Skip to content

Releases: jenkinsci/dependency-track-plugin

v6.0.2

20 Aug 19:06

Choose a tag to compare

⚠ Breaking

⭐ New Features

🐞 Bugs Fixed

  • The list of projects in the select box did not show all available projects.
  • Policy violations were limited to 100 (#345)
  • The publishing step may get stuck when reading the BOM (#336)

v6.0.1

23 Mar 19:04

Choose a tag to compare

⚠ Breaking

⭐ New Features

🐞 Bugs Fixed

  • avoid "JSON Payload Too Large" error (#313)

v6.0.0

18 Jan 14:50

Choose a tag to compare

⚠ Breaking

  • require Jenkins 2.479.1 or newer
  • require Java 17 or newer (required since Jenkins 2.479.1)
  • require Dependency-Track 4.12 or newer (#286)

⭐ New Features

  • Support "isLatest" flag (#286)

v5.2.0

08 Dec 16:40

Choose a tag to compare

⚠ Breaking

⭐ New Features

🐞 Bugs Fixed

v5.1.0

20 Sep 16:21

Choose a tag to compare

⚠ Breaking

⭐ New Features

  • Support for specifying the parent project using its name and version as an alternative to its ID (#261)
  • Include artifact name in Publishing Logline (#264)
  • Support for Policy Violations (#130)

🐞 Bugs Fixed

v5.0.0

30 May 17:58
81ad464

Choose a tag to compare

⚠ Breaking

  • require Jenkins 2.440.1 or newer
  • require Java 11 or newer (required since Jenkins 2.361.1)
  • require Dependency-Track 4.9 or newer
  • New findings are only evaluated from the second build onwards (#113)

⭐ New Features

  • Allow overrideGlobals to override global timeout and interval settings (#182)
  • Use the proxy that is configured in Jenkins (#181)
  • Support threshold for unassigned findings (#158)
  • Supports HTTP/2
  • In the event of an unexpected exception, each call to Dependency-Track is retried within an uniformly distributed, randomly generated period in the range of 50-500ms.
  • A warning is emitted when threshold values are configured but synchronous mode is disabled.
  • Add Support for Identification of Aliases ... by ignoring them (#168)

🐞 Bugs Fixed

  • The settings for the threshold values are now only visible when synchronous mode is enabled. This will hopefully avoid misunderstandings/misconfigurations.

v4.3.1

12 Apr 19:08
e72ed66

Choose a tag to compare

⚠ Breaking

⭐ New Features

🐞 Bugs Fixed

  • Remove usages of l:css (#160)

v4.3.0

20 Feb 19:03
95e4168

Choose a tag to compare

⚠ Breaking

⭐ New Features

  • Added support for parent-child-relationships of projects with Dependency-Track v4.7 and newer (fixes #139)

🐞 Bugs Fixed

v4.2.0

04 Jul 19:05
bdeb33a

Choose a tag to compare

⚠ Breaking

⭐ New Features

  • The connection test will also check server-side permissions for Dependency-Track v4.4 and newer (fixes #13)

🐞 Bugs Fixed

  • classic jobs with sync mode and no project ID used the looked-up ID in future runs, although they should not (fixes #98)
  • When using "New Findings" thresholds, the plugin is now looking for the latest succesful build with a report instead of just the previous build with the report. (PR #106)

Contributors

v4.1.1

06 Mar 22:16
d5d788d

Choose a tag to compare

⚠ Breaking

⭐ New Features

🐞 Bugs Fixed

  • The options "Dependency-Track project name" and "Dependency-Track project version" were only visible after saving and reloading the configuration page, although the global configuration "Auto Create projects" was set.
  • Fixed an issue with "Dependency-Track project" in classic (freestyle) jobs and Jenkins 2.319 LTS that caused the value to be "null" instead of empty, resulting in upload errors. Affected users should edit and save the job after updating to this plugin version.