Features:
- Improve performance of vuln data source mirroring - apiserver/#6040
- Handle epoch PURL qualifier for version comparison - apiserver/#6083
- Add project filters to component identity search - apiserver/#6087
Fixes:
- Fix incorrect format of Composer packages being sent to Trivy - apiserver/#6117
- Fix incorrect version comparison of NuGet packages when v-prefix is present - apiserver/#6116
For a complete list of changes, refer to the respective GitHub milestones:
We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.
Special thanks to everyone who contributed code to implement enhancements and fix defects:
@Abdelmonem-BEN-NACEUR, @hoobio
dependency-track-apiserver.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | 953074d95757bea162931b7811885945bbe992aa |
| SHA-256 | 3ff379380d35b9ff924014b680e7f3718c119f59b2cc4ee6ece4345a3ca1c110 |
dependency-track-bundled.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | 53f3198f5422e1117f53859c5f42403f48a4a4e3 |
| SHA-256 | fca1c0c69d543f4be3501f04d3293beef5b5db9fbad24d55cfc70ea2cc8e2b4f |
frontend-dist.zip
| Algorithm | Checksum |
|---|---|
| SHA-1 | 3ee09446776c3f65503fa7183e95ef8864b19946 |
| SHA-256 | 2cb995d67f13b9d909609978f715c0649e717794ff231825089bfaf2ccd79516 |