Fixes:

• Fix BOM validation failing when XML contains CDATA - apiserver/#7751
• Fix suppression not being recorded in audit trail when creating a new violation analysis - apiserver/#6011
• Remove eMudhra root CA from container image trust store - apiserver/#7762

For a complete list of changes, refer to the respective GitHub milestones:

• API server milestone 4.14.6
• Frontend milestone 4.14.6

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:

@stohrendorf

dependency-track-apiserver.jar

Algorithm	Checksum
SHA-1	f39f3cc9ac552200902e932029b54ddc5a7ac2bd
SHA-256	3a6866f8919864dca70c50f438874d0c0396c27077d3ef8e4d358d940459eeb5

dependency-track-bundled.jar

Algorithm	Checksum
SHA-1	0050a4b1174d7a9127d00254624c6772b21175a8
SHA-256	421f4cb919f8e19babd13a0fe6380000fcf4938ae31009503eb34dcf65146753

frontend-dist.zip

Algorithm	Checksum
SHA-1	8ced6eea4fed3b9899085543fe3b2be23ee97fe4
SHA-256	e9e4af354bedccc55c0cfc3d047a4fd4a962b7ba4b5451f2de1df47ae897195a

Software Bill of Materials (SBOM)

• API Server: bom.json
• Frontend: bom.json