Update DB to remove possible unstable versions from analysis cache an…

…d repository metadata

Signed-off-by: Walter de Boer <[email protected]>

src/main/java/org/dependencytrack/upgrade/UpgradeItems.java

@@ -36,6 +36,7 @@ class UpgradeItems {
         UPGRADE_ITEMS.add(org.dependencytrack.upgrade.v463.v463Updater.class);
         UPGRADE_ITEMS.add(org.dependencytrack.upgrade.v470.v470Updater.class);
         UPGRADE_ITEMS.add(org.dependencytrack.upgrade.v480.v480Updater.class);
+        UPGRADE_ITEMS.add(org.dependencytrack.upgrade.v490.v490Updater.class);
     }
 
     static List<Class<? extends UpgradeItem>> getUpgradeItems() {

src/main/java/org/dependencytrack/upgrade/v490/v490Updater.java

@@ -0,0 +1,51 @@
+/*
+ * This file is part of Dependency-Track.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ * Copyright (c) Steve Springett. All Rights Reserved.
+ */
+package org.dependencytrack.upgrade.v490;
+
+import alpine.common.logging.Logger;
+import alpine.persistence.AlpineQueryManager;
+import alpine.server.upgrade.AbstractUpgradeItem;
+import alpine.server.util.DbUtil;
+
+import java.sql.Connection;
+import java.sql.PreparedStatement;
+
+public class v490Updater extends AbstractUpgradeItem {
+
+    private static final Logger LOGGER = Logger.getLogger(v490Updater.class);
+
+    @Override
+    public String getSchemaVersion() {
+        return "4.9.0";
+    }
+
+    @Override
+    public void executeUpgrade(final AlpineQueryManager qm, final Connection connection) throws Exception {
+        removeUnstableVersionsFromAnalysisCacheAndRepoMetadata(connection);
+    }
+
+    private void removeUnstableVersionsFromAnalysisCacheAndRepoMetadata(Connection connection) throws Exception {
+        // Versions with a '-' in it probably indicate unstable versions. Remove them all
+        // from component analysis cache and repository metadata
+        // See: https://github.com/DependencyTrack/dependency-track/issues/2500
+        LOGGER.info("Removing possible unstable versions from component analysis cache");
+        DbUtil.executeUpdate(connection, "DELETE FROM \"COMPONENTANALYSISCACHE\" WHERE RESULT LIKE '%-%'");
+        LOGGER.info("Removing possible unstable versions from repository metadata");
+        DbUtil.executeUpdate(connection, "DELETE FROM \"REPOSITORY_META_COMPONENT\" WHERE LATEST_VERSION LIKE '%-%'");
+    }}