You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/_posts/2021-xx-xx-v4.0.0.md
+8
Original file line number
Diff line number
Diff line change
@@ -10,6 +10,13 @@ type: major
10
10
* Anonymous access to Sonatype OSS Index is now enabled by default
11
11
* Component vulnerabilities are now attributed to the analyzers responsible for finding them
12
12
* Added support for CycloneDX 1.2 and SPDX 2.2
13
+
* Added component support for Blake2b and Blake3 hash algorithms
14
+
* Added component support for SWID Tag ID
15
+
* Projects now have identity, similar to components, and support coordinates (group, name, version), CPE, Package URL, and SWID Tag ID
16
+
* Added support for firmware and container component types
17
+
* When generating a CycloneDX BOM from a project or component, v1.2 of the spec is now produced
18
+
* Updated SPDX license list to v3.11
19
+
* Dropped support for NVD JSON v1.0 data feeds
13
20
* Optimized NVD mirroring logic
14
21
* Inactive projects are omitted from portfolio metrics
15
22
* Updates to the notification email template for BOM consumed and BOM processed
@@ -31,6 +38,7 @@ type: major
31
38
* Four Dependency-Track distribution variants are provided. Refer to [Distributions]({{ site.baseurl }}{% link _docs/getting-started/distributions.md %}) for details.
32
39
* The traditional WAR distribution is deprecated and no longer supported. It is still being produced as of this release but will be discontinued in a future release.
33
40
* The FrontEnd requires deployment to the root ("/") context. Deploying to any context other than root is no longer supported.
41
+
* Some APIs have changed as of this release. APIs that were specific to the global component model have been removed. APIs that referenced a 'dependency' in the model have changed. Components are now assigned directly to projects themselves, thus eliminating the need for 'dependency' objects in v4.
34
42
* The MySQL Connector distributed with the Docker image has been updated to version 8.0.22. When using MySQL, `ALPINE_DATABASE_DRIVER_PATH` has to be set to `/extlib/mysql-connector-java-8.0.22.jar`. Note that `ALPINE_DATABASE_DRIVER` may need to be updated as well. Refer to the [official upgrading instructions](https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-upgrading-to-8.0.html).
35
43
* The Postgres driver distributed with the Docker image has been updated to version 42.2.18. When using Postgres, `ALPINE_DATABASE_DRIVER_PATH` has to be set to `/extlib/postgresql-42.2.18.jar`.
0 commit comments