New and Noteworthy Filtering npm Package Root MetadataĪ common pattern in npm projects is to use version ranges for dependencies for users of Nexus Firewall this could lead to build failures if quarantine is enabled for unknown components when builds occurred before a package was catalogued. See the complete release notes for all resolved issues. These notes are a compilation of new features and significant bug fixes for Nexus Repository Manager 3.29.0. Sonatype recommends that administrators running 3.28.1 and earlier upgrade immediately. See the CVE-2020-29436 advisory for details. Nexus Repository Manager 3.29.0 Includes Security Fix for XML External Entity CVE.

'Destination already contains component' error when using staging API.

Group repository registration API requests may fail.

npm audit fails with 500 response using group and anonymous.

Installing via helm proxy errors if not using official remote.

Unable to pull images from hosted docker repo after move to new blob store.

Uncheck the Task enabled checkbox on the Settings tab and click Save.īug Fixes Blobstore, Docker, Scheduled Tasks.

The default task name is Cleanup service.

Select the task of type Admin - Cleanup repositories using their associated policies.

As an Administrator user, navigate to Administration → System → Tasks.

If this is not possible, any 3.29.1 instance is advised to take the following action: Repositories with a cleanup policy can have components soft deleted that do not meet the criteria specified.Īn upgrade to 3.29.2 or newer is strongly recommended especially for instances that use Cleanup Policies. A flaw ( NEXUS-26251 ) has been discovered in Cleanup Policies affecting version 3.29.1.

Could not find content for nexus