Skip to content

Latest commit

 

History

History
600 lines (514 loc) · 24.3 KB

CHANGELOG.md

File metadata and controls

600 lines (514 loc) · 24.3 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Security

Added

Changed

Fixed

2.0.1 - 2025-02-07

Added

  • Add more migration tests.
  • Remove deleted resources also from search index (if available)

Changed

  • ACL entries of resources are now always available

Fixed

  • Fix error determining correct format of metadata document.
  • Fix problem with transaction while migrating to V2. (remove old ids)

Libs

  • Update dependency com.google.guava:guava to v33.4.0-jre
  • Update dependency com.networknt:json-schema-validator to v1.5.5
  • Update dependency edu.kit.datamanager:repo-core to v1.2.5
  • Update dependency edu.kit.datamanager:service-base to v1.3.3
  • Update dependency gradle to v8.12.1
  • Update dependency org.apache.commons:commons-text to v1.13.0
  • Update dependency org.apache.tika:tika-core to v3.1.0
  • Update dependency org.postgresql:postgresql to v42.7.5
  • Update dependency org.mockito:mockito-core to v5.15.2
  • Update dependency org.springframework.cloud:spring-cloud-gateway-mvc to v4.2.0
  • Update dependency org.springframework.cloud:spring-cloud-starter-config to v4.2.0
  • Update dependency org.springframework.cloud:spring-cloud-starter-netflix-eureka-client to v4.2.0
  • Update dependency org.springframework.data:spring-data-elasticsearch to v5.4.2
  • Update dependency org.springframework:spring-messaging to v6.2.2
  • Update springDocVersion to v2.8.4

Plugins

  • Update plugin io.freefair.lombok to v8.12.1
  • Update plugin io.freefair.maven-publish-java to v8.12.1
  • Update plugin io.spring.dependency-management to v1.1.7
  • Update plugin net.researchgate.release to v3.1.0
  • Update plugin org.asciidoctor.jvm.convert to v4.0.4
  • Update plugin org.owasp.dependencycheck to v12.0.2
  • Update plugin org.springframework.boot to v3.4.2

2.0.0 - 2024-11-29

Added

  • REST API V2

Changed

  • DataCite is now supported as administrative metadata (API V2)
  • Update to Java 21
  • Update dependency gradle to v8.11.1
  • Update rabbitmq Docker tag to v4
  • Update eclipse-temurin Docker tag to v23

Libs

  • Update dependency ajv to v8.17.1
  • Update dependency com.google.errorprone:error_prone_core to v2.36.0
  • Update dependency com.networknt:json-schema-validator to v1.5.4
  • Update dependency commons-io:commons-io to v2.18.0
  • Update dependency edu.kit.datamanager:repo-core to v1.2.3
  • Update dependency edu.kit.datamanager:service-base to v1.3.2
  • Update plugin io.freefair.lombok to v8.11
  • Update plugin io.freefair.maven-publish-java to v8.11
  • Update dependency jacoco to v0.8.12
  • Update dependency org.javers:javers-core to v7.7.0
  • Update plugin net.ltgt.errorprone to v4.1.0
  • Update dependency org.apache.tika:tika-core to v3
  • Update plugin org.owasp.dependencycheck to v11
  • Update dependency org.mockito:mockito-core to v5.14.2
  • Bump org.postgresql:postgresql from 42.7.3 to 42.7.4
  • Update plugin org.springframework.boot to v3.3.6
  • Update dependency org.springframework.data:spring-data-elasticsearch to v5.4.0
  • Update dependency org.springframework.restdocs:spring-restdocs-mockmvc to v3.0.3
  • Update dependency org.springframework:spring-messaging to v6.2.0
  • Update dependency org.springframework.cloud:spring-cloud-gateway-mvc to v4.1.6
  • Update dependency org.springframework.cloud:spring-cloud-starter-config to v4.1.3
  • Update dependency org.springframework.cloud:spring-cloud-starter-netflix-eureka-client to v4.1.4
  • Bump org.springframework.data:spring-data-elasticsearch from 5.3.3 to 5.3.4.

Deprecated

  • API V1

1.4.4 - 2024-08-20

Changed

  • Bump gradle from 8.7 to 8.8.
  • Forbid upper cases in schemaIDs.

