Align naming of isLatest parameter between PUT and POST endpoints for BOM upload

[apollo13]

Current Behavior

I am autocreating projects during BOM submission like this:

curl --silent --fail-with-body -X "POST" "http://host:20010/api/v1/bom" \
        -H "Content-Type: multipart/form-data" \
        -H "X-Api-Key: xxxxxx" \
        -F "autoCreate=true" \
        -F "projectName=test2" \
        -F "projectVersion=1" \
        -F "isLatestProjectVersion=true" \
        -F "bom=@sbom.cdx.json"

Looking into the dashboard the project is created properly but isLatestProjectVersion doesn't seem to have any effect:

Steps to Reproduce

1. Execute the command mentioned above
2. Observe the missing "latest" flag in Dtrack.

Expected Behavior

The "latest" project flag should get updated.

Dependency-Track Version

4.13.0

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

17

Browser

N/A

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this defect was already reported

[nscuro]

For the POST endpoint the field is called isLatest:

dependency-track/src/main/java/org/dependencytrack/resources/v1/BomResource.java

Line 408 in bc241ea

@DefaultValue("false") @FormDataParam("isLatest") boolean isLatest,

[apollo13]

Ah indeed, sorry for the noise. Didn't realize that subtle difference between PUT & POST. Would be great if the behavior between the two were consistent -- should I leave the ticket open?

[nscuro]

It's documented like this in the OpenAPI spec:

If we want to align both we need an additional parameter in order to keep in backward-compatible.

I'll leave this open, but rename it so it better reflects your ask.