Skip to content

Introduction#

Version 2022.04.0-7

This document contains the notes associated with each release of RStudio Package Manager. Please contact RStudio customer support (support@rstudio.com) with questions about the described changes.

RStudio Package Manager 2022.04.0#

April 12, 2022

This release of RStudio Package Manager provides new insight into which packages have pre-built binaries available for your desired R version and distribution. It also contains various improvements to Git building and many other bug fixes.

New

  • The UI now displays whether a binary file is available for a CRAN package, and provides a link to download the binary package if available. On the package page, scroll down to the new "Binary File" section, and select a distribution and R version to check binary availablility for that environment. To learn more about when binaries are available, see the Binary Availability documentation.
  • Adds two new Server API endpoints to query available binary packages, /repos/{id}/packages/{name}/binaries and /repos/{id}/binaries.
  • The /status API now returns Package Manager's list of supported R versions for binary packages.
  • Adds a new configuration stanza Manifest that can be used to change the outgoing URL, set a Basic authentication User, and set an encrypted Password field.
  • Adds support for HTTPS credentials for Git builders. HTTPS credentials can imported using the new rspm import https-credential command, used to create Git builders using the rspm create git-builder --credential=<name> command, and listed using the new rspm list git-credentials command. See Importing an HTTPS credential for more information, including how to import credentials securely.
    • With the addition of HTTPS credentials, several commands have been changed to support both SSH keys and HTTPS credentials, including the addition of a new rspm import ssh-key subcommand to specifically import SSH keys. See the Breaking changes in this release for more information.
  • When importing an SSH key with a passphrase, the passphrase file may now contain encrypted text from the rspm encrypt command.
  • Adds --remove-credential argument to the rspm edit git-builder command, to dissociate a credential from a Git builder.
  • Adds a new Git.AllowFileURLs configuration option that can be used to create a Git builder based on a local Git repo.
  • Adds a new composite index to the metrics table to improve package view performance.
  • Adds a new S3Storage.KMSKeyID configuration option that can be used to enable client-side encryption before transferring files to S3. See the S3 storage documentation for caveats and additional information.
  • Adds the ability to configure Package Manager with environment variables. See the configuration documentation for additional information and examples.
  • Adds a new /robots.txt endpoint to help search engine crawlers know what URLs they can access.
  • System requirements and distribution updates will now use reloaded URL configurations. These previously required an application reboot to take effect.
  • CSV files output with rspm add --csv-out can now be imported into R and used with tools::package_dependencies() to analyze dependencies before adding packages to a curated CRAN source.
  • Rename the button Client OS to Distribution to allow for great flexibility in the future.
  • Group official RStudio-supported distributions in the distribution picker.

Fixed

  • Fixed a bug that was truncating commit and published timestamps from appearing for built Git packages. This fix will only work for published packages moving forward.
  • Fixed an issue where some packages README images were not rendering correctly.
  • Fixed an error with the /alerts API endpoint when storage auditing is disabled.
  • Updated rspm encrypt command to output only the result on stdout.
  • Fixed an issue where the locked status of a CRAN snapshot source was not accurately reflected in the frozen URL description.
  • Fixed an issue where the UI could display invalid archived versions for packages in CRAN snapshot sources.
  • System requirements and distribution updates will now use reloaded URL configurations. These previously required an application reboot to take effect.
  • Removed the need to create socket file when running migrate utility, which requires that RSPM not be running.
  • Fixed an issue with storage alerts for local file systems. This was preventing the service from starting properly.
  • Fixed an issue where cache eviction tasks could run more frequently than intended and cause RSPM to respond slower.
  • Package Manager no longer requires the --privileged flag to run in a Docker container. However, sandboxed Git builds still require system calls not permitted by Docker's default seccomp profile, and mount operations not permitted by the default AppArmor profile. You will need to either (a) start the container with --security-opt 'seccomp=unconfined' and --security-opt 'apparmor=unconfined'; (b) provide alternative seccomp and AppArmor profiles; or (c) set Git.AllowUnsandboxedGitBuilds = true in your configuration to disable sandboxed builds entirely.
  • The RSPM installer for RHEL 8 is now correctly signed with the RStudio GnuPG key.
  • Fixes a bug that was causing some CLI commands to fail with a 5xx response. In the logs this appeared as ERROR: payload string too long (SQLSTATE 22023).

Breaking

  • Deprecates the CRAN.ManifestURL, Bioconductor.ManifestURL and PyPI.ManifestURL configuration options. Note that users should configure the new Manifest.URL option.
  • Removes the outdated info-cran command from the offline downloader.
  • Deprecates calling the rspm import command without either the ssh-key or https-credential subcommand.
  • Deprecates the --ssh-key argument to the rspm create git-builder command in favor of the --credential flag.
  • Deprecates the rspm delete ssh-key subcommand in favor of the more general rspm delete git-credential.
  • Deprecates the --new-ssh-key argument to the rspm edit git-builder in favor of the --new-credential argument.
  • Deprecates the rspm list ssh-keys command in favor of rspm list git-credentials.
  • Refactor the files and directories storage documentation into multiple pages.
  • Removes the Source and Binary buttons on the Setup page for CRAN and Bioconductor. This simplifies how binary and source packages are displayed and served to the user.
  • Changed field name from Name to Package in rspm add --csv-out CSV output file to be compatible with the standard package database format in R.
  • CentOS Linux 8 has reached vendor end of support and is no longer supported. RHEL 8 remains supported, and continues to use centos8 in its binary package repository URLs for backward compatibility.
  • openSUSE 15.2 and SLES 15 SP2 have reached vendor end of support and are no longer supported.

