chore(deps): update dependencytrack/apiserver docker tag to v4.13.4 - autoclosed

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Update	Change
dependencytrack/apiserver (source)	minor	4.6.3 -> 4.13.4

---

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

v4.13.4

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
048b46829358cfde1f4d90b9298984224c75f6ae  dependency-track-apiserver.jar
b3eb198254783462dc7d147791537fa50b11483e  dependency-track-bundled.jar

### SHA256
2ca674108a08bf71642ddec6704125fae720161c4c40268fd19557e8b116d9d0  dependency-track-apiserver.jar
a8252f66f9b3c9253553e1d2a40fb0169f90c31895e36f57bc5992068ff473f5  dependency-track-bundled.jar

### SHA512
25d697390a5a0316b85b67e01f29caaeba8cec955318a7ecd762189aefad0175bf338228361790796b153e53953c663cd05dca940d51dc4a30d015fb897a1c47  dependency-track-apiserver.jar
698f3f8ddc9958c7bd17f17e66c3b79d04181b509bd8fd42f01ee58aeb23cf5a88b208bcc13b6815c7d5396b049881c830aee1810420ae09923fbef766cf33ea  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Backport: Migrate to NVD 2.0 data feeds by @​nscuro in #​5236

Bug Fixes 🐛

• Backport: Handle URLs in composer package metadata pattern by @​nscuro in #​5234
• Backport: Fix failing TrivyAnalysisTaskIntegrationTest by @​nscuro in #​5241
• Backport: Fix inconsistent ordering in findings endpoints by @​nscuro in #​5247
• Handle adduser / addgroup removal in Debian base image by @​nscuro in #​5246
• Backport: Fix failing Trivy OS matching for distro versions with special characters by @​nscuro in #​5249

Dependency Updates 🤖

• Bump Debian base image to latest digest by @​nscuro in #​5240
• Backport: Bump angus-mail to 2.0.4 by @​nscuro in #​5242
• Backport: Bump Temurin base image to 21.0.8_9 by @​nscuro in #​5243
• Backport: Bump commons-lang3 to 3.18.0 by @​nscuro in #​5244
• Bump bundled frontend to 4.13.4 by @​nscuro in #​5253

Other Changes

• Add changelog for v4.13.4 by @​nscuro in #​5251

Full Changelog: DependencyTrack/dependency-track@4.13.3...4.13.4

v4.13.3

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
ba7866fa7b8be30f2058606ee77539b126ab61f1  dependency-track-apiserver.jar
70ac64f18c4b219d283df0c056e74f001287159b  dependency-track-bundled.jar

### SHA256
8b6b2f29bdfd6f3e81ed2c9754a3ab2b4e27bbb9c33e52f720700d7e73558adb  dependency-track-apiserver.jar
1ae9984304854845cc5741d1dd1288e7b0a748539f448e0d0899ef635bb33c28  dependency-track-bundled.jar

### SHA512
706389f889eb177701d65e1ffefb30540f0ac9761128554f37e1edb637d73a58c981c87ca783e4b4eed982b813f4d359d590ca6ccd7132c10da83056935d2328  dependency-track-apiserver.jar
09e1ce042f64bd2ea5214fab3ebf2d2c86255b7c781490c14f2afcb517c056ef791713ba939e5de20b2b32a21949e5ac8a70ae3610432da1fa42681feceff626  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

• Backport: Fix OSV ubuntu advisory containing severity without type by @​nscuro in #​5168
• Backport: Fix too many query parameters when retrieving vuln aliases by @​nscuro in #​5167
• Backport: Add apiserver health check to Compose files by @​nscuro in #​5171
• Backport: Handle dangling SPDX expression operators by @​nscuro in #​5173
• Backport: Fix BOM export failing for projects of type NONE by @​nscuro in #​5178
• Backport: Ensure VulnerableSoftware query is able to leverage indexes by @​nscuro in #​5177
• Backport: Add whitespace sanitization in fuzzySearch CPE to fix CPE validation errors by @​nscuro in #​5176
• Backport: Bulk load component relationships for BOM export by @​nscuro in #​5179
• Backport: Improve Composer meta analyzer's ability to deal with minified metadata by @​nscuro in #​5175
• Backport: Fix failing v4.13.1 migration for H2 deployments that pre-date v4.11.0 by @​nscuro in #​5180

Dependency Updates 🤖

• Backport: bump org.apache.commons:commons-compress by @​nscuro in #​5169
• Backport: Bump PostgreSQL JDBC driver to 42.7.7 by @​nscuro in #​5174
• Bump Docker base images to latest digests by @​nscuro in #​5181
• Backport: Bump bundled frontend to 4.13.3 by @​nscuro in #​5184

Other Changes

• Backport: Add AWS Cognito configuration example by @​nscuro in #​5172
• Add changelog for v4.13.3 by @​nscuro in #​5182

Full Changelog: DependencyTrack/dependency-track@4.13.2...4.13.3

v4.13.2

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
845f970ba9c00a26d6d0b5a77c24cd12ee5feeea  dependency-track-apiserver.jar
61d5c535ab19a6f67e48ee8efa20bf9656d084f7  dependency-track-bundled.jar

### SHA256
f1d66b81a44d7d3528fad42d1e1fb498e2151c2c5e78c1070942be54456bf7d1  dependency-track-apiserver.jar
4494b0090cd699db2099248c0fdd67a07d130731bbc476287251aa84d008bfa4  dependency-track-bundled.jar

### SHA512
988cdaf174c32381c1ec2803439e951b48a942a8702d29743e009d3dff42129489c6e249273516bb3e084f836568caf5cd34ece6ec972145da7337c325a48201  dependency-track-apiserver.jar
f86e6a0b62be8620d581c19759b319d7902075877322c62b7c26fd9e311ed4f283e94304f3644603ad33c0798f869921bb1b574967e0fca894c6f0cf85fbe8fe  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

• Backport: Fix failing v4.13.1 migration for MSSQL deployments that pre-date v4.11.0 by @​nscuro in #​4911
• Backport: Fix summary notifications not sent when "skip if unchanged" is enabled by @​nscuro in #​4913

Dependency Updates 🤖

• Backport: Bump bundled frontend to 4.13.2 by @​nscuro in #​4931

Other Changes

• Add changelog for v4.13.2 by @​nscuro in #​4932

Full Changelog: DependencyTrack/dependency-track@4.13.1...4.13.2

v4.13.1

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
b5e613f1f484179e770333828ef25c020ed9f03a  dependency-track-apiserver.jar
173511869286b1335950bd07477421d684c96251  dependency-track-bundled.jar

### SHA256
c88b2e7879b1d534741ce5483f96621b650d6a4dcacabb470eeeeb43e7c7c627  dependency-track-apiserver.jar
53c7fca478125fad1c35d6732815a6c09e120abc6ea57a8a88eb2af3ed2efab2  dependency-track-bundled.jar

### SHA512
b5c30fd2aaac36b5437da0802bf60f3b1740d64b413c16c6a5f6eb2bc8b44c62ff5e4d8c8789b8380e76692fbbb410b043d919c0952a3b1e166bc4d9a0683a44  dependency-track-apiserver.jar
d8cb6f7318da182f4a1ad4a94995c79211282c2d68ddf8d4cad93f5003311f79cebbe39f51b880320c01c6fe757b3334a87747cbee9940d8d70d26fd636609fd  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

• Backport: Fix NEW_VULNERABILITIES_SUMMARY notification dispatch failing for PostgreSQL by @​nscuro in #​4859
• Backport: Fix team email addresses not being available when publishing scheduled notification emails by @​nscuro in #​4860
• Backport: Prevent duplicate tag names and relationships by @​nscuro in #​4861
• Backport: Fix missing NONE value in classifier check constraint by @​nscuro in #​4887
• Backport: Fix tag deletion failing when tag is used by project collection logic by @​nscuro in #​4888

Dependency Updates 🤖

• Backport: Bump Temurin base image to 21.0.7 by @​nscuro in #​4886
• Bump bundled frontend to 4.13.1 by @​nscuro in #​4903

Other Changes

• Backport: Improve the stability of tag binding by @​nscuro in #​4885
• Add changelog for v4.13.1 by @​nscuro in #​4889

Full Changelog: DependencyTrack/dependency-track@4.13.0...4.13.1

v4.13.0

Compare Source

[!WARNING]
Please consult the upgrade notes in the changelog before upgrading! Some changes in this release are irreversible,
and you won't be able to roll back simply by downgrading the application version!

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
c5ef70f1e8df186a929a7c2ad24962a3b97af379  dependency-track-apiserver.jar
feeac3362ae6ea5d42cf6dde7e5e079599372eaa  dependency-track-bundled.jar

### SHA256
0f2af7a93a21850da62c2b2e86babfb0b0f18abd80f380dfb80bf84c59f605e4  dependency-track-apiserver.jar
a81e61f1e21a732474a11345d71e7853d50ec2faea1f7d44bacfb29902673ebd  dependency-track-bundled.jar

### SHA512
436330854efc77e4c3b1c0484ec0e61b80fdde07445f3a31cb35ac195e0db2e2268cf11e6b71b72d58a1b90d2ca77d0fdf0d62fdbcae4045d94346b607f21a7c  dependency-track-apiserver.jar
a26173afcfd4416ef9b15e9d99d53cccff0b60510b2399c29b190a7123d200afe73c5d5d4b3d0ff7ad171bd87abfc15ddb211f3afb4627e598f8ed04271ce00e  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Provide support for AWS JDBC Driver by @​VinodAnandan in #​4304
• Add property to control verified flag in DefectDojo integration by @​Malaydewangan09 in #​4273
• Reduce memory usage of metrics update tasks by @​nscuro in #​4325
• Optimize vulnerability synchronization logic to not perform redundant writes by @​LaVibeX in #​4359
• Introduce "collection" projects for better usage of hierarchical view #​2041 by @​rkg-mm in #​3258
• Add /v1/project/batchDelete API method that deletes with SQL by @​mikael-carneholm-2-wcar in #​4383
• Reduce database round-trips during BOM processing by @​nscuro in #​4486
• Compose Metadata Analyzer: Refactor to support V2 and V1 repositories by @​valentijnscholten in #​4470
• composer meta analyzer: add DEBUG logging by @​valentijnscholten in #​4546
• Update quickstart Compose file to use Postgres instead of H2 by @​nscuro in #​4576
• Bump Alpine to 3.2.0 and handle API key migration by @​Gepardgame in #​4566
• Prevent application startup when migrations fail by @​nscuro in #​4681
• Implement basic telemetry collection by @​nscuro in #​4651
• Add support for Snyk API version 2024-10-15 by @​ad8-adriant in #​4715
• #​4620 add "lastVulnerabilityAnalysis" to project by @​stohrendorf in #​4642
• add endpoint to mass-create tags by @​stohrendorf in #​4766
• Add feature to define the test title for DefectDojo integration by @​AndreVirtimo in #​4796
• Add trivy scanning options by @​mjwrona in #​4782
• Bump SPDX license list to v3.26.0 by @​nscuro in #​4800
• Bump CWE dictionary to v4.16 by @​nscuro in #​4801
• Add support for scheduled summary notifications by @​nscuro in #​4783

Bug Fixes 🐛

• Prevent duplicate policy violations by @​nscuro in #​4216
• Log contains now username when user gets deleted by @​Gepardgame in #​4222
• Fix unintended manual flushing mode due to DataNucleus ExecutionContext pooling by @​nscuro in #​4221
• Enhance policy violation de-duplication logic by @​nscuro in #​4231
• Fix inaccuracies of Trivy analyzer by @​nscuro in #​4245
• Fix redundant query for "ignore unfixed" config during Trivy analysis by @​nscuro in #​4246
• Fix excessive memory usage of portfolio repository meta analysis by @​nscuro in #​4311
• Fix nullable metrics fields having getters of primitive type by @​nscuro in #​4326
• Fix CPE matching logic for NVD Rest by @​calderonth in #​4339
• Fix update component to allow empty values by @​immalla in #​4229
• Fix incorrect CWE schema in OpenAPI spec by @​fupgang in #​4350
• Fix component hash policy evaluator by @​francislance in #​4306
• Fix NullPointerException when fetching findings by @​nscuro in #​4369
• Fix policy evaluation not happening upon creation or update of individual components by @​fupgang in #​4374
• Fix Trivy analyzer vulnerability matching for Go packages by @​nscuro in #​4394
• Add cyclonedx json media type when exporting components by @​wratner in #​4409
• Fix NPE when cloning projects with broken dependency graph by @​nscuro in #​4414
• Fix project.active being nullable by @​nscuro in #​4415
• Move GHSA notification logic outside recursion by @​antoinbo in #​4401
• Fix broken pagination in /api/v1/cwe endpoint by @​nscuro in #​4421
• Fix notification tests not working for Jira by @​nscuro in #​4456
• Fix component de-duplication potentially causing duplicate dependency graph entries by @​nscuro in #​4458
• Fix component SWID tag ID not being considered in project cloning by @​nscuro in #​4480
• Fix onlyOutdated ungrouped component filtering by @​sedan07 in #​4511
• Fix REST endpoints for adding tags by @​nscuro in #​4541
• Recreate outdated check constraints for CLASSIFIER columns by @​nscuro in #​4544
• Handle GitHub GraphQL API rate limiting by @​nscuro in #​4578
• Fix possible NPEs during tag binding by @​nscuro in #​4594
• Fix erroneous URL-encoding of the Maven groupId by @​nscuro in #​4602
• Fix false negatives in CPE matching for ANY and NA versions by @​nscuro in #​4610
• Refactor VulnerabilityAnalysisTask to be more efficient by @​nscuro in #​4623
• Refactor VulnerabilityManagementUploadTask to be more efficient by @​nscuro in #​4624
• Handle invalid CVSS vectors and processing failures for OSV by @​nscuro in #​4636
• Fix possible NPEs in TrivyAnalysisTask by @​nscuro in #​4668
• Analyze all components of a project at once instead of in batches by @​nscuro in #​4670
• Fix notification webhook sending blank headers by @​LennartC in #​4679
• Fix incomplete API key migration by @​nscuro in #​4682
• Disable include tag for Pebble templates by @​nscuro in #​4684
• Fix NPE during NVD mirroring via REST API when encountering invalid CPEs by @​nscuro in #​4732
• Remove erroneous client-side caching in Trivy analyzer by @​nscuro in #​4735
• Fix notification limiting to tags not working reliably by @​nscuro in #​4733
• Fix tags from BOM upload request not being applied for existing projects by @​nscuro in #​4738
• Fix component properties not being cloned by @​nscuro in #​4745
• handle corner case if no vulnerabilities have compatible aliases by @​stohrendorf in #​4767
• Log all analysis changes to audit trail by @​stohrendorf in #​4750
• Fix possible NPE during affected version attribution sync by @​nscuro in #​4798
• Fix regression in Snyk vulnerability assignment by @​nscuro in #​4810
• Fix missing migration of CONFIGPROPERTY.PROPERTYVALUE by @​nscuro in #​4812
• Fix occasional JsonParseException during NVD API mirroring by @​nscuro in #​4814
• Fix UpgradeInitializer halting the entire process upon failure by @​nscuro in #​4818

