chore(deps): update dependencytrack/apiserver docker tag to v4.12.2

[renovate]

This PR contains the following updates:

Package	Update	Change
dependencytrack/apiserver (source)	minor	4.6.3 -> 4.12.2

---

Release Notes

DependencyTrack/dependency-track (dependencytrack/apiserver)

v4.12.2

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
114d6a9f8b87a307be324f155daf3454dcc269bb  dependency-track-apiserver.jar
a15db1b85d0ac29977724deb3f9a65428c929d39  dependency-track-bundled.jar

### SHA256
ef6bb4ce3ebea410b620a91cf8347ab1e95c32b3f166103c749ece97f4098591  dependency-track-apiserver.jar
a8aba7cd926de3deeea31290be830ee90282128f1820fddde3ec8b346bba1bdd  dependency-track-bundled.jar

### SHA512
c2fc89377de194af70dab631b2f385f9e9cac93b140916e795a4b43bf7f3d7091ef64b64614bc1935282f23d9f7e3ba40dc41d2c98fa33167d62b409f75c79d8  dependency-track-apiserver.jar
684666c5b5456609d4694c5ce8b793bf64a49b77219784954ec6d5a6abe38895a2637f3644ca9197061fdc4e4ba203e3699849b656730d5eb52649a11cb685bb  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Backport: Reduce memory usage of metrics update tasks by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4377

Bug Fixes 🐛

• Backport: Fix CPE matching for NVD mirroring via REST API by @​nscuro (original change by @​calderonth) in https://github.com/DependencyTrack/dependency-track/pull/4378
• Backport: Fix incorrect CWE schema in OpenAPI spec by @​nscuro (original change by @​fupgang) in https://github.com/DependencyTrack/dependency-track/pull/4379
• Backport: Fix NullPointerException when fetching findings by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4380
• Backport: Fix policy evaluation not happening upon creation or update of individual components by @​nscuro (original change by @​fupgang) in https://github.com/DependencyTrack/dependency-track/pull/4381
• Backport: Fix nullable metrics fields having getters of primitive type by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4382
• Backport: Fix Trivy analyzer vulnerability matching for Go packages by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4395
• Backport: Move GHSA notification logic outside recursion by @​nscuro (original change by @​antoinbo) in https://github.com/DependencyTrack/dependency-track/pull/4417
• Backport: Add cyclonedx json media type when exporting components by @​nscuro (original change by @​wratner) in https://github.com/DependencyTrack/dependency-track/pull/4420
• Backport: Fix NPE when cloning projects with broken dependency graph by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4419
• Backport: Fix project.active being nullable by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4418
• Fix incompatibility of swagger-core with newer jackson-databind versions by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4442

Dependency Updates 🤖

• Backport: Bump Alpine to 3.1.2 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4436
• Backport: Bump bundled frontend to 4.12.2 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4441

Other Changes

• Add changelog for v4.12.2 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4439

Full Changelog: DependencyTrack/dependency-track@4.12.1...4.12.2

v4.12.1

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
18911ef4fa28531d97293bd70de2ebb4033e5b5c  dependency-track-apiserver.jar
b3f3eb8cb5c8021ba7bdb37a5717cd2672550385  dependency-track-bundled.jar

### SHA256
682a3ffe268c59b0df03a55fd72b56d46299db3fd2cfe081966d8d57fbbea4f6  dependency-track-apiserver.jar
dc1a3e65e8ce767e39925bf329be8eff29ff09eebc627db8efd0e1b5ff6db573  dependency-track-bundled.jar

### SHA512
ab990553ea288960089441746908410a886453c5e0e3bc3f0752c27951a2e51adce7f8a02b29ac06fa8d99a17e7be74afd5af3436c92f2d37a2f64ec414cebd2  dependency-track-apiserver.jar
a03cef2139f90aeb8de2a037af5dbd374270c97460f60241cb4d5bddcec497e8581ba89d1a9f027066a275f921e88d39265ae7d9efec1f47af5e15566db247a6  dependency-track-bundled.jar

