2026 Notable Integrations Bug Fixes
2026 Notable Integrations Bug Fixes
The following table lists notable bug fixes for Sonatype integrations in 2026. Any months that are omitted did not include any notable bug fixes.
June 2026
The following table lists notable bug fixes for Sonatype integrations in June 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9920 | Azure DevOps version 2.8.1 | When a package.json dependency mismatch is detected during scanning, the scanner now falls back to using the unfiltered lockfile to ensure npm applications are analyzed successfully in Azure DevOps. |
| INT-10291 | IQ CLI version 2.12.0 | Scanning pnpm monorepos now correctly resolves the full dependency graph from the root pnpm-lock.yaml across all workspace packages, rather than reading only the root package.json. |
| INT-10378 | Jenkins version 3.34.0 | Testing a Nexus Repository Manager 3.x Server connection in Jenkins now succeeds when the server returns additional version fields such as isCloud. |
| INT-10427 | Fortify version 6.0.0 | The Fortify SSC integration is now available, enabling customers to connect IQ Server security findings with Fortify Software Security Center. |
May 2026
The following table lists notable bug fixes for Sonatype integrations in May 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-10007 | Jenkins version 3.33.0 | The failBuildOnScanningErrors and unstableBuildOnScanningWarnings pipeline flags are now respected when scanning encounters unparseable files (such as malformed SPDX documents embedded in JARs), preventing unexpected UNSTABLE or FAILURE build results. |
April 2026
The following table lists notable bug fixes for Sonatype integrations in April 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-10100 | IQ CLI version 2.11.0 and Azure DevOps version 2.11.0 |
Manifest file names are no longer evaluated against proprietary component regex patterns when scanning, ensuring dependencies declared inside files like .csproj are correctly detected regardless of the filename. |
| INT-10109 | Jenkins version 3.32.0 | Reachability analysis on Jenkins Kubernetes pod agents now completes successfully, with batch commands passed via a temporary file rather than STDIN to avoid container exec session limitations. |
| INT-10117 | IQ CLI version 2.10.0 | Container image names containing "container" as a substring are now parsed correctly when scanning with the IQ CLI, allowing scans to complete successfully. |
| INT-10132 | Jenkins version 3.32.0 | Proxy configuration and authentication classes are now serializable, which is required for remote agent support but may affect existing serialized session data. Maven artifact uploads to Nexus Repository Manager 3.x now execute directly on the remote Jenkins agent, eliminating the Jenkins Remoting data path that caused indefinite hangs when publishing large files from agent file systems. |
| INT-10219 | Bamboo version 4.4.1 | Policy evaluation scans against pom.xml files complete successfully in the Sonatype for Bamboo Data Center plugin when running on Bamboo Data Center 12.1.3 with JDK 21. |
March 2026
The following table lists notable bug fixes for Sonatype integrations in March 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-10122 | Fortify version 5.4.2 | Project version retrieval in the Fortify SSC plugin now uses pagination, preventing database errors when applications have more than 1000 versions. |
February 2026
The following table lists notable bug fixes for Sonatype integrations in February 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9828 | IQ CLI version 2.8.5 | Container scans against private registries now retain the specified port in the image URL, allowing successful scans of images hosted on non-default HTTP or HTTPS ports. |
| INT-9904 | IQ CLI version 2.8.4 | Local container scans skip initializing or using the contentDownloader (when run with -D containerScannerMode=sonatype), preventing attempts to fetch bearer tokens or external registry content in proxy-restricted environments. |
January 2026
The following table lists notable bug fixes for Sonatype integrations in January 2026:
| Issue ID | Integration and Fix Version | Description |
|---|---|---|
| INT-9771 | Jenkins version 3.29.10 | Multi-step JavaScript callflow analysis in the Jenkins plugin now filters out unreachable methods so that the Priorities page displays accurate reachability results, consistent with single-step evaluation. |
| INT-9773 | Jenkins version 3.29.10 | Temporary folders created during JavaScript callflow analysis in Jenkins are now automatically removed after execution, preventing workspace clutter and unnecessary storage usage. |