Skip to content

chore(deps): update dependencytrack/apiserver docker tag to v4.14.3 - #178

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/dependencytrack-apiserver-4.x
Open

chore(deps): update dependencytrack/apiserver docker tag to v4.14.3#178
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/dependencytrack-apiserver-4.x

Conversation

@renovate

@renovate renovate Bot commented Nov 20, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
dependencytrack/apiserver (source) minor 4.6.3 → 4.14.3

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

v4.14.3

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


# SHA1
40db3eb67df441382971c8fb6566b86bc65976f4  dependency-track-apiserver.jar
71a8e224166a55efb163922bb9874c151b3d95eb  dependency-track-bundled.jar

# SHA256
11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9  dependency-track-apiserver.jar
4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be  dependency-track-bundled.jar

# SHA512
804247f629c5b5bac7f7c667789478163c8f6fcbaa9b4a7978ebcb57766d4134e9d026e92c156981f8c717b390c5cc4ba1fc837afef661e653aee8e7096d2a6a  dependency-track-apiserver.jar
e047a7be9bac2b76e1f2a42722ca723a60b9b093e2bff3ed5df407a27e25a77ab6467c15ad124907fd5213781bff493e80e5563400360befb603f8e184463235  dependency-track-bundled.jar

What's Changed

Enhancements 🚀
Bug Fixes 🐛
Dependency Updates 🤖
Other Changes

New Contributors

Full Changelog: DependencyTrack/dependency-track@4.14.2...4.14.3

v4.14.2

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


# SHA1
953074d95757bea162931b7811885945bbe992aa  dependency-track-apiserver.jar
53f3198f5422e1117f53859c5f42403f48a4a4e3  dependency-track-bundled.jar

# SHA256
3ff379380d35b9ff924014b680e7f3718c119f59b2cc4ee6ece4345a3ca1c110  dependency-track-apiserver.jar
fca1c0c69d543f4be3501f04d3293beef5b5db9fbad24d55cfc70ea2cc8e2b4f  dependency-track-bundled.jar

# SHA512
4e6119cfc05ed8767cdf1302b31c47814a025d854fa5f793a6b1bb0341732762a40cc5f3b93f59e7432e75d3cf7f2aa44320df129b85cea9e1de8fb81a053fc5  dependency-track-apiserver.jar
a047cd00ebdc59074c096c7ab6b095e0367e563f07c6565ab33413d6b9c5dbcb42a89cc71136dbe04b9ef48697f00673a15c0e18313dcde6c9c04a069c901b33  dependency-track-bundled.jar

What's Changed

Enhancements 🚀
Bug Fixes 🐛
  • Backport: Send composer package names with "/" separator to Trivy by @​nscuro in #​6117
Dependency Updates 🤖
  • build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.3 to 9.0.4 by @​dependabot[bot] in #​6021
  • build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.0 to 5.1.2 by @​dependabot[bot] in #​6015
  • build(deps): bump debian from 99fc6d2 to e51bfcd in /src/main/docker by @​dependabot[bot] in #​6014
  • build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.2 to 5.1.3 by @​dependabot[bot] in #​6037
  • build(deps): bump alpine from 2510918 to 5b10f43 in /src/main/docker by @​dependabot[bot] in #​6030
  • build(deps): bump eclipse-temurin from 305fb0c to d36843a in /src/main/docker by @​dependabot[bot] in #​6029
  • build(deps): bump org.metaeffekt.core:ae-security from 0.153.2 to 0.153.3 by @​dependabot[bot] in #​6047
  • build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.39 to 2.1.40 by @​dependabot[bot] in #​6046
  • Backport: Bump maven-artifact to 3.9.15 by @​nscuro in #​6048
  • build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 by @​dependabot[bot] in #​6060
  • build(deps): bump io.github.jeremylong:open-vulnerability-clients from 9.0.4 to 9.0.5 by @​dependabot[bot] in #​6066
  • build(deps): bump debian from e51bfcd to 8f0c555 in /src/main/docker by @​dependabot[bot] in #​6052
  • build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6071
  • build(deps-dev): bump org.testcontainers:testcontainers from 2.0.4 to 2.0.5 by @​dependabot[bot] in #​6076
  • build(deps): bump com.google.cloud.sql:postgres-socket-factory from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6073
  • build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.2 to 1.28.3 by @​dependabot[bot] in #​6072
  • build(deps): bump org.metaeffekt.core:ae-security from 0.153.3 to 0.154.0 by @​dependabot[bot] in #​6080
  • build(deps): bump org.apache.maven:maven-artifact from 3.9.14 to 3.9.15 by @​dependabot[bot] in #​6045
  • build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 by @​dependabot[bot] in #​6101
  • build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.41 by @​dependabot[bot] in #​6100
  • Backport: Bump versatile to 0.18.1 by @​nscuro in #​6116
  • Backport: Bump bundled frontend to 4.14.2 by @​nscuro in #​6122
Other Changes

