chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 #150

renovate · 2022-12-16T18:52:23Z

This PR contains the following updates:

Package	Update	Change
dependencytrack/apiserver (source)	minor	`4.6.3` -> `4.11.7`

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

`v4.11.7`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
9a916abcbb478a4dbad101f5335acdf2b8462062  dependency-track-apiserver.jar
c5a30ee550af8a943bb77167e515fb6422e51b36  dependency-track-bundled.jar

### SHA256
2df1b2ea67a16cdc6108c3ac2f538018e529205ce5f36a6da78f2feefeddd2c8  dependency-track-apiserver.jar
4665cdd14351d7b1c41004ffc57791297c4ec5fc7f958635cff246d1b1a95eed  dependency-track-bundled.jar

### SHA512
d83a209056a7f7ff55b42fa33818dab57668e99c97ffd63c579311743398abc3d102c4a4197577321f3cd3ef9a4654527f453be1d4c217d087d32282f7e57a91  dependency-track-apiserver.jar
2d6fc1c1dd0af04ed92f1b8383ee4524169cde1c715f1e29899cf95b5d6d50f98caa5ec9debc2bd3a2a388d60cc528adb3e861f2248c9c439e8b2f5078a0e3a8  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Fix directDependencies, externalReferences, metadata missing from /api/v1/project/{uuid} response when not already cached by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4071

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
daab7ed5b760ff909e4b9cc041b89c3374c1d955  dependency-track-apiserver.jar
8ff2bd4db69e7083d501a4c489f703677044a5f0  dependency-track-bundled.jar

### SHA256
a76cc3417728bdc880f41af613e543d3e5f033d7b0b1db84ffb397bcbcb3936b  dependency-track-apiserver.jar
fd1c25e2b2d727f377eeec8240370558a9796225fe4dc0f258021b1061fbc36f  dependency-track-bundled.jar

### SHA512
1064d3d04da4d47f35d38f04956adbd2e24a5bc8f828c0f9a7c93705fb09f4ebcdee266a9d931aa64d94f583ef7c11ddc788dad2cf0b1682546c4fe927194b57  dependency-track-apiserver.jar
e0cc1abd661c991dd2ef3e19dd09903d609d2860c8510cc120bb399fb4751757d25cb05c1ef160e935579350a1cb060add556f3535e0b340f4bcbe848b9e0038  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Handle breaking change in Trivy v0.54.0 server API by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4040
Backport: Fix anchors in changelog documentation by @nscuro (original change by @JCHacking) in https://github.com/DependencyTrack/dependency-track/pull/4043
Backport: Fix validation error when XML BOM declares multiple namespaces by @nscuro (original change by @philippn) in https://github.com/DependencyTrack/dependency-track/pull/4041
Backport: Fix project link for new vulnerable dependency for email by @nscuro (original change by @2000rosser) in https://github.com/DependencyTrack/dependency-track/pull/4044
Backport: Fix JDOUserException when multiple licenses match a component's license name by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4042
Fix parent field occasionally missing in /api/v1/project/{uuid} responses by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4049
Backport: Fix vex export returning invalid CycloneDX by @nscuro (original change by @SaberStrat) in https://github.com/DependencyTrack/dependency-track/pull/4054

Dependency Updates 🤖

Backport: Bump Temurin base image to 21.0.4_7 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4056
Bump bundled frontend to v4.11.6 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4057

Other Changes

Add changelog for v4.11.6 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/4045

Full Changelog: DependencyTrack/dependency-track@4.11.5...4.11.6

`v4.11.5`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
8fd45ea6ae725e8e7dac59ec9d471fcdaeb42c6d  dependency-track-apiserver.jar
eba6cbaa6c2da9ffb295da83ed39af68ff4130a8  dependency-track-bundled.jar

### SHA256
c39c15849cbb7dd19833ea689c20aaf92bc9f6965b758961e1d2a01a2b09f86f  dependency-track-apiserver.jar
7ebb11573b2a59084ed98fe92d363240c910dc7b5aa7ebeda64bee7d47089d9a  dependency-track-bundled.jar

### SHA512
5c885c595687f20da1792393a161e30f23bb3fdfd9deb31c6010be3da86e839a046d2ba854a52f1148ba38fd368c084c911910a90ea384391cf6cad5e52bc1cd  dependency-track-apiserver.jar
eb0e56faa86bae2cb7d81b77e95fa6f809eaa55e7ed8a412dcb15cb4491490ae8398812752e460a07d12ca03b08a0951567be60accd48462c73263388dcd21ef  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Fix BOM_CONSUMED and BOM_PROCESSED notifications being dispatched with wrong scope for BOM processing V2 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3941
Backport: Set license name instead of ID when using custom license by @nscuro (original change by @2000rosser) in https://github.com/DependencyTrack/dependency-track/pull/3942