What's Changed

Bug Fixes 🐛

• Backport: Fix logs not containing usernames of deleted users by @​nscuro (original change by @​Gepardgame) in https://github.com/DependencyTrack/dependency-track/pull/4232
• Backport: Fix unintended manual flushing mode due to DataNucleus ExecutionContext pooling by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4233
• Backport: Prevent duplicate policy violations by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4234
• Backport: Enhance policy violation de-duplication logic by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4235
• Backport: Fix inaccuracies of Trivy analyzer by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4258
• Backport: Fix redundant query for "ignore unfixed" config during Trivy analysis by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4259
• Backport: Fix excessive memory usage of portfolio repository meta analysis by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4317

Dependency Updates 🤖

• Backport: Bump cyclonedx-core-java to 9.1.0 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4271
• Backport: Bump Alpine to 3.1.1 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4309
• Backport: Bump Temurin base image to 21.0.5_11 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4315
• Backport: Bump bundled frontend to 4.12.1 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4319

Other Changes

• Backport: Update Deploying Docker guide to Compose v2 by @​nscuro (original change by @​danihengeveld) in https://github.com/DependencyTrack/dependency-track/pull/4301
• Add changelog for v4.12.1 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4280

Full Changelog: DependencyTrack/dependency-track@4.12.0...4.12.1

v4.12.0

Compare Source

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

### SHA1
0cfe5d6cd014a0a25cdb0379e5a75596adc3d448  dependency-track-apiserver.jar
f7a1af3a5bf5f5b864d0db519fe2944391496f32  dependency-track-bundled.jar

### SHA256
83d31e132643249f7752154adc49690353484a66de6e77db7e25f0c1309528eb  dependency-track-apiserver.jar
3b4e27b29fd8a19cc5a250d394df43e0b046781f4d37c11720f8db8b9714d669  dependency-track-bundled.jar

### SHA512
44b47c7f864a09733b45fce747c3f6a115a0ba4d753d179b78a613404ab7bdd9008cef3539f5af72193506a7cd1b88fca5041a858a0f287612f2ac5572650fae  dependency-track-apiserver.jar
6e6b1210749d89b1ccc29ddc4dcbf2e38c926663f888f644488e63ffda00eb29c79eff1b180941dc798210f5ecf7c2a0e4175e03130f69a08beee36d66aef9fa  dependency-track-bundled.jar

What's Changed

Enhancements 🚀

• Raise baseline Java version to 21 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3682
• Add active Field To Project Versions by @​aravindparappil46 in https://github.com/DependencyTrack/dependency-track/pull/3691
• Support ingestion of CycloneDX v1.6 BOMs by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3710
• Gracefully handle NotSortableExceptions by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3724
• Migrate from Swagger v2 to OpenAPI v3 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3726
• Improve OpenAPI v3 integration by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3728
• Add EPSS conditions to policies by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3746
• Search component by group by @​rcsilva83 in https://github.com/DependencyTrack/dependency-track/pull/3761
• Add Notification For BOM_VALIDATION_FAILED by @​aravindparappil46 in https://github.com/DependencyTrack/dependency-track/pull/3796
• Bump CWE dictionary to v4.14 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3819
• Bump SPDX license list to v3.24.0 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3846
• feat: autocreate project with tags by @​JCHacking in https://github.com/DependencyTrack/dependency-track/pull/3843
• Improve performance of findings retrieval by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3869
• Add REST endpoints for tag retrieval by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3881
• Deprecate /api/v1/tag/{policyUuid} in favor of /api/v1/tag/policy/{uuid} by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3887
• Enable string de-duplication JVM option per default by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3893
• Add REST endpoints for bulk tagging & un-tagging of projects by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3894
• Add REST endpoint for tag deletion by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3896
• Add REST endpoints to tag and untag policies in bulk by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3924
• Log warning when dependency graph is missing the root node by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3990
• Add option to test notification publisher by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3983
• Add support for authors field by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3969
• Add tag support for notifications, and REST endpoints for tagging & untagging notifications in bulk by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4031
• Disable H2 shutdown hook by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4106
• Support inclusion/exclusion of projects from BOM validation with tags by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4109
• Migrate Trivy integration to use Protobuf instead of JSON by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4116
• Bump generated BOM to CycloneDX v1.5; Add external references by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4110
• Bump Alpine to 3.1.0 and adopt new framework features by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4134
• Support customizable welcome message to display on login page by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4131
• Add AUTHOR -> AUTHORS migration by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4143
• Bump SPDX license list to v3.25.0 by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/4145
• Support configuration of system-wide default locale by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4136
• Include team name in audit trail for API-submitted audit changes by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4154
• Global Audit View: Policy Violations by @​rbt-mm in https://github.com/DependencyTrack/dependency-track/pull/3544
• Support assigning of teams for portfolio ACL when creating a project by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4093
• Introduce isLatest project flag & allow policies to be limited to latest version by @​rkg-mm in https://github.com/DependencyTrack/dependency-track/pull/4184
• Enhance badge API to require authorization by @​SaberStrat in https://github.com/DependencyTrack/dependency-track/pull/4059
• Exclude pre-releases from NuGet latest version check by @​brentos99 in https://github.com/DependencyTrack/dependency-track/pull/3468
• Ensure modifying project endpoints are transactional by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4194
• Fix redundant ConfigProperty queries in BadgeResource by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4202

