Concurrent scan evaluations now complete successfully in Sonatype IQ Server 209.1 when the server is under high load and auto-waiver path-forward conditions are configured. This CLM-60022 fix addresses an issue that could cause concurrent evaluations to hang the server.
Concurrent scan evaluation stability
For pipeline users, this means concurrent policy evaluations complete in the affected high-load configuration rather than hanging the server. The correction applies when auto-waiver path-forward conditions are configured; it does not change policy criteria, waiver options, or integration steps.
Upgrade consideration
IQ Server validates SSH repository URLs when source-control configurations are saved and used. Supported formats are user@host:path and ssh://[user@]host[:port]/path. Paths may contain letters, digits, ., _, ~, /, +, -, and %20 for an encoded space.
After upgrade, stored SSH URLs containing other characters, including percent-encoded characters other than %20, stop working. IQ Server logs a startup warning listing affected applications and organizations. Switch those repositories to an HTTPS repository URL.
What this means for your team
AppSec engineers can expect completed evaluations in the affected workflow. Developers can receive policy results from concurrent pipeline scans instead of a hung server. CISOs and audit managers retain results from the configured policy process; 209.1 adds no new policy or reporting controls.
Based on the official Sonatype release notes.
How Merito helps
Merito can help teams plan and validate self-managed IQ Server upgrades, including repository URL checks and pipeline testing. See Sonatype services and implementation services. This support can cover upgrade preparation and post-upgrade validation for the stated changes.
Merito is an authorized Sonatype reseller and services partner. Our Sonatype IQ Server team can scope licensing, sizing, and rollout for 209.1, and our enterprise upgrade services help you plan and validate the upgrade with minimal disruption to release schedules.