Full Changelog: DependencyTrack/dependency-track@4.14.1...4.14.2

v4.14.1

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


# SHA1
750b0c768208d7c6b7e32e8f1a7500eb94788069  dependency-track-apiserver.jar
61eac5828458dfea46507c26f3384bb452ebeefe  dependency-track-bundled.jar

# SHA256
142bdfa36defffc2304d03f9ef7ecd162f1185dcbc00933a73529cac7f12980c  dependency-track-apiserver.jar
6cedc727a3f8eb2343397e50a1b5515a99c2a361b7c55aa60dbeff85c1f4af2d  dependency-track-bundled.jar

# SHA512
b2e37486f0775793c0d2dfc6a0adfae96e8bdc6b09d4708902ad504ea9e6b24505753319c183b4549d080cd4e71c8e1efa13cd916cc67434603d9d0b28aeb274  dependency-track-apiserver.jar
f0bc70a0d5e6bce155dca1ec051e7a333c8c4ff836e002a6acabacf5a8a4e8298c7a223e8cd1a86f4a5bca5fb7c0c5f99bf6aea7cc602e9c51bc3cfab1100aa2  dependency-track-bundled.jar

What's Changed

Enhancements 🚀
Bug Fixes 🐛
  • Backport: Fix PURL-specific version matching being bypassed for components with CPE by @​nscuro in #​5959
  • Backport: Fix potentially wrong version being used for CPE comparison by @​nscuro in #​5962
  • Backport: Fix scheduled notification query failing when ID columns are not of type BIGINT by @​nscuro in #​5979
  • Backport: Avoid NPE when computing Trivy pkgType (#​5982) by @​stohrendorf in #​5987
  • Backport: Use ecosystem-aware version comparison for latest version detection by @​nscuro in #​5995
  • Backport: Remove leading whitespace from vulnerability badge SVG template by @​nscuro in #​6000
Dependency Updates 🤖
  • build(deps): bump eclipse-temurin from 2866f12 to a6884e6 in /src/main/docker by @​dependabot[bot] in #​5921
  • build(deps): bump debian from 85dfcff to 99fc6d2 in /src/main/docker by @​dependabot[bot] in #​5920
  • build(deps): bump com.microsoft.sqlserver:mssql-jdbc from 13.2.1.jre11 to 13.4.0.jre11 by @​dependabot[bot] in #​5916
  • build(deps): bump lib.resilience4j.version from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​5915
  • build(deps): bump org.apache.maven:maven-artifact from 3.9.13 to 3.9.14 by @​dependabot[bot] in #​5905
  • build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.38 to 2.1.39 by @​dependabot[bot] in #​5896
  • build(deps): bump io.github.nscuro:versatile-core from 0.16.1 to 0.17.0 by @​dependabot[bot] in #​5930
  • build(deps): bump eclipse-temurin from a6884e6 to d556bfd in /src/main/docker by @​dependabot[bot] in #​5928
  • build(deps): bump org.metaeffekt.core:ae-security from 0.153.1 to 0.153.2 by @​dependabot[bot] in #​5929
  • build(deps-dev): bump org.testcontainers:testcontainers from 2.0.3 to 2.0.4 by @​dependabot[bot] in #​5939
  • build(deps): bump com.google.cloud.sql:postgres-socket-factory from 1.28.1 to 1.28.2 by @​dependabot[bot] in #​5940
  • build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.1 to 1.28.2 by @​dependabot[bot] in #​5941
  • build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.1 to 1.28.2 by @​dependabot[bot] in #​5942
  • build(deps): bump io.github.nscuro:versatile-core from 0.17.0 to 0.18.0 by @​dependabot[bot] in #​5947
  • build(deps): bump lib.protobuf-java.version from 4.34.0 to 4.34.1 by @​dependabot[bot] in #​5954
  • build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.0.2 to 5.1.0 by @​dependabot[bot] in #​5983
  • build(deps): bump eclipse-temurin from d556bfd to 305fb0c in /src/main/docker by @​dependabot[bot] in #​5990
  • Backport: Bump bundled frontend to 4.14.1 by @​nscuro in #​6004
Other Changes

