惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

月光博客
月光博客
Stack Overflow Blog
Stack Overflow Blog
L
LangChain Blog
Jina AI
Jina AI
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
雷峰网
雷峰网
T
Tailwind CSS Blog
MongoDB | Blog
MongoDB | Blog
博客园 - 【当耐特】
博客园 - 聂微东
V
Visual Studio Blog
博客园_首页
Engineering at Meta
Engineering at Meta
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
The Cloudflare Blog
人人都是产品经理
人人都是产品经理
Apple Machine Learning Research
Apple Machine Learning Research
阮一峰的网络日志
阮一峰的网络日志
Microsoft Security Blog
Microsoft Security Blog
GbyAI
GbyAI
F
Fortinet All Blogs
C
Check Point Blog
罗磊的独立博客
H
Hackread – Cybersecurity News, Data Breaches, AI and More

2024 Sonatype Blog

Why AI Demands a New Approach to Shift Left Reduce AI Token Waste by Getting Decisions Right Earlier Optimising Out the Waste in Open Source Publishing The CRA Reporting Deadline Is Almost Here Hugging Face Security Incident: A New Class of Threat Is Here The AI Productivity Paradox: More Code, Not More Delivery A Reported Log4j RCE Is More Complicated Than It Looks Why Financial Services Is the Canary in the Code Mine 91 Spring CVEs: The AI Vulnerability Consumption Problem An Air Gap Doesn Securing Software at the Speed of AI: What Four Years of Data Reveal Major Themes at Black Hat 2026 Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads Flooding Dropper Hits npm With 850 Malicious Packages Mini Shai-Hulud npm Attack: More Than 2,200 Components Impacted 5 Reasons Developers Still Download Malicious Packages Defining Community Open Source Is Harder Than It Looks Walking the Walk on Package Registry Sustainability AI Changes the Software Supply Chain and How We Secure It The Hugging Face Incident Changes the Vulnerability Equation What Is Grounding? Why AI Coding Assistants Need Better Intelligence Open Source, Open Infrastructure, and the Space Between Request for Comments: CARE and Maven Central Q2 2026 Open Source Malware Index AI Is Forcing a New Open Source Security Model Vulnerability Prioritization Is Missing the AI-Era Point The Hidden National Security Threat Inside AI-Driven Software Miasma Returns: Leo Platform Compromise in npm The Rise of Collective Defense for Open Source Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing
Q1 Updates in Nexus Repository: More Formats, Stronger Op...
tvrablik@son · 2026-04-24 · via 2024 Sonatype Blog

If you are responsible for keeping software delivery moving, more ecosystems usually mean more overhead.

More package types can turn into more tools to manage, more one-off workflows, and more chances for things to slow down or fall out of policy. At the start of 2026, Sonatype Nexus Repository moved in the opposite direction: expanding support for Terraform and Swift while also making the platform easier to run, automate, and trust.

The result is not just broader format support. It is a more practical way for development, DevOps, and IT teams to centralize software components, reduce tool sprawl, and keep work moving across a growing mix of languages, packages, and infrastructure artifacts.

More Format Support With a Clear Payoff for Users

One of the biggest themes at the start of the year was broader format support, especially for teams working in infrastructure as code and the Apple ecosystem.

Terraform Support

With support for Terraform, teams can manage more of their infrastructure artifacts through Nexus Repository instead of handling them through separate, disconnected workflows. That means a more consistent way to access providers and modules, better performance through caching, and stronger control over both internal and external Terraform dependencies.

For DevOps and platform teams, that is especially useful. Infrastructure artifacts no longer have to live off to the side with their own process and tooling. They can be managed with the same level of control, visibility, and consistency as the rest of the software supply chain.

Swift Support

Support for Swift brings the same kind of simplification to teams building for Apple platforms. With Swift packages now supported in Nexus Repository, teams can centralize dependencies, improve build performance, reduce reliance on external Git hosting, and create a cleaner way to manage internal Swift packages alongside approved third-party components.

For development teams, that means less friction in the toolchain. For IT and platform teams, it means fewer exceptions to support and a more consistent way to manage another important ecosystem.

What makes both of these additions valuable is not just that Terraform and Swift are now supported. It is that teams can manage more of their software and infrastructure dependencies in one place instead of stitching together separate workflows for different ecosystems. That leads to a smoother experience for developers and a more scalable operating model for the teams responsible for control, governance, and reliability.

A Better Path Off OrientDB and Into Modern Deployments

Another important update is the new Instance Migrator, which gives customers on OrientDB-based deployments a simpler path to PostgreSQL, H2, or to Nexus Repository Cloud.

That matters because 3.70.x was the last release to use OrientDB, and as of January 9, 2026, support for OrientDB is officially sunset. Older OrientDB-era deployments carry increasing security that have been addressed in newer releases, so for teams still on those versions, this creates a clearer way to move off legacy infrastructure and onto a more modern platform with better performance, security, and manageability.

For teams that have been putting off modernization because migration felt like too much work or too much risk, this is the kind of improvement that can make the next step a lot more practical.

The Platform Got Stronger Too

The start of the year was not only about supporting more formats. It was also about making Nexus Repository easier to operate day to day.

Reduced Operational Complexity

One of the biggest platform-level changes was the move from Elasticsearch to SQL for search. Search now runs directly against the configured database, which reduces deployment complexity and cuts down on moving parts while preserving the search experience teams already know.

This is the kind of change that makes life easier for the people running the platform. Less infrastructure to maintain usually means less operational overhead and fewer things to troubleshoot.

Better APIs and Automation for Teams

There were also useful improvements for teams building automation around Nexus Repository. A new Capabilities API endpoint makes it easier to retrieve capability types and metadata programmatically. Improvements to browse tree cleanup give administrators more control after component deletion. And the new User Token API adds more precise, programmatic control over token creation and management.

For teams trying to automate routine administration and tighten up how credentials are managed, these are practical improvements that save time and reduce manual effort.

Strengthened Security and Operational Resilience

On the security and resilience side, the updates were less flashy but still important. URL validation helps protect against SSRF by blocking outbound connections to private network addresses, localhost, and cloud metadata endpoints. Recovery Mode adds a controlled state for safe reconciliation between the database and blob storage after outages or inconsistencies.

These are the kinds of improvements that matter most when something goes wrong. They help make the platform safer to operate and easier to recover.

A Faster, More Transparent User Experience

The user experience got better too. Faster page loads, lower bandwidth usage, and improved caching efficiency make Nexus Repository feel more responsive in everyday use. There were also improvements to policy-compliant component selection in npm metadata, making it easier for users to understand why a version is unavailable and what they can use instead.

That kind of clarity matters. It removes guesswork and helps teams move faster without having to stop and investigate every policy decision by hand.

A Strong Start to the Year

The start of the year sets the tone for where Nexus Repository is headed: helping more teams bring more of their workflows into a centralized, governed system while continuing to improve the experience of running and managing it.

That means broader ecosystem support, a clearer path off legacy deployments, and ongoing improvements to performance, security, and operations. Taken together, it is a stronger foundation for teams that want more control without more complexity.

Tags