Sonatype Nexus Repository 3.63.0 Release Notes

Released December 5, 2023

#### Highlights in This Release
Quality Improvements This release primarily focuses on improving Sonatype Nexus Repository quality through bug fixes. See the Bug Fix table for full details. Enhancements to High Availability Helm Chart We have recently enhanced our High Availability (HA) Helm Chart ( GitHub, ArtifactHub) to make it more flexible and configurable.

Enhancements to High Availability Helm Chart

We have recently enhanced our High Availability (HA) Helm Chart ( GitHub, ArtifactHub) to make it more flexible and configurable.

We’ve removed version numbers from Kubernetes objects that the Helm chart creates. We’ve also made it possible to add custom labels and selectors. If you have existing volumes and volume mounts, you can also use those rather than having the Helm chart create new ones.

Here is a complete list of items you can now specify:

Additional volumes
Additional volume mounts
Additional containers
Statefulset annotations
Pod annotations
Node selectors
Host aliases
Pre-start and post-start commands
Init containers
TLS Secrets for ingress
Additional labels
Additional selectors
Ingress and service for Docker registries (for Docker connectors)
Security context for running the Nexus Repository pod
Service annotations
Existing persistent volume claim for nexus work directory

Learn more about our HA deployment options in the Resiliency and High Availability help documentation.
This feature was made possible because of your feedback in the Ideas Portal.

Additional Audit Logging

Based on your requests, we’ve enhanced our audit logging in this release:

For SAML, we now log user login, logout, and config-changed events.
For local authentication, LDAP, and Crowd, we now log user login and logout events.

Check out our Support Features documentation for more information about logging.
This feature was made possible because of your feedback in the Ideas Portal.

Filter by Blob Store Name

To make it easier for you to locate and sort the list of repositories in your deployment, we’ve enhanced our Repositories table filter to ensure you can search by blob store name. Simply type the blob store name into the table’s filter box to filter by blob store name.

See the Repository Management help topic for more information on using this table to manage your repositories.

Dependency Upgrades

This release upgrades the following dependencies:

org.apache.santuario updated from version 2.3.0 to 2.3.4.
org.json : json : updated to 20231013

Bug Fixes	Description
NEXUS-40742	Addressed an edge case for the Database Migrator where component tags were not preserved post-migration.
NEXUS-40623	Adjusted regex to handle requests for NuGet v3 versions with double hyphens.
NEXUS-40621	Sonatype Nexus Repository deployments using PostgreSQL will appropriately return a 204 response when a user re-deploys a component with the same tag to the hosted repository when re-deploy is allowed.
NEXUS-40491	Resolved an issue where running the Repair - Reconcile component database from the blob store task with the integrity check option enabled did not remove some assets even though their .properties files did not exist.
NEXUS-40421	Resolved an issue with the nexus.azure.server property not being set properly.
NEXUS-40244	The Reconcile component database from the blob store task restores only the expected blobs with the created/updated times matching the originals.
NEXUS-40007	Conditional Get (If-Modified-Since) on Yum group repo metadata now appropriately returns a 200 response when expected.
NEXUS-39826	You are now able to proxy RubyGems.org escape gem.
NEXUS-39675	PyPI package versions published using Twine before upgrading to 3.41.0 or later are now discoverable as expected. The “Generate Missing SHA256 Checksums” and “Delete Index Asset MD5 Metadata” tasks now run automatically after the upgrade.
NEXUS-39567	You are now able to proxy the RubyGems.org abstract gem.
NEXUS-39464	Proxying scoped npm packages with an underscore in the name now works without issue.
NEXUS-39227	Proxying PyPI repositories with policy-compliant component selection enabled is now appropriately incorporated into etag updates.
NEXUS-38587	Searching for Docker images with names containing a “/” character now works as expected.
NEXUS-36415	Resolved an issue that was causing cached proxied NuGet package metadata that cannot be parsed to prevent content from being updated from remote.