Fixes:
- Fix NPE during NVD mirroring via REST API when encountering invalid CPEs - apiserver/#4734
- Remove erroneous client-side caching in Trivy analyzer - apiserver/#4736
- Fix notification limiting to tags not working reliably - apiserver/#4737
- Fix tags from BOM upload request not being applied for existing projects - apiserver/#4740
- Fix component properties not being cloned - apiserver/#4746
For a complete list of changes, refer to the respective GitHub milestones:
We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.
dependency-track-apiserver.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | a3a30181b15a14bcd3ea3ef7ed338d2ce5e86bb5 |
| SHA-256 | cc271be5577eee0a562c19acd60a693accbe6b8b1a24294472a43462f6aa94fd |
dependency-track-bundled.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | 2c416320eda0aee60a268047643da006ad7edf24 |
| SHA-256 | 48defc20ebe19214bb7cf73bf61f8c09f467d0c8585a5e6c0671ad563bbd4884 |
frontend-dist.zip
| Algorithm | Checksum |
|---|---|
| SHA-1 | 4d42a3251d35746bb198018fec273b17a91761e6 |
| SHA-256 | 8c808d7d4ec2442970e8a79f8bb67b9422a69e377a682a4fe47057e7b0cad642 |