Features:

• Add support for ingestion of CycloneDX 1.7 BOMs - apiserver/#6966
• Use modern CycloneDX tools metadata in BOM exports - apiserver/#7259
• Remove unnecessary enrichment when querying for individual projects - apiserver/#7258
• Stop bumping AffectedVersionAttribution.lastSeen on every mirroring run - apiserver/#7257
• Reduce churn of vulnerable software associations during mirroring - apiserver/#7256

Fixes:

• Fix HTTP 500 when deleting vulnerabilities that are referenced by analyses - apiserver/#7260
• Fix User-Agent header missing for various HTTP requests - apiserver/#7254
• Fix Jira notification tests reporting success when no issue was created - apiserver/#6792

For a complete list of changes, refer to the respective GitHub milestones:

• API server milestone 4.14.4
• Frontend milestone 4.14.4

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:

@AKSHATSPAR, @valentijnscholten

dependency-track-apiserver.jar

Algorithm	Checksum
SHA-1	94b907639f56fadce3e20026178d0c6d7f4ff2a0
SHA-256	08a8f517f571e5c2a3c4392de044ae8668beb0b2dec1bf172082676d1a9f9ad1

dependency-track-bundled.jar

Algorithm	Checksum
SHA-1	54ef0146414037b875d2670a1e282845d13a5516
SHA-256	5b993cfe4cf7855feba8b7454a529100186537f46ebbe9651b6c720ab184a9d1

frontend-dist.zip

Algorithm	Checksum
SHA-1	3b7995b2f56f78a0f7c52f4cc420b2fa994e8ff7
SHA-256	8de5e7e888efce5c32cca0e60d70d47ec0d2a30de50dac2b3d4738af4cbe2f51

Software Bill of Materials (SBOM)

• API Server: bom.json
• Frontend: bom.json