chore(deps): update dependencytrack/apiserver docker tag to v4.14.3 #148

Open

renovate-bot wants to merge 1 commit from renovate/dependencytrack-apiserver-4.x into main

pull from: renovate/dependencytrack-apiserver-4.x

merge into: phbaer:main

phbaer:main

phbaer:fix-ui-glitches

phbaer:renovate/vite-8.x-lockfile

phbaer:renovate/postcss-8.x-lockfile

phbaer:renovate/autoprefixer-10.x-lockfile

phbaer:renovate/actions-checkout-7.x

phbaer:renovate/vue-router-5.x-lockfile

phbaer:renovate/marked-18.x-lockfile

phbaer:renovate/vitejs-plugin-vue-6.x-lockfile

phbaer:renovate/tailwindcss-postcss-4.x-lockfile

phbaer:feat-security-and-architecture-improvements

phbaer:renovate/dependencytrack-frontend-4.x

phbaer:feat-jira-create-ticket

phbaer:integrate-vscorer-wizard

phbaer:add-more-status-info

phbaer:rescoring-improvements

phbaer:cve-filter-dashboard

phbaer:bearer-token-api-access

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-05-09 00:01:48 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
dependencytrack/apiserver (source)	patch	4.14.1 → 4.14.3

---

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

v4.14.3

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
40db3eb67df441382971c8fb6566b86bc65976f4  dependency-track-apiserver.jar
71a8e224166a55efb163922bb9874c151b3d95eb  dependency-track-bundled.jar

# SHA256
11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9  dependency-track-apiserver.jar
4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be  dependency-track-bundled.jar

# SHA512
804247f629c5b5bac7f7c667789478163c8f6fcbaa9b4a7978ebcb57766d4134e9d026e92c156981f8c717b390c5cc4ba1fc837afef661e653aee8e7096d2a6a  dependency-track-apiserver.jar
e047a7be9bac2b76e1f2a42722ca723a60b9b093e2bff3ed5df407a27e25a77ab6467c15ad124907fd5213781bff493e80e5563400360befb603f8e184463235  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Improve VEX import performance by @​nscuro in #​6141
• Update workflows for 4.14.x maintenance by @​nscuro in #​6171
• Send groupby to defect dojo by @​webdevred in #​6130
• Include analysis.detail in DefectDojo finding payload by @​webdevred in #​6181

Bug Fixes 🐛

• Exclude retrieval of components and aliases during OSVDownloadTask by @​ElenaStroebele in #​6345
• Backport: Reject parent objects with null UUID when creating/updating/patching projects by @​nscuro in #​6355
• Fix Docker Hub secret names by @​nscuro in #​6390
• Fix NPE and redundant queries in VEX/VDR export by @​heyiamwahab236 in #​6614

