Distribution 2.28.1

JFrog Release Information
Content Type
Release Notes
ft:sourceType
Paligo

Released January 14, 2025

Feature Enhancements

  • Enhanced distribution engine

    JFrog Distribution introduces a new, enhanced distribution engine that simplifies the handling of Release Bundles v2, improves visibility, and ensures support for advanced use cases. Key features include:

    • Custom path mappings: You can now define multiple path mappings per Release Bundle version, enabling customized content delivery. These path mappings can vary between distributions. Therefore, you should use separate distributions to distribute a Release Bundle with various path mappings to different targets. For more details about defining path mappings, see Path Mapping Guidelines for Release Bundles v2.Path Mapping Guidelines for Release Bundles v2

    • Visibility on targets: Distributed Release Bundle v2 versions can now be viewed on the Received Bundles tab of the target Artifactory. For more information, see View Release Bundles on Edge Nodes.View Release Bundles on Edge Nodes

    • Source project visibility: You can now see the source project to which a distributed Release Bundle v2 version belongs. This enables Edge nodes to support Release Bundles from different projects that share the same name and version. For more information, see View Release Bundles on Edge Nodes.View Release Bundles on Edge Nodes

    • Enhanced encryption support: Any encryption key compatible with Release Bundles v2 can now be used for distribution. For more information, see Create Signing Keys for Release Bundles (v2).Create Signing Keys for Release Bundles (v2)

    This new functionality introduces a feature flag in the Distribution YAML file, which is disabled by default in the current version. This flag has been added to incorporate the enhanced Distribution engine on the target while maintaining compatibility with existing APIs. To enable it, set the enable-all-the-way property to true. For more information, see Distribution Application Config YAML File.Distribution Application Config YAML File

    Note

    This feature should not be enabled if you are working in an air gap environment or use Release Bundles in a repository Federation.Distribute Release Bundles (v2) in an Air Gap EnvironmentFederated Repositories

    Important

    To take advantage of the new functionality offered by the enhanced distribution engine, both the source Artifactory and all Edge nodes must be upgraded to Artifactory 7.103 or later.

  • New APIs for Release Bundle v2 versions distributed to Edge nodes

    A new set of APIs enables you to return information about Release Bundle v2 versions distributed to targets, such as Edge nodes. A new endpoint is also available for deleting distributed Release Bundle v2 versions from a selected target. For more information, see RELEASE BUNDLES V2.RELEASE BUNDLES V2

  • Providing distribution permissions to a specific project role

    Platform and project administrators can now define distribution permissions for project-level roles. This new permission granularity provides greater control when managing user permissions to distribute Release Bundle v2 versions. For more information, see Manage Project Roles.Manage Project Roles

Resolved Vulnerabilities

This release contains resolved CVEs (security vulnerability issues). For more information:

  • Resolved CVEs that impact JFrog Distribution

  • Resolved CVEs that do not impact JFrog Distribution