Skip to content

Backport: Use ecosystem-aware version comparison for latest version detection#5995

Merged
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-5993
Apr 3, 2026
Merged

Backport: Use ecosystem-aware version comparison for latest version detection#5995
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-5993

Conversation

@nscuro
Copy link
Copy Markdown
Member

@nscuro nscuro commented Apr 2, 2026

Description

This was missed when originally introducing versatile. Both the Composer and NuGet meta analyzer rely on manual version comparison to determine the latest component version. Both used ComparableVersion before, which is a class from Maven, and thus can only apply Maven-specific semantics.

Addressed Issue

Backports #5993

Additional Details

N/A

Checklist

  • I have read and understand the contributing guidelines
  • This PR fixes a defect, and I have provided tests to verify that the fix is effective
  • This PR implements an enhancement, and I have provided tests to verify that it works as intended
  • This PR introduces changes to the database model, and I have added corresponding update logic
  • This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

This was missed when originally introducing versatile. Both the Composer and NuGet meta analyzer rely on manual version comparison to determine the latest component version. Both used ComparableVersion before, which is a class from Maven, and thus can only apply Maven-specific semantics.

Signed-off-by: nscuro <[email protected]>
@nscuro nscuro added this to the 4.14.1 milestone Apr 2, 2026
@nscuro nscuro added the defect Something isn't working label Apr 2, 2026
@owasp-dt-bot
Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production
Copy link
Copy Markdown

codacy-production bot commented Apr 2, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 5 complexity · 0 duplication

Metric Results
Complexity 5
Duplication 0

View in Codacy

🟢 Coverage 70.59% diff coverage · -0.05% coverage variation

Metric Results
Coverage variation -0.05% coverage variation (-1.00%)
Diff coverage 70.59% diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (59784ef) 24774 20111 81.18%
Head commit (9b28f41) 24793 (+19) 20115 (+4) 81.13% (-0.05%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#5995) 51 36 70.59%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

TIP This summary will be updated as you push new changes. Give us feedback

@nscuro nscuro merged commit ea5de6f into DependencyTrack:4.14.x Apr 3, 2026
8 of 9 checks passed
@nscuro nscuro deleted the backport-pr-5993 branch April 3, 2026 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

defect Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants