Artifactory Changelog

What's new in Artifactory 3.7.0

May 18, 2015
  • In addition to implementing many bug fixes and minor improvements, this release introduces several significant feature updates to Artifactory:
  • DOCKER V2:
  • Artifactory leaps forward supporting the latest changes in Docker.
  • RANGE REQUESTS
  • Artifactory now supports HTTP Range Requests which enable smart and efficient multi-threaded download of large files by letting you specify a range of bytes that should be downloaded when files are streamed to you.
  • ARCHITECTURE-INDEPENDENT DEBIAN PACKAGES:
  • You can now specify "all" as the architecture of your Debian packages. Artifactory will add the package to the index of all architectures available under the same Distribution and Component.
  • MAIN UPDATES
  • This release includes the following main updates:
  • Support for Docker Registry V2 API.
  • Support for HTTP Range Requests.
  • Support for architecture-independent Debian packages.

New in Artifactory 3.6.0 (Apr 14, 2015)

  • In addition to implementing many bug fixes and minor improvements, this release introduces several significant feature updates to Artifactory:
  • VCS REPOSITORIES:
  • Artifactory can now proxy version control systems enabling uniform access to your source files. This can simplify your build scripts while providing stable, reliable and secure access to your source code.
  • S3 OBJECT STORAGE:
  • For enterprise users, Artifactory fully supports the S3 protocol for distributed file systems. This means your binary filestore can reside on the cloud giving you unlimited scalability, security and disaster recovery capabilities.
  • BOWER REPOSITORIES (BETA):
  • Provision Bower packages directly from Artifactory to the Bower command line tool. Enjoy reliable and consistent access to remote Bower packages, and automatic calculation of metadata for Bower packages stored in our local repositories. Access multiple Bower registries through a single URL.
  • MAIN UPDATES:
  • This release includes the following main updates:
  • VCS Repositories
  • S3 Object Storage (requires an enterprise license)
  • Bower Repositories (beta)
  • NuGet license and vulnerabilities information added to the Black Duck Code Center Integration
  • Optimizations to AQL
  • Push Docker Tag to Bintray

New in Artifactory 3.5.3 (Mar 23, 2015)

  • This minor release includes improvements to database transaction management, as well as many bug fixes and minor improvements.
  • MAIN UPDATES:
  • This release includes the following main updates:
  • Promoting Docker images
  • AQL supported in Artifactory Open Source version
  • Full support for proxying remote YUM repositories
  • Improved database transaction management when uploading/downloading big binaries
  • Bug fixes and improvements to the License Control

New in Artifactory 3.5.2 (Feb 24, 2015)

  • This minor release includes improvements to NuGet local repository performance and Debian repository support, as well as several other minor fixes.
  • MAIN UPDATES:
  • This release includes the following main updates:
  • Improved performance of NuGet local repositories
  • Debian calculation is done in one atomic operation per distribution
  • Binary GC deletes the largest binaries first

New in Artifactory 3.5.1 (Feb 5, 2015)

  • This is a minor update that provides improvements in Artifactory adding support for the Oracle Maven Repository and opening AQL for regular authenticated users (who are not administrators).
  • Main Updates:
  • This release includes the following main updates:
  • Support for the Oracle Maven Repository
  • Use of AQL REST API is available for regular authenticated users

New in Artifactory 3.5.0 (Feb 4, 2015)

  • In addition to implementing many bug fixes and minor improvements, this release introduces several significant feature updates to Artifactory:
  • ARTIFACTORY QUERY LANGUAGE :
  • AQL is an easy-to-use query language that gives unprecedented abilities to search through all repositories managed by Artifactory.
  • MULTI-PUSH REPLICATION:
  • Enterprise users can now push-replicate from one source repository to multiple target repositories simultaneously.
  • MAIN UPDATES:
  • This release includes the following main updates:
  • AQL
  • Multi-push replication
  • REST API to fully automate pushing releases to Bintray
  • Improved HA cluster upgrade, stability and node recovery
  • Support for database password encryption

New in Artifactory 3.4.2 (Dec 9, 2014)

