Sonatype Nexus Repository 3.62.0 Release Notes

Sonatype Nexus Repository 3.62.0 Release Notes

Released November 7, 2023

#### Highlights in This Release
Pro Deployments using PostgreSQL Can Download Cleanup Preview CSVs
Administrators on Sonatype Nexus Repository Pro deployments using PostgreSQL databases can now download a CSV report showing what a selected cleanup policy would remove if it were run as currently configured.
Combined High Availability Helm Chart for AWS, Azure, and On-Premises HA Deployments
Our previously separate AWS and Azure High Availability (HA) Helm charts are no longer available. Instead, we created a Helm chart that supports HA Sonatype Nexus Repository deployments in AWS, Azure, or on-premises.
Deployment Pattern Library
With this release, we are publishing a new library of deployment patterns specifically designed to address three primary concerns: resiliency, scalability, and distribution.

New Cleanup Preview Experience for Pro Customers Using PostgreSQL

To help you fine-tune cleanup policies and ensure that you do not unexpectedly remove important components, we've enhanced the cleanup preview experience for Sonatype Nexus Repository Pro deployments using a PostgreSQL database.

Admin users are now able to download a CSV report showing what a selected cleanup policy would remove if it were run as currently configured. The exported CSV lists component namespaces, names, versions, and paths.

Deployments using H2 or OrientDB will still see the old cleanup preview option. Check out the cleanup policy help documentation for full details on using this feature.

This feature was made possible because of your feedback in the Ideas Portal.

Cleanup Preview CSV Performance

To help you better plan how and when to use the new cleanup preview feature, we are also providing performance information. Cleanup preview CSV performance data is available in our cleanup policy help documentation and also shown below:

Generating a Cleanup Preview CSV can take some time depending on deployment size and configuration.

The table below provides a rough estimate of how long generating a CSV might take based on our internal testing using the following specifications:

Deployed on AWS using ECS c6i.4xlarge and Aurora PostgreSQL db.r6g.large both deployed in the same Availability Zone, Raw hosted repository

Components in Repository Time to Generate CSV Report
1M ~1min
5M ~2min
10M ~4min
20M ~8min
23M ~10min
25M ~15min
27M ~25min
30M ~40min

New Combined Helm Chart for AWS, Azure, or On-Premises High Availability Deployments PRO

We continue to make improvements to help make it easier for you to deploy Sonatype Nexus Repository in an HA environment. With this release, we introduce two big changes.

HA Helm Charts Consolidated

We previously had separate Helm charts for Azure and AWS HA deployments. We have now consolidated all of our HA Helm charts into one, which you can find in our Sonatype Nexus Repository HA Helm chart Git repository. We have also updated our Azure HA deployment documentation and AWS HA deployment documentation with appropriate modifications for the new Helm chart.

If you were previously using one of the individual Azure or AWS HA helm charts, you can find simple instructions on how to move to our new combined Helm chart in our help documentation for upgrading in an HA environment. Note that you will need to customize a new values.yaml with appropriate information for your deployment; you will not be able to use the same custom values.yaml that you used with the individual AWS/Azure Helm charts.

This feature was made possible because of your feedback in the Ideas Portal.

HA Helm Chart Supports On-Premises Deployment

Our new HA Helm chart can also be used for on-premises HA deployments. This is the same Helm chart available in the Sonatype Nexus Repository HA Helm chart Git repository. We have updated our on-premises HA deployment documentation to reflect the new deployment option.

This feature was made possible because of your feedback in the Ideas Portal.

Support Zip Improvements for HA Deployments PRO

To make it easier for you to generate and download support zips, we've added some improvements to our Support Zip generation screen for HA deployments.

HA deployments will now see a button that allows you to configure your support zip options once but generate support zips for all nodes.

The download link for a node's latest support zip also remains available even if you navigate away from and back to the Support Zip page.

See our Support Features documentation for full details.

Expanded Audit Logging

To improve supportability and help troubleshoot any issues that you may experience, we've expanded our audit logging.

The audit log now includes records for "Clear Cache" and "Change (server) order" LDAP events; this is available for all databases.

For H2 and PostgreSQL deployments, we've also added logging for when you create, update, or delete a routing rule.

See our auditing documentation for details about audit logs.

Deployment Pattern Library

We recognize that Sonatype Nexus Repository customers face an ever-growing need to balance availability with infrastructure costs while also providing functionality for teams across the globe.

With this release, we are publishing a new library of deployment patterns specifically designed to address three primary concerns: resiliency, scalability, and distribution.

The patterns in this library represent proven ways of deploying Sonatype Nexus Repository and can also be combined to meet multiple needs. You can use these patterns to help you plan a Sonatype Nexus Repository deployment that will meet your individual organization's needs.

Check out our new deployment pattern library in our help documentation. Specific patterns include the following:

Notable Dependency Changes

This release includes updates to the following dependencies:

HA-C in Extended Maintenance

In mid-October, we announced that our legacy HA solution High Availability-Clustering (HA-C) is now in extended maintenance and will be officially sunset in April 2024. Information can be found in the Sonatype Nexus Repository 3 Feature Status.

Full details about our sunsetting process are also available in the Sonatype Sunsetting Information section.

Bug Fixes Description
NEXUS-40526 Fixed a display issue that was causing tag associations to be missing from on raw components after migration to PostgreSQL. Note: this was a display issue only and did not result in any missing data.
NEXUS-40425 Fixed an issue that existed in version 3.61.0 that was preventing startup when .bak files existed under restore-from-backup.
NEXUS-40423 Resolved an issue in 3.61.0 where duplicate user tokens were breaking upgrades. Upgrades now succeed and will detect duplicate rows and produce a log warning.
NEXUS-40325 Docker Group repositories return the correct error if someone attempts to use a username/password when the Protect Content feature is enabled in the User Token capability.
NEXUS-40313 User tokens work as expected with Conan repositories.
NEXUS-40196 Created an advanced option for Sonatype Nexus Repository Pro customers to clean up identical Docker image layers across repositories. See the support knowledge base article for full details.
NEXUS-40120 Made changes to reduce the number of queries performed when running Nuget V2 FindPackagesById in PostgreSQL environments.
NEXUS-39411 Resolved an important database migrator issue that could cause components and assets to be migrated in the wrong order.
NEXUS-39150 Resolved a concurrency issue that was occurring when running the Staging move and Cleanup unused assets task at the same time.
NEXUS-38850 The database migrator --health check option now also checks the configuration database for corruptions in config classes.
NEXUS-38257 Repository configuration changes that occur while a search reindex task is running cause a lock exception after waiting for 60 seconds; however, the repository now stays in a stable state. A subsequent try to save the config change now works as expected once the long-running task is complete.
NEXUS-36836 Running the DeadBlobsFinder groovy script against a large database no longer causes out-of-memory errors.
NEXUS-32009 The last modified date for hosted yum repositories now matches the metadata rebuild date after migrating from OrientDB to H2.
NEXUS-22262 Made changes to address multiple issues that were causing build failures due to failing to return maven-metadata.xml from a group repository.