dzikoysk/reposilite 3.6.4

on GitHub

Changes

• #2765 Update dependencies and build tooling across all modules
  • Mitigate CVE-2026-91403 in the Java runtime bundled with Docker images by blocking compromised eMudhra certificates
  • Apply the certificate blocklist to both build and runtime images
  • Standalone JAR deployments require a patched Java runtime or the runtime mitigation
  • Keep Jackson on the compatible 2.x line
• #2724 Introduce the experimental repository provider API
  • This plugin API is experimental and may change in future releases
  • Allow plugins to register repository providers with shared routing and access control
  • Validate repository names and reject duplicate registrations
  • Plugin authors: RepositoryVisibility moved from com.reposilite.maven to com.reposilite.repository.api
  • Repositories sharing an S3 bucket must use distinct prefixes or a shared bucket prefix with unique repository names; overlapping namespace validation was removed
• #2760 Increase the default Javadoc entry size limit from 2 MiB to 10 MiB
  • Allow overriding the limit with the reposilite.javadocs.max-entry-bytes system property
• Replace ApexCharts with Chart.js for dashboard charts
  • Add icon controls for zoom, pan, reset, CSV export and PNG export
  • Improve empty states, single-point charts and date-range changes
  • Scope license checks to distributed backend and frontend modules
• Fix release workflow authentication for Axion

Sponsors
Thanks to everyone who supported me this month 💛

Minimal requirements

• Java 17+
• 32MB+ RAM

Downloads

• JAR: Reposilite 3.6.4 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.6.4
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.6.4
• Helm: helm.reposilite.com