chore(deps): update dependencytrack/apiserver docker tag to v4.13.4 - autoclosed by renovate[bot] · Pull Request #150 · cnieg/helm-charts

renovate · 2022-12-16T18:52:23Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Update	Change
dependencytrack/apiserver (source)	minor	`4.6.3` -> `4.13.4`

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

`v4.13.4`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
048b46829358cfde1f4d90b9298984224c75f6ae  dependency-track-apiserver.jar
b3eb198254783462dc7d147791537fa50b11483e  dependency-track-bundled.jar

### SHA256
2ca674108a08bf71642ddec6704125fae720161c4c40268fd19557e8b116d9d0  dependency-track-apiserver.jar
a8252f66f9b3c9253553e1d2a40fb0169f90c31895e36f57bc5992068ff473f5  dependency-track-bundled.jar

### SHA512
25d697390a5a0316b85b67e01f29caaeba8cec955318a7ecd762189aefad0175bf338228361790796b153e53953c663cd05dca940d51dc4a30d015fb897a1c47  dependency-track-apiserver.jar
698f3f8ddc9958c7bd17f17e66c3b79d04181b509bd8fd42f01ee58aeb23cf5a88b208bcc13b6815c7d5396b049881c830aee1810420ae09923fbef766cf33ea  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

Backport: Migrate to NVD 2.0 data feeds by @nscuro in #5236

Bug Fixes 🐛

Backport: Handle URLs in composer package metadata pattern by @nscuro in #5234
Backport: Fix failing TrivyAnalysisTaskIntegrationTest by @nscuro in #5241
Backport: Fix inconsistent ordering in findings endpoints by @nscuro in #5247
Handle adduser / addgroup removal in Debian base image by @nscuro in #5246
Backport: Fix failing Trivy OS matching for distro versions with special characters by @nscuro in #5249

Dependency Updates 🤖

Bump Debian base image to latest digest by @nscuro in #5240
Backport: Bump angus-mail to 2.0.4 by @nscuro in #5242
Backport: Bump Temurin base image to 21.0.8_9 by @nscuro in #5243
Backport: Bump commons-lang3 to 3.18.0 by @nscuro in #5244
Bump bundled frontend to 4.13.4 by @nscuro in #5253

Other Changes

Add changelog for v4.13.4 by @nscuro in #5251

Full Changelog: DependencyTrack/dependency-track@4.13.3...4.13.4

`v4.13.3`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
ba7866fa7b8be30f2058606ee77539b126ab61f1  dependency-track-apiserver.jar
70ac64f18c4b219d283df0c056e74f001287159b  dependency-track-bundled.jar

### SHA256
8b6b2f29bdfd6f3e81ed2c9754a3ab2b4e27bbb9c33e52f720700d7e73558adb  dependency-track-apiserver.jar
1ae9984304854845cc5741d1dd1288e7b0a748539f448e0d0899ef635bb33c28  dependency-track-bundled.jar

### SHA512
706389f889eb177701d65e1ffefb30540f0ac9761128554f37e1edb637d73a58c981c87ca783e4b4eed982b813f4d359d590ca6ccd7132c10da83056935d2328  dependency-track-apiserver.jar
09e1ce042f64bd2ea5214fab3ebf2d2c86255b7c781490c14f2afcb517c056ef791713ba939e5de20b2b32a21949e5ac8a70ae3610432da1fa42681feceff626  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Fix OSV ubuntu advisory containing severity without type by @nscuro in #5168
Backport: Fix too many query parameters when retrieving vuln aliases by @nscuro in #5167
Backport: Add apiserver health check to Compose files by @nscuro in #5171
Backport: Handle dangling SPDX expression operators by @nscuro in #5173
Backport: Fix BOM export failing for projects of type NONE by @nscuro in #5178
Backport: Ensure VulnerableSoftware query is able to leverage indexes by @nscuro in #5177
Backport: Add whitespace sanitization in fuzzySearch CPE to fix CPE validation errors by @nscuro in #5176
Backport: Bulk load component relationships for BOM export by @nscuro in #5179
Backport: Improve Composer meta analyzer's ability to deal with minified metadata by @nscuro in #5175
Backport: Fix failing v4.13.1 migration for H2 deployments that pre-date v4.11.0 by @nscuro in #5180

Dependency Updates 🤖

Backport: bump org.apache.commons:commons-compress by @nscuro in #5169
Backport: Bump PostgreSQL JDBC driver to 42.7.7 by @nscuro in #5174
Bump Docker base images to latest digests by @nscuro in #5181
Backport: Bump bundled frontend to 4.13.3 by @nscuro in #5184

Other Changes

Backport: Add AWS Cognito configuration example by @nscuro in #5172
Add changelog for v4.13.3 by @nscuro in #5182

Full Changelog: DependencyTrack/dependency-track@4.13.2...4.13.3

`v4.13.2`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
845f970ba9c00a26d6d0b5a77c24cd12ee5feeea  dependency-track-apiserver.jar
61d5c535ab19a6f67e48ee8efa20bf9656d084f7  dependency-track-bundled.jar

### SHA256
f1d66b81a44d7d3528fad42d1e1fb498e2151c2c5e78c1070942be54456bf7d1  dependency-track-apiserver.jar
4494b0090cd699db2099248c0fdd67a07d130731bbc476287251aa84d008bfa4  dependency-track-bundled.jar

### SHA512
988cdaf174c32381c1ec2803439e951b48a942a8702d29743e009d3dff42129489c6e249273516bb3e084f836568caf5cd34ece6ec972145da7337c325a48201  dependency-track-apiserver.jar
f86e6a0b62be8620d581c19759b319d7902075877322c62b7c26fd9e311ed4f283e94304f3644603ad33c0798f869921bb1b574967e0fca894c6f0cf85fbe8fe  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Fix failing v4.13.1 migration for MSSQL deployments that pre-date v4.11.0 by @nscuro in #4911
Backport: Fix summary notifications not sent when "skip if unchanged" is enabled by @nscuro in #4913

Dependency Updates 🤖

Backport: Bump bundled frontend to 4.13.2 by @nscuro in #4931

Other Changes

Add changelog for v4.13.2 by @nscuro in #4932

Full Changelog: DependencyTrack/dependency-track@4.13.1...4.13.2

`v4.13.1`

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
b5e613f1f484179e770333828ef25c020ed9f03a  dependency-track-apiserver.jar
173511869286b1335950bd07477421d684c96251  dependency-track-bundled.jar

### SHA256
c88b2e7879b1d534741ce5483f96621b650d6a4dcacabb470eeeeb43e7c7c627  dependency-track-apiserver.jar
53c7fca478125fad1c35d6732815a6c09e120abc6ea57a8a88eb2af3ed2efab2  dependency-track-bundled.jar

### SHA512
b5c30fd2aaac36b5437da0802bf60f3b1740d64b413c16c6a5f6eb2bc8b44c62ff5e4d8c8789b8380e76692fbbb410b043d919c0952a3b1e166bc4d9a0683a44  dependency-track-apiserver.jar
d8cb6f7318da182f4a1ad4a94995c79211282c2d68ddf8d4cad93f5003311f79cebbe39f51b880320c01c6fe757b3334a87747cbee9940d8d70d26fd636609fd  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

Backport: Fix NEW_VULNERABILITIES_SUMMARY notification dispatch failing for PostgreSQL by @nscuro in #4859
Backport: Fix team email addresses not being available when publishing scheduled notification emails by @nscuro in #4860
Backport: Prevent duplicate tag names and relationships by @nscuro in #4861
Backport: Fix missing NONE value in classifier check constraint by @nscuro in #4887
Backport: Fix tag deletion failing when tag is used by project collection logic by @nscuro in #4888

Dependency Updates 🤖

Backport: Bump Temurin base image to 21.0.7 by @nscuro in #4886
Bump bundled frontend to 4.13.1 by @nscuro in #4903

Other Changes

Backport: Improve the stability of tag binding by @nscuro in #4885
Add changelog for v4.13.1 by @nscuro in #4889

Full Changelog: DependencyTrack/dependency-track@4.13.0...4.13.1

`v4.13.0`

Compare Source

[!WARNING]
Please consult the upgrade notes in the changelog before upgrading! Some changes in this release are irreversible,
and you won't be able to roll back simply by downgrading the application version!