Dependency Updates 🤖

• build(deps): bump debian from 8f0c555 to a053c41 in /src/main/docker by @​dependabot[bot] in #​6126
• build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @​dependabot[bot] in #​6142
• build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​6143
• build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.3 to 5.1.4 by @​dependabot[bot] in #​6144
• build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @​dependabot[bot] in #​6145
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​6146
• build(deps): bump docker/build-push-action from 6.19.2 to 7.1.0 by @​dependabot[bot] in #​6147
• build(deps): bump lib.protobuf-java.version from 4.34.1 to 4.35.0 by @​dependabot[bot] in #​6158
• build(deps): bump debian from a053c41 to 5012d05 in /src/main/docker by @​dependabot[bot] in #​6157
• build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.41 to 2.1.42 by @​dependabot[bot] in #​6155
• build(deps): bump org.slf4j:log4j-over-slf4j from 2.0.17 to 2.0.18 by @​dependabot[bot] in #​6154
• build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @​dependabot[bot] in #​6148
• build(deps): bump eclipse-temurin from 25.0.2_10-jdk-alpine to 25.0.3_9-jdk-alpine in /src/main/docker by @​dependabot[bot] in #​6161
• build(deps): bump org.metaeffekt.core:ae-security from 0.154.0 to 0.155.0 by @​dependabot[bot] in #​6164
• build(deps): bump org.apache.maven:maven-artifact from 3.9.15 to 3.9.16 by @​dependabot[bot] in #​6160
• chore(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @​dependabot[bot] in #​6177
• chore(deps): Bump dessant/lock-threads from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​6174
• chore(deps): Bump dessant/lock-threads from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​6236
• chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​6235
• chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​6234
• chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.3 to 1.28.4 by @​dependabot[bot] in #​6256
• chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.3 to 1.28.4 by @​dependabot[bot] in #​6258
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.42 to 2.1.43 by @​dependabot[bot] in #​6259
• chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.3 to 1.28.4 by @​dependabot[bot] in #​6257
• chore(deps): Bump io.github.nscuro:versatile-core from 0.18.1 to 0.18.3 by @​dependabot[bot] in #​6339
• chore(deps): Bump alpine from 3.23 to 3.24 in /src/main/docker by @​dependabot[bot] in #​6337
• chore(deps): Bump io.pebbletemplates:pebble from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​6300
• chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​6299
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.5.0 by @​dependabot[bot] in #​6301
• chore(deps): Bump debian from 5012d05 to da0bfd2 in /src/main/docker by @​dependabot[bot] in #​6370
• chore(deps): Bump debian from da0bfd2 to 34363c2 in /src/main/docker by @​dependabot[bot] in #​6384
• build(deps): bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 by @​dependabot[bot] in #​6168
• Bump Alpine to 3.8.0 by @​nscuro in #​6391
• chore(deps): Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 by @​dependabot[bot] in #​6409
• chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​6410
• chore(deps): Bump lib.protobuf-java.version from 4.35.0 to 4.35.1 by @​dependabot[bot] in #​6425
• chore(deps): Bump alpine from a2d49ea to f5064d3 in /src/main/docker by @​dependabot[bot] in #​6421
• chore(deps): Bump alpine from 3.24 to 3.24.1 in /src/main/docker by @​dependabot[bot] in #​6432
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.43 to 2.1.44 by @​dependabot[bot] in #​6469
• chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.8 to 2.1.9 by @​dependabot[bot] in #​6484
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 by @​dependabot[bot] in #​6485
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.155.0 to 0.156.0 by @​dependabot[bot] in #​6486
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.0 to 0.156.1 by @​dependabot[bot] in #​6489
• chore(deps): Bump eclipse-temurin from c3e62cd to c3e62cd in /src/main/docker by @​dependabot[bot] in #​6487
• chore(deps): Bump debian from 34363c2 to ee12ffb in /src/main/docker by @​dependabot[bot] in #​6503
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.4 to 5.1.5 by @​dependabot[bot] in #​6510
• chore(deps): Bump io.github.nscuro:versatile-core from 0.18.3 to 0.19.0 by @​dependabot[bot] in #​6534
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.1 to 0.156.2 by @​dependabot[bot] in #​6535
• chore(deps): Bump actions/setup-java from 5.2.0 to 5.3.0 by @​dependabot[bot] in #​6536
• chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​6537
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.5 to 5.1.6 by @​dependabot[bot] in #​6549
• chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.4 to 1.28.6 by @​dependabot[bot] in #​6548
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.44 to 2.1.45 by @​dependabot[bot] in #​6559
• chore(deps): Bump eclipse-temurin from c3e62cd to b8ba5fc in /src/main/docker by @​dependabot[bot] in #​6567
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 by @​dependabot[bot] in #​6584
• chore(deps): Bump actions/setup-java from 5.3.0 to 5.4.0 by @​dependabot[bot] in #​6585
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.2 to 0.156.3 by @​dependabot[bot] in #​6586
• chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 by @​dependabot[bot] in #​6589
• chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.4 to 1.28.6 by @​dependabot[bot] in #​6587
• chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.4 to 1.28.6 by @​dependabot[bot] in #​6593
• chore(deps): Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 by @​dependabot[bot] in #​6596
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.6 to 5.1.7 by @​dependabot[bot] in #​6597
• chore(deps): Bump io.github.nscuro:versatile-core from 0.19.0 to 0.20.0 by @​dependabot[bot] in #​6588
• chore(deps): Bump io.github.nscuro:versatile-core from 0.20.0 to 0.21.0 by @​dependabot[bot] in #​6617
• chore(deps): Bump docker/login-action from 4.2.0 to 4.4.0 by @​dependabot[bot] in #​6666
• chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​6665
• chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​6664
• chore(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @​dependabot[bot] in #​6663
• chore(deps): Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 by @​dependabot[bot] in #​6682
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 by @​dependabot[bot] in #​6754
• chore(deps): Bump actions/setup-java from 5.4.0 to 5.5.0 by @​dependabot[bot] in #​6753
• chore(deps): Bump debian from ee12ffb to 328d164 in /src/main/docker by @​dependabot[bot] in #​6748
• Bump bundled frontend to 4.14.3 by @​nscuro in #​6763

