dtrack

Update docker.io/dependencytrack/frontend Docker tag to v4.14.0

Michi Kofler-Häusler

13 Mar 2026 — 6 min read

No problems upgrading the frontend Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package	Update	Change
docker.io/dependencytrack/frontend (source, changelog)	minor	`4.13.6` → `4.14.0`

Release Notes

DependencyTrack/frontend (docker.io/dependencytrack/frontend)

`v4.14.0`

Compare Source

Dependency Track Frontend

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


# SHA1
8a822e22c6c087b0e46f9478f9b342d2e2bad162  frontend-dist.zip

# SHA256
9a96be982a80c6c8714ad8d22a932d013a6b3593744083d551a7fb2b4a281aa3  frontend-dist.zip

# SHA512
1179ac9a06eccb6b3fd6efc97cf6df38809fe55b139dd0b2027de1696738ea92ca73edd66cb68c64ebc2cc34b5c246fdcfcdf12978e0a313095d7faab8cb2820  frontend-dist.zip

What's Changed

Enhancements 🚀

Improve German Translation by @fupgang in #1227
Show collection projects using tag in tag list by @nscuro in #1237
feat: add suffix to vulnerability locale keys by @setchy in #1276
chore(i18n-uk): update Ukrainian translations by @illenko in #1287
feat(ui): add match mode selector to internal component config #1282 by @ch8matt in #1283
feat: display license id by @setchy in #1311
Run Dependabot on latest release branch by @nscuro in #1364
feat(scope): Support for scope mentioned in cyclonedx format. by @anantk24 in #1319
chore: remove duplicate call to prebuild from package.json by @jkowalleck in #1389
Repositories Bearer Auth: Make username optional by @valentijnscholten in #1128
Add OSS Index Base URL configuration field by @brianf in #1431
feat: Add support for IS_INTERNAL policy condition by @ch8matt in #1394
Add CVSSv4 support by @nscuro in #1455

Bug Fixes 🐛

fix: don't duplicate base-path in links by @Aurifi in #1354
fix(ui): remove policy UUID from tag search endpoint in SelectTagModal by @ch8matt in #1363
Run welcome message through DOMPurify before rendering it by @nscuro in #1378
Fix redirect loop when authenticated user is lacking permissions by @nscuro in #1380
Reseting isDisabled and re-initialize teams when opening create-modal. by @ElenaStroebele in #1410

Dependency Updates 🤖

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in #1234
build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot[bot] in #1233
build(deps): bump nginxinc/nginx-unprivileged from 1.27.4-alpine@sha256:d43566af1caeaf6d16d4880f587cdeb9e0efe172aad1d1d43ca4ce0fa304e293 to sha256:663d1f83b634d625f3c36b323b21cc5c2c4ed5ebf912a01bfe13cce2f455e92e in /docker by @dependabot[bot] in #1232
build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in #1229
build(deps): bump nginxinc/nginx-unprivileged from 1.27.4-alpine to 1.27.5-alpine in /docker by @dependabot[bot] in #1238
build(deps): bump nginxinc/nginx-unprivileged from ad90858 to 9d092c1 in /docker by @dependabot[bot] in #1243
build(deps): bump nginxinc/nginx-unprivileged from 9d092c1 to b16a09b in /docker by @dependabot[bot] in #1247
build(deps): bump nginxinc/nginx-unprivileged from b16a09b to 82a240b in /docker by @dependabot[bot] in #1249
build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot[bot] in #1284
build(deps): bump nginxinc/nginx-unprivileged from 1.27.5-alpine to 1.29.0-alpine in /docker by @dependabot[bot] in #1290
build(deps-dev): bump pbkdf2 from 3.1.2 to 3.1.3 by @dependabot[bot] in #1286
build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.32.0 by @dependabot[bot] in #1293
build(deps): bump nginxinc/nginx-unprivileged from 7d08b59 to 7fa831d in /docker by @dependabot[bot] in #1292
build(deps): bump nginxinc/nginx-unprivileged from 7fa831d to 43e46e2 in /docker by @dependabot[bot] in #1299
build(deps): bump docker/build-push-action from 6.16.0 to 6.18.0 by @dependabot[bot] in #1260
build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #1301
build(deps): bump nginxinc/nginx-unprivileged from 43e46e2 to 094aa5b in /docker by @dependabot[bot] in #1307
build(deps): bump nginxinc/nginx-unprivileged from 1.29.0-alpine to 1.29.1-alpine in /docker by @dependabot[bot] in #1313
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1308
build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #1302
build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.1 by @dependabot[bot] in #1327
build(deps): bump nginxinc/nginx-unprivileged from 5fed1af to 7f2bd11 in /docker by @dependabot[bot] in #1323
build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #1343
build(deps): bump nginxinc/nginx-unprivileged from 1.29.1-alpine to 1.29.2-alpine in /docker by @dependabot[bot] in #1348
build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1347
build(deps): bump nginxinc/nginx-unprivileged from a9155b2 to 7f26470 in /docker by @dependabot[bot] in #1350
build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #1330
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #1357
build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1358
build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #1352
build(deps): bump nginxinc/nginx-unprivileged from 7f26470 to 34536ff in /docker by @dependabot[bot] in #1351
build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1377
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1405
build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1404
build(deps): bump nginxinc/nginx-unprivileged from 1.29.2-alpine to 1.29.3-alpine in /docker by @dependabot[bot] in #1401
build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #1400
build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in #1399
update dompurify to 3.3.0 by @snieguu in #1395
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1411
build(deps): bump nginxinc/nginx-unprivileged from c6ff4f1 to 11cab18 in /docker by @dependabot[bot] in #1407
build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in #1420
build(deps): bump nginxinc/nginx-unprivileged from 11cab18 to c3b9dd8 in /docker by @dependabot[bot] in #1413
build(deps): bump nginxinc/nginx-unprivileged from c3b9dd8 to 7445ca3 in /docker by @dependabot[bot] in #1422
build(deps): bump nginxinc/nginx-unprivileged from 7445ca3 to 0620420 in /docker by @dependabot[bot] in #1426
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1430
build(deps): bump nginxinc/nginx-unprivileged from 0620420 to 5aea7cc in /docker by @dependabot[bot] in #1432
build(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1435
build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1445
build(deps): bump nginxinc/nginx-unprivileged from 1.29.3-alpine to 1.29.5-alpine in /docker by @dependabot[bot] in #1439
build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 in /.github/workflows by @dependabot[bot] in #1446
build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #1450
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1451
build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.2 by @dependabot[bot] in #1453
build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #1464
build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #1463
build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1459
build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #1461
build(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1460
build(deps): bump nginxinc/nginx-unprivileged from a731ba0 to e93571f in /docker by @dependabot[bot] in #1457
build(deps): bump dompurify from 3.3.0 to 3.3.2 by @dependabot[bot] in #1465

Other Changes

chore: Update versions in defect-report.yml by @setchy in #1224
feat(i18n): add Traditional Chinese (zh-TW) language support and update related translations by @wengct in #1412
Remove database information from About dialogue by @nscuro in #1421
Add missing internal_status i18n key for zh-TW locale by @nscuro in #1456