DependencyTrack / DependencyTrack/dependency-track

Disabling a project version retroactively updates graph

Open
#7,209 1 comment 1 reaction 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

When deactivating a project version historical data (dashboard / project graph) is affected. The graph is displayed as if the deactivated version never existed.

### Steps to Reproduce

1. Create multiple project versions
2. Update dashboard graph
3. Deactivate a version
4. Update graph again

### Expected Behavior

The graph before deactivating a version stays unaffected

### Dependency-Track Version

5.x

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/main/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Research direction

Reproduce the issue by creating multiple project versions, updating the dashboard graph, deactivating one version, and updating the graph again. Start by tracing the dashboard and project graph handling of version deactivation; done means the graph captured before deactivation remains unchanged afterward.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
data-visualization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.