Dependency Updates 🤖

Backport: Bump io.github.jeremylong:open-vulnerability-clients from 6.1.1 to 6.1.2 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3940
Backport: Bump debian from 0200978 to f8bbfa0 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3943
Bump oauth2-oidc-sdk from 10.15 to 11.13 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3944
Bump bundled frontend to 4.11.5 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3945

Other Changes

Add changelog for v4.11.5 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3946

Full Changelog: DependencyTrack/dependency-track@4.11.4...4.11.5

`v4.11.4`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
19531d4f02cccf26478b3a63feba355da8726b3f  dependency-track-apiserver.jar
3c4bb658783157ae9c408b8323e25e55c9ab25fd  dependency-track-bundled.jar

### SHA256
9a09259ba4c19d02b81a39fb5894df758f19ff1bb43538d4b999b4a5789a9d9b  dependency-track-apiserver.jar
73fc867d347da8a8af14f8c6812e13b870037a28d7de83e2837db9c27d840100  dependency-track-bundled.jar

### SHA512
a357be2617e9da6d4eaf19120316927ccddbc1290b9f0179287619864ffe2f6a349c9cab729853469425e273662e64cb49a4ede5498da937817b3cda01997af9  dependency-track-apiserver.jar
13fbf6477f2820b0926ad082063332e9f34de622e64b11cfe0fa4574ba5d2d9f41c06c791740ddb69a34fc71e21b6456f20c36018eb2b52e0664fdc47a41645f  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

Backport: Support ingestion of CycloneDX v1.6 BOMs by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3863

Bug Fixes 🐛

Backport: Fix inverted "show inactive" filter in vulnerability audit view by @nscuro (original change by @2000rosser) in https://github.com/DependencyTrack/dependency-track/pull/3864
Backport: Fix BOM validation failing when URL contains encoded [ and ] characters by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3866
Backport: Fix external references not being updated via POST /v1/component by @nscuro (original change by @sahibamittal) in https://github.com/DependencyTrack/dependency-track/pull/3867
Backport: Prevent XXE injection during CycloneDX validation and parsing by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3871

Dependency Updates 🤖

Backport: Bump bundled frontend to 4.11.4 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3875

Other Changes

Add changelog for v4.11.4 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3868

Full Changelog: DependencyTrack/dependency-track@4.11.3...4.11.4

`v4.11.3`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
ff4284ce635f4da916e907af20bb0e9339349ecd  dependency-track-apiserver.jar
beea18173e6a52180ac1a8ee721dd7f775eaaf2d  dependency-track-bundled.jar

### SHA256
f1e34cc7a0c5e2fe444e934aa221853ac762ee79997bc10fa712ee6ac8f776d8  dependency-track-apiserver.jar
d62557345bb244b5d34e7a56d057e264044524d8df7964df23383a2ace658cbd  dependency-track-bundled.jar

### SHA512
230d1e5eb4d883e1f2d3dfba734b6c8e92a55dbb56e263dab53cb127f01f1ca0f6fc36ac65acfb751dfa11c2a63d8f312a71411a329038dff974e772cb4446da  dependency-track-apiserver.jar
832fe98ba16b01b7411ff8a292f9e090295936406e521b3c8794868dc5665bc92c9d5db2657e4441be63a558b23b0da291aec4d277c0b0a50f63d2b5e2bdc38e  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Fix JDODataStoreException for unresolved licenses during BOM upload processing by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3801

Full Changelog: DependencyTrack/dependency-track@4.11.2...4.11.3

`v4.11.2`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
174956bf3cd2dab16cfd36e7ab1b5d7001b99160  dependency-track-apiserver.jar
af75c903b033418ea6326cbb4e6885afba99ee94  dependency-track-bundled.jar

### SHA256
135cf4361bbbc65f488796bf196c8d2d3cbebec931b249e037551c6fbbae2ed7  dependency-track-apiserver.jar
5020ac51158038439b7482d5c5fec151773162724dce1779249bf73053456d34  dependency-track-bundled.jar

