Dependencies & dependency trees gives error with Spring Boot 4

[lthasle]

Spring Boot Admin Server information

• Version:
  4.0.2

• Spring Boot version:
  4.0.2

• Configured Security:
  basic auth

• Webflux or Servlet application:
  servlet application

Client information

• Spring Boot versions:
  4.0.2

• Used discovery mechanism:
  self registration

• Webflux or Servlet application:
  servlet application

Description

** Bug report **
Dependencies & dependency don't show info.
dependency tree gives this error: Fetching of data failed. Cannot read properties of undefined (reading '0')

This is used in the client pom.xml:

org.cyclonedx
cyclonedx-maven-plugin

My client is exposing sbom info:
http://127.0.0.1:9001/api/spring-boot-admin-server/instances/26115cd79f49/actuator/sbom/application
http://127.0.0.1:8080/api/tff/actuator/sbom/application

This was working in SB3, i am using Jaca 21.

application.cdx.json

[cdprete]

Hello @lthasle.

I've the same SBA version (but with Spring Boot 4.0.3 and Java 25) and it works (almost :D) all fine for me.
See: #5154.

[lthasle]

Hmm, I have the same problem with Spring Boot 4.0.3

[cdprete]

Indeed I was not expecting that Spring Boot 4.0.2 vs 4.0.3 was the issue here.

With that being said I've no idea then, apart maybe trying to clean the browser cache and doing an hard reload.
Maybe it's somehow loading some cached JS file which is not compatible anymore.

[lthasle]

Strange, do you bother to check if my provided sbom file (application.cdx.json) works for you?

[cdprete]

Strange, do you bother to check if my provided sbom file (application.cdx.json) works for you?

That would be complicated, also because I package my own as part of the JAR itself. :)

[SteKoe]

Cannot read properties of undefined (reading '0')

This error indicates that the response might not have the correct format (e.g. an empty object {}). Does this URL http://127.0.0.1:9001/api/spring-boot-admin-server/instances/26115cd79f49/actuator/sbom/application return the contents you have provided in the attached JSON file?

Using the most current version of Spring Boot Admin, the JSON you provided shows me this graph:

[lthasle]

@SteKoe Thanks for you feedback.
The URL return the content provided in the json file.
So ff the current versjon of SBA are able to show this graph, it must be related to my SBA impl?
I have provided it as an attachment

fip-spring-boot-admin-server.zip

[cdprete]

Hi @lthasle.

I shortly checked your project and you're setting spring.boot.admin.context-path to /api/spring-boot-admin-server.
If I understand the Javadoc correctly (@SteKoe can always correct me ;)), this changes only how SBA is exposing its own resources, but you wrote

My client is exposing sbom info:
http://127.0.0.1:9001/api/spring-boot-admin-server/instances/26115cd79f49/actuator/sbom/application
http://127.0.0.1:8080/api/tff/actuator/sbom/application

Is the client that's registering against SBA server specifying correctly the context path /api/tff (as per your example)?

You can check the content of the REGISTRATION event to make sure that the managementUrl points indeed to the correct URL.

EDIT

Nevermind. You said

The URL return the content provided in the json file.

so that shouldn't be the issue.