Artifactory Release Notes

Artifactory 7.19

Artifactory 7.19.4 

Released: May 24, 2021

Highlights

Extended Flagging Safe Repositories Support for Alpine, Bower, Conan, Conda, Cran, Go, Gradle, Ivy, Maven, Nuget, and SBT Packages 

Declaring local and remote repositories as ‘safe’ by enabling the ‘Priority Resolution’ field for Local and Remote repositories has been extended to support Alpine, Bower, Conan, Conda, Cran, Go, Gradle, Ivy, Maven, Nuget, and SBT Packages. Setting Priority Resolution takes precedence over the resolution order when resolving virtual repositories. Setting repositories with priority will cause metadata to be merged only from repositories set with this field. If a package is not found in those repositories, Artifactory will merge metadata from the repositories that have not been set with the Priority Resolution field.

Feature Enhancement

Support for Controlling Signed URL Download Methods

You now have the option to set your signed URL redirects using one of these methods: S3, CloudFront, or using a direct download without a signed URL redirect. For more information, see Controlling Your Signed URL Downloads.

 Enhanced the S3 Configuration Template

To reduce the overhead on the Ceph backend, you can now modify the chunk size that was previously fixed at 5 MB by setting the multipartElementSize tag in the Amazon S3 Official SDK Template. If no tag is specified, the AWS client default of 5 MB will be applied.

UI for the JFrog Platform Vault Integration with HashiCorp Vault

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

The JFrog Platform integration with HashiCorp Vault now enables you to configure an external vault connection to use as a centralized secret management tool not only through the APIs but also using the JFrog Platform UI. Using vault allows you to store JFrog Platform GPG keys, RSA keys, and Trusted keys used to sign packages and Release Bundles as secrets in HashiCorp Vault and provides you with the capability to generate and manage keys in a centralized tool for security and compliance. To learn more, see Vault.

UI for the JFrog Platform SCIM Integration 

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

JFrog Platform now enables you to generate a dedicated admin access token for SCIM in the JFrog Platform by going to Admin | Security | SCIM. The token generated can then be used in the identity service setup. To learn more, see SCIM.

Signing Keys Management 

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

The JFrog Platform now features a centralized dashboard for creating and managing all signing keys. This feature enables you to create and control the keys used to encrypt or digitally sign your artifacts - in one central location, which makes it easier for you to manage signing keys throughout your organization. To learn more, see Security Keys Management.

Resolved Issues

Artifactory 7.19.8

Released: 9 June, 2021

Resolved Issues

Artifactory 7.18

This section includes all of the Artifactory version 7.18.x releases.

Artifactory 7.18.3

Released: 22 April, 2021

Highlights

Federated Repositories

^{CLOUD: Enterprise | Enterprise+  SELF-HOSTED: Enterprise | Enterprise+} 

The JFrog Platform enables you to create Federated repositories, which support mirroring repositories and artifacts with JFrog Platform users located on remote JFrog Deployments (JPDs) in a multisite environment. A Federation is a collection of repositories of Federated type in different JPDs that are automatically configured for full bi-directional replication. Once you have created a Federation, changes made to artifacts on one site will be automatically synchronized to the other federated sites using bi-directional mirroring. For more information, see Federated Repositories.

Feature Enhancements

PostgreSQL Version Support

JFrog products now support PostgreSQL version 13.0. To learn more, see System Requirements.

Improved Large Scale Release Bundle Distribution

Improved distributing Release Bundles at a large scale, resulting in three times faster performance, by implementing internal database optimization.

Extended Docker OCI Support

Extended the ability to serve OCI requests without relying on the accept header. For example, if you have a client named containers/someVersion, you can assume that all the containers will support OCI (if configured).

SCIM ID Management Support

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise | Enterprise+}

JFrog now supports managing both users and groups, and the association between them using the System for Cross-domain Identity Management (SCIM) protocol 2.0. Okta and Azure Active Directory (AD) have used to verify this capability. To learn more, see SCIM.

Resolved Issues

Artifactory 7.18.5

Released: 29 April, 2021

Highlights

JFrog Platform Ansible Installer

JFrog’s Ansible Collection includes several Ansible roles that allow you to install the latest JFrog Platform in many different configurations-from simple single server installations to redundant and highly available setups-this collection provides the flexibility for any architecture. To learn more, see Installing the JFrog Platform Using Ansible. 

Resolved Issues

Artifactory 7.18.6

Released: 6 May, 2021

Feature Enhancement

Added More Flexibility When Setting SSH Server Security

You can now control ciphers, MACs, signatures, and key exchange algorithms that are accepted by the Artifactory SSH server. For more information, see Artifactory Security.

Artifactory 7.18.7

Released: May 19, 2021

Resolved Issues

Artifactory 7.17

This section includes all of the Artifactory version 7.17.x releases.

Artifactory 7.17.4

Released: 31 March, 2021

Highlights

Announcing Projects in the JFrog Platform

^{CLOUD: Enterprise | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

JFrog Projects is a management entity for hosting your resources (repositories, builds, Release Bundles, and Pipelines), and for associating users/groups as members with specific entitlements. As such, using projects helps Platform Admins to offload part of their day-to-day management effort and to generate a better separation between the customer products to improve customer visibility on efficiency, scale, cost, and security. Projects simplifies the onboarding process for new users, creates better visibility for LOBs and project stakeholders. To learn more, see Projects.