### SHA512
2002e27260b5cd4f96384828ef57f753916faab5ad06e0299958c3ab3e328045f2e805d0b1c3c56c85b4602d473c10d2c23d1098c94a4db93af0959c45b6ede8  dependency-track-apiserver.jar
262b582bd2dcbbb8966acd5dae3df88bc318590da0e66a7ac11f2197ccdca89b773013f317b5fe945650f16a48d2c4601356df10d77c10666d899917755cc0c8  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Handle breaking change in Trivy server API by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3785
Backport: Fix project name not showing in Jira tickets by @nscuro (original change by @lgrguricmileusnic) in https://github.com/DependencyTrack/dependency-track/pull/3787
Backport: Add date format to support offset in NuGet timestamps by @nscuro (original change by @sahibamittal) in https://github.com/DependencyTrack/dependency-track/pull/3788
Backport: Fix licenses not being resolved by name by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3786
Backport: Fix Slack notifications failing when no base URL is configured by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3792

Dependency Updates 🤖

Backport: Bump bundled frontend to 4.11.2 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3794

Other Changes

Backport: Update database support docs by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3789
Add changelog for v4.11.2 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3790

Full Changelog: DependencyTrack/dependency-track@4.11.1...4.11.2

`v4.11.1`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
aa3d8ffc6b8f9d15a801148a93275ebeba922010  dependency-track-apiserver.jar
c57f1b8c003d95daa871096cbc37a6c03cd08907  dependency-track-bundled.jar

### SHA256
ed08e60e0761ced93454c14194da02be5950805911dbc7f7c611bdf0e753b437  dependency-track-apiserver.jar
e7613d6654083ab6e2c4ae24459444efe4d83df5d2c4d27e58a94bc809e2627a  dependency-track-bundled.jar

### SHA512
75f4fcd203ccbbf494047b5866942b7a08fd1f97e98f40cd5aac57dd3401fcb2dc0e2e8953d54035dd3dd96e28c4df563ecee52df05769e8e530dc27e3e72f9b  dependency-track-apiserver.jar
10e590eb849e1179688c787c3f52a5e333f20962c8f2ab4cec0b6a3f872991ff7d9f80748439bb33281e615c0bcd8ed65530abcc34f018f8b7f171c104e5caf5  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Fix failing JSON BOM validation when specVersion is not one of the first fields by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3698
Backport: Fix broken global vuln audit view for MSSQL by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3701
Backport: fix os handling when trivy sets pkgType on properties by @nscuro (original change by @fnxpt) in https://github.com/DependencyTrack/dependency-track/pull/3729

Other Changes

Add changelog for v4.11.1 and bump bundled frontend by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3733

Full Changelog: DependencyTrack/dependency-track@4.11.0...4.11.1

`v4.11.0`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
a9dae58a25c8aeeb54134ff054214505eb170db9  dependency-track-apiserver.jar
59b78c3f6b1979ba29c1bd754b7dc1005101fc49  dependency-track-bundled.jar

### SHA256
03160957fced99c3d923bbb5c6cb352740da1970bd4775b52bb451b95c4cefaf  dependency-track-apiserver.jar
1a34808cd6c7a9bf7b181e4f175c077f1ee5d5a9daf327b330db9b1c63aac2d3  dependency-track-bundled.jar

### SHA512
79a34a20a93f57a1bde94fa876c03141c7696f177c560397ecf4fdd68da168419f3703eb0a4c7e40cb677536b15640f89dddb8f5e8cf32dda3115b8f6d5cf6b3  dependency-track-apiserver.jar
af25807596c617d2bdff437ba9fd4d2e8cdf28f220b8844d8ab3a53fe0510d65ac30167dbb752c22e5f96536362389099e5c4b25302e4adec84d48d6c4d15198  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

