# 2025 Notable Integrations Bug Fixes

The following table lists notable bug fixes for Sonatype integrations in 2025. Any months that are omitted did not include any notable bug fixes.

## December 2025

The following table lists notable bug fixes for Sonatype integrations in December 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9760 | IQ CLI version 2.8.1 | The scanner now supports bearer token authentication for container registries. |

## November 2025

The following table lists notable bug fixes for Sonatype integrations in November 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9759 | Bamboo version 3.3.3 | The Bamboo plugin now uses setter-based dependency injection for `ClmScanTask`. |

## October 2025

The following table lists notable bug fixes for Sonatype integrations in October 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9671 | IQ CLI version 2.7.0 | Optimized fingerprinting logic to improve the speed at which the IQ CLI processes pnpm-lock.yaml files. |
| INT-9666 | IQ CLI version 2.6.0 | The IQ CLI now supports Docker image tar files created with Docker version 28. |
| INT-9660 | VSCode version 1.8.1 | The VS Code extension now uses an integrations-specific API endpoint to fetch application data, allowing users with the Component Evaluator role to successfully run component analysis without requiring additional permissions. |
| INT-9596 | Jenkins version 3.28.0 | Added a validation step to safely handle invalid or unsupported method descriptors during reachability analysis. |
| INT-9572 | Bamboo version 3.3.2 | The Bamboo plugin now explicitly injects required dependencies. |
| INT-9505 | IQ CLI version 2.6.0 | The IQ CLI now properly resolves proxy hostnames. |

## September 2025

The following table lists notable bug fixes for Sonatype integrations in September 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9591 | Container scanning-capable integrations and IQ version 195 | IQ Server now gracefully handles CVEs with malformed or missing URLs during container scans. |
| INT-9571 | Bamboo version 4.1.1 | The Bamboo plugin now uses proper dependency injection to ensure required components are correctly initialized. |

## August 2025

The following table lists notable bug fixes for Sonatype integrations in August 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9522 | IDEA version 4.16.0 | The IntelliJ Nexus IQ plugin now properly handles licenses that aren't assigned to a threat group. |
| INT-9481 | Bamboo version 3.3.1 | The Bamboo plugin now works correctly with Bamboo 10.2.x. |

## July 2025

The following table lists notable bug fixes for Sonatype integrations in July 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9465 | GitLab version 2.6.0 | The GitLab Nexus Platform Plugin now generates vulnerability records for policy violations involving unknown components. |

## June 2025

The following table lists notable bug fixes for Sonatype integrations in June 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9434 | Jenkins version 3.26.0 | The Jenkins plugin now correctly includes the necessary files for container scanning. |
| INT-9386 | IQ CLI version 2.4.4 and Jenkins version 3.26.0 | The Jenkins plugin now includes a concrete implementation of the Reachability Entrypoint Strategy and properly handles unsupported `packageUrl` values. |

## May 2025

The following table lists notable bug fixes for Sonatype integrations in May 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9298 | Jenkins version 3.25.0 | The Jenkins plugin now properly filters out excluded files and directories during scans. |
| INT-9219 | GitLab version 2.4.2 | The `create-vulnerability-report` tool now correctly handles timestamps that include timezone offsets. |
| INT-9102 | Azure DevOps version 2.5.0 | The Azure DevOps extension now allows configuration of SSL certificate validation. |
| INT-8764 | IQ CLI version 2.4.3 | The IQ CLI now uses an updated version of the TrueZIP library, resolving issues where call graph analysis failed during Docker image scans. |

## April 2025

The following table lists notable bug fixes for Sonatype integrations in April 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9119 | Jenkins version 3.24.0 | The Jenkins plugin now logs the exact file path when a scan error occurs. |
| INT-9114 | Azure DevOps version 2.4.0 | The Azure DevOps extension now correctly passes the `ignoreScanningError` and `ignoreSystemError` flags to the IQ CLI. |
| INT-9082 | Jira Cloud version 2.14.0 | The Jira Cloud integration has been updated to use React and UI Kit 2, replacing deprecated dependencies and restoring full plugin configurability. |

## March 2025

The following table lists notable bug fixes for Sonatype integrations in March 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-9104 | Azure DevOps version 2.3.1 | The Azure DevOps extension now respects the `ignoreScanningError` setting by skipping missing or invalid files during scanning. |
| INT-9086 | Azure DevOps version 2.3.1 | Corrected a URL formatting issue in the Azure DevOps integration where an extra slash in the IQ Server URL was preventing features from being fetched properly. |
| INT-9081 | Azure DevOps version 2.3.1 | The Azure DevOps extension now explicitly specifies Node.js 20 in its configuration. |

## February 2025

The following table lists notable bug fixes for Sonatype integrations in February 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-8870 | GitLab version 2.2.0 | The GitLab Nexus Platform Plugin now supports schema versions 15.0.7, 15.1.4, and 15.2.1 for dependency scanning reports. |

## January 2025

The following table lists notable bug fixes for Sonatype integrations in January 2025:

| Issue ID | Integration and Fix Version | Description |
| --- | --- | --- |
| INT-8891 | Bamboo version 3.1.3 | The Bamboo plugin now includes the GSON library with the correct dependency scope, resolving `NoClassDefFoundError` issues during scans and ensuring required classes are available at runtime. |
| INT-8882 | GitLab version 2.0.1 | The GitLab Nexus Platform Plugin now uses a parameter file to pass credentials to the IQ CLI, ensuring authentication works correctly even when passwords contain special characters. |
| INT-8848 | Azure DevOps version 2.0.6 | The Azure DevOps extension now supports Node.js 20. |
| INT-8723 | Jenkins version 3.20.10 | The Jenkins plugin now uses the workspace-specific temporary directory for storing scan files instead of the system temp directory.