging deletion of rpm- Improvements:
* NEXUS-11730: Support for proxying p2 repositories. p2 is a technology for provisioning and managing Eclipse- and Equinox-based applications
* NEXUS-13325: Helm is the first application package manager running atop Kubernetes(k8s). It allows describing the application structure through convenient helm-charts and managing it with simple commands
* NEXUS-10886: NuGet V3 Proxy support gives Nexus Repository Manager users access to the up-to-date V3 API. This is the first part of a wider initiative to bring full V3 support, group and hosted will follow in future releases
* NEXUS-16251: Provide a common facility to allow RPM clients to get GPG keys to verify package signatures in remote repositories.
* NEXUS-13434: Provide npm cli ping support
* Fri Feb 28 2020 Julio Gonzalez Gil - 3.20.1.01-2- Clean up spec and fix to build all distributions at OpenBuildService- Enable building and installation for Amazon Linux >= 2- Enable building and installation for for openSUSE Tumbleweed/Factory
* Mon Jan 27 2020 Julio Gonzalez Gil - 3.20.1.01-1- Update to Nexus 3.20.1-01- Bugfixes:
* NEXUS-22249: An error may occur when starting NXRM Pro due to race condition around the license loading.
* NEXUS-22241: During the upgrade process from older releases (3.19.0 and before), NXRM may throw an exception when updating PyPI database configuration.
* Mon Jan 27 2020 Julio Gonzalez Gil - 3.20.0.04-1- License for Nexus OSS is EPL-2.0 as stated at https://blog.sonatype.com/2012/06/nexus-oss-switched-to-the-eclipse-public-license-a-clarification-and-an-observation/ and it is since 2012. Mistake inherited from the original packages from Jens Braeuer.- Update to Nexus 3.20.0-04- Bugfixes
* NEXUS-21311: Yum and CentOS 8
* NEXUS-21371: npm package metadata does not return correct status code sometimes
* NEXUS-19811: Offline and misconfigured blob store should be noted in UI
* NEXUS-21368: Proxy repository removes get-params from HTTP sources
* NEXUS-22144: Slow performance displaying content selectors in UI
* NEXUS-21306: Cannot proxy Docker repository on Bintray
* NEXUS-21315: Extremely slow processing in \"Docker - Delete unused manifests and images\" task
* NEXUS-21672: Group repo with proxy repo member to remote group repo responds 404 when remote group repo responds \"403 Requested item is quarantined\"
* NEXUS-18117: PyPI ignoring python_requires metadata
* NEXUS-20705: Index can contain absolute URLs which bypass Nexus Repository Manager
* NEXUS-21589: Repository health check can fail if the same asset exists in more than one repository
* NEXUS-14233: Support managing Realms via the REST API
* NEXUS-21138: Snapshot remover leaves maven-metadata.xml files deleted for a long time, breaking builds
* NEXUS-12488: Remote https repository with TLS client certificate loaded in NXRM JVM keystore not trusted
* NEXUS-20140: 500 Server Error shown in Chrome console when accessing Support Status page- Improvements
* NEXUS-20269: jetty-http-redirect-to-https.xml removed and its use discouraged Startup will fail if your configuration references jetty-http-redirect-to-https.xml Check https://support.sonatype.com/hc/en-us/articles/360037845633 if that is the case
* NEXUS-19424 : Ability to Clean Up by \"Never downloaded\"
* NEXUS-9837: R Format Support
* NEXUS-12456: Enhanced npm login for private repository usages
* NEXUS-13433: npm whoami support
* NEXUS-20268: HSTS enabled by default for Inbound Jetty HTTPS connectors See https://support.sonatype.com/hc/en-us/articles/360024943193
* Thu Oct 17 2019 Julio Gonzalez Gil - 3.19.1.01-1- Update to Nexus 3.19.1-01- Bugfixes
* NEXUS-21381: Prevent Docker Proxy Repository throwing null pointer exceptions and blocking some image pulls after upgrade
* Thu Oct 17 2019 Julio Gonzalez Gil - 3.19.0.01-1- Update to Nexus 3.19.0-01- Bugfixes
* NEXUS-10679: NPM repos don\'t handle HEAD requests
* NEXUS-19102: Unable to proxy private Azure (ACR) registry- Improvements
* NEXUS-19970: CocoaPods Format Support
* NEXUS-19866: Conda Format Support
* NEXUS-9862: New abilities for adding and removing \"distribution tags\" into npm metadata via the npm CLI
* NEXUS-17797: S3 peerformance improvements, support for encrypted S3 buckets, use of custom encryption keys, simplified permission testing, and essential improvements to storage space metrics
* NEXUS-19120: Added support for Docker Foreign Layers. Nexus Repository Manager users can now proxy docker images with foreign layers when pulling Microsoft Windows images.
* NEXUS-19144, NEXUS-19142, NEXUS-19143, NEXUS-19145, NEXUS-19146, NEXUS-16734: Enhanced REST API endpoints for initial provisioning and maintenance of Nexus Repository Manager
* NEXUS-20682: Go Format Data Integration
* NEXUS-19525: Multi-policy Cleanup
* Tue Aug 20 2019 Julio Gonzalez Gil - 3.18.1.01-1- Update to Nexus 3.18.1-01- Bugfixes
* NEXUS-20674: Fixed an exception occurring when a user manually logs out of the user interface.
* NEXUS-19235: Propagates the quarantine status code when NXRM proxies another NXRM with Firewall enabled.
