5.0.3

What's Changed

Bug Fixes 🐛

• Backport: Fix build and lint workflows not running for release branches by @nscuro in #1689
• Backport: Fix team selection modal not handling server-side pagination by @nscuro in #1690

Dependency Updates 🤖

• build(deps): bump nginxinc/nginx-unprivileged from 02c985e to cc300bd in /docker by @dependabot[bot] in #1667
• build(deps): bump imjasonh/setup-crane from 0.5 to 0.7 by @dependabot[bot] in #1668
• build(deps): bump @codemirror/autocomplete from 6.20.2 to 6.20.3 by @dependabot[bot] in #1677
• build(deps-dev): bump eslint-plugin-vue from 9.24.0 to 9.24.1 by @dependabot[bot] in #1676
• build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #1674
• build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1669
• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1671
• build(deps-dev): bump @vue/cli-plugin-babel from 5.0.8 to 5.0.9 by @dependabot[bot] in #1675
• build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #1673
• build(deps-dev): bump eslint-config-prettier from 9.1.0 to 9.1.2 by @dependabot[bot] in #1670
• build(deps): bump @codemirror/lang-javascript from 6.2.4 to 6.2.5 by @dependabot[bot] in #1672
• build(deps): bump @codemirror/lang-jinja from 6.0.0 to 6.0.1 by @dependabot[bot] in #1687
• build(deps): bump perfect-scrollbar from 1.5.5 to 1.5.6 by @dependabot[bot] in #1686
• build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #1682
• build(deps-dev): bump @babel/eslint-parser from 7.24.1 to 7.24.8 by @dependabot[bot] in #1684
• build(deps): bump @codemirror/lint from 6.9.4 to 6.9.7 by @dependabot[bot] in #1685
• build(deps): bump nginxinc/nginx-unprivileged from 1.31.1-alpine to 1.31.2-alpine in /docker by @dependabot[bot] in #1691
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #1696
• build(deps): bump dompurify from 3.4.9 to 3.4.12 by @dependabot[bot] in #1697
• build(deps-dev): bump @babel/core from 7.24.7 to 7.24.9 by @dependabot[bot] in #1698

Full Changelog: 5.0.2...5.0.3

4.14.3

Dependency Track Frontend

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
be91ca477d92f492cdd4e5d215e3154f97c50be5  frontend-dist.zip
# SHA256
de3d76d978689d0fe571683cfeedf7fea095a1fd03f86cf622a099b5b72f4477  frontend-dist.zip
# SHA512
66cf28edfad5c7faf94ac5c0c87bdacd8b9eb8ac2a2bb1493a8566bec5c02651ba53b64f001ccf859b51b4b0a221c16c5c29b358dc704cc0267fd292997f3fb9  frontend-dist.zip

What's Changed

Enhancements 🚀

• Update workflows for 4.14.x maintenance by @nscuro in #1540

Bug Fixes 🐛

• Show Exploit Predictions from all sources by @yuwwx in #1523
• Prevent duplicate downloads on export/download buttons by @heyiamwahab236 in #1659
• V4 CI fixes by @nscuro in #1699

Dependency Updates 🤖

• build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #1525
• build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1529
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #1528
• build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #1527
• build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1526
• build(deps): bump nginxinc/nginx-unprivileged from 1.29.5-alpine to 1.31.1-alpine in /docker by @dependabot[bot] in #1537
• build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1530
• build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #1538
• build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1546
• build(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1547
• build(deps): bump nginxinc/nginx-unprivileged from 8122337 to 02c985e in /docker by @dependabot[bot] in #1566
• build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1565
• Backport 4.14.x: Update to Node 22 by @ColorfulRhino in #1575
• build(deps): bump nginxinc/nginx-unprivileged from 02c985e to 85bcbc6 in /docker by @dependabot[bot] in #1588
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1587
• build(deps): bump nginxinc/nginx-unprivileged from 85bcbc6 to cc300bd in /docker by @dependabot[bot] in #1607
• build(deps): bump nginxinc/nginx-unprivileged from 1.31.1-alpine to 1.31.2-alpine in /docker by @dependabot[bot] in #1616
• build(deps): bump nginxinc/nginx-unprivileged from 26b5d49 to 054e14f in /docker by @dependabot[bot] in #1628
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #1629
• build(deps): bump nginxinc/nginx-unprivileged from 054e14f to a8d5564 in /docker by @dependabot[bot] in #1640
• build(deps): bump nginxinc/nginx-unprivileged from a8d5564 to 592b23a in /docker by @dependabot[bot] in #1647
• build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1654
• build(deps): bump docker/login-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #1655
• build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #1648
• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1649
• build(deps): bump docker/login-action from 4.3.0 to 4.4.0 by @dependabot[bot] in #1663
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #1694
• build(deps): bump nginxinc/nginx-unprivileged from 592b23a to 6320020 in /docker by @dependabot[bot] in #1693
• Bump V4 dependencies by @nscuro in #1700

