dependencytrack/hyades-apiserver issues and pull requests

#103 - Port fix for invalid group name of Jira config properties

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#102 - Port fix to allow for component author names to exceed 255 characters

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#101 - Bump actions/checkout from 3.5.0 to 3.5.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#100 - Bump debian from bullseye-20230320-slim to bullseye-20230411-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, docker

#99 - Port fixes for NPEs during policy evaluation

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#98 - Bump jetty-maven-plugin from 10.0.13 to 11.0.15

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#97 - removed not required parameter leading to compilation failure

Pull Request - State: closed - Opened by mehab over 1 year ago

#96 - Bump lib.protobuf-java.version from 3.22.2 to 3.22.3

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#95 - Port health check implementation from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#94 - Bump Alpine to 2.2.1

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: dependencies, java

#93 - Port support for dependency graph in CycloneDX exports from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#92 - Port fix for faulty ACL query assembly in certain situations from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#91 - Port fix for ineffective cloning of ACLs from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#90 - Port fix for `AlreadyClosedException` on search index commit from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#89 - Port `BOM_PROCESSING_FAILED` notification from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#88 - Port fix for accidental dependency graph deletion from upstream

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#87 - Disable alias synchronization when ingesting mirrored vulnerabilities

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#86 - Bump redpanda from 1.17.6 to 1.18.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#85 - Bump datanucleus-rdbms from 6.0.3 to 6.0.4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#84 - Remove Kafka JSON serialization classes

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#83 - Process vulnerability analysis results from a single event per component

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#82 - Track vulnerability analysis target

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#81 - Use back references instead of including all affected projects in notification subject

Pull Request - State: closed - Opened by nscuro over 1 year ago

#80 - Record time metrics for event processors

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#79 - Enable Snappy compression

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#78 - Fix NullPointerException when processing mirrored vulnerabilities

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: defect

#77 - Make better use of producer batching when dispatching events to Kafka

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#76 - Bump microprofile-health-api from 3.1 to 4.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#75 - Add basic health check servlet based on MicroProfile Health

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#74 - Rework Mirror service

Pull Request - State: closed - Opened by sahibamittal over 1 year ago - 2 comments
Labels: enhancement

#73 - Bump actions/setup-java from 3.10.0 to 3.11.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, github_actions

#72 - Bump actions/checkout from 3.4.0 to 3.5.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#71 - Bump debian from bullseye-20230227-slim to bullseye-20230320-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, docker

#70 - Bump json-unit-assertj from 2.36.1 to 2.37.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#69 - Bump commons-compress from 1.22 to 1.23.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#68 - Feature/test

Pull Request - State: closed - Opened by mehab over 1 year ago

#67 - Bump maven-artifact from 3.9.0 to 3.9.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#66 - Bump actions/checkout from 3.3.0 to 3.4.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#65 - Refactor notifications to use Protobuf schemas

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#64 - Port changes to Protobuf schemas from https://github.com/DependencyTrack/hyades/pull/414

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#63 - Revert ID column types from `int` to `long` again

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#62 - Refactor repository meta analysis to use Protobuf schemas

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#61 - Reverted metrics calculation

Pull Request - State: closed - Opened by VithikaS over 1 year ago - 1 comment

#60 - Port Lift config from original repo

Pull Request - State: closed - Opened by nscuro over 1 year ago

#59 - Fix tests not running due to introduction of JUnit Jupiter

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: defect

#58 - Improve mapping of risk ratings from reported vulns to internal model

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: enhancement

#57 - Send `NEW_VULNERABILITY` notifications when processing vulnerability scan results

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#56 - Add missing check for existing vulnerabilities in component

Pull Request - State: closed - Opened by sahibamittal over 1 year ago

#55 - Map missing analyzerIdentity in vuln-result attributions

Pull Request - State: closed - Opened by sahibamittal over 1 year ago

#54 - Feature/add policy update

Pull Request - State: closed - Opened by mehab over 1 year ago - 2 comments

#53 - Issue-389 : add finding attribution mapping

Pull Request - State: closed - Opened by sahibamittal over 1 year ago

#52 - updated proto dependency in pom to suit usage in restricted network

Pull Request - State: closed - Opened by mehab over 1 year ago - 2 comments

#51 - Project count on delete

Pull Request - State: closed - Opened by VithikaS over 1 year ago - 1 comment

#50 - Bump lib.protobuf-java.version from 3.21.12 to 3.22.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#49 - Bump aquasecurity/trivy-action from 0.9.1 to 0.9.2

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#48 - Bump docker/setup-buildx-action from 2.4.1 to 2.5.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#47 - Migrate Kafka metrics events to Protobuf schemas

