<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4">
<package pkgid="5bad16c8dc4377eda7d8481b03a58d1bedce8034" name="nexus" arch="src">
  <version epoch="0" ver="2.15.2.03" rel="1.el7.1"/>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.9.01-1" date="1542974400">- Update to 2.14.9-01</changelog>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.10.01-1" date="1542974401">- Update to 2.14.10-01</changelog>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.11.01-1" date="1542974402">- Update to 2.14.11-01
- Require Java 1.8.0</changelog>
  <changelog author="Julio Gonzalez &lt;packages@juliogonzalez.es&gt; - 2.14.11.01-2" date="1548504000">- Do not replace modified config files</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.12.02-1" date="1552392000">- Update to 2.14.12-02</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.13.01-1" date="1556280000">- Update to 2.14.13-01</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.14.01-1" date="1565956800">- Update to 2.14.14-01</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.15.01-1" date="1571313600">- Update to 2.14.15-01
- Bugfixes:
  * NEXUS-21044: CVE-2019-15893: Remote Code Execution vulnerability
  * NEXUS-21193: CVE-2019-16530: Remote Code Execution vulnerability
  * NEXUS-20626: CVE-2019-5475: OS Command Injection vulnerability (second part to the fix in 2.14.14)
  * NEXUS-21512: Update Apache Tika and Commons Compress libraries to resolve security vulnerabilities</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.16.01-1" date="1580126400">- License for Nexus OSS is EPL-2.0 as stated at https://blog.sonatype.com/2012/06/nexus-oss-switched-to-the-eclipse-public-license-a-clarification-and-an-observation/
  and it is since 2012. Mistake inherited from the original packages from Jens Braeuer.
- Update to 2.14.16-01
- Bugfixes:
  * NEXUS-22014: CVE-2019-15893: Remote Code Execution vulnerability
  * NEXUS-22453: Update Apache Shiro library to resolve security vulnerability
  * NEXUS-22313: Invalid content-range header returned
  * NEXUS-13306: usernames containing non URL safe characters cannot authenticate using the Crowd realm</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.16.01-2" date="1582891200">- Clean up spec and fix to build all distributions at OpenBuildService
- Enable building and installation for Amazon Linux &gt;= 2
- Enable building and installation for for openSUSE Tumbleweed/Factory</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.17.01-1" date="1587124800">- Update to 2.14.17-01
- Bugfixes:
  * NEXUS-23556: CVE-2020-11415: LDAP system credentials can be exposed by admin user</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.18.01-1" date="1601640000">- Update to 2.14.18-01
- Bugfixes:
  * NEXUS-21802: Maven metadata sha256/sha512 checksum in staging repositories</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.19.01-1" date="1601640001">- Update to 2.14.19-01
- Bugfixes:
  * Minor security fixes.</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.20-02-1" date="1609848000">- Update to 2.14.20-02
- Bugfixes:
  * NEXUS-26224: CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack
  * NEXUS-25956: Signatures with ECC algorithm not being recognized</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.21-02-1" date="1639828800">- Update to 2.14.21-02
- Bugfixes:
  * logback library update to fix a low/moderate vulnerability, as a precautionary
    measure. No known exploit of Nexus Repository via logback at this time.</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.0-04-1" date="1647604800">- Update to 2.15.0-04
- Bugfixes:
  * Resolved npm Memory Issue: You must set the property for
    nexus.npm.abbreviateMetadata to "True" in
    $NEXUS_HOME/conf/nexus.properties to enable the fix.
    Enabling this property may affect what the CLI shows, but it will improve
    performance when dealing with large metadata.
  * Fixed Performance Issue
- Features:
  * Upgraded to Jetty 9.4 from Jetty 8: Adminstrators who have customized
    their Jetty configuration will need to make changes before they can
     upgrade to this release. See the knowledge base for mroe information:
     https://support.sonatype.com/hc/en-us/articles/4417117321619-Eclipse-Jetty-Changes-in-Repository-2-15-0
  * Add Ext JS Licensing Declaration to Nexus Repository 2
  * Upgraded Goodies Library (prevents potential security
    vulnerability CVE-2020-15870)</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-1" date="1648123200">- Update to 2.15.1-02
- Bugfixes:
  * Correct a regression introduce in 2.15.0 that prevented writing the request
    log</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-2" date="1661515200">- Update the URL for the sources, as the previous one returns a HTTP 503</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-3" date="1697112000">- Fix the macro for the service removal so the package builds again for
  openSUSE Tumbleweed and Factory</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.2-03-1" date="1731672000">- Update to 2.15.2-03
- WARNING: Sonatype will officially sunset its Nexus Repository 2 product on
           June 30, 2025. Consider migrating to Nexus Repository 3 as soon as
           possible:
           https://help.sonatype.com/en/upgrading-from-nexus-repository-manager-2.html
           Find more information at the Sonatype Nexus Repository 2 Sunsetting
           Information help page:
           https://download.sonatype.com/nexus/2/Sonatype%20Nexus%20Repository%202%20Help.pdf
- Bugfixes:
  * CVE-2024-5082: Fixed a Remote Code Execution vulnerability through which
                   an attacker with privileges to publish content could upload
                   a specially crafted file that would result in Nexus
                   Repository attempting to execute embedded commands
                   upon retrieval
  * CVE-2024-5083: Fixed a Stored XSS vulnerability through which an attacker
                   with privileges to publish content could upload a specially
                   crafted file that includes embedded JavaScript. If that
                   file is viewed by an authenticated user, the JavaScript
                   could execute product features available to the
                   authenticated user</changelog>
</package>
<package pkgid="9a308e5324541e997c4473eb43871b5d797b3d42" name="nexus" arch="x86_64">
  <version epoch="0" ver="2.15.2.03" rel="1.el7.1"/>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.9.01-1" date="1542974400">- Update to 2.14.9-01</changelog>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.10.01-1" date="1542974401">- Update to 2.14.10-01</changelog>
  <changelog author="Julio Gonzalez &lt;git@juliogonzalez.es&gt; - 2.14.11.01-1" date="1542974402">- Update to 2.14.11-01
- Require Java 1.8.0</changelog>
  <changelog author="Julio Gonzalez &lt;packages@juliogonzalez.es&gt; - 2.14.11.01-2" date="1548504000">- Do not replace modified config files</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.12.02-1" date="1552392000">- Update to 2.14.12-02</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.13.01-1" date="1556280000">- Update to 2.14.13-01</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.14.01-1" date="1565956800">- Update to 2.14.14-01</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.15.01-1" date="1571313600">- Update to 2.14.15-01
- Bugfixes:
  * NEXUS-21044: CVE-2019-15893: Remote Code Execution vulnerability
  * NEXUS-21193: CVE-2019-16530: Remote Code Execution vulnerability
  * NEXUS-20626: CVE-2019-5475: OS Command Injection vulnerability (second part to the fix in 2.14.14)
  * NEXUS-21512: Update Apache Tika and Commons Compress libraries to resolve security vulnerabilities</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.16.01-1" date="1580126400">- License for Nexus OSS is EPL-2.0 as stated at https://blog.sonatype.com/2012/06/nexus-oss-switched-to-the-eclipse-public-license-a-clarification-and-an-observation/
  and it is since 2012. Mistake inherited from the original packages from Jens Braeuer.
- Update to 2.14.16-01
- Bugfixes:
  * NEXUS-22014: CVE-2019-15893: Remote Code Execution vulnerability
  * NEXUS-22453: Update Apache Shiro library to resolve security vulnerability
  * NEXUS-22313: Invalid content-range header returned
  * NEXUS-13306: usernames containing non URL safe characters cannot authenticate using the Crowd realm</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.16.01-2" date="1582891200">- Clean up spec and fix to build all distributions at OpenBuildService
- Enable building and installation for Amazon Linux &gt;= 2
- Enable building and installation for for openSUSE Tumbleweed/Factory</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.17.01-1" date="1587124800">- Update to 2.14.17-01
- Bugfixes:
  * NEXUS-23556: CVE-2020-11415: LDAP system credentials can be exposed by admin user</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.18.01-1" date="1601640000">- Update to 2.14.18-01
- Bugfixes:
  * NEXUS-21802: Maven metadata sha256/sha512 checksum in staging repositories</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.19.01-1" date="1601640001">- Update to 2.14.19-01
- Bugfixes:
  * Minor security fixes.</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.20-02-1" date="1609848000">- Update to 2.14.20-02
- Bugfixes:
  * NEXUS-26224: CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack
  * NEXUS-25956: Signatures with ECC algorithm not being recognized</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.14.21-02-1" date="1639828800">- Update to 2.14.21-02
- Bugfixes:
  * logback library update to fix a low/moderate vulnerability, as a precautionary
    measure. No known exploit of Nexus Repository via logback at this time.</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.0-04-1" date="1647604800">- Update to 2.15.0-04
- Bugfixes:
  * Resolved npm Memory Issue: You must set the property for
    nexus.npm.abbreviateMetadata to "True" in
    $NEXUS_HOME/conf/nexus.properties to enable the fix.
    Enabling this property may affect what the CLI shows, but it will improve
    performance when dealing with large metadata.
  * Fixed Performance Issue
- Features:
  * Upgraded to Jetty 9.4 from Jetty 8: Adminstrators who have customized
    their Jetty configuration will need to make changes before they can
     upgrade to this release. See the knowledge base for mroe information:
     https://support.sonatype.com/hc/en-us/articles/4417117321619-Eclipse-Jetty-Changes-in-Repository-2-15-0
  * Add Ext JS Licensing Declaration to Nexus Repository 2
  * Upgraded Goodies Library (prevents potential security
    vulnerability CVE-2020-15870)</changelog>
  <changelog author="Julio Gonzalez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-1" date="1648123200">- Update to 2.15.1-02
- Bugfixes:
  * Correct a regression introduce in 2.15.0 that prevented writing the request
    log</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-2" date="1661515200">- Update the URL for the sources, as the previous one returns a HTTP 503</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.1-02-3" date="1697112000">- Fix the macro for the service removal so the package builds again for
  openSUSE Tumbleweed and Factory</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 2.15.2-03-1" date="1731672000">- Update to 2.15.2-03
- WARNING: Sonatype will officially sunset its Nexus Repository 2 product on
           June 30, 2025. Consider migrating to Nexus Repository 3 as soon as
           possible:
           https://help.sonatype.com/en/upgrading-from-nexus-repository-manager-2.html
           Find more information at the Sonatype Nexus Repository 2 Sunsetting
           Information help page:
           https://download.sonatype.com/nexus/2/Sonatype%20Nexus%20Repository%202%20Help.pdf
- Bugfixes:
  * CVE-2024-5082: Fixed a Remote Code Execution vulnerability through which
                   an attacker with privileges to publish content could upload
                   a specially crafted file that would result in Nexus
                   Repository attempting to execute embedded commands
                   upon retrieval
  * CVE-2024-5083: Fixed a Stored XSS vulnerability through which an attacker
                   with privileges to publish content could upload a specially
                   crafted file that includes embedded JavaScript. If that
                   file is viewed by an authenticated user, the JavaScript
                   could execute product features available to the
                   authenticated user</changelog>
</package>
<package pkgid="0b93563f5f3591a3235c35a2be1e02b2f41d99b6" name="nexus3" arch="src">
  <version epoch="0" ver="3.74.0.05" rel="1.el7.1"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.62.0.01-1" date="1699444800">- Update to Nexus 3.62.0-01
- Bugfixing:
  * NEXUS-40526: Fixed a display issue that was causing tag associations to be
                 missing from on raw components after migration to PostgreSQL.
                 Note: this was a display issue only and did not result in any
                 missing data
  * NEXUS-40425: Fixed an issue that existed in version 3.61.0 that was
                 preventing startup when .bak files existed under
                 restore-from-backup
  * NEXUS-40423: Resolved an issue in 3.61.0 where duplicate user tokens were
                 breaking upgrades. Upgrades now succeed and will detect
                 duplicate rows and produce a log warning
  * NEXUS-40313: User tokens work as expected with Conan repositories
  * NEXUS-40196: Created an advanced option for Sonatype Nexus Repository Pro
                 customers to clean up identical Docker image layers
                 across repositories.
