For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.
# SHA1
f39f3cc9ac552200902e932029b54ddc5a7ac2bd dependency-track-apiserver.jar
0050a4b1174d7a9127d00254624c6772b21175a8 dependency-track-bundled.jar
# SHA256
3a6866f8919864dca70c50f438874d0c0396c27077d3ef8e4d358d940459eeb5 dependency-track-apiserver.jar
421f4cb919f8e19babd13a0fe6380000fcf4938ae31009503eb34dcf65146753 dependency-track-bundled.jar
# SHA512
ac440fcbf57e6cb6672bf4b396188ffa07a34b293d399d502c4f8ed00b9c09784c4b206c1492e4559063167881e16ceaaea65a7c0e8abc3622f820fbd2450b43 dependency-track-apiserver.jar
d8950d1abb785787553692e2bb3cbe463992077fd770e1498f991eb93b6f111d47046ee6dfd7aaea1f73a49765227e07883202304fb0b103c3ae75040fb5565e dependency-track-bundled.jar
What's Changed
Bug Fixes 🐛
- log suppression when creating new violation analysis by @stohrendorf in #6011
- Backport: Fix BOM validation failing when XML contains CDATA by @nscuro in #7751
- Backport: Remove eMudhra from container image cacerts by @nscuro in #7762
Dependency Updates 🤖
- Bump com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0 by @dependabot[bot] in #7599
- Bump io.github.ascopes:protobuf-maven-plugin from 5.1.10 to 5.1.11 by @dependabot[bot] in #7622
- Bump eclipse-temurin from 25.0.4_7-jre-jammy to 25.0.4.1_1-jre-jammy in /src/main/docker by @dependabot[bot] in #7637
- Bump io.github.nscuro:versatile-core from 0.26.0 to 0.26.1 by @dependabot[bot] in #7658
- Bump org.metaeffekt.core:ae-security from 0.157.2 to 0.158.0 by @dependabot[bot] in #7659
- Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 by @dependabot[bot] in #7674
- Bump debian from
5bc3287toeb593cfin /src/main/docker by @dependabot[bot] in #7675 - Bump org.postgresql:postgresql from 42.7.13 to 42.7.14 by @dependabot[bot] in #7683
- Bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #7712
- Bump org.metaeffekt.core:ae-security from 0.158.0 to 0.159.0 by @dependabot[bot] in #7713
- Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #7714
- Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.30.0 to 1.30.1 by @dependabot[bot] in #7724
- Bump com.google.cloud.sql:postgres-socket-factory from 1.30.0 to 1.30.1 by @dependabot[bot] in #7726
- Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.30.0 to 1.30.1 by @dependabot[bot] in #7725
- Bump com.microsoft.sqlserver:mssql-jdbc from 13.6.0.jre11 to 13.6.1.jre11 by @dependabot[bot] in #7733
- Backport: Bump Alpine base image to 3.24.3 by @nscuro in #7767
- Bump eclipse-temurin from
25777actoe0d8c47in /src/main/docker by @dependabot[bot] in #7768 - Backport: Bump cyclonedx-core-java to 13.4.0 by @nscuro in #7779
- Bump bundled frontend to 4.14.6 by @nscuro in #7780
Other Changes
- Add changelog for 4.14.5 by @nscuro in #7594
- Fix link to services.bom.json in docs FAQ by @nscuro in #7753
Full Changelog: 4.14.5...4.14.6