Libs

  • Bump com.google.errorprone:error_prone_core from 2.26.1 to 2.30.0
  • Bump com.gorylenko.gradle-git-properties from 2.4.1 to 2.4.2
  • Bump com.h2database:h2 from 2.2.224 to 2.3.232
  • Bump com.networknt:json-schema-validator from 1.4.0 to 1.5.1
  • Bump io.spring.dependency-management from 1.1.4 to 1.1.6
  • Bump io.freefair.lombok from 8.6 to 8.10
  • Bump io.freefair.maven-publish-java from 8.6 to 8.10
  • Bump javersVersion from 7.4.2 to 7.6.1
  • Bump net.ltgt.errorprone from 3.1.0 to 4.0.1
  • Bump org.asciidoctor.jvm.convert from 4.0.2 to 4.0.3
  • Bump org.mockito:mockito-core from 5.11.0 to 5.12.0
  • Bump org.owasp.dependencycheck from 9.1.0 to 10.0.3
  • Bump org.springframework.boot from 3.2.5 to 3.3.2
  • Bump org.springframework.cloud:spring-cloud-gateway-mvc from 4.1.3 to 5.3.1.
  • Bump springDocVersion from 2.5.0 to 2.6.0

Github Actions

  • Bump docker/build-push-action from 5 to 6

1.4.3 - 2024-04-19

Deprecated

  • Search API of Metadata Management Controller

Fixed

  • Fix bug while authentication via keycloak

Libs

  • Bump edu.kit.datamanager:service-base from 1.3.0 to 1.3.1
  • Bump org.apache.commons:commons-text from 1.11.0 to 1.12.0
  • Bump org.springframework.boot from 3.2.4 to 3.2.5
  • Bump org.springframework.cloud:spring-cloud-gateway-mvc from 4.1.2 to 4.1.3

1.4.2 - 2024-04-12

Security

Added

  • Enable AAI for docker compose
  • Add licenseUri to metadata (schema) records

Changed

  • Bump gradle from 8.2.1 to 8.7

Fixed

  • Fix health endpoint to evaluate elasticsearch if needed

Libs

  • Bump com.google.errorprone:error_prone_core from 2.24.1 to 2.26.1
  • Bump com.networknt:json-schema-validator from 1.1.0 to 1.4.0
  • Bump commons-io:commons-io from 2.15.1 to 2.16.1
  • Bump edu.kit.datamanager:repo-core from 1.2.1 to 1.2.2
  • Bump edu.kit.datamanager:service-base from 1.2.0 to 1.3.0
  • Bump io.freefair.lombok from 8.4 to 8.6
  • Bump io.freefair.maven-publish-java from 8.4 to 8.6
  • Bump javersVersion from 7.3.7 to 7.4.2
  • Bump org.apache.tika:tika-core from 2.9.1 to 2.9.2
  • Bump org.mockito:mockito-core from 5.8.0 to 5.11.0
  • Bump org.owasp.dependencycheck from 9.0.8 to 9.1.0
  • Bump org.postgresql:postgresql from 42.7.1 to 42.7.3
  • Bump org.springframework.boot from 3.2.1 to 3.2.4
  • Bump org.springframework.cloud:spring-cloud-gateway-mvc from 4.1.1 to 4.1.2
  • Bump org.springframework.data:spring-data-elasticsearch from 5.2.2 to 5.2.4
  • Bump springDocVersion from 2.3.0 to 2.5.0

Github Actions

  • Bump codecov/codecov-action from 3 to 4

1.4.1 - 2024-01-13

Added

Changed

  • Switch to GitHub Packages.
  • Logo for SCC (Scientific Computing Centre)

Libs

  • Bump com.google.errorprone:error_prone_core from 2.24.0 to 2.24.1
  • Bump com.google.errorprone:error_prone_core from 2.23.0 to 2.24.0
  • Bump javersVersion from 7.3.6 to 7.3.7
  • Bump org.asciidoctor.jvm.convert from 4.0.0 to 4.0.1
  • Bump org.asciidoctor.jvm.convert from 3.3.2 to 4.0.0
  • Bump org.owasp.dependencycheck from 9.0.7 to 9.0.8
  • Bump org.springframework.boot from 3.2.0 to 3.2.1
  • Bump org.springframework.cloud:spring-cloud-gateway-mvc from 4.1.0 to 4.1.1
  • Bump org.springframework.data:spring-data-elasticsearch from 5.2.1 to 5.2.2

1.4.0 - 2023-12-19

Security

Added

  • Add internal landing page
  • Add configuration for redirecting landing page also to external site.
  • Enable authentication for RabbitMQ (#430)

Fixed

  • Filter for rescourceId AND schemaId instead of OR (#401)

Changed

  • Use softlink to jar file in start script.
  • Refine return messages (#309, #402, #403)
  • Check usage of schema before deleting (#
  • Metadata schema identifiers support lowercase only

Github Actions

  • Bump actions/checkout from 3 to 4
  • Bump actions/setup-java from 3 to 4
  • Bump crazy-max/ghaction-docker-meta from 4 to 5
  • Bump docker/build-push-action from 4 to 5
  • Bump docker/login-action from 2 to 3
  • Bump docker/setup-buildx-action from 2 to 3
  • Bump docker/setup-qemu-action from 2 to 3
  • Bump github/codeql-acion from 2 o 3
  • Bump gradle from 7.6.1 to 8.2.1
  • Bump org.mockito:mockito-core from 5.4.0 to 5.7.0

Plugins

  • Bump io