4.14.3

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
40db3eb67df441382971c8fb6566b86bc65976f4  dependency-track-apiserver.jar
71a8e224166a55efb163922bb9874c151b3d95eb  dependency-track-bundled.jar
# SHA256
11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9  dependency-track-apiserver.jar
4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be  dependency-track-bundled.jar
# SHA512
804247f629c5b5bac7f7c667789478163c8f6fcbaa9b4a7978ebcb57766d4134e9d026e92c156981f8c717b390c5cc4ba1fc837afef661e653aee8e7096d2a6a  dependency-track-apiserver.jar
e047a7be9bac2b76e1f2a42722ca723a60b9b093e2bff3ed5df407a27e25a77ab6467c15ad124907fd5213781bff493e80e5563400360befb603f8e184463235  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Improve VEX import performance by @nscuro in #6141
• Update workflows for 4.14.x maintenance by @nscuro in #6171
• Send groupby to defect dojo by @webdevred in #6130
• Include analysis.detail in DefectDojo finding payload by @webdevred in #6181

Bug Fixes 🐛

• Exclude retrieval of components and aliases during OSVDownloadTask by @ElenaStroebele in #6345
• Backport: Reject parent objects with null UUID when creating/updating/patching projects by @nscuro in #6355
• Fix Docker Hub secret names by @nscuro in #6390
• Fix NPE and redundant queries in VEX/VDR export by @heyiamwahab236 in #6614

