Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump nexus to 3.68.1 version #80

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

Bump nexus to 3.68.1 version #80

wants to merge 6 commits into from

Conversation

DmitriyStoyanov
Copy link
Contributor

@DmitriyStoyanov DmitriyStoyanov commented Apr 18, 2023 •
edited
Loading

Bump nexus to 3.68.1 version
According to GHSA-6cgv-69mq-8w7x - https://support.sonatype.com/hc/en-us/articles/29416509323923-CVE-2024-4956-Nexus-Repository-3-Path-Traversal-2024-05-16

Release notes can be found here: 3.68.1-release-notes

Also updated alpine version to 3.18
Used java8 version of nexus

@DmitriyStoyanov
Copy link
Contributor Author

DmitriyStoyanov commented Apr 19, 2023 •
edited
Loading

ha, they released new version 3.52.0 yesterday, so better to change this MR to newer version :) I will do it
https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/sonatype-nexus-repository-3.52.0-release-notes

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.51.0 version Bump nexus to 3.52.0 version Apr 19, 2023
@DmitriyStoyanov
Copy link
Contributor Author

MR was updated with new version 3.52.0

@DmitriyStoyanov
Copy link
Contributor Author

We already have 3.59.0 release, so need to update it to that version
release notes - https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/sonatype-nexus-repository-3.59.0-release-notes

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.52.0 version Bump nexus to 3.59.0 version Aug 31, 2023
@DmitriyStoyanov
Copy link
Contributor Author

Updated this PR with 3.59.0 version of Nexus

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.59.0 version Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

Please do not merge yet, there are also changes in urls now
Will prepare fix for that

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.68.1 version Draft: Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

There are two versions now with Java8 and Java11
image

@DmitriyStoyanov
Copy link
Contributor Author

Support of Java11 was appeared from 3.67.0 version https://help.sonatype.com/en/sonatype-nexus-repository-3-67-0-release-notes.html

@DmitriyStoyanov
Fix tarball url
e4aab45 
From 3.67.0 version, there are support of Java11 version, because of that urls changed with two variants. Right now, to not change java 8, we will use urls with java8 support. In future we can upgrade to java11
@DmitriyStoyanov
Fixed image name in README
fdc6605
@DmitriyStoyanov DmitriyStoyanov changed the title Draft: Bump nexus to 3.68.1 version Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

After no updates from this repo owner, I've created one MR in my forked repo: DmitriyStoyanov#1
Created autobuild image on every push to check if container can be build, also created autopublish image on every tag, so If someone needs latest images, you can use images build on my own and published into dockerhub https://hub.docker.com/r/scorpio2002/docker-nexus

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@DmitriyStoyanov