                 See https://support.sonatype.com/hc/en-us/articles/22490107929619
                 for full details
  * NEXUS-40120: Made changes to reduce the number of queries performed when
                 running Nuget V2 FindPackagesById in PostgreSQL environments
  * NEXUS-39411: Resolved a database migrator issue that was causing some
                 NuGet downloads to fail after migrating to PostgreSQL
  * NEXUS-39150: Resolved a concurrency issue that was ocurring when running
                 Staging move and Cleanup unused assets task at the same time
  * NEXUS-38850: The database migrator --healthcheck option now also checks
                 the configuration database for corruptions in config classes
  * NEXUS-38257: Repository configuration changes that occur while a search
                 reindex task is running cause a lock exception after waiting
                 for 60 seconds; however, the repository now stays in a
                 stable state. A subsequent try to save the config change now
                 works as expected once the long-running task is complete
  * NEXUS-36836: Running the DeadBlobsFinder groovy script against a large
                 database no longer causes out of memory errors
  * NEXUS-32009: The last-modified date for hosted yum repositories now
                 matches the metadata rebuild date after migrating from
                 OrientDB to H2
  * NEXUS-22262: Made changes to address multiple issues that were causing
                 build failures due to failing to return maven-metadata.xml
                 from a group repository
- Improvements:
  * New Cleanup Preview Experience for Pro Customers Using PostgreSQL (PRO Only)
    See https://help.sonatype.com/repomanager3/nexus-repository-administration/repository-management/cleanup-policies
  * Azure HA Performance Data (PRO Only)
    See https://help.sonatype.com/repomanager3/product-information/sonatype-nexus-repository-system-requirements/system-requirements-for-high-availability-deployments/sonatype-nexus-repository-high-availability-performance-data-using-azure
  * Support Zip Improvements:
    HA deployments will now see a button that allows configuring the support
    zip options once but generate support zips for all nodes
    The download link for a node's latest support zip also remains available
    even if navigating away from and back to the Support Zip page
  * Expanded Audit Logging:
    The audit log now includes records for "Clear Cache" and
    "Change (server) order" LDAP events
    Added logging for the creation, update or removal of routing rules
  * Deployment Pattern Library:
    New library of deployment patterns specifically designed to address three
    primary concerns: resiliency, scalability, and distribution
    https://help.sonatype.com/repomanager3/planning-your-implementation/deployment-pattern-library
  * Notable Dependency Changes:
    Upgraded Jetty from version 9.4.51.v20230217 to version 9.4.53.v20231009
    Upgraded goodies from version 2.3.5 to version 2.3.6
    Upgraded eclipse-sisu from version 0.3.4 to version 0.3.5
    Upgraded guice from version 5.0.1 to version 6.0.0
  * High Availability-Clustering (HA-C) is now in extended maintenance and
    will be officially sunset in April 2024. Full details can are available at
    https://help.sonatype.com/docs/sonatype-sunsetting-information/sonatype-nexus-repository-3-feature-status
    and https://help.sonatype.com/docs/sonatype-sunsetting-information</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.63.0.01-1" date="1701864000">- Update to Nexus 3.63.0-01
- Bugfixing:
  * NEXUS-40623: Adjusted regex to handle requests for NuGet v3 versions with
                 double hyphens
  * NEXUS-40621: Sonatype Nexus Repository deployments using PostgreSQL will
                 appropriately return a 204 response when a user re-deploys a
                 component with the same tag to hosted repository when
                 re-deploy is allowed
  * NEXUS-40491: Resolved an issue where running the "Repair - Reconcile
                 component database from blob store" task with the integrity
                 check option enabled did not remove some assets even though
                 their .properties files did not exist
  * NEXUS-40421: Resolved an issue with the nexus.azure.server property not
                 being set properly
  * NEXUS-40244: The Reconcile component database from blob store task
                 restores only the expected blobs with the created/updated
                 times matching the originals
  * NEXUS-40007: Conditional Get (If-Modified-Since) on Yum group repo
                 metadata now appropriately returns a 200 response
                 when expected
  * NEXUS-39826: You are now able to proxy RubyGems.org escape gem
  * NEXUS-39675: PyPI package versions published using twine before upgrading
                 to 3.41.0 or later are now discoverable as expected.
                 The “Generate Missing SHA256 Checksums” and “Delete Index
                 Asset MD5 Metadata” tasks now run automatically after upgrade
  * NEXUS-39567: You are now able to proxy the RubyGems.org abstract gem
  * NEXUS-39464: Proxying scoped npm packages with an underscore in the name
                 now works without issue
  * NEXUS-39227: Proxying PyPI repositories with policy-compliant component
                 selection enabled is now appropriately incorporated into
                 etag updates
  * NEXUS-38587: Searching for Docker images with names containing a "/"
                 character now works as expected
  * NEXUS-36415: Resolved an issue that was causing cached proxied NuGet
                 package metadata that cannot be parsed to prevent content
                 from being updated from remote
- Improvements:
  * Enhancements to HA Helm Chart: Removed version numbers from Kubernetes
    objects that the Helm chart creates. Now it is possible to add custom
    labels and selectors. If you have existing volumes and volume mounts,
    you can also use those rather than having the Helm chart create new ones
  * Additional Audit Logging:
    - For SAML, log user login, logout, and config-changed events are
      now logged
    - For local authentication, LDAP, and Crowd, user login and logout
      events are now logged
  * Filter by Blob Store Name: The Repositories table filter to was enhanced
    to ensure you can search by blob store name. Simply type the blob store
    name into the table’s filter box to filter by blob store name
  * Dependency Upgrades: org.apache.santuario updated from version 2.3.0 to
    2.3.4 and org.json updated to 20231013</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.64.0.03-1" date="1704888000">- Update to Nexus 3.64.0-03
- Bugfixing:
  * NEXUS-23410: If previously configured SAML IdP field mapping
                 values change, Sonatype Nexus Repository will update the
                 user's profile with the new values as expected
  * NEXUS-31215: Fixed an issue that was causing some PyPi assets to be
                 missing from the Browse screen after migrating from OrientDB
                 to PostgreSQL
  * NEXUS-32028: Changed the logging level from WARN to DEBUG in the blobstore
                 class that tracks attributes of an asset being accessed in an
                 unexpected soft-deleted state. This will prevent spamming the
                 main nexus.log with messages at a WARN level for operations
                 considered normal when running the compact blob store task
  * NEXUS-35207: Fixed an issue that was preventing the GA last-modified date
                 from being updated in the maven-metadata.xml when deploying a
                 new GAV in some instances after migrating from Sonatype Nexus
                 Repository 2 to 3. As part of this fix, the Last Modified
                 date is no longer visible in the Browse UI view; you can
                 still tell when the maven-metadata.xml was last updated by
                 looking at the Blob Updated date in the UI or using the
                 REST API
  * NEXUS-35741: Added validation to prevent users from updating an existing
                 task with an invalid cron_expression
  * NEXUS-35956: Resolved an issue that was breaking pagination when a given
                 Docker repository is inside of a group
  * NEXUS-38856: The NotFoundCache is not populated with paths when a
                 repository is in an auto-blocked or manually blocked state
  * NEXUS-39935: There is no longer an error when installing pods
                 ('OpenSSL-Universal', '1.1.1100') via a Sonatype Nexus
                 Repository 3 Cocoapods proxy repository
  * NEXUS-40140, NEXUS-40712: The import and export tasks work as expected on
                 npm assets without unexpectedly skipping any and while
                 correctly preserving attributes
  * NEXUS-40345: Resolved an issue that was preventing certain npm packages
                 from being proxied from the official registry. This fix
                 included the following dependency version changes:
                 + upgraded jackson version from 2.15.0 to 2.15.3
                 + upgraded snakeyaml version from 2.0 to 2.2
                 + upgraded swagger version from 1.6.2 to 1.6.11
  * NEXUS-40495: Increased the browse node sequence limit for H2 and
                 PostgreSQL implementations so that the database schema will
                 not run out of sequence values.
  * NEXUS-40514: Any attempt to change the blob store of an existing
                 repository via the REST API will be rejected with an HTTP 400
                 response
  * NEXUS-40610: Resolved an issue that was preventing some users from
                 uploading Jruby gems with "-java" in their version names to
                 hosted ruby repositories
  * NEXUS-40639: FluentAssets and FluentComponents are now able to retrieve
                 assets in group repository storage
  * NEXUS-40771: Using "%3A" or a colon for URL encoded strings in raw
                 repositories now works as expected
  * NEXUS-40775: Database Migrator: Made filtering change to reduce load on
                 the database migrator, improving database migrator performance
  * NEXUS-40808: Database Migrator: The database migrator now gracefully
                 handles characters that PostgreSQL does not support
- Improvements:
  * Dependency Changes:
    + logback-classic and logback-core updated to 1.2.13
    + upgraded jackson version from 2.15.0 to 2.15.3
    + upgraded snakeyaml version from 2.0 to 2.2
    + upgraded swagger version from 1.6.2 to 1.6.11</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.65.0.02-1" date="1707480000">- Update to Nexus 3.65.0-02
- Bugfixing:
  * Many improvements to component search in high availability (HA)
    environments in this release to make searching and tagging more precise.
    Due to these changes, the same search query should now return fewer but
    more precise results
    Please keep this behavior change in mind when looking at your previously
    configured search and tagging queries
    Please also see the HA search differences documentation for full details
    about how HA search differs from non-HA search:
    https://help.sonatype.com/en/high-availability-deployment-options.html#search-feature-differences-in-an-ha-environment-161963
  * NEXUS-34334: If the rebuild index task triggers an ElasticSearchException,
                 one repository failing will no longer prevent task completion
                 or affect the other repositories. Added an error message to
                 alert the user if a repository does fail
  * NEXUS-34968: Attempting to download an asset with a missing blob from a
                 proxy repository in a PostgreSQL or H2 deployment no longer
                 results in an immediate 500 error. Sonatype Nexus Repository
                 automatically attempts to re-fetch the asset from remote
                 as expected
  * NEXUS-36807: Made changes to improve cleanup policy preview performance
  * NEXUS-39665: Resolved an issue that was preventing some installations of a
                 package from a group repository with a certain private proxy
                 repository member
  * NEXUS-39881: The package-specific index page for a Python package
                 requested from a proxy repository now displays the
                 non-truncated package name as expected
  * NEXUS-40111: Resolved an issue that was causing some Yum assets to be
                 shown as "components" in the Sonatype Nexus Repository UI
  * NEXUS-40213: Addressed an issue impacting HA deployments where tokens
                 after a wildcards in component searches were being dropped
                 (e.g. for searches like “nexus*core”).
  * NEXUS-40378: Searching components by exact tag in an HA environment now
                 returns an exact match as expected
  * NEXUS-40680: Associating a tag with a component used to operate on a
                 loose match; it now uses an exact match as expected.
                 For example, associating a tag with a .jar with the version
                 "1.0.0" used to associate that tag with all components that
                 had "1.0.0" in the version number. Now, it will associate
                 with the exact version match only unless you use a wildcard
  * NEXUS-40987: Resolved an issue that was causing some PostgreSQL HA
                 deployments to have excessive errors written to logs despite
                 requests working as expected
  * NEXUS-40994: In HA environments, performing an exact-match search for
                 components where the group ID or artifact ID contain an
                 underscore now returns exact-match results as expected
  * NEXUS-41211: Added clarifying documentation regarding changes in NuGet
                 client compatibility with Sonatype Nexus Repository:
                 Sonatype Nexus Repository release 3.43.0, added compatibility
                 with official NuGet v2 clients. The supported subset of the
                 legacy NuGet v2 protocol is the same as that supported by
                 Microsoft's NuGet Gallery, http://nuget.org. Use cases that
                 rely on the deprecated parts of the v2 API are not supported,
                 including many common Chocolatey use cases and some custom
                 OData queries
- Improvements:
  * Cleanup Policies for Maven and Docker Include Option to Retain
    Recent Versions (PRO Only)
    More powerful and flexible cleanup policies for Maven and Docker formats
    by allowing you to retain a certain number of most recent artifact
    versions regardless of if they meet other cleanup criteria
    Learn more about how to use this feature in the cleanup policies
    help documentation:
    https://help.sonatype.com/en/cleanup-policies.html
  * Significant Cleanup Performance Improvements for Pro Deployments Using a
    PostgreSQL Database (PRO Only)
    Running the original cleanup feature often takes significant time.
    This release has changes to significantly improve cleanup performance for
    those using a PostgreSQL database. The new cleanup feature takes an
    average time per component of 10.6 ms versus 17.2 ms for the original
    cleanup feature
    With this release, all Sonatype Nexus Repository Pro deployments using a
    PostgreSQL database will use the new cleanup implementation
    For more information, check the detailed Cleanup Performance Data:
    https://help.sonatype.com/en/cleanup-performance-data.html
  * Change Repository Blob Store Task Supports Group Repositories (PRO Only)
    While the "Admin - Change repository blob store" task originally supported
    hosted repositories only, Sonatype added support for using this task on
    proxy repositories last year. Now, Sonatype Nexus Repository Pro
    deployments on PostgreSQL databases can use this task on group
    repositories as well.
    Note that when you use this task on a group repository, it will only move
    metadata assets directly related to the group repository content id;
    it does not move or affect data in the repositories that are
    group members. Using this task on group repositories also requires a
    PostgreSQL database.
