Released on 18 April 2024.

Release notes

  • fix: publishing to repositories fails in some cases


Released on 28 March 2024.

Release notes

  • fix: configurable max file size for package uploads (submissions)


Released on 19 March 2024.

Release notes

  • fix: R DESCRIPTION parser was not able to parse certain packages
  • fix: Default application.yml files inside Docker images for manager app and repo


Released on 5 January 2024.

Release notes

  • new feature: allow configuring a URL context path, see documentation
  • fix: R DESCRIPTION parser cannot parse multi-line properties
  • fix: R DESCRIPTION parser does not allow underscores in property keys


Released on 6 July 2023.

Release notes

  • fix: mirror synchronizer doesn’t handle redirections properly
  • fix: package versions should not be differentiated by separators
  • fix: submitted packages are not replaced in repository in some cases


Released on 9 May 2023.

Release notes

  • fix: integrate latest version of OWASP dependency check
  • fix: inactive users are able to perform operations in some cases
  • fix: repository generation directory should be cleaned, not removed


Released on 24 March 2023.

Release notes

  • fix: RDescription parsing fails when properties cover multiple lines
  • fix: soft-deleted packages should not be downloadable
  • fix: manual generation always happens, ignoring config and request params
  • fix: correct Docker entrypoint for app and config


Released on 8 March 2023.

Release notes

  • fix: repositories are not published correctly when in declarative mode


Released on 2 March 2023.

Release notes

  • fix: repository maintainer can create a package maintainer outside of their repository
  • fix: disable approve/cancel button as soon as any of them is clicked on submissions page
  • fix: typos in translated messages
  • fix: missing version number in the manager UI
  • fix: deleting packages doesn’t work in some cases
  • fix: repositories are not published automatically in some cases
  • fix: additional validation for submission patch (assigned package)
  • fix: generated repository directory uses null timestamp
  • fix: deleted package maintainers can still edit packages
  • fix: error when trying to patch a not waiting submission
  • fix: package upload with replace option doesn’t work in some cases


Released on 3 December 2022.

Release notes

This release includes a major refactoring where the components are split up into different modules. These modules open the way to enabling other programming languages (like Python) in later releases. The internal flows are more efficient and there is decreased coupling between components. There are a small selection of new features, a lot of fixes and new tests where appropriate.

  • new feature: extend repository events to also include those of related resources
  • new feature: restrictive property updates for entities via the API v2
  • fix: return unexpected error messages as JSON instead of HTMLs
  • fix: repository could not be updated in a declarative configuration
  • fix: race conditions on repository version increments
  • fix: command injection vulnerability via package name
  • fix: sometimes repositories from config file could not be created in declarative mode
  • fix: special case when uploading a package fails
  • refactor: divide into core and R modules
  • refactor: combine modular setup with API v2
  • refactor: move from null checks to Java optionals
  • refactor: decouple dependencies in service classes
  • refactor: improved event flow
  • refactor: improved email service
  • refactor: (re-)publishing should be done as little as possible
  • tests: added extra tests for API v1, database migration and others


Released on 14 April 2022.

Release notes

  • new feature: configure “published” property of repositories inside the application YAML configuration
  • security: updated Spring Boot to 2.5.12 (CVE-2022-22965), although largely unaffected


Released on 20 December 2021.

Release notes

  • new feature: support deployments with no access to internet


Released on 4 November 2021.

Release notes

  • new feature: HTTP API v2, replaces the old v1 HTTP API
  • new feature: more detailed warning/error messages in the HTTP API v2
  • new feature: custom error pages in the UI
  • new feature: now uses Liquibase for all database schema related operations
  • new feature: updated submission rejection flow
  • new feature: turn off repository snapshots through config
  • fix: license check as part of build
  • fix: create correct event while creating new repository
  • fix: repository publication URI is not updated when config file changes in declarative mode
  • deprecation: HTTP API v1 in favour of HTTP API v2


Released on 4 May 2021.

Release notes

  • new feature: automated database management when upgrading versions
  • new feature: mirroring of external repositories
  • new feature: more user-friendly configuration
  • new feature: more user-friendly error handling
  • new feature: reduce reliability on system dependencies
  • new feature: application-wide configuration for generating manuals on upload
  • new feature: optionally filter on repository when listing packages in the API
  • refactor: better declarative configuration integration tests
  • refactor: more elegant way to parse application configurations
  • fix: sometimes cannot delete package while repository is published
  • fix: package submission breaks repository while repository is published
  • fix: user properties are not updated when they change in the auth provider
  • fix: package version equivalence
  • fix: packages are not deleted when repository is unpublished
  • fix: manual links to an empty PDF
  • fix: no vignettes are listed

1.5.0 cli

Released on 4 May 2021.

Release notes

  • new feature: packages list now accepts --repo to filter by repository


Released on 22 January 2021.

Release notes

  • new feature: order packages by version in the UI
  • new feature: generate archive.rds for archived packages
  • new feature: configurable email functionality (disabled by default)
  • new feature: automated OWASP dependency analysis checks
  • fix: error when viewing the archive of a package


Released on 11 December 2020.

Release notes

  • new feature: a tiny cli is now available that can be used to submit packages
  • new feature: integration test images are now available on dockerhub (openanalytics/rdepot-repo-it, openanalytics/rdepot-app-it, openanalytics/rdepot-ldap-it)
  • new feature: API token dialog in the UI
  • new feature: more flexible SQL scripts (DB_NAME, DB_USER)
  • new feature: manual generation for package submissions is now optional (generateManual parameter)
  • fix: HTTP error codes now reflect responses more accurately
  • fix: HTTP methods are now more consistent
  • fix: pet store sample is now removed from the API docs
  • fix: in declarative mode, when a repository is removed from config file it should be removed from db
  • fix: shift delete can’t remove submission


Released on 28 October 2020.

Release notes

  • new feature: translate message codes to proper error messages
  • new feature: show name and surname of current logged in user
  • new feature: declarative repository configuration
  • fix: at least one administrator has to be active
  • fix: read simple authentication configuration per user on login
  • fix: error in repo app when publishing repository
  • fix: API authentication using tokens
  • fix: deadlock on concurrent publication requests


Released on 24 August 2020.

Release notes

  • new feature: repository pre-configuration in the application properties
  • new feature: Keycloak, OIDC and simple authentication
  • fix: correctly handle simultaneous requests to repository
  • fix: more efficient publishing (revamp)
  • fix: migrate from to application.yml


Released on 27 July 2020.

Release notes

  • fix: thymeleaf security hotfix for users page


Released on 15 July 2020.

Release notes

  • refactored to support more production use cases and future extensions
  • added full suite of unit and integration tests
  • revamped UI using material design lite and thymeleaf
  • REST interface for integration with continuous integration services
  • publish rdepot artefacts to nexus (rdepot)
  • Docker images for the manager and repository application available on Docker hub

Snapshot builds