Skip to content

Merge 4.13.0#10

Merged
brice-syslogic merged 225 commits intomasterfrom
merge-4.13.0
Apr 22, 2025
Merged

Merge 4.13.0#10
brice-syslogic merged 225 commits intomasterfrom
merge-4.13.0

Conversation

@brice-syslogic
Copy link

No description provided.

nscuro and others added 30 commits October 1, 2024 22:55
Signed-off-by: Niklas <nscuro@protonmail.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
…-create-project-dialog

Fix creation of multiple projects without reloading page
…ject list and mark collection projects visually.

Signed-off-by: Ralf King <rkg@mm-software.com>
* Made project list reusable independent from the project list view
* Reused project list to show children of collection projects in project view
* Hide tabs without function in collection projects, show child projects instead
* visually mark collection projects in project header and explain logic used in tooltip

Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
…ption, to match latest server version.

Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
… reloading the page)

Signed-off-by: Ralf King <rkg@mm-software.com>
…ERSION_CHILDREN to match new server changes

Signed-off-by: Ralf King <rkg@mm-software.com>
* Add frontend support for so far missing project classifiers supported by backend.
* Move available classifiers & collection logics into central mixin to reduce code duplication
* Ensure classifiers are always sorted the same way in all views

Signed-off-by: Ralf King <rkg@mm-software.com>
Signed-off-by: Ralf King <rkg@mm-software.com>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.6.1 to 3.7.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3.6.1...v3.7.1)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps nginxinc/nginx-unprivileged from 1.27.1-alpine to 1.27.2-alpine.

---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Thomas Schauer-Köckeis <thomas.schauer-koeckeis@rohde-schwarz.com>
Signed-off-by: Thomas Schauer-Köckeis <thomas.schauer-koeckeis@rohde-schwarz.com>
…tate-storage

State should now also in not Snapshot version saved
…ot/docker/docker/nginxinc/nginx-unprivileged-1.27.2-alpine

build(deps): bump nginxinc/nginx-unprivileged from 1.27.1-alpine to 1.27.2-alpine in /docker
…ot/github_actions/docker/setup-buildx-action-3.7.1

build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.1
Bumps nginxinc/nginx-unprivileged from `5423958` to `cf998f0`.

---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.24.0...0.25.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.6 to 4.4.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.3.6...v4.4.1)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
nscuro and others added 29 commits March 18, 2025 10:47
…ot/github_actions/actions/setup-node-4.3.0

build(deps): bump actions/setup-node from 4.2.0 to 4.3.0
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.9 to 4.2.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4.1.9...v4.2.0)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ot/github_actions/actions/download-artifact-4.2.0

build(deps): bump actions/download-artifact from 4.1.9 to 4.2.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.1...v4.6.2)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ot/github_actions/actions/download-artifact-4.2.1

build(deps): bump actions/download-artifact from 4.2.0 to 4.2.1
…ot/github_actions/actions/upload-artifact-4.6.2

build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
Bumps nginxinc/nginx-unprivileged from `40f9fdd` to `e234d4f`.

---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ot/docker/docker/nginxinc/nginx-unprivileged-e234d4f

build(deps): bump nginxinc/nginx-unprivileged from `40f9fdd` to `e234d4f` in /docker
Bumps nginxinc/nginx-unprivileged from `e234d4f` to `e246f83`.

---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ot/docker/docker/nginxinc/nginx-unprivileged-e246f83

build(deps): bump nginxinc/nginx-unprivileged from `e234d4f` to `e246f83` in /docker
Signed-off-by: Martin Wrona <martin.wrona@digitecgalaxus.ch>
Bumps nginxinc/nginx-unprivileged from `e246f83` to `d07336b`.

---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
  dependency-version: 1.27.4-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
- Fixed tag input library's autocomplete dropdown style overriding the custom styling of the app

Signed-off-by: Ja Young Lee <43683780+jayolee@users.noreply.github.com>
…-style-overriding

Fix tag autocomplete dropdown library style overriding issue
…y-scanning-options-ui

Add trivy scanner option UI
…ot/docker/docker/nginxinc/nginx-unprivileged-d07336b

build(deps): bump nginxinc/nginx-unprivileged from `e246f83` to `d07336b` in /docker
…tag-dropdown

Add autocomplete to project collection logic tag dropdown
Co-authored-by: Max Schiller <msr@mm-software.com>
Co-authored-by: Marlon Gäthje <mge@mm-software.com>
Signed-off-by: nscuro <nscuro@protonmail.com>
Integrate scheduled alerts into existing alerts views
This was a regression introduced via DependencyTrack#658. Because the dependency graph is not rendered conditionally, depending on whether a project is a collection or not, there was now a race condition in the code that auto-selected the graph tab.

Fixes DependencyTrack#1160

Signed-off-by: nscuro <nscuro@protonmail.com>
Fix "show in dependency graph" yielding a 403 error
The timestamp field was added to the project model in DependencyTrack/dependency-track#4620.

Signed-off-by: nscuro <nscuro@protonmail.com>
Display last vuln analysis timestamp in project view
Resolves CVE-2025-31115

Signed-off-by: Niklas <nscuro@protonmail.com>
…atch-1

Bump nginx base image to latest digest
@brice-syslogic brice-syslogic merged commit 26e2278 into master Apr 22, 2025
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.