    Full details are available in the change repository blob store
    help documentation:
    https://help.sonatype.com/en/change-repository-blob-store.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.66.0.02-1" date="1709899200">- Update to Nexus 3.66.0-02
- Bugfixing:
  * NEXUS-41360: Database Migrator: Resolved an issue that was causing some
                 older versions of the Database Migrator to require very
                 high heap
  * NEXUS-41096: Added a new script to the help documentation for those on
                 PostgreSQL or H2 migrating from LDAP to SAML user tokens
  * NEXUS-41062: The merged metadata summary on the Browse screen now shows
                 the correct information for group Maven repositories
  * NEXUS-41068: Resolved an issue where the support zip download was not
                 working as expects in HA environments with a
                 nexus-context-path
  * NEXUS-41052: The metadata for hosted npm repositories in PostgreSQL
                 deployments no longer duplicates the "_id" property
  * NEXUS-40983: NuGet searches with the -PreRelease option now return the
                 expected results
  * NEXUS-40900: Fixed an issue with HA nodes upgrading before nodes with
                 older versions have been shut down. Startup will halt with a
                 warning until the older nodes have been gracefully shut down
  * NEXUS-40673: Resolved an issue where a 403 error message was displayed on
                 the welcome page for anonymous users
  * NEXUS-40612: Disabling the usage metrics flag will also remove the metric
                 aggregation task
  * NEXUS-40377: The custom search page will no longer display uncaught type
                 errors when adding new criteria
  * NEXUS-39915: The migration of asset timestamp metadata will now be done as
                 expected for raw repositories when moving from Nexus
                 Repository 2 to 3. A fix for Maven and NuGet will be covered
                 in a future release
  * NEXUS-39677: The blob store API now returns 404 response codes for
                 non-existent S3 type blob store names
  * NEXUS-38842: The export assets task no longer logs WARN messages when
                 running correctly
  * NEXUS-35478: The Swagger API UI documentation for repositories will now
                 show that the "blobStoreName" parameter is mandatory
  * NEXUS-32494: Database Migrator: The database migrator tool will not run
                 for incompatible older versions of Nexus Repository while
                 returning a message to upgrade
  * NEXUS-31786: Database Migrator: The database migrator tool now includes
                 more details on assets when logging errors
  * NEXUS-28593: The InterruptedException will no longer be logged when
                 recording a successful audit event
  * NEXUS-26581: Export will no longer report errors when the directory has
                 not been pre-created
- Improvements:
  * Usage Alerts for Deployments Using Embedded Databases (PRO Only)
    To help customers identify when it is time to evaluate their deployment
    model, Sonatype Nexus Repository OSS and Pro deployments that use an
    embedded database (OrientDB or H2) will now see in-product warnings when
    usage levels approach or exceed certain thresholds
  * Visual Progress Tracking forRepair - Rebuild repository browseTask
    When running the "Repair - Rebuild repository browse" task, the Status
    updates to show users how many assets are completed out of the total
    number of assets that must be processed. This improvement applies to
    deployments using PostgreSQL and H2 databases only
  * User Interface Improvements for Roles
    User interface is modified to move away from the previous transfer list
    methodology. Now, administrators will see a single column listing applied
    privileges and a button to modify the privileges applied to that role.
    Selecting the button opens a modal where administrators can filter by
    keyword and select privileges to apply to that role
  * Dependency changes:
    + org.jboss.resteasy: resteasy-multipart-provider: 3.15.3.Final upgraded
      to 3.15.6.Final
    + AWS SDK dependencies upgraded from from 1.12.299 to 1.12.658</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.0.03-1" date="1712491200">- Update to Nexus 3.67.0-03
- Bugfixing:
  * NEXUS-41832: Database Migrator: Fixed an issue that was causing some
                 migrations to a PostgreSQL or H2 database to fail due to
                 incorrect asset_blob_id values when assets only differed by a
                 version number in their paths
  * NEXUS-41312: Resolved an issue that was causing expensive queries from
                 getComponentCount
  * NEXUS-41286: Resolved an issue that was causing an internal task to throw
                 an error when running in some large deployments
  * NEXUS-41269: Support zips from deployments using PostgreSQL that was
                 configured using system properties now display information
                 as expected
  * NEXUS-41263: Added logging for routing rule blocked requests done via
                 group repository
  * NEXUS-40997: Added an error message to the UI that displays when a user
                 without the correct privileges attempts to save a
                 content selector
  * NEXUS-40952: The security/users/&lt;userid&gt;/&lt;realmid&gt;/user-token-reset REST
                 API will now provide a 400 error if the realm passed
                 is invalid.
                 The users REST API can accept the following realm names
                 associated with user tokens: LdapRealm, Crowd, SamlRealm,
                 and NexusAuthenticatingRealm.
  * NEXUS-36989: Selecting the Analyze Application button in component details
                 now displays the expected form
- Improvements:
  * Java 11 Support. Nexus 3.67.0 allows running on top of Java 11, but for
    now the package will remain using Java 1.8 by default until a future
    update, probably some time after CentOS7 is end of life
  * Updated Groovy dependency from 2.4.17 to 3.0.19
  * Updated PostgreSQL database driver from 42.6.0 to 42.7.2</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.0.03-2" date="1712750400">- No code changes, only two important caution notes from Sonatype. I decided
  to create 3.67.0.03-2 so users already in 3.67.0.03-1 at least can get
  this warning on the changelogs. Sonatype decided to just remove Nexus
  3.67.0-03 (tagged as 3.67.0.03-1 for the RPM) from their site.
- Sonatype is aware of a critical known cleanup policy issue in 3.67.0
  impacting those who meet the following criteria:
  * You had previously configured a cleanup policy with the ability to retain
    select latest versions (feature introduced in 3.65.0)
  * You recently upgraded to 3.67.0
  * You then modified a cleanup policy that had previously included the
    ability to retain select latest versions
  This issue prevents cleanup policies from honoring the configured ability
  to retain select latest versions. Running the "Admin - Cleanup repositories
  using their associated policies" task may soft delete more than intended,
  which would result in full removal should the "Admin - Compact blob store"
  task then run.
  CAUTION: If you meet the above criteria, DO NOT RUN the "Admin - Compact
   blob store" task
  CAUTION: If you have upgraded to 3.67.0 and are using cleanup policies
  with the ability to retain select latest versions, do not modify your
  cleanup policies
- Sonatype is aware of a known issue preventing our Docker Subdomain Routing
  feature from functioning in Sonatype Nexus Repository 3.67.0
  CAUTION: If you are using Docker Subdomain Routing, do not upgrade
  to 3.67.0
  Sonatype announced they will release a fix for this issue as soon
  as possible</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.1.01-1" date="1712836800">- Update to Nexus 3.67.1-01
- Bugfixing:
  * Critical Bug Fixes: Release 3.67.1 fixes two bugs found in the
    3.67.0 release: One impacting those who upgraded to 3.67.0 and then
    modified any previously existing Docker or Maven cleanup policies that
    were configured to retain select recent versions, and one preventing
    Docker subdomain routing from functioning
- Deprecation notice:
  * The legacy HA-C feature (Upcoming High Availability Clustering (HA-C)
    Sunset) will be sunset on April 17, 2024. The next release will remove
    the HA-C functionality in our May release.
    If you are still using HA-C, you should follow
    https://help.sonatype.com/en/migrating-to-an-ha-deployment-from-a-legacy-ha-c-or-a-resilient-deployment.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.68.0.04-1" date="1715947200">- Update to Nexus 3.68.0-04
- Bugfixing:
  * NEXUS-42263: SHA256 checksums are now generated for Helm in
                 PostgreSQL environments
  * NEXUS-42006: Resolved an API issue related to policy-compliant component
                 selection for PyPI where waived components were mistakenly
                 returned as quarantined
  * NEXUS-41997: A DEBUG level logger is no longer required to see a
                 DataAccessException message in the
                 DatabaseDistributedCooperationRegistry
  * NEXUS-41903: Made various performance improvements for HA deployments
  * NEXUS-41602: Resolved improper realm caching for Conan
  * NEXUS-41486: Components REST API works as expected for group repositories
                 in PostgreSQL deployments
  * NEXUS-41451: Users are able to reset their user tokens as expected in
                 environments using remote user tokens
  * NEXUS-41442: NuGet "is_latest_version" and "is_absolute_latest_version"
                 attributes update as expected during staging moves
  * NEXUS-41403: Database Migrator: Resolved an issue that was causing
                 excessive DB Migrator logging
  * NEXUS-41384: Namespace confusion protection works as expected for PyPI and
                 RubyGems repositories in deployments using a Postgres database
  * NEXUS-41372: Resolved an issue that was sometimes causing the compact blob
                 store task to cause an out-of-memory error
  * NEXUS-41337: Database Migrator: Resolved an issue that was causing database
                 migration to fail and misreport problem records on ERROR:
                 insert or update on table "&lt;format&gt;_asset" violates foreign
                 key constraint "fk_&lt;format&gt;_asset_blob."
  * NEXUS-41334: Nexus Repository now creates a single task rather than
                 multiple tasks when migrating Yum metadata into the database
                 during upgrade
  * NEXUS-41285: User tokens work on Yum group repositories as expected when
                 Require User Tokens for Repository Authentication is enabled
  * NEXUS-40344: Requests for GA-level metadata that needs to be rebuilt no
                 longer automatically starts a rebuild of the full
                 metadata tree
  * NEXUS-39956: Removed "nexus-hazelcast-plugin" from the source tree
  * NEXUS-39507: Improved error messaging when users attempt to use
                 Import/Export across different Nexus Repository versions; as
                 stated in the Import help documentation
                 (https://help.sonatype.com/en/repository-import.html),
                 Nexus Repository does not support importing files from an
                 older Nexus Repository version
  * NEXUS-38651: Uploading to a raw repository with PUT will generate md5,
                 sha1, sha256, and sha512 checksums. This is introduced as a
                 new feature but also recorded in this table for customers who
                 were following this issue ID
  * NEXUS-38451: Made adjustments so that Nexus Repository generates fewer
                 browseComponentAssets SQL queries when finding packages by ID
                 in NuGet v2 proxy repositories
  * NEXUS-34192: Resolved an issue with SAML authentication related to
                 the NXSESSIONID
  * NEXUS-31745: Improved error messaging on Tag API when invalid continuation
                 token is passed in
- Improvements:
  * Nexus Repository Pro deployments using a PostgreSQL database can now see
    repository sizes displayed in the repositories listing under
    "Administration → Repository → Repositories" (PRO Only)
  * Uploading to Raw Repository with API now also generates SHA256 and
    SHA512 Checksums
  * When creating a new role or modifying the applied privileges and roles for
    an existing role, administrators can now use an asterisk as a wildcard in
    the search bar
  * Users and administrators can now see more detailed information about the
    "Repair - Rebuild repository browse" task’s progress as it runs. The task
    management table under "Administration → Tasks" now displays the task’s
    completion percentage to provide more insight into how long the task will
    take to complete. We will continue to add this functionality in future for
    additional tasks
  * Sunsetting of Legacy High Availability Clustering. HA-C is fully removed
    from Nexus Repository, and additional features or bug fixes related to
    legacy HA-C will no longer be provided. Sonatype Support will provide
    best-effort guidance to help PRO customers adopting one of the newer High
    Availability deployment solutions. Se also help documentation for:
    + Migrating to an HA deployment from Legacy HA-C
      https://help.sonatype.com/en/migrating-to-an-ha-deployment-from-a-legacy-ha-c-or-a-resilient-deployment.html
    + Migrating from legacy HA-C to a single instance deployment
      https://help.sonatype.com/en/migrating-from-legacy-ha-c-to-a-single-instance.html
    Nexus Repository will not start for any deployments that use legacy HA-C,
    ensure you have migrated off of legacy HA-C before upgrading to version
    3.68.0 or beyond
    * Dependency Updates in 3.68.0:
      + Updated axios from 0.21.4 to 0.27.2
      + Updated jackson2 from 2.15.3 to 2.17.0</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.68.1.02-1" date="1715947201">- Update to Nexus 3.68.1-02
- Bugfixing:
  * CVE-2024-4956: Fix for a critical vulnerability impacting all Sonatype
                   Nexus Repository 3 deployments. This vulnerability can
                   allow a specially crafted URL to return any file as a
                   download, including system files outside of Nexus
                   Repository application scope.
