Skip to content

Upgrading to v5.1.1

  • The upgrade forces a full GitHub Advisories and OSV mirror. Dependency-Track derived CVSSv4 scores from the base metrics alone, which reported a higher severity than the source did for advisories that also carry threat metrics. The upgrade purges the watermarks that both data sources use to track incremental progress. Existing data stays in place, but the next run of each source processes its full data set and overwrites the affected records. Mirroring is much faster in this release, so a full run takes less time than it did in earlier versions.

    Corrected data is not available until the mirrors run, which happens daily at 02:00 UTC for GitHub Advisories and 03:00 UTC for OSV by default. To get the corrected data sooner, use Mirror now as described in Triggering an initial mirror.