Skip to content

Add v5.1.0 upgrade note for new X-Total-Count-Type header #228

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nscuro merged 1 commit into from
Aug 19, 2026
Merged

Add v5.1.0 upgrade note for new X-Total-Count-Type header #228

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions docs/guides/upgrading/v5.1.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,14 @@
if your deployment reports timeouts for operations that used to succeed. Setting it to `0` disables query timeouts entirely.
Repeated timeouts point at a deeper problem, such as slow I/O, lagging autovacuum, or inefficient query plans.
Report an issue if you have to increase the value permanently.

* **New `X-Total-Count-Type` response header**. REST API v1 gains support for communicating bounded total counts
via the new `X-Total-Count-Type` response header. It must be accessible by the frontend, so users who overwrite
the default [`dt.cors.allowed-headers`](../../reference/configuration/properties.md#dtcorsallowed-headers)
property must add the header there manually. Bounded total counts are a performance optimization technique
for operating on large datasets. In this version, only the `/api/v1/finding`, `/api/v1/finding/grouped`,
and `/api/v1/finding/project/{uuid}` endpoints support it.

* **Dependency-Track mirrors KEV catalogs by default**. A new task downloads the CISA and ENISA Known Exploited
Vulnerabilities catalogs daily at 02:00. Dependency-Track turns on both data sources out of the box. Deployments
with restricted egress must allow the feed hosts, or turn off the data sources they cannot reach. Change the
Expand Down