Unable to find POMs for version 3.68.1-02

[nesc58]

Hi,
there are missing packages for the version 3.68.1-02.
e.g. the mvnrepository does not show the version. Latest available version is 3.68.0-04:
https://mvnrepository.com/artifact/org.sonatype.nexus.plugins/nexus-plugins

Is there a release problem so the packages are not longer pushed anymore?

Thanks

[nblair]

Per the release notes, 3.68.1-02 is an urgent bug fix that addresses CVE-2024-4956.

We have intentionally suspended the sync of the EPL-licensed source code to this repository in order to provide time for Pro and OSS customers to adopt the latest release. This may delay attempts for an exploit to be developed.

We expect to restore the sync of the source code for that branch and future releases with next month's release. We apologize for the inconvenience.

[nesc58]

Thank you for the explanation and clarification.

I am asking because I want to update our nexus instance (we are using docker). But we need to compile some plugins that reference some of the not published packages.

Is it necessary to compile plugins against the deployed version e.g. now the 3.68.1-02 or can I compile the plugins against an older version e.g. 3.68.0-04 and everything should work? The plugins provides us some additional repository types.

Thanks

[nblair]

Yes, compiling against 3.68.0-04 is going to be API compatible and will work.

[nesc58]

Everything is working fine. Thank you for the answers