Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: DependencyTrack/dependency-track
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 4.12.5
Choose a base ref
...
head repository: DependencyTrack/dependency-track
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 4.12.6
Choose a head ref
  • 19 commits
  • 17 files changed
  • 3 contributors

Commits on Feb 17, 2025

  1. prepare-iteration: set version to 4.12.6-SNAPSHOT

    @dependencytrack-bot
    dependencytrack-bot committed Feb 17, 2025
    Configuration menu
    Copy the full SHA
    ca89557 View commit details
    Browse the repository at this point in the history

  2. Add release artifact checksums for v4.12.5 

    Signed-off-by: Niklas <[email protected]>
    @nscuro
    nscuro authored Feb 17, 2025
    Configuration menu
    Copy the full SHA
    58d440c View commit details
    Browse the repository at this point in the history

Commits on Feb 19, 2025

  1. Fix possible NPEs in TrivyAnalysisTask 

    Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 19, 2025
    Configuration menu
    Copy the full SHA
    7477f87 View commit details
    Browse the repository at this point in the history

  2. Execute Trivy integration tests against VulnerabilityAnalysisTask 

    This covers more logic than testing the `TrivyAnalysisTask` in isolation. This would've been able to catch #4664.

Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 19, 2025
    Configuration menu
    Copy the full SHA
    efb7262 View commit details
    Browse the repository at this point in the history

  3. Fix components being made transient when they should be detached in `… 

    …VulnerabilityAnalysisTask`

Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 19, 2025
    Configuration menu
    Copy the full SHA
    729f989 View commit details
    Browse the repository at this point in the history

  4. Bump net.minidev:json-smart to 2.5.2 

    Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 19, 2025
    Configuration menu
    Copy the full SHA
    e1e736e View commit details
    Browse the repository at this point in the history

  5. Merge pull request #4671 from nscuro/backport-pr-4668

    @nscuro
    nscuro authored Feb 19, 2025
    Configuration menu
    Copy the full SHA
    29e9ad7 View commit details
    Browse the repository at this point in the history

  6. Merge pull request #4672 from nscuro/backport-pr-4669

    @nscuro
    nscuro authored Feb 19, 2025
    Configuration menu
    Copy the full SHA
    e41c28f View commit details
    Browse the repository at this point in the history

  7. Analyze all components of a project at once instead of in batches 

    Unfortunately this is necessary to support Trivy properly, because it checks for the existence of `OPERATING_SYSTEM` components in a project. If we were to analyze components in batches, this logic might not work for large projects.

Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 19, 2025
    Configuration menu
    Copy the full SHA
    6adea33 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #4673 from nscuro/backport-pr-4670

    @nscuro
    nscuro authored Feb 19, 2025
    Configuration menu
    Copy the full SHA
    cce0e43 View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2025

  1. Fix #4344: Notification webhook sends blank header key/value with a c… 

    …olon

Signed-off-by: Lennart Coopmans <[email protected]>
    @LennartC @nscuro
    LennartC authored and nscuro committed Feb 21, 2025
    Configuration menu
    Copy the full SHA
    fa14334 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #4680 from nscuro/backport-pr-4679

    @nscuro
    nscuro authored Feb 21, 2025
    Configuration menu
    Copy the full SHA
    37f828d View commit details
    Browse the repository at this point in the history

Commits on Feb 23, 2025

  1. Disable include tag for Pebble templates 

    Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 23, 2025
    Configuration menu
    Copy the full SHA
    6f045e9 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #4685 from nscuro/backport-pr-4684

    @nscuro
    nscuro authored Feb 23, 2025
    Configuration menu
    Copy the full SHA
    9deccc2 View commit details
    Browse the repository at this point in the history

Commits on Feb 24, 2025

  1. Add changelog for v4.12.6 

    Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 24, 2025
    Configuration menu
    Copy the full SHA
    0d66852 View commit details
    Browse the repository at this point in the history

  2. Bump bundled frontend to 4.12.6 

    Signed-off-by: nscuro <[email protected]>
    @nscuro
    nscuro committed Feb 24, 2025
    Configuration menu
    Copy the full SHA
    3cfa500 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #4690 from nscuro/backport-pr-4689

    @nscuro
    nscuro authored Feb 24, 2025
    Configuration menu
    Copy the full SHA
    e4fa022 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #4691 from nscuro/changelog-v4.12.6

    @nscuro
    nscuro authored Feb 24, 2025
    Configuration menu
    Copy the full SHA
    8a2e41e View commit details
    Browse the repository at this point in the history

  5. prepare-release: set version to 4.12.6

    @dependencytrack-bot
    dependencytrack-bot committed Feb 24, 2025
    Configuration menu
    Copy the full SHA
    6036df7 View commit details
    Browse the repository at this point in the history
Loading