RStudio Package Manager 2021.12.0#

December 23, 2021

New

  • Adds support for openSUSE 15.3 and SLES 15 SP3.
  • Adds a new configuration option Server.LegacyCalendarTransactionURL that can be used to revert single-source repositories to use a numeric identifier (e.g. /repo/4115) in the calendar URLs instead of the default hash values.
  • The calendar will now display the snapshot date as a valid date on the calendar instead of the transaction date for CRAN snapshot sources.
  • Introduced code splitting to improve webpage loading times.

Fixed

  • Performed security and dependency upgrades for libraries used by the server and web interface.
  • Improved the caching layer throughout the product. This should result in faster package downloads, page loads, and greater scalability due to lower database usage.
  • Fixed a timezone issue where the browser's selected calendar date and the URL generated by the server could differ by one day.
  • Fixed an issue with leadership election that could result in two or more leaders being elected and the Error verifying cluster integrity: node list length differs log line.
  • Fixed an issue with leadership election that could result in the Error pushing leader assumption work to queue log line, failing requests, and/or the service taking a long time to restart.
  • Fixed an issue with leadership election and multiple interfaces on an instance resulting in the node "X" with IP "Y" from store not known by leader log line.
  • Fixed an issue serving R package binaries for new operating systems, such as openSUSE 15.3 and SLES 15 SP3.
  • Fixed an issue that prevented system requirements from being listed for new operating systems, such as openSUSE 15.3 and SLES 15 SP3.
  • Fixed an issue that could prevent R packages encoded in Latin-1 from being installed in R 3.5 or below.
  • Fixed an issue with static assets not caching correctly in the UI.
  • Fixed a bug that was incorrectly logging Warning: SQLite directory error message for some PostgreSQL installations.

Breaking

  • The calendar will now only display dates as selectable when an update or transaction occured for that repository. The rspm url create command can be used to generate a URL for any date and set of transactions.
  • The default minimum TLS version is now correctly configured as 1.1, instead of defaulting to 1.0. Note that this can be changed using the HTTPS.MinimumTLS configuration option.

RStudio Package Manager 2021.09.0#

September 8, 2021

This release of RStudio Package Manager contains a new calendar view and improved way to freeze your set of packages. It also contains logging improvements and many important bug fixes.

New

  • Introduces a new, more flexible repository calendar. Users can now freeze to any date in the repository's history, and frozen repository URLs now include the snapshot date in YYYY-MM-DD format. The calendar is now supported in many cases where it previously was not, particularly for repositories with multiple sources. Existing repository URLs that use a numeric identifier (e.g.,/repo/4155) are still supported, and will continue to work. More information about the calendar is available in the User Interface Overview section of the Admin Guide.
  • Adds a rspm url create command to create a frozen repository URL, and a rspm url explain command to explain what a frozen repository URL encodes.
  • RSPM can now serve binary packages for new R versions and operating systems without upgrading to a new version. The list of supported platforms is now synced from the RStudio Package Service.
  • Git-builders may now be edited using the rspm edit git-builder command to change the SSH key, Git URL, branch, and subdirectory.
  • Git-builders using "commits" triggers may now be configured to use the version in the DESCRIPTION file instead of the unique, timestamped version. See the new Git.ForceDescriptionVersion configuration option for more information.
  • Adds additional logging indicating when CRAN, Bioconductor, and PyPI packages are being checked for updates.
  • A PID file is now created to track the Package Manager process ID.
  • Adds two new sections to the documentation that describe available command-line options: Command-Line Interface and Offline Downloader.
  • Logs are now available through journalctl.
  • The UI and CLI will now provide better error messages to help customers get started with setting up repositories and sources.
  • The general performance of the rspm-offline-downloader get cran command has been improved. By default the concurrency value is set to 10 and the --concurrency flag accepts higher values for quicker downloads.
  • Adds a more helpful error message when attempting to unsubscribe a Bioconductor repo from a source. This action is not allowed because Bioconductor repos are automatically subscribed to sources.
  • Adds support for the Bioconductor books repository. The books repository will be available in Bioconductor sources after the next Bioconductor sync.
  • The PyPI source now supports YYYY-MM-DD date aliases for frozen repository URLs.
  • Adds a new rspm completion command to generate a CLI autocompletion script for Bash. More information is available in the Admin Guide.
  • Starting with this release, RSPM will now use a calendar-based versioning scheme.

Fixed

  • Fixes an issue where Bioconductor syncs could treat the order of sync actions incorrectly, leading to sources that fail to sync. This issue only affects users of Bioconductor repositories. If you are upgrading from RSPM 1.2.0 or 1.2.2, please use rspm sync --type=bioconductor to re-sync your Bioconductor sources. The 1.2.2.1 release includes this step, and you need not repeat it if you already updated to that release.
  • Fixes a bug that could schedule two or more interfering package updates for the same source.
  • Fixes a bug where some SSH keys with passphrases were not being imported correctly.
  • Fixes a bug that prevented packages from being added to curated CRAN sources with certain --snapshot flag values.
  • Fixes a bug that could prevent the election of a leader in HA clusters.
  • The PostgreSQL driver has been upgraded to recover more quickly from lost connections and TCP resets. This also fixes an issue where some Azure customers were seeing a read: connection reset by peer error.
  • Fixes a bug where HA clusters could not verify node integrity.
  • Fixes loss of state in leader election during a loss of Postgres connection.
  • All errors in PyPI sync are now retried so that more syncs are successful.
  • Fixes confusing error message when Server.TempDir is not writable.
  • The recommended CRAN snapshots for Bioconductor were too early and could cause Bioconductor package installations to fail. For Bioconductor repositories, we recommend configuring R to use the revised CRAN snapshots on the Setup page. For R repositories, we recommend adding an appropriate CRAN snapshot using the revised instructions in the Admin Guide.
  • Fixes the instructions for using Bioconductor packages in an offline environment with newer versions of BiocManager (1.30.12 and above). If you are unable to use BiocManager offline, refer to the revised instructions on the Bioconductor repository Setup page.
  • Fixes a XSS-vulnerability with the experimental API swagger docs. The swagger UI has been upgraded to the latest version 3.51.1 in the process.
  • Fixes a PyPI sync bug that was impacting PostgreSQL users with the search_path option.
  • Fixes a rare bug that could prevent the application from starting after upgrading from version 1.1.6.1-* or earlier.
  • Fixes an issue with serving PyPI packages with plus signs in their filename.

