13 Pull requests merged by 4 people

• Bump io.github.jeremylong:open-vulnerability-clients from 7.0.2 to 7.1.0

  #4494 merged Dec 23, 2024

• Bump github/codeql-action from 3.27.9 to 3.28.0

  #4490 merged Dec 23, 2024

• Bump actions/upload-artifact from 4.4.3 to 4.5.0

  #4493 merged Dec 23, 2024

• Bump actions/setup-java from 4.5.0 to 4.6.0

  #4492 merged Dec 23, 2024

• Bump docker/setup-buildx-action from 3.7.1 to 3.8.0

  #4491 merged Dec 23, 2024

• Reduce database round-trips during BOM processing

  #4486 merged Dec 23, 2024

• Backport: Fix component SWID tag ID not being considered in project cloning

  #4481 merged Dec 19, 2024

• Fix component SWID tag ID not being considered in project cloning

  #4480 merged Dec 19, 2024

• Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0

  #4467 merged Dec 19, 2024

• Update DEVELOPING.md with command for single unit-test

  #4472 merged Dec 19, 2024

• Add /v1/project/batchDelete API method that deletes with SQL

  #4383 merged Dec 19, 2024

• Bump lib.protobuf-java.version from 4.29.1 to 4.29.2

  #4473 merged Dec 19, 2024

• Bump github/codeql-action from 3.27.6 to 3.27.9

  #4466 merged Dec 19, 2024

4 Pull requests opened by 2 people

• Add Repository Bearer Authentication

  #4483 opened Dec 20, 2024

• Backport: Compose Metadata Analyzer: Use v2 URL

  #4485 opened Dec 20, 2024

• Bump software.amazon.jdbc:aws-advanced-jdbc-wrapper from 2.5.3 to 2.5.4

  #4496 opened Dec 24, 2024

• Bump debian from `4d63ef5` to `5f21ebd` in /src/main/docker

  #4499 opened Dec 25, 2024

2 Issues closed by 1 person

• SWID Tag ID not preserved during clone operation

  #4478 closed Dec 19, 2024

• Make project life-cycle management more effective

  #3361 closed Dec 19, 2024

4 Issues opened by 3 people

• Dependency tracker won't detect some vulnerability

  #4488 opened Dec 21, 2024

• Internal Library with same name issue

  #4487 opened Dec 21, 2024

• Project name rendered as PURL in notifications and logs

  #4484 opened Dec 20, 2024

• Track Status / Support Life Cycle of packages (supported/unsupported/abondoned/...)

  #4476 opened Dec 19, 2024

7 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Compose Metadata Analyzer: Refactor to support V2 and V1 repositories

  #4470 commented on Dec 25, 2024 • 11 new comments

• Add Support for Composer 2 Metadata API

  #4435 commented on Dec 20, 2024 • 1 new comment

• Add support for SPDX v3

  #1746 commented on Dec 19, 2024 • 0 new comments

• Use vulnerabilities from Composer package repositories

  #4465 commented on Dec 19, 2024 • 0 new comments

• Improve automated deployment with Docker

  #2443 commented on Dec 20, 2024 • 0 new comments

• dependency-track high cpu usage

  #1370 commented on Dec 24, 2024 • 0 new comments

• Issue/2323: Filter portfolio metrics in portfolio access control mode to match team's accesses

  #2326 commented on Dec 24, 2024 • 0 new comments