From e53a81f8b2cf0bc5163f961622d3db99dbd4ac73 Mon Sep 17 00:00:00 2001 From: nscuro Date: Sun, 20 Sep 2026 20:26:19 +0200 Subject: [PATCH] Add upgrade notes for 5.1.1 Signed-off-by: nscuro --- docs/guides/upgrading/.pages | 1 + docs/guides/upgrading/index.md | 1 + docs/guides/upgrading/v5.1.1.md | 11 +++++++++++ docs/guides/upgrading/v5.2.0.md | 4 ++++ 4 files changed, 17 insertions(+) create mode 100644 docs/guides/upgrading/v5.1.1.md diff --git a/docs/guides/upgrading/.pages b/docs/guides/upgrading/.pages index 345497f7..94bc29d2 100644 --- a/docs/guides/upgrading/.pages +++ b/docs/guides/upgrading/.pages @@ -2,6 +2,7 @@ title: Upgrade guides nav: - index.md - v5.2.0.md + - v5.1.1.md - v5.1.0.md - v5.0.5.md - v5.0.0-rc.2.md diff --git a/docs/guides/upgrading/index.md b/docs/guides/upgrading/index.md index a04c4b7b..a3dfc89a 100644 --- a/docs/guides/upgrading/index.md +++ b/docs/guides/upgrading/index.md @@ -24,6 +24,7 @@ in a release, including features and bug fixes, see the release notes on GitHub: ## Version 5 releases - [Upgrading to v5.2.0](v5.2.0.md) +- [Upgrading to v5.1.1](v5.1.1.md) - [Upgrading to v5.1.0](v5.1.0.md) - [Upgrading to v5.0.5](v5.0.5.md) - [Upgrading to v5.0.0-rc.2](v5.0.0-rc.2.md) diff --git a/docs/guides/upgrading/v5.1.1.md b/docs/guides/upgrading/v5.1.1.md new file mode 100644 index 00000000..2e560655 --- /dev/null +++ b/docs/guides/upgrading/v5.1.1.md @@ -0,0 +1,11 @@ +# Upgrading to v5.1.1 + +* **The upgrade forces a full GitHub Advisories and OSV mirror**. Dependency-Track derived CVSSv4 scores from the + base metrics alone, which reported a higher severity than the source did for advisories that also carry threat + metrics. The upgrade purges the watermarks that both data sources use to track incremental progress. + Existing data stays in place, but the next run of each source processes its full data set and overwrites the + affected records. Mirroring is much faster in this release, so a full run takes less time than it did in earlier versions. + + Corrected data is not available until the mirrors run, which happens daily at 02:00 UTC for GitHub Advisories + and 03:00 UTC for OSV by default. To get the corrected data sooner, use **Mirror now** as described in + [Triggering an initial mirror](../administration/configuring-vulnerability-sources.md#triggering-an-initial-mirror). diff --git a/docs/guides/upgrading/v5.2.0.md b/docs/guides/upgrading/v5.2.0.md index 1b30dacb..49da0517 100644 --- a/docs/guides/upgrading/v5.2.0.md +++ b/docs/guides/upgrading/v5.2.0.md @@ -1,5 +1,9 @@ # Upgrading to v5.2.0 +!!! note + + This version is not yet released. + * **Service accounts reserve the `svc:` username prefix**. This release adds [service accounts][access-control-svc]. Existing users whose username starts with `svc:`, in any letter case, collide with that reservation.