Upgrading to v0.7.0-alpha.4

• Legacy workflow REST API endpoints have been removed. All paths under /api/v1/workflow are no longer available. Use /api/v1/bom/token/{uuid} or /api/v1/event/token/{uuid} to check whether a given task, such as BOM upload processing, is still ongoing.
• Advisory and CSAF REST API endpoints have been removed. All paths under /api/v2/advisories and /api/v2/csaf are no longer available. The functionality was removed because its implementation could not be completed in time for the GA release.
• Support for importing CycloneDX BOMs in Protobuf format has been removed. JSON and XML remain the only accepted formats.

• Loading secrets from files now uses the ${file::} expression syntax. The legacy <key>.file=/path and alpine.<key>.file=/path properties are no longer recognized, and the API server refuses to start if any of them are set. Rewrite each occurrence as <key>=${file::/path}. Affected properties:

  Before	After
  dt.database.password.file (or alpine.database.password.file)	dt.datasource.password=${file::/path}
  dt.http.proxy.password.file (or alpine.http.proxy.password.file)	dt.http.proxy.password=${file::/path}
  dt.ldap.bind.password.file (or alpine.ldap.bind.password.file)	dt.ldap.bind.password=${file::/path}

  The file is read once at startup, decoded as UTF-8, and trailing whitespace is stripped. Files larger than 64 KiB are rejected. Refer to Loading values from files for details.