Other Changes

• Add v5 migration notes by @​nscuro in #​6151
• Update Docker Hub secrets for v4 publish workflow by @​nscuro in #​6173
• Add changelog for 4.14.3 by @​nscuro in #​6762

New Contributors

• @​heyiamwahab236 made their first contribution in #​6614

Full Changelog: https://github.com/DependencyTrack/dependency-track/compare/4.14.2...4.14.3

v4.14.2

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
953074d95757bea162931b7811885945bbe992aa  dependency-track-apiserver.jar
53f3198f5422e1117f53859c5f42403f48a4a4e3  dependency-track-bundled.jar

# SHA256
3ff379380d35b9ff924014b680e7f3718c119f59b2cc4ee6ece4345a3ca1c110  dependency-track-apiserver.jar
fca1c0c69d543f4be3501f04d3293beef5b5db9fbad24d55cfc70ea2cc8e2b4f  dependency-track-bundled.jar

# SHA512
4e6119cfc05ed8767cdf1302b31c47814a025d854fa5f793a6b1bb0341732762a40cc5f3b93f59e7432e75d3cf7f2aa44320df129b85cea9e1de8fb81a053fc5  dependency-track-apiserver.jar
a047cd00ebdc59074c096c7ab6b095e0367e563f07c6565ab33413d6b9c5dbcb42a89cc71136dbe04b9ef48697f00673a15c0e18313dcde6c9c04a069c901b33  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Backport: Improve performance of vuln data source mirroring by @​nscuro in #​6040
• Backport: Handle epoch PURL qualifier for version comparison by @​nscuro in #​6083
• Backport: Add project filters to component identity search by @​nscuro in #​6087

Bug Fixes 🐛

• Backport: Send composer package names with "/" separator to Trivy by @​nscuro in #​6117

Dependency Updates 🤖

• build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.3 to 9.0.4 by @​dependabot[bot] in #​6021
• build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.0 to 5.1.2 by @​dependabot[bot] in #​6015
• build(deps): bump debian from 99fc6d2 to e51bfcd in /src/main/docker by @​dependabot[bot] in #​6014
• build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.2 to 5.1.3 by @​dependabot[bot] in #​6037
• build(deps): bump alpine from 2510918 to 5b10f43 in /src/main/docker by @​dependabot[bot] in #​6030
• build(deps): bump eclipse-temurin from 305fb0c to d36843a in /src/main/docker by @​dependabot[bot] in #​6029
• build(deps): bump org.metaeffekt.core:ae-security from 0.153.2 to 0.153.3 by @​dependabot[bot] in #​6047
• build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.39 to 2.1.40 by @​dependabot[bot] in #​6046
• Backport: Bump maven-artifact to 3.9.15 by @​nscuro in #​6048
• build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 by @​dependabot[bot] in #​6060
• build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.4 to 9.0.5 by @​dependabot[bot] in #​6066
• build(deps): bump debian from e51bfcd to 8f0c555 in /src/main/docker by @​dependabot[bot] in #​6052
• build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6071
• build(deps-dev): bump org.testcontainers:testcontainers from 2.0.4 to 2.0.5 by @​dependabot[bot] in #​6076
• build(deps): bump com.google.cloud.sql:postgres-socket-factory from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6073
• build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6072
• build(deps): bump org.metaeffekt.core:ae-security from 0.153.3 to 0.154.0 by @​dependabot[bot] in #​6080
• build(deps): bump org.apache.maven:maven-artifact from 3.9.14 to 3.9.15 by @​dependabot[bot] in #​6045
• build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 by @​dependabot[bot] in #​6101
• build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.41 by @​dependabot[bot] in #​6100
• Backport: Bump versatile to 0.18.1 by @​nscuro in #​6116
• Backport: Bump bundled frontend to 4.14.2 by @​nscuro in #​6122

