Merge branch 'master' into i18n

Signed-off-by: Marlon Pina Tojal <[email protected]>

.github/workflows/_meta-build.yaml

@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Set up NodeJs
         uses: actions/[email protected]
@@ -68,7 +68,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Download Artifacts
         uses: actions/[email protected]
@@ -79,13 +79,13 @@ jobs:
         uses: docker/[email protected]
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.1.0
+        uses: docker/setup-buildx-action@v3.2.0
         id: buildx
         with:
           install: true
 
       - name: Login to Docker.io
-        uses: docker/login-action@v3.0.0
+        uses: docker/login-action@v3.1.0
         if: ${{ inputs.publish-container }}
         with:
           registry: docker.io
@@ -103,7 +103,7 @@ jobs:
           echo "tags=${TAGS}" >> $GITHUB_OUTPUT
 
       - name: Build multi-arch Container Image
-        uses: docker/build-push-action@v5.1.0
+        uses: docker/build-push-action@v5.3.0
         with:
           tags: ${{ steps.tags.outputs.tags }}
           build-args: |-
@@ -116,7 +116,7 @@ jobs:
 
       - name: Run Trivy Vulnerability Scanner
         if: ${{ inputs.publish-container }}
-        uses: aquasecurity/trivy-action@0.18.0
+        uses: aquasecurity/trivy-action@0.19.0
         with:
           image-ref: docker.io/dependencytrack/frontend:${{ inputs.app-version }}
           format: 'sarif'

.github/workflows/ci-publish.yaml

@@ -20,7 +20,7 @@ jobs:
           fi
 
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Parse Version from package.json
         id: parse
@@ -46,7 +46,7 @@ jobs:
       - call-build
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Download Artifacts
         uses: actions/[email protected]

.github/workflows/ci-release.yaml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Set up NodeJs
         uses: actions/[email protected]

.github/workflows/codeql-analysis.yaml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/dependency-review.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Dependency Review
         uses: actions/dependency-review-action@v4

.github/workflows/lint.yaml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/[email protected].1
+        uses: actions/[email protected].2
 
       - name: Set up NodeJs
         uses: actions/[email protected]

README.md

@@ -87,7 +87,7 @@ Note to developers: Textual labels are defined in `src/i18n/locales/{lang}.json`
 
 ## Copyright & License
 
-Dependency-Track is Copyright (c) Steve Springett. All Rights Reserved.
+Dependency-Track is Copyright (c) OWASP Foundation. All Rights Reserved.
 
 Permission to modify and redistribute is granted under the terms of the
 Apache 2.0 license. See the [LICENSE] file for the full license.

docker/Dockerfile.alpine

@@ -1,4 +1,4 @@
-FROM nginxinc/nginx-unprivileged:1.25.4-alpine@sha256:c50bd1116f195ac5c10a84c008ced70afec201508433701967e35e565cfb0a6b
+FROM nginxinc/nginx-unprivileged:1.25.4-alpine@sha256:e5a49a7c7ce0b31af96bf676a3b8e7ef2f6ac1de62c86d9c84bc8083fa402948
 
 # Arguments that can be passed at build time
 ARG COMMIT_SHA=unknown