Sonatype Nexus 2.11.3 Release Notes

Sonatype Nexus 2.11.3 Release Notes

These notes are a compilation of new features and significant bug fixes for Sonatype Nexus 2.11.3.

See the complete release notes for all resolved issues.

New and Noteworthy

Notable NPM Repository Improvements

A host of important NPM repository issues and features have been resolved - users of NPM repositories are strongly encouraged to upgrade to this release.

Nexus Lifecycle (formerly CLM) Plugin Updates

Several enhancments have been made, including the ability to test the server connection and verify application access from the user interface. Log messages are improved when problems are encountered.

NuGet Download Feeds Task Now Disabled

As mentioned first in Nexus 2.10 release notes, the Download NuGet Feed Task is no longer needed. A reminder was published May 11, 2015. In Nexus 2.11.3, any existing scheduled tasks are non-operable and should be explicitly removed.

Forgot Password feature removed

Due to identified performance issues that could lead to stability problems if abused (NEXUS-8070) and limited use, the forgot password feature has been removed.

General Improvements

Browse Remote,Transport

  • [NEXUS-8083] Bug Connection leak in Browse Remote when content encoding is gzip performance


  • [NEXUS-8343] Improvement make it easier to find the nexus software license


  • [NEXUS-8147] Bug Cannot initially view CLM Component Info in first record searched


  • [NEXUS-8224] Task Update OrientDB from 2.0.2 to 2.0.4


  • [NEXUS-8425] Bug nexus pro log may report nexus as unlicensed on startup even when it is

Maven Repository

  • [NEXUS-8221] Bug Rebuild Metadata creates incorrect md5 and sha1 for maven-metadata.xml
  • [NEXUS-8178] Bug artifact attributes files can contain wrong checksum values


  • [NEXUS-8043] Bug rebuild hosted npm metadata task metadata parsing errors
  • [NEXUS-8062] Bug impossible to delete stale hosted npm repository metadata
  • [NEXUS-8389] Bug npm plugin does not work with UNC paths
  • [NEXUS-8568] Bug prevent OConcurrentModificationException when expiring not found cache and updating package metadata at the same time for a npm repository
  • [NEXUS-8290] Bug npm proxy attempts network access when in blocked state, results in 500 response
  • [NEXUS-8555] Bug not found cache should be expired for packages with implied references from updated package metadata
  • [NEXUS-8567] Bug expire cache task on npm group repositories should not abort when there is a problem processing member repositories
  • [NEXUS-8039] Improvement performance advice in logs when querying npm all resource
  • [NEXUS-8625] Bug Allow fetching of tarballs from incomplete NPM packages
  • [NEXUS-7806] Improvement npm groups should merge versions of the same package in different members compatibility
  • [NEXUS-8624] Bug Replace NPM package root when proxying (instead of merging the content)
  • [NEXUS-8570] Improvement improve the experience when npm package files are requested before npm metadata


  • [NEXUS-8523] Improvement deprecate and disable the "download nuget feed" scheduled task

Proxy Repository

  • [NEXUS-8080] Bug concurrent request paths cause ItemNotFoundException during population of not found cache


  • [NEXUS-8226] Improvement Create a task to find and fix bad checksums affected by the extra link detection check
  • [NEXUS-7654] Bug Invalid/missing checksums in proxy repositories are cached forever
  • [NEXUS-8004] Bug "failed content integrity validation" message when remote returns 404
  • [NEXUS-8700] Bug specially crafted proxy repository GET requests can delete already cached storage paths security
  • [NEXUS-8608] Improvement avoid extraneous file system access checking File.lastModified in local repository storage


  • [NEXUS-5904] Improvement Remove the mirrors tab from hosted repositories


  • [NEXUS-8186] Bug RubyGems repository - error fetching gem from internal gem server
  • [NEXUS-8144] Bug expire proxy cache does not force fetching a new specs file from the remote
  • [NEXUS-8114] Bug Rubygems index fails on Windows share

Scheduled Tasks

  • [NEXUS-6048] Improvement improve Remove Releases from Repository task performance performance
  • [NEXUS-8261] Improvement Add support to set base-url-holder value for scheduled tasks


  • [NEXUS-8070] Bug forgot password feature performs badly with external realms compatibility performance


  • [NEXUS-8556] Bug staging.xml validation can orphan nexus.xml repositories during startup


  • [NEXUS-8130] Bug Regression: Yum enabled staging repositories can't be released if target release repository contains yum metadata

Support Tools

  • [NEXUS-8076] Bug support zip generation fails if system has mounted clearcase volumes
  • [NEXUS-8077] Bug OFF log level for Loggers visible as TRACE in the UI


  • [NEXUS-8195] Bug Deadlock between yum merge metadata task and yum generate metadata task performance
Have more questions? Submit a request


Article is closed for comments.
Powered by Zendesk