README.md

@@ -155,7 +155,7 @@ You can also access the database cli shell as:
 sudo -i                               # switch to the root user.
 systemctl stop nexus                  # make sure nexus is not running while you use the database.
 su -s /bin/bash nexus                 # switch to the nexus user.
-nexus_home=/opt/nexus/nexus-3.84.1-01 # make sure you have the correct version here.
+nexus_home=/opt/nexus/nexus-3.84.0-03 # make sure you have the correct version here.
 nexus_data="$(realpath $nexus_home/../sonatype-work/nexus3)"
 install -d $nexus_data/../tmp
 rm -f $nexus_data/../tmp/h2-*.jar

hello-world-pypi-package/requirements.txt

@@ -3,8 +3,8 @@ build==1.3.0
 certifi==2025.8.3
 cffi==2.0.0
 charset-normalizer==3.4.3
-cryptography==46.0.1
-docutils==0.22.2
+cryptography==45.0.7
+docutils==0.22
 id==1.5.0
 idna==3.10
 importlib_metadata==8.7.0

provision/provision-nexus.sh

@@ -35,12 +35,12 @@ pushd /opt/nexus
 # see https://help.sonatype.com/en/download-archives---repository-manager-3.html
 # see https://help.sonatype.com/en/release-notes.html
 # see https://help.sonatype.com/en/sonatype-nexus-repository.html
-nexus_version=3.84.1-01
+nexus_version=3.84.0-03
 nexus_home=/opt/nexus/nexus-$nexus_version
 nexus_tarball=nexus-$nexus_version-linux-x86_64.tar.gz
 nexus_download_url=https://download.sonatype.com/nexus/3/$nexus_tarball
 wget -q $nexus_download_url
-tar xf $nexus_tarball # NB this creates the $nexus_home (e.g. nexus-3.84.1-01) and sonatype-work directories.
+tar xf $nexus_tarball # NB this creates the $nexus_home (e.g. nexus-3.84.0-03) and sonatype-work directories.
 rm $nexus_tarball
 sed -i -E 's,#!.+,#!/usr/bin/bash,g' "$nexus_home/bin/nexus"
 install -d -o nexus -g nexus -m 700 .java # java preferences are saved here (the default java.util.prefs.userRoot preference).
@@ -541,8 +541,8 @@ EOF
 #    as such, we cannot use our docker-group registry, instead we must use the docker-proxy
 #    registry, enable the Docker Bearer Token Realm and allow anonymous access to it.
 #    see https://github.com/moby/moby/issues/30880
-# NB this will make https://nexus.example.com:5002/v2/library/debian/manifests/trixie-slim proxy
-#    to https://registry-1.docker.io/v2/library/debian/manifests/trixie-slim
+# NB this will make https://nexus.example.com:5002/v2/library/debian/manifests/buster-slim proxy
+#    to https://registry-1.docker.io/v2/library/debian/manifests/buster-slim
 #       https://registry-1.docker.io/v2/library/golang/tags/list
 http \
     --check-status \

provision/provision-nexus/Makefile

@@ -17,7 +17,7 @@ binaries: binaries-download
 
 binaries-download:
 	mkdir -p binaries
-	wget -qO- https://download.sonatype.com/nexus/3/nexus-3.84.1-01-unix.tar.gz \
+	wget -qO- https://download.sonatype.com/nexus/3/nexus-3.84.0-03-unix.tar.gz \
 		| tar xzf - --strip-components 1 -C binaries
 
 clean:

provision/provision-nexus/pom.xml

@@ -8,7 +8,7 @@
   <version>1.0-SNAPSHOT</version>
 
   <properties>
-    <nx-version>3.84.1-01</nx-version>
+    <nx-version>3.84.0-03</nx-version>
   </properties>
   <dependencies>
     <dependency>

provision/use-apt-repository.sh

@@ -36,7 +36,12 @@ gpg --dearmor -o "$nexus_apt_hosted_keyring_path" </vagrant/shared/apt-hosted-pu
 
 # configure the apt-hosted repository.
 echo "deb [arch=amd64 signed-by=$nexus_apt_hosted_keyring_path] https://$nexus_domain/repository/apt-hosted jammy main" >"/etc/apt/sources.list.d/$nexus_domain-apt-hosted.list"
-apt-get update
+# NB for some odd reason, nexus 3.84.0-03, does not immediately sign the
+#    repository metadata after a package is uploaded, so to prevent the
+#    following error, we loop until apt-get update succeeds.
+#       E: The repository 'https://nexus.example.com/repository/apt-hosted jammy Release' is not signed.
+# see https://github.com/sonatype/nexus-public/issues/725
+while ! apt-get update; do sleep 5; done
 
 # install the hello-world package.
 apt-get install -y hello-world

provision/use-docker-repository.sh

@@ -68,14 +68,14 @@ module example.com/go-hello
 go $go_version
 EOF
 cat >Dockerfile <<EOF
-FROM golang:$go_version-trixie AS builder
+FROM golang:$go_version-bookworm AS builder
 WORKDIR /app
 COPY go.* main.go ./
 RUN CGO_ENABLED=0 go build -ldflags="-s"
 
-# NB we use the trixie-slim (instead of scratch) image so we
+# NB we use the buster-slim (instead of scratch) image so we
 #    can enter the container to execute bash etc.
-FROM debian:trixie-slim
+FROM debian:bookworm-slim
 COPY --from=builder /app/go-hello .
 WORKDIR /
 EXPOSE 8000

provision/use-maven-repository-from-gradle.sh

@@ -13,7 +13,7 @@ cd tmp/use-maven-repository-from-gradle
 # download and install gradle.
 # see https://gradle.org/releases/
 # renovate: datasource=github-releases depName=gradle/gradle
-gradle_version='9.1.0'
+gradle_version='9.0.0'
 if [ ! -f /opt/gradle/gradle-$gradle_version/bin/gradle ]; then
     apt-get install -y unzip
     wget -qO/tmp/gradle-$gradle_version-bin.zip https://services.gradle.org/distributions/gradle-$gradle_version-bin.zip
@@ -36,8 +36,8 @@ cat >settings.gradle <<'EOF'
 rootProject.name = 'gradle-greeter'
 EOF
 cat >build.gradle <<'EOF'
-// see https://docs.gradle.org/9.1.0/userguide/java_library_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/maven_plugin.html
+// see https://docs.gradle.org/9.0.0/userguide/java_library_plugin.html
+// see https://docs.gradle.org/9.0.0/userguide/maven_plugin.html
 
 plugins {
     id 'java-library'
@@ -106,8 +106,8 @@ EOF
 # renovate: datasource=maven depName=com.gradleup.shadow:shadow-gradle-plugin
 com_gradleup_shadow_version='9.1.0'
 cat >build.gradle <<EOF
-// see https://docs.gradle.org/9.1.0/userguide/java_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/application_plugin.html
+// see https://docs.gradle.org/9.0.0/userguide/java_plugin.html
+// see https://docs.gradle.org/9.0.0/userguide/application_plugin.html
 // see https://gradleup.com/shadow/
 // see https://github.com/GradleUp/shadow
 

renovate.sh

@@ -13,12 +13,12 @@ gitea_container_name="$(basename "$(dirname "$(realpath "${BASH_SOURCE[0]}")")")
 
 # see https://hub.docker.com/r/gitea/gitea/tags
 # renovate: datasource=docker depName=gitea/gitea
-gitea_version='1.24.6'
+gitea_version='1.24.5'
 
 # see https://hub.docker.com/r/renovate/renovate/tags
 # see https://github.com/renovatebot/renovate/releases
 # renovate: datasource=docker depName=renovate/renovate
-renovate_version='41.124.0'
+renovate_version='41.98.2'
 
 # clean.
 echo 'Deleting existing Gitea...'
@@ -30,7 +30,7 @@ install -d tmp
 # start gitea in background.
 # see https://docs.gitea.io/en-us/config-cheat-sheet/
 # see https://github.com/go-gitea/gitea/releases
-# see https://github.com/go-gitea/gitea/blob/v1.24.6/docker/root/etc/s6/gitea/setup
+# see https://github.com/go-gitea/gitea/blob/v1.24.5/docker/root/etc/s6/gitea/setup
 echo 'Starting Gitea...'
 docker run \
     --detach \