Other Changes

• Backport: Ignore flaky VulnerableSoftwareIndexerTest by @​nscuro in #​6039
• Backport: Fix borked docs navigation by @​nscuro in #​6118
• Add changelog for 4.14.2 by @​nscuro in #​6120

Full Changelog: https://github.com/DependencyTrack/dependency-track/compare/4.14.1...4.14.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [dependencytrack/apiserver](https://dependencytrack.org/) ([source](https://github.com/DependencyTrack/dependency-track)) | patch | `4.14.1` → `4.14.3` | --- ### Release Notes <details> <summary>DependencyTrack/dependency-track (dependencytrack/apiserver)</summary> ### [`v4.14.3`](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.3) [Compare Source](https://github.com/DependencyTrack/dependency-track/compare/4.14.2...4.14.3) For official releases, refer to [Dependency Track Docs >> Changelogs](https://docs.dependencytrack.org/changelog/) for information about improvements and upgrade notes. If additional details are required, consult the closed issues for this release milestone. ```text # SHA1 40db3eb67df441382971c8fb6566b86bc65976f4 dependency-track-apiserver.jar 71a8e224166a55efb163922bb9874c151b3d95eb dependency-track-bundled.jar # SHA256 11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9 dependency-track-apiserver.jar 4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be dependency-track-bundled.jar # SHA512 804247f629c5b5bac7f7c667789478163c8f6fcbaa9b4a7978ebcb57766d4134e9d026e92c156981f8c717b390c5cc4ba1fc837afef661e653aee8e7096d2a6a dependency-track-apiserver.jar e047a7be9bac2b76e1f2a42722ca723a60b9b093e2bff3ed5df407a27e25a77ab6467c15ad124907fd5213781bff493e80e5563400360befb603f8e184463235 dependency-track-bundled.jar ``` <!-- Release notes generated using configuration in .github/release.yml at 4.14.3 --> #### What's Changed ##### Enhancements 🚀 - Improve VEX import performance by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6141](https://github.com/DependencyTrack/dependency-track/pull/6141) - Update workflows for 4.14.x maintenance by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6171](https://github.com/DependencyTrack/dependency-track/pull/6171) - Send groupby to defect dojo by [@&#8203;webdevred](https://github.com/webdevred) in [#&#8203;6130](https://github.com/DependencyTrack/dependency-track/pull/6130) - Include analysis.detail in DefectDojo finding payload by [@&#8203;webdevred](https://github.com/webdevred) in [#&#8203;6181](https://github.com/DependencyTrack/dependency-track/pull/6181) ##### Bug Fixes 🐛 - Exclude retrieval of components and aliases during OSVDownloadTask by [@&#8203;ElenaStroebele](https://github.com/ElenaStroebele) in [#&#8203;6345](https://github.com/DependencyTrack/dependency-track/pull/6345) - Backport: Reject parent objects with null UUID when creating/updating/patching projects by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6355](https://github.com/DependencyTrack/dependency-track/pull/6355) - Fix Docker Hub secret names by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6390](https://github.com/DependencyTrack/dependency-track/pull/6390) - Fix NPE and redundant queries in VEX/VDR export by [@&#8203;heyiamwahab236](https://github.com/heyiamwahab236) in [#&#8203;6614](https://github.com/DependencyTrack/dependency-track/pull/6614) ##### Dependency Updates 🤖 - build(deps): bump debian from `8f0c555` to `a053c41` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6126](https://github.com/DependencyTrack/dependency-track/pull/6126) - build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6142](https://github.com/DependencyTrack/dependency-track/pull/6142) - build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6143](https://github.com/DependencyTrack/dependency-track/pull/6143) - build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.3 to 5.1.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6144](https://github.com/DependencyTrack/dependency-track/pull/6144) - build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6145](https://github.com/DependencyTrack/dependency-track/pull/6145) - build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6146](https://github.com/DependencyTrack/dependency-track/pull/6146) - build(deps): bump docker/build-push-action from 6.19.2 to 7.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6147](https://github.com/DependencyTrack/dependency-track/pull/6147) - build(deps): bump lib.protobuf-java.version from 4.34.1 to 4.35.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6158](https://github.com/DependencyTrack/dependency-track/pull/6158) - build(deps): bump debian from `a053c41` to `5012d05` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6157](https://github.com/DependencyTrack/dependency-track/pull/6157) - build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.41 to 2.1.42 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6155](https://github.com/DependencyTrack/dependency-track/pull/6155) - build(deps): bump org.slf4j:log4j-over-slf4j from 2.0.17 to 2.0.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6154](https://github.com/DependencyTrack/dependency-track/pull/6154) - build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6148](https://github.com/DependencyTrack/dependency-track/pull/6148) - build(deps): bump eclipse-temurin from 25.0.2\_10-jdk-alpine to 25.0.3\_9-jdk-alpine in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6161](https://github.com/DependencyTrack/dependency-track/pull/6161) - build(deps): bump org.metaeffekt.core:ae-security from 0.154.0 to 0.155.