OWASP Dependency-Track v5.0.4 released

OWASP Dependency-Track is a component analysis platform that lets organizations identify and reduce risk in the software supply chain by continuously monitoring SBOMs for known vulnerabilities.

Version 5.0.4 is another maintenance release backporting seven enhancements and four bug fixes to the v5 branch, covering workflow scheduling under deep backlogs, activity execution timeouts, and a fix for empty vulnerability description notifications.

Changelog for v5.0.4:

## What's Changed
### Enhancements 🚀
* Backport: dex: Make query timeout configurable by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6855
* Backport: dex: improve workflow task scheduling performance for deep backlogs with concurrency keys by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6858
* Backport: dex: execute multiple deletion batches per maintenance cycle by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6860
* Backport: dex: enforce execution timeout for activities by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6861
* Backport: dex: define default activity execution timeout by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6862
* Backport: dex: automatically heartbeat activities by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6864
* Backport: Improve responsiveness to thread interruptions by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6863
### Bug Fixes 🐛
* Backport: Exclude project from components loaded during ImportBomActivity by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6856
* Backport: Fix failure to emit notification when vulnerability description is empty by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6857
* Backport: dex: fix too eager consumption of concurrency key wakeup hints by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6859
* Backport: Strip trailing `/` from `baseUrl` notification template variable by @nscuro in https://github.com/DependencyTrack/dependency-track/pull/6865

Full Changelog: https://github.com/DependencyTrack/dependency-track/compare/5.0.3...5.0.4

Full release notes: GitHub releases

• News
• Tools