Merge pull request #141 from catenax-ng/for-sync-qg

For sync qg

.github/workflows/helm-lint.yaml

@@ -39,7 +39,7 @@ on:
       upgrade_from:
         description: 'Managed service orchestrator service chart version to upgrade from'
         #  version from 3.1 release
-        default: '1.4.2'
+        default: '1.5.6'
 
 jobs:
   lint-test:

.github/workflows/kics.yml

@@ -18,7 +18,6 @@
 #* SPDX-License-Identifier: Apache-2.0
 #********************************************************************************
 
-
 name: "KICS"
 
 on:

.tractusx

@@ -1,2 +1,22 @@
+#################################################################################
+# Copyright (c) 2022,2024 T-Systems International GmbH
+# Copyright (c) 2022,2024 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License, Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0.
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+################################################################################
+
 product: "managed-service-orchestrator"
 leadingRepository: "https://github.com/eclipse-tractusx/managed-service-orchestrator"

CHANGELOG.md

@@ -5,7 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
- - The customer already gets an email from Portal and the third-Party-provider after the successful deployment that the SDE-Service is ready to use. If the connector End2End test is unsuccessful (this might be based on the cloud communication issue), the customer will be informed about the failing connectivity. This behavior might need to be clarified for the customer. We will change this behavior in the next release.
+
+
+## [1.5.7] - 2024-03-13
+### Fixed
+- Fixed CVE-2024-22234 and CVE-2024-22243
+- Fixed Trivy security issue CVE-2024-1597
+- Fix helm repo name in `INSTALL.md` (#89)
+- Fix link to temurin repository in "Notice for Docker images" (#90)
+- Remove default connection test, that prevented helm test to succeed (#92)
+- Fix Chart names in helm test step (#95)
+
+### Changed
+- Update Spring Boot to version 3.2.3
+- Update commons-text, commons-io, commons-compres, bcprov, bcpkix, snappy-java, jakarta.activation-api
+- Fixed trivy security issues CVE-2023-34053, CVE-2023-46589, CVE-2023-6378
 
 ## [1.5.6] - 2023-11-21
 
@@ -40,16 +54,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ### Changed
  - Update DT asset creation for oauth secret information
-
-## [1.5.1] - 2023-10-16
-### Changed
- - Update DT asset creation for oauth secret information
+ - Updated trivy workflow
+ - Changed the base image for security issue
 
 ## [1.5.0] - 2023-09-04
 
+[App release 1.5.0](https://github.com/eclipse-tractusx/managed-service-orchestrator/releases/tag/v1.5.0)
+
 ### Changed
  - Support DDTR 3.2 for external subject id
- 
+
 ## [1.4.2] - 2023-08-22
 
 ### Changed
@@ -63,7 +77,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  - CPU/Memory updated in values file
  - Updated documentation
  - Updated Security file
- 
+
 ### Fixed
  - Security issue fix
 
@@ -73,22 +87,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  - Corrected image for Trviy workflow
  - Email notification only on successful component connetcivity test
  - Corrected email template
- 
+
 ## [1.4.0] - 2023-08-17
 
 ### Fixed
  - Security issue fixed
- 
+
 ## [1.3.9] - 2023-08-14
 
 ### Added
  - Added interface document
- 
+
 ## [1.3.8] - 2023-08-04
 
 ### Changed
  - Updated the document
- 
+
 ## [1.3.7] - 2023-08-01
 
 ### Added
@@ -102,18 +116,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ## [1.3.6] - 2023-07-17
 
 ### Added
- - Refactor technical user use for bpdm and portal backend for SDE 
+ - Refactor technical user use for bpdm and portal backend for SDE
 
 ## [1.3.5] - 2023-07-12
 
 ### Added
  - Support for tool app/service type in autosetup
- 
+
 ## [1.3.4] - 2023-07-11
 
 ### Changed
  - Updated the ARC42 document
- 
+
 ## [1.3.3] - 2023-07-06
 
 ### Changed
@@ -131,7 +145,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ### Changed
  - Updated SDE to combine frontend & backend helm charts
- 
+
 ## [1.3.0] - 2023-06-23
 
 ### Fixed
@@ -148,23 +162,23 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ### Fixed
  - Fixed spring core security issue
- 
+
 ### Changed
  - Changed name of repository
 
 ## [1.2.7] - 2023-05-16
 
 ### Added
  - Added header to the files
- 
+
 ### Changed
  - Changed default ingress to false
- 
+
 ## [1.2.6] - 2023-05-10
 
 ### Added
  - Added .tractusx file
- 
+
 ### Fixed
  - Veracode security issue fixes
  - Fixed DEPENDENCIES file issue
@@ -221,7 +235,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Changed
  - Supports EDC connector 0.1.6
  - Changed base image to eclipse-temurin
- 
+
 
 ## [1.1.5] - 2023-03-02
 
@@ -245,10 +259,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  - Added semantic versioing
  - Update bounce crystel lib version
  - Organisation name with more special character support
- - Hot fix of Multi requesting of Managed SDE 
- - update tomcat, spring security version 
- 
-### Removed 
+ - Hot fix of Multi requesting of Managed SDE
+ - update tomcat, spring security version
+
+### Removed
  - Removed tag from values.yaml
 
 ## [1.1.0] - 2023-02-01
@@ -257,7 +271,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  - Addded Daps wrapper service
  - test issue fix and update dft package as deployment
  - Added .helmignore
- 
+
 ### Changed
 - Moved helm charts from `helm/` to `charts`
 
@@ -267,7 +281,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  - Added helm release
  - Added versioning
  - Added tagging
- - Move ARC42.md to docs directory 
+ - Move ARC42.md to docs directory
 
 ## [1.0.0] - 2022-10-21
 
@@ -280,7 +294,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Autosetup process is based on KubeApps
 
 ### Changed
-- Integration to Catena-X Portal 
+- Integration to Catena-X Portal
 
 ### Known knowns
 - Cross side scripting (XSS) shall be mitigated (low risk)