DependencyTrack/dependency-track 4.14.4 on GitHub

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
94b907639f56fadce3e20026178d0c6d7f4ff2a0  dependency-track-apiserver.jar
54ef0146414037b875d2670a1e282845d13a5516  dependency-track-bundled.jar
# SHA256
08a8f517f571e5c2a3c4392de044ae8668beb0b2dec1bf172082676d1a9f9ad1  dependency-track-apiserver.jar
5b993cfe4cf7855feba8b7454a529100186537f46ebbe9651b6c720ab184a9d1  dependency-track-bundled.jar
# SHA512
671e439ec338e496ccc51c29f10df28da9b88f3749c4f29d2e3ca73fad080c119487a42a3ed2e62d288dc1db2bd83ad70e7eade39a2ae96a2e287969f0301905  dependency-track-apiserver.jar
75e108bdd1fe7a58615999da3de9b1f5a0e46080bc1d6e2856b31d7a1858109d6fc99dfd03ef2ea08cef1006b5d428ee55ff4d2344e0c8d7a34739f3c8d47837  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

fix(notifications): improve Jira Perform Test logging and status handling by @valentijnscholten in #6792
Backport: Bump cyclonedx-core-java and json-schema-validtor libs by @nscuro in #6963
Backport: Add CycloneDX 1.7 support by @nscuro in #6966
Backport: Remove unnecessary enrichment when querying for individual projects by @nscuro in #7258
Backport: Use modern CycloneDX tools metadata by @nscuro in #7259

Bug Fixes 🐛

Fix User-Agent header missing for various HTTP requests by @nscuro in #7254
Backport: Fix excessive churn of vulnerable software associations during mirroring by @nscuro in #7256
Backport: Stop bumping AffectedVersionAttribution.lastSeen by @nscuro in #7257
Fix FK violations when deleting vulns with analyses by @nscuro in #7260

Dependency Updates 🤖

chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.3 to 0.156.4 by @dependabot[bot] in #6775
chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.9 to 2.1.10 by @dependabot[bot] in #6778
chore(deps): Bump io.github.nscuro:versatile-core from 0.21.0 to 0.21.1 by @dependabot[bot] in #6779
chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.10 to 2.1.11 by @dependabot[bot] in #6789
chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.4 to 0.156.5 by @dependabot[bot] in #6800
chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #6818
chore(deps): Bump actions/setup-java from 5.5.0 to 5.6.0 by @dependabot[bot] in #6817
chore(deps): Bump docker/login-action from 4.4.0 to 4.5.2 by @dependabot[bot] in #6884
chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.6 to 1.29.0 by @dependabot[bot] in #6882
chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.6 to 1.29.0 by @dependabot[bot] in #6881
chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0 by @dependabot[bot] in #6880
chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.6 to 1.29.0 by @dependabot[bot] in #6879
chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 by @dependabot[bot] in #6892
chore(deps): Bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #6925
chore(deps): Bump actions/setup-java from 5.6.0 to 5.7.0 by @dependabot[bot] in #6924
chore(deps): Bump io.github.jeremylong:open-vulnerability-clients from 9.0.5 to 9.0.6 by @dependabot[bot] in #6923
chore(deps): Bump debian from 328d164 to 0d97731 in /src/main/docker by @dependabot[bot] in #6920
chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.45 to 2.1.46 by @dependabot[bot] in #6944
chore(deps): Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 by @dependabot[bot] in #6943
chore(deps): Bump eclipse-temurin from b8ba5fc to 5bd5dbe in /src/main/docker by @dependabot[bot] in #6938
chore(deps): Bump debian from 0d97731 to 1710bde in /src/main/docker by @dependabot[bot] in #6956
chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.11 to 2.1.12 by @dependabot[bot] in #6969
chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 by @dependabot[bot] in #6985
chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.10.0 by @dependabot[bot] in #7001
chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.7 to 5.1.8 by @dependabot[bot] in #7018
chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.5 to 0.156.6 by @dependabot[bot] in #7019
chore(deps): Bump io.github.nscuro:versatile-core from 0.21.1 to 0.22.0 by @dependabot[bot] in #7043
chore(deps): Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #7086
chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.10.0 to 13.11.0 by @dependabot[bot] in #7085
chore(deps): Bump io.github.nscuro:versatile-core from 0.22.0 to 0.23.0 by @dependabot[bot] in #7087
chore(deps): Bump eclipse-temurin from 5bd5dbe to 966f3ab in /src/main/docker by @dependabot[bot] in #7105
chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.46 to 2.1.47 by @dependabot[bot] in #7122
chore(deps): Bump lib.protobuf-java.version from 4.35.1 to 4.36.0 by @dependabot[bot] in #7142
Bump eclipse-temurin from 25.0.3_9-jdk-alpine to 25.0.4_7-jdk-alpine in /src/main/docker by @dependabot[bot] in #7164
Bump debian from 1710bde to 0463431 in /src/main/docker by @dependabot[bot] in #7163
Bump io.github.nscuro:versatile-core from 0.23.0 to 0.24.0 by @dependabot[bot] in #7187
Bump com.icegreen:greenmail-junit5 from 2.1.12 to 2.1.13 by @dependabot[bot] in #7186
Bump actions/setup-java from 5.7.0 to 6.0.0 by @dependabot[bot] in #7188
Bump org.cyclonedx:cyclonedx-core-java from 13.1.0 to 13.2.0 by @dependabot[bot] in #7201
Bump com.google.cloud.sql:postgres-socket-factory from 1.29.0 to 1.30.0 by @dependabot[bot] in #7200
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.29.0 to 1.30.0 by @dependabot[bot] in #7199
Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.29.0 to 1.30.0 by @dependabot[bot] in #7202
Bump io.swagger.parser.v3:swagger-parser from 2.1.47 to 2.1.48 by @dependabot[bot] in #7246
Bump lib.protobuf-java.version from 4.36.0 to 4.36.1 by @dependabot[bot] in #7250
Bump eclipse-temurin from 10c2519 to 3ffcdc9 in /src/main/docker by @dependabot[bot] in #7265
Bump eclipse-temurin from 3ffcdc9 to 20a695e in /src/main/docker by @dependabot[bot] in #7280
Bump org.metaeffekt.core:ae-security from 0.156.6 to 0.157.0 by @dependabot[bot] in #7283
Bump org.slf4j:log4j-over-slf4j from 2.0.18 to 2.0.19 by @dependabot[bot] in #7301
Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #7302
Bump Alpine to 3.9.0 by @nscuro in #7309
Bump bundled frontend to 4.14.4 by @nscuro in #7310

Full Changelog: 4.14.3...4.14.4