Bug Fixes 🐛

• Fix failing JSON BOM validation when specVersion is not one of the first fields by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3697
• Fix broken global vuln audit view for MSSQL by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3700
• fix os handling when trivy sets pkgType on properties by @​fnxpt in https://github.com/DependencyTrack/dependency-track/pull/3727
• Fix OpenAPI types of UNIX timestamp fields by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3731
• Handle breaking change in Trivy server API by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3738
• Add date format to support offset in nuget analyser by @​sahibamittal in https://github.com/DependencyTrack/dependency-track/pull/3736
• Fix project name not showing in Jira tickets by @​lgrguricmileusnic in https://github.com/DependencyTrack/dependency-track/pull/3745
• Fix jakarta.servlet-api not being inherited from alpine-server by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3770
• Fix licenses not being resolved by name by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3782
• Fix Slack notifications failing when no base URL is configured by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3791
• Issue-3769 : fix update component external references by @​sahibamittal in https://github.com/DependencyTrack/dependency-track/pull/3805
• vulnerabilityAudit incorrectly displaying non-active projects by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3839
• Fix BOM validation failing when URL contains encoded [ and ] characters by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3865
• Prevent XXE injection during CycloneDX validation and parsing by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3870
• Fix BOM_CONSUMED and BOM_PROCESSED notifications being dispatched with wrong scope by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3877
• Relax lowercase requirement for /api/v1/tag/{name}/project and /api/v1/tag/{name}/policy by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3888
• Fix NPE when querying component metadata for projects without findings by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3889
• Set license name instead of ID when using custom license by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/3915
• Fix JDOUserException when multiple licenses match a component's license name by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3958
• Add regression test for missing parent property in /v1/project/{uuid} response by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3959
• Fix missing projectTags parameter for POST /v1/bom endpoint by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3960
• Ensure no unique constraint violation for ProjectMetadata by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3982
• Fix validation error when XML BOM declares multiple namespaces by @​philippn in https://github.com/DependencyTrack/dependency-track/pull/4020
• added missing endpoints in index html for open api upgrade by @​mehab in https://github.com/DependencyTrack/dependency-track/pull/4022
• Handle breaking change in Trivy v0.54.0 server API by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4023
• Fix project link for new vulnerable dependency for email by @​2000rosser in https://github.com/DependencyTrack/dependency-track/pull/4026
• Fix vex export returning invalid CycloneDX by @​SaberStrat in https://github.com/DependencyTrack/dependency-track/pull/3948
• Ensure URL-encoding of repository URL path segments by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4107
• Fix project being rendered as PURL in email notifications by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4108
• Use empty string instead of SNAPSHOT as version in BOM download if project doesn't have a version by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4142
• Handle empty component and service names by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4146
• Handle existing duplicate component properties by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4147
• Fix infinite recursion during policy condition serialization by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4165
• Feat: Fix that Emails render all symbols right by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4141
• Fix directDependencies of cloned projects referring to original component UUIDs by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4171
• Fix CPE not being imported from CycloneDX metadata.component by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4174
• Visible Endpoint returns only Visible Teams(name, uuid) by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4177
• Cache Trivy DB for integration tests by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4181
• Fix breaking change in PUT /api/v1/project endpoint by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4185
• Fix metrics endpoint API docs erroneously claiming to return project and component data by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4195
• Fix OSV severity level calculation by @​peterakimball in https://github.com/DependencyTrack/dependency-track/pull/4196
• Fix: Unauthorized access to projects over /vulnerability/{source}/vuln/{vuln}(/projects) when ACL is enabled by @​Gepardgame in https://github.com/DependencyTrack/dependency-track/pull/4201
• Fix affectedComponents getting removed when updating an internal vulnerability by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4208