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6164](https://github.com/DependencyTrack/dependency-track/pull/6164) - build(deps): bump org.apache.maven:maven-artifact from 3.9.15 to 3.9.16 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6160](https://github.com/DependencyTrack/dependency-track/pull/6160) - chore(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6177](https://github.com/DependencyTrack/dependency-track/pull/6177) - chore(deps): Bump dessant/lock-threads from 6.0.0 to 6.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6174](https://github.com/DependencyTrack/dependency-track/pull/6174) - chore(deps): Bump dessant/lock-threads from 6.0.1 to 6.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6236](https://github.com/DependencyTrack/dependency-track/pull/6236) - chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6235](https://github.com/DependencyTrack/dependency-track/pull/6235) - chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6234](https://github.com/DependencyTrack/dependency-track/pull/6234) - chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.3 to 1.28.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6256](https://github.com/DependencyTrack/dependency-track/pull/6256) - chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.3 to 1.28.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6258](https://github.com/DependencyTrack/dependency-track/pull/6258) - chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.42 to 2.1.43 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6259](https://github.com/DependencyTrack/dependency-track/pull/6259) - chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.3 to 1.28.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6257](https://github.com/DependencyTrack/dependency-track/pull/6257) - chore(deps): Bump io.github.nscuro:versatile-core from 0.18.1 to 0.18.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6339](https://github.com/DependencyTrack/dependency-track/pull/6339) - chore(deps): Bump alpine from 3.23 to 3.24 in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6337](https://github.com/DependencyTrack/dependency-track/pull/6337) - chore(deps): Bump io.pebbletemplates:pebble from 4.1.1 to 4.1.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6300](https://github.com/DependencyTrack/dependency-track/pull/6300) - chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6299](https://github.com/DependencyTrack/dependency-track/pull/6299) - chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6301](https://github.com/DependencyTrack/dependency-track/pull/6301) - chore(deps): Bump debian from `5012d05` to `da0bfd2` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6370](https://github.com/DependencyTrack/dependency-track/pull/6370) - chore(deps): Bump debian from `da0bfd2` to `34363c2` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6384](https://github.com/DependencyTrack/dependency-track/pull/6384) - build(deps): bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6168](https://github.com/DependencyTrack/dependency-track/pull/6168) - Bump Alpine to 3.8.0 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6391](https://github.com/DependencyTrack/dependency-track/pull/6391) - chore(deps): Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6409](https://github.com/DependencyTrack/dependency-track/pull/6409) - chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6410](https://github.com/DependencyTrack/dependency-track/pull/6410) - chore(deps): Bump lib.protobuf-java.version from 4.35.0 to 4.35.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6425](https://github.com/DependencyTrack/dependency-track/pull/6425) - chore(deps): Bump alpine from `a2d49ea` to `f5064d3` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6421](https://github.com/DependencyTrack/dependency-track/pull/6421) - chore(deps): Bump alpine from 3.24 to 3.24.1 in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6432](https://github.com/DependencyTrack/dependency-track/pull/6432) - chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.43 to 2.1.44 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6469](https://github.com/DependencyTrack/dependency-track/pull/6469) - chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.8 to 2.1.9 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6484](https://github.com/DependencyTrack/dependency-track/pull/6484) - chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6485](https://github.com/DependencyTrack/dependency-track/pull/6485) - chore(deps): Bump org.metaeffekt.core:ae-security from 0.155.0 to 0.156.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6486](https://github.com/DependencyTrack/dependency-track/pull/6486) - chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.0 to 0.156.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6489](https://github.com/DependencyTrack/dependency-track/pull/6489) - chore(deps): Bump eclipse-temurin from `c3e62cd` to `c3e62cd` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6487](https://github.com/DependencyTrack/dependency-track/pull/6487) - chore(deps): Bump debian from `34363c2` to `ee12ffb` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6503](https://github.com/DependencyTrack/dependency-track/pull/6503) - chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.4 to 5.1.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6510](https://github.com/DependencyTrack/dependency-track/pull/6510) - chore(deps): Bump io.github.nscuro:versatile-core from 0.18.3 to 0.19.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6534](https://github.com/DependencyTrack/dependency-track/pull/6534) - chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.1 to 0.156.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6535](https://github.com/DependencyTrack/dependency-track/pull/6535) - chore(deps): Bump actions/setup-java from 5.2.0 to 5.