Breaking

  • The default logging location has been moved from /var/log/rstudio-pm.log to /var/log/rstudio/rstudio-pm/rstudio-pm.log. This will also impact the access logs.
  • The following operating systems have reached vendor end of support and are no longer supported:
    • Ubuntu 16.04 (Xenial Xerus)
    • openSUSE 42.3
    • openSUSE 15.1
    • SLES 15 SP1
  • Dates returned to the Usage Stats page are now ISO 8601 dates rather than a full RFC3339 timestamp.
  • The minimum number of PostgresPool.MaxOpenConnections will now be set to 10.
  • Air-gapped customers using Bioconductor with RSPM 1.2.0 or 1.2.2 are required to fetch the new v4/1 schema after upgrading RSPM to 2021.09.0, but before syncing the Bioconductor source. Please refer to the admin guide for more details. The 1.2.2.1 release includes this step, and you need not repeat it if you already updated to that release.
  • The date aliases for the CRAN source will now use UTC as the basis for the date.
  • Both the Activity page and the Setup page will now use UTC for all dates and times.

Deprecated/Removed

  • Deprecates the Git --branch option when used in conjunction with the --build-trigger=tags flag.
  • Discontinues support of openSUSE 15.1, SLES 15 SP1, and Ubuntu 16.04 (Xenial Xerus) R binary packages. RSPM will continue to serve existing binary packages for these operating systems in perpetuity, but no longer provide new binary packages after several months. Please refer to the Admin Guide for more information about the supported operating systems and R versions for binary packages.
  • Internet Explorer 11 is no longer supported. Please see our Platform Support page for a list of supported browsers.
  • Deprecates the --cache-dir flag from the rspm-offline-downloader get cran command as caching and fast updates will now be enabled by default.

RStudio Package Manager 1.2.2.1#

May 13, 2021

New

  • Adds support for serving precompiled binary packages for R 4.1.

Fixed

  • Fixed an issue where Bioconductor syncs could treat the order of sync actions incorrectly, leading to sources that fail to sync. This issue only affects users of Bioconductor repositories. After installing this release, please use rspm sync --type=bioconductor to re-sync your Bioconductor sources. Bioconductor updates for the previous RSPM versions (1.2.0, 1.2.2) will not be updated going forward.
  • Fixed an issue where Bioconductor syncs could fail when using PostgreSQL.

Breaking

  • Air-gapped customers using Bioconductor with RSPM 1.2.0 or 1.2.2 are required to fetch the new v4/1 schema after upgrading RSPM to 1.2.2.1, but before syncing the Bioconductor source. Please refer to the admin guide for more details.

RStudio Package Manager 1.2.2#

March 02, 2021

New

  • Package Manager now provides filesystem storage auditing and alerting. When storage exceeds user-configurable thresholds, the server will alert in the log as well as the UI. More information is available in the Admin Guide.
  • Operational metrics can now be exported via a Prometheus-compatible endpoint to empower your own monitoring and alerting systems. More information is available in the Admin Guide.
  • Python packages now display additional release information including download links, SHA256 values, and the yank status.
  • Python packages release are now paginated in the UI.
  • Use the new [Storage].Default option to configure all variable storage classes together, for example setting [Storage].Default = S3 will ensure all packages are written to your S3 bucket.
  • Configure the maximum time to wait when connecting to the database by using the [Database].ConnectionTimeout option.
  • Package Manager can now be installed on both openSUSE 15.2 and SLES 15 SP2 systems.
  • Precompiled R binary packages are now available for openSUSE 15.2 and SLES 15 SP2.
  • System requirements information can now be listed for openSUSE 15.2 and SLES 15 SP2.
  • Additional startup validation is performed when using PostgreSQL with a search path.
  • Clusters now automatically elect a leader node. The leader manages jobs like schedule syncing and cache eviction to avoid duplicated work.
  • Package Manager now uses asynchronous messaging instead of database locking to track active work (like syncing CRAN sources); this improves performance and helps eliminate database resource contention.

Fixed

  • Fixes an issue that could result in syncing snapshots more than once, resulting in corrupted data. In the unlikely event that your installation is affected by this bug, you will be unable to start RSPM, and you will see the following error in the log: 
    Error running services: Error: Unable to initialize a connection to the
database: UNIQUE constraint failed: checkpoints.source_id, checkpoints.guid, checkpoints.version
    If your installation is affected, please contact support. You can reinstall the previous RSPM version and continue using RSPM until the issue is resolved.
  • Some malformed or incorrect database configurations prevented startup and did not crash, these will now timeout accordingly.
  • Improves robustness of PostgreSQL database connections by automatically reconnecting when connections are lost.
  • Git builders now respect the specified --ssh-key flag when cloning repositories.
  • Fixes a race condition when building large Git repositories that was causing intermittent failures.
  • Fixes an issue with adding Git packages that have blank lines in their DESCRIPTION file.
  • Duplicate Python packages are no longer presented in the UI.
  • Some Python packages and files were missing from RSPM.
  • Patches the UI dependency marked to remove a potential Denial-of-Service (DoS) vulnerability.
  • We've improved the PyPI source sync operation; syncing should complete much more quickly and reliably. See the breaking change below about resubscribing and resyncing Python repositories.