Dependency Updates 🤖

• build(deps): bump debian from 8f0c555 to a053c41 in /src/main/docker by @dependabot[bot] in #6126
• build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #6142
• build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6143
• build(deps-dev): bump io.github.ascopes:protobuf-maven-plugin from 5.1.3 to 5.1.4 by @dependabot[bot] in #6144
• build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6145
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #6146
• build(deps): bump docker/build-push-action from 6.19.2 to 7.1.0 by @dependabot[bot] in #6147
• build(deps): bump lib.protobuf-java.version from 4.34.1 to 4.35.0 by @dependabot[bot] in #6158
• build(deps): bump debian from a053c41 to 5012d05 in /src/main/docker by @dependabot[bot] in #6157
• build(deps-dev): bump io.swagger.parser.v3:swagger-parser from 2.1.41 to 2.1.42 by @dependabot[bot] in #6155
• build(deps): bump org.slf4j:log4j-over-slf4j from 2.0.17 to 2.0.18 by @dependabot[bot] in #6154
• build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #6148
• build(deps): bump eclipse-temurin from 25.0.2_10-jdk-alpine to 25.0.3_9-jdk-alpine in /src/main/docker by @dependabot[bot] in #6161
• build(deps): bump org.metaeffekt.core:ae-security from 0.154.0 to 0.155.0 by @dependabot[bot] in #6164
• build(deps): bump org.apache.maven:maven-artifact from 3.9.15 to 3.9.16 by @dependabot[bot] in #6160
• chore(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #6177
• chore(deps): Bump dessant/lock-threads from 6.0.0 to 6.0.1 by @dependabot[bot] in #6174
• chore(deps): Bump dessant/lock-threads from 6.0.1 to 6.0.2 by @dependabot[bot] in #6236
• chore(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6235
• chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6234
• chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.3 to 1.28.4 by @dependabot[bot] in #6256
• chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.3 to 1.28.4 by @dependabot[bot] in #6258
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.42 to 2.1.43 by @dependabot[bot] in #6259
• chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.3 to 1.28.4 by @dependabot[bot] in #6257
• chore(deps): Bump io.github.nscuro:versatile-core from 0.18.1 to 0.18.3 by @dependabot[bot] in #6339
• chore(deps): Bump alpine from 3.23 to 3.24 in /src/main/docker by @dependabot[bot] in #6337
• chore(deps): Bump io.pebbletemplates:pebble from 4.1.1 to 4.1.2 by @dependabot[bot] in #6300
• chore(deps): Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6299
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.5.0 by @dependabot[bot] in #6301
• chore(deps): Bump debian from 5012d05 to da0bfd2 in /src/main/docker by @dependabot[bot] in #6370
• chore(deps): Bump debian from da0bfd2 to 34363c2 in /src/main/docker by @dependabot[bot] in #6384
• build(deps): bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 by @dependabot[bot] in #6168
• Bump Alpine to 3.8.0 by @nscuro in #6391
• chore(deps): Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 by @dependabot[bot] in #6409
• chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #6410
• chore(deps): Bump lib.protobuf-java.version from 4.35.0 to 4.35.1 by @dependabot[bot] in #6425
• chore(deps): Bump alpine from a2d49ea to f5064d3 in /src/main/docker by @dependabot[bot] in #6421
• chore(deps): Bump alpine from 3.24 to 3.24.1 in /src/main/docker by @dependabot[bot] in #6432
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.43 to 2.1.44 by @dependabot[bot] in #6469
• chore(deps-dev): Bump com.icegreen:greenmail-junit5 from 2.1.8 to 2.1.9 by @dependabot[bot] in #6484
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 by @dependabot[bot] in #6485
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.155.0 to 0.156.0 by @dependabot[bot] in #6486
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.0 to 0.156.1 by @dependabot[bot] in #6489
• chore(deps): Bump eclipse-temurin from c3e62cd to c3e62cd in /src/main/docker by @dependabot[bot] in #6487
• chore(deps): Bump debian from 34363c2 to ee12ffb in /src/main/docker by @dependabot[bot] in #6503
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.4 to 5.1.5 by @dependabot[bot] in #6510
• chore(deps): Bump io.github.nscuro:versatile-core from 0.18.3 to 0.19.0 by @dependabot[bot] in #6534
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.1 to 0.156.2 by @dependabot[bot] in #6535
• chore(deps): Bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #6536
• chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #6537
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.5 to 5.1.6 by @dependabot[bot] in #6549
• chore(deps): Bump com.google.cloud.sql:postgres-socket-factory from 1.28.4 to 1.28.6 by @dependabot[bot] in #6548
• chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.44 to 2.1.45 by @dependabot[bot] in #6559
• chore(deps): Bump eclipse-temurin from c3e62cd to b8ba5fc in /src/main/docker by @dependabot[bot] in #6567
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 by @dependabot[bot] in #6584
• chore(deps): Bump actions/setup-java from 5.3.0 to 5.4.0 by @dependabot[bot] in #6585
• chore(deps): Bump org.metaeffekt.core:ae-security from 0.156.2 to 0.156.3 by @dependabot[bot] in #6586
• chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 by @dependabot[bot] in #6589
• chore(deps): Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.28.4 to 1.28.6 by @dependabot[bot] in #6587
• chore(deps): Bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.28.4 to 1.28.6 by @dependabot[bot] in #6593
• chore(deps): Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 by @dependabot[bot] in #6596
• chore(deps-dev): Bump io.github.ascopes:protobuf-maven-plugin from 5.1.6 to 5.1.7 by @dependabot[bot] in #6597
• chore(deps): Bump io.github.nscuro:versatile-core from 0.19.0 to 0.20.0 by @dependabot[bot] in #6588
• chore(deps): Bump io.github.nscuro:versatile-core from 0.20.0 to 0.21.0 by @dependabot[bot] in #6617
• chore(deps): Bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #6666
• chore(deps): Bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6665
• chore(deps): Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #6664
• chore(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #6663
• chore(deps): Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 by @dependabot[bot] in #6682
• chore(deps): Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 by @dependabot[bot] in #6754
• chore(deps): Bump actions/setup-java from 5.4.0 to 5.5.0 by @dependabot[bot] in #6753
• chore(deps): Bump debian from ee12ffb to 328d164 in /src/main/docker by @dependabot[bot] in #6748
• Bump bundled frontend to 4.14.3 by @nscuro in #6763

Other Changes

• Add v5 migration notes by @nscuro in #6151
• Update Docker Hub secrets for v4 publish workflow by @nscuro in #6173
• Add changelog for 4.14.3 by @nscuro in #6762

New Contributors

• @heyiamwahab236 made their first contribution in #6614

Full Changelog: 4.14.2...4.14.3