Cannot unmarshal number 1757589543259 into Go struct field

[Luubosi]

means that the Dependency-Track API is returning the firstOccurrence field as a very large number (most likely a timestamp in milliseconds), but the Terraform provider for Dependency-Track has this field defined as an int (32‑bit), which cannot hold such a large value.

This is a bug in the Terraform provider itself, not in your configuration.

required_providers { dependencytrack = { source = "SolarFactories/dependencytrack" version = "1.15.0" #or version = "1.14.1" }

`
Planning failed. Terraform encountered an error while generating this plan.

╷
│ Error: Unable to get updated project
│
│ with dependencytrack_project.rrr,
│ on deptrack_ris.tf line 11, in resource "dependencytrack_project" "rrr":
│ 11: resource "dependencytrack_project" "rrr" {
│
│ Error with reading project: 54ad6d80-b5cf-4980-ae37-640e5d42e868, in original error: json: cannot unmarshal number 1757589543259 into Go struct field
│ ProjectMetrics.metrics.firstOccurrence of type int
`

[SolarFactories]

The provider does not currently have functionality for Project Metrics. The error is coming from being unable to deserialize within the SDK - https://github.com/DependencyTrack/client-go, within ProjectService.Get (link). Which due to using int as the type for the milliseconds timestamp, is unable to deserialize when int is 32-bits, as you identified. Golang specification defines int as either 32 or 64 bit, depending on the architecture. Therefore, are you calling this from a 32 bit device?
The location to make the amendment is within the SDK for https://github.com/DependencyTrack/client-go/blob/main/metrics.go, to update to int64 as required - which it should be in order to match the API size implementation of int64.

[Luubosi]

Hi, thanks for the details.

Just to confirm — will this fix (changing int to int64 in the client-go SDK, specifically in metrics.go) be included in a future release of the Terraform DependencyTrack provider? If yes, do you have an estimate on when that updated provider version could be available?

For reference, my environment is:

System type: 64-bit operating system, x64-based processor
Go version: go1.25.1 windows/amd64
Dependency-Track version: 4.13.4 (https://github.com/DependencyTrack/dependency-track/releases)

Thanks!