Breaking

  • RStudio Package Manager no longer supports Red Hat Enterprise Linux/CentOS Linux 6.x.
  • Any Python repositories previously subscribed to the PyPI source need to be resubscribed and resynchronized. For more information, see the PyPI quickstart guide.
  • Removes Git support from the rspm add command. Use the new rspm create git-builder command going forward.
  • Removes deprecated rspm clear-cran command. Use the new rspm clear --type=cran command going forward.
  • RSPM will now validate S3 storage configuration options on start up.

RStudio Package Manager 1.2.0#

November 24, 2020

Bioconductor Support

  • Bioconductor is now supported through a series of changes. We recommend upwards of 1 TB additional disk storage, and admin CLI actions are required to enable Bioconductor. Learn more about how to serve Bioconductor packages in the admin guide.
  • Adds a new Bioconductor repository type. Bioconductor repositories can be created using the rspm create repo --type=bioconductor command.
  • Adds new source types representing Bioconductor releases and R repositories within a release. These sources can be added to Bioconductor or R repositories.
  • Adds a new --type flag to the sync command that distinguishes between syncing CRAN and Bioconductor metadata.
  • Adds rspm-offline-downloader support for Bioconductor data.
  • Adds support in the web interface for Bioconductor repositories, including a new Setup page for working with BiocManager and Bioconductor repositories.
  • Adds support in the CLI for listing Bioconductor repositories, sources, and packages. Adds a new rspm list bioconductor versions command to list available Bioconductor releases.
  • Adds support to the Server API for Bioconductor metadata and repository information.

PyPI (Beta)

  • PyPI mirroring is now supported in beta through a series of changes and additions. We recommend upwards of 1 TB additional disk storage, and admin CLI actions are required to enable PyPI. Learn more about how to serve PyPI packages in the admin guide.
  • Adds a new Python repository type. Python repositories can be created using the rspm create repo --type=python command.
  • Adds new --type flag to the sync command that distinguishes between syncing CRAN and PyPI metadata.
  • Adds a PyPI config section for setting PyPI related configuration attributes such as the PyPI sync schedule.
  • Adds a new pypi source that is enabled by default when using a Python repository.
  • Adds support for listing and searching for Python packages.
  • Adds support in the web interface for PyPI repositories including searching for and displaying package data.
  • Adds support for routing pip requests.
  • Adds support for tracking PyPI package downloads and corresponding display in the Usage section of the web interface.
  • Adds support to the Server API for PyPI metadata and repository information.
  • Adds a new rspm clear --type=pypi command to clear PyPI metadata, for removing PyPI as a source, or for re-syncing a fresh copy.

Changes to Curated CRAN Sources

  • Curated-CRAN sources can now be created using a --snapshot flag to specify an initial snapshot date. For example --snapshot=2019-11-07. A new rspm list cran snapshots command shows the available snapshot dates.
  • Curated-CRAN source add and update operations now support passing a snapshot date via the --snapshot flag, e.g., --snapshot=2019-11-07. Passing the --transaction-id flag is deprecated but still supported. The --commit flag is now required for both.
  • A new source type, cran-snapshot is available for creating a source that contains ALL of CRAN but only for a specific date. Like Curated-CRAN sources, CRAN-Snapshot sources can be updated using the rspm update command.

Misc

  • Adds new storage classes for Bioconductor and PyPI. If you use a non-default storage location for packages (e.g., S3), please configure the correct storage location for Bioconductor and PyPI before upgrading.
  • BREAKING: Removes the rspm-offline-downloader get-cran command. Use rspm-offline-downloader get cran going forward.
  • Improves download resiliency of the rspm-offline-downloader tool through increasing the number of retries and adding a timeout using exponential back-off.
  • Adds new --starting-snapshot flag to the rspm-offline-downloader tool that can be used to download RSPM CRAN data starting at a particular snapshot. Note: This does not impact R package binary downloads.
  • Adds new validate-cran command to the rspm-offline-downloader to validate that the destination contains all relevant snapshots and directories for RSPM to work correctly.
  • Updates the rspm edit repo command to no longer require the --new-name flag when updating a repository's description.
  • Fixes a bug where local and Git packages could have missing package dependencies.
  • Prevents source sync from occurring thirty minutes after the desired schedule.
  • NOTICE: When using Postgres, RStudio Package Manager now verifies that a minimum version of 9.5 is being used. A warning message will be logged if the version of Postgres being used is older. The 9.5 minimum version is also noted in the PostgreSQL section of the Database chapter of the Admin Guide.
  • Updates UI search to prioritize exact matches first, also restricts matching-search to three or more characters.
  • Deprecates the clear-cran command. Use the new clear --type=cran command going forward.
  • Fixes a bug that could result in job queue deadlock under load. This prevents issues that could cause the RSPM service to stop responding.
  • Adds a response header to help identify Package Manager in requests: X-Repository-Type: RSPM
  • The Activity page in the web interface now shows the snapshot dates for the cran source, not the dates the snapshots were synchronized. This makes the Activity page easier to navigate and consistent with the repository calendar.
  • A repository that only subscribes to the cran source can now be indexed by dates as well as transaction IDs. The date aliases are shown in the repository Setup page where applicable.
  • The Package page now displays older package versions in descending chronological order.

