Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog

[Unreleased]

Fixed

Dependabot reported security issues fixed.

Changed

Updated API health check details in documentation

[2.1.12] - 2024-05-14

Fixed

Fixed the CVE-2024-22262 springframework URL Parsing with Host Validation security issue

Changed

updated images in docs folder

[2.1.11] - 2024-05-02

Fixed

Fixed the CVE-2024-22259 and CVE-2024-22257 security issue
Upgraded base image due to vulnerability

Changed

unused configuration entries in application.yml are not mandatory (e.g. app.usersDetails.custodianWallet for catena-x-ctx profile)
if test profile is active then authentication is turned off for the service
files placed to the resources/verifiablecredentials directory are served by the service's web-server as static resources. If a file has .jsonld extension then correct Content-Type is set for it even if extension is missed in URL (e.g. for URL https://{SERVICE_HOST}/context/sd-document-v2210 the file resources/verifiablecredentials/sd-document-v2210.jsonld is returned while Content-Type is set to application/ld+json)
correct Content-Type is set for YAML extension (can be application/yaml or text/yaml)

[2.1.10] - 2024-02-28

Changed

Updated Spring Boot to 3.2.3 to fix CVE-2024-22234 and CVE-2024-22243
Provided multi-arch image of sdfactory
Updated default imagePullPolicy
Updated probes in values file so that it can be configurable
Updated ARC42 document notice section
Updated security context
Header update in .tractusx file
Updated installation steps in Install.md

[2.1.9] - 2024-01-30

Fixed

Fixed the CVE-2023-3635 security issue
Fixed the CVE-2023-6481 security issue
Fixed the CVE-2023-33202 security issue
Fixed veracode security CVE-2023-6378(logback-classic Denial Of Service)
Upgrade Spring Boot to get rid of CVE-2023-46589 and CVE-2023-34053

[2.1.8] - 2023-11-27

Changed

Security fix for bouncycastle which can have DoS issue
Updated base image
Updated workflow for helm lint
helm upgrade workflow fix
Refactoring SD Factory

[2.1.7] - 2023-10-05

Added

Unification of SDFactory versions for different contexts and MIW
Added support for FC schema.
Added type to the subject
Added BPN to the ServiceOffering subject as it was before

Changed

Updated helm lint

Removed

Disable signing VC

[2.1.6] - 2023-08-21

Added

Added CPU, memory request and limits

Changed

Updated pom.xml

Removed

Removed ghcr.io references and switched to DockerHub
Removed hostnames from values.yaml

[2.1.5] - 2023-08-21

Added

Added headers in java files

[2.1.4] - 2023-07-31

Changed

Updated the workflow to create the image in docker hub

[2.1.3] - 2023-07-31

Added

Added changes for Gaia-x compliance

Changed

Updated the documentation

[2.1.2] - 2023-07-20

Changed

Upgraded the guava android library

[2.1.1] - 2023-06-23

Added

Added helm lint in the repository

[2.1.0] - 2023-06-21

Fixed

Upgraded spring boot library due to security issue

[2.0.9] - 2023-05-29

Added

Added health check endpoint for SD factory

Changed

Changed Code of Conduct

[2.0.8] - 2023-05-15

Added

Added CPU, Memory details
Added Header in files

[2.0.7] - 2023-05-09

Added

Added Container images section in the README.md file that contains information about the used base image

Changed

Specified runAsUser for the deployment
Specified USER command in Dockerfile using IDs instead of just name

[2.0.6] - 2023-05-02

Added

Added .tractusx file

Changed

Updated librabries and upgrade spring boot

[2.0.5] - 2023-04-24

Fixed

Fixed spring security web veracode security by upgrading its version to 6.0.3

Changed

refactoring: removing keycloak-admin, webclient; introducing feign

[2.0.4] - 2023-04-19

Added

Added spring expression 6.0.8

[2.0.3] - 2023-04-11

Changed

Spring Boot upgrade to 3.0.5

[2.0.2] - 2023-03-23

Changed

Upgrade Spring Boot to 3.0.3
Upgrade Snakeyaml to 2.0 as 1.33 has security issue
Readme correction
Authors.md modification
Dockerfile modification

[2.0.1] - 2023-02-23

Added

call compliance service after getting the signature for asynchronous processing
add async support.

Removed

Remove 22.10 API from endpoint

Changed

schema was changed so registrationNumber is an array of documents with type and value fields
removed support for 22.10 as OpenAPI yaml is buggy and there ara complains from KICS

[1.2.1] - 2023-02-17

Added

Added AUTHORS.md, INSTALL.md file
Added .helmignore file
Added service port to values.yaml

Changed

Changed versions & installations steps in Readme
Changed secrets manifest in secret.yaml

[1.2.0] - 2023-01-16

Added

added a converter to support Trust Framework 22.10 keeping old API v1.0.6
introduce vavr.io library for neater code
add support for all versions of Trust Framework in a single project

Changed

rename endpoint path to reflect API version (/api/22.04/selfdescription)
better error propagation from the Custodian to get more details on an error
update Spring Boot from 2.7.5 -> 2.7.6
update springdoc-openapi-ui 1.6.12 -> 1.6.13
update keycloak-admin-client 19.0.3 -> 20.0.2
update com.google.protobuf 3.21.9 -> 3.21.11
update openapi-generator-maven-plugin 6.2.0 -> 6.2.1

[1.1.0] - 2022-11-23

Added

compatibility with Trust Framework V.22.04.
Better Exception handling
parameters validation
new schema of sd documents for TermsOfConditions, PhysicalResource, VirtualResource and InstantiatedVirtualResource

[1.0.6] - 2022-10-22

Added helm release, versioning & tagging

Added

Generate self description for LegalPerson
Generate self description for ServiceOffering
Keycloak protection is added

Changed

Generate the controller from the openAPI description
Update all the used libraries to the latest version
Change the representation of the consumed content type to application/json
All smells from SonarQube were fixed
Moved helm charts from helm/ to charts

Removed

Controller has been removed