DependencyTrack / DependencyTrack/dependency-track

How to manage isLatest ?

Open
#4,954 6 comments 3 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

I don't understand how flag "isLatest" works.

### Steps to Reproduce

I have this situation:

![Image](https://github.com/user-attachments/assets/e1732db3-dcc7-4424-813a-19fb81720191)

i send a update with isLatest= true

curl -X 'POST' http://xxx:8081/api/v1/bom -H 'Content-Type: multipart/form-data' -H 'X-API-Key: ****' -F 'autoCreate=true' -F 'projectName=xxx-nginx' -F 'projectTags=PROD,xxx-GUI,PHP,ver_10032,GUI' -F 'isLatest=true' -F 'projectVersion=5.16.7' -F bom=@xxx-nginx_trivy.json -v -w '%{http_code}'

and

curl -X POST http://xxx:8081/api/v1/bom -H Content-Type: multipart/form-data -H X-API-Key: **** -F autoCreate=true -F projectName=xxxxx-php -F projectTags=xxxxxx-GUI,PHP,ver_10032,GUI -F isLatest=true -F projectVersion=5.16.7 -F bom=@xxx-php_trivy.json -v -w %{http_code}

the situation is this:

![Image](https://github.com/user-attachments/assets/eaddbc0d-9bd6-4c07-b5b3-383ecdc82170)

"Last BOM import" is correct
but "Latest" is not updated.

permission?

tnx

### Expected Behavior

When I run the Post of "isLatest=true" I would like the version to be tagged with Latest = true and all other set Latest = false

### Dependency-Track Version

4.12.x

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.