4.11.0

Dependency Track Frontend

For official releases, refer to Dependency Track Docs >> Changelogs for information about improvements and upgrade notes.
If additional details are required, consult the closed issues for this release milestone.

# SHA1
80cddddaf5c9c73676065d4ab6fe7b3eff3ec8de  frontend-dist.zip
# SHA256
9c51c337f4b2a7e78730c70473cd24070773a0982d1c0ee6c13f9a6f18a756d5  frontend-dist.zip
# SHA512
bb45257838683472f64ff88a48a02c39808fadd2210a63b5fa143edced1320a0a593a3e23e69cce331beebe21278dc6d291daaeb632aa88b43c38e117a4e1bbd  frontend-dist.zip

What's Changed

Enhancements 🚀

• Add "Show in Dependency-Graph" Button in "Affected Projects" List [improved version] by @rkg-mm in #667
• Include component count in projects list by @mykter in #683
• feat(violations): add current fail, warn, info metrics to footer by @setchy in #707
• fix(common): calculate percentage to tenth decimal place by @setchy in #708
• refactor(dashboard): use consistent color for suppressed by @setchy in #712
• refactor(dashboard): set progress colors via scss by @setchy in #713
• feat(dashboard): display additional portfolio statistics by @setchy in #709
• feat(dashboard): add vuln / non-vuln footer to projects and components cards by @setchy in #714
• feat(dashboard): auditing progress for findings and policy violations by @setchy in #715
• refactor(project details): improve UX for active/inactive toggle. by @setchy in #721
• feat(dashboard): policy violations by state and classification cards by @setchy in #717
• refactor(dashboard): show portfolio vulnerabilities severity in footer by @setchy in #718
• feat(vulnerabilities): support active/inactive affected projects by @setchy in #723
• feat(notifications): show publisher name on expanded row by @setchy in #728
• New Subject Prefix Input Box by @LaVibeX in #720
• Trivy support by @fnxpt in #656
• feat(project): add tooltip to vuln progress bar by @setchy in #738
• feat(project): finding badges including and excluding aliases by @setchy in #736
• feat: improve tooltip clarity for project vulnerabilities by @setchy in #733
• feat(project): policy violation badges by @setchy in #744
• Global Audit View: Vulnerabilities by @rbt-mm in #411
• feat: add eslint and prettier by @setchy in #752
• Add auto-generated changelog to GitHub releases by @nscuro in #755
• feat: lint on master by @setchy in #759
• add token and new notifications by @fnxpt in #665
• Handle BOM validation errors by @nscuro in #762
• Update API key view to include created, last used, and comment by @nscuro in #768
• feat(component): add namespace/group to component label/breadcrumb by @setchy in #777
• feat(component): add internal column to component search list view by @setchy in #775
• feat(component): add internal / external classification badge by @setchy in #776
• refactor: perform saas slash-div migration by @setchy in #796
• feat(license): use concise endpoint for license list view by @setchy in #793
• feat(license): add deprecated column by @setchy in #792
• Add Comment Column To External References by @aravindparappil46 in #803
• add support from localization based on browser and languages by @fnxpt in #805
• Add support for component properties by @nscuro in #811
• Enhanced ProgressBar Contrast Ration by @validide in #816
• Update Trivy option wording and fix vulnerability source label styling by @nscuro in #821
• Experimental by @fnxpt in #815
• Add locale picker to header by @nscuro in #824
• feat(component-search): add license column by @setchy in #795
• Display EPSS Score And Percentile In Vulnerability Page by @aravindparappil46 in #832
• Force page reload after locale change by @nscuro in #839

Bug Fixes 🐛

• Use VUE_APP_SERVER_URL by @mykter in #682
• Use unique fields for project list metrics columns by @mykter in #686
• Project cloning: cloning Policy Violations and ViolatationAnalysis by @mge-mm in #655
• Refactor finding detail and fix finding search routes by @mykter in #689
• fix: correctly calculate audited violations and audited findings percentages by @setchy in #704
• refactor: handle percentage calc edge cases by @setchy in #719
• Fix "Outdated Only" button being disabled when dependency graph is not available by @nscuro in #725
• Fix redundant requests to /api/v1/component when loading project page by @nscuro in #726
• Fix table column visibility preferences triggering redundant requests by @nscuro in #727
• Do not append @<version> when rendering CPEs in Affected Components view by @nscuro in #748
• Fix Components column erroneously being sortable by @nscuro in #767
• Fix API key rows not being displayed by @nscuro in #770
• Fix link to projects in Portfolio Access Control view by @lukas-braune in #774
• Aliases column is not displaying information in Vulnerabilities section by @LaVibeX in #766
• fix: v-for explicit key by @setchy in #797
• Require VIEW_PORTFOLIO permission for BOM download by @nscuro in #812
• Add missing repo views for Hackage and Nixpkgs by @nscuro in #845

Dependency Updates 🤖

• build(deps): bump nginxinc/nginx-unprivileged from f084834 to 1e29add in /docker by @dependabot in #669
• build(deps): bump aquasecurity/trivy-action from 0.15.0 to 0.16.0 by @dependabot in #668
• build(deps): bump actions/setup-node from 4.0.0 to 4.0.1 by @dependabot in #680
• build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #672
• build(deps): bump nginxinc/nginx-unprivileged from 1e29add to fa82525 in /docker by @dependabot in #671
• build(deps): bump nginxinc/nginx-unprivileged from fa82525 to 4426351 in /docker by @dependabot in #685
• build(deps): bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @dependabot in #690
• build(deps): bump nginxinc/nginx-unprivileged from 4426351 to afc98ea in /docker by @dependabot in #687
• build(deps): bump follow-redirects from 1.15.2 to 1.15.4 by @dependabot in #693
• build(deps): bump nginxinc/nginx-unprivileged from afc98ea to 6703f05 in /docker by @dependabot in #691
• build(deps): bump actions/download-artifact from 3.0.2 to 4.1.0 by @dependabot in #679
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #675
• build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in #697
• build(deps): bump nginxinc/nginx-unprivileged from 6703f05 to 966331a in /docker by @dependabot in #695
• build(deps): bump actions/download-artifact from 4.1.0 to 4.1.1 by @dependabot in #694
• build(deps): bump nginxinc/nginx-unprivileged from 966331a to cc3ca91 in /docker by @dependabot in #698
• build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in #700
• build(deps): bump actions/dependency-review-action from 3 to 4 by @dependabot in #701
• build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in #703
• build(deps): bump nginxinc/nginx-unprivileged from cc3ca91 to 939d113 in /docker by @dependabot in #702
• build(deps): bump nginxinc/nginx-unprivileged from 939d113 to 69bd3c1 in /docker by @dependabot in #716
• build(deps): bump actions/download-artifact from 4.1.1 to 4.1.2 by @dependabot in #731
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #730
• build(deps): bump nginxinc/nginx-unprivileged from 69bd3c1 to e0be80a in /docker by @dependabot in #729
• build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 by @dependabot in #732
• build(deps): bump nginxinc/nginx-unprivileged from 1.25.3-alpine to 1.25.4-alpine in /docker by @dependabot in #740
• build(deps): bump nginxinc/nginx-unprivileged from 643fe39 to ac1db3b in /docker by @dependabot in #742
• build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by @dependabot in #737
• build: add @vue/runtime-dom as devDependency by @setchy in #735
• build(deps-dev): bump ip from 1.1.8 to 1.1.9 by @dependabot in #743
• build(deps): bump nginxinc/nginx-unprivileged from ac1db3b to fe7d093 in /docker by @dependabot in #745
• build(deps): bump nginxinc/nginx-unprivileged from fe7d093 to 87a01a6 in /docker by @dependabot in #749
• build(deps): bump nginxinc/nginx-unprivileged from 87a01a6 to c50bd11 in /docker by @dependabot in #753
• build(deps): bump actions/download-artifact from 4.1.2 to 4.1.3 by @dependabot in #754
• build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #756
• build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 by @dependabot in #760
• build(deps): bump actions/download-artifact from 4.1.3 to 4.1.4 by @dependabot in #761
• build(deps): bump nginxinc/nginx-unprivileged from c50bd11 to 4ed6516 in /docker by @dependabot in #763
• build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 by @dependabot in #769
• build(deps): bump nginxinc/nginx-unprivileged from 4ed6516 to 39d8bcb in /docker by @dependabot in #771
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #773
• build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #778
• build(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in #779
• build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 by @dependabot in #780
• build(deps): bump nginxinc/nginx-unprivileged from 39d8bcb to 4883a29 in /docker by @dependabot in #783
• build(deps): bump nginxinc/nginx-unprivileged from 4883a29 to 7c1d415 in /docker by @dependabot in #788
• build(deps): bump follow-redirects from 1.15.4 to 1.15.6 by @dependabot in #781
• build(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.19.0 by @dependabot in #791
• build(deps): bump nginxinc/nginx-unprivileged from 7c1d415 to e5a49a7 in /docker by @dependabot in #799
• chore(deps): pin and update to latest minor releases by @setchy in #798
• build(deps): bump nginxinc/nginx-unprivileged from e5a49a7 to 5b49ce2 in /docker by @dependabot in #807
• build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #806
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #813
• build(deps): bump nginxinc/nginx-unprivileged from 5b49ce2 to 7b43166 in /docker by @dependabot in #817
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #819
• build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #820
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #823
• build(deps): bump nginxinc/nginx-unprivileged from 1.25.4-alpine to 1.25.5-alpine in /docker by @dependabot in #822
• build(deps): bump actions/download-artifact from 4.1.5 to 4.1.6 by @dependabot in #827
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #826
• build(deps): bump nginxinc/nginx-unprivileged from 7c5f491 to 09ad4fe in /docker by @dependabot in #825
• build(deps): bump actions/download-artifact from 4.1.6 to 4.1.7 by @dependabot in #830
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #831
• build(deps): bump nginxinc/nginx-unprivileged from 09ad4fe to 8a73655 in /docker by @dependabot in #829
• build(deps): bump nginxinc/nginx-unprivileged from 8a73655 to 07b9c90 in /docker by @dependabot in #836
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #846
• build(deps): bump nginxinc/nginx-unprivileged from 07b9c90 to 0480c2b in /docker by @dependabot in #847

Other Changes

• Add "Show in Dependency-Graph" Button in "Affected Projects" List by @rbt-mm in #573
• ACL: Add projects to team should only show not yet added projects #101 by @rkg-mm in #662
• docs: fix build status badge by @setchy in #699
• refactor(dashboard): remove unused policy violations widget by @setchy in #710
• chore: bump cyclonedx-npm package for npm10 support by @setchy in #750
• chore: update engine ranges by @setchy in #751
• Transfer copyright from Steve Springett to OWASP Foundation by @nscuro in #786
• fix missing translation by @fnxpt in #828
• Add Ukrainian 🇺🇦 i18n by @nscuro in #835
• Add i18n documentation by @nscuro in #837
• Fix some issues in German translation by @nscuro in #840
• Run builds and CI on feature-* branches by @nscuro in #842

New Contributors

• @mykter made their first contribution in #682
• @mge-mm made their first contribution in #655
• @setchy made their first contribution in #699
• @LaVibeX made their first contribution in #720
• @fnxpt made their first contribution in #656
• @lukas-braune made their first contribution in #774
• @aravindparappil46 made their first contribution in #803
• @validide made their first contribution in #816

Full Changelog: 4.10.0...4.11.0