RStudio Package Manager 1.1.6.1#

July 13, 2020

  • Fixes a bug where Git builders could be created in non-Git sources, causing the rspm list git-builders and rspm list git-builds commands to fail.

RStudio Package Manager 1.1.6#

June 23, 2020

  • BREAKING: Removes the --dryrun CLI flag that was required when adding or updating packages to curated-CRAN sources. Attempting to use this flag will result in a command error.
  • BREAKING: Use the Apache Combined Log Format as the default access log format instead of the Apache Common Log Format. Switch back by setting Server.AccessLogFormat = "common".
  • BREAKING: The CLI now waits for commands to complete by default. The following CLI commands are affected: rspm sync, rspm create git-builder, rspm run git-builder, and rspm rerun git-builder. Use the new --no-wait flag to run these commands asynchronously without waiting. The --wait flag remains available for backwards compatibility.
  • Adds rspm offline and rspm online admin CLI commands to support taking services offline and bringing them back online safely.
  • Adds rspm cluster offline and rspm cluster online commands to the admin CLI to support taking multiple nodes in a cluster offline and bringing them back online.
  • Adds a rspm cluster nodes command to the admin CLI to support listing nodes in a cluster.
  • Adds a rspm config debug logger commmand to temporarily alter the debug log configuration without restarting the Package Manager server.
  • Updates the Admin Guide High Availability and Load Balancing chapter with a new guide for upgrading a cluster.
  • Adds a new experimental Server API documentation for commonly requested endpoints. For more information see the new documentation.
  • Adds support for Ubuntu 20.04 LTS.
  • Adds support for serving precompiled binary packages for Ubuntu 20.04 LTS.
  • Adds support for listing system requirements of packages on Ubuntu 20.04 LTS.
  • Adds new Proxy.User and Proxy.Password configuration options to securely configure outbound proxies.
  • Deprecates the rspm add command for Git packages. Use rspm create git-builder going forward.

RStudio Package Manager 1.1.4.1#

May 20, 2020

  • Adds support for serving precompiled binary packages for R 4.0.

RStudio Package Manager 1.1.4#

April 10, 2020

  • Adds a new storage class for CRAN. Upgrading will result in a migration of existing CRAN packages and README files to the new storage class. If you use a non-default storage location for packages (e.g., S3), please configure the correct storage location for CRAN before upgrading. All CRAN packages will be moved to the new CRAN storage location upon service startup. If your installation has downloaded many CRAN packages, this may take some time, and the service will be unavailable until the migration is complete.

If the storage class configured for CRAN is of a different type than the packages storage class, startup will fail. If you wish to migrate CRAN packages to a different storage type, enable the Migration.EnableMixedClassMigration = true configuration property.

  • Adds eviction for orphaned packages. Git and local packages that are stored but no longer referenced in any sources will be removed periodically.
  • Adds a new CLI command list git-builds that can be used to review Git builder runs and debug potential problems.
  • Adds better caching and improves performance by:
    • Adding configurable settings for in-memory caching.
    • Caching system requirements data for better performance.
    • Enabling package request caching by default.
  • Updates the license-manager command to incorporate recent bug fixes.
  • Adds the package size for local and Git packages to the Web client.
  • Adds the Git SHA to the Web client when displaying package information for packages from Git sources.
  • Adds an example configuration file that includes all the available configuration settings and their defaults at /etc/rstudio-pm/rstudio-pm.gcfg.defaults.
  • Fixes a bug where adding Git packages via SSH could fail with certain SSH server configurations.
  • Fixes a bug where adding Git packages could fail with custom R startup files present.
  • Fixes an issue with rendering SVG images in package READMEs.
  • Fixes an issue where build-id files installed in /usr/lib/.build-id/ could conflict with other RStudio products and cause install errors.
  • Fixes an issue where out-of-sync system requirements could prevent the server from starting. This improves support for running RStudio Package Manager in offline (air-gapped) environments.
  • Updates the admin guide, licenses, and news documentation to use mkdocs.

RStudio Package Manager 1.1.2#

February 26, 2020

  • RStudio Package Manager 1.1.2 includes beta support for pre-compiled R package binaries for Windows. Windows R package binaries can be installed much faster without the need to install system dependencies. More details are available in the admin guide.
  • Support for CRAN repos with versions older than 1.0.6 has been removed. Updating to version 1.0.6 or later is now required for CRAN support.
  • Eviction Policies
    • Adds the ability to configure eviction policies that control the lifetime of stored objects. Eviction policies can be used to keep server disk usage to a minimum. Learn more in the admin guide.
    • Startup after upgrading RStudio Package Manager may take some time since all stored objects will be recorded in the database. If you are upgrading multiple nodes in a cluster, please allow the first node to completely start up before starting additional nodes.
  • Fixes a bug where a bad database connection to PostgreSQL or SQLite would cause a panic.
  • Support for TLS 1.3. Access to this TLS version is available without additional configuration.
  • The setting HTTPS.ExcludedCiphers has been removed and is no longer supported. The HTTPS.MinimumTLS setting should be used to specify a minimum accepted TLS version. We recommend running a secure proxy when your organization has more complex HTTPS requirements.
  • Adds support for serving precompiled binary packages for CentOS/RHEL 8.
  • Adds support for listing system requirements of packages on CentOS/RHEL 8.
  • Fixes a bug where shutting down the server sometimes resulted in orphaned job launcher processes.
  • Adds a migration utility that can be used to migrate to a different database provider. Learn more in the admin guide.
  • Fixed a bug in which CPU usage of the rstudio-pm service would increase over time when using SQLite as a database.

