Release version 0.4.0 #381

github-actions · 2023-05-18T15:15:21Z

This PR was created in response to a manual trigger of the release workflow.
The changelog was updated and versions have been bumped in commit 1816d9ca37dc60d3f8ad5d404c07a8334ad52b6d.

Merging this PR will create a GitHub release and upload any assets that are created as part of the release build.

…g java application

…iles docs: Lint all *.md files and replace product-edc with tractusx-edc

….3.1 release

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

feat(baseImage): replace alpine with temurin as base image for running java applications

…l_info docs: add additional info for running business tests locally

feat: Add markdown linter

chore: upstream some minor fixes necessary for creating releases

Bumps alpine from 3.17.3 to 3.18.0. --- updated-dependencies: - dependency-name: alpine dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(build): use composite action for GPG import * Update .github/actions/import-gpg-key/action.yml Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]> --------- Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* feat: add Helm chart that utilized Azure KeyVault + Postgres * pr remarks * Update charts/tractusx-connector-azure-vault/README.md.gotmpl Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]> * use cUrl instead of wget do satisfy SonarCloud --------- Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

In the controlplane deploment a required value was misspelled. Signed-off-by: Marco Lecheler <[email protected]>

Bumps [org.testcontainers:vault](https://github.com/testcontainers/testcontainers-java) from 1.18.0 to 1.18.1. - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.18.0...1.18.1) --- updated-dependencies: - dependency-name: org.testcontainers:vault dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…8.1 (#340) Bumps [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) from 1.18.0 to 1.18.1. - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.18.0...1.18.1) --- updated-dependencies: - dependency-name: org.testcontainers:junit-jupiter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…342) * feat: replace using hard-coded certs with dynamically generated ones * added az login * set AZ KeyVault secrets before deploy test * allow no sub * escape command * avoid logging of sensitive info

Bumps [org.flywaydb:flyway-core](https://github.com/flyway/flyway) from 9.17.0 to 9.18.0. - [Release notes](https://github.com/flyway/flyway/releases) - [Commits](flyway/flyway@flyway-9.17.0...flyway-9.18.0) --- updated-dependencies: - dependency-name: org.flywaydb:flyway-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ted (#359)

Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](helm/kind-action@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: helm/kind-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add migration for transferprocess_properties default value Signed-off-by: Brendan Cronin <[email protected]> * Update edc-extensions/postgresql-migration/src/main/resources/org/eclipse/tractusx/edc/postgresql/migration/transferprocess/V0_0_6__Snapshot_20230109_Update.sql Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]> * Move to new migration file Signed-off-by: Brendan Cronin <[email protected]> * Copy+Paste=Bad Signed-off-by: Brendan Cronin <[email protected]> * Empty commit * Update edc-extensions/postgresql-migration/src/main/resources/org/eclipse/tractusx/edc/postgresql/migration/transferprocess/V0_0_7__Default_Value_For_Properties.sql --------- Signed-off-by: Brendan Cronin <[email protected]> Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* Rename ingress endpoint from ids to protocol * Rename ingress endpoint from ids to protocol * fix service-runtime * fix renaming issues

* chore: remove duplicated helm-release workflow * fix omejdn chart

* feat(dsp): preparatory work for 0.4.0, i.e. the new DSP * feat(Deps): updates to the EDC snapshot and implements a version catalog * pr remarks * pr remarks feat(ControlPlaneAdapter): callback integration for transfer process (#293) * feat(ControlPlaneAdapter): callback integration for transfer process * pr remarks * adds E2E test for opening a transfer * pr remarks * pr remarks * pr remarks + fix due snapshot upgrade * switched to EDC 0.0.1-20230509-preview-SNAPSHOT feat(ControlPlaneAdapter): edr cache integration on TransferProcessStarted event (#328) * feat(ControlPlaneAdapter): edr cache integration on TransferProcessStarted event * trigger CI * removed seed from file feat: Data Plane extensions that implement DSP/AAS integration (#357) * Add DPF extensions * Updates and improcvements based on Paul's review feat(EdrManagementApi): open transfer refactor (#347) * feat(EdrManagementApi): refactor open transfer + dsp protocol switch * feat(EdrManagementApi): updates EDC to 0.0.1-milestone-9 * use version catalogs * chore: annihilate business tests (#374) * chore(test): remove business tests * fix test-infra * add SQL migrations to reflect recent upstream changes * build: add license header check (#375) * build: add verification job to probe for license headers * remove unneeded classes * improved the command * make tests dependent on lic-header check * fix CI * chore: remove old control-plane adapter (#377) * add postgres dep * changelog and migration guide --------- Co-authored-by: Enrico Risa <[email protected]>

)

gitguardian · 2023-05-18T15:15:38Z

⚠️ GitGuardian has uncovered 7 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request