Dependency Updates 🤖

• Bump org.testcontainers:testcontainers from 1.19.7 to 1.19.8 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3687
• Bump Alpine to 2.2.6-SNAPSHOT by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3675
• Bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3693
• Bump github/codeql-action from 3.25.3 to 3.25.4 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3694
• Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3695
• Bump debian from ff39497 to 2b2e35d in /src/main/docker by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3708
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.18.0 to 1.18.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3707
• Bump Alpine to 2.2.6-SNAPSHOT by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3711
• Bump org.eclipse.jetty:jetty-maven-plugin from 10.0.20 to 10.0.21 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3725
• Bump github/codeql-action from 3.25.4 to 3.25.6 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3739
• Bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3734
• Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3743
• Bump org.apache.commons:commons-compress from 1.26.1 to 1.26.2 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3748
• Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3753
• Bump org.apache.maven:maven-artifact from 3.9.6 to 3.9.7 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3754
• Bump bundled frontend to 4.11.2 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3793
• Bump docker/login-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3799
• Bump github/codeql-action from 3.25.6 to 3.25.7 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3800
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.9 to 12.0.10 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3804
• Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3813
• Bump github/codeql-action from 3.25.7 to 3.25.8 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3829
• Bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3828
• Bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3827
• Bump debian from 2b2e35d to 0200978 in /src/main/docker by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3842
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.18.1 to 1.19.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3837
• Bump cyclonedx-core-java to 9.0.2 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3847
• Bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3852
• Bump docker/build-push-action from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3853
• Bump github/codeql-action from 3.25.8 to 3.25.10 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3854
• Bump org.apache.maven:maven-artifact from 3.9.7 to 3.9.8 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3851
• Bump org.apache.maven.plugins:maven-clean-plugin from 3.3.2 to 3.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3859
• Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3872
• Bump docker/build-push-action from 5.4.0 to 6.1.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3873
• Bump bundled frontend to 4.11.4 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/3874
• Bump net.javacrumbs.json-unit:json-unit-assertj from 3.2.7 to 3.3.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3890
• Bump io.github.jeremylong:open-vulnerability-clients from 6.0.1 to 6.1.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3901
• Bump docker/build-push-action from 6.1.0 to 6.2.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3902
• Bump github/codeql-action from 3.25.10 to 3.25.11 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3903
• Bump debian from 0200978 to f8bbfa0 in /src/main/docker by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3912
• Bump io.github.jeremylong:open-vulnerability-clients from 6.1.0 to 6.1.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3914
• Bump net.javacrumbs.json-unit:json-unit-assertj from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3916
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.10 to 12.0.11 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3917
• Bump io.github.jeremylong:open-vulnerability-clients from 6.1.1 to 6.1.2 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3926
• Bump docker/build-push-action from 6.2.0 to 6.3.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3928
• Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3931
• Bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3929
• Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3930
• Bump io.github.jeremylong:open-vulnerability-clients from 6.1.2 to 6.1.6 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3964
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.19.0 to 1.19.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3968
• Bump actions/dependency-review-action from 4.3.3 to 4.3.4 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3974