RStudio Package Manager 1.1.0.1#

November 22, 2019

  • Fixes a bug that both impacted the server performance and resulted in potentially serving incorrect binaries when fetching binary packages for a non-current checkpoint.

RStudio Package Manager 1.1.0#

October 31, 2019

  • Adds two new configuration settings, Server.PackageRewriteCompressionLevel and Server.PackageRewriteBufferSize that can be used to improve performance when installing packages in local sources. Learn more in the admin guide.
  • Deprecates the --dryrun flag that was required when updating packages to curated-CRAN sources.
  • The rspm-offline-downloader now supports downloading Linux R package binaries for offline environments. Learn more in the admin guide.
  • Adds a new Proxy.URL configuration option to have RStudio Package manager use an outbound server proxy when making HTTP and HTTPS requests.
  • Stops support of Ubuntu 14 (Trusty Tahr). With the Ubuntu EOL, and RStudio six-month support coming to a close, we will no longer be testing or supporting RStudio Package Manager on this version of Ubuntu.
  • Deprecates the CRAN.SyncMode setting. Future releases will not support eager syncing for CRAN and curated-CRAN sources. The air-gapped installation approach can be used for situations that require preemptive downloads for CRAN or curated-CRAN packages. Learn more in the admin guide.
  • Fixes a bug preventing git packages with a large number of tags from building.
  • Adds support for installing very large packages in local sources.
  • Adds support for SUSE Linux package binaries. See the repo setup page for more information.

RStudio Package Manager 1.0.14#

October 2, 2019

  • This release includes bug fixes and significant performance improvements.
  • Deprecates the --dryrun flag that was required when adding packages to curated-CRAN sources.
  • Adds support for RHEL 8.

RStudio Package Manager 1.0.12#

September 10, 2019

  • Beta: Introduces support for linux package binaries. Precompiled package binaries will be available for the majority of CRAN packages using R 3.4, 3.5 and 3.6 for Ubuntu 16.04 (Xenial), Ubuntu 18.04 (Bionic) and CentOS/RHEL 7. Please refer to the admin guide to start serving binaries.
  • Introduces a service log which can be used to analyze how Package Manager is serving source vs. binary packages. Learn more in the admin guide
  • RStudio Package Manager installers are now signed. Our signing key is available on the RStudio website. The Installation instructions in the RStudio Package Manager Admin Guide explains adding the RStudio key to your Linux distribution.
  • Fixed bugs related to building Git packages and added log messages which can help diagnose Git problems more quickly.

RStudio Package Manager 1.0.10#

July 8, 2019

  • Introduces a new CLI command to list system requirements for packages in a given repository. Run rspm list requirements --help for more information.
  • The system requirements for a repository are also available in the UI. See the Setup page for a respository in the UI.
  • Updated UI Javascript code to address moderate CVEs published by NPM.
  • Fixed a bug that prevented package system requirements from displaying correctly in certain circumstances.
  • Fixed bugs and improved performance for transaction handling (i.e. "pinning" a repository to a certain date).
  • NOTICE: When using Postgres, RStudio Package Manager now verifies that a minimum version of 9.4 is being used. A warning message will be logged if the version of Postgres being used is older. The 9.4 minimum version is also noted in the PostgreSQL section of the Database chapter of the Admin Guide.

RStudio Package Manager 1.0.8#

April 18, 2019

  • RStudio Package Manager now helps users find and install system dependencies of R packages for supported Linux operating systems. Installation commands for known system dependencies are displayed on the package page. System dependency information will be available after syncing. See the Admin Guide for more details.
  • The process for setting up an air-gapped environment is simplified by using a new tool which does not require the AWS CLI. See the Admin Guide for updated setup instructions.
  • Running RStudio Package Manager in a clustered environment using S3 as a backing filesystem is now officially out of beta.
  • Improvements to logging when Git builders fail will help to more quickly diagnose problems with the build environment.
  • Package listing and search is now much faster.
  • Rendering package README files is improved and several layout bugs are fixed.
  • RStudio Package Manager is now available for SUSE Linux Enterprise 15.

RStudio Package Manager 1.0.6#

March 11, 2019

  • BREAKING: Air-gapped customers are required to fetch the new v3/1 schema after upgrading before syncing the CRAN source. See the Admin Guide for more information.
  • Important updates and fixes to Package Manager's CRAN source. Past CRAN checkpoints will remain available. Users will see corrected browsing behavior for a small percentage of packages for new syncs.
  • README files are rendered in the web page for each package. READMEs for packages in existing local and Git sources will be extracted automatically upon upgrading. READMEs for the CRAN source will be available after syncing. READMEs for existing packages in curated-CRAN sources will be unavailable, but, after syncing the CRAN source and updating the curated-CRAN source, READMEs for new and updated packages will be available.

RStudio Package Manager 1.0.4#

January 25, 2019

  • BREAKING: The R processes that build Git packages now run inside a sandbox for security. Only customers using Git sources are affected. SUSE/Ubuntu users will not require any changes. If you are using CentOS/RHEL, you will need to either (a) configure the Git.AllowUnsandboxedGitBuilds = true configuration setting, (b) reconfigure RStudio Package Manager to run as root, or (c) enable user namespace support (CentOS/RHEL 7 only). If you are running RStudio Package Manager in a Docker container, you will need to either (a) start the container with the --privileged flag or (b) configure the Git.AllowUnsandboxedGitBuilds = true configuration setting. Please consult the Admin Guide for more information.
  • Archived packages (packages with no current versions) are now displayed in the RStudio Package Manager UI.
  • The Setup page in the UI now includes a calendar that allows you to freeze your set of packages to a particular checkpoint.
  • Added beta support for shared storage using AWS S3. See the Admin Guide for more information. IMPORTANT: AWS S3 support is in beta. Please do not use S3 for production data at this time.