                   See https://support.sonatype.com/hc/en-us/articles/29416509323923
                   for more details</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.69.0.02-1" date="1717675200">- Update to Nexus 3.69.0-02
  * NEXUS-42786: Exporting npm assets with application/x-gzip content type now
                 works as expected
  * NEXUS-42560: The YumAbsouteUrlRemover no longer recalculates or updates
                 checksums for XML files containing the xml:base attribute;
                 this change greatly improves performance
  * NEXUS-42434: Adjusted all places in AuditDTO where ObjectMapper was
                 instantiated to use the injected global mapper. Users should
                 no longer see errors in the logs when uploading assets
  * NEXUS-42411: Database Migrator: Reduced log noise by adjusting the
                 ProcessChunkListener to log migration progress in time
                 intervals (e.g., showing how many records were migrated each
                 10 seconds)
  * NEXUS-42409: Firewall works with Conda format as expected
  * NEXUS-42276: The System Information page appears as expected with
                 no NullPointerException
  * NEXUS-41974: Running the "Cleanup unused asset blobs" task and
                 "Staging move" in parallel now works as expected
  * NEXUS-41862: Nexus Repository logs for deployments using PyPI
                 Policy-Compliant Component Selection now only include
                 filtered versions
  * NEXUS-41692: User tokens for Crowd-backed users now use auth caching
                 as expected
  * NEXUS-41385: Downloading files through a proxy PyPI repository no longer
                 leaves files in the blob store’s temporary directory
  * NEXUS-41374: Nexus Repository no longer logs an ERROR message when a
                 remote PyPI repository does not have a requested package
  * NEXUS-41250: The nx-tasks-run privilege details in the Nexus Repository
                 user interface no longer display an error under the
                 Actions section
  * NEXUS-41218: Added a property to nexus.properties that users may configure
                 in order to reduce overly verbose audit logging for NuGet v2
                 on  deployments using PostgreSQL. To turn off attributes
                 logging, add the following to:
                 nexus.properties: nexus.audit.attribute.changes.enabled=true
  * NEXUS-41403: Reduced excessive Database Migrator logging
  * NEXUS-39085: To ensure consistency across the REST API, we updated all
                 asset ID formats to use only the long ID
  * NEXUS-37307: The Crowd realm user cache is now used for npm client bearer
                 token-authenticated requests
  * NEXUS-36248: As mentioned in the improvements above, we have extended the
                 users API to allow you to include a realm parameter when
                 deleting a user
  * NEXUS-31205: Adjusted support zip algorithms to not truncate any support
                 zip files other than log files
  * NEXUS-26828: When a remote Docker repository indicates that something is
                 “not found,” the proxy repository no longer logs a
                 WARN message
  * NEXUS-23052: As mentioned in the improvements above, Administrators can
                 now delete cached authenticated SAML user records via user
                 administration section in the Sonatype Nexus Repository
                 user interface
  * NEXUS-17740: Created a "Repair - Recalculate blob store storage task" that
                 can be run if blob store blob count and total size display
                 incorrect information. This is a slow-running task and should
                 be used with careful consideration of available
                 system resources. See the published performance testing
                 for details:
                 https://help.sonatype.com/en/recalculate-blob-store-storage-performance-testing.html
- Improvements
  * Java 17 Support for Deployments Using H2 or PostgreSQL Databases, but
    not OrientDB (PRO Only)
    NOTE: This package is still based in Java 8 for the time being.
  * Configure User Token Expiration (PRO Only)
  * SAML Integration Improvements:
    + You can now optionally specify a user realm source when deleting a user
      via the Users API
    + Administrators can also now delete cached authenticated SAML user
      records via user administration section in the Sonatype Nexus
      Repository user interface
    * If a user's IdP field mappings change, Nexus Repository now
      automatically updates the user’s profile to show the new values
  * Dependency Updates in 3.69.0:
    + org.bouncycastle: bcprov-jdk15to18 upgraded from 1.75 to 1.78.1</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.0.03-1" date="1720699200">- Update to Nexus 3.70.0-03
- WARNINGS:
  * 3.70.0 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.
  * 3.70.0 upgrades the embedded H2 database to version 2.2.244. As there are
    considerable changes between version 1.4.200 and 2.2.244, those using an
    H2 database will need to take some additional steps to upgrade to Nexus
    Repository 3.70.0
    3.69.0, added an "Admin - Export SQL database to script task" you can
    use to create a SQL script export of your H2 database.
    If you are using an H2 database, you will need to run this task and follow
    the instructions at https://help.sonatype.com/en/upgrade-h2.html
    instructions in order to upgrade to release 3.70.0.
    This means that you must upgrade to version 3.69.0 before upgrading
    to 3.70.0+
    If you are unsure what database your deployment is using, follow the help
    documentation for determining your current database:
    https://help.sonatype.com/en/migrating-to-a-new-database.html#determining-current-database-162010
- Bugfixing:
  * NEXUS-43307: Updated documentation to accurately state that access to
                 SAML UI and API requires nx-all privileges
  * NEXUS-42854: The npm view command works as expected for scoped packages
  * NEXUS-42336: Database records that cause exceptions during database
                 migration are appropriately logged
  * NEXUS-39818: Running npm audit should no longer result in
                 unexpected exceptions
  * NEXUS-39799: In Yum repositories, all pathnames in the filelist.xml.gz
                 file are properly escaped
  * NEXUS-39462: If an asset’s format is incorrect, the Database Migrator
                 will continue with migration and skip corrupted records
  * NEXUS-22888: Added componentId validation when trying to view an asset
                 that does not have a component. If the componentId is an
                 empty string, string of blank spaces, null, or undefined,
                 then the LifeCycle Component panel is not displayed
- Improvements:
  * Create and Manage Cleanup Policies via New REST API (PRO Only)
    https://help.sonatype.com/en/cleanup-policies-api.html
  * Create and Manage Tasks via API (PRO Only)
    https://help.sonatype.com/en/tasks-api.html
  * Retrieve and Set IQ Audit and Quarantine Statuses via API (PRO Only)
    https://help.sonatype.com/en/lifecycle-api.html
  * New Database Migrator Flow to improve performance and reliability.
    Check https://help.sonatype.com/en/migrating-to-a-new-database.html for
    the new steps for migrating your database
    If you need to use an older version of the Database Migrator, you can
    still read the legacy database migrator documentation at
    https://help.sonatype.com/en/legacy-database-migration.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.1.02-1" date="1724846400">- Update to 3.70.1-02
- Fix for UI issues with custom context path in Nexus Repository 3.70.0
  This issue only impacted the UI and did not impact other functionality such
  as for example requests for components.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.2.01-1" date="1725624000">- Update to 3.70.2-01
- Fix for a Database Migrator issue that caused some users to see duplicate
  key errors after migrating from OrientDB to H2
- WARNINGS:
  * 3.70.2 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.3.01-1" date="1730116800">- Update to 3.70.3-01
- Dependency Updates in 3.70.3:
  * Upgraded protobuf-java from 1.36.0 to 3.25.5
  * Upgraded pax-url-aether from 2.6.7 to 2.6.12
- WARNINGS:
  * 3.70.3 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.3.01-2" date="1730548800">- This is the final warning about the migration from OrientDB to H2/PostgreSQL
  and from Java 1.8 to Java 17!
- The migration to Java 17 is performed automatically by the package, if the
  OS provides it
- The migration to H2/PostgreSQL needs to be performed MANUALLY. If you are
  still using OrientDB (you did not perform a migration, Make sure you read
  https://help.sonatype.com/en/migrating-to-a-new-database.html
  and run the procedure before updating to Nexus 3.71.0 or any newer version!</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.71.0.06-1" date="1731672000">- Update to 3.71.0-06
- WARNINGS:
  * Removed support for CentOS7, Amazon Linux 2018.03 and any other compatible
    systems without Java 17
  * Removed support for OrientDB, if you need it
  * Check https://help.sonatype.com/en/upgrading-to-nexus-repository-3-71-0-and-beyond.html
    before updating to this or any newer version
- Bugfixing:
  * NEXUS-43640: Removed the deprecated WATCH_NAMESPACE environment variable
                 from the HA OpenShift Operator. The Operator now deploys
                 correctly when installed in a specific namespace
  * NEXUS-43337: Content selectors to browse a specific directory listing now
                 work as expected; content selectors defined as path =~ ".*/"
                 work as expected
  * NEXUS-43268: Caching works as expected for pypi.org simple index pages
  * NEXUS-43080: The search_components table is now excluded from tableNames
                 when the clustering (HA) flag is disabled in
                 PostgreSQL environments. DBAs should no longer unexpectedly
                 see "ERROR: relation "search_components" does not exist"
                 messages
  * NEXUS-43037: Directly deleting a tag from OrientDB removes it from the
                 "tags" table as expected, unblocking database migration using
                 the newer migrator method that was implemented in 3.69.0
  * NEXUS-42974: Improved HA proxy cooperation to reduce failed requests
  * NEXUS-42529: Nexus Repository correctly serves Yum packages containing a
                 colon in the URL path without error
  * NEXUS-41935: The removed hyphens from the default values.yaml in the
                 nxrm-ha helm chart to accommodate an undocumented AWS Secret
                 Store CSI Provider Driver limitation
  * NEXUS-41552: Nexus Repository appropriately logs exceptions that the
                 "Docker - Delete unused manifests and images" task
                 might trigger
  * NEXUS-40192: When Nexus Repository receives more than one request to
                 create a new tag with the same name, one request will now
                 succeed while the other returns an error response alerting
                 the user that the tag already exists
  * NEXUS-39181: Added audit logging for User Token events. See feature
                 description in improvements listed above
  * NEXUS-37993: Converting an Azure blob store to a group blob store works
                 as expected without errors
  * NEXUS-34715: Publishing components using the Maven REST API while also
                 adding staging tags and then issuing a staging move to another
                 repository works as expected without error
  * NEXUS-31283: Attempts to upload components to a non-root Helm repository now
                 result in a graceful error message. Components can only be
                 uploaded to a root Helm repository
- Improvements:
  * H2 database available for OSS and is the default for new Installs
  * Rolling Upgrade Support for High Availability (HA) Deployments (PRO Only)
  * OCI 1.0/1.0.1 Specification Support for Docker
  * Manage HTTP Configuration via New REST API (PRO Only)
  * Additional Audit Logging
    + Creating a user token
    + Resetting a user token
    + Globally resetting all user tokens
    + The number of API keys removed after running the
      "Admin - Delete orphaned API keys" task
    + When user token configuration changes regarding repository access
      and authentication</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.72.0.04-1" date="1731758400">- Update to 3.72.0-04
- Bugfixes:
  * NEXUS-43651: Sending NuGet v2 requests to a Nexus NuGet v3 proxy
                 repository results in a 404 instead of a 200 response
  * NEXUS-43634: The Import task fails gracefully if a user attempts to import
                 a repository without specifying the drive letter
  * NEXUS-43608: Requests for version-specific scoped npm metadata return the
                 expected metadata. All Nexus Repository instances must be
                 updated to at least 3.72.0 to benefit from this fix and avoid
                 polluting downstream metadata
  * NEXUS-43602: Resolved an issue that was preventing some customers from
                 properly loading the Capabilities user interface
  * NEXUS-43562: Increased nexus.assetBlobCleanupTask.batchSize default value
                 from 100 to 1,000 to improve AssetBlobCleanupTask performance
  * NEXUS-43506: Updated cyclonedx-core-java version to version 9.0.4
  * NEXUS-43504: Created a new Search Configuration Capability to allow
                 administrators to configure a prefetch limit controlling the
                 number of times Nexus can return to the database to populate
                 a given page
  * NEXUS-43484: An enabled Default Role Realm remains enabled in an HA
                 cluster even if an HA node shuts down
  * NEXUS-43463: Attempting to import to an S3-backed repository with the hard
                 link option enabled now gracefully fails with improved
                 error messaging. Note that you cannot use hard links with
                 object storage blob stores like S3
  * NEXUS-43211: Resolved an issue that prevented some deployments from
                 starting after migrating from OrientDB to PostgreSQL due to a
                 'repeatable migration "NpmPCCSAndFirewallAuditCapabilityOutOfSyncMigrationStep" failed'
                 error
  * NEXUS-43007: Attempting an IQ server login with invalid credentials no
                 longer causes repeated error messages in the logs
  * NEXUS-42500: Azure blob store metrics migrate successfully during
                 HA migration
  * NEXUS-40641: Download links update as expected after generating a new
                 support zip while a previous one already exists
  * NEXUS-36285: When creating an LDAP external role mapping, Nexus Repository
                 does not query the LDAP server until the user has entered at
                 least three characters and stopped typing
- Improvements:
  * Upgrade to 3.72.0 with Zero Downtime (PRO High Availability
    Deployments Only)
  * View Published and Last Downloaded Date in Cleanup Preview
    CSV (PostgreSQL Only)
  * New Configurable Database Refetch Limit for Search in High
    Availability Deployments
  * Starting December 2024 deployments using PostgreSQL database will require
    at least PostgreSQL 14</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.73.0.12-1" date="1733313600">- Update to 3.73.0-12
- Bugfixes:
  * NEXUS-44488: You can no longer enable user tokens via capabilities and
                 must use the user token UI or API
  * NEXUS-44370: Switched order of staging delete and move operations to avoid
                 a concurrency issue when running staging move and cleanup
                 unused asset tasks at the same time
  * NEXUS-44350: The database migrator utility correctly migrates the
                 'soft_deleted_blobs' table from H2 to PostgreSQL and
                 PostgreSQL to H2
  * NEXUS-44337: Resolved an issue that was preventing the option to retain a
                 select number of previous versions when running cleanup from
                 working as expected
  * NEXUS-44017: The jmx.json is now included in support zips
  * NEXUS-44005: Cleanup preview works as expected in H2 environments without
                 an unexpected UI timeout
  * NEXUS-43977: Changed 'com.sonatype.nexus.repository.nuget.internal.v3.NugetProxySearchHandler'
                 log level to from WARN to DEBUG
  * NEXUS-43780: Updated Helm chart with examples of how to configure the
                 environment variable and key file for the secret
                 encryption keys
  * NEXUS-43764: After migrating from OrientDB to PostgreSQL, the browse
                 rebuild task only runs once
  * NEXUS-43758: After migrating to a PostgreSQL database, the search rebuild
                 index task only runs once
  * NEXUS-43587: Anonymous users are not able to browse after pulling a Docker
                 image unless they log in
  * NEXUS-43648: Special characters encode as expected for raw
                 proxy repositories
  * NEXUS-43413: The Maven rebuild metadata task provides meaningful error
                 messaging when it encounters invalid versions
  * NEXUS-43253: Made adjustments to improve 'getByDisplayPath'
                 query performance. This includes creating a new index on
                 'parent_id' that runs on startup. The new index may slow
                 startup time but will allow the retrieval of data based on
                 'node_ids' and 'parent_ids' in a very efficient way
  * NEXUS-43022: Grouping multiple proxy PyPi repositories works as expected
  * NEXUS-42751: Logs exceeding the 30MB file size limit are truncated with a
                 truncated marker/
  * NEXUS-42704: Nexus Repository cleans up yaml metadata as new metadata
                 is generated
  * NEXUS-42207: There are no longer UI errors when IQ is configured with
                 Firewall audit and quarantine disabled
  * NEXUS-37772: Yum metadata updates as expected after a cleanup policy
                 removes rpms
  * NEXUS-21389: Removed inaccurate information about the maximum number of
                 users that the users REST API will return
- Improvements:
  * Added a new index on "parent_id" that runs on startup, to improve
    "getByDisplayPath" query performance. The new index may slow startup time
    for large deployments but will allow the retrieval of data based on
    "node_id" and "parent_id" in a very efficient way
  * Sonatype Nexus Repository 3.73.0 introduces a re-encryption feature to
    mitigate CVE-2024-5764. This feature allows administrators to change the
    encryption key used to protect passwords and other
    confidential information.