Cloud-Native High Availability (HA) is Now Supported for Self-Hosted Artifactory Installations

From Artifactory 7.17.4, all nodes in the high availability cluster can perform tasks such as replication, garbage collection, backups, exporting, and importing, removing the need to set up a primary node in the cluster. Instead, every node in the cluster can serve any of the mentioned tasks and if any node goes down, the different nodes in the cluster will be able to perform these tasks instead. By default, when adding a new node (member) to the cluster, it will be able to perform cluster-wide tasks without user intervention. For more information, see Cloud-Native High Availability.

Cargo Packages Support 

Artifactory natively supports a Cargo Registry for the Rust language, giving you full control of your deployment and resolve process of Cargo packages. Cargo downloads your Rust package's dependencies, compiles your packages, makes distributable packages, and uploads them to crates.io, the Rust community’s package registry. You can contribute to this book on GitHub. To learn more, see Cargo Registry.

SCIM ID Management Support

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

JFrog introduces initial support for the System for Cross-domain Identity Management (SCIM) protocol 2.0, to enable Enterprise and Enterprise+ customers to create, remove and disable user accounts from their choice of user management tool and automatically update the platform with these changes. Okta and Azure Active Directory (AD) have used to verify this capability. To learn more, see SCIM.

HashiCorp Vault Integration with the JFrog Platform

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

The JFrog Platform integration with HashiCorp Vault enables you to configure an external vault connection to use as a centralized secret management tool. Using vault allows you to store JFrog Platform GPG keys, RSA keys, and Trusted keys used to sign packages and Release Bundles as secrets in HashiCorp Vault and provides you with the capability to generate and manage keys in a centralized tool for security and compliance. To learn more, see Vault.

Private Endpoint for AWS Cloud

^{CLOUD: Enterprise with Security Pack | Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

The MyJFrog Cloud Portal enables customers to establish a secure network connection from their cloud account into their JFrog Cloud instance-without going through a public Internet-by setting establishing a private connection. MyJFrog provides customers with step-by-step instructions on how to set up a PrivateLink connection, in which the source is the customer's own AWS Virtual Private Cloud (VPC) and the target is the JFrog PrivateLink. To learn more, see Setting up Private Endpoints.

Live Logs

^{CLOUD: Enterprise+  SELF-HOSTED: Enterprise X | Enterprise+}

The JFrog Platform now includes an integrated Live Logs plugin, which allows customers to get the JFrog product logs (Artifactory, Xray, Mission Control, Distribution, and Pipelines) using the JFrog CLI Plugin. To learn more, see https://github.com/jfrog/live-logs. 

Support for User-Provided Certificates for TLS

The Access router now supports using user-provided certificates for the TLS. When setting the TLS certificates and indicating to the Platform which TLS certificate to use, customers may now use provide their own signed certificate. For more information, see Using Access as a Certificate Authority.

Feature Enhancements  

AQL Search for Remote Repository 

Using AQL, you can now search within remote and virtual repositories. For more information, see Working with Remote Repositories. 

Artifact Browser with More Filters and Advanced SetMeUp

Introducing new filters and improved SetMeUp capabilities in the Artifact Browser available to all new users and those upgrading from previous Artifactory versions. This new view and capabilities are now the default Artifact Browser view in the JFrog Platform.

Peer-to-Peer Consumption Monitoring

The JFrog Platform allows you to monitor your P2P downloads in a Self-Hosted environment within the UI. The page lists the Peers, their status, the number of files download, and the total consumption. For more information, see Monitoring Peer-to-Peer (P2P) Traffic Consumption.

Resolved Issues

Artifactory 7.17.5

Released: 4 April, 2021

Resolved Issues

Artifactory 7.17.9

Released: 14 April, 2021

Resolved Issues

Artifactory 7.17.11 

Released: 20 April, 2021

Resolved Issue

Artifactory 7.17.12 

Released: 29 April, 2021

Feature Enhancement

Access Federation REST APIs Now Public

Publicly released the Access Federation REST APIs and requires a valid admin-scoped token.

Artifactory 7.17.13

Released: May 23, 2021

Resolved Issues

Artifactory 7.16

This section includes all of the Artifactory version 7.16.x releases.

Artifactory 7.16.3

Released: March 15, 2021

Highlights

Avoiding Security Risks by Flagging Safe Repositories

You can declare local and remote repositories as ‘safe’ by enabling the ‘Priority Resolution’ field for for Local and Remote repositories. Setting Priority Resolution takes precedence over the resolution order when resolving virtual repositories. Setting repositories with priority will cause metadata to be merged only from repositories set with this field. If a package is not found in those repositories, Artifactory will merge metadata from the repositories that have not been set with the Priority Resolution field. This feature is currently supported for Docker, PyPI, RubyGems, and NPM packages but will be extended to all the package types in the upcoming releases.

P2P Functionality for JFrog SaaS Users

P2P peers can be configured to work opposite JFrog Artifactory and JFrog Artifactory Edge hosted by JFrog SaaS.

Enhancements

Database Locking Mechanism Improvements 

Improved the database locking mechanism for High Availability environments.

Resolved Issues

Artifactory 7.16.6

Released: May 24, 2021

Resolved Issues

Artifactory 7.15

This section includes all of the Artifactory version 7.15.x releases.

Artifactory 7.15.3

Released: 18 February 2021

Feature Enhancements

Improvements to RubyGems Indexing for Virtual Repositories

Added Bundler Compact index support for Virtual repositories, in addition to Local and Remote repositories, providing you with the latest version of the package that is compatible with your installed Ruby version of the project. To use this new capability, in the artifactory.system.properties file, set the artifactory.gems.compact.index.enabled=true value.

Enhanced Folder Download Functionality 

The 'Folder Download' feature is now aligned with the JFrog CLI and supports downloading empty folders. 

Group REST API Enhancements

From Artifactory 7.15.3, when running the Update Group, you can enforce using lower case characters in user names when associating users to groups, by setting the validate.lowercase.username.on.group.association to true. The default is set to false. When set to true, an error will be generated if an upper case character is used in the user name. 

Conan Package Improvements

User and channel attributes can be changed when copying and moving Conan artifacts and packages.

Additional Webhooks for Distribution

Added new events for Release Bundles on Edge Nodes, which enables you to trigger events when a Release Bundle was received on an Edge node, and when a Release Bundle deletion process has started, completed successfully, or failed. 

Quick Repository Setup

Admins can now use the Quick Setup to create repositories for selected package types in one go. With a couple of simple steps, admins can create local, remote, and virtual repositories for single or multiple package types.

Access Swagger Security Enhancement

The Access Swagger UI now requires admin token authentication.

Performance Improvements

The archive index is now set to false by default to prevent an overload on database resources.

Resolved Issues

Artifactory 7.15.4

Released: March 4, 2021

Resolved Issues

Artifactory 7.15.5

Released: May 24, 2021

Resolved Issues

Artifactory 7.12

This section includes all of the Artifactory version 7.12.x releases.

Artifactory 7.12.3

Released: 21 December 2020

Feature Enhancements

Advanced patterns supported for Docker Virtual Repositories

Extended Ignore/include patterns for Docker Virtual Repositories.

Resolved Issues

Artifactory 7.12.5

Released: 30 December, 2020

Feature Enhancements

Central P2P Peer Management in the JFrog Platform

You can now control all the P2P Peer settings centrally by storing the configurations in the JFrog Platform. All that is required is to add your settings to a YAML file and to update the settings using the REST API, directly in the UI, or through the bootstrap from the file system. The next time the Peers connect to the Tracker (Artifactory), they will be populated with the new settings. For more information, see the Central Peer Deployment and Management section in Peer-To-Peer Downloads.

Docker Authentication for Self-Hosted Customers Only

In lieu of the latest rate limitations enforced by Docker, JFrog self-hosted customers are recommended to set up Docker Hub authentication for Remote Docker repositories. 

Amazon S3 Official Amazon SDK template is set to use HTTP 

As part of JFrog's security policy, HTTP is set by default when using the official S3 Official Amazon S3 Storage template. For more information, see Amazon S3 Official SDK Template.

Resolved Issues

Artifactory 7.12.6

Released: 10 January, 2021

Resolved Issues

Artifactory 7.12.8

Released: 8 February, 2021

Resolved Issues

Artifactory 7.12.9

Released: May 24, 2021

Resolved Issues

Artifactory 7.11

This section includes all of the Artifactory version 7.11.x releases.

Artifactory 7.11.1

Released: 17 November, 2020

Highlights

Helm V3 Support

Artifactory now supports Helm 3 clients, enabling you to deploy and resolve Helm Charts using Helm V2 and V3 clients.

OCI Support

Artifactory is now OCI compliant and supports OCI clients, providing you with the ability to deploy and resolve OCI images in Docker Registries. 

Live System Logs

You can now view or download essential Platform system log files for each of JFrog's services; Artifactory, Xray, Mission Control, and Pipelines. For more information, see Viewing Log Files from the UI.

Feature Enhancements

Improvements to RubyGems Indexing for Local Repositories

Added Bundler Compact index support for Local repositories, in addition to the Remote repositories, providing you with the latest version of the package that is compatible with your installed Ruby version of the project.

To use this new capability, in the artifactory.system.properties file, set the artifactory.gems.compact.index.enabled=true value.

PostgreSQL Database Improvements

Introduced the following improvements:

• PostgreSQL database indexing improvements
• Indexing on bundle_files for delete operations

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.11.2

Released: 20 November, 2020

Resolved Issues

Artifactory 7.11.5

Released: 1 December, 2020

Resolved Issues

Artifactory 7.11.7

Released: May 24, 2021

Resolved Issues

Artifactory 7.10

Artifactory 7.10.1

Released: 11 October 2020

Highlights

New JFrog Platform Onboarding Experience 

In Artifactory 7.10.1, we have introduced a new Onboarding experience in the web UI for Admin users. This new interactive experience guides the user through the essential onboarding steps to get started with the JFrog Platform. 

Feature Enhancements

Artifactory Supports AWS Secrets for DB Connections

You can now use the AWS SecretsManager alias in the Artifactory system.yaml allowing Artifactory to automatically retrieve the secret associated with the alias connection. 

Verify Audience Restriction Applied for SAML SSO

As part of JFrog's security enforcement, an additional verification step has been set up opposite the SAML server to validate SAML SSO authentication requests. The verifyAudienceRestriction attribute for SAML SSO is set by default in the JFrog Platform for new Artifactory installations. When upgrading from a previous Artifactory release, this parameter is disabled only if SAML was already configured. For more information, see SAML SSO Configuration.

Improved Maven Plugin Metadata Calculation

Maven plugin metadata is now calculated for every deploy or delete actions.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.10.2

Released: 15 October 2020

Highlights

New JFrog Platform Onboarding Experience 

In Artifactory 7.10.2, we have introduced a new self-hosted Onboarding experience in the web UI for Admin users. This new interactive experience guides the user through the essential onboarding steps to get started with the JFrog Platform. 

Feature Enhancements

Improvements to RubyGems Indexing for Remote Repositories

Added Bundler Compact index support for Remote repositories, providing you with the latest version of the package that is compatible with your installed Ruby version of the project.

To use this new capability, in the artifactory.system.properties file, set the artifactory.gems.compact.index.enabled=true value.

Importing Release Bundle Enhancements for Air Gap

The Air Gap feature has been extended to support importing Release Bundle from an /import folder on the server machine in addition to importing files from the local drive of the user.

API Open Metrics Enhancements

Added more metrics related to JVM, DB connections, and remote HTTP connections in Artifactory. For more information, see Open Metrics.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.10.5

Released: 2 November, 2020

Feature Enhancements

Docker Registry Alignments in Artifactory to Meet Latest Docker Rate Limits

Docker Registry functionality is now optimized in JFrog Artifactory to accommodate the latest Rate Limit changes announced by Docker. We have changed the default Retrieval Cache Period to six hours and optimized the GET requests to Docker Hub by introducing HEAD requests and optimizing the usage of GET calls. To assist our Docker users, you will be will now receive a Platform level warning for every unauthenticated Docker remote repository pointing to Docker Hub. In addition, the Remote Docker Authentication section has been moved to the Remote Docker Repositories Basic Tab.

Hardened the User Login Messages 

User Login messages have been modified to provide consistent responses on enumeration attempts to prevent the disclosure of valid accounts. 

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.10.6

Released: 8 November, 2020

Feature Enhancements

Removed the hardcoded -Dartifactory.metadata.native.ui=true flag the from the startup script as it was already set as true by default.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.9

Released: 29 September, 2020

Highlights

Peer-to-Peer (P2P) Download 

The new Peer-to-Peer (P2P) Download feature allows hosts to download artifacts from local, remote, and virtual repositories through a local network of peers in addition to downloading artifacts from JFrog Artifactory. 

Downloading files using P2P provides the following benefits: 

• Handles bursts of downloads from Artifactory.
• Improves the download speed and decreases bandwidth consumption.
• Promotes the scalability and availability of your artifact downloads while providing a highly secure environment.

P2P download is supported in the JFrog Platform in a self-hosted environment and requires a JFrog Enterprise+ subscription. For more information, see JFrog Peer-to-Peer (P2P) Downloads.  

GraphQL API for the JFrog Platform Metadata

JFrog's Metadata Service public APIs are now enabled allowing you to query the entities from the metadata server with GraphQL. For more information, see GraphQL.

Log Analytics

JFrog now offers tools that enable a real-time view of the platform’s operation through various analytics and visualization tools. For more information, see Log Analytics.

Feature Enhancements

Changes in Artifactory to Facilitate the New Docker Rate Limit

Following the latest Docker announcement regarding changes to the Docker Rate Limits, Artifactory 7.9 includes several internal improvements to support the usage of remote repositories opposite Docker Hub while taking into account the new rate limits. In order to use your Docker account type, you need to authenticate the Docker Hub pull requests, by setting your user and password in your Advanced Remote Docker Repositories.

Docker Remote Repository Improvements 

Docker Schema 2 is now fetched from the remote registry if no header was sent. This improves the Docker experience when the metadata expires.

Docker Pull Performance Improvements

Greatly improved the performance of Docker pull requests by digest and by tag. From 7.9, Artifactory will use more efficient queries and better utilize the internal caching when serving Docker pull requests.

Viewing and Tracking Non-Revokable Access Tokens

You can view and track non-revokable Access Token in the UI. You can now filter the token view based on the token's revocability and not just its expiry. The behavior for a token revocation request also changed, and you will now see an error message if you try to revoke a non-revocable token. Token revocability is still governed by its expiry and the revocable-expiry-threshold parameter.

Improved the Monitoring JFrog Microservices Status Page in the UI

The Service Statuses page in the UI displays an improved view with detailed information about the status of your JFrog services and now includes monitoring for Pipelines. 

Improved Artifactory Installation and Setup Using Oracle Database

When using an external Oracle DB as the Artifactory database, you no longer need to manually install and set up Liabio as it is now bundled into the Artifactory installer.

Database Performance Improvements in HA Environments

Reduced Database lock contention and Database loads in High Availability (HA) environments.

S3 Storage Direct Upload Mechanism

From Artifactory 7.9, you have the option to select the Direct Upload Mechanism which serves as an alternative to the existing default Eventual Upload mechanism, whereby the upload is not considered successful until it reaches the S3 storage. 

Upgraded AWS SDK Bundled with Artifactory

Upgraded the AWS SDK bundled with Artifactory to support the use of service account IAM roles. AWS SDK v. 1.11.496 includes a feature for granting IAM roles to Kubernetes service accounts, instead of granting an IAM role to an EC2 machine, or using an open-source project.

