Sonatype

Sonatype Nexus Repository 3.87.0 / 3.87.1 Enterprise Updates: Java, S3, Nuget And Configuration Automation

Nexus Repository 3.87.x strengthens Java 21, S3 storage, NuGet security, configuration-as-code, and HA reliability, reducing SDLC risk and improving enterprise supply chain governance with Merito guidance.

By Chris CarpenterSonatypeNexusSDLC
sonatype-logoSonatype Nexus
Sonatype Nexus Repository 3.87.0 / 3.87.1 Enterprise Updates: Java, S3, Nuget And Configuration Automation cover graphic
Back to Sonatype release updates
Release facts
VendorSonatype
ProductSonatype Nexus Repository
Version3.87.0
Vendor release dateDecember 2, 2025
Published by MeritoDecember 27, 2025
Upgrade pathJava 21 is now the minimum version for running Nexus Repository. Teams on S3-compatible storage should check compatibility with the AWS SDK for Java 2.x before upgrading. Sonatype advises HA deployments with group blob stores created through the REST API to delay upgrading to 3.87.0-3.87.2 until a fix is available.
Vendor release notesSonatype Nexus Repository 3.87.0 release notes
Newer release coveredSonatype Nexus Repository 96: Reduce Azure artifact delivery load and strengthen audit control (September 2, 2026)
Release historySonatype Nexus Repository release history

Nexus Repository 3.87.0 and 3.87.1 are focused on hardening the backbone of enterprise software supply chains. Key updates improve Java baselines, S3 storage reliability, NuGet security, configuration automation, and operational resilience at scale. These changes reduce SDLC risk, simplify upgrades, and enhance platform stability across multi-repo, multi-cloud environments.

JAVA 21 AS THE NEW BASELINE: STRATEGIC PLATFORM ALIGNMENT

Nexus now requires Java 21, with official Docker images and installers including it by default.

Enterprise impact:

Reduced platform and security risk with a current LTS Java version.

Simplified long-term SDLC platform planning and compliance alignment.

Operational benefits:

Cleaner upgrades and fewer JVM issues across environments.

Consistent behavior for developers, testers, and release engineers.

AWS SDK 2.X FOR S3: SECURE AND RELIABLE STORAGE

The AWS SDK for S3 has been upgraded to 2.33.5, replacing 1.x versions nearing end of life.

Enterprise impact:

Avoid unsupported storage dependencies for S3-compatible backends.

Improved storage risk management and SDLC alignment.

Operational benefits:

Pre-upgrade compatibility testing reduces unexpected failures.

Detailed error logging improves S3 storage diagnostics.

REPOSITORY FIREWALL RELEASE INTEGRITY FOR NUGET

NuGet components now support Release Integrity checks, extending supply chain security to .NET packages.

Enterprise impact:

Strengthened .NET software supply chain security.

Reduced manual security review workload.

Operational benefits:

Cleaner dependency intake for developers.

Enhanced visibility for DevSecOps and QA teams.

NEW CONFIGURATION API: CONFIGURATION AND METADATA AS CODE

The Configuration API allows export, import, and migration of repository configurations and asset metadata.

Enterprise impact:

Governance across environments with consistent configuration.

Lower migration and disaster recovery risk.

Operational benefits:

Faster environment setup and replication.

Repeatable changes with safer experimentation.

OAUTH2 REALM ENABLED BY DEFAULT WITH JWT

In Nexus Repository Pro, JWT enables OAuth2 automatically, including in HA deployments.

Enterprise impact:

Consistent identity and access management across nodes.

Reduced risk during HA expansions and upgrades.

Operational benefits:

Smooth token-based access for CI/CD pipelines.

Lower friction for admins and fewer support tickets.

BLOB STORE AND STORAGE ROBUSTNESS

Enhanced blob store handling includes better cleanup, error handling, logging, and deletion reliability.

Enterprise impact:

Higher storage reliability for critical releases.

Predictable maintenance and lifecycle operations.

Operational benefits:

Reduced manual cleanup and firefighting.

Clearer diagnostics and capacity planning.

PERFORMANCE, HA, AND OBSERVABILITY IMPROVEMENTS

Updates improve Users page performance, task-specific logs, rolling upgrade resilience, and HA troubleshooting.

Enterprise impact:

Safer upgrades and schema changes.

Improved audit, support, and HA troubleshooting.

Operational benefits:

Faster user management in large orgs.

Quicker task-specific log diagnosis and CI/CD support.

COMING SOON: NEXUS REPOSITORY INSTANCE MIGRATOR

A CLI-based migrator will streamline configuration and content migration across Nexus instances, including persistent state tracking and detailed logging.

Enterprise impact:

Predictable, large-scale migrations.

Faster cloud onboarding and consolidation.

Operational benefits:

Less disruption during migration windows.

Clear operational playbooks for platform teams.

CONCLUSION: ENTERPRISE SDLC AND SUPPLY CHAIN IMPACT

Nexus Repository 3.87.x strengthens Java and S3 foundations, extends NuGet security, introduces configuration-as-code capabilities, and improves stability under enterprise workloads.

Key enterprise benefits:

Stronger control over third-party risk.

Lower operational risk during upgrades and storage operations.

Improved environment parity and repeatable configuration.

Merito helps organizations adopt these updates by designing repository topologies, integrating Repository Firewall policies, implementing configuration-as-code pipelines, and preparing for migrations with the Instance Migrator.

About Sonatype Nexus Repository

Sonatype Nexus Repository licenses, renewals, upgrades and implementation are available through Merito, an authorized Sonatype reseller and services partner.

Frequently Asked Questions