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


### SHA1
c5ef70f1e8df186a929a7c2ad24962a3b97af379  dependency-track-apiserver.jar
feeac3362ae6ea5d42cf6dde7e5e079599372eaa  dependency-track-bundled.jar

### SHA256
0f2af7a93a21850da62c2b2e86babfb0b0f18abd80f380dfb80bf84c59f605e4  dependency-track-apiserver.jar
a81e61f1e21a732474a11345d71e7853d50ec2faea1f7d44bacfb29902673ebd  dependency-track-bundled.jar

### SHA512
436330854efc77e4c3b1c0484ec0e61b80fdde07445f3a31cb35ac195e0db2e2268cf11e6b71b72d58a1b90d2ca77d0fdf0d62fdbcae4045d94346b607f21a7c  dependency-track-apiserver.jar
a26173afcfd4416ef9b15e9d99d53cccff0b60510b2399c29b190a7123d200afe73c5d5d4b3d0ff7ad171bd87abfc15ddb211f3afb4627e598f8ed04271ce00e  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

Provide support for AWS JDBC Driver by @VinodAnandan in #4304
Add property to control verified flag in DefectDojo integration by @Malaydewangan09 in #4273
Reduce memory usage of metrics update tasks by @nscuro in #4325
Optimize vulnerability synchronization logic to not perform redundant writes by @LaVibeX in #4359
Introduce "collection" projects for better usage of hierarchical view #2041 by @rkg-mm in #3258
Add /v1/project/batchDelete API method that deletes with SQL by @mikael-carneholm-2-wcar in #4383
Reduce database round-trips during BOM processing by @nscuro in #4486
Compose Metadata Analyzer: Refactor to support V2 and V1 repositories by @valentijnscholten in #4470
composer meta analyzer: add DEBUG logging by @valentijnscholten in #4546
Update quickstart Compose file to use Postgres instead of H2 by @nscuro in #4576
Bump Alpine to 3.2.0 and handle API key migration by @Gepardgame in #4566
Prevent application startup when migrations fail by @nscuro in #4681
Implement basic telemetry collection by @nscuro in #4651
Add support for Snyk API version 2024-10-15 by @ad8-adriant in #4715
#4620 add "lastVulnerabilityAnalysis" to project by @stohrendorf in #4642
add endpoint to mass-create tags by @stohrendorf in #4766
Add feature to define the test title for DefectDojo integration by @AndreVirtimo in #4796
Add trivy scanning options by @mjwrona in #4782
Bump SPDX license list to v3.26.0 by @nscuro in #4800
Bump CWE dictionary to v4.16 by @nscuro in #4801
Add support for scheduled summary notifications by @nscuro in #4783

