Update project specific dependencies to latest published stable release

[hgo-ds]

As TRX Developer,
I want to have project specific dependencies up to date and stable,
so that no SNAPSHOT libraries are in use when trace-x is released.

Hints / Details

• Third-party libraries, even from project tractus-x should be stable.
  Using SNAPHOT-Releases should be avoided:
  

  traceability-foss/pom.xml

  Line 105 in 3e98237

  <irs-client-lib.version>1.6.0-SNAPSHOT</irs-client-lib.version>

Acceptance Criteria

• Project specific dependencies are up to date and stable.

Out of Scope

• ./.

[ds-lcapellino]

Thanks for raising this issue. We will have an analysis and will come back to you if we have any questions. Please feel free to participate in the open planning for any other concerns.

[hgo-ds]

Thanks @ds-lcapellino ,
This topic should be added to #658 as well.

[mkanal]

Hey @ds-jhartmann
we should provide a stable library, we should not provide SNAPSHOTS in the future. We release after each iteration, and this release should not depend on SNAPSHOT versions. We should update the maven version with those we are using for GitHub release. Are we able to combine maven and gthub release? Do we need a investigation story for this?

[ds-jhartmann]

Hi @mkanal,
The IRS does not rely on the published maven dependency, since we use the module directly in our code. So from IRS perspective we do not have the need to provide a new release for each IRS release.
During active development we should stay on snapshots and only create a new version once trace-foss needs it.

[hgo-ds]

Within the IRS, this is probably exactly right.

However, for applications that include the library, such as trace-x, a stable (not SNAPSHOT) version of the IRS client lib should be declared when creating a trace-x release.

Since the trace-x releases are regularly merged into the fork, stable versions of trace-x releases should be used for integrated libraries.

Otherwise, I assume, no deterministic behavior is guaranteed, since the SNAPSHOT version can change at any time.

[ds-lcapellino]

We will adapt our release process to always release the irs-edc-client lib first and use the released version for the Trace-X release. With this, there should be not SNAPSHOT versions in tagged releases anymore. However, we still use SNAPSHOT versions in our main branch.

I'll provide an update as soon as our release process has been adapted.

[ds-lcapellino]

Hi @hgo-ds ,
we've updated our release workflow to not use snapshot versions in tagged releases.
PR: catenax-ng#1051
If you have any further questions, feel free to reopen this issue.

Best
Lucas

[mkanal]

@ds-jhartmann @hgo-ds @ds-lcapellino
Thank you very much for this valuable exchange.

fyi @jzbmw

[hgo-ds]

Thanks @ds-lcapellino for providing that solution.

Issue is solved.

Regards
Heinrich