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6536](https://github.com/DependencyTrack/dependency-track/pull/6536) - chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6537](https://github.com/DependencyTrack/dependency-track/pull/6537) - chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.5 to 5.1.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6549](https://github.com/DependencyTrack/dependency-track/pull/6549) - chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.4 to 1.28.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6548](https://github.com/DependencyTrack/dependency-track/pull/6548) - chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.44 to 2.1.45 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6559](https://github.com/DependencyTrack/dependency-track/pull/6559) - chore(deps): Bump eclipse-temurin from `c3e62cd` to `b8ba5fc` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6567](https://github.com/DependencyTrack/dependency-track/pull/6567) - chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6584](https://github.com/DependencyTrack/dependency-track/pull/6584) - chore(deps): Bump actions/setup-java from 5.3.0 to 5.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6585](https://github.com/DependencyTrack/dependency-track/pull/6585) - chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.2 to 0.156.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6586](https://github.com/DependencyTrack/dependency-track/pull/6586) - chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6589](https://github.com/DependencyTrack/dependency-track/pull/6589) - chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.4 to 1.28.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6587](https://github.com/DependencyTrack/dependency-track/pull/6587) - chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.4 to 1.28.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6593](https://github.com/DependencyTrack/dependency-track/pull/6593) - chore(deps): Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6596](https://github.com/DependencyTrack/dependency-track/pull/6596) - chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.6 to 5.1.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6597](https://github.com/DependencyTrack/dependency-track/pull/6597) - chore(deps): Bump io.github.nscuro:versatile-core from 0.19.0 to 0.20.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6588](https://github.com/DependencyTrack/dependency-track/pull/6588) - chore(deps): Bump io.github.nscuro:versatile-core from 0.20.0 to 0.21.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6617](https://github.com/DependencyTrack/dependency-track/pull/6617) - chore(deps): Bump docker/login-action from 4.2.0 to 4.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6666](https://github.com/DependencyTrack/dependency-track/pull/6666) - chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6665](https://github.com/DependencyTrack/dependency-track/pull/6665) - chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6664](https://github.com/DependencyTrack/dependency-track/pull/6664) - chore(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6663](https://github.com/DependencyTrack/dependency-track/pull/6663) - chore(deps): Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6682](https://github.com/DependencyTrack/dependency-track/pull/6682) - chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6754](https://github.com/DependencyTrack/dependency-track/pull/6754) - chore(deps): Bump actions/setup-java from 5.4.0 to 5.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6753](https://github.com/DependencyTrack/dependency-track/pull/6753) - chore(deps): Bump debian from `ee12ffb` to `328d164` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6748](https://github.com/DependencyTrack/dependency-track/pull/6748) - Bump bundled frontend to 4.14.3 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6763](https://github.com/DependencyTrack/dependency-track/pull/6763) ##### Other Changes - Add v5 migration notes by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6151](https://github.com/DependencyTrack/dependency-track/pull/6151) - Update Docker Hub secrets for v4 publish workflow by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6173](https://github.com/DependencyTrack/dependency-track/pull/6173) - Add changelog for 4.14.3 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6762](https://github.com/DependencyTrack/dependency-track/pull/6762) #### New Contributors - [@&#8203;heyiamwahab236](https://github.com/heyiamwahab236) made their first contribution in [#&#8203;6614](https://github.com/DependencyTrack/dependency-track/pull/6614) **Full Changelog**: <https://github.com/DependencyTrack/dependency-track/compare/4.14.2...4.14.3> ### [`v4.14.2`](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.2) [Compare Source](https://github.com/DependencyTrack/dependency-track/compare/4.14.1...4.14.2) For official releases, refer to [Dependency Track Docs >> Changelogs](https://docs.dependencytrack.org/changelog/) for information about improvements and upgrade notes. If additional details are required, consult the closed issues for this release milestone. ```text # SHA1 953074d95757bea162931b7811885945bbe992aa dependency-track-apiserver.jar 53f3198f5422e1117f53859c5f42403f48a4a4e3 dependency-track-bundled.jar # SHA256 3ff379380d35b9ff924014b680e7f3718c119f59b2cc4ee6ece4345a3ca1c110 dependency-track-apiserver.jar fca1c0c69d543f4be3501f04d3293beef5b5db9fbad24d55cfc70ea2cc8e2b4f dependency-track-bundled.jar # SHA512 4e6119cfc05ed8767cdf1302b31c47814a025d854fa5f793a6b1bb0341732762a40cc5f3b93f59e7432e75d3cf7f2aa44320df129b85cea9e1de8fb81a053fc5 dependency-track-apiserver.jar a047cd00ebdc59074c096c7ab6b095e0367e563f07c6565ab33413d6b9c5dbcb42a89cc71136dbe04b9ef48697f00673a15c0e18313dcde6c9c04a069c901b33 dependency-track-bundled.jar ``` <!