Bug Fixes 🐛

Prevent duplicate policy violations by @nscuro in #4216
Log contains now username when user gets deleted by @Gepardgame in #4222
Fix unintended manual flushing mode due to DataNucleus ExecutionContext pooling by @nscuro in #4221
Enhance policy violation de-duplication logic by @nscuro in #4231
Fix inaccuracies of Trivy analyzer by @nscuro in #4245
Fix redundant query for "ignore unfixed" config during Trivy analysis by @nscuro in #4246
Fix excessive memory usage of portfolio repository meta analysis by @nscuro in #4311
Fix nullable metrics fields having getters of primitive type by @nscuro in #4326
Fix CPE matching logic for NVD Rest by @calderonth in #4339
Fix update component to allow empty values by @immalla in #4229
Fix incorrect CWE schema in OpenAPI spec by @fupgang in #4350
Fix component hash policy evaluator by @francislance in #4306
Fix NullPointerException when fetching findings by @nscuro in #4369
Fix policy evaluation not happening upon creation or update of individual components by @fupgang in #4374
Fix Trivy analyzer vulnerability matching for Go packages by @nscuro in #4394
Add cyclonedx json media type when exporting components by @wratner in #4409
Fix NPE when cloning projects with broken dependency graph by @nscuro in #4414
Fix project.active being nullable by @nscuro in #4415
Move GHSA notification logic outside recursion by @antoinbo in #4401
Fix broken pagination in /api/v1/cwe endpoint by @nscuro in #4421
Fix notification tests not working for Jira by @nscuro in #4456
Fix component de-duplication potentially causing duplicate dependency graph entries by @nscuro in #4458
Fix component SWID tag ID not being considered in project cloning by @nscuro in #4480
Fix onlyOutdated ungrouped component filtering by @sedan07 in #4511
Fix REST endpoints for adding tags by @nscuro in #4541
Recreate outdated check constraints for CLASSIFIER columns by @nscuro in #4544
Handle GitHub GraphQL API rate limiting by @nscuro in #4578
Fix possible NPEs during tag binding by @nscuro in #4594
Fix erroneous URL-encoding of the Maven groupId by @nscuro in #4602
Fix false negatives in CPE matching for ANY and NA versions by @nscuro in #4610
Refactor VulnerabilityAnalysisTask to be more efficient by @nscuro in #4623
Refactor VulnerabilityManagementUploadTask to be more efficient by @nscuro in #4624
Handle invalid CVSS vectors and processing failures for OSV by @nscuro in #4636
Fix possible NPEs in TrivyAnalysisTask by @nscuro in #4668
Analyze all components of a project at once instead of in batches by @nscuro in #4670
Fix notification webhook sending blank headers by @LennartC in #4679
Fix incomplete API key migration by @nscuro in #4682
Disable include tag for Pebble templates by @nscuro in #4684
Fix NPE during NVD mirroring via REST API when encountering invalid CPEs by @nscuro in #4732
Remove erroneous client-side caching in Trivy analyzer by @nscuro in #4735
Fix notification limiting to tags not working reliably by @nscuro in #4733
Fix tags from BOM upload request not being applied for existing projects by @nscuro in #4738
Fix component properties not being cloned by @nscuro in #4745
handle corner case if no vulnerabilities have compatible aliases by @stohrendorf in #4767
Log all analysis changes to audit trail by @stohrendorf in #4750
Fix possible NPE during affected version attribution sync by @nscuro in #4798
Fix regression in Snyk vulnerability assignment by @nscuro in #4810
Fix missing migration of CONFIGPROPERTY.PROPERTYVALUE by @nscuro in #4812
Fix occasional JsonParseException during NVD API mirroring by @nscuro in #4814
Fix UpgradeInitializer halting the entire process upon failure by @nscuro in #4818