    If you have not configured and run re-encryption and are still using the
    default key, you will see a health check warning with the message
    "Nexus was not configured with an encryption key and is using the Default key"
    after upgrading to 3.73.0+. Follow the steps in the re-encryption help
    documentation to resolve the warning:
    https://help.sonatype.com/en/re-encryption-in-nexus-repository.html
  * Support for Rust / Cargo Format (PRO Only)
  * Malware Warning Banner: When Sonatype Nexus Repository identifies malware
    components, a warning banner alerts both administrators and users in the
    Nexus Repository interface. This banner updates every 24 hours to reflect
    the latest malware detection status
- Dependency Changes:
  * Upgrade pax-url-aether from 2.6.7 to 2.6.12
  * Upgrade protobuf-java from 3.25.3 to 3.25.5
  * Upgraded keycloak-saml-* and keycloak-admin-client from 12.0.3 to 18.0.2</changelog>
  <changelog author="ulio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.74.0.05-1" date="1733400000">- Update to 3.74.0-05
- Bugfixes:
  * NEXUS-44569: The SecretsMigrationTask no longer fails if a value was not
                 encrypted previously. If not able to decrypt the old value,
                 the raw value can be used
  * NEXUS-44433: When searching via API or UI and filtering the version using
                 a wild card like “1.1.2.*,” Nexus Repository respects the third
                 digit in the filter and returns the limited data set expected
  * NEXUS-44175: Requests for version-specific npm package metadata return the
                 correct download URL
  * NEXUS-44088: Resolved an issue that was causing an illegal argument
                 exception when requesting Nuget v3 index.json in some
                 limited cases
  * NEXUS-43696: Added a new H2 database migration step so that the user is
                 warned if they are not in the db folder that they must move
                 the created H2 database to the db folder before
                 starting nexus
  * NEXUS-43518: If you set the "--logging.level.com.sonatype=TRACE" flag for
                 the database migrator, it will now log the parameters being
                 passed to SQL when there is a failure so that you can tell
                 which asset/component is causing the issue
  * NEXUS-41085: Updated Policy-Compliant Component Selection a for npm "next"
                 tag so that when filtering versions in component metadata,
                 the next attribute is correctly updated and does not contain
                 versions that no longer exist in the filtered metadata
  * NEXUS-39585: You can now use custom S3 regions when creating a blob store.
                 See the Custom S3 Region release note for details:
                 https://help.sonatype.com/en/sonatype-nexus-repository-3-74-0-release-notes.html#custom-region-lists-for-aws-blob-stores
  * NEXUS-21078: When using the Nexus /assets or /components API to get lists
                 of assets and components, the result set is no longer limited
                 to 10 items per page. We have increased the limit to 100
                 items per page
- Improvements:
  * Google Cloud Platform Support for Highly Available or Resilient Nexus
    Repository Deployments using Google Kubernetes Engine (GKE) (PRO Only)
    https://help.sonatype.com/en/resilient-nexus-repository-deployment-to-google-cloud.html
    https://help.sonatype.com/en/deploy-nexus-repository-to-google-cloud.html
  * Support for Google Cloud Blob Storage (PRO Only)
    https://help.sonatype.com/en/configuring-blob-stores.html
  * Automatic License Distribution for High Availability
    Deployments (PRO Only)
    https://help.sonatype.com/en/installing-and-updating-licenses.html
  * Custom Region Lists for AWS Blob Stores
    https://help.sonatype.com/en/configuring-blob-stores.html
  * AWS S3 Replication Buckets for Failover Support (PRO Only)
    https://help.sonatype.com/en/configuring-blob-stores.html
  * Support for External Secrets Operator for Highly Available Nexus
    Repository Deployments (PRO Only)
    https://help.sonatype.com/en/migrate-to-use-external-secrets-operator.html
  * Improved Search for Conan Format
    https://help.sonatype.com/en/searching-for-components.html#conan-repositories-162158</changelog>
</package>
<package pkgid="f0c97e9360a8fe7396923975a8992282a8bfd837" name="nexus3" arch="x86_64">
  <version epoch="0" ver="3.74.0.05" rel="1.el7.1"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.62.0.01-1" date="1699444800">- Update to Nexus 3.62.0-01
- Bugfixing:
  * NEXUS-40526: Fixed a display issue that was causing tag associations to be
                 missing from on raw components after migration to PostgreSQL.
                 Note: this was a display issue only and did not result in any
                 missing data
  * NEXUS-40425: Fixed an issue that existed in version 3.61.0 that was
                 preventing startup when .bak files existed under
                 restore-from-backup
  * NEXUS-40423: Resolved an issue in 3.61.0 where duplicate user tokens were
                 breaking upgrades. Upgrades now succeed and will detect
                 duplicate rows and produce a log warning
  * NEXUS-40313: User tokens work as expected with Conan repositories
  * NEXUS-40196: Created an advanced option for Sonatype Nexus Repository Pro
                 customers to clean up identical Docker image layers
                 across repositories.
                 See https://support.sonatype.com/hc/en-us/articles/22490107929619
                 for full details
  * NEXUS-40120: Made changes to reduce the number of queries performed when
                 running Nuget V2 FindPackagesById in PostgreSQL environments
  * NEXUS-39411: Resolved a database migrator issue that was causing some
                 NuGet downloads to fail after migrating to PostgreSQL
  * NEXUS-39150: Resolved a concurrency issue that was ocurring when running
                 Staging move and Cleanup unused assets task at the same time
  * NEXUS-38850: The database migrator --healthcheck option now also checks
                 the configuration database for corruptions in config classes
  * NEXUS-38257: Repository configuration changes that occur while a search
                 reindex task is running cause a lock exception after waiting
                 for 60 seconds; however, the repository now stays in a
                 stable state. A subsequent try to save the config change now
                 works as expected once the long-running task is complete
  * NEXUS-36836: Running the DeadBlobsFinder groovy script against a large
                 database no longer causes out of memory errors
  * NEXUS-32009: The last-modified date for hosted yum repositories now
                 matches the metadata rebuild date after migrating from
                 OrientDB to H2
  * NEXUS-22262: Made changes to address multiple issues that were causing
                 build failures due to failing to return maven-metadata.xml
                 from a group repository
- Improvements:
  * New Cleanup Preview Experience for Pro Customers Using PostgreSQL (PRO Only)
    See https://help.sonatype.com/repomanager3/nexus-repository-administration/repository-management/cleanup-policies
  * Azure HA Performance Data (PRO Only)
    See https://help.sonatype.com/repomanager3/product-information/sonatype-nexus-repository-system-requirements/system-requirements-for-high-availability-deployments/sonatype-nexus-repository-high-availability-performance-data-using-azure
  * Support Zip Improvements:
    HA deployments will now see a button that allows configuring the support
    zip options once but generate support zips for all nodes
    The download link for a node's latest support zip also remains available
    even if navigating away from and back to the Support Zip page
  * Expanded Audit Logging:
    The audit log now includes records for "Clear Cache" and
    "Change (server) order" LDAP events
    Added logging for the creation, update or removal of routing rules
  * Deployment Pattern Library:
    New library of deployment patterns specifically designed to address three
    primary concerns: resiliency, scalability, and distribution
    https://help.sonatype.com/repomanager3/planning-your-implementation/deployment-pattern-library
  * Notable Dependency Changes:
    Upgraded Jetty from version 9.4.51.v20230217 to version 9.4.53.v20231009
    Upgraded goodies from version 2.3.5 to version 2.3.6
    Upgraded eclipse-sisu from version 0.3.4 to version 0.3.5
    Upgraded guice from version 5.0.1 to version 6.0.0
  * High Availability-Clustering (HA-C) is now in extended maintenance and
    will be officially sunset in April 2024. Full details can are available at
    https://help.sonatype.com/docs/sonatype-sunsetting-information/sonatype-nexus-repository-3-feature-status
    and https://help.sonatype.com/docs/sonatype-sunsetting-information</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.63.0.01-1" date="1701864000">- Update to Nexus 3.63.0-01
- Bugfixing:
  * NEXUS-40623: Adjusted regex to handle requests for NuGet v3 versions with
                 double hyphens
  * NEXUS-40621: Sonatype Nexus Repository deployments using PostgreSQL will
                 appropriately return a 204 response when a user re-deploys a
                 component with the same tag to hosted repository when
                 re-deploy is allowed
  * NEXUS-40491: Resolved an issue where running the "Repair - Reconcile
                 component database from blob store" task with the integrity
                 check option enabled did not remove some assets even though
                 their .properties files did not exist
  * NEXUS-40421: Resolved an issue with the nexus.azure.server property not
                 being set properly
  * NEXUS-40244: The Reconcile component database from blob store task
                 restores only the expected blobs with the created/updated
                 times matching the originals
  * NEXUS-40007: Conditional Get (If-Modified-Since) on Yum group repo
                 metadata now appropriately returns a 200 response
                 when expected
  * NEXUS-39826: You are now able to proxy RubyGems.org escape gem
  * NEXUS-39675: PyPI package versions published using twine before upgrading
                 to 3.41.0 or later are now discoverable as expected.
                 The “Generate Missing SHA256 Checksums” and “Delete Index
                 Asset MD5 Metadata” tasks now run automatically after upgrade
  * NEXUS-39567: You are now able to proxy the RubyGems.org abstract gem
  * NEXUS-39464: Proxying scoped npm packages with an underscore in the name
                 now works without issue
  * NEXUS-39227: Proxying PyPI repositories with policy-compliant component
                 selection enabled is now appropriately incorporated into
                 etag updates
  * NEXUS-38587: Searching for Docker images with names containing a "/"
                 character now works as expected
  * NEXUS-36415: Resolved an issue that was causing cached proxied NuGet
                 package metadata that cannot be parsed to prevent content
                 from being updated from remote
- Improvements:
  * Enhancements to HA Helm Chart: Removed version numbers from Kubernetes
    objects that the Helm chart creates. Now it is possible to add custom
    labels and selectors. If you have existing volumes and volume mounts,
    you can also use those rather than having the Helm chart create new ones
  * Additional Audit Logging:
    - For SAML, log user login, logout, and config-changed events are
      now logged
    - For local authentication, LDAP, and Crowd, user login and logout
      events are now logged
  * Filter by Blob Store Name: The Repositories table filter to was enhanced
    to ensure you can search by blob store name. Simply type the blob store
    name into the table’s filter box to filter by blob store name
  * Dependency Upgrades: org.apache.santuario updated from version 2.3.0 to
    2.3.4 and org.json updated to 20231013</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.64.0.03-1" date="1704888000">- Update to Nexus 3.64.0-03
- Bugfixing:
  * NEXUS-23410: If previously configured SAML IdP field mapping
                 values change, Sonatype Nexus Repository will update the
                 user's profile with the new values as expected
  * NEXUS-31215: Fixed an issue that was causing some PyPi assets to be
                 missing from the Browse screen after migrating from OrientDB
                 to PostgreSQL
  * NEXUS-32028: Changed the logging level from WARN to DEBUG in the blobstore
                 class that tracks attributes of an asset being accessed in an
                 unexpected soft-deleted state. This will prevent spamming the
                 main nexus.log with messages at a WARN level for operations
                 considered normal when running the compact blob store task
  * NEXUS-35207: Fixed an issue that was preventing the GA last-modified date
                 from being updated in the maven-metadata.xml when deploying a
                 new GAV in some instances after migrating from Sonatype Nexus
                 Repository 2 to 3. As part of this fix, the Last Modified
                 date is no longer visible in the Browse UI view; you can
                 still tell when the maven-metadata.xml was last updated by
                 looking at the Blob Updated date in the UI or using the
                 REST API
  * NEXUS-35741: Added validation to prevent users from updating an existing
                 task with an invalid cron_expression
  * NEXUS-35956: Resolved an issue that was breaking pagination when a given
                 Docker repository is inside of a group
  * NEXUS-38856: The NotFoundCache is not populated with paths when a
                 repository is in an auto-blocked or manually blocked state
  * NEXUS-39935: There is no longer an error when installing pods
                 ('OpenSSL-Universal', '1.1.1100') via a Sonatype Nexus
                 Repository 3 Cocoapods proxy repository
  * NEXUS-40140, NEXUS-40712: The import and export tasks work as expected on
                 npm assets without unexpectedly skipping any and while
                 correctly preserving attributes
  * NEXUS-40345: Resolved an issue that was preventing certain npm packages
                 from being proxied from the official registry. This fix
                 included the following dependency version changes:
                 + upgraded jackson version from 2.15.0 to 2.15.3
                 + upgraded snakeyaml version from 2.0 to 2.2
                 + upgraded swagger version from 1.6.2 to 1.6.11
  * NEXUS-40495: Increased the browse node sequence limit for H2 and
                 PostgreSQL implementations so that the database schema will
                 not run out of sequence values.