• Bump github/codeql-action from 3.25.11 to 3.25.12 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3976
• Bump actions/download-artifact from 4.1.7 to 4.1.8 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3977
• Bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3975
• Bump net.javacrumbs.json-unit:json-unit-assertj from 3.4.0 to 3.4.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3985
• Bump org.testcontainers:testcontainers from 1.19.8 to 1.20.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3987
• Bump io.github.jeremylong:open-vulnerability-clients from 6.1.6 to 6.1.7 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3984
• Bump docker/build-push-action from 6.3.0 to 6.4.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3992
• Bump github/codeql-action from 3.25.12 to 3.25.13 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3993
• Bump debian from f8bbfa0 to 57bd74e in /src/main/docker by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/3997
• Bump com.fasterxml.woodstox:woodstox-core from 6.6.2 to 7.0.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4001
• Bump com.google.cloud.sql:postgres-socket-factory from 1.18.0 to 1.19.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4002
• Bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4009
• Bump github/codeql-action from 3.25.13 to 3.25.15 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4012
• Bump docker/login-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4011
• Bump org.eclipse.jetty.ee10:jetty-ee10-maven-plugin from 12.0.11 to 12.0.12 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4019
• Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4010
• Bump org.testcontainers:testcontainers from 1.20.0 to 1.20.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4025
• Bump com.microsoft.sqlserver:mssql-jdbc from 12.6.1.jre11 to 12.8.0.jre11 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4024
• Bump org.kohsuke:github-api from 1.321 to 1.323 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4028
• Bump com.puppycrawl.tools:checkstyle from 10.16.0 to 10.17.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4029
• Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4035
• Bump actions/upload-artifact from 4.3.4 to 4.3.5 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4033
• Bump docker/build-push-action from 6.4.1 to 6.5.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4034
• Bump org.slf4j:log4j-over-slf4j from 2.0.13 to 2.0.14 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4038
• Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4037
• Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4052
• Bump org.slf4j:log4j-over-slf4j from 2.0.14 to 2.0.15 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4053
• Bump Temurin base image to 21.0.4_7 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4055
• Bump bundled frontend to v4.11.6 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4058
• Bump docker/build-push-action from 6.5.0 to 6.6.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4063
• Bump github/codeql-action from 3.25.15 to 3.26.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4062
• Bump org.slf4j:log4j-over-slf4j from 2.0.15 to 2.0.16 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4064
• Bump actions/upload-artifact from 4.3.5 to 4.3.6 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4061
• Bump actions/setup-java from 4.2.1 to 4.2.2 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4060
• Bump org.codehaus.mojo:exec-maven-plugin from 3.4.0 to 3.4.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4068
• Bump debian from 57bd74e to 382967f in /src/main/docker by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4069
• Bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.19.1 to 1.20.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4076
• Bump Alpine to 3.0.1 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4075
• Bump org.apache.maven:maven-artifact from 3.9.8 to 3.9.9 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4084
• Bump docker/build-push-action from 6.6.1 to 6.7.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4083
• Bump github/codeql-action from 3.26.0 to 3.26.2 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4082
• Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4085
• Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4089
• Bump com.microsoft.sqlserver:mssql-jdbc from 12.8.0.jre11 to 12.8.1.jre11 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4090
• Bump github/codeql-action from 3.26.2 to 3.26.5 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4096
• Bump DataNucleus to 6.0.8 by @​nscuro in https://github.com/DependencyTrack/dependency-track/pull/4104
• Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in https://github.com/DependencyTrack/dependency-track/pull/4115
• Bump github/codeql-action from 3.26.5 to 3.26.6 by @​dependabot in

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.