dtrack

Update docker.io/dependencytrack/apiserver Docker tag to v5.1.1

Michi Kofler-Häusler

Michi Kofler-Häusler

— 4 min read
Share
Update docker.io/dependencytrack/apiserver Docker tag to v5.1.1
Photo by MICHAEL CHIARA / Unsplash

No problems upgrading the backend Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package Update Change
docker.io/dependencytrack/apiserver (source, changelog) patch 5.1.0 → 5.1.1

Release Notes

DependencyTrack/dependency-track (docker.io/dependencytrack/apiserver)

v5.1.1

Compare Source

[!IMPORTANT]
Please read the upgrade notes before upgrading your instance.

What's Changed

Enhancements 🚀
  • Backport: Refactor component metrics computation to avoid pathological query plans by @​nscuro in #​7364
Bug Fixes 🐛
  • Backport: Run spotless:apply after Maven release plugin modifies them POM by @​nscuro in #​7140
  • Backport: v4-migrator: Dedup PROJECT_PROPERTY rows of collapsed projects by @​nscuro in #​7360
  • Backport: v4-migrator: Reconcile PROJECT collection logic and tag by @​nscuro in #​7361
  • Backport: Add option to use Snyk's per-package endpoint when batching is not available by @​nscuro in #​7362
  • Backport: Fix PURLs without version being submitted for analysis by @​nscuro in #​7363
  • Backport: Remove unused LDAP properties by @​nscuro in #​7365
  • Backport: Fix management server preventing shutdown on initialization failures by @​nscuro in #​7366
  • Backport: Resolve project parent before other fields in updateProject by @​nscuro in #​7367
  • Backport: Fix incorrect OpenAPI docs for POST /v1/project WRT parent semantics by @​nscuro in #​7368
  • Backport: Fix project lookup endpoints not serving aggregate metrics for collection projects by @​nscuro in #​7369
  • Backport: Fix DATASOURCE_MIRRORING notifications not being emitted by @​nscuro in #​7370
  • Backport: Treat >=0 ranges as wildcard during vers matching by @​nscuro in #​7371
  • Backport: Accumulate mirrored VulnerableSoftware by vulnerability key by @​nscuro in #​7373
  • Backport: Fix Checkmarx model conversion NPEs by @​nscuro in #​7374
  • Backport: Fix tag binding triggering unnecessary relationship loads by @​nscuro in #​7375
  • Backport: Prevent NPEs during DataNucleus L1 cache eviction by @​nscuro in #​7376
  • Backport: Fix proxy authentication for GitHub Advisories vuln data source by @​nscuro in #​7377
  • Backport: Fix broken link to VulnCheck token creation by @​nscuro in #​7372
  • Backport: Fix calculated CVSSv4 score only considering base metrics by @​nscuro in #​7378
  • Backport: Fix NVD vuln data source iteration and watermarking issues by @​nscuro in #​7379
  • Backport: Move vuln data source mirroring off JDO by @​nscuro in #​7384
  • Backport: Fix lack of context in NVD & OSV unexpected status code exception messages by @​nscuro in #​7386
Dependency Updates 🤖
Other Changes

Full Changelog: https://github.com/DependencyTrack/dependency-track/compare/5.1.0...5.1.1

Read more

Me on Mastodon - This link is here for verification purposes.