Full Changelog: DependencyTrack/dependency-track@4.14.0...4.14.1

v4.14.0

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.


# SHA1
a06d7f57876befc80b6653fcc44b321958388f12  dependency-track-apiserver.jar
6573a4522dd84520859ab951d86d8a9e4dd43fb2  dependency-track-bundled.jar

# SHA256
2e3d5bcfb7b5d4ad4daf789bc5ca3802ef05d012c516090e8bc5323f46585f53  dependency-track-apiserver.jar
a8edd7c94ba811bae73d9213d769687c493e1bd95435dbe39dfeee28ff1f8008  dependency-track-bundled.jar

# SHA512
67c4c949d33cc9f8a421063cba03c6c437598fbca187963c168bba7db9cb8944b58d622c0430baa81cbdff127ec7611e2d9ddb97683efcfd5b617301c8b912a4  dependency-track-apiserver.jar
c877cab44769763a8a3db85abe47a6bd297b17e756d81971dc72a58bdf53d58eb0e1514683cf894f13e2d9e4fa230ccf773bc5f379a0c5e6ddc6195ef317ecf3  dependency-track-bundled.jar

What's Changed

Enhancements 🚀
Bug Fixes 🐛

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from arnou as a code owner November 20, 2025 18:45
@renovate
renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from 38c659f to dfec9be Compare March 10, 2026 01:09
@renovate renovate Bot changed the title chore(deps): update dependencytrack/apiserver docker tag to v4.13.6 chore(deps): update dependencytrack/apiserver docker tag to v4.14.0 Mar 10, 2026
@renovate
renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from dfec9be to d232536 Compare April 3, 2026 20:55
@renovate renovate Bot changed the title chore(deps): update dependencytrack/apiserver docker tag to v4.14.0 chore(deps): update dependencytrack/apiserver docker tag to v4.14.1 Apr 3, 2026
@renovate
renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from d232536 to fcb691e Compare May 7, 2026 20:29
@renovate renovate Bot changed the title chore(deps): update dependencytrack/apiserver docker tag to v4.14.1 chore(deps): update dependencytrack/apiserver docker tag to v4.14.2 May 7, 2026
@renovate
renovate Bot force-pushed the renovate/dependencytrack-apiserver-4.x branch from fcb691e to eaee50e Compare July 20, 2026 12:52
@renovate renovate Bot changed the title chore(deps): update dependencytrack/apiserver docker tag to v4.14.2 chore(deps): update dependencytrack/apiserver docker tag to v4.14.3 Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arnou arnou Awaiting requested review from arnou arnou is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

size/XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants