github DependencyTrack/dependency-track 5.0.4

4 hours ago

What's Changed

Enhancements 🚀

  • Backport: dex: Make query timeout configurable by @nscuro in #6855
  • Backport: dex: improve workflow task scheduling performance for deep backlogs with concurrency keys by @nscuro in #6858
  • Backport: dex: execute multiple deletion batches per maintenance cycle by @nscuro in #6860
  • Backport: dex: enforce execution timeout for activities by @nscuro in #6861
  • Backport: dex: define default activity execution timeout by @nscuro in #6862
  • Backport: dex: automatically heartbeat activities by @nscuro in #6864
  • Backport: Improve responsiveness to thread interruptions by @nscuro in #6863

Bug Fixes 🐛

  • Backport: Exclude project from components loaded during ImportBomActivity by @nscuro in #6856
  • Backport: Fix failure to emit notification when vulnerability description is empty by @nscuro in #6857
  • Backport: dex: fix too eager consumption of concurrency key wakeup hints by @nscuro in #6859
  • Backport: Strip trailing / from baseUrl notification template variable by @nscuro in #6865

Dependency Updates 🤖

  • chore(deps): Bump com.icegreen:greenmail-junit5 from 2.1.9 to 2.1.10 by @dependabot[bot] in #6784
  • chore(deps): Bump org.jetbrains.kotlin:kotlin-bom from 2.4.0 to 2.4.10 by @dependabot[bot] in #6783
  • chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.3 to 0.156.4 by @dependabot[bot] in #6780
  • chore(deps): Bump com.icegreen:greenmail-junit5 from 2.1.10 to 2.1.11 by @dependabot[bot] in #6791
  • chore(deps): Bump io.smallrye.config:smallrye-config-bom from 3.18.0 to 3.18.1 by @dependabot[bot] in #6790
  • chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.4 to 0.156.5 by @dependabot[bot] in #6803
  • chore(deps): Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 by @dependabot[bot] in #6821
  • chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #6820
  • chore(deps): Bump actions/setup-java from 5.5.0 to 5.6.0 by @dependabot[bot] in #6819
  • chore(deps-dev): Bump org.openapitools:openapi-generator-maven-plugin from 7.23.0 to 7.24.0 by @dependabot[bot] in #6831
  • chore(deps): Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 by @dependabot[bot] in #6847
  • chore(deps): Bump io.github.nscuro:versatile-core from 0.18.3 to 0.21.1 by @dependabot[bot] in #6781

Full Changelog: 5.0.3...5.0.4

Don't miss a new dependency-track release

NewReleases is sending notifications on new releases.