Dependency Updates 🤖

• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.13 to 12.0.14 by @​dependabot in #​4210
• Bump com.icegreen:greenmail-junit4 from 2.0.1 to 2.1.0 by @​dependabot in #​4226
• Bump github/codeql-action from 3.26.9 to 3.26.11 by @​dependabot in #​4225
• Bump docker/build-push-action from 6.8.0 to 6.9.0 by @​dependabot in #​4223
• Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @​dependabot in #​4224
• Bump github/codeql-action from 3.26.11 to 3.26.12 by @​dependabot in #​4253
• Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 by @​dependabot in #​4254
• Bump actions/checkout from 4.2.0 to 4.2.1 by @​dependabot in #​4251
• Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @​dependabot in #​4252
• Bump debian from 939e69e to fffe160 in /src/main/docker by @​dependabot in #​4269
• Bump cyclonedx-core-java to 9.1.0 by @​nscuro in #​4270
• Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 by @​dependabot in #​4281
• Bump org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0 by @​dependabot in #​4289
• Bump github/codeql-action from 3.26.12 to 3.26.13 by @​dependabot in #​4282
• Bump lib.protobuf-java.version from 4.28.2 to 4.28.3 by @​dependabot in #​4299
• Bump org.testcontainers:testcontainers from 1.20.2 to 1.20.3 by @​dependabot in #​4292
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.20.1 to 1.21.0 by @​dependabot in #​4213
• Bump Alpine to 3.1.1 by @​nscuro in #​4308
• Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.0 to 2.5.1 by @​dependabot in #​4307
• Bump Temurin base image to 21.0.5_11 by @​nscuro in #​4314
• Bump bundled frontend to 4.12.1 by @​nscuro in #​4318
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.4 to 5.4.1 by @​dependabot in #​4338
• Bump actions/setup-java from 4.4.0 to 4.5.0 by @​dependabot in #​4335
• Bump actions/dependency-review-action from 4.3.4 to 4.3.5 by @​dependabot in #​4333
• Bump github/codeql-action from 3.26.13 to 3.27.0 by @​dependabot in #​4334
• Bump io.github.jeremylong:open-vulnerability-clients from 7.0.0 to 7.0.1 by @​dependabot in #​4331
• Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.5.0 to 3.6.0 by @​dependabot in #​4329
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.14 to 12.0.15 by @​dependabot in #​4358
• Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.1 to 2.5.2 by @​dependabot in #​4353
• Bump actions/dependency-review-action from 4.3.5 to 4.4.0 by @​dependabot in #​4348
• Bump net.javacrumbs.json-unit:json-unit-assertj from 3.4.1 to 3.5.0 by @​dependabot in #​4347
• Bump actions/checkout from 4.2.1 to 4.2.2 by @​dependabot in #​4332
• Bump github/codeql-action from 3.27.0 to 3.27.1 by @​dependabot in #​4364
• Bump debian from fffe160 to 32f6d6f in /src/main/docker by @​dependabot in #​4365
• Bump github/codeql-action from 3.27.1 to 3.27.4 by @​dependabot in #​4388
• Bump com.icegreen:greenmail-junit4 from 2.1.0 to 2.1.1 by @​dependabot in #​4387
• Bump net.javacrumbs.json-unit:json-unit-assertj from 3.5.0 to 4.0.0 by @​dependabot in #​4386
• Bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @​dependabot in #​4404
• Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @​dependabot in #​4403
• Bump github/codeql-action from 3.27.4 to 3.27.5 by @​dependabot in #​4405
• Bump org.testcontainers:testcontainers from 1.20.3 to 1.20.4 by @​dependabot in #​4398
• Bump lib.protobuf-java.version from 4.28.3 to 4.29.0 by @​dependabot in #​4416
• Bump debian from 32f6d6f to 4d63ef5 in /src/main/docker by @​dependabot in #​4431
• Bump Alpine to 3.1.2 by @​nscuro in #​4433
• Bump com.icegreen:greenmail-junit4 from 2.1.1 to 2.1.2 by @​dependabot in #​4427
• Bump docker/build-push-action from 6.9.0 to 6.10.0 by @​dependabot in #​4429
• Bump io.github.jeremylong:open-vulnerability-clients from 7.0.1 to 7.0.2 by @​dependabot in #​4425
• Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.2 to 2.5.3 by @​dependabot in #​4428
• Bump net.javacrumbs.json-unit:json-unit-assertj from 4.0.0 to 4.1.0 by @​dependabot in #​4426
• Bump bundled frontend to 4.12.2 by @​nscuro in #​4440
• Bump github/codeql-action from 3.27.5 to 3.27.6 by @​dependabot in #​4447
• Bump com.google.cloud.sql:postgres-socket-factory from 1.20.1 to 1.21.0 by @​dependabot in #​4452
• Bump com.puppycrawl.tools:checkstyle from 10.18.1 to 10.20.2 by @​dependabot in #​4451
• Bump lib.protobuf-java.version from 4.29.0 to 4.29.1 by @​dependabot in #​4443
• Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.20.1 to 1.21.0 by @​dependabot in #​4450
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.15 to 12.0.16 by @​dependabot in #​4454
• Bump github/codeql-action from 3.27.6 to 3.27.9 by @​dependabot in #​4466
• Bump lib.protobuf-java.version from 4.29.1 to 4.29.2 by @​dependabot in #​4473
• Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 by @​dependabot in #​4467
• Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @​dependabot in #​4491
• Bump actions/setup-java from 4.5.0 to 4.6.0 by @​dependabot in #​4492
• Bump actions/upload-artifact from 4.4.3 to 4.5.0 by @​dependabot in #​4493
• Bump github/codeql-action from 3.27.9 to 3.28.0 by @​dependabot in #​4490
• Bump io.github.jeremylong:open-vulnerability-clients from 7.0.2 to 7.1.0 by @​dependabot in #​4494
• Bump debian from 4d63ef5 to 5f21ebd in /src/main/docker by @​dependabot in #​4499
• Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.3 to 2.5.4 by @​dependabot in #​4496
• Bump org.json:json from 2024030 to 2024122 by @​dependabot in #​4505
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.21.0 to 1.21.2 by @​dependabot in #​4523
• Bump org.json:json from 2024122 to 2025010 by @​dependabot in #​4534
• Bump lib.protobuf-java.version from 4.29.2 to 4.29.3 by @​dependabot in #​4540
• Bump docker/build-push-action from 6.10.0 to 6.11.0 by @​dependabot in #​4548
• Bump github/codeql-action from 3.28.0 to 3.28.1 by @​dependabot in #​4551
• Bump docker/setup-qemu-action from 3.2.0 to 3.3.0 by @​dependabot in #​4549
• Bump actions/upload-artifact from 4.5.0 to 4.6.0 by @​dependabot in #​4550
• Bump debian from 5f21ebd to b5ace51 in /src/main/docker by @​dependabot in #​4554
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.21.2 to 1.22.0 by @​dependabot in #​4561
• Bump io.github.jeremylong:open-vulnerability-clients from 7.1.0 to 7.2.0 by @​dependabot in #​4558
• Bump docker/build-push-action from 6.11.0 to 6.12.0 by @​dependabot in #​4565
• Bump github/codeql-action from 3.28.1 to 3.28.5 by @​dependabot in #​4587
• Bump docker/build-push-action from 6.12.0 to 6.13.0 by @​dependabot in #​4586
• Bump io.github.jeremylong:open-vulnerability-clients from 7.2.0 to 7.2.1 by @​dependabot in #​4585
• Bump bundled frontend to 4.12.3 by @​nscuro in #​4588
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.22.0 to 1.23.0 by @​dependabot in #​4584
• Bump actions/setup-java from 4.6.0 to 4.7.0 by @​dependabot in #​4606
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2 by @​dependabot in #​4608
• Bump github/codeql-action from 3.28.5 to 3.28.8 by @​dependabot in #​4607
• Bump debian from b5ace51 to 5724d31 in /src/main/docker by @​dependabot in #​4616
• Bump com.icegreen:greenmail-junit4 from 2.1.2 to 2.1.3 by @​dependabot in #​4617
• Bump Temurin base image to 21.0.6_7 by @​nscuro in #​4627
• Bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot in #​4635
• Bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @​dependabot in #​4634
• Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @​dependabot in #​4633
• Bump bundled frontend to 4.12.4 by @​nscuro in #​4640
• Bump io.github.jeremylong:open-vulnerability-clients from 7.2.1 to 7.2.2 by @​dependabot in #​4653
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.23.0 to 1.23.1 by @​dependabot in #​4649
• Bump bundled frontend to 4.12.5 by @​nscuro in #​4658
• Bump net.minidev:json-smart to 2.5.2 by @​nscuro in #​4669
• Bump org.testcontainers:testcontainers from 1.20.4 to 1.20.5 by @​dependabot in #​4675
• Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.0 to 3.4.1 by @​dependabot in #​4676
• Bump docker/build-push-action from 6.13.0 to 6.14.0 by @​dependabot in #​4688
• Bump github/codeql-action from 3.28.9 to 3.28.10 by @​dependabot in #​4687
• Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​dependabot in #​4686
• Bump bundled frontend to 4.12.6 by @​nscuro in #​4689
• Bump debian from 5724d31 to 5484adc in /src/main/docker by @​dependabot in #​4692
• Bump org.slf4j:log4j-over-slf4j from 2.0.16 to 2.0.17 by @​dependabot in #​4697
• Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @​dependabot in #​4710
• Bump actions/download-artifact from 4.1.8 to 4.1.9 by @​dependabot in #​4711
• Bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @​dependabot in #​4709
• Bump io.github.jeremylong:open-vulnerability-clients from 7.2.2 to 7.3.0 by @​dependabot in #​4712
• Bump org.testcontainers:testcontainers from 1.20.5 to 1.20.6 by @​dependabot in #​4718
• Bump docker/build-push-action from 6.14.0 to 6.15.0 by @​dependabot in #​4708
• Bump lib.protobuf-java.version from 4.29.3 to 4.30.0 by @​dependabot in #​4719
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.16 to 12.0.17 by @​dependabot in #​4723
• Bump github/codeql-action from 3.28.10 to 3.28.11 by @​dependabot in #​4741
• Bump bundled frontend to 4.12.7 by @​nscuro in #​4752
• Bump us.springett:cpe-parser from 2.1.0 to 3.0.0 by @​dependabot in #​4747
• Bump lib.protobuf-java.version from 4.30.0 to 4.30.1 by @​dependabot in #​4757
• Bump docker/login-action from 3.3.0 to 3.4.0 by @​dependabot in #​4759
• Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @​dependabot in #​4758
• Bump com.microsoft.sqlserver:mssql-jdbc from 12.8.1.jre11 to 12.10.0.jre11 by @​dependabot in #​4762
• Bump debian from 5484adc to 70b337e in /src/main/docker by @​dependabot in #​4763
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.17 to 12.0.18 by @​dependabot in #​4761
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.23.1 to 1.24.0 by @​dependabot in [#​4768](https://redirect.github.com/D

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.