News

Announcements & releases

Project news, release highlights, and updates from the Dependency-Track community.

ReleaseOctober 8, 2026

Dependency-Track 5.2.0 Is Out

Service accounts and workload identity federation let pipelines authenticate without long-lived API keys. Also new: control over where the server connects, signed webhooks, and policies that exclude tagged projects.

Read the announcement

ReleaseAugust 31, 2026

Dependency-Track 5.1.0 Is Out

The first feature release on the v5 foundation adds known exploited vulnerability tracking, VEX documents that name the affected component, CycloneDX 1.7 ingestion, and a portfolio analysis that stops running in one daily burst.

ReleaseJune 9, 2026

OWASP Dependency-Track 5.0 Is Now Generally Available

The largest redesign in the project's history brings horizontal scaling, fault tolerance, and software supply chain integrity verification to the widely used open source platform.