Hazelcast is Deprecated

The write-locking method and UI session sharing between the JFrog Platform cluster nodes using Hazelcast is no longer supported. For more information, see the Support Blog.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.9.1

Released: 5 October 2020

Feature Enhancement

Simplified JFrog Self-Hosted Trial Installer Experience

From JFrog Artifactory 7.9.1 and JFrog Xray 3.9.1, the Self-Hosted Trial installation experience has undergone major improvements to support the easy installation of Artifactory and the option of installing Artifactory together with Xray. The new installers are not intended for Production but remove the need to manually establish connectivity between Artifactory and Xray.

Artifactory 7.9.2

Released: 20 October, 2020

Resolved Issues

1. Fixed an issue occurring in Artifactory version 7.9, whereby when installing or upgrading a JFrog Artifactory HA environment, the HA nodes sometimes failed to start due to a bad hex format for the join key. 
2. Fixed an issue, whereby missing dependencies caused RPM installs to fail on certain operating systems.

Artifactory 7.8

Artifactory 7.8.1

Released: 16 September 2020

Highlights

GraphQL API for the JFrog Platform Metadata

JFrog's Metadata Service public APIs are now enabled and allows you to query the entities from the metadata server with GraphQL. To learn more see, GraphQL.

Feature Enhancements

Docker Pull Performance Improvements

Greatly improved the performance of Docker Pull requests by digest and by tag. From 7.8.1, Artifactory will use more efficient queries and better utilize the internal caching mechanism when serving Docker Pull requests.

Viewing and Tracking Non-Revokable Access Tokens

You can view and track non-revokable Access Token in the UI. 

You can now filter the token view based on the token's revocability and not just its expiry. the behaviour for a token revocation request also changed, and you will now see an error message if you try to revoke a non-revocable token. Token revocability is still governed by its expiry and the revocable-expiry-threshold parameter.

Improved the Monitoring JFrog Microservices Status Page in the UI

The Service Status page in the UI displays an improved view with detailed information about the status of your JFrog services and now includes monitoring for Pipelines. 

Improved Database Performance in HA Environments

Reduced DB lock contention and DB load in HA setups.

Upgraded AWS SDK bundled with Artifactory

Upgraded the AWS SDK bundled with Artifactory to support the use of service account IAM roles. AWS SDK v. 1.11.496 includes a feature for granting IAM roles to Kubernetes service accounts, instead of granting an IAM role to an EC2 machine, or using an open-source project.

Disable Basic Authentication Method

When using an external authentication method such as LDAP, SAML, etc, the basic authentication method can be disabled for internal users, as described in Disable Basic Authentication Method.

Resolved Issues

Artifactory 7.7

Released: 29th July, 2020

Highlights

Users can be Assigned the Manage Resources Role

Admins can assign users with the Manage Resource role to manage resources including create, edit, and delete permissions on any resource type including Pipeline resources (Integration, Source, and Node Pools).

GraphQL Beta version Released in the JFrog Platform

This version of GraphQL is a beta version and for now, it only has a limited set of capabilities till future additions are made.

JFrog's Metadata Service has now enabled the integration of the metadata server with the GraphQL public API. Currently, only packages are supported, with more GraphQL capabilities coming in the near future. You can use the graphiql to learn about the GraphQL metadata schema and as a playground to test your queries. To access it,  <your server url>/metadata/api/v1/query/graphiql. For more information, see GraphQL.

Artifactory Open Metrics Support

Artifactory 7.7 has been enhanced to support open metrics. The new API Get the Open Metrics for Artifactory REST API command has been added and returns the following metrics in the Open Metrics format. The following two new metric-related log files are added to the file system:

• artifactory_metrics.log: Contains system metrics such as: 
  • Total disk space used
  • Total disk space free
  • Time CPU is used by the process
• artifactory_metrics_events.log: Contains deduplicated metrics related to an event such as a GC run.

For more information, see Open Metrics.

Feature Enhancements 

Improved LDAP Pagination Support Usage 

Added the Used Page Results parameter in the LDAP page to support LDAP Group pagination. This is supported for LDAP servers with more than 1000 groups which support groups pagination to allow admins to use paged LDAP results. For unsupported LDAP servers, admins can disable the LDAP pagination results via the UI or Artifactory's configuration files, thereby improving LDAP performance and calls.

Persistent Expiry Threshold Token

Added the new persistent-expiry-threshold parameter allowing you to set the minimum value of expiry a token in order for the token to be saved in the DB to the Access YAML Configuration file.

Indexing Improvements for Npm Packages  

Implemented incremental indexing as part of the existing npm indexing mechanism resulting in reduced time to build the package index.

Improved Export and Access Federation Performance in an HA Environment

Minimized the load for the Export and Access Federation processes in an HA environment when using JFrog Distribution.

Artifactory Now Supports MySQL 8 Out-of-the-box 

From Artfactory 7.7, MySQL 8 is now supported.

Upgraded Tomcat Version

The Tomcat bundled with Artifactory has been upgraded to version 8.5.57, solving some security vulnerabilities described in CVE-2020-11996, CVE-2020-13934, and CVE-2020-13935.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.7.3

Released: 13th August, 2020

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.7.6

Released: September 4, 2020

Feature Enhancements

Performance Enhancements

Implemented a set of internal improvements that will have a direct impact on the overall user Cloud experience. 