  * NEXUS-40514: Any attempt to change the blob store of an existing
                 repository via the REST API will be rejected with an HTTP 400
                 response
  * NEXUS-40610: Resolved an issue that was preventing some users from
                 uploading Jruby gems with "-java" in their version names to
                 hosted ruby repositories
  * NEXUS-40639: FluentAssets and FluentComponents are now able to retrieve
                 assets in group repository storage
  * NEXUS-40771: Using "%3A" or a colon for URL encoded strings in raw
                 repositories now works as expected
  * NEXUS-40775: Database Migrator: Made filtering change to reduce load on
                 the database migrator, improving database migrator performance
  * NEXUS-40808: Database Migrator: The database migrator now gracefully
                 handles characters that PostgreSQL does not support
- Improvements:
  * Dependency Changes:
    + logback-classic and logback-core updated to 1.2.13
    + upgraded jackson version from 2.15.0 to 2.15.3
    + upgraded snakeyaml version from 2.0 to 2.2
    + upgraded swagger version from 1.6.2 to 1.6.11</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.65.0.02-1" date="1707480000">- Update to Nexus 3.65.0-02
- Bugfixing:
  * Many improvements to component search in high availability (HA)
    environments in this release to make searching and tagging more precise.
    Due to these changes, the same search query should now return fewer but
    more precise results
    Please keep this behavior change in mind when looking at your previously
    configured search and tagging queries
    Please also see the HA search differences documentation for full details
    about how HA search differs from non-HA search:
    https://help.sonatype.com/en/high-availability-deployment-options.html#search-feature-differences-in-an-ha-environment-161963
  * NEXUS-34334: If the rebuild index task triggers an ElasticSearchException,
                 one repository failing will no longer prevent task completion
                 or affect the other repositories. Added an error message to
                 alert the user if a repository does fail
  * NEXUS-34968: Attempting to download an asset with a missing blob from a
                 proxy repository in a PostgreSQL or H2 deployment no longer
                 results in an immediate 500 error. Sonatype Nexus Repository
                 automatically attempts to re-fetch the asset from remote
                 as expected
  * NEXUS-36807: Made changes to improve cleanup policy preview performance
  * NEXUS-39665: Resolved an issue that was preventing some installations of a
                 package from a group repository with a certain private proxy
                 repository member
  * NEXUS-39881: The package-specific index page for a Python package
                 requested from a proxy repository now displays the
                 non-truncated package name as expected
  * NEXUS-40111: Resolved an issue that was causing some Yum assets to be
                 shown as "components" in the Sonatype Nexus Repository UI
  * NEXUS-40213: Addressed an issue impacting HA deployments where tokens
                 after a wildcards in component searches were being dropped
                 (e.g. for searches like “nexus*core”).
  * NEXUS-40378: Searching components by exact tag in an HA environment now
                 returns an exact match as expected
  * NEXUS-40680: Associating a tag with a component used to operate on a
                 loose match; it now uses an exact match as expected.
                 For example, associating a tag with a .jar with the version
                 "1.0.0" used to associate that tag with all components that
                 had "1.0.0" in the version number. Now, it will associate
                 with the exact version match only unless you use a wildcard
  * NEXUS-40987: Resolved an issue that was causing some PostgreSQL HA
                 deployments to have excessive errors written to logs despite
                 requests working as expected
  * NEXUS-40994: In HA environments, performing an exact-match search for
                 components where the group ID or artifact ID contain an
                 underscore now returns exact-match results as expected
  * NEXUS-41211: Added clarifying documentation regarding changes in NuGet
                 client compatibility with Sonatype Nexus Repository:
                 Sonatype Nexus Repository release 3.43.0, added compatibility
                 with official NuGet v2 clients. The supported subset of the
                 legacy NuGet v2 protocol is the same as that supported by
                 Microsoft's NuGet Gallery, http://nuget.org. Use cases that
                 rely on the deprecated parts of the v2 API are not supported,
                 including many common Chocolatey use cases and some custom
                 OData queries
- Improvements:
  * Cleanup Policies for Maven and Docker Include Option to Retain
    Recent Versions (PRO Only)
    More powerful and flexible cleanup policies for Maven and Docker formats
    by allowing you to retain a certain number of most recent artifact
    versions regardless of if they meet other cleanup criteria
    Learn more about how to use this feature in the cleanup policies
    help documentation:
    https://help.sonatype.com/en/cleanup-policies.html
  * Significant Cleanup Performance Improvements for Pro Deployments Using a
    PostgreSQL Database (PRO Only)
    Running the original cleanup feature often takes significant time.
    This release has changes to significantly improve cleanup performance for
    those using a PostgreSQL database. The new cleanup feature takes an
    average time per component of 10.6 ms versus 17.2 ms for the original
    cleanup feature
    With this release, all Sonatype Nexus Repository Pro deployments using a
    PostgreSQL database will use the new cleanup implementation
    For more information, check the detailed Cleanup Performance Data:
    https://help.sonatype.com/en/cleanup-performance-data.html
  * Change Repository Blob Store Task Supports Group Repositories (PRO Only)
    While the "Admin - Change repository blob store" task originally supported
    hosted repositories only, Sonatype added support for using this task on
    proxy repositories last year. Now, Sonatype Nexus Repository Pro
    deployments on PostgreSQL databases can use this task on group
    repositories as well.
    Note that when you use this task on a group repository, it will only move
    metadata assets directly related to the group repository content id;
    it does not move or affect data in the repositories that are
    group members. Using this task on group repositories also requires a
    PostgreSQL database.
    Full details are available in the change repository blob store
    help documentation:
    https://help.sonatype.com/en/change-repository-blob-store.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.66.0.02-1" date="1709899200">- Update to Nexus 3.66.0-02
- Bugfixing:
  * NEXUS-41360: Database Migrator: Resolved an issue that was causing some
                 older versions of the Database Migrator to require very
                 high heap
  * NEXUS-41096: Added a new script to the help documentation for those on
                 PostgreSQL or H2 migrating from LDAP to SAML user tokens
  * NEXUS-41062: The merged metadata summary on the Browse screen now shows
                 the correct information for group Maven repositories
  * NEXUS-41068: Resolved an issue where the support zip download was not
                 working as expects in HA environments with a
                 nexus-context-path
  * NEXUS-41052: The metadata for hosted npm repositories in PostgreSQL
                 deployments no longer duplicates the "_id" property
  * NEXUS-40983: NuGet searches with the -PreRelease option now return the
                 expected results
  * NEXUS-40900: Fixed an issue with HA nodes upgrading before nodes with
                 older versions have been shut down. Startup will halt with a
                 warning until the older nodes have been gracefully shut down
  * NEXUS-40673: Resolved an issue where a 403 error message was displayed on
                 the welcome page for anonymous users
  * NEXUS-40612: Disabling the usage metrics flag will also remove the metric
                 aggregation task
  * NEXUS-40377: The custom search page will no longer display uncaught type
                 errors when adding new criteria
  * NEXUS-39915: The migration of asset timestamp metadata will now be done as
                 expected for raw repositories when moving from Nexus
                 Repository 2 to 3. A fix for Maven and NuGet will be covered
                 in a future release
  * NEXUS-39677: The blob store API now returns 404 response codes for
                 non-existent S3 type blob store names
  * NEXUS-38842: The export assets task no longer logs WARN messages when
                 running correctly
  * NEXUS-35478: The Swagger API UI documentation for repositories will now
                 show that the "blobStoreName" parameter is mandatory
  * NEXUS-32494: Database Migrator: The database migrator tool will not run
                 for incompatible older versions of Nexus Repository while
                 returning a message to upgrade
  * NEXUS-31786: Database Migrator: The database migrator tool now includes
                 more details on assets when logging errors
  * NEXUS-28593: The InterruptedException will no longer be logged when
                 recording a successful audit event
  * NEXUS-26581: Export will no longer report errors when the directory has
                 not been pre-created
- Improvements:
  * Usage Alerts for Deployments Using Embedded Databases (PRO Only)
    To help customers identify when it is time to evaluate their deployment
    model, Sonatype Nexus Repository OSS and Pro deployments that use an
    embedded database (OrientDB or H2) will now see in-product warnings when
    usage levels approach or exceed certain thresholds
  * Visual Progress Tracking forRepair - Rebuild repository browseTask
    When running the "Repair - Rebuild repository browse" task, the Status
    updates to show users how many assets are completed out of the total
    number of assets that must be processed. This improvement applies to
    deployments using PostgreSQL and H2 databases only
  * User Interface Improvements for Roles
    User interface is modified to move away from the previous transfer list
    methodology. Now, administrators will see a single column listing applied
    privileges and a button to modify the privileges applied to that role.
    Selecting the button opens a modal where administrators can filter by
    keyword and select privileges to apply to that role
  * Dependency changes:
    + org.jboss.resteasy: resteasy-multipart-provider: 3.15.3.Final upgraded
      to 3.15.6.Final
    + AWS SDK dependencies upgraded from from 1.12.299 to 1.12.658</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.0.03-1" date="1712491200">- Update to Nexus 3.67.0-03
- Bugfixing:
  * NEXUS-41832: Database Migrator: Fixed an issue that was causing some
                 migrations to a PostgreSQL or H2 database to fail due to
                 incorrect asset_blob_id values when assets only differed by a
                 version number in their paths
  * NEXUS-41312: Resolved an issue that was causing expensive queries from
                 getComponentCount
  * NEXUS-41286: Resolved an issue that was causing an internal task to throw
                 an error when running in some large deployments
  * NEXUS-41269: Support zips from deployments using PostgreSQL that was
                 configured using system properties now display information
                 as expected
  * NEXUS-41263: Added logging for routing rule blocked requests done via
                 group repository
  * NEXUS-40997: Added an error message to the UI that displays when a user
                 without the correct privileges attempts to save a
                 content selector
  * NEXUS-40952: The security/users/&lt;userid&gt;/&lt;realmid&gt;/user-token-reset REST
                 API will now provide a 400 error if the realm passed
                 is invalid.
                 The users REST API can accept the following realm names
                 associated with user tokens: LdapRealm, Crowd, SamlRealm,
                 and NexusAuthenticatingRealm.
  * NEXUS-36989: Selecting the Analyze Application button in component details
                 now displays the expected form
- Improvements:
  * Java 11 Support. Nexus 3.67.0 allows running on top of Java 11, but for
    now the package will remain using Java 1.8 by default until a future
    update, probably some time after CentOS7 is end of life
  * Updated Groovy dependency from 2.4.17 to 3.0.19
  * Updated PostgreSQL database driver from 42.6.0 to 42.7.2</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.0.03-2" date="1712750400">- No code changes, only two important caution notes from Sonatype. I decided
  to create 3.67.0.03-2 so users already in 3.67.0.03-1 at least can get
  this warning on the changelogs. Sonatype decided to just remove Nexus
  3.67.0-03 (tagged as 3.67.0.03-1 for the RPM) from their site.
- Sonatype is aware of a critical known cleanup policy issue in 3.67.0
  impacting those who meet the following criteria:
  * You had previously configured a cleanup policy with the ability to retain
    select latest versions (feature introduced in 3.65.0)
  * You recently upgraded to 3.67.0
  * You then modified a cleanup policy that had previously included the
    ability to retain select latest versions
  This issue prevents cleanup policies from honoring the configured ability
  to retain select latest versions. Running the "Admin - Cleanup repositories
  using their associated policies" task may soft delete more than intended,
  which would result in full removal should the "Admin - Compact blob store"
  task then run.
