3.5.12

Security

In a collaboration with GitHub Security Lab (big thanks to @artsploit 🤍) we've managed to resolve 3 vulnerabilities noticed in Reposilite:

• GHSL-2024-072
• GHSL-2024-073
• GHSL-2024-074

It is highly recommended to update your instances as soon as possible to mitigate the risks. For the time being, we're not revealing details on each one of them, but every instance running on versions between 3.3.0 to 3.5.11 should be considered as vulnerable.

Other changes

• Fixed invalid SHA checksums generated for files uploaded via the dashboard (thanks @laszlof)
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, joshuasing, insertt, GotoFinal, mcebular, Koressi, tipsy, Kamilkime, that-apex, SirEndii, crejk, Rollczi, Jan Bojarczuk

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.12 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.12
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.12
• Helm: helm.reposilite.com

3.5.11

Changes

• #2101 Make sure simulated intermediate directories does not contain duplicated routes
• #2098 Use id -u instead of $UID to verify if current user is root
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, joshuasing, insertt, GotoFinal, mcebular, Koressi, tipsy, Kamilkime, that-apex, SirEndii, crejk, Rollczi, Jan Bojarczuk

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.11 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.11
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.11
• Helm: helm.reposilite.com

3.5.10

Changes

• GH-2097 Fixed Swagger UI
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, joshuasing, insertt, GotoFinal, mcebular, Koressi, tipsy, Kamilkime, that-apex, TheFruxz, SirEndii, FlawCra, crejk, Rollczi, Jan Bojarczuk

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.10 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.10
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.10
• Helm: helm.reposilite.com

3.5.9

Changes

• GH-2076 Experimental redirect plugin that mounts root directories from one of your repository as top-level endpoints. It can be enabled via -Dreposilite.redirect.default-repository=<repository-name> flag.
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, joshuasing, insertt, GotoFinal, mcebular, Koressi, tipsy, Kamilkime, that-apex, TheFruxz, SirEndii, FlawCra, crejk, Rollczi, Jan Bojarczuk

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.9 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.9
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.9
• Helm: helm.reposilite.com

3.5.8

Changes

• #2072 Use multithreaded semaphore based locking mechanism for read/write operations
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, joshuasing, insertt, GotoFinal, mcebular, Koressi, tipsy, Kamilkime, that-apex, TheFruxz, SirEndii, FlawCra, crejk, Rollczi, Jan Bojarczuk

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.8 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.8
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.8
• Helm: helm.reposilite.com

3.5.7

Changes

• #2055 Support reposilite.ldap.disable-user-password-authentication flag
• #2048 Replace local retry mechanism with shared lock
• #2051 Update javalin-swagger-plugin to Javalin 6.0.1 (thanks @Koboo ❤️)
• Bumped dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, insertt, GotoFinal, Koressi, tipsy, Kamilkime, that-apex, joshuasing, TheFruxz, SirEndii, crejk, Rollczi, Szczurowsky, Kebab81

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.7 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.7
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.7
• Helm: helm.reposilite.com

3.5.6

Changes

• #2047 Import proper FileAlreadyExistsException exception

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, insertt, GotoFinal, Koressi, tipsy, Kamilkime, that-apex, joshuasing, TheFruxz, SirEndii, crejk, Rollczi, Szczurowsky, Kebab81

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.6 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.6
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.6
• Helm: helm.reposilite.com

3.5.5

Changes

• #2044 Handle NoSuchFileException for some javadoc related files
• #2044 Increase cached failure stacktrace depth
• #2027 Cover FileAlreadyExistsException exception in FileSystemStorageProvider
• #2042 Fix logic in isMetadataFileValid (thanks @mkrueger92 ❤️)
• #2026 Display unauthorized host in authentication error log entry
• Bump dependencies
  • #2028 Move to Javalin 6.0
  • Others

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, insertt, GotoFinal, Koressi, tipsy, Kamilkime, that-apex, joshuasing, TheFruxz, SirEndii, crejk, Rollczi, Szczurowsky, Kebab81

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.5 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.5
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.5
• Helm: helm.reposilite.com

3.5.3

Changes

• #2021 Disable Loom before initializing the web thread pool
• #2018 Allow to set max age for metadata files in PRIORITIZE_UPSTREAM_METADATA policy (thanks @mkrueger92 ❤️)
• #2019 Fix matching the db dialect name in migration
• Bump dependencies

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, insertt, GotoFinal, Koressi, tipsy, Kamilkime, that-apex, joshuasing, TheFruxz, SirEndii, crejk, Rollczi, Szczurowsky, Kebab81

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.3 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.3
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.3
• Helm: helm.reposilite.com

3.5.2

Changes

• #2004 Replace null with undefined in session details check in file browser component
• #1960 Use JDK21 in official Docker image and make sure Loom is disabled in Javalin

Sponsors
Thanks to everyone who supported me this month 💜

Active GitHub Sponsors

milkyway0308, andrm, rdehuyss, insertt, GotoFinal, Koressi, tipsy, Kamilkime, that-apex, joshuasing, TheFruxz, SirEndii, crejk, Rollczi,

Minimal requirements

• Java 11+
• RAM 32MB

Downloads

• JAR: Reposilite 3.5.2 ~ from Reposilite 3.x based repository ʕ•ᴥ•ʔ
• Docker: Docker Hub - Reposilite $ docker pull dzikoysk/reposilite:3.5.2
• Docker: Docker - GitHub Registry - $ docker pull ghcr.io/dzikoysk/reposilite:3.5.2
• Helm: helm.reposilite.com