RStudio Package Manager 1.0.2#

December 5, 2018

  • Git packages can now be built from subdirectories within a Git filesystem.
  • Git packages can now use SSH keys with or without a passphrase.
  • SSH connections when performing Git operations now utilize a private SSH agent process for improved security.
  • Git packages now include the commit SHA in the package DESCRIPTION file for reference.
  • Fixed a bug where Git commits could be built out of order if they were recorded in different timezones.
  • Fixed a bug where Curated CRAN sources might need an CRAN update prior to an initial sync.

RStudio Package Manager 1.0.0#

October 17, 2018

  • RStudio 1.0 is the first generally available release of the product. RStudio license terms, conditions, and limits apply. Contact sales@rstudio.com for more details.
  • RStudio Package Manager can automatically track R packages in Git (including GitHub, Bitbucket, and GitLab). Tracking Git endpoints requires a valid installation and configuration of R. Private endpoints are supported using ssh-keys. See the Admin Guide for details.
  • Improved messaging for CLI commands and CRAN sync operations.
  • CRAN synchronization will not happen until a manual sync has occurred or a repository subscribes to a cran source or curated cran source.
  • BREAKING: A sync schedule of 12:00AM (server time) daily is now enabled by default. To only have manual syncs, configure a blank SyncSchedule in the [CRAN] configuration. See the Admin Guide for details.

RStudio Package Manager 0.7.0#

September 4, 2018

  • BREAKING: The new default minimum TLS version for the HTTPS listener is "1.1", in compliance with PCI Data Security Standards. Previously, TLS 1.0 was enabled by default. Additionally, it is now possible to specify the minimum TLS version using the HTTPS.MinimumTLS configuration setting.
  • Fixed a bug in which CPU usage of the rstudio-pm service would increase over time.
  • Added a new configuration flag, HTTP.ForceSecure, that makes RStudio Package Manager set the Secure flag on all of its cookies. This provides extra security when running RStudio Package Manager behind a HTTPS-terminating proxy. HTTP.ForceSecure also sets the Strict-Transport-Security header on all web connections.

RStudio Package Manager 0.6.0.1#

August 2, 2018

  • Fixed a bug in which empty files were being served for packages.rds and packages.gz files in the /bin/ directory. This was causing problems in R versions 3.4.4 and greater when a user attempted to install more than one package.

RStudio Package Manager 0.6.0#

July 31, 2018

  • Added Usage Statistics for analyzing package downloads and package licenses over time.
  • Compress (gzip) the packages and archive RDS files before serving them to clients.
  • Added row.names to the packages RDS file.
  • The CLI list sources output now includes source types.
  • Added a CLI list command that outputs a tree of all repos and sources.
  • Added a CLI fetch command to initial eager package fetching.
  • The CLI now uploads local packages using multi-part uploads to the API. Only the CLI needs permission to read files you are uploading, and relative paths are supported.
  • Added support for minor migrations for CRAN sources. Minor migrations are typically used for supplementing CRAN sources with additional metadata.
  • Added the SystemRequirements and NeedsCompilation fields to CRAN sources.
  • Improved the informational and error messages displayed during curated CRAN operations.
  • Fixed a bug that resulted in reading the wrong package DESCRIPTION file in some CRAN packages that include DESCRIPTION files at multiple paths.

RStudio Package Manager 0.5.0#

June 28, 2018

  • BREAKING: RStudio Package Manager's support for CRAN metadata was simplified. RStudio Package Manager now includes a single, default CRAN source and the fetch mode and sync schedules are defined server-wide in the configuration file. If you have existing CRAN sources, they will be dropped when upgrading. A new cran source will be created automatically. Use the CLI to subscribe existing repositories to the new cran source and to sync the new cran source. Example: If you had a repository named prod that subscribed to an CRAN source named cran-src, you will need to run: rspm subscribe --repo=prod --source=cran and rspm sync after upgrading.
  • BREAKING: The CRANTimeout and FetchTimeout configuration properties have been moved to a new [CRAN] configuration section. If you included either of these two properties under your [Server] configuration section, you will need to move them to a new [CRAN] configuration section.
  • RStudio Package Manager now includes curated CRAN sources, giving administrators the ability to host approved subsets of CRAN instead of taking an all-or-nothing approach. Administrators add packages, preview changes, and even perform dry runs before running updates. The admin guide contains examples and quick start guides.
  • The [CRAN] configuration section now includes SyncSchedule and SyncMode settings. The SyncSchedule setting accepts a crontab format for scheduling synchronization of the CRAN source. The SyncMode setting defaults to lazy but can be configured as eager for eager package downloading. The sync schedule and mode were previously configured using the CLI.
  • Admins can now edit source names, repository names, and repository descriptions using the edit CLI command.
  • Added an [API] configuration section that includes the settings MaxApiResults and DefaultApiResultsLimit for configurable API result limits.
  • Added documentation for air-gapped environments. See the Admin Guide for details.
  • Eliminates external fonts in the UI.
  • The activity page for a CRAN source now lists the historical date represented by a sync operation instead of the date the sync occurred.
  • Removed the CLI sync-wait command and replaced it with a flag. You can now run rspm sync --wait instead.
  • Better support for the URL property that appears in many CRAN package DESCRIPTION files. This property appears in CRAN packages as URL, Url, and url, which are all now supported.
  • The package date for archived packages is now displayed in the UI.
  • The CLI reorder command allows reordering source subscriptions for a repository. This allows you to change the priority for resolving conflicts when two sources include a package with the same name.
  • Fixed a bug that prevented using the UI through a proxy that prepends a prefix to the RStudio Package Manager URL.
  • Include Content-Length and Last-Modified headers when serving a package tarball.
  • Support for Ubuntu 18.04.
  • SUSE Enterprise Linux 12 SP3+ Support.

