Nexus 2.8.1 Released

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Nexus 2.8.1 Released

Rich Seddon
Sonatype is pleased to announce the release of Nexus 2.8.1.

Nexus 2.8.1 is available for download here.

See below for the release notes, and be sure to check the upgrade notes before installing this release.

Regards,

Rich Seddon

--

Sonatype Nexus 2.8.1 Release Notes

These notes are a compilation of new features and significant bug fixes for Sonatype Nexus 2.8.1.

See the complete release notes for all resolved issues.

New and Noteworthy

Temporary Directory Handled Consistently

It was possible that the temporary directory used by Nexus was indeterminate for some operations. The preferred default temporary directory was ${NEXUS_WORK}/tmp, but since that value cannot be reliably set by default before boot, Nexus now defaults the temporary directory used as ${NEXUS_HOME}/tmp. This may impact the disk space requirements for some installations. See the article discussing the temporary directory for more information. NEXUS-6595

Smart Proxy Performance Improvements

Working closely with our customers, we have identified some Smart Proxy performance issues in certain circumstances. Smart Proxy users should consider upgrading to benefit from these changes. NEXUS-6570,NEXUS-6600

Notable: Turn on strict URI matching in restlet

Nexus restlet now uses sctrict URI matching as the default.  This may impact the functionality of some third party plugins.  If you are using plugins not supplied by Sonatype you should test these against 2.8.1 before upgrading, it is possible (although unlikely) that REST endpoints in these plugins may not work correctly in 2.8.1.   NEXUS-6630

General Improvements

Bootstrap

  • [NEXUS-6555] Bug SystemProperty plexus.nexus-work not working in war-Deployment
  • [NEXUS-6352] Bug explicitly set java.io.tmpdir not always respected and tmp dir not under nexus work
  • [NEXUS-6595] Bug Revert tmp dir handling, only use -Djava.io.tmpdir to set this value in wrapper.conf compatibility

Build Tooling,Staging

  • [NEXUS-6538] Bug nexus-staging-maven-plugin: proxying to https host fails with ProxyInfo and BaseUrl protocols does not align!

CLM,Transport

  • [NEXUS-6607] Bug CLM component details fails when going through authenticated http proxy

Configuration

  • [NEXUS-6545] Bug request.log is rotated to NEXUS_HOME instead of NEXUS_WORK/logs compatibility
  • [NEXUS-6553] Improvement limit nexus.log time based log rolling to max history of 90 days instead of infinite compatibility

Licensing

  • [NEXUS-6514] Improvement Add commercial license fingerprint value to the System Information report

Maven Repository

  • [NEXUS-6510] Bug ERROR log message from M2Repository - LocalStorageException FileAlreadyExistsException does not include root cause throwable
  • [NEXUS-6560] Bug uncompressed archives with HTML file as an entry can be rejected by file content validation

Maven Repository,Smart Proxy

  • [NEXUS-6600] Bug Expire cache walker blocks subsequent NFC expirations performance

NuGet

  • [NEXUS-6530] Improvement Archive browser doesn't work for NuGet .nupkg packages

OBR,Smart Proxy

  • [NEXUS-6564] Bug OBR virtual repository metadata update fails when triggered by smart proxy download immediately

Procurement

  • [NEXUS-6562] Bug Regression: File content validation still enabled for procurement, no way to disable
  • [NEXUS-6520] Improvement Remove procurement from trial eval guide

REST

  • [NEXUS-6542] Bug Maven model classes are missing from xstream whiltelist configuration compatibility

REST/UI

  • [NEXUS-6539] Bug Forced Base URL value different from the incoming request URL can break UI / RESTLET based resources

Security

  • [NEXUS-6630] Improvement Turn on strict URI matching in restlet
  • [NEXUS-6549] Bug Browse Storage/Index can block access to folders or files that start with "content"
  • [NEXUS-6554] Bug XSS vulnerability in outreach plugin
  • [NEXUS-6569] Improvement Add X-Frame-Options header to avoid clickjacking

Smart Proxy

  • [NEXUS-6570] Bug Smart Proxy download immediately option for checksum updates sends duplicate download requests for main artifact performance

Support Tools

  • [NEXUS-6241] Improvement Add end-user instructions for support ticket creation in Support Tools UI

Transport

  • [NEXUS-6526] Improvement add request context to org.eclipse.jetty.io.EofException to aid determining the root cause
  • [NEXUS-6501] Bug inbound request URL syntax validity should be checked and fail fast

Yum

  • [NEXUS-6582] Bug Yum Generate Metadata does not detect new rpms added on filesystem
  • [NEXUS-6583] Bug Yum Generate Metadata only allows a single RPM per Directory