GitGuardian id	Secret	Commit	Filename
3710286	Generic Private Key	`d48d22b`	edc-tests/deployment/src/main/resources/helm/test-infrastructure/values.yaml	View secret
3710286	Generic Private Key	`d48d22b`	edc-tests/deployment/src/main/resources/helm/test-infrastructure/values.yaml	View secret
6673077	Generic Private Key	`d48d22b`	.github/workflows/deploy-test-secrets	View secret
6673077	Generic Private Key	`d48d22b`	.github/workflows/deploy-test-secrets	View secret
6483013	Generic Private Key	`fcb4694`	.github/workflows/deploy-test-secrets	View secret
6673077	Generic Private Key	`05bf103`	edc-tests/cucumber/src/main/resources/deployment/helm/supporting-infrastructure/values.yaml	View secret
6704281	Generic Private Key	`05bf103`	edc-tests/cucumber/src/main/resources/deployment/helm/supporting-infrastructure/values.yaml	View secret

🛠 Guidelines to remediate hardcoded secrets

Understand the implications of revoking this secret by investigating where it is used in your code.
Replace and store your secrets safely. Learn here the best practices.
Revoke and rotate these secrets.
If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

following these best practices for managing and storing secrets including API keys and other credentials
install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.

^{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!}

sonarqubecloud · 2023-05-18T15:15:44Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.8% Duplication

Tuncay Tunc and others added 30 commits March 21, 2023 14:52

Generate OpenApi Spec

b67df83

feat(baseImage): replace alpine with temurin as base image for runnin…

5ea8fb4

…g java application

Lint and refactor mostly all *.md files

84d58ee

Lint new changes from develop branch

36b25f3

Replace appearance of product-edc with tractusx-edc

d032db8

Fix README.md and Transfer Data.md

aa952ba

Fix Transfer Data.md

bc7a1aa

Regenerate helm chart README.md files

9edbfc6

Remove left over html tags from root REAMDE.md

f34c84f

Add empty line at EOF

f9c7682

Update CODE_OF_CONDUCT.md

58205ba

Retrigger ci

b2a0156

Merge pull request #134 from florianrusch-zf/refactor/lint-markdown-f…

1640d14

…iles docs: Lint all *.md files and replace product-edc with tractusx-edc

Release: fix version handling

2dbcaec

Prepare release 0.3.1

4400500

Cherry-picked upstream commits (QGate stuff) in preparation for the 0…

aa789b2

….3.1 release

fix: use snapshot version after publish workflow

d296201

docs: add additional info for running business tests locally

b46b310

feat(CI): add Markdown linter

b20ddaa

md lint fix

c2c936c

pr remarks

b358e78

Apply suggestions from code review

4b15b47

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

Update .github/workflows/verify.yaml

15ca06f

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

Merge pull request #149 from catenax-ng/feat/130_use_eclipse_temurin

8f28b85

feat(baseImage): replace alpine with temurin as base image for running java applications

Merge pull request #146 from catenax-ng/docs/business_tests_additiona…

34967f7

…l_info docs: add additional info for running business tests locally

Merge pull request #132 from catenax-ng/build/117_add_markdown_linter

35da56a

feat: Add markdown linter

Merge pull request #158 from catenax-ng/develop

c6ea80d

chore: upstream some minor fixes necessary for creating releases

chore(md-linting): Fix markdown lint

3552723

fix: make AZKV clientsecret or certificate mutually exclusive

bbe4780

revert pointless blanks

d77e627

dependabot bot and others added 25 commits May 10, 2023 07:10

chore: Add .tractusx metafile (#335)

e920691

chore(helm): fix typo in required value in cp deployment (#337)

f11f62c

In the controlplane deploment a required value was misspelled. Signed-off-by: Marco Lecheler <[email protected]>

chore(security): use uppercase AS in Dockerfiles (#341)

f710bd0

feat: replace using hard-coded certs with dynamically generated ones (#…

d48d22b

…342) * feat: replace using hard-coded certs with dynamically generated ones * added az login * set AZ KeyVault secrets before deploy test * allow no sub * escape command * avoid logging of sensitive info

docs: add documentation about the helm charts (#352)

89410f6

exclude charts/ from markdown lint, as the markdowns there are genera…

b69afac

…ted (#359)

fix: Rename ingress endpoint from ids to protocol (#358)

a555045

* Rename ingress endpoint from ids to protocol * Rename ingress endpoint from ids to protocol * fix service-runtime * fix renaming issues

Merge branch 'releases'

d80c3cd

Introduce new snapshot version 0.3.5-SNAPSHOT

ccb221a

chore: remove duplicated helm-release workflow (#372)

a9c2ddf

* chore: remove duplicated helm-release workflow * fix omejdn chart

removed version-catalog module

27fdbd0

fix(migrations): remove transferprocess_properties column renaming (#380

20e30b2

)

Prepare release 0.4.0

1816d9c

github-actions bot requested a review from paullatzelsperger May 18, 2023 15:15

paullatzelsperger approved these changes May 18, 2023

View reviewed changes

paullatzelsperger merged commit a254ca1 into releases May 18, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release version 0.4.0 #381

Release version 0.4.0 #381

github-actions bot commented May 18, 2023

gitguardian bot commented May 18, 2023

sonarqubecloud bot commented May 18, 2023

Release version 0.4.0 #381

Release version 0.4.0 #381

Conversation

github-actions bot commented May 18, 2023

gitguardian bot commented May 18, 2023

⚠️ GitGuardian has uncovered 7 secrets following the scan of your pull request.

sonarqubecloud bot commented May 18, 2023