  • BUG:
  • [RTFACT-5966] - Backup errors are not shown in the backup error notification email
  • [RTFACT-6041] - Build promotion properties tagging misbehaves
  • [RTFACT-6521] - copying a directory into a destination with include pattern will throw a NPE
  • [RTFACT-6522] - Permission target GET and PUT method are not consistent
  • [RTFACT-6523] - Deleted repository not deleted from permission target
  • [RTFACT-6537] - Artifactory NuGet remote repository that configured with 'api/nuget' URL fails the replication
  • [RTFACT-6779] - Artifactory sending header length 0 on directory listing HEAD requests
  • [RTFACT-6852] - NPE while entering a wrong URL in remote repository
  • [RTFACT-6862] - InRelease is not zapped upon related package update
  • [RTFACT-6867] - Promotion should be allowed when no modules exist
  • [RTFACT-6876] - NPM 2.x broken in artifactory
  • [RTFACT-6884] - Delete version don't pickup all version from root repository
  • [RTFACT-6897] - nuget remote repository proxying another Artifactory nuget repository retrieves corrupt files
  • [RTFACT-6899] - PyPi indexing after delete still sees deleted files
  • [RTFACT-6900] - Remote repo listing failure doesn't print the failing repo
  • [RTFACT-6906] - Set permissions on remote repository when cache diabeld is on
  • [RTFACT-6913] - When using replication, the file-list request should pass through the proxy of the repository
  • [RTFACT-6915] - The instruction of adding a Debian repository to sources.list is wrong
  • [RTFACT-6916] - Full db binary store cache folder in HA should be private to the node
  • [RTFACT-6917] - Filenames with spaces inside archived artifacts are not downloadable
  • [RTFACT-6920] - Artifactory REST API: Build Promotion doesn't collect dependencies
  • [RTFACT-6927] - Comparator implementation on Build objects break build browser
  • [RTFACT-6928] - No need for requesting checksum files from NPM registries
  • [RTFACT-6958] - Watcher list may change when updating unrelated permission target
  • [RTFACT-6984] - Saving push replication config without password may produce NPE
  • [RTFACT-6987] - NuGet repo doesn't close connection after head requests
  • [RTFACT-6988] - Ldap and Crowd user groups should be synced with artifactory user group
  • CHANGE REQUEST:
  • [RTFACT-6564] - Cleanup default repositories from Artifactory config
  • COSMETIC:
  • [RTFACT-6878] - The UI "NuGet Gallery" information should all be plain text and not a URL.
  • [RTFACT-6880] - Display HA node id for admins only
  • IMPROVEMENT:
  • [RTFACT-6699] - Update the standalone distribution Tomcat version to 7.0.56
  • [RTFACT-6857] - Artifactory needs to run in the foreground and handle signals
  • [RTFACT-6924] - Moving artifacts that exist in multiple repositories can fail
  • [RTFACT-6929] - Build browser default sort should be by build time, not by (meaningless) number
  • NEW FEATURE:
  • [RTFACT-3308] - Being able to "move" artifacts or folders to a custom path
  • [RTFACT-6823] - Support flexible NPM layout on local repositories
  • [RTFACT-6841] - Add option to hide build information from anonymous users
  • [RTFACT-6842] - Allow adding custom http headers in PAPI BeforeRemoteDownloadAction
  • [RTFACT-6843] - Support npm deprecate query
  • [RTFACT-6866] - Groups dropdown list should be alphanumeric ordered
  • [RTFACT-6871] - Add argument to the installService script to change the group owning artifactory
  • [RTFACT-6896] - Support NPM 2.0 scoped packages
  • TASK:
  • [RTFACT-6157] - Use distributed lock for concurrent downloaders
  • [RTFACT-6879] - Remove unused xfire dependencies

New in Artifactory 3.4.1 (Oct 22, 2014)

  • Support the latest Npm client - v2.1.
  • Significant improvements in performance when searching for NuGet artifacts.

