For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.
# SHA1
40db3eb67df441382971c8fb6566b86bc65976f4 dependency-track-apiserver.jar
71a8e224166a55efb163922bb9874c151b3d95eb dependency-track-bundled.jar
# SHA256
11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9 dependency-track-apiserver.jar
4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be dependency-track-bundled.jar
# SHA512
804247f629c5b5bac7f7c667789478163c8f6fcbaa9b4a7978ebcb57766d4134e9d026e92c156981f8c717b390c5cc4ba1fc837afef661e653aee8e7096d2a6a dependency-track-apiserver.jar
e047a7be9bac2b76e1f2a42722ca723a60b9b093e2bff3ed5df407a27e25a77ab6467c15ad124907fd5213781bff493e80e5563400360befb603f8e184463235 dependency-track-bundled.jar
What's Changed
Enhancements 🚀
- Improve VEX import performance by @nscuro in #6141
- Update workflows for 4.14.x maintenance by @nscuro in #6171
- Send groupby to defect dojo by @webdevred in #6130
- Include analysis.detail in DefectDojo finding payload by @webdevred in #6181
Bug Fixes 🐛
- Exclude retrieval of components and aliases during OSVDownloadTask by @ElenaStroebele in #6345
- Backport: Reject parent objects with null UUID when creating/updating/patching projects by @nscuro in #6355
- Fix Docker Hub secret names by @nscuro in #6390
- Fix NPE and redundant queries in VEX/VDR export by @heyiamwahab236 in #6614
Dependency Updates 🤖
- build(deps): bump debian from
8f0c555toa053c41in /src/main/docker by @dependabot[bot] in #6126 - build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #6142
- build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6143
- build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.3 to 5.1.4 by @dependabot[bot] in #6144
- build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6145
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #6146
- build(deps): bump docker/build-push-action from 6.19.2 to 7.1.0 by @dependabot[bot] in #6147
- build(deps): bump lib.protobuf-java.version from 4.34.1 to 4.35.0 by @dependabot[bot] in #6158
- build(deps): bump debian from
a053c41to5012d05in /src/main/docker by @dependabot[bot] in #6157 - build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.41 to 2.1.42 by @dependabot[bot] in #6155
- build(deps): bump org.slf4j:log4j-over-slf4j from 2.0.17 to 2.0.18 by @dependabot[bot] in #6154
- build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #6148
- build(deps): bump eclipse-temurin from 25.0.2_10-jdk-alpine to 25.0.3_9-jdk-alpine in /src/main/docker by @dependabot[bot] in #6161
- build(deps): bump org.metaeffekt.core:ae-security from 0.154.0 to 0.155.0 by @dependabot[bot] in #6164
- build(deps): bump org.apache.maven:maven-artifact from 3.9.15 to 3.9.16 by @dependabot[bot] in #6160
- chore(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #6177
- chore(deps): Bump dessant/lock-threads from 6.0.0 to 6.0.1 by @dependabot[bot] in #6174
- chore(deps): Bump dessant/lock-threads from 6.0.1 to 6.0.2 by @dependabot[bot] in #6236
- chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6235
- chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6234
- chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.3 to 1.28.4 by @dependabot[bot] in #6256
- chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.3 to 1.28.4 by @dependabot[bot] in #6258
- chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.42 to 2.1.43 by @dependabot[bot] in #6259
- chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.3 to 1.28.4 by @dependabot[bot] in #6257
- chore(deps): Bump io.github.nscuro:versatile-core from 0.18.1 to 0.18.3 by @dependabot[bot] in #6339
- chore(deps): Bump alpine from 3.23 to 3.24 in /src/main/docker by @dependabot[bot] in #6337
- chore(deps): Bump io.pebbletemplates:pebble from 4.1.1 to 4.1.2 by @dependabot[bot] in #6300
- chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6299
- chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.5.0 by @dependabot[bot] in #6301
- chore(deps): Bump debian from
5012d05toda0bfd2in /src/main/docker by @dependabot[bot] in #6370 - chore(deps): Bump debian from
