News

Announcements & releases

Project news, release highlights, and updates from the Dependency-Track community.

ReleaseAugust 31, 2026

Dependency-Track 5.1.0 Is Out

The first feature release on the v5 foundation adds known exploited vulnerability tracking, VEX documents that name the affected component, CycloneDX 1.7 ingestion, and a portfolio analysis that stops running in one daily burst.

Read the announcement

ReleaseJune 9, 2026

OWASP Dependency-Track 5.0 Is Now Generally Available

The largest redesign in the project's history brings horizontal scaling, fault tolerance, and software supply chain integrity verification to the widely used open source platform.