//Cloudogu EcoSystem Docs

Release Notes

Below you will find the release notes for the Sonatype Nexus Dogu.

Technical details on a release can be found in the corresponding Changelog.

[Unreleased]

[v3.96.4-1] - 2026-10-01

Changed

  • This update contains reworked Nexus user interfaces, which changed the navigation and the appearance of some pages.

Known Issues

  • This Nexus version contains an error in the limiting of login attempts. After too many failed logins, access can stay blocked for up to 15 minutes. Further attempts restart this period, even with correct credentials. If you have login problems, wait 15 minutes before you make another attempt. Sonatype is working on a fix.

Security

[v3.86.2-9] - 2026-09-02

Changed

  • The documentation of old version was removed. References to Classic CES were replaced by MN CES.

[v3.86.2-8] - 2026-09-01

  • We have only made technical changes. You can find more details in the changelogs.

[v3.86.2-7] - 2026-07-06

Security

[v3.86.2-6] - 2026-03-26

  • This release resolves an issue on setting the maximum ammount of open datebase connections

[v3.86.2-5] - 2026-03-18

Fixed

  • [#193] Do not send empty cleanup policy while creating repo via nexus api

    • This mainly concerns the baseline dogu, since when creating the SA there, an additional repository is also created.

[v3.86.2-4] - 2026-02-24

Changed

  • Updating the certificate truststore at every reboot instead of just the very first one; #188

[v3.86.2-3] - 2026-02-18

Security

  • [#185] Fixed CVE-2025-68121

[v3.86.2-2] - 2026-01-29

Security

[v3.86.2-1] - 2025-12-15

Changed

  • Update of the Nexus version to 3.86.2-01

[v3.82.0-3] - 2025-12-04

Fixed

  • Fixed migration from once.lock to once.timestamp

    • On migrations from Nexus v3.75.0-3 to higher versions, claim/once will now not be executed again if it had already been executed once.

[v3.82.0-2] - 2025-09-19

Added

  • Added new configuration key to make the amount of database connections nexus occupies configurable

    • database/maxConnections, default: 30

[v3.82.0-1] - 2025-08-26

Changed

  • Update of the Nexus version to 3.82.0-08

    • Starting with this version, Nexus uses a postgresql database instead of the previous OrientDB/H2
    • When upgrading from 3.70.2-5 and 3.75.0-1, the database is automatically migrated
    • It is not possible to upgrade from a pre-3.70.2-x version to this version. In this case, you must first upgrade to the latest 3.70.2 version.
    • In airgapped systems, version 3.70.2-5/3.75.0-1 must be installed first, as the required migration jar is located in this version
    • Attention: The migration requires at least 16GB of RAM

[v3.75.0-6] - 2025-06-27

Added

  • Adds a configuration option to provision data in repositories created by claims. See docs for usage.

[v3.75.0-5] - 2025-04-25

Changed

  • Usage of memory and CPU was optimized for the Kubernetes Mutlinode environment.

[v3.75.0-4] - 2025-03-27

  • Fix "claim/once" for CES Multinode

    • If claim/once.timestamp set to a current timestamp, it will execute the "claim/once"-script. The timestamp has to be in the format YYYY-MM-DD hh:mm:ss (e.g. 2025-03-20 09:30:00). Before execution this timestamp is compared with the timestamp from the last execution of the "claim/once"-script. If the timestamp entered here is “newer”, the script will be executed.
    • claim/once.lock is no longer supported. Use claim/once.timestamp instead.

[v3.75.0-3] - 2025-02-13

We have only made technical changes. You can find more details in the changelogs.

[v3.75.0-2] - 2025-01-27

We have only made technical changes. You can find more details in the changelogs.

[v3.75.0-1] - 2024-12-19

  • Update of the Nexus version to 3.75.0-6
  • Nexus now uses an H2 database instead of an OrientDb

    • The database migration will be performed automatically when upgrading from 3.70.x
    • It is not possible to upgrade from a pre-3.70.2-x version to this version. In this case update to the newest 3.70.2-x version first
    • For airgapped environments make sure to upgrade to 3.70.2-5 first, as this version contains the needed migration jar
    • Attention: The migration needs at least 16Gb of memory

3.70.2-5

We have only made technical changes. You can find more details in the changelogs.

3.70.2-4

We have only made technical changes. You can find more details in the changelogs.

3.70.2-3

We have only made technical changes. You can find more details in the changelogs.

3.70.2-2

We have only made technical changes. You can find more details in the changelogs.

3.70.2-1

  • Update of the Nexus Version to 3.70.2-01
  • Claim-Once can be reused after upgrading via blueprint

3.68.1-6

  • The internal password generation has been secured by a new CARP version.
  • Relicense own code to AGPL-3.0-only

3.68.1-5

  • Fixes the problem that BasicAuth requests led to locks in the CAS.

3.68.1-4

  • Fix of critical CVE-2024-41110 in library dependencies. This vulnerability could not be actively exploited, though.

3.68.1-3

We have only made technical changes. You can find more details in the changelogs.

3.68.1-2

We have only made technical changes. You can find more details in the changelogs.

3.68.1-1

The release fixes critical security vulnerabilities (CVE-2024-4956). An update is therefore recommended.

  • The Dogu now offers the Sonatype Nexus version 3.68.1. The release notes of Sonatype Nexus can be found here.