-- Release notes generated using configuration in .github/release.yml at 4.14.2 --> #### What's Changed ##### Enhancements 🚀 - Backport: Improve performance of vuln data source mirroring by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6040](https://github.com/DependencyTrack/dependency-track/pull/6040) - Backport: Handle epoch PURL qualifier for version comparison by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6083](https://github.com/DependencyTrack/dependency-track/pull/6083) - Backport: Add project filters to component identity search by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6087](https://github.com/DependencyTrack/dependency-track/pull/6087) ##### Bug Fixes 🐛 - Backport: Send composer package names with "/" separator to Trivy by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6117](https://github.com/DependencyTrack/dependency-track/pull/6117) ##### Dependency Updates 🤖 - build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.3 to 9.0.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6021](https://github.com/DependencyTrack/dependency-track/pull/6021) - build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.0 to 5.1.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6015](https://github.com/DependencyTrack/dependency-track/pull/6015) - build(deps): bump debian from `99fc6d2` to `e51bfcd` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6014](https://github.com/DependencyTrack/dependency-track/pull/6014) - build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.2 to 5.1.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6037](https://github.com/DependencyTrack/dependency-track/pull/6037) - build(deps): bump alpine from `2510918` to `5b10f43` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6030](https://github.com/DependencyTrack/dependency-track/pull/6030) - build(deps): bump eclipse-temurin from `305fb0c` to `d36843a` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6029](https://github.com/DependencyTrack/dependency-track/pull/6029) - build(deps): bump org.metaeffekt.core:ae-security from 0.153.2 to 0.153.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6047](https://github.com/DependencyTrack/dependency-track/pull/6047) - build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.39 to 2.1.40 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6046](https://github.com/DependencyTrack/dependency-track/pull/6046) - Backport: Bump maven-artifact to 3.9.15 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6048](https://github.com/DependencyTrack/dependency-track/pull/6048) - build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6060](https://github.com/DependencyTrack/dependency-track/pull/6060) - build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.4 to 9.0.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6066](https://github.com/DependencyTrack/dependency-track/pull/6066) - build(deps): bump debian from `e51bfcd` to `8f0c555` in /src/main/docker by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6052](https://github.com/DependencyTrack/dependency-track/pull/6052) - build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.2 to 1.28.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6071](https://github.com/DependencyTrack/dependency-track/pull/6071) - build(deps-dev): bump org.testcontainers:testcontainers from 2.0.4 to 2.0.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6076](https://github.com/DependencyTrack/dependency-track/pull/6076) - build(deps): bump com.google.cloud.sql:postgres-socket-factory from 1.28.2 to 1.28.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6073](https://github.com/DependencyTrack/dependency-track/pull/6073) - build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.2 to 1.28.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6072](https://github.com/DependencyTrack/dependency-track/pull/6072) - build(deps): bump org.metaeffekt.core:ae-security from 0.153.3 to 0.154.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6080](https://github.com/DependencyTrack/dependency-track/pull/6080) - build(deps): bump org.apache.maven:maven-artifact from 3.9.14 to 3.9.15 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6045](https://github.com/DependencyTrack/dependency-track/pull/6045) - build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6101](https://github.com/DependencyTrack/dependency-track/pull/6101) - build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.41 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6100](https://github.com/DependencyTrack/dependency-track/pull/6100) - Backport: Bump versatile to 0.18.1 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6116](https://github.com/DependencyTrack/dependency-track/pull/6116) - Backport: Bump bundled frontend to 4.14.2 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6122](https://github.com/DependencyTrack/dependency-track/pull/6122) ##### Other Changes - Backport: Ignore flaky VulnerableSoftwareIndexerTest by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6039](https://github.com/DependencyTrack/dependency-track/pull/6039) - Backport: Fix borked docs navigation by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6118](https://github.com/DependencyTrack/dependency-track/pull/6118) - Add changelog for 4.14.2 by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;6120](https://github.com/DependencyTrack/dependency-track/pull/6120) **Full Changelog**: <https://github.com/DependencyTrack/dependency-track/compare/4.14.1...4.14.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate-bot added 1 commit 2026-05-09 00:01:48 +00:00

