Commit graph

18 commits

Author SHA1 Message Date
nscuro
a889a87b93
Standardize config property names and remove legacy shims
* Ensures that all properties follow a consistent naming and format pattern.
* Removes shim for legacy `alpine.*` or unprefixed properties.
* Renames `VulnerabilityAnalysisTask` to `PortfolioAnalysisTask` as it better reflects what it does (i.e. schedule analyses for all projects in the portfolio).
* Adds validation during startup to catch misconfigurations early.

Not great to do this in the RC phase, but better now than post GA.

Signed-off-by: nscuro <nscuro@protonmail.com>
2026-06-01 00:45:22 +02:00
nscuro
0f092b59e7
Switch migrations from Liquibase to Flyway
Verified manually that the schema produced by the Flyway baseline match the schema produced by Liquibase. No point in adding an automated test for this.

Also verified that an instance with existing Liquibase schema migrates cleanly to Flyway, including removal of Liquibase's `databasechangelog` and `databasechangeloglock` tables.

To compensate for the removal of the Liquibase Maven plugin, a new `migrate` command has been added to the apiserver CLI. As a side effect, this now allows users without a full development setup to generate SQL migration files.

Signed-off-by: nscuro <nscuro@protonmail.com>
2026-05-02 23:13:56 +02:00
nscuro
b49a74e2a1
Add Makefile with basic commands
For those who prefer working in the terminal

Signed-off-by: nscuro <nscuro@protonmail.com>
2026-01-01 22:51:01 +01:00
nscuro
6a03126a6e
Fix references to persistence-migration module
Signed-off-by: nscuro <nscuro@protonmail.com>
2025-12-18 18:11:28 +01:00
nscuro
5590764d95
Raise minimum Postgres version to 14
Relates to https://github.com/DependencyTrack/hyades/issues/1910

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-11-07 16:53:52 +01:00
nscuro
58006afd72
Lint OpenAPI spec via script instead of stoplightio/spectral-action
The action appears to be buggy and barely maintained. The script should be sufficient while not requiring any special GitHub permissions.

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-10-23 11:56:49 +02:00
Niklas
a3b16efa05
Add REST API v2 foundation (#1245) 2025-07-16 10:50:43 +01:00
nscuro
00c5a48555
Decouple Liquibase migrations into their own module
Signed-off-by: nscuro <nscuro@protonmail.com>
2025-05-16 17:38:42 +02:00
nscuro
30819d7b88
Convert to multi-module Maven project
Signed-off-by: nscuro <nscuro@protonmail.com>
2025-04-14 21:05:18 +02:00
nscuro
c8e3d3faa9
Raise minimum supported PostgreSQL version to 13
Also ensure that tests are executed against this minimum supported version.

Relates to https://github.com/DependencyTrack/hyades/issues/1724

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-03-25 12:59:42 +01:00
Niklas
c9543966a9
Re-add script to generate DB schema migration SQL (#1036) 2025-01-24 12:39:30 +00:00
nscuro
3716827380
Bump Liquibase to 4.30.0; Disable Liquibase analytics
Liquibase 4.30.0 introduced analytics and enabled it per default for the OSS version. Since DT is deployed in regulated environments, we explicitly disable analytics.

Signed-off-by: nscuro <nscuro@protonmail.com>
2024-11-20 14:37:22 +01:00
Niklas
e3a648e7af
Change dbschema-generate.sh to dump the final schema instead of the entire changelog (#859) 2024-08-19 14:06:32 +01:00
Niklas
01c338771b
Remove unused dev scripts (#667) 2024-04-30 14:28:08 +01:00
nscuro
abf6b20a31
Add license header and enforce presence with Checkstyle
Signed-off-by: nscuro <nscuro@protonmail.com>
2024-03-25 11:14:27 +01:00
nscuro
6f365b062d
Update dbschema-generate.sh schema to use Liquibase
The script spawns a fresh PostgreSQL container, generates the changelog against it, and removes it again.

Signed-off-by: nscuro <nscuro@protonmail.com>
2024-02-09 19:54:10 +01:00
nscuro
54b5b8116c
Update SPDX license list to v3.21
Ported from https://github.com/DependencyTrack/dependency-track/pull/3006

Signed-off-by: nscuro <nscuro@protonmail.com>
2023-10-20 12:52:28 +02:00
nscuro
de11bb9532
Move scripts to dev directory
Partially ported from https://github.com/DependencyTrack/dependency-track/pull/2675. Docker Compose files live in the hyades repository now and don't have to be ported here.

Signed-off-by: nscuro <nscuro@protonmail.com>
2023-10-19 16:33:37 +02:00