Niklas

Fix failing auto-commit check for kafka-clients >= v3.7.0

12

This PR includes the changes made by @ondryaso in #746 to resolve the failing `checkAutoCommitIsDisabled` for `kafka-clients` >= v3.7.0 (#721). It further includes the changes requested by @rkolesnev in his...

Add support for OSV

4

Thanks for this amazing project, we make heavy use of the clients library in [Hyades](https://github.com/DependencyTrack/hyades)! Beside the NVD and GitHub Advisories, we also mirror the OSV database. We currently do...

### Description Performs the migration from Java EE to Jakarta EE 10 (see [here](https://blogs.oracle.com/javamagazine/post/transition-from-java-ee-to-jakarta-ee) for background). This migration is crucial to prevent the Dependency-Track code base from falling behind, and...

Port changes from upstream DT release 4.11.x

2

### Current Behavior v4.11 of vanilla Dependency-Track is about to be released. We need to port the relevant changes to Hyades. For reference, changes from v4.10.x were ported here: https://github.com/DependencyTrack/hyades/issues/983...

Offer a Quarkus Dev Services compatible way to launch Kafka and PostgreSQL containers with API server

7

### Current Behavior Currently, local development on the API server requires Kafka and PostgreSQL to be launched [via Docker Compose](https://github.com/DependencyTrack/hyades/blob/main/docker-compose.yml). While this works, it's a bit fiddly and not a...

### Current Behavior The Helm chart currently lives at https://github.com/DependencyTrack/hyades/tree/main/helm-charts/hyades, and is not published to any chart repository. That makes it hard to discover, and cumbersome to deploy. ### Proposed...

Uploading large BOMs can result in extensive network latency, potentially causing clients to time out before a response is received. Support BOM compression both in frontend and API server.

Vulnerability policies should have multiple modes of operation

1

At the moment, vulnerability policies are "enforced" as soon as they are created in the system. There may be situations however, in which policies are supposed to be deployed, but...

Add development docs

1

### Description ### Addressed Issue Closes #1174 ### Additional Details ### Checklist - [x] I have read and understand the [contributing guidelines](../CONTRIBUTING.md#pull-requests) - ~This PR fixes a defect, and I...

Pull config via `@ConfigProperty` in mirror-service

1

### Description > [!NOTE] > ~This PR is based on #1223. Please review that first, I'll update this PR once it is merged. Should drastically reduce the change size. :)~...