Artifactory 7.7.8

Released: 14 September, 2020

Resolved Issue

Artifactory 7.6

Released: June 23, 2020

Highlights

Alpine Linux Repository Support

Artifactory now natively supports Alpine Linux packages, giving you full control of your deployment and resolution process of Alpine Linux (*.apk) packages.

You can create secure and private local Alpine Linux repositories with fine-grained access control. Remote Alpine Linux repositories proxy remote Alpine resources and cache downloaded apk packages to keep you independent of the network and the remote resource, and virtual Alpine Linux repositories give you a single URL through which to manage the resolution and deployment of all your apk packages. To learn more, see Alpine Linux Repositories.

To support the signing of Alpine Linux package types, Artifactory now supports creating and managing RSA Key Pairs. You upload the RSA Key Pair using the Create RSA Key Pair or directly in the web UI and manage the keys directly in the JFrog Platform. Once you have generated the RSA Keys, you can assign the key pair to the Alpine Repository in the Advanced tab of the Alpine Repository configuration. For more information, see Managing Signing Keys.

JFrog Xray support for scanning Alpine Linux packages will be added in the forthcoming release.

Multi-factor Authentication 

For JFrog Platform Cloud (SaaS) users, you can now use an additional layer of security when logging into the JFrog Platform. Administrators can enable multi-factor authentication for all users, which will require users to provide a verification code from a third-party authentication application every time users log in. 

Event-driven Webhooks 

The new Webhooks feature enables you to send important events occurring in Artifactory. You have a number of events that you can select, such as Artifact Deployment or Build Deployment, and send these events to other applications that are configured by setting a URL.

These events are sent through the new Event Service, which distributes your events to the relevant URLs you set when creating your Webhooks. 

Feature Enhancements

PostreSQL Version Support

All JFrog products (excluding Pipelines) now support PostgreSQL version 10.x.

PostgreSQL Version Bundling

All JFrog’s installers bundling PostgreSQL have been updated to use a newer PostgreSQL version 10.13.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.6.1

Released: June 28, 2020

Feature Enhancements

Upgraded JDK Version in Artifactory

OpenJDK Runtime Environment bundled with Artifactory has been upgraded to build 11.0.7+10, which solves the “HIGH” CVSS from the previous version and is the latest JDK published.

Enhancements for Webhooks Events

Introduced a few fixes to Webhooks events, such as adding a build_started field to the Build events, additional fixes to Docker events, and improved payload data.

Metadata Service DB Upgraders

The DB schema required for Conan  is now enhanced to work better with metadata and optimize the search speed in Artifactory. On upgrade, no downtime is required, however, this enhancement might impact the upgrade time, depending on the amount of artifacts, possibly temporarily increasing the DB load. 

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.6.2

Released: July 6, 2020

Feature Enhancements

Improved Permissions Cache Invalidation

Improved the permissions cache invalidation mechanism by minimizing the scope of the invalidation action to only permissions associated with the specific service that needed the cache to be cleared. This allows shorter login times and better permission validation performance.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.6.3

Released: July 12, 2020

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.5

Released: May 19, 2020

Highlights

Artifactory Cloud with CDN Distribution

Artifactory Cloud Enterprise and Enterprise+ supports a fully integrated advanced CDN solution removing the need to deal with the complexity of setting up a separate external CDN Caching system. JFrog Artifactory Cloud with Amazon's CloudFront CDN solution allows you to manage, control, and distribute high volumes of software distribution across multiple locations.

The CDN solution provided in Artifactory Cloud supports distributing public content via Anonymous Access and Signed URLs, distributing private content using fine-grained permissions and Access Tokens, CNAME/SSL support, and setting IP Whitelisting and Geo Restrictions. To view the list of CDN features supported by the different JFrog subscription types, see Cloud Pricing.

From version 7.5, CDN Distribution is enabled by default for Artifactory Cloud Enterprise and Artifactory Cloud Enterprise+ users and all is that is required is to set CDN support on your repository level. For more information, see Get Started: Cloud.

Support for Signed URLs

Artifactory now supports using signed URLs. Users with administrator or manage permission can generate a signed URL that provides temporary shared access to a specific artifact, using the Create Signed URL REST API. Using the Replace Signed URL Key REST API, administrators can replace the key for signing and validating signed URLs, invalidating any signed URLs previously created. This feature is supported for Artifactory Cloud Enterprise and Enterprise+ users.

Xray Block Unscanned Artifacts Timeout Policy 

This version includes the capability to define the timeout policy for unscanned artifact download requests. This means that when a block unscanned artifacts policy is configured in Xray, Artifactory will wait for the predefined time of the policy, to allow Xray to perform the required scan. This will prevent download request failures that require Xray scan on the artifacts.

In addition, to improve artifact download performance, Artifactory will now only request Xray scans results for repositories configured with block download policy.

Configurations are available here.

** Available with Artifactory version 7.5.x and Xray version 3.4.x.

Support for RHEL 8 AppStream

Artifactory now supports Red Hat Enterprise Linux 8 which contains support for enhanced Yum metadata for AppStream (RHEL8) or Modularity (Fedora) technology used in RHEL8. An example of this new metadata includes the data type=modules metadata from repomd.xml. The Content in AppStream in RPM is available in one of two formats - the familiar RPM format and an extension to the RPM format called Modules. 