* Mon Aug 19 2019 Julio Gonzalez Gil - 3.18.0.01-1- Update to Nexus 3.18.0-01- Bugfixes
* NEXUS-10252: \"Invalid authentication ticket\" error on password change
* NEXUS-14729: Regression: Nexus 3 returns 501, 400 and 204 responses for MKCOL requests
* NEXUS-15878: UI poll requests iterates over all privileges.
* NEXUS-19618: Expensive, error prone check done for content validation of checksums
* NEXUS-20014: browse operations can be slower than expected with many content selectors
* NEXUS-20104: OrientDB database backups default compression level and buffer size are not optimized
* NEXUS-20139: Repair - Rebuild repository search queries are not optimized, potentially impacting other search operations
* NEXUS-20360: request.log is no longer included in support zips
* NEXUS-20453: Browse operations can be very slow when using content selector permissions
* NEXUS-20479: Stored XSS Vulnerabilities (eventually public)- Improvements
* NEXUS-19954: Increase the default maximum heap and direct memory sizes
* NEXUS-20100: allow customizing compression level and buffer size of Orient database checkpoint during upgrade using system properties
* Fri Aug 16 2019 Julio Gonzalez Gil - 3.17.0.01-1- Update to Nexus 3.17.0-01- Password for admin user at new installations is now random and can be found at /var/lib/nexus3/admin.password (https://help.sonatype.com/repomanager3/installation/post-install-checklist for more details)
* Fri Aug 16 2019 Julio Gonzalez Gil - 3.16.2.01-1- Update to Nexus 3.16.2-01
* Fri Apr 26 2019 Julio Gonzalez Gil - 3.16.1.02-1- Update to Nexus 3.16.1-02
* Fri Apr 26 2019 Julio Gonzalez Gil - 3.16.0.01-1- Update to Nexus 3.16.0-01
* Tue Mar 12 2019 Julio Gonzalez Gil 3.15.2.01-1- Update to Nexus 3.15.2-01
* Sat Jan 26 2019 Angelo Verona - 3.15.1.01-1- Update to Nexus 3.15.1-01- Do not replace modified config files
* Mon Jan 14 2019 Angelo Verona - 3.15.0.01-1- Update to Nexus 3.15.0-01
* Mon Oct 29 2018 Wojciech Urbański - 3.14.0.04-1- Update to Nexus 3.14.0-04
* Tue Sep 04 2018 Wojciech Urbański - 3.13.0.01-1- Update to Nexus 3.13.0-01
* Mon Jun 25 2018 Julio Gonzalez - 3.12.1.01-1- Update to Nexus 3.12.1-01
* Sat May 26 2018 Anton Patsev - 3.12.0.01-1- Update to Nexus 3.12.0-01
* Fri May 11 2018 Anton Patsev - 3.11.0.01-1- Update to Nexus 3.11.0-01
* Fri Apr 20 2018 Pavel Zhbanov - 3.10.0.04-1- Update to Nexus 3.10.0-04
* Sat Mar 10 2018 Julio Gonzalez - 3.9.0.01-1- Update to Nexus 3.9.0-01
* Sat Mar 10 2018 Julio Gonzalez - 3.8.0.02-1- Update to Nexus 3.8.0-02
* Tue Jan 02 2018 Julio Gonzalez - 3.7.1.02-1- Update to Nexus 3.7.1-02
* Tue Jan 02 2018 Julio Gonzalez - 3.7.0.04-1- Update to Nexus 3.7.0-04- Warning: 3.7.0-04.1 is affected by issue https://issues.sonatype.org/browse/NEXUS-15278, it is highly recommended you install 3.7.1-02-1 if you have offline repositories
* Sat Dec 30 2017 Anton Patsev - 3.6.2.01-2- Stop requiring sysvinit compatibility for systemd- Add systemd service
* Thu Dec 28 2017 Julio Gonzalez - 3.6.2.01-1- Start using Fedora/RHEL release conventions- Fix problems on RPM removals- Make the package compatible with SUSE and openSUSE
* Sun Dec 24 2017 Julio Gonzalez - 3.6.2-01- Update to Nexus 3.6.2-01
* Sat Dec 02 2017 Anton Patsev - 3.6.0-01- Update to Nexus 3.6.1-02- Fix source- Use package name to configure user to run Nexus- Require Java 1.8.0
* Sat Dec 02 2017 Julio Gonzalez - 3.6.0-02- Update to Nexus 3.6.0-02
* Sat Dec 02 2017 Julio Gonzalez - 3.5.2-01- Update to Nexus 3.5.2-01
* Sat Dec 02 2017 Julio Gonzalez - 3.5.1-02- Update to Nexus 3.5.1-02
* Thu Aug 03 2017 Julio Gonzalez - 3.5.0-02- Update to Nexus 3.5.0-02
* Sat Jul 29 2017 Julio Gonzalez - 3.4.0-02- Update to Nexus 3.4.0-02
* Sat Jul 29 2017 Julio Gonzalez - 3.3.2-02- Update to Nexus 3.3.2-02
* Sat May 20 2017 Julio Gonzalez - 3.3.1-01- Update to Nexus 3.3.1-01
* Sat May 20 2017 Julio Gonzalez - 3.3.0-01- Update to Nexus 3.3.0-01
* Sat May 20 2017 Julio Gonzalez - 3.2.1-01- Update to Nexus 3.2.1-01
* Sat May 20 2017 Julio Gonzalez - 3.2.0-01- Update to Nexus 3.2.0-01
* Sat Nov 12 2016 Julio Gonzalez - 3.1.0-04- Update to Nexus 3.1.0-04
* Fri Apr 08 2016 Julio Gonzalez - 3.0.0-03- Initial packaging for Nexus 3.x