Return processing token when cloning project #2842 by @rkg-mm in https://github.com/DependencyTrack/dependency-track/pull/3260
Hyades backport: Preprocess CWE dictionary by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3284
Add "Show in Dependency-Graph" Button in "Affected Projects" List [improved version] by @rkg-mm in https://github.com/DependencyTrack/dependency-track/pull/3285
Add "Show in Dependency-Graph" Button in "Affected Projects" List by @rbt-mm in https://github.com/DependencyTrack/dependency-track/pull/2942
Update SPDX license list to v3.22 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3368
Store computed severities in the database by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3408
feat(vulnerabilities): enhance API to support frontend changes for active/inactive affected projects by @setchy in https://github.com/DependencyTrack/dependency-track/pull/3425
Subject prefix by @LaVibeX in https://github.com/DependencyTrack/dependency-track/pull/3422
Trivy by @fnxpt in https://github.com/DependencyTrack/dependency-track/pull/3259
Webhook alert token and new user alerts by @fnxpt in https://github.com/DependencyTrack/dependency-track/pull/3275
Global Audit View: Vulnerabilities by @rbt-mm in https://github.com/DependencyTrack/dependency-track/pull/2472
Refactor BOM upload processing for better efficiency, correctness, and consistency by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3357
Bump CWE dictionary to v4.13 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3491
Apply consistent formatting to SQL queries; Use text blocks instead of string concatenation by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3492
Align retry configuration and behavior across analyzers by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3494
Add auto-generated changelog to GitHub releases by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3502
Bump SPDX license list to v3.23 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3508
Validate uploaded BOMs against CycloneDX schema by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3522
Add endpoint for updating API key comment by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3537
OpenAPI spec fixes and improvements by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3557
Disable automatic API key generation for teams. Fixes part of issue #2552. by @mprencipe in https://github.com/DependencyTrack/dependency-track/pull/3574
Generate SARIF File Of Project Vulnerability Findings by @aravindparappil46 in https://github.com/DependencyTrack/dependency-track/pull/3561
New feature: VulnDB Aliases! by @LaVibeX in https://github.com/DependencyTrack/dependency-track/pull/3588
Implement the hackage and nixpkgs meta analyzers by @MangoIV in https://github.com/DependencyTrack/dependency-track/pull/3549
Add support for component properties by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3499
Leverage component properties for Trivy scans by @fnxpt in https://github.com/DependencyTrack/dependency-track/pull/3620
Improve Lucene observability by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3535
Include pagination parameters in OpenAPI spec by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3625
Include sorting query parameters in OpenAPI spec by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3631
support for experimental configurations by @fnxpt in https://github.com/DependencyTrack/dependency-track/pull/3621
Gracefully handle unique constraint violations by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3648
Add support for worker pool drain timeout by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3657
Fall back to no authentication when OSS Index API token decryption fails by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3661
Truncate ComponentProperty value at 1024 characters by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3662
Add the project name and project URL to bom processing notifications by @2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3666
Bump bundled frontend to v4.11.0 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3681

Bug Fixes 🐛

Fix dropping of CWE table failing due to FK constraint by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3304
Fix notifications not being sent for child projects where active is null by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3305
Fix NPE in VersionDistancePolicyEvaluator when project has no direct dependencies by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3307
Fix ClassCastException when updating an existing ProjectMetadata#authors field by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3311
feat: Improve Error handling and add default version type by @jadyndev in https://github.com/DependencyTrack/dependency-track/pull/3313
Fix NVD API's last modified timestamp requiring restart to be applied by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3322
Project cloning logic for cloning policy violations and Violationanalysis by @mge-mm in https://github.com/DependencyTrack/dependency-track/pull/3248
Ignore withdrawn Github advisories by @kepten in https://github.com/DependencyTrack/dependency-track/pull/3394
Fix VulnDB parser being unable to import vulnerability records when 'nvd_additional_information' is empty by @lukas-braune in https://github.com/DependencyTrack/dependency-track/pull/3437
Fix URISyntaxException when NPM PURL contains special characters by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3456
Finding Attributed On date is not retained when cloning projects by @sebD in https://github.com/DependencyTrack/dependency-track/pull/3488
adding cargo to IMetaAnalyzer by @leec94 in https://github.com/DependencyTrack/dependency-track/pull/3511
Fix type of purl fields in Swagger docs by @sebD in https://github.com/DependencyTrack/dependency-track/pull/3512
Perform License Resolution On Name Field During SBOM Import by @aravindparappil46 in https://github.com/DependencyTrack/dependency-track/pull/3555
Update License Of Existing Components On BOM Upload by @aravindparappil46 in https://github.com/DependencyTrack/dependency-track/pull/3556
Provide meaningful error message for bom and vex exceeding Jackson's character limit by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3558
Fix unhandled NotFoundExceptions causing a HTTP 500 response by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3559
Extend length of PURL and PURLCOORDINATES columns from 255 to 786 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3560
Validate UUID request parameters by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3590
Vuln db severity by @LaVibeX in https://github.com/DependencyTrack/dependency-track/pull/3595
Fix JDOFatalUserException for long reference URLs from OSS Index by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3650
Catch all unhandled ClientErrorExceptions by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3659
Fix unique constraint violation during NVD mirroring via feed files by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3664
De-duplicate CPEs in NVD feed file parsing by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3667
Fix missing default repos for Hackage and Nixpkgs by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3678