  CAUTION: If you meet the above criteria, DO NOT RUN the "Admin - Compact
   blob store" task
  CAUTION: If you have upgraded to 3.67.0 and are using cleanup policies
  with the ability to retain select latest versions, do not modify your
  cleanup policies
- Sonatype is aware of a known issue preventing our Docker Subdomain Routing
  feature from functioning in Sonatype Nexus Repository 3.67.0
  CAUTION: If you are using Docker Subdomain Routing, do not upgrade
  to 3.67.0
  Sonatype announced they will release a fix for this issue as soon
  as possible</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.67.1.01-1" date="1712836800">- Update to Nexus 3.67.1-01
- Bugfixing:
  * Critical Bug Fixes: Release 3.67.1 fixes two bugs found in the
    3.67.0 release: One impacting those who upgraded to 3.67.0 and then
    modified any previously existing Docker or Maven cleanup policies that
    were configured to retain select recent versions, and one preventing
    Docker subdomain routing from functioning
- Deprecation notice:
  * The legacy HA-C feature (Upcoming High Availability Clustering (HA-C)
    Sunset) will be sunset on April 17, 2024. The next release will remove
    the HA-C functionality in our May release.
    If you are still using HA-C, you should follow
    https://help.sonatype.com/en/migrating-to-an-ha-deployment-from-a-legacy-ha-c-or-a-resilient-deployment.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.68.0.04-1" date="1715947200">- Update to Nexus 3.68.0-04
- Bugfixing:
  * NEXUS-42263: SHA256 checksums are now generated for Helm in
                 PostgreSQL environments
  * NEXUS-42006: Resolved an API issue related to policy-compliant component
                 selection for PyPI where waived components were mistakenly
                 returned as quarantined
  * NEXUS-41997: A DEBUG level logger is no longer required to see a
                 DataAccessException message in the
                 DatabaseDistributedCooperationRegistry
  * NEXUS-41903: Made various performance improvements for HA deployments
  * NEXUS-41602: Resolved improper realm caching for Conan
  * NEXUS-41486: Components REST API works as expected for group repositories
                 in PostgreSQL deployments
  * NEXUS-41451: Users are able to reset their user tokens as expected in
                 environments using remote user tokens
  * NEXUS-41442: NuGet "is_latest_version" and "is_absolute_latest_version"
                 attributes update as expected during staging moves
  * NEXUS-41403: Database Migrator: Resolved an issue that was causing
                 excessive DB Migrator logging
  * NEXUS-41384: Namespace confusion protection works as expected for PyPI and
                 RubyGems repositories in deployments using a Postgres database
  * NEXUS-41372: Resolved an issue that was sometimes causing the compact blob
                 store task to cause an out-of-memory error
  * NEXUS-41337: Database Migrator: Resolved an issue that was causing database
                 migration to fail and misreport problem records on ERROR:
                 insert or update on table "&lt;format&gt;_asset" violates foreign
                 key constraint "fk_&lt;format&gt;_asset_blob."
  * NEXUS-41334: Nexus Repository now creates a single task rather than
                 multiple tasks when migrating Yum metadata into the database
                 during upgrade
  * NEXUS-41285: User tokens work on Yum group repositories as expected when
                 Require User Tokens for Repository Authentication is enabled
  * NEXUS-40344: Requests for GA-level metadata that needs to be rebuilt no
                 longer automatically starts a rebuild of the full
                 metadata tree
  * NEXUS-39956: Removed "nexus-hazelcast-plugin" from the source tree
  * NEXUS-39507: Improved error messaging when users attempt to use
                 Import/Export across different Nexus Repository versions; as
                 stated in the Import help documentation
                 (https://help.sonatype.com/en/repository-import.html),
                 Nexus Repository does not support importing files from an
                 older Nexus Repository version
  * NEXUS-38651: Uploading to a raw repository with PUT will generate md5,
                 sha1, sha256, and sha512 checksums. This is introduced as a
                 new feature but also recorded in this table for customers who
                 were following this issue ID
  * NEXUS-38451: Made adjustments so that Nexus Repository generates fewer
                 browseComponentAssets SQL queries when finding packages by ID
                 in NuGet v2 proxy repositories
  * NEXUS-34192: Resolved an issue with SAML authentication related to
                 the NXSESSIONID
  * NEXUS-31745: Improved error messaging on Tag API when invalid continuation
                 token is passed in
- Improvements:
  * Nexus Repository Pro deployments using a PostgreSQL database can now see
    repository sizes displayed in the repositories listing under
    "Administration → Repository → Repositories" (PRO Only)
  * Uploading to Raw Repository with API now also generates SHA256 and
    SHA512 Checksums
  * When creating a new role or modifying the applied privileges and roles for
    an existing role, administrators can now use an asterisk as a wildcard in
    the search bar
  * Users and administrators can now see more detailed information about the
    "Repair - Rebuild repository browse" task’s progress as it runs. The task
    management table under "Administration → Tasks" now displays the task’s
    completion percentage to provide more insight into how long the task will
    take to complete. We will continue to add this functionality in future for
    additional tasks
  * Sunsetting of Legacy High Availability Clustering. HA-C is fully removed
    from Nexus Repository, and additional features or bug fixes related to
    legacy HA-C will no longer be provided. Sonatype Support will provide
    best-effort guidance to help PRO customers adopting one of the newer High
    Availability deployment solutions. Se also help documentation for:
    + Migrating to an HA deployment from Legacy HA-C
      https://help.sonatype.com/en/migrating-to-an-ha-deployment-from-a-legacy-ha-c-or-a-resilient-deployment.html
    + Migrating from legacy HA-C to a single instance deployment
      https://help.sonatype.com/en/migrating-from-legacy-ha-c-to-a-single-instance.html
    Nexus Repository will not start for any deployments that use legacy HA-C,
    ensure you have migrated off of legacy HA-C before upgrading to version
    3.68.0 or beyond
    * Dependency Updates in 3.68.0:
      + Updated axios from 0.21.4 to 0.27.2
      + Updated jackson2 from 2.15.3 to 2.17.0</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.68.1.02-1" date="1715947201">- Update to Nexus 3.68.1-02
- Bugfixing:
  * CVE-2024-4956: Fix for a critical vulnerability impacting all Sonatype
                   Nexus Repository 3 deployments. This vulnerability can
                   allow a specially crafted URL to return any file as a
                   download, including system files outside of Nexus
                   Repository application scope.
                   See https://support.sonatype.com/hc/en-us/articles/29416509323923
                   for more details</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.69.0.02-1" date="1717675200">- Update to Nexus 3.69.0-02
  * NEXUS-42786: Exporting npm assets with application/x-gzip content type now
                 works as expected
  * NEXUS-42560: The YumAbsouteUrlRemover no longer recalculates or updates
                 checksums for XML files containing the xml:base attribute;
                 this change greatly improves performance
  * NEXUS-42434: Adjusted all places in AuditDTO where ObjectMapper was
                 instantiated to use the injected global mapper. Users should
                 no longer see errors in the logs when uploading assets
  * NEXUS-42411: Database Migrator: Reduced log noise by adjusting the
                 ProcessChunkListener to log migration progress in time
                 intervals (e.g., showing how many records were migrated each
                 10 seconds)
  * NEXUS-42409: Firewall works with Conda format as expected
  * NEXUS-42276: The System Information page appears as expected with
                 no NullPointerException
  * NEXUS-41974: Running the "Cleanup unused asset blobs" task and
                 "Staging move" in parallel now works as expected
  * NEXUS-41862: Nexus Repository logs for deployments using PyPI
                 Policy-Compliant Component Selection now only include
                 filtered versions
  * NEXUS-41692: User tokens for Crowd-backed users now use auth caching
                 as expected
  * NEXUS-41385: Downloading files through a proxy PyPI repository no longer
                 leaves files in the blob store’s temporary directory
  * NEXUS-41374: Nexus Repository no longer logs an ERROR message when a
                 remote PyPI repository does not have a requested package
  * NEXUS-41250: The nx-tasks-run privilege details in the Nexus Repository
                 user interface no longer display an error under the
                 Actions section
  * NEXUS-41218: Added a property to nexus.properties that users may configure
                 in order to reduce overly verbose audit logging for NuGet v2
                 on  deployments using PostgreSQL. To turn off attributes
                 logging, add the following to:
                 nexus.properties: nexus.audit.attribute.changes.enabled=true
  * NEXUS-41403: Reduced excessive Database Migrator logging
  * NEXUS-39085: To ensure consistency across the REST API, we updated all
                 asset ID formats to use only the long ID
  * NEXUS-37307: The Crowd realm user cache is now used for npm client bearer
                 token-authenticated requests
  * NEXUS-36248: As mentioned in the improvements above, we have extended the
                 users API to allow you to include a realm parameter when
                 deleting a user
  * NEXUS-31205: Adjusted support zip algorithms to not truncate any support
                 zip files other than log files
  * NEXUS-26828: When a remote Docker repository indicates that something is
                 “not found,” the proxy repository no longer logs a
                 WARN message
  * NEXUS-23052: As mentioned in the improvements above, Administrators can
                 now delete cached authenticated SAML user records via user
                 administration section in the Sonatype Nexus Repository
                 user interface
  * NEXUS-17740: Created a "Repair - Recalculate blob store storage task" that
                 can be run if blob store blob count and total size display
                 incorrect information. This is a slow-running task and should
                 be used with careful consideration of available
                 system resources. See the published performance testing
                 for details:
                 https://help.sonatype.com/en/recalculate-blob-store-storage-performance-testing.html
- Improvements
  * Java 17 Support for Deployments Using H2 or PostgreSQL Databases, but
    not OrientDB (PRO Only)
    NOTE: This package is still based in Java 8 for the time being.
  * Configure User Token Expiration (PRO Only)
  * SAML Integration Improvements:
    + You can now optionally specify a user realm source when deleting a user
      via the Users API
    + Administrators can also now delete cached authenticated SAML user
      records via user administration section in the Sonatype Nexus
      Repository user interface
    * If a user's IdP field mappings change, Nexus Repository now
      automatically updates the user’s profile to show the new values
  * Dependency Updates in 3.69.0:
    + org.bouncycastle: bcprov-jdk15to18 upgraded from 1.75 to 1.78.1</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.0.03-1" date="1720699200">- Update to Nexus 3.70.0-03
- WARNINGS:
  * 3.70.0 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.
  * 3.70.0 upgrades the embedded H2 database to version 2.2.244. As there are
    considerable changes between version 1.4.200 and 2.2.244, those using an
    H2 database will need to take some additional steps to upgrade to Nexus
    Repository 3.70.0
    3.69.0, added an "Admin - Export SQL database to script task" you can
    use to create a SQL script export of your H2 database.
    If you are using an H2 database, you will need to run this task and follow
    the instructions at https://help.sonatype.com/en/upgrade-h2.html
    instructions in order to upgrade to release 3.70.0.
    This means that you must upgrade to version 3.69.0 before upgrading
    to 3.70.0+
    If you are unsure what database your deployment is using, follow the help
    documentation for determining your current database:
    https://help.sonatype.com/en/migrating-to-a-new-database.html#determining-current-database-162010
- Bugfixing:
  * NEXUS-43307: Updated documentation to accurately state that access to
                 SAML UI and API requires nx-all privileges
  * NEXUS-42854: The npm view command works as expected for scoped packages
  * NEXUS-42336: Database records that cause exceptions during database
                 migration are appropriately logged
  * NEXUS-39818: Running npm audit should no longer result in
                 unexpected exceptions
  * NEXUS-39799: In Yum repositories, all pathnames in the filelist.xml.gz
                 file are properly escaped
  * NEXUS-39462: If an asset’s format is incorrect, the Database Migrator
                 will continue with migration and skip corrupted records
  * NEXUS-22888: Added componentId validation when trying to view an asset
                 that does not have a component. If the componentId is an
                 empty string, string of blank spaces, null, or undefined,
                 then the LifeCycle Component panel is not displayed
- Improvements:
  * Create and Manage Cleanup Policies via New REST API (PRO Only)
    https://help.sonatype.com/en/cleanup-policies-api.html
  * Create and Manage Tasks via API (PRO Only)
    https://help.sonatype.com/en/tasks-api.html
  * Retrieve and Set IQ Audit and Quarantine Statuses via API (PRO Only)
    https://help.sonatype.com/en/lifecycle-api.html
  * New Database Migrator Flow to improve performance and reliability.
    Check https://help.sonatype.com/en/migrating-to-a-new-database.html for
    the new steps for migrating your database
    If you need to use an older version of the Database Migrator, you can
    still read the legacy database migrator documentation at
    https://help.sonatype.com/en/legacy-database-migration.html</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.1.02-1" date="1724846400">- Update to 3.70.1-02
- Fix for UI issues with custom context path in Nexus Repository 3.70.0
  This issue only impacted the UI and did not impact other functionality such
  as for example requests for components.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.2.01-1" date="1725624000">- Update to 3.70.2-01
- Fix for a Database Migrator issue that caused some users to see duplicate
  key errors after migrating from OrientDB to H2
- WARNINGS:
  * 3.70.2 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.3.01-1" date="1730116800">- Update to 3.70.3-01
- Dependency Updates in 3.70.3:
  * Upgraded protobuf-java from 1.36.0 to 3.25.5
  * Upgraded pax-url-aether from 2.6.7 to 2.6.12
- WARNINGS:
  * 3.70.3 is the final version supporting OrientDB, Java 8, and Java 11.
