Skip to content

Commit

Permalink
Add changelog for v4.11.4
Browse files Browse the repository at this point in the history
Signed-off-by: nscuro <[email protected]>
  • Loading branch information
nscuro committed Jun 23, 2024
1 parent 79f9b06 commit 9ff0b67
Showing 1 changed file with 69 additions and 0 deletions.
69 changes: 69 additions & 0 deletions docs/_posts/2024-06-24-v4.11.4.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
---
title: v4.11.4
type: patch
---

**Enhancements:**

* Add support for ingestion of CycloneDX v1.6 BOMs - [apiserver/#3863]
* Improve German translation - [frontend/#917]
* Improve Chinese translation - [frontend/#918]

**Fixes:**

* Fix inverted "show inactive" filter in vulnerability audit view - [apiserver/#3864]
* Fix BOM validation failing when URL contains encoded `[` and `]` characters - [apiserver/#3866]
* Fix external references not being updated via `POST /v1/component` - [apiserver/#3867]
* Fix possible XXE injection during CycloneDX validation and parsing - [GHSA-7r6q-xj4c-37g4] / [apiserver/#3871]

For a complete list of changes, refer to the respective GitHub milestones:

* [API server milestone 4.11.4](https://github.com/DependencyTrack/dependency-track/milestone/41?closed=1)
* [Frontend milestone 4.11.4](https://github.com/DependencyTrack/frontend/milestone/26?closed=1)

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:
[@2000rosser], [@fupgang], [@sahibamittal], [@zeed-w-beez]

###### dependency-track-apiserver.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1 | |
| SHA-256 | |

###### dependency-track-bundled.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1 | |
| SHA-256 | |

###### frontend-dist.zip

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1 | |
| SHA-256 | |

###### Software Bill of Materials (SBOM)

* API Server: [bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.11.4/bom.json)
* Frontend: [bom.json](https://github.com/DependencyTrack/frontend/releases/download/4.11.4/bom.json)

[apiserver/#3863]: https://github.com/DependencyTrack/dependency-track/pull/3863
[apiserver/#3864]: https://github.com/DependencyTrack/dependency-track/pull/3864
[apiserver/#3866]: https://github.com/DependencyTrack/dependency-track/pull/3866
[apiserver/#3867]: https://github.com/DependencyTrack/dependency-track/pull/3867
[apiserver/#3871]: https://github.com/DependencyTrack/dependency-track/pull/3871

[frontend/#917]: https://github.com/DependencyTrack/frontend/pull/917
[frontend/#918]: https://github.com/DependencyTrack/frontend/pull/918

[GHSA-7r6q-xj4c-37g4]: https://github.com/DependencyTrack/dependency-track/security/advisories/GHSA-7r6q-xj4c-37g4

[@2000rosser]: https://github.com/2000rosser
[@fupgang]: https://github.com/fupgang
[@sahibamittal]: https://github.com/sahibamittal
[@zeed-w-beez]: https://github.com/zeed-w-beez

0 comments on commit 9ff0b67

Please sign in to comment.