da0bfd2to34363c2in /src/main/docker by @dependabot[bot] in #6384 - build(deps): bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 by @dependabot[bot] in #6168
- Bump Alpine to 3.8.0 by @nscuro in #6391
- chore(deps): Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 by @dependabot[bot] in #6409
- chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #6410
- chore(deps): Bump lib.protobuf-java.version from 4.35.0 to 4.35.1 by @dependabot[bot] in #6425
- chore(deps): Bump alpine from
a2d49eatof5064d3in /src/main/docker by @dependabot[bot] in #6421 - chore(deps): Bump alpine from 3.24 to 3.24.1 in /src/main/docker by @dependabot[bot] in #6432
- chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.43 to 2.1.44 by @dependabot[bot] in #6469
- chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.8 to 2.1.9 by @dependabot[bot] in #6484
- chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 by @dependabot[bot] in #6485
- chore(deps): Bump org.metaeffekt.core:ae-security from 0.155.0 to 0.156.0 by @dependabot[bot] in #6486
- chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.0 to 0.156.1 by @dependabot[bot] in #6489
- chore(deps): Bump eclipse-temurin from
c3e62cdtoc3e62cdin /src/main/docker by @dependabot[bot] in #6487 - chore(deps): Bump debian from
34363c2toee12ffbin /src/main/docker by @dependabot[bot] in #6503 - chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.4 to 5.1.5 by @dependabot[bot] in #6510
- chore(deps): Bump io.github.nscuro:versatile-core from 0.18.3 to 0.19.0 by @dependabot[bot] in #6534
- chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.1 to 0.156.2 by @dependabot[bot] in #6535
- chore(deps): Bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #6536
- chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #6537
- chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.5 to 5.1.6 by @dependabot[bot] in #6549
- chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.4 to 1.28.6 by @dependabot[bot] in #6548
- chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.44 to 2.1.45 by @dependabot[bot] in #6559
- chore(deps): Bump eclipse-temurin from
c3e62cdtob8ba5fcin /src/main/docker by @dependabot[bot] in #6567 - chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 by @dependabot[bot] in #6584
- chore(deps): Bump actions/setup-java from 5.3.0 to 5.4.0 by @dependabot[bot] in #6585
- chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.2 to 0.156.3 by @dependabot[bot] in #6586
- chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 by @dependabot[bot] in #6589
- chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.4 to 1.28.6 by @dependabot[bot] in #6587
- chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.4 to 1.28.6 by @dependabot[bot] in #6593
- chore(deps): Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 by @dependabot[bot] in #6596
- chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.6 to 5.1.7 by @dependabot[bot] in #6597
- chore(deps): Bump io.github.nscuro:versatile-core from 0.19.0 to 0.20.0 by @dependabot[bot] in #6588
- chore(deps): Bump io.github.nscuro:versatile-core from 0.20.0 to 0.21.0 by @dependabot[bot] in #6617
- chore(deps): Bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #6666
- chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6665
- chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6664
- chore(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #6663
- chore(deps): Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 by @dependabot[bot] in #6682
- chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 by @dependabot[bot] in #6754
- chore(deps): Bump actions/setup-java from 5.4.0 to 5.5.0 by @dependabot[bot] in #6753
- chore(deps): Bump debian from
ee12ffbto328d164in /src/main/docker by @dependabot[bot] in #6748 - Bump bundled frontend to 4.14.3 by @nscuro in #6763
Other Changes
- Add v5 migration notes by @nscuro in #6151
- Update Docker Hub secrets for v4 publish workflow by @nscuro in #6173
- Add changelog for 4.14.3 by @nscuro in #6762
New Contributors
- @heyiamwahab236 made their first contribution in #6614
Full Changelog: 4.14.2...4.14.3