Updating multiple analysis fields with one API call only shows one in audit trail

[taladar]

Current Behavior

All fields are updated to the correct values but only the Analysis field is mentioned in the audit trail when I set analysis, analysis response and analysis details at the same time via a single API call.

Steps to Reproduce

1. Call the update analysis API call with multiple fields set
2. Observe audit trail only showing a single field

Expected Behavior

Audit trail should show all modified fields, either as a single combined entry or as separate entries the way it does when changing the settings in the web UI.

Dependency-Track Version

4.12.6

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

13.20

Browser

Mozilla Firefox

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this defect was already reported

[stohrendorf]

Related: #2683 #3470

[stohrendorf]

The probable issue is https://github.com/DependencyTrack/dependency-track/blob/master/src/main/java/org/dependencytrack/resources/v1/AnalysisResource.java#L184-L197, which only logs a single change in case of an initial analysis.