Other Changes

• Add v5 migration note by @nscuro in #1532
• Update Docker Hub secrets for v4 publish workflow by @nscuro in #1544

New Contributors

• @yuwwx made their first contribution in #1523
• @heyiamwahab236 made their first contribution in #1659

Full Changelog: 4.14.2...4.14.3

5.0.2

What's Changed

Bug Fixes 🐛

• Backport: Fix rendering of expander icons for nested project hierarchies by @nscuro in #1619

Dependency Updates 🤖

• Backport: build(deps): bump dompurify from 3.4.7 to 3.4.9 by @nscuro in #1620

Full Changelog: 5.0.1...5.0.2

5.0.1

What's Changed

Bug Fixes 🐛

• Backport: Remove outdated INDEXING_SERVICE notification group by @nscuro in #1599
• Backport: Remove policy UUID from tag search endpoint in SelectTagModal by @nscuro in #1600
• Backport: Fix getTabFromRoute erroneously considering URL query params by @nscuro in #1601
• Backport: Fix spelling of CANCELLED workflow run status by @nscuro in #1602

Full Changelog: 5.0.0...5.0.1

5.0.0

Warning

Upgrading from v4 requires manual action.

• Migration is manual. See the migration guide. v4 must be ≥ 4.14.2 and offline during the upgrade. v5 requires PostgreSQL 14+ (H2, MySQL, SQL Server dropped).
• See Changes in v5 for what's new and what changed, including container-only distribution (no more WAR), REST API v1 changes, and new notification schemas.
• The official Helm chart is not yet compatible and fails rendering on v5 tags. Hold off if you deploy via Helm. See the Kubernetes deployment guide.

What's Changed

Enhancements 🚀

• Gracefully handle invalid sort field API errors by @nscuro in #1578
• Remove default sort from global vuln audit views by @nscuro in #1581

Bug Fixes 🐛

• Fix redundant project children fetching by @nscuro in #1579

Other Changes

• Update README for GA release by @nscuro in #1582

Full Changelog: 5.0.0-rc.5...5.0.0

5.0.0-rc.5

What's Changed

Enhancements 🚀

• Improve UX of adding project versions by @nscuro in #1570
• Add integrity column to component search view by @nscuro in #1572
• Add CEL autocomplete for package metadata hashes and has_package_artifact_hash_mismatch function by @nscuro in #1573
• Add CEL autocomplete for latest_version_published_at component property by @nscuro in #1574

Bug Fixes 🐛

• Fix ReferenceError when trying to remove a policy condition by @nscuro in #1577

Dependency Updates 🤖

• build(deps): bump nginxinc/nginx-unprivileged from 8122337 to 02c985e in /docker by @dependabot[bot] in #1564
• build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1567
• Drop dev dependency @cyclonedx/cyclonedx-npm by @ColorfulRhino in #1561

Other Changes

• Add community meeting reference to README by @nscuro in #1571

Full Changelog: 5.0.0-rc.4...5.0.0-rc.5

5.0.0-rc.4

What's Changed

Dependency Updates 🤖

• Bump bootstrap-table to 1.22.6 by @nscuro in #1558
• Bump dependencies by @nscuro in #1560

Other Changes

• Cleanup unused files and update RELEASING.md by @nscuro in #1559

Full Changelog: 5.0.0-rc.3...5.0.0-rc.4

5.0.0-rc.3

What's Changed

Bug Fixes 🐛

• Fix "inactive versions" i18n key not being resolved by @nscuro in #1554

Dependency Updates 🤖

• Upgrade to Node 22 by @nscuro in #1556

Other Changes

• Consolidate lint jobs and set human-friendly job names by @nscuro in #1557

Full Changelog: 5.0.0-rc.2...5.0.0-rc.3

5.0.0-rc.2

What's Changed

Dependency Updates 🤖

• build(deps): bump dompurify from 3.4.0 to 3.4.5 by @dependabot[bot] in #1543

Full Changelog: 5.0.0-rc.1...5.0.0-rc.2

5.0.0-rc.1

What's Changed

Enhancements 🚀

• Prepare 5.0.0-rc.1 release by @nscuro in #1545

Full Changelog: 4.11.3...5.0.0-rc.1