As part of the AppStream support in Artifactory, you can:

• Proxy AppStream modules through a remote RPM repository.
• Host and serve AppStream modules according to profiles and streams through a local RPM repository.
• Serve local and remote content through a virtual repository.

For more information, see Deploying RPM Modules to Your Local Repository.

Feature Enhancements

Upgraded Tomcat Version

The Tomcat bundled with Artifactory has been upgraded to version 8.5.54. 

In this upgrade, the HTTP date headers issue that existed in Artifactory 7.3.2 and 7.4.0 (that were bundled with Tomcat 8.5.51) was fixed. 

Generate Maven POM File from Internal Jar or a Default POM File REST API

You can now generate a Maven POM file using the Artifactory REST API. To use the POM within the artifact, you can deploy an existing POM, or generate a default POM. Previously available only through the UI, Deploying Maven Artifacts. 

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes. 

Artifactory 7.5.5

Released: 31 May, 2020

Resolved Issue

1. Fixed an issue whereby, issues were encountered in the task execution mechanism in HA clusters.

Artifactory 7.5.7

Released: 11 June, 2020

Feature Enhancements

Upgraded Tomcat Version

The Tomcat bundled with Artifactory has been upgraded to version 8.5.55. 

Resolved Issues

Artifactory 7.4

Released: April 6, 2020

Highlights

Go Private GitHub Repositories Support

It is now possible to create a remote Go repository and proxy Go modules from GitHub private repositories.

Additional information on how to configure Artifactory and your Go client to work with GitHub private repositories can be found here.

Conda v2 Format

Artifactory now supports the Conda v2 metadata format. You can now use Conda clients from version 4.7, and download/upload Conda v2 format packages from all repository types (local, remote and virtual).

As part of this change, Artifactory now supports the .conda file extension to compress packages more effectively and the current_repodata.json file that makes packages search faster. 

Create Admin Access Tokens from within the UI

Administrators can now generate admin-scoped access tokens, for any of the services in the JFrog Platform directly from the UI. This is available from the Administration module under Identity and Access | Access Tokens and click Generate Admin Token. Previously available only as a REST API.

Google Cloud Platform Binary Provider Native Client Support

This release introduces support for the Google Storage native client binary provider, providing improved security using unique private keys.

To opt-in and use the new Google Cloud Storage template, see here.

Feature Enhancements

Improved AQL Performance with MSSQL DB

Significant performance improvement for AQL queries when searching artifacts according to build name and number.

Docker Installation Includes Upgraded OpenJDK Version 11.0.6

The OpenJDK version that is bundled with the Artifactory Docker image was upgraded to OpenJDK 11.0.6.

Debian InRelease

Added support for Debian InRelease metadata files. Artifactory will now produce an InRelease metadata file in the repository when working with GPG signing. Downloading a Debian package from Artifactory will now be faster as the client will only download the InRelease file without downloading the Release and Release.gpg files that are heavier.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes. 

Artifactory 7.4.1

Released: 14 April, 2020

Feature Enhancements

Reverted Tomcat Version to 8.5.41

The Tomcat version previously bundled in Artifactory 7.3.2 and 7.4.0 has been reverted back to Tomcat 8.5.41 due to an issue found in Tomcat version 8.5.51. 

Just a bit of background, Tomcat was previously upgraded to version 8.5.51. Due to a known issue in Tomcat 8.5.51, Artifactory may return HTTP date headers (Date, Last-Modified) in a timezone that is different than GMT. See more details here. 

This applies only if you are using clients that make use of the "If-Modified-Since" request header in the request to Artifactory, therefore validate that dates are sent in GMT format (according to the HTTP spec mandates).

If your clients send dates in a timezone that is different than GMT format and you are using Artifactory 7.3.2, we recommend upgrading to this version. 

Setting SSL/TLS for the Artifactory Tomcat Connector via Artifactory system YAML File 

You can now enable SSL/TLS for the Artifactory Tomcat connector directly in the Artifactory System YAML file. For more information, see Artifactory Operational Microservices.

Added Support for Docker Upgrades from Legacy Artifactory Versions

You can upgrade JFrog Artifactory using Docker from Artifactory version 6.x to 7.x or from 7.x to 7.x.

Issues Resolved 

1. Improved performance when running Interactive Installers.
2. Fixed an issue whereby stopping a service using the artifactoryctl stop command failed in the first attempt if the pidof command did not exist on the installed server.

Artifactory 7.4.3

Released Date: 27 April, 2020

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes. 

Artifactory 7.3

Released: 23 March, 2020

Highlights

PAT (Personal Access Token) Support for Remote Repository Authentication

In addition to the basic authentication, with username and password, Artifactory now supports remote repository authentication using Personal Access Tokens (PAT). The big advantage of using PATs is that you can strengthen your Artifactory security practices by using Access Tokens for authentication instead of using your primary credentials. For example, you can configure your remote Docker repository to point to GitHub and authenticate it by using a PAT. You can use PATs for any package type. For more information, see  Remote Credentials. 

LDAP Improvements

Artifactory now supports a new type of Active Directory "Nested Groups" search, enabling performance improvements when working with LDAP. This feature requires that Active Directory runs on Windows Server 2012 R2 version or later. There are no additional requirements for the Active Directory Windows Server side. For more information, see Support for Nested Groups.

