Artifactory 7.100.2 Cloud

JFrog Release Information

Content Type
Release Notes
ft:sourceType
Paligo

Released: 5 November, 2024

New Features

  • Upgrade to Apache Tomcat 10.1

    The Apache Tomcat version bundled with Artifactory has been upgraded to version 10.1.

    Known Issue in Tomcat 10.1

    Apache Tomcat version 10.1 that is bundled in Artifactory 7.100.2 contains an issue whereby, when sending HEAD requests where the resource size is unknown, the server returns a content-length=0 header, instead of omitting the header.

Feature Enhancements

  • Significant Changes to the Packages User Interface

    Significant changes have been made to the Packages User Interface (UI). From the Packages home page, you can now view a list of the most recently viewed packages, and an upgraded filter option has been added that allows you to create refined filters on the packages list to easily see the packages that interest you. After creating the filter, you can save it as a customized view for later use and reference. For more information, click here.Viewing Packages

  • Default key creation for Release Bundles v2

    It is now possible to create a Release Bundle v2 using the REST API without specifying an existing signing key. In such cases, Artifactory creates a default GPG key that is used to sign the Release Bundle. This default key is then used for future Release Bundles unless a different key is selected during Release Bundle creation. The default key created by Artifactory is displayed in the Keys Management table.Create Release Bundle v2 VersionSecurity Keys Management

    Note

    In the current release, a default key is created only when creating the Release Bundle v2 using the REST API. It is still mandatory to select an existing signing key when using the JFrog CLI or platform UI.Create a New Release Bundle v2 in the Platform UI

  • Maximum Default Value Added to Limit the Search/AQL API Call Response

    A fixed value of 500000 was set as the default maximal result set size to limit the search/AQL API call response.

  • Support for Hugging Face Packages in Cleanup

    Hugging Face packages are now supported in Cleanup.

Resolved Issues

JIRA Issue

Component

Severity

Description

RTFACT-30858

Packages

Medium

Fixed an issue whereby when installing NuGet packages that contain a ‘+’ in the version, the installation failed and 404 error messages were returned.

RTFACT-30841

User Interface

Medium

Fixed an issue whereby when configuring a virtual repository, if a repository was the "Default Deployment Repository" and then was removed from the virtual repository, the removed repository remained as the "Default Deployment Repository".

RTFACT-30838

General

Medium

Fixed an issue whereby when a user had permission to a repository that was aggregated to a virtual repository, the user was able to see repositories for which he did not have permission in the "Included Repositories" section of the virtual repository.

RTFACT-30835

Packages

Medium

Fixed an issue whereby the Cocoapods parser was only able to parse a podspec file when the file was started with 's' and was not able to read the file when it was starting with 'spec'.

RTFACT-30811

Packages

Medium

Fixed an issue whereby when using Artifactory as a CDN, packages like PLCrashReporter with additional keys in the podspec 'source' field (alongside HTTP) could not be downloaded.

RTDEV-49436

Repositories

Medium

Fixed an issue whereby the Smart Remote Repository options were automatically enabled even after disabling those options in the user interface.

RTDEV-49391

Repositories

Medium

Fixed an issue whereby users were unable to add an environment to an existing repository in the Repository Configuration page.

RTDEV-48758

Builds

Medium

Fixed an issue whereby when creating a project, deleting it, and creating a new project with the same key as the deleted project, the build-info repository of the deleted project was not associated with the new project that has the same key.

RTDEV-48363

Packages

Medium

Fixed an issue whereby when “Block unscanned artifacts” was selected in Xray’s policy and a package had violations, that package did not appear in the Packages list in Artifactory.

JA-14599

Authentication Providers

High

Fixed an issue to convert group names to lowercase during synchronization and resolve groups based on their external IDs.