Sonatype Nexus 2.11.4 Release Notes

Sonatype Nexus 2.11.4 Release Notes

These notes are a compilation of new features and significant bug fixes for Sonatype Nexus 2.11.4.

See the complete release notes for all resolved issues.

New and Noteworthy

Upgrade to Prevent Possible SSL Socket Timeouts

Users proxying https repositories should upgrade. We've fixed a critical issue that caused SSL sockets to never timeout if the remote server started to misbehave. NEXUS-8856

Performance Improvements

We continue our efforts to reduce performance bottlenecks. For example:

  • snapshot removal task speed has been increased by an order of magnitude NEXUS-8724
  • disk space required for the npm metadata database is reduced NEXUS-8737
  • the repository list rendering speed and CPU activity has been reduced significantly for non-admin users. NEXUS-8834

Request Log Now Even More Useful

We have made improvements to the Nexus request log to allow better auditing of request activity.

  • in certain cases, the authenticated user making the request was not logged - this has been fixed NEXUS-7860
  • elapsed time is now recorded as the last field of the log pattern format - this can help identify particularly slow requests NEXUS-8913
  • the request.log is archived with a more compatible name: request-YYYY-MM-DD.log.gz, instead of request.log.YYYY-MM-DD.gz NEXUS-8737

Outbound Storage Requests From Nexus Can Be Easily Monitored

A special logger named remote.storage.outbound has been available for a while at DEBUG level to help identify the requests Nexus makes to other proxy repositories. Now this logger logs before and after the request, includes the response status, elapsed time, and any redirect information. NEXUS-8855, NEXUS-8837

General Improvements

Bootstrap

  • [NEXUS-8850] Improvement add uptime log message on shutdown

Capabilities,CLM

  • [NEXUS-8894] Bug If CLM server is configured, but CLM server isn't running, capabilities UI will not render

Database

  • [NEXUS-8849] Bug improve robustness to orientdb shutdown after stopping the store

Installer

  • [NEXUS-8746] Bug gradle simple-project-staging sample project uses an obsolete version of the nexus-staging-ant-tasks

NPM

  • [NEXUS-8737] Bug npm database grows unexpectedly large on cache expired requests performance

Outreach

  • [NEXUS-8829] Bug outreach does not detect http global configuration changes

Proxy Repository,Transport

  • [NEXUS-8837] Improvement remote.storage.outbound logger should include http response status and have consistent format

Repository

  • [NEXUS-8676] Bug mime detection may not cache properly for specific request paths
  • [NEXUS-8930] Bug outbound http connections may be immediately closed on 304 response with ETAG instead of pooled performance

Repository,UI

  • [NEXUS-8834] Bug service/local/repository_statuses can have performance implications with large numbers of repositories performance

Scheduled Tasks

  • [NEXUS-8724] Improvement improve snapshot remover tasks performance by reducing potential i/o performance

Security

  • [NEXUS-8821] Improvement add useful logging for siesta/wonderland/authenticate resource username mismatch

Staging,Yum

  • [NEXUS-8911] Bug releasing a yum enabled staging repository overwrites yum metadata in release repository

Support Tools

  • [NEXUS-8920] Improvement archived request.log name format should be more easily recognized as a log file compatibility
  • [NEXUS-7860] Bug request.log does not include authenticated userid for certain requests
  • [NEXUS-8913] Improvement add elapsed request time to request.log

Transport

  • [NEXUS-8855] Bug remote.storage.outbound logging reports protocol downgrade when there isn't one
  • [NEXUS-8856] Bug outbound ssl sockets do not timeout if the remote does not respond

UI

  • [NEXUS-8656] Bug non proxy hosts tooltip suggests a misleading syntax

User Token

  • [NEXUS-8036] Improvement User Token Protect Content feature should return 401 with message
Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk