github DependencyTrack/dependency-track 5.0.0

7 hours ago

Warning

Upgrading from v4 requires manual action.

  • Migration is manual. See the migration guide. v4 must be ≥ 4.14.2 and offline during the upgrade. v5 requires PostgreSQL 14+ (H2, MySQL, SQL Server dropped).
  • See Changes in v5 for what's new and what changed, including container-only distribution (no more WAR), REST API v1 changes, and new notification schemas.
  • The official Helm chart is not yet compatible and fails rendering on v5 tags. Hold off if you deploy via Helm. See the Kubernetes deployment guide.

What's Changed

Enhancements 🚀

  • Add problem type for invalid sort field errors by @nscuro in #6281
  • Change tie-breaker sort columns for finding queries to allow more efficient sorting by @nscuro in #6289

Bug Fixes 🐛

  • Fix LocalFileStorageTest flakiness by @nscuro in #6282
  • v4-migrator: Grant SECRET_MANAGEMENT to principals with SYSTEM_CONFIGURATION permission by @nscuro in #6283
  • Do not suggest internal sort tie-breaker columns as sortable via API by @nscuro in #6286
  • Fix AuthZ being enforced on CORS preflight requests by @nscuro in #6288

Documentation 📃

Other Changes

  • Remove unused code and unnecessary indirections by @nscuro in #6284

Full Changelog: 5.0.0-rc.5...5.0.0

Don't miss a new dependency-track release

NewReleases is sending notifications on new releases.