Artifactory 7.123.0 Cloud

JFrog Release Information
Content Type
Release Notes

Released: 15 September, 2025

New Features

  • Support for Sigstore bundle attestations

    Artifactory now supports the automatic conversion of OCI Sigstore bundle attestations into JFrog evidence.

Feature Enhancements

  • Upgraded Gradle Set Me Up Wizard

    The Gradle Set Me Up wizard has been upgraded to support Gradle 9.

  • Virtual Repositories for Hugging Face Packages

    Virtual repositories can now be created for Hugging Face packages.

    • Local and remote Hugging Face repositories that are associated with a virtual Hugging Face repository must have the Machine Learning Repository Structure.Machine Learning Repository Structure

    • Hugging Face datasets and models can be resolved from a virtual Hugging Face repository only with the snapshot_download API and not by using libraries.

    For more information, see Create a Hugging Face Repository and Resolve Hugging Face Packages.Create a Hugging Face RepositoryResolve Hugging Face Packages

  • Performance Improvement in Release Bundle v2 Promotion Flow

    The performance of the promotion flow for Release Bundle v2 versions has been improved.

  • Enhanced metadata propagation during RTFS Full Sync operations

    The Artifactory Federation Service (RTFS) now supports the propagation of artifact creation time metadata during a Full Sync operation. To enable this feature:

    1. Set the following Artifactory system property to true on the target members:

      artifactory.federated.mirror.events.upload.info.propagate.enabled

    2. Use a new REST API to enable the propagation of this specific metadata. For more information, see Propagate Creation Time Metadata during Full Sync.Propagate Creation Time Metadata during Full Sync

  • Improved visibility of OCI/Docker multi-arch images in the platform UI

    To reduce visual clutter and improve comprehension, Artifactory now makes it easier to manage OCI/Docker multi-arch images in the platform UI. For example, if you have a multi-arch image called my-image:1.0.0 that supports amd64 and arm64 architectures, Artifactory contains 3 distinct package versions, one for the manifest list and one for each architecture:

    • my-image:1.0.0

    • my-image:sha256__f2ca1bb6c7....

    • my-image:sha256__1a8a5828e8....

    Artifactory now displays the version for the manifest list only in the platform UI and suppresses the individual architecture versions (named according to their image tags). This enables you to focus on the multi-arch image as a single entity. Please note that all package versions will be returned when listing the content via the REST APIs.

  • Updated Artifactory Worker Events

    Updated the following Worker Events:

    • Before Download Request: The following fields are added in the response:

      modifiedRepoPath, expired and headers.

    • Before Create: The following fields are removed from the Sample Payload:

      contentLength, trustServerChecksums, servletContextUrl, skipJarIndexing and disableRedirect.

    • Before Copy: The following fields are removed from the Sample Payload:

      contentLength, trustServerChecksums, servletContextUrl, skipJarIndexing and disableRedirect.

    • Before Property Create: The following fields are removed from the Sample Payload:

      contentLength, trustServerChecksums, servletContextUrl, skipJarIndexing and disableRedirect.

    • Before Property Delete: The following fields are removed from the Sample Payload:

      contentLength, trustServerChecksums, servletContextUrl, skipJarIndexing and disableRedirect.

    • After Property Delete: The following fields are removed from the Sample Payload:

      contentLength, trustServerChecksums, servletContextUrl, skipJarIndexing and disableRedirect.

  • Smart Archiving - Skips Restore of Artifacts with the Same Name and Path

    The restore process now skips any artifact that already exists in the target location, preventing accidental overwrites. The existing file will be preserved, and the skipped operation will be noted in the logs and the CSV report.

  • Smart Archiving - Supported Archive Packages Search for Project Admins

    Project Admins will now see and be able to use the Archive Search feature. The search results are automatically scoped, ensuring they can only view archived packages that belong to the projects they manage.

Resolved Issues

JIRA Issue

Component

Severity

Description

RTFE-3639

User Interface

Medium

Fixed an issue whereby when navigating to a Storage project in the UI, the Package Type for npm appeared as “N/A” instead of displaying npm.

RTFACT-31250

Packages

Medium

Fixed an issue whereby Artifactory was not able to cache the the drupal/nouislider_js module and other modules from git.drupalcode.org.

RTFACT-31214

Packages

Medium

Fixed an issue whereby the Artifactory Cloud platform did not update the <latest> tag in maven-metadata.xml upon deployment.

RTDEV-62449

Packages

Medium

Fixed an issue whereby passing the X-JFrog-Override-Base-URL header during the npm install process from a virtual repository was not always respected.

RTDEV-62157

Federated Repositories

High

Fixed an issue that caused the Federation to fail if a proxy was defined at the platform level but the Federated repository was set to no_proxy.

RTDEV-61861

Packages

Critical

Fixed an issue whereby cleanup policies were incorrectly deleting Helm packages with the same prefix name.

RTDEV-61687

Archiving/Cold Storage

Low

Fixed an issue whereby the Next Run section for Retention Policies (both Cleanup and Archive) sometimes did not update correctly.

RTDEV-61672

Release Lifecycle Management

Medium

Fixed an issue whereby publishing build-info with an empty statuses section caused a 500 error.

RTDEV-61647

Archiving/Cold Storage

Medium

Fixed an issue whereby inconsistent naming and compression format for artifactory-cleanup-audit logs caused sync failures and misclassification of logs.

RTDEV-61500

Archiving/Cold Storage

Medium

Fixed an issue whereby a cleanup policy would stop running when encountering certain directories.

RTDEV-61165

Repositories

Medium

Fixed an issue whereby the Get All Repository Configurations API, in certain cases, returned an empty response when using the JSON accept header.Get All Repository Configurations

RTDEV-60864

User Interface

Medium

Fixed an issue whereby the Artifactory native UI did not display the contents of a VCS remote repository when an include pattern was set.

RTDEV-56935

Packages

Medium

Fixed an issue whereby after saving an NIM remote repository configuration, the test connection failed.

RTDEV-55886

General

Medium

Fixed an issue whereby when sending a request to ui/api/v1/ui/artifactactions/view with an empty path, the API returned a 500 error and this led to the disclosure of Java exceptions that described some of the application internals.

JA-17902

Authentication Providers

Medium

Fixed an issue whereby a SCIM PATCH request succeeded despite containing an invalid operation.