Dependency Updates 🤖

Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.3 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3282
Bump github/codeql-action from 2.22.8 to 2.22.9 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3289
Bump aquasecurity/trivy-action from 0.14.0 to 0.16.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3288
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.15.0 to 1.15.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3298
Bump io.github.jeremylong:open-vulnerability-clients from 5.1.0 to 5.1.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3320
Bump eclipse-temurin from 5f85d29 to e96937d in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3319
Bump github/codeql-action from 2.22.9 to 3.22.11 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3318
Bump debian from 375fb84 to d4494b6 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3325
Bump org.eclipse.jetty:jetty-maven-plugin from 10.0.18 to 10.0.19 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3331
Bump org.slf4j:log4j-over-slf4j from 2.0.9 to 2.0.10 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3345
Bump github/codeql-action from 3.22.11 to 3.22.12 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3340
Bump org.slf4j:log4j-over-slf4j from 2.0.10 to 2.0.11 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3362
Bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3359
Bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3358
Bump actions/download-artifact from 3.0.2 to 4.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3341
Bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3317
Bump debian from d4494b6 to f7235f3 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3370
Bump actions/download-artifact from 4.1.0 to 4.1.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3378
Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3377
Bump github/codeql-action from 3.22.12 to 3.23.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3376
Bump eclipse-temurin from e96937d to 6b234f2 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3387
Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3400
Bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3401
Bump github/codeql-action from 3.23.0 to 3.23.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3399
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.15.1 to 1.15.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3391
Bump eclipse-temurin from 21.0.1_12-jre-jammy to 21.0.2_13-jre-jammy in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3410
Bump org.apache.httpcomponents.client5:httpclient5 from 5.3 to 5.3.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3409
Bump eclipse-temurin from 651d253 to 24d6ced in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3413
Bump Alpine to 2.2.5-SNAPSHOT by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3417
Bump github/codeql-action from 3.23.1 to 3.23.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3418
Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3419
Bump org.eclipse.jetty:jetty-maven-plugin from 10.0.19 to 10.0.20 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3428
Bump debian from f7235f3 to 4255c9f in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3427
Bump eclipse-temurin from 24d6ced to 91e50ea in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3432
Bump com.microsoft.sqlserver:mssql-jdbc from 12.4.2.jre11 to 12.6.0.jre11 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3431
Bump github/codeql-action from 3.23.2 to 3.24.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3435
Bump net.javacrumbs.json-unit:json-unit-assertj from 3.2.2 to 3.2.4 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3440
Bump org.json:json from 2023101 to 2024020 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3441
Bump org.slf4j:log4j-over-slf4j from 2.0.11 to 2.0.12 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3439
Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3460
Bump actions/download-artifact from 4.1.1 to 4.1.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3459
Bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3458
Bump lib.lucene.version from 8.11.2 to 8.11.3 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3457
Bump debian from 4255c9f to 435ba09 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3462
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.15.2 to 1.16.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3466
Bump eclipse-temurin from 91e50ea to 0672ad3 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3471
Bump github/codeql-action from 3.24.0 to 3.24.3 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3473
Bump eclipse-temurin from 0672ad3 to 636b9a7 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3476
Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3475
Bump actions/dependency-review-action from 4.0.0 to 4.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3474
Bump io.github.jeremylong:open-vulnerability-clients from 5.1.1 to 5.1.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3481
Bump net.javacrumbs.json-unit:json-unit-assertj from 3.2.4 to 3.2.5 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3480
Bump com.github.tomakehurst:wiremock-jre8 from 2.35.1 to 2.35.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3479
Bump com.microsoft.sqlserver:mssql-jdbc from 12.6.0.jre11 to 12.6.1.jre11 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3478
Bump net.javacrumbs.json-unit:json-unit-assertj from 3.2.5 to 3.2.7 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3486
Bump various dependencies by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3487
Bump actions/dependency-review-action from 4.1.0 to 4.1.3 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3497
Bump github/codeql-action from 3.24.3 to 3.24.5 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3496
Bump Alpine to 2.2.5 by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/3515
Bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3525
Bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3524
Bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3523
Bump org.json:json from 2024020 to 2024030 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3527
Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3526
Bump eclipse-temurin from 636b9a7 to d9f7b83 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3532
Bump org.testcontainers:testcontainers from 1.19.6 to 1.19.7 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3533
Bump io.github.jeremylong:open-vulnerability-clients from 5.1.2 to 6.0.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3542
Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3541
Bump docker/build-push-action from 5.1.0 to 5.2.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3539
Bump actions/setup-java from 4.0.0 to 4.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3540
Bump debian from 435ba09 to d10f054 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3543
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.16.0 to 1.17.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3547
Bump docker/build-push-action from 5.2.0 to 5.3.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3564
Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3563
Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3562
Bump actions/setup-java from 4.1.0 to 4.2.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3565
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.17.0 to 1.17.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3567
Bump github/codeql-action from 3.24.6 to 3.24.9 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3578
Bump actions/dependency-review-action from 4.1.3 to 4.2.4 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3577
Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3576
Bump io.github.jeremylong:open-vulnerability-clients from 6.0.0 to 6.0.1 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3586
Bump aquasecurity/trivy-action from 0.18.0 to 0.19.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3592
Bump actions/dependency-review-action from 4.2.4 to 4.2.5 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3593
Bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3606
Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3605
Bump debian from d10f054 to 2c96e00 in /src/main/docker by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3610
Bump org.slf4j:log4j-over-slf4j from 2.0.12 to 2.0.13 by @dependabot in https://github.com/DependencyTrack/dependency-track/pull/3619
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.17.1 to 1.18.0 by @dependabot in [https://github.com/DependencyTrack/dep