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#45 - Fix various NPEs and data handling issues in vuln mirror ingestion

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: defect

#44 - Bump jetty-maven-plugin from 10.0.13 to 11.0.14

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#43 - Revert "Bump jetty-maven-plugin from 10.0.13 to 11.0.14"

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#42 - Bump lib.protobuf-java.version from 3.21.12 to 3.22.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, java

#41 - Vulnerability Id Policy Evaluator added

Pull Request - State: closed - Opened by mehab over 1 year ago - 1 comment

#40 - Fix timing issue in computation of vuln scan completion

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: defect

#39 - Bump debian from bullseye-20230208-slim to bullseye-20230227-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, docker

#38 - Issue-343 : add configurable prefix to kafka topics

Pull Request - State: closed - Opened by sahibamittal over 1 year ago

#37 - Feature/implement metrics producer

Pull Request - State: closed - Opened by mehab over 1 year ago - 2 comments

#36 - Bump jetty-maven-plugin from 10.0.13 to 11.0.14

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#35 - Bump json from 20220924 to 20230227

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, java

#34 - Fix logic mistake in `BomResource#isTokenBeingProcessed`

Pull Request - State: closed - Opened by nscuro over 1 year ago - 1 comment
Labels: defect

#33 - Bump eclipse-temurin from 17-jre-focal to 19-jre-focal in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, docker

#32 - Use Protobuf for processing vuln analysis results

Pull Request - State: closed - Opened by nscuro over 1 year ago
Labels: enhancement

#29 - Bump maven from 3.8-eclipse-temurin-17 to 3.9-eclipse-temurin-17 in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, docker

#28 - Bump actions/setup-java from 3.9.0 to 3.10.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#27 - Bump aquasecurity/trivy-action from 0.9.0 to 0.9.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#26 - Bump debian from bullseye-20230202-slim to bullseye-20230208-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, docker

#25 - Bump kafka-clients from 3.3.2 to 3.4.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, java

#24 - Bump lib.kafka-streams.version from 3.3.2 to 3.4.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#23 - Bump maven-artifact from 3.8.7 to 3.9.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, java

#22 - Bump docker/build-push-action from 3.2.0 to 4.0.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#21 - Bump docker/setup-buildx-action from 2.4.0 to 2.4.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#20 - Bump debian from bullseye-20221219-slim to bullseye-20230202-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, docker

#19 - Bump aquasecurity/trivy-action from 0.8.0 to 0.9.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#18 - Fix broken `web.xml` due to removed NVD servlet

Pull Request - State: closed - Opened by nscuro almost 2 years ago
Labels: defect

#17 - Cleanup internal events and tasks that are delegated to Hyades

Pull Request - State: closed - Opened by nscuro almost 2 years ago - 1 comment
Labels: enhancement

#16 - Bump json-unit-assertj from 2.36.0 to 2.36.1

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, java

#15 - Bump docker/setup-buildx-action from 2.2.1 to 2.4.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#14 - Improve `RepositoryMetaResultProcessor` resiliency

Pull Request - State: closed - Opened by nscuro almost 2 years ago - 1 comment
Labels: enhancement

#13 - Refactor NVD mirroring event to Kafka event

Pull Request - State: closed - Opened by sahibamittal almost 2 years ago

#12 - Bump mssql-jdbc from 11.2.2.jre17 to 11.2.3.jre17

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#11 - Bump mysql-connector-java from 8.0.29 to 8.0.30

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#10 - Bump kafka-clients from 3.3.1 to 3.3.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#9 - Bump jetty-maven-plugin from 10.0.13 to 11.0.13

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#8 - Bump eclipse-temurin from 17.0.5_8-jre-focal to 18.0.2.1_1-jre-focal in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, docker

#7 - Bump actions/download-artifact from 3.0.1 to 3.0.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, github_actions

#6 - Bump actions/checkout from 3.2.0 to 3.3.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, github_actions

#5 - Update jekyll requirement from ~> 3.8 to ~> 4.3 in /docs

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, ruby

#4 - Bump lib.kafka-streams.version from 3.3.1 to 3.3.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, java

#3 - Bump actions/upload-artifact from 3.1.1 to 3.1.2

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, github_actions

#2 - Bump debian from bullseye-20221219-slim to bullseye-20230109-slim in /src/main/docker

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 2 comments
Labels: dependencies, docker

#1 - Bump docker/build-push-action from 3.2.0 to 3.3.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 2 comments
Labels: dependencies, github_actions

GitHub / dependencytrack/hyades-apiserver issues and pull requests