github DependencyTrack/dependency-track 5.0.0-rc.2

pre-release2 hours ago

Warning

This release drops the compatibility shim that translated v4-era alpine.* and unprefixed property names (for example alpine.ldap.enabled, database.url, bcrypt.rounds) into their dt.* equivalents. Migrate any configuration still using those names to the current dt.* properties. The API server refuses to start when it encounters a legacy key to prevent silent misconfiguration.

The original alpine.* to dt.* migration is documented in the v0.7.0-alpha.3 upgrade notes. See Configuration Properties for the authoritative list of supported properties and their corresponding environment variable spellings.

Apologies for introducing breaking changes in an RC build.

Find the full upgrade guide here: https://dependencytrack.github.io/docs/next/guides/upgrading/v5.0.0-rc.2/

What's Changed

Breaking Changes 🚨

  • Standardize config property names and remove legacy shims by @nscuro in #6215

Enhancements 🚀

  • Migrate vulnerability metrics to materialized view by @nscuro in #6213

Bug Fixes 🐛

  • Raise max response body size for Cargo by @nscuro in #6214

Documentation 📃

Other Changes

  • Update GHA job names to be more practical for status check enforcement by @nscuro in #6208
  • Add GHA workflow for nightly e2e tests by @nscuro in #6209
  • Remove unused code and drop unnecessary dependencies by @nscuro in #6211

Full Changelog: 5.0.0-rc.1...5.0.0-rc.2

Don't miss a new dependency-track release

NewReleases is sending notifications on new releases.