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested a review from arnou as a code owner December 16, 2022 18:52

pull-request-size bot added the size/XS label Dec 16, 2022

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.0~~ Update dependencytrack/apiserver Docker tag to v4.7.0 Dec 17, 2022

renovate bot changed the title ~~Update dependencytrack/apiserver Docker tag to v4.7.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.7.0 Dec 17, 2022

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from ffb58c7 to 84a52fb Compare February 27, 2023 18:34

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.7.1 Feb 27, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch 3 times, most recently from 6902229 to 8e84be7 Compare March 9, 2023 15:00

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8e84be7 to a2056dc Compare April 19, 2023 07:01

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.0 Apr 19, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a2056dc to 856606d Compare May 1, 2023 13:40

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 856606d to 44ba02b Compare May 16, 2023 12:18

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.1 May 16, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 44ba02b to b20015a Compare May 16, 2023 22:45

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.2 May 16, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch 5 times, most recently from 4cb22fc to 8c846e6 Compare May 25, 2023 23:54

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.2~~ chore(deps): update dependencytrack/apiserver docker tag to v4.9.0 Oct 16, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8c846e6 to a98bbe0 Compare October 16, 2023 19:26

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.9.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.9.1 Oct 30, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a98bbe0 to 7da9d9b Compare October 30, 2023 16:58

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.9.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.10.0 Dec 8, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 7da9d9b to 8b551e3 Compare December 8, 2023 16:47

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8b551e3 to 4afabe6 Compare December 19, 2023 12:57

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.10.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.10.1 Dec 19, 2023

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 4afabe6 to e6df4b5 Compare February 26, 2024 14:06

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from e6df4b5 to 1ca955b Compare May 7, 2024 16:45

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.10.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.0 May 7, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 1ca955b to 0326a81 Compare May 19, 2024 19:01

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.1 May 19, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 0326a81 to 0607f03 Compare June 1, 2024 20:21

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.2 Jun 1, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 0607f03 to 643c0f4 Compare June 3, 2024 12:34

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.2~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.3 Jun 3, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 643c0f4 to 86cc21b Compare June 24, 2024 11:05

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.3~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.4 Jun 24, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 86cc21b to e0ed3dd Compare July 8, 2024 20:05

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.4~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.5 Jul 8, 2024

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from e0ed3dd to a372863 Compare August 10, 2024 22:57

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.5~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.6 Aug 10, 2024

chore(deps): update dependencytrack/apiserver docker tag to v4.11.7

7c223b0

renovate bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a372863 to 7c223b0 Compare August 14, 2024 13:39

renovate bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.6~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 Aug 14, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 #150

chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 #150

renovate bot commented Dec 16, 2022 •

edited

Loading

chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 #150

Are you sure you want to change the base?

chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 #150

Conversation

renovate bot commented Dec 16, 2022 • edited Loading

Release Notes

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

What's Changed

Bug Fixes 🐛

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

What's Changed

Bug Fixes 🐛

Other Changes

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates 🤖

Configuration

renovate bot commented Dec 16, 2022 •

edited

Loading