Downloads

v1.7.1

• manager app standalone WAR file: rdepot-app-1.7.1-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.7.1-plain.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.7.1-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.7.1-plain.jar (sha256, md5)

Release notes

• fix: repository maintainer can create a package maintainer outside of their repository
• fix: disable approve/cancel button as soon as any of them is clicked on submissions page
• fix: typos in translated messages
• fix: missing version number in the manager UI
• fix: deleting packages doesn’t work in some cases
• fix: repositories are not published automatically in some cases
• fix: additional validation for submission patch (assigned package)
• fix: generated repository directory uses null timestamp
• fix: deleted package maintainers can still edit packages
• fix: error when trying to patch a not waiting submission
• fix: package upload with replace option doesn’t work in some cases

v1.7.0

• manager app standalone WAR file: rdepot-app-1.7.0-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.7.0-plain.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.7.0-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.7.0-plain.jar (sha256, md5)

Release notes

This release includes a major refactoring where the components are split up into different modules. These modules open the way to enabling other programming languages (like Python) in later releases. The internal flows are more efficient and there is decreased coupling between components. There are a small selection of new features, a lot of fixes and new tests where appropriate.

• new feature: extend repository events to also include those of related resources
• new feature: restrictive property updates for entities via the API v2
• fix: return unexpected error messages as JSON instead of HTMLs
• fix: repository could not be updated in a declarative configuration
• fix: race conditions on repository version increments
• fix: command injection vulnerability via package name
• fix: sometimes repositories from config file could not be created in declarative mode
• fix: special case when uploading a package fails
• refactor: divide into core and R modules
• refactor: combine modular setup with API v2
• refactor: move from null checks to Java optionals
• refactor: decouple dependencies in service classes
• refactor: improved event flow
• refactor: improved email service
• refactor: (re-)publishing should be done as little as possible
• tests: added extra tests for API v1, database migration and others

v1.6.2

• manager app standalone WAR file: rdepot-app-1.6.2-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.6.2-plain.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.6.2-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.6.2-plain.jar (sha256, md5)

Release notes

• new feature: configure “published” property of repositories inside the application YAML configuration
• security: updated Spring Boot to 2.5.12 (CVE-2022-22965), although largely unaffected

v1.6.1

• manager app standalone WAR file: rdepot-app-1.6.1-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.6.1-plain.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.6.1-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.6.1-plain.jar (sha256, md5)

Release notes

• new feature: support deployments with no access to internet

v1.6.0

• manager app standalone WAR file: rdepot-app-1.6.0-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.6.0-plain.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.6.0-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.6.0-plain.jar (sha256, md5)

Release notes

• new feature: HTTP API v2, replaces the old v1 HTTP API
• new feature: more detailed warning/error messages in the HTTP API v2
• new feature: custom error pages in the UI
• new feature: now uses Liquibase for all database schema related operations
• new feature: updated submission rejection flow
• new feature: turn off repository snapshots through config
• fix: license check as part of build
• fix: create correct event while creating new repository
• fix: repository publication URI is not updated when config file changes in declarative mode
• deprecation: HTTP API v1 in favour of HTTP API v2

1.5.0

• manager app standalone WAR file: rdepot-app-1.5.0-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.5.0.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.5.0-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.5.0.jar (sha256, md5)

Release notes

• new feature: automated database management when upgrading versions
• new feature: mirroring of external repositories
• new feature: more user-friendly configuration
• new feature: more user-friendly error handling
• new feature: reduce reliability on system dependencies
• new feature: application-wide configuration for generating manuals on upload
• new feature: optionally filter on repository when listing packages in the API
• refactor: better declarative configuration integration tests
• refactor: more elegant way to parse application configurations
• fix: sometimes cannot delete package while repository is published
• fix: package submission breaks repository while repository is published
• fix: user properties are not updated when they change in the auth provider
• fix: package version equivalence
• fix: packages are not deleted when repository is unpublished
• fix: manual links to an empty PDF
• fix: no vignettes are listed

1.5.0 cli

• cli zipped binary (linux/amd64): rdepot.gz

Release notes

• new feature: packages list now accepts --repo to filter by repository

1.4.3

• manager app standalone WAR file: rdepot-app-1.4.3-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.4.3.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.4.3-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.4.3.jar (sha256, md5)

Release notes

• new feature: order packages by version in the UI
• new feature: generate archive.rds for archived packages
• new feature: configurable email functionality (disabled by default)
• new feature: automated OWASP dependency analysis checks
• fix: error when viewing the archive of a package

1.4.2

• manager app standalone WAR file: rdepot-app-1.4.2-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.4.2.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.4.2-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.4.2.jar (sha256, md5)
• cli zipped binary (linux/amd64): rdepot.gz

Release notes

• new feature: a tiny cli is now available that can be used to submit packages
• new feature: integration test images are now available on dockerhub (openanalytics/rdepot-repo-it, openanalytics/rdepot-app-it, openanalytics/rdepot-ldap-it)
• new feature: API token dialog in the UI
• new feature: more flexible SQL scripts (DB_NAME, DB_USER)
• new feature: manual generation for package submissions is now optional (generateManual parameter)
• fix: HTTP error codes now reflect responses more accurately
• fix: HTTP methods are now more consistent
• fix: pet store sample is now removed from the API docs
• fix: in declarative mode, when a repository is removed from config file it should be removed from db
• fix: shift delete can’t remove submission

1.4.1

• manager app standalone WAR file: rdepot-app-1.4.1-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.4.1.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.4.1-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.4.1.jar (sha256, md5)

Release notes

• new feature: translate message codes to proper error messages
• new feature: show name and surname of current logged in user
• new feature: declarative repository configuration
• fix: at least one administrator has to be active
• fix: read simple authentication configuration per user on login
• fix: error in repo app when publishing repository
• fix: API authentication using tokens
• fix: deadlock on concurrent publication requests

1.4.0

• manager app standalone WAR file: rdepot-app-1.4.0-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.4.0.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.4.0-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.4.0.jar (sha256, md5)

Release notes

• new feature: repository pre-configuration in the application properties
• new feature: Keycloak, OIDC and simple authentication
• fix: correctly handle simultaneous requests to repository
• fix: more efficient publishing (revamp)
• fix: migrate from application.properties to application.yml

1.3.1

• manager app standalone WAR file: rdepot-app-1.3.1-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.3.1.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.3.1-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.3.1.jar (sha256, md5)

Release notes

• fix: thymeleaf security hotfix for users page

1.3.0

• manager app standalone WAR file: rdepot-app-1.3.0-application.war (sha256, md5)
• manager app WAR file: rdepot-app-1.3.0.war (sha256, md5)
• repository app standalone JAR file: rdepot-repo-1.3.0-application.jar (sha256, md5)
• repository app JAR file: rdepot-repo-1.3.0.jar (sha256, md5)

Release notes

• refactored to support more production use cases and future extensions
• added full suite of unit and integration tests
• revamped UI using material design lite and thymeleaf
• REST interface for integration with continuous integration services
• publish rdepot artefacts to nexus (rdepot)
• Docker images for the manager and repository application available on Docker hub

Snapshot builds

• manager app standalone WAR file: rdepot-app.war
• manager app WAR file: rdepot-app.war
• repository app standalone JAR file: rdepot-repo.jar
• repository app JAR file: rdepot-repo.jar