    3.71.0+ will require either an H2 or PostgreSQL database and Java 17.
    This means that this is the latest release that will build for CentOS7
    or any other clones from third party providers.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.70.3.01-2" date="1730548800">- This is the final warning about the migration from OrientDB to H2/PostgreSQL
  and from Java 1.8 to Java 17!
- The migration to Java 17 is performed automatically by the package, if the
  OS provides it
- The migration to H2/PostgreSQL needs to be performed MANUALLY. If you are
  still using OrientDB (you did not perform a migration, Make sure you read
  https://help.sonatype.com/en/migrating-to-a-new-database.html
  and run the procedure before updating to Nexus 3.71.0 or any newer version!</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.71.0.06-1" date="1731672000">- Update to 3.71.0-06
- WARNINGS:
  * Removed support for CentOS7, Amazon Linux 2018.03 and any other compatible
    systems without Java 17
  * Removed support for OrientDB, if you need it
  * Check https://help.sonatype.com/en/upgrading-to-nexus-repository-3-71-0-and-beyond.html
    before updating to this or any newer version
- Bugfixing:
  * NEXUS-43640: Removed the deprecated WATCH_NAMESPACE environment variable
                 from the HA OpenShift Operator. The Operator now deploys
                 correctly when installed in a specific namespace
  * NEXUS-43337: Content selectors to browse a specific directory listing now
                 work as expected; content selectors defined as path =~ ".*/"
                 work as expected
  * NEXUS-43268: Caching works as expected for pypi.org simple index pages
  * NEXUS-43080: The search_components table is now excluded from tableNames
                 when the clustering (HA) flag is disabled in
                 PostgreSQL environments. DBAs should no longer unexpectedly
                 see "ERROR: relation "search_components" does not exist"
                 messages
  * NEXUS-43037: Directly deleting a tag from OrientDB removes it from the
                 "tags" table as expected, unblocking database migration using
                 the newer migrator method that was implemented in 3.69.0
  * NEXUS-42974: Improved HA proxy cooperation to reduce failed requests
  * NEXUS-42529: Nexus Repository correctly serves Yum packages containing a
                 colon in the URL path without error
  * NEXUS-41935: The removed hyphens from the default values.yaml in the
                 nxrm-ha helm chart to accommodate an undocumented AWS Secret
                 Store CSI Provider Driver limitation
  * NEXUS-41552: Nexus Repository appropriately logs exceptions that the
                 "Docker - Delete unused manifests and images" task
                 might trigger
  * NEXUS-40192: When Nexus Repository receives more than one request to
                 create a new tag with the same name, one request will now
                 succeed while the other returns an error response alerting
                 the user that the tag already exists
  * NEXUS-39181: Added audit logging for User Token events. See feature
                 description in improvements listed above
  * NEXUS-37993: Converting an Azure blob store to a group blob store works
                 as expected without errors
  * NEXUS-34715: Publishing components using the Maven REST API while also
                 adding staging tags and then issuing a staging move to another
                 repository works as expected without error
  * NEXUS-31283: Attempts to upload components to a non-root Helm repository now
                 result in a graceful error message. Components can only be
                 uploaded to a root Helm repository
- Improvements:
  * H2 database available for OSS and is the default for new Installs
  * Rolling Upgrade Support for High Availability (HA) Deployments (PRO Only)
  * OCI 1.0/1.0.1 Specification Support for Docker
  * Manage HTTP Configuration via New REST API (PRO Only)
  * Additional Audit Logging
    + Creating a user token
    + Resetting a user token
    + Globally resetting all user tokens
    + The number of API keys removed after running the
      "Admin - Delete orphaned API keys" task
    + When user token configuration changes regarding repository access
      and authentication</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.72.0.04-1" date="1731758400">- Update to 3.72.0-04
- Bugfixes:
  * NEXUS-43651: Sending NuGet v2 requests to a Nexus NuGet v3 proxy
                 repository results in a 404 instead of a 200 response
  * NEXUS-43634: The Import task fails gracefully if a user attempts to import
                 a repository without specifying the drive letter
  * NEXUS-43608: Requests for version-specific scoped npm metadata return the
                 expected metadata. All Nexus Repository instances must be
                 updated to at least 3.72.0 to benefit from this fix and avoid
                 polluting downstream metadata
  * NEXUS-43602: Resolved an issue that was preventing some customers from
                 properly loading the Capabilities user interface
  * NEXUS-43562: Increased nexus.assetBlobCleanupTask.batchSize default value
                 from 100 to 1,000 to improve AssetBlobCleanupTask performance
  * NEXUS-43506: Updated cyclonedx-core-java version to version 9.0.4
  * NEXUS-43504: Created a new Search Configuration Capability to allow
                 administrators to configure a prefetch limit controlling the
                 number of times Nexus can return to the database to populate
                 a given page
  * NEXUS-43484: An enabled Default Role Realm remains enabled in an HA
                 cluster even if an HA node shuts down
  * NEXUS-43463: Attempting to import to an S3-backed repository with the hard
                 link option enabled now gracefully fails with improved
                 error messaging. Note that you cannot use hard links with
                 object storage blob stores like S3
  * NEXUS-43211: Resolved an issue that prevented some deployments from
                 starting after migrating from OrientDB to PostgreSQL due to a
                 'repeatable migration "NpmPCCSAndFirewallAuditCapabilityOutOfSyncMigrationStep" failed'
                 error
  * NEXUS-43007: Attempting an IQ server login with invalid credentials no
                 longer causes repeated error messages in the logs
  * NEXUS-42500: Azure blob store metrics migrate successfully during
                 HA migration
  * NEXUS-40641: Download links update as expected after generating a new
                 support zip while a previous one already exists
  * NEXUS-36285: When creating an LDAP external role mapping, Nexus Repository
                 does not query the LDAP server until the user has entered at
                 least three characters and stopped typing
- Improvements:
  * Upgrade to 3.72.0 with Zero Downtime (PRO High Availability
    Deployments Only)
  * View Published and Last Downloaded Date in Cleanup Preview
    CSV (PostgreSQL Only)
  * New Configurable Database Refetch Limit for Search in High
    Availability Deployments
  * Starting December 2024 deployments using PostgreSQL database will require
    at least PostgreSQL 14</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.73.0.12-1" date="1733313600">- Update to 3.73.0-12
- Bugfixes:
  * NEXUS-44488: You can no longer enable user tokens via capabilities and
                 must use the user token UI or API
  * NEXUS-44370: Switched order of staging delete and move operations to avoid
                 a concurrency issue when running staging move and cleanup
                 unused asset tasks at the same time
  * NEXUS-44350: The database migrator utility correctly migrates the
                 'soft_deleted_blobs' table from H2 to PostgreSQL and
                 PostgreSQL to H2
  * NEXUS-44337: Resolved an issue that was preventing the option to retain a
                 select number of previous versions when running cleanup from
                 working as expected
  * NEXUS-44017: The jmx.json is now included in support zips
  * NEXUS-44005: Cleanup preview works as expected in H2 environments without
                 an unexpected UI timeout
  * NEXUS-43977: Changed 'com.sonatype.nexus.repository.nuget.internal.v3.NugetProxySearchHandler'
                 log level to from WARN to DEBUG
  * NEXUS-43780: Updated Helm chart with examples of how to configure the
                 environment variable and key file for the secret
                 encryption keys
  * NEXUS-43764: After migrating from OrientDB to PostgreSQL, the browse
                 rebuild task only runs once
  * NEXUS-43758: After migrating to a PostgreSQL database, the search rebuild
                 index task only runs once
  * NEXUS-43587: Anonymous users are not able to browse after pulling a Docker
                 image unless they log in
  * NEXUS-43648: Special characters encode as expected for raw
                 proxy repositories
  * NEXUS-43413: The Maven rebuild metadata task provides meaningful error
                 messaging when it encounters invalid versions
  * NEXUS-43253: Made adjustments to improve 'getByDisplayPath'
                 query performance. This includes creating a new index on
                 'parent_id' that runs on startup. The new index may slow
                 startup time but will allow the retrieval of data based on
                 'node_ids' and 'parent_ids' in a very efficient way
  * NEXUS-43022: Grouping multiple proxy PyPi repositories works as expected
  * NEXUS-42751: Logs exceeding the 30MB file size limit are truncated with a
                 truncated marker/
  * NEXUS-42704: Nexus Repository cleans up yaml metadata as new metadata
                 is generated
  * NEXUS-42207: There are no longer UI errors when IQ is configured with
                 Firewall audit and quarantine disabled
  * NEXUS-37772: Yum metadata updates as expected after a cleanup policy
                 removes rpms
  * NEXUS-21389: Removed inaccurate information about the maximum number of
                 users that the users REST API will return
- Improvements:
  * Added a new index on "parent_id" that runs on startup, to improve
    "getByDisplayPath" query performance. The new index may slow startup time
    for large deployments but will allow the retrieval of data based on
    "node_id" and "parent_id" in a very efficient way
  * Sonatype Nexus Repository 3.73.0 introduces a re-encryption feature to
    mitigate CVE-2024-5764. This feature allows administrators to change the
    encryption key used to protect passwords and other
    confidential information.
    If you have not configured and run re-encryption and are still using the
    default key, you will see a health check warning with the message
    "Nexus was not configured with an encryption key and is using the Default key"
    after upgrading to 3.73.0+. Follow the steps in the re-encryption help
    documentation to resolve the warning:
    https://help.sonatype.com/en/re-encryption-in-nexus-repository.html
  * Support for Rust / Cargo Format (PRO Only)
  * Malware Warning Banner: When Sonatype Nexus Repository identifies malware
    components, a warning banner alerts both administrators and users in the
    Nexus Repository interface. This banner updates every 24 hours to reflect
    the latest malware detection status
- Dependency Changes:
  * Upgrade pax-url-aether from 2.6.7 to 2.6.12
  * Upgrade protobuf-java from 3.25.3 to 3.25.5
  * Upgraded keycloak-saml-* and keycloak-admin-client from 12.0.3 to 18.0.2</changelog>
  <changelog author="ulio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.74.0.05-1" date="1733400000">- Update to 3.74.0-05
- Bugfixes:
  * NEXUS-44569: The SecretsMigrationTask no longer fails if a value was not
                 encrypted previously. If not able to decrypt the old value,
                 the raw value can be used
  * NEXUS-44433: When searching via API or UI and filtering the version using
                 a wild card like “1.1.2.*,” Nexus Repository respects the third
                 digit in the filter and returns the limited data set expected
  * NEXUS-44175: Requests for version-specific npm package metadata return the
                 correct download URL
  * NEXUS-44088: Resolved an issue that was causing an illegal argument
                 exception when requesting Nuget v3 index.json in some
                 limited cases
  * NEXUS-43696: Added a new H2 database migration step so that the user is
                 warned if they are not in the db folder that they must move
                 the created H2 database to the db folder before
                 starting nexus
  * NEXUS-43518: If you set the "--logging.level.com.sonatype=TRACE" flag for
                 the database migrator, it will now log the parameters being
                 passed to SQL when there is a failure so that you can tell
                 which asset/component is causing the issue
  * NEXUS-41085: Updated Policy-Compliant Component Selection a for npm "next"
                 tag so that when filtering versions in component metadata,
                 the next attribute is correctly updated and does not contain
                 versions that no longer exist in the filtered metadata
  * NEXUS-39585: You can now use custom S3 regions when creating a blob store.
                 See the Custom S3 Region release note for details:
                 https://help.sonatype.com/en/sonatype-nexus-repository-3-74-0-release-notes.html#custom-region-lists-for-aws-blob-stores
  * NEXUS-21078: When using the Nexus /assets or /components API to get lists
                 of assets and components, the result set is no longer limited
                 to 10 items per page. We have increased the limit to 100
                 items per page
- Improvements:
  * Google Cloud Platform Support for Highly Available or Resilient Nexus
    Repository Deployments using Google Kubernetes Engine (GKE) (PRO Only)
    https://help.sonatype.com/en/resilient-nexus-repository-deployment-to-google-cloud.html
    https://help.sonatype.com/en/deploy-nexus-repository-to-google-cloud.html
  * Support for Google Cloud Blob Storage (PRO Only)
    https://help.sonatype.com/en/configuring-blob-stores.html
  * Automatic License Distribution for High Availability
    Deployments (PRO Only)
    https://help.sonatype.com/en/installing-and-updating-licenses.html
  * Custom Region Lists for AWS Blob Stores
    https://help.sonatype.com/en/configuring-blob-stores.html
  * AWS S3 Replication Buckets for Failover Support (PRO Only)
    https://help.sonatype.com/en/configuring-blob-stores.html
  * Support for External Secrets Operator for Highly Available Nexus
    Repository Deployments (PRO Only)
    https://help.sonatype.com/en/migrate-to-use-external-secrets-operator.html
  * Improved Search for Conan Format
    https://help.sonatype.com/en/searching-for-components.html#conan-repositories-162158</changelog>
</package>
</otherdata>