2025 Notable Integrations Bug Fixes
2025 Notable Integrations Bug Fixes
The following table lists notable bug fixes for Sonatype integrations in 2025. Any months that are omitted did not include any notable bug fixes.
December 2025
The following table lists notable bug fixes for Sonatype integrations in December 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9760 | IQ CLI version 2.8.1 | The scanner now supports bearer token authentication for container registries. |
November 2025
The following table lists notable bug fixes for Sonatype integrations in November 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9759 | Bamboo version 3.3.3 | The Bamboo plugin now uses setter-based dependency injection for ClmScanTask. |
October 2025
The following table lists notable bug fixes for Sonatype integrations in October 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9671 | IQ CLI version 2.7.0 | Optimized fingerprinting logic to improve the speed at which the IQ CLI processes pnpm-lock.yaml files. |
| INT-9666 | IQ CLI version 2.6.0 | The IQ CLI now supports Docker image tar files created with Docker version 28. |
| INT-9660 | VSCode version 1.8.1 | The VS Code extension now uses an integrations-specific API endpoint to fetch application data, allowing users with the Component Evaluator role to successfully run component analysis without requiring additional permissions. |
| INT-9596 | Jenkins version 3.28.0 | Added a validation step to safely handle invalid or unsupported method descriptors during reachability analysis. |
| INT-9572 | Bamboo version 3.3.2 | The Bamboo plugin now explicitly injects required dependencies. |
| INT-9505 | IQ CLI version 2.6.0 | The IQ CLI now properly resolves proxy hostnames. |
September 2025
The following table lists notable bug fixes for Sonatype integrations in September 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9591 | Container scanning-capable integrations and IQ version 195 | IQ Server now gracefully handles CVEs with malformed or missing URLs during container scans. |
| INT-9571 | Bamboo version 4.1.1 | The Bamboo plugin now uses proper dependency injection to ensure required components are correctly initialized. |
August 2025
The following table lists notable bug fixes for Sonatype integrations in August 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9522 | IDEA version 4.16.0 | The IntelliJ Nexus IQ plugin now properly handles licenses that aren't assigned to a threat group. |
| INT-9481 | Bamboo version 3.3.1 | The Bamboo plugin now works correctly with Bamboo 10.2.x. |
July 2025
The following table lists notable bug fixes for Sonatype integrations in July 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9465 | GitLab version 2.6.0 | The GitLab Nexus Platform Plugin now generates vulnerability records for policy violations involving unknown components. |
June 2025
The following table lists notable bug fixes for Sonatype integrations in June 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9434 | Jenkins version 3.26.0 | The Jenkins plugin now correctly includes the necessary files for container scanning. |
| INT-9386 | IQ CLI version 2.4.4 and Jenkins version 3.26.0 | The Jenkins plugin now includes a concrete implementation of the Reachability Entrypoint Strategy and properly handles unsupported packageUrl values. |
May 2025
The following table lists notable bug fixes for Sonatype integrations in May 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9298 | Jenkins version 3.25.0 | The Jenkins plugin now properly filters out excluded files and directories during scans. |
| INT-9219 | GitLab version 2.4.2 | The create-vulnerability-report tool now correctly handles timestamps that include timezone offsets. |
| INT-9102 | Azure DevOps version 2.5.0 | The Azure DevOps extension now allows configuration of SSL certificate validation. |
| INT-8764 | IQ CLI version 2.4.3 | The IQ CLI now uses an updated version of the TrueZIP library, resolving issues where call graph analysis failed during Docker image scans. |
April 2025
The following table lists notable bug fixes for Sonatype integrations in April 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9119 | Jenkins version 3.24.0 | The Jenkins plugin now logs the exact file path when a scan error occurs. |
| INT-9114 | Azure DevOps version 2.4.0 | The Azure DevOps extension now correctly passes the ignoreScanningError and ignoreSystemError flags to the IQ CLI. |
| INT-9082 | Jira Cloud version 2.14.0 | The Jira Cloud integration has been updated to use React and UI Kit 2, replacing deprecated dependencies and restoring full plugin configurability. |
March 2025
The following table lists notable bug fixes for Sonatype integrations in March 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9104 | Azure DevOps version 2.3.1 | The Azure DevOps extension now respects the ignoreScanningError setting by skipping missing or invalid files during scanning. |
| INT-9086 | Azure DevOps version 2.3.1 | Corrected a URL formatting issue in the Azure DevOps integration where an extra slash in the IQ Server URL was preventing features from being fetched properly. |
| INT-9081 | Azure DevOps version 2.3.1 | The Azure DevOps extension now explicitly specifies Node.js 20 in its configuration. |
February 2025
The following table lists notable bug fixes for Sonatype integrations in February 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-8870 | GitLab version 2.2.0 | The GitLab Nexus Platform Plugin now supports schema versions 15.0.7, 15.1.4, and 15.2.1 for dependency scanning reports. |
January 2025
The following table lists notable bug fixes for Sonatype integrations in January 2025:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-8891 | Bamboo version 3.1.3 | The Bamboo plugin now includes the GSON library with the correct dependency scope, resolving NoClassDefFoundError issues during scans and ensuring required classes are available at runtime. |
| INT-8882 | GitLab version 2.0.1 | The GitLab Nexus Platform Plugin now uses a parameter file to pass credentials to the IQ CLI, ensuring authentication works correctly even when passwords contain special characters. |
| INT-8848 | Azure DevOps version 2.0.6 | The Azure DevOps extension now supports Node.js 20. |
| INT-8723 | Jenkins version 3.20.10 | The Jenkins plugin now uses the workspace-specific temporary directory for storing scan files instead of the system temp directory. |