Need help with other JFrog products ?
Have a question? Want to report an issue? Contact JFrog support
Released: January 9, 2019
Block the Distribution of Release Bundles with Vulnerabilities
To prevent the distribution of release bundles that contain artifacts with issues or vulnerabilities, JFrog Distribution will now prevent signing a release bundle if it includes an artifact that has been blocked for download by JFrog Xray. Once an artifact triggers a violation in Xray and is blocked for download, Distribution will provide a corresponding indication in various screens if your release bundle includes a blocked artifact, and issue an error message if you attempt to sign "infected" release bundles.
Distribution HA has been improved to provide better performance for high load bursts, and faster recovery when a cluster node goes down.
When selecting repositories from which to extract artifacts for the release bundle, Distribution now presents a list for you to choose from. You can also type the repository name, and Distribution will display a list the matches your input.
You can now select multiple release bundles for redistribution with a single action.
Released: December 12, 2018
MongoDB Replaced with a Relational Database
To simplify the Distribution installation and upgrade process, Distribution has replaced its use of MongoDB with PostgreSQL. This will also facilitate the support of additional relational database in the future.
Hardened Security for Secrets
To harden security when providing sensitive configurations (secrets) such as credentials for third party services (e.g. databases that Distribution uses), they may be placed in a temporary file. Distribution will load the parameters specified in the file at startup and then delete the file.
Path Mapping Templates
As a convenience, this version introduces a set of commonly used templates you can use to set up the path mappings that govern where files form the source Artifactory service are hosted in the target. Currently, the templates provided make it easy to create the following mappings:
- Moving files from a specific repository in the source Artifactory service to a different repository in the target
- Moving files into a specific folder in the corresponding repository in the target
- Moving files from a specific folder in the source, to a different folder in the corresponding repository in the target
Health Check API
The Test Connection REST API endpoint will now provide error information if any of the databases required by Distribution are not functioning correctly.
Released: October 11, 2018
Enhanced Release Bundle Content Protection
This release includes an additional layer of protection on the contents in your release bundles. Previously, the distribution process failed if artifacts in a release bundle were edited or removed from the source repository in Artifactory. As part of the release bundle signing process, Distribution will now trigger Artifactory to clone the contents of a release bundle into an isolated release-bundles repository.
Deploying your GPG Key
Improved Distribution Proxy Management
In conjunction to the release of Mission Control 3.2, this release supports assigning proxy for Distribution services on the site level. As part of the release, proxy settings are automatically inherited to all services including the Distribution service thereby removing the need to assign a proxy separately for each service in the site. Using Mission Control Proxy Management , the Distribution services fetch the proxies configuration which are required to perform communication.
Released: August 29, 2018
Distribution High Availability
You can now scale your Distribution environment with as many nodes as you need. This enhances Distribution’s performance by delegating all workload across available cluster nodes, through a load balancer. JFrog Distribution 1.2 introduces a highly available active-active cluster architecture, ensuring continuous security and governance to your software packages.
High Availability supports:
Improved Performance and Resilience: You can now scale your Distribution environment with as many nodes as you need. This enhances Distribution performance by delegating all workload across available cluster nodes, through a load balancer.In case one or more nodes is unavailable or down for an upgrade, the load is shared between the remaining nodes, ensuring optimal resilience and uptime.
- Automatic Synchronization: Distribution seamlessly and instantly synchronizes all data, configuration, cached objects and scheduled job changes across all cluster nodes.
The "Open" State Supports Creating Release Bundles Progressively
The new release bundle 'Open' status lets you 'Create' and 'Save' your release bundles in 'Open' status mode allowing you to click 'Save & Sign' only when you are ready to distribute the bundle.
The Create & Sign button replaces the previous 'Create' button to immediately create, sign and distribute the bundle.
Expanded Properties Query Capabilities in the Query Builder
You can create complex queries by specifying a range of properties using the condition toggle with the And | Or options.
Support for Microsoft Internet Explorer 11
Distribution has been tested on IE 11.
Released: July 2, 2018
Release bundle management has been enhanced to provide better visibility of release actions and easier definition of release bundle content.
Simple Query Builder: Previously, you could only specify the release bundle content using an AQL query. This has been supplemented with a simple form through which you can specify repository names, build names and numbers as well as include and exclude patterns to specify release bundle content. These specifications are automatically translated into an AQL query which you can also view.
Viewing Release Bundle Details: The release bundle details view has been reorganized and enhanced. A new Spec tab provides all the parameters used to create the release bundle, and a new Content tab provides details of the artifacts and builds in a bundle as well as the release bundle metadata.
For more details on these enhancements, please refer to Release Bundles.