chore(deps): update dependencytrack/apiserver docker tag to v4.14.2 f2603acb69

renovate-bot force-pushed renovate/dependencytrack-apiserver-4.x from f2603acb69 to 6366329dde 2026-07-03 00:01:36 +00:00 Compare

renovate-bot force-pushed renovate/dependencytrack-apiserver-4.x from 6366329dde to 5a297f0c01 2026-07-21 00:02:11 +00:00 Compare

renovate-bot changed title from chore(deps): update dependencytrack/apiserver docker tag to v4.14.2 to chore(deps): update dependencytrack/apiserver docker tag to v4.14.3 2026-07-21 00:02:11 +00:00

Some checks failed

Hide checks

Build and Publish Docker Images / test-backend (pull_request) Successful in 38s

Details

Build and Publish Docker Images / test-frontend (pull_request) Failing after 25s

Details

Build and Publish Docker Images / test-agentyzer (pull_request) Successful in 22s

Details

Build and Publish Docker Images / test-e2e (pull_request) Successful in 12s

Details

Build and Publish Docker Images / delete-pr-images (pull_request) Has been skipped

Details

Build and Publish Docker Images / build-push-images (pull_request) Has been skipped

Details

Build and Publish Docker Images / check-version (pull_request) Has been skipped

Details

Build and Publish Docker Images / release (pull_request) Has been skipped

Details

Build and Publish Docker Images / create-tag (pull_request) Has been skipped

Details

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/dependencytrack-apiserver-4.x:renovate/dependencytrack-apiserver-4.x

git switch renovate/dependencytrack-apiserver-4.x

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

phbaer/dtvp!148

No description provided.