Fix ClassCastException when updating an existing `ProjectMetadata#a…

…uthors` field (#592)
DependencyTrack · Feb 22, 2024 · b0cd96b · b0cd96b
1 parent 0dcce96
commit b0cd96b
Show file tree

Hide file tree

Showing 3 changed files with 128 additions and 81 deletions.
diff --git a/src/main/java/org/dependencytrack/tasks/BomUploadProcessingTask.java b/src/main/java/org/dependencytrack/tasks/BomUploadProcessingTask.java
@@ -317,7 +317,9 @@ private void processBom(final Context ctx, final File bomFile) throws BomConsump
                         qm.getPersistenceManager().makePersistent(projectMetadata);
                     } else {
                         project.getMetadata().setSupplier(projectMetadata.getSupplier());
-                        project.getMetadata().setAuthors(projectMetadata.getAuthors());
+                        project.getMetadata().setAuthors(projectMetadata.getAuthors() != null
+                                ? new ArrayList<>(projectMetadata.getAuthors())
+                                : null);
                     }
                 }
                 final Map<ComponentIdentity, Component> persistentComponents =