PATCH v1/project/{id} doesn't update externalReferences

[heubeck]

Current Behavior

A project imported via the api using
PUT v1/bom which BOM doesn't contain any externalReferences shall is updated using
PATCH v1/project/{id} with externalReferences, but api server responds with 304.

Reproducing on api-server 4.8.0 using curl:

curl -H "Content-Type: application/json" -H "X-API-Key: for-my-eyes-only" https://dependency-track-is-awe.some/api/v1/project/098f5f0b-2e3c-43c6-bcd9-0885d6524611 -X PATCH -d '{"externalReferences":[{"type":"vcs","url":"https://github.com/my-awesome/project"}]}'

Result: http 304, no change in the project
Further properties to the PATCH payload get respected and the project changes.

Steps to Reproduce

1. create a project using PUT v1/bom - but probably that's not the matter
2. look at the project using GET v1/project/{id} or the UI: no externalReferences
3. PATCH v1/project/{1} with externalReferences
4. look again: still no externalReferences

Expected Behavior

external references can get updated using PATCH v1/project/{id}

Dependency-Track Version

4.8.0

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

14

Browser

Google Chrome

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this defect was already reported

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.