Dependency Updates 🤖

Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.13 to 12.0.14 by @dependabot in #4210
Bump com.icegreen:greenmail-junit4 from 2.0.1 to 2.1.0 by @dependabot in #4226
Bump github/codeql-action from 3.26.9 to 3.26.11 by @dependabot in #4225
Bump docker/build-push-action from 6.8.0 to 6.9.0 by @dependabot in #4223
Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @dependabot in #4224
Bump github/codeql-action from 3.26.11 to 3.26.12 by @dependabot in #4253
Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 by @dependabot in #4254
Bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in #4251
Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #4252
Bump debian from 939e69e to fffe160 in /src/main/docker by @dependabot in #4269
Bump cyclonedx-core-java to 9.1.0 by @nscuro in #4270
Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 by @dependabot in #4281
Bump org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0 by @dependabot in #4289
Bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in #4282
Bump lib.protobuf-java.version from 4.28.2 to 4.28.3 by @dependabot in #4299
Bump org.testcontainers:testcontainers from 1.20.2 to 1.20.3 by @dependabot in #4292
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.20.1 to 1.21.0 by @dependabot in #4213
Bump Alpine to 3.1.1 by @nscuro in #4308
Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.0 to 2.5.1 by @dependabot in #4307
Bump Temurin base image to 21.0.5_11 by @nscuro in #4314
Bump bundled frontend to 4.12.1 by @nscuro in #4318
Bump org.apache.httpcomponents.client5:httpclient5 from 5.4 to 5.4.1 by @dependabot in #4338
Bump actions/setup-java from 4.4.0 to 4.5.0 by @dependabot in #4335
Bump actions/dependency-review-action from 4.3.4 to 4.3.5 by @dependabot in #4333
Bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in #4334
Bump io.github.jeremylong:open-vulnerability-clients from 7.0.0 to 7.0.1 by @dependabot in #4331
Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.5.0 to 3.6.0 by @dependabot in #4329
Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.14 to 12.0.15 by @dependabot in #4358
Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.1 to 2.5.2 by @dependabot in #4353
Bump actions/dependency-review-action from 4.3.5 to 4.4.0 by @dependabot in #4348
Bump net.javacrumbs.json-unit:json-unit-assertj from 3.4.1 to 3.5.0 by @dependabot in #4347
Bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #4332
Bump github/codeql-action from 3.27.0 to 3.27.1 by @dependabot in #4364
Bump debian from fffe160 to 32f6d6f in /src/main/docker by @dependabot in #4365
Bump github/codeql-action from 3.27.1 to 3.27.4 by @dependabot in #4388
Bump com.icegreen:greenmail-junit4 from 2.1.0 to 2.1.1 by @dependabot in #4387
Bump net.javacrumbs.json-unit:json-unit-assertj from 3.5.0 to 4.0.0 by @dependabot in #4386
Bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @dependabot in #4404
Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot in #4403
Bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in #4405
Bump org.testcontainers:testcontainers from 1.20.3 to 1.20.4 by @dependabot in #4398
Bump lib.protobuf-java.version from 4.28.3 to 4.29.0 by @dependabot in #4416
Bump debian from 32f6d6f to 4d63ef5 in /src/main/docker by @dependabot in #4431
Bump Alpine to 3.1.2 by @nscuro in #4433
Bump com.icegreen:greenmail-junit4 from 2.1.1 to 2.1.2 by @dependabot in #4427
Bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot in #4429
Bump io.github.jeremylong:open-vulnerability-clients from 7.0.1 to 7.0.2 by @dependabot in #4425
Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.2 to 2.5.3 by @dependabot in #4428
Bump net.javacrumbs.json-unit:json-unit-assertj from 4.0.0 to 4.1.0 by @dependabot in #4426
Bump bundled frontend to 4.12.2 by @nscuro in #4440
Bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot in #4447
Bump com.google.cloud.sql:postgres-socket-factory from 1.20.1 to 1.21.0 by @dependabot in #4452
Bump com.puppycrawl.tools:checkstyle from 10.18.1 to 10.20.2 by @dependabot in #4451
Bump lib.protobuf-java.version from 4.29.0 to 4.29.1 by @dependabot in #4443
Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.20.1 to 1.21.0 by @dependabot in #4450
Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.15 to 12.0.16 by @dependabot in #4454
Bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot in #4466
Bump lib.protobuf-java.version from 4.29.1 to 4.29.2 by @dependabot in #4473
Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 by @dependabot in #4467
Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @dependabot in #4491
Bump actions/setup-java from 4.5.0 to 4.6.0 by @dependabot in #4492
Bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #4493
Bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #4490
Bump io.github.jeremylong:open-vulnerability-clients from 7.0.2 to 7.1.0 by @dependabot in #4494
Bump debian from 4d63ef5 to 5f21ebd in /src/main/docker by @dependabot in #4499
Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.3 to 2.5.4 by @dependabot in #4496
Bump org.json:json from 2024030 to 2024122 by @dependabot in #4505
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.21.0 to 1.21.2 by @dependabot in #4523
Bump org.json:json from 2024122 to 2025010 by @dependabot in #4534
Bump lib.protobuf-java.version from 4.29.2 to 4.29.3 by @dependabot in #4540
Bump docker/build-push-action from 6.10.0 to 6.11.0 by @dependabot in #4548
Bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #4551
Bump docker/setup-qemu-action from 3.2.0 to 3.3.0 by @dependabot in #4549
Bump actions/upload-artifact from 4.5.0 to 4.6.0 by @dependabot in #4550
Bump debian from 5f21ebd to b5ace51 in /src/main/docker by @dependabot in #4554
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.21.2 to 1.22.0 by @dependabot in #4561
Bump io.github.jeremylong:open-vulnerability-clients from 7.1.0 to 7.2.0 by @dependabot in #4558
Bump docker/build-push-action from 6.11.0 to 6.12.0 by @dependabot in #4565
Bump github/codeql-action from 3.28.1 to 3.28.5 by @dependabot in #4587
Bump docker/build-push-action from 6.12.0 to 6.13.0 by @dependabot in #4586
Bump io.github.jeremylong:open-vulnerability-clients from 7.2.0 to 7.2.1 by @dependabot in #4585
Bump bundled frontend to 4.12.3 by @nscuro in #4588
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.22.0 to 1.23.0 by @dependabot in #4584
Bump actions/setup-java from 4.6.0 to 4.7.0 by @dependabot in #4606
Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2 by @dependabot in #4608
Bump github/codeql-action from 3.28.5 to 3.28.8 by @dependabot in #4607
Bump debian from b5ace51 to 5724d31 in /src/main/docker by @dependabot in #4616
Bump com.icegreen:greenmail-junit4 from 2.1.2 to 2.1.3 by @dependabot in #4617
Bump Temurin base image to 21.0.6_7 by @nscuro in #4627
Bump github/codeql-action from 3.28.8 to 3.28.9 by @dependabot in #4635
Bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @dependabot in #4634
Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot in #4633
Bump bundled frontend to 4.12.4 by @nscuro in #4640
Bump io.github.jeremylong:open-vulnerability-clients from 7.2.1 to 7.2.2 by @dependabot in #4653
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.23.0 to 1.23.1 by @dependabot in #4649
Bump bundled frontend to 4.12.5 by @nscuro in #4658
Bump net.minidev:json-smart to 2.5.2 by @nscuro in #4669
Bump org.testcontainers:testcontainers from 1.20.4 to 1.20.5 by @dependabot in #4675
Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.0 to 3.4.1 by @dependabot in #4676
Bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot in #4688
Bump github/codeql-action from 3.28.9 to 3.28.10 by @dependabot in #4687
Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @dependabot in #4686
Bump bundled frontend to 4.12.6 by @nscuro in #4689
Bump debian from 5724d31 to 5484adc in /src/main/docker by @dependabot in #4692
Bump org.slf4j:log4j-over-slf4j from 2.0.16 to 2.0.17 by @dependabot in #4697
Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot in #4710
Bump actions/download-artifact from 4.1.8 to 4.1.9 by @dependabot in #4711
Bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @dependabot in #4709
Bump io.github.jeremylong:open-vulnerability-clients from 7.2.2 to 7.3.0 by @dependabot in #4712
Bump org.testcontainers:testcontainers from 1.20.5 to 1.20.6 by @dependabot in #4718
Bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot in #4708
Bump lib.protobuf-java.version from 4.29.3 to 4.30.0 by @dependabot in #4719
Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.16 to 12.0.17 by @dependabot in #4723
Bump github/codeql-action from 3.28.10 to 3.28.11 by @dependabot in #4741
Bump bundled frontend to 4.12.7 by @nscuro in #4752
Bump us.springett:cpe-parser from 2.1.0 to 3.0.0 by @dependabot in #4747
Bump lib.protobuf-java.version from 4.30.0 to 4.30.1 by @dependabot in #4757
Bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in #4759
Bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in #4758
Bump com.microsoft.sqlserver:mssql-jdbc from 12.8.1.jre11 to 12.10.0.jre11 by @dependabot in #4762
Bump debian from 5484adc to 70b337e in /src/main/docker by @dependabot in #4763
Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.17 to 12.0.18 by @dependabot in #4761
Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.23.1 to 1.24.0 by @dependabot in [#4768](https://redirect.github.com/D

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested a review from arnou as a code owner December 16, 2022 18:52

pull-request-size Bot added the size/XS label Dec 16, 2022

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.0~~ Update dependencytrack/apiserver Docker tag to v4.7.0 Dec 17, 2022

renovate Bot changed the title ~~Update dependencytrack/apiserver Docker tag to v4.7.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.7.0 Dec 17, 2022

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from ffb58c7 to 84a52fb Compare February 27, 2023 18:34

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.7.1 Feb 27, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch 3 times, most recently from 6902229 to 8e84be7 Compare March 9, 2023 15:00

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8e84be7 to a2056dc Compare April 19, 2023 07:01

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.7.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.0 Apr 19, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a2056dc to 856606d Compare May 1, 2023 13:40

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 856606d to 44ba02b Compare May 16, 2023 12:18

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.1 May 16, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 44ba02b to b20015a Compare May 16, 2023 22:45

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.8.2 May 16, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch 5 times, most recently from 4cb22fc to 8c846e6 Compare May 25, 2023 23:54

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.8.2~~ chore(deps): update dependencytrack/apiserver docker tag to v4.9.0 Oct 16, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8c846e6 to a98bbe0 Compare October 16, 2023 19:26

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.9.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.9.1 Oct 30, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a98bbe0 to 7da9d9b Compare October 30, 2023 16:58

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.9.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.10.0 Dec 8, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 7da9d9b to 8b551e3 Compare December 8, 2023 16:47

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 8b551e3 to 4afabe6 Compare December 19, 2023 12:57

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.10.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.10.1 Dec 19, 2023

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 4afabe6 to e6df4b5 Compare February 26, 2024 14:06

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.4~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.5 Jul 8, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from e0ed3dd to a372863 Compare August 10, 2024 22:57

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.5~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.6 Aug 10, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a372863 to 7c223b0 Compare August 14, 2024 13:39

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.6~~ chore(deps): update dependencytrack/apiserver docker tag to v4.11.7 Aug 14, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 7c223b0 to 0c914ae Compare October 1, 2024 22:29

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.11.7~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.0 Oct 1, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 0c914ae to 3aa1579 Compare October 25, 2024 22:16

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.1 Oct 25, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 3aa1579 to a4c1aca Compare December 4, 2024 16:45

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.2 Dec 4, 2024

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from a4c1aca to 596c0f5 Compare January 27, 2025 18:26

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.2~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.3 Jan 27, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 596c0f5 to 963ada9 Compare February 10, 2025 17:44

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.3~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.4 Feb 10, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 963ada9 to 37f1b72 Compare February 17, 2025 18:28

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.4~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.5 Feb 17, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 37f1b72 to 6924988 Compare February 24, 2025 18:34

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.5~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.6 Feb 24, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 6924988 to c44b7fb Compare March 13, 2025 01:48

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.6~~ chore(deps): update dependencytrack/apiserver docker tag to v4.12.7 Mar 13, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from c44b7fb to d8a6871 Compare April 7, 2025 13:30

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.12.7~~ chore(deps): update dependencytrack/apiserver docker tag to v4.13.0 Apr 7, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from d8a6871 to dbaf3c5 Compare April 30, 2025 11:41

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.13.0~~ chore(deps): update dependencytrack/apiserver docker tag to v4.13.1 Apr 30, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from dbaf3c5 to 41735da Compare May 8, 2025 22:48

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.13.1~~ chore(deps): update dependencytrack/apiserver docker tag to v4.13.2 May 8, 2025

renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 41735da to 50dc09b Compare August 4, 2025 14:53

renovate Bot changed the title ~~chore(deps): update dependencytrack/apiserver docker tag to v4.13.2~~ chore(deps): update dependencytrack/apiserver docker tag to v4.13.3 Aug 4, 2025

chore(deps): update dependencytrack/apiserver docker tag to v4.13.4

1cf549e

Navigation Menu

Uh oh!

chore(deps): update dependencytrack/apiserver docker tag to v4.13.4 - autoclosed - #150

chore(deps): update dependencytrack/apiserver docker tag to v4.13.4 - autoclosed#150
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/dependencytrack-apiserver-4.x

renovate Bot commented Dec 16, 2022 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Dec 16, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.13.4

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

v4.13.3

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

v4.13.2

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

v4.13.1

What's Changed

Bug Fixes 🐛

Dependency Updates 🤖

Other Changes

v4.13.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates 🤖

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Dec 16, 2022 •

edited

Loading

`v4.13.4`

`v4.13.3`

`v4.13.2`

`v4.13.1`

`v4.13.0`