RStudio Package Manager 0.4.0#

May 3, 2018

  • BREAKING: Sources can no longer be hidden. Since repositories can subscribe and unsubscribe from sources (since 0.2.0), there is no need to hide sources. Sources that were previously hidden will no longer be hidden after upgrading to this release. If your repositories subscribed to hidden sources that should remain hidden, please unsubscribe those repositories from the hidden sources before upgrading.
  • Added the ability to version and migrate CRAN sources. This allows RStudio Package Manager to replace outdated or flawed CRAN sources without losing transaction history.
  • Added a /ping endpoint to allow services to more easily monitor the service's status. It always responds with an empty JSON message and a 200 status code.
  • Sources cannot be deleted when associated with any repositories. A repository's source subscriptions and unsubscriptions are all recorded permanently. To preserve a repository's immutable historical records, no sources that were ever associated with an existing repository may be deleted. If you need to delete a source, you must first delete any repositories that at any time subscribed to the source.

RStudio Package Manager 0.3.0#

March 26, 2018

  • BREAKING: This release incorporates major improvements to sources typed as cran. Packages in existing sources typed as cran will be removed when upgrading. Administrators should initiate synchronization for any sources typed as cran after upgrading.
  • KNOWN BUG: When using an NFS share for [Server].DataDir, there can be delays of up to 60 seconds when initailly serving particular files including the PACKAGES files for a particular repository. When using the "lazy" sync mode with CRAN, this delay can also occur the first time a version of a package is served. This latency can be improved by shortening the length of time attributes are cached on your NFS clients (see the acdirmax and noac NFS mount options). We will work to resolve this latency in a subsequent release.
  • Added support for multiple current versions of CRAN packages.
  • Support synchronizing multiple CRAN checkpoints simultaneously. This greatly reduces the time to synchronize a CRAN source.
  • CRAN checkpoints are cached to avoid redundant downloads. This greatly reduces the time to synchronize CRAN sources.
  • Introduced better logging configuration options to provide helpful logging during CRAN synchronization without overwhelming logs. Also added trace-level synchronization logging.
  • Added a sync-wait command to the CLI. This command lets you wait for synchronization to complete after you initiate a synchronization.
  • The RStudio Package Manager service now manages its /var/run/rstudio-pm directory correctly to avoid missing domain socket files on operating systems that use temporary file systems for the /var/run directory.
  • More consistently sort/order packages. Previous RStudio Package Manager releases ordered packages inconsistently when using PostgreSQL vs. SQLite.
  • Sort archived packages by version in the RStudio Package Manager Web client.
  • Fixed a bug that prevented package link (depends, imports, etc.) versions from being displayed in the RStudio Package Manager Web client.
  • Added the ability to specify a description for repositories, which are displayed via the CLI and the UI.

RStudio Package Manager 0.2.0#

January 29, 2018

  • The RStudio Package Manager service now runs under an unprivileged account. By default, the service runs under the rstudio-pm account. See the admin guide appendix on changing the RunAs User if you need to adjust the service account.
  • BREAKING: Upon upgrading, if you previously configured RStudio Package Manager with alternative data directories, cache directories, log files, or .gcfg locations, you will need to manually change ownership on these files/directories to the new rstudio-pm service account. See the admin guide appendix on changing the RunAs User for more information.
  • BREAKING: The internal structure of Package Manager has changed. Repositories no longer contain packages directly, but instead repositories are composed of one or more "sources". Sources are typed as either local or cran. See the admin guide for more details. Due to this change, upgrading to 0.2 will wipe all existing repositories. Administrators should recreate the repositories using the source + repo model. Any CRAN packages that were previously downloaded will be retained on the server and can be accessed after a new repository is configured. Local packages will need to be re-added. Additionally, the cache directory, /var/lib/rstudio-pm/cache can be removed prior to upgrading to save disk space.
  • BREAKING: The administrator command line interface (CLI) has been significantly refactored for easier use. Any scripts developed with the previous CLI should be rewritten. The new CLI does not require root. Instead, admins should be part of the rstudio-pm unix group. Instructions for changing the group are included in the admin guide.
  • BREAKING: Package Manager now tracks the number of downloads for each package. To do so, a new database was added for storing metrics. Servers using Postgres will need to create a new database and populate the [Postgres].MetricsURL configuration option or disable metrics by setting [Server].MetricsEnabled = false. Servers using the SQLite database (the default) will not need to alter their configuration; a new database will be created alongside your existing one.
  • The [Server].MetricsRetention configuration option specifies when to reap metrics that have expired.
  • The Package Manager web interface displays additional information about packages, including prior archived versions.
  • In version 0.1.0 users were prompted to name the repository RSPM. The new Overview page suggests naming the repository according to the repository name on Package Manager.
  • A date parsing error that occurred when adding local packages was fixed.
  • A number of bugs were fixed to properly sync CRAN packages including properly archiving prior package versions and correctly displaying the Depends, Suggests, and Imports fields.

RStudio Package Manager 0.1.0#

November 20, 2017

  • This is the initial alpha release of RStudio Package Manager.