New in Artifactory 3.4.0 (Oct 1, 2014)

  • Bug:
  • [RTFACT-5756] - Build artifact references update incorrectly
  • [RTFACT-5861] - Grapes behaves strangely when looking for artifacts in a remote repository
  • [RTFACT-5864] - Grapes downloads should be located in Artifactory folder
  • [RTFACT-6308] - Plugin grape loading is locking the plugin reloader
  • [RTFACT-6376] - When wait for download activated checksums are not provided in headers
  • [RTFACT-6467] - Artifactory install via RPM fails if "artifactory" group exists in NIS or other external name service
  • [RTFACT-6532] - Artifactory should return 'Cache-Control' header with 'no-store' as a value for maven-metadata.xml files
  • [RTFACT-6537] - Artifactory NuGet remote repository that configured with 'api/nuget' URL fails the replication
  • [RTFACT-6578] - Artifactory ignores the exclude pattern when the requested path is a folder
  • [RTFACT-6626] - maven-metadata.xml not deleted when all versions have been moved or deleted
  • [RTFACT-6651] - After repo import interceptors are not called
  • [RTFACT-6665] - Debian cache file stream is not closed
  • [RTFACT-6669] - RPM install fails with root squashed nfs filestore
  • [RTFACT-6674] - Latest version search query should not based on the artifactory.search.userQueryLimit parameter value
  • [RTFACT-6705] - Debian Metadata File Inconsistent
  • [RTFACT-6706] - Request for a synchronic Debian index recalculation (REST)
  • [RTFACT-6722] - NPE when remote repository name ends with '-cache' and is part of the virtual indexing aggregation
  • [RTFACT-6731] - Artifactory NPM remote repository that configured with 'api/npm' URL fails the replication
  • [RTFACT-6741] - Blocking HA Hazelcast membership port stopped HA sync messages with no feedback
  • [RTFACT-6757] - NPM Virtual repository might not return the correct versions list
  • [RTFACT-6765] - Basic authentication should be skipped when the header is empty
  • [RTFACT-6770] - Generated .json from Artifactory npm repository folder missing information
  • [RTFACT-6787] - tgz file path shouldn't rely on the metadata name and version
  • [RTFACT-6812] - Remote download on HA should consider expired resource
  • [RTFACT-6850] - The AuthnReqest ID is in UUID format, therefore sometimes it does not conform to the SAML standard.
  • Cosmetic:
  • [RTFACT-6671] - System property "artifactory.repo.global.disabled" missing in "$ARTIFACTORY_HOME/etc/artifactory.system.properties"
  • [RTFACT-6687] - Add help bubble on the tree view next to the "Age" and "Created" fields
  • [RTFACT-6730] - Make artifact times presented in the tree browser clearer
  • [RTFACT-6780] - Removing "Build Type" from the General Build Info UI
  • Documentation:
  • [RTFACT-6634] - Missing "Calculate NPM Repository Metadata" in Rest Api Wiki
  • [RTFACT-6659] - Two typos in RubyGems Confluence documentation
  • [RTFACT-6679] - Artifactory temporary directories should be documented
  • Improvement:
  • [RTFACT-6562] - Add a lib folder for jars used by plugins
  • [RTFACT-6611] - List remote items is still too verbose in some scenarios
  • [RTFACT-6657] - Responses with gzip compression should be handled by http client
  • [RTFACT-6675] - Improving the max unique snapshot cleanup to take into consideration the artifact classifiers
  • [RTFACT-6691] - Prevent download and remote listing of non RubyGems resources when RubyGems support is enabled
  • [RTFACT-6701] - Improving the debug log message when the client abort the connection
  • New Feature:
  • [RTFACT-5163] - Support Python PyPI
  • [RTFACT-6494] - Adapter for Docker Registry
  • [RTFACT-6682] - HA upgrades with zero downtime
  • Task:
  • [RTFACT-6766] - Add org.jfrog package as info to logback.xml

New in Artifactory 3.3.1 (Sep 10, 2014)

  • Improved support for Debian packages including better client support, improved API and automatic generation of default architectures.
  • Fixed a vulnerability that allows an authenticated user to obtain information from the Artifactory database under a specific set of conditions.
  • Fixed a security issue that affects outgoing SSL connections from Artifactory. For more details, please refer to CVE-2014-3577.

New in Artifactory 3.3.0 (Jul 14, 2014)

  • You can now upload and download Debian packages, and manage the public and private keys used to sign them, both through the UI and through the REST API.
  • Support for Debian packages
  • Support for NuGet Batch queries
  • REST API for encrypted user password

New in Artifactory 3.2.2 (Jun 23, 2014)

  • Master Key Encryption for configuration passwords
  • Improved CSRF protection
  • Disabled password fields auto-complete
  • Distribution management UI improved to support additional packaging systems (NuGet, npm, RubyGems)

New in Artifactory 3.2.1.1 (Jun 3, 2014)

  • Upgraded to support the latest HTTP client.
  • Support for NTLMv2 proxy authentication.
  • Allow administrator to disable the Remember Me feature on the user login screen.
  • Remote repository download log entry updated to include the content length and bandwidth.
  • Substantially improved database table cleanup in PostgreSQL.