Write-disabled Mode Supported for Shard Storage Requests

To enhance storage sharding, Artifactory now supports disabling write-requests to shards.
This is useful, for example, when migrating data from a shard that must be replaced. First, the feature is used to write-disable the shard and then the data is migrated to a new shard.
In addition, the feature still allows garbage collection to continue to clean the deleted binaries from the write-disabled shard.

To set the write-disable mode on a shard in Artifactory, see the Configuring State-Aware Binary Provider section.

Support for Matrix-params with Conan Repositories

Feature Enhancements 

Restricting System and Repository Imports

Artifactory allows admin users to import and export data at both the system level and the repository level. For more information, see Import and Export.

Sometimes, however, it is advantageous to restrict imports to avoid causing undesirable results. With this new feature, the system and repository import options can be disabled, thereby preventing specific admin users in the enterprise from performing imports. For example, you can stop an admin from overriding the Release Bundles distributed to an Artifactory Edge, by preventing them from importing the initial Artifactory state. For more information, see Importing and Exporting.

Resolved Issues

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.3.1

Released: March 23, 2020

Resolved Issues

For a complete list of changes, please refer to our Jira Release Notes.

Artifactory 7.3.2

Released: 23 March, 2020

Feature Enhancement

Upgraded Tomcat Version in JFrog Artifactory

The Tomcat bundled with Artifactory has been upgraded to version 8.5.51.

Issues Resolved

For a complete list of changes, please refer to our JIRA Release Notes.

Artifactory 7.2 

Released: February 23, 2020

Highlight

JFrog Container Registry 7.0

JFrog Container Registry 7.0 has been released as part of the Artifactory 7.2 release. The JFrog Container Registry is powered by JFrog Artifactory with a set of features that have been customised to serve the primary purpose of running Docker and Helm packages in a Container Registry. For more information, see JFrog Container Registry.

Resolved Issues

Artifactory 7.2.1

Released: 23 February, 2020

Resolved Issues

Artifactory 7.1 

Released: February 17, 2020

Resolved Issues

1. Fixed an issue, whereby S3 CloudFront redirections did not function correctly.
2. Fixed an issue, whereby Maven snapshot were not indexed with snapshot versions in the metadata server.
3. Fixed an issue, whereby the Virtual repository info tab was displayed incorrectly when sorting by package type.
4. Fixed an issue, whereby builds were displayed incorrectly in the Build view when performing multiple promotion steps.
5. Fixed an issue, whereby Conan packages were uploaded incorrectly to Artifactory. 

Artifactory 7.0

Released: January 12, 2020

Highlights

JFrog Platform

Announcing the new JFrog Platform, designed to provide developers and administrators with a seamless DevOps experience across all JFrog products, supporting the following main features:

• Universal package management with all major packaging formats, build tools, and CI servers.
• Security and Compliance that's fully integrated into the JFrog Platform, providing full trust of your pipeline from code to production.
• Radically simplified administration with all configurations in one place.
• Complete trust in your pipeline all the way from code to production.
• Seamless DevOps experience from on-prem, cloud, hybrid or multi-cloud of your choice.

JFrog Platform New Functionalities

System Architecture

The new Artifactory architecture is more Cloud Native. The Artifactory application has been divided into several microservices. Learn More >

Artifactory system.yaml

This release introduces a new system configuration file, allowing system configurations to be handled externally to the application, before/after the installation process. Learn More > 

Installation and Upgrade

Artifactory 7.0 comes with a new installer, which affects the Installation and Upgrade procedures. The file structure has been improved and is now aligned across all JFrog products. Learn More >

Unified User Interface

This version introduces a new UI that is unified for the entire JFrog Platform, including all JFrog products. If you are using Artifactory and other JFrog products such as JFrog Xray, JFrog Distribution, JFrog Mission Control and JFrog Insights, you will now be able to access them all from within a single UI with one URL address. Learn More >

Unified Permission Model

This version unifies all JFrog product permissions, allowing easier permission management across all products from one unified UI. The Unified Permission Model enables you to create a single permission target that applies to all products installed in the JFrog Platform. Since the products are unified within the Platform, you can now use a single permission target to control the permissions of all products. Learn More >

Logging

All JFrog products now follow a standardized logging format and naming convention. Learn More >

Feature Enhancements

Packages page

While previously the Packages page provided information for Docker and npm packages, it is now extended to provide metadata for all package types in your system (excluding Git LFS and Generic repositories). Learn More >

Search Experience

The search experience has been enhanced to enable searching for all resource types, including packages, builds and artifacts from a single search bar. It now also includes advanced capabilities, such as keyword search, simplifying the search experience. Learn More >

Issues Resolved

For a complete list of changes, please refer to our JIRA Release Notes. 

Artifactory 7.0.1

Released: January 14, 2020

Issue Resolved

1. Fixed an issue whereby the Download stats propagated incorrect information to the Metadata Service, resulting in incorrect data displayed in the UI.

Artifactory 7.0.2

Released: January 15, 2020

Issue Resolved

1. Fixed an issue, whereby when performing SAML-based Single Sign-On to Artifactory, a URL with double slashes (‘//’) was returned causing the redirection requests to break.

Artifactory 7.0.3

Released: January 17, 2020

Issue Resolved