New in Artifactory 3.2.0 (Apr 1, 2014)

  • Support for NPM packages including publishing and download as well as full support for the npm command-line tool
  • Cleanup of virtual repository caches for improved performance and reduction in storage
  • Option to block downloads from the global virtual repository
  • Option to force authentication for NuGet enabled virtual repositories
  • Improved support for last modified property in various WebDav clients

New in Artifactory 2.6.6 (Jan 3, 2013)

  • Per-file License Discovery: You can now manually trigger a license scan per-artifact from the tree browser. This allows you to auto-attach license information to artifacts outside the context of a CI build.
  • SAML SSO Support: Login to the Artifactory UI can now be integrated with any SAML IdP (Identity Provider). Artifactory now acts as a SAML Service Provider.
  • Bintray Integration: Freely distribute your release artifacts and share them with the world via the Bintray service (currently in Beta). You can upload individual binaries or build artifacts to Bintray directly from Artifactory.
  • Build Diff REST: Compare two builds for their published artifacts, used dependencies and environment using the REST API.
  • Running Plugin Code as System: It is now possible to execute selected plugin code blocks under an unrestricted system role, by using the 'asSystem{}' closure.
  • Property Events in Plugins: New storage callbacks are available that allow plugin developers to intercept property change events.
  • Bug fixes and performance improvements

New in Artifactory 2.6.5 (Nov 12, 2012)

  • Build Diffs: Visually compare the differences between two build runs for changes in artifacts, dependencies and environment variables
  • Maven Latest Release Download: Latest release artifact query now works with Maven-layout repositories
  • YUM Improvements: Support for YUM groups and and more efficient calculation of YUM metadata
  • Configurable Request Parameters: Add custom query params to remote repository requests; This is useful, for example, when needing to add an authentication token param, such as the one required by Maven Central SSL access.
  • Bug fixes and performance improvements

New in Artifactory 2.6.4 (Sep 10, 2012)

  • Storage quota management
  • Bug fixes and improvements

New in Artifactory 2.6.3 (Aug 3, 2012)

  • Deploy artifacts from archive - Added REST and UI support for batch-deployment of multiple artifacts contained in an uploaded archive, in a single HTTP transaction. Currently supported archive types: zip; tar; tar.gz; and tgz.
  • NuGet 2.0 packages update is now working in Visual Studio.
  • Minor bug fixes and improvements

New in Artifactory 2.6.2 (Jul 24, 2012)

  • Faster GAVC search and quick search - GAVC and Quick Search performance and resource consumption have been greatly improved
  • Local replication regression fixed
  • Latest maven snapshot download now resolves much faster
  • Resolution repositories are now correctly returned to Artifactory CI plugins
  • Minor bug fixes and improvements

New in Artifactory 2.6.0 (May 7, 2012)

  • Download debugging - solve artifact resolution issues by getting detailed explain plan of the download request handling in your browser.
  • Latest Maven snapshot download - it is now possible to download the latest version of a Maven snapshot via a simple non-unique snapshot URL. (Pro)
  • Latest version REST - Artifactory can return the latest release or integration version of an artifact for any repository layout. (Pro)
  • Artifact versions REST - get all the release and/or integration versions of an artifact for any repository layout. (Pro)
  • Improved replication - replication was optimized in terms of speed and overall resource consumption. Replication now uses streaming and duplicate target checksum elimination (Pro)
  • Auto offline for remote repositories - a remote repository will now be auto put into temporal offline when encountering retrieval errors.
  • Before/After Build callbacks - tend to build publishing events in user plugins, including the ability to modify the build info object (e.g. add new artifacts). (Pro)
  • Cron-based artifact cleanup - auto artifact cleanup can now be triggered by cron instead of using a time interval.
  • Custom artifact promotion - it is now possible to code custom artifact promotion logic, including interacting with builds, directly in user plugins. Promotion logic can be executed via REST or via CI integration. (Pro)
  • AfterDownloadError callback - tend to download errors in user plugins. (Pro)
  • Secure plugin executions - REST execution points in user plugins can be secured by specifying allowed users and/or groups. (Pro)
  • Per repository archive browsing - ability to turn on archive browsing for selected trusted repositories.
  • Many bug fixes and improvements

New in Artifactory 2.5.1.1 (Mar 6, 2012)

  • This minor release affects .Net clients. It addresses a critical bug that caused proxying of the NuGet Gallery to stop working.

New in Artifactory 2.5.1 (Feb 21, 2012)

  • Maven indexer can now be triggered based on a cron expression
  • All zip-compatible archives can now be searched (previously was limited to jars)
  • New tab displaying NuGet package information (extracted from its embedded nuspec file)
  • Replication no longer aborts on failure to replicate a single artifact
  • Fixed empty response when list-browsing repositories with a short name

New in Artifactory 2.0.6 (May 14, 2009)

  • Built-in UI configurable and UI-testable LDAP integration (other integrations possible via Spring Security).
  • No more clear text passwords in your Maven settings.xml - Artifactory offers auto-generated encrypted passwords, which is extremely important when using external authentication.
  • Ability to undeploy complete versions and remove in one go hundreds of old artifacts deployed from the same module.
  • Sophisticated role-based access control (RBAC), e.g - you can allow only certain groups to see sources.
  • Security domain level administrators.
  • Real time view for the effective RBAC on a selected artifact/node.
  • Ability to deploy a bundle of zipped artifacts and import a Maven local repository into Artifactory.
  • True undeploy with immediate Maven metadata updates.
  • Real time tailing of server logs from the UI.
  • Remote checksum validations.
  • Built-in support for MySql.
  • Tomcat install script has been Improved and the ability to run as a Windows Service.
  • Special support to run under IBM WebSphere.
  • An artadmin command-line tool for performing various administrative tasks.
  • The underlying architecture to support high volumes of concurrent
  • downloads and uploads have been updated.
  • Help on nearly every UI element.
  • Improved, complete user guide.

New in Artifactory 2.0.0 (Jan 7, 2009)

  • Built-in UI configurable and UI-testable LDAP integration (other integrations possible via Spring Security).
  • No more clear text passwords in your Maven settings.xml Artifactory offers auto-generated encrypted passwords, which is extremely important when using external authentication.
  • Ability to undeploy complete versions and remove in one go hundreds of old artifacts deployed from the same module.
  • Sophisticated role-based access control (RBAC), e.g you can allow only certain groups to see sources.
  • Security domain level administrators.
  • Real time view for the effective RBAC on a selected artifact/node.
  • Ability to deploy a bundle of zipped artifacts and import a Maven local repository into Artifactory.
  • True undeploy with immediate Maven metadata updates.
  • Real time tailing of server logs from the UI.
  • Remote checksum validations.
  • Built-in support for MySql.
  • Tomcat install script has been Improved and the ability to run as a Windows Service.
  • Special support to run under IBM WebSphere.
  • An artadmin command-line tool for performing various administrative tasks.
  • The underlying architecture to support high volumes of concurrent downloads and uploads have been updated.
  • Help on nearly every UI element.
  • Improved, complete user guide.

New in Artifactory 1.3.0 RC 1 (Dec 15, 2008)

  • Flexible validation for remote checksums: Generate if absent (the default), fail, ignore and generate and pass-through. Please see the UI for description of each policy.
  • Many bug fixes, stability improvements.
  • Better MySql support.
  • Improved support for Safari.
  • Artifactory and artadmin are now under a single downloadable distribution.
  • Better overall performance.

New in Artifactory 1.3.0 Beta 6.1 (Nov 24, 2008)

  • Support for running Artifactory with MySql for greater scalability, performance and tools support.
  • Support for running Artifactory under Websphere.
  • Install script for automatic set up under a dedicated Tomcat instance.
  • Ability to remove deployed versions with all their sub-artifacts in one go.
  • Dynamic log tailing from the UI.
  • Global offline flag for disconnected environments.
  • Out of the box support for running standalone Artifactory as a Windows service (in additional to the existing Unix service installer).
  • Unified artadmin CLI tool for all administrative tasks.
  • Greatly improved backup and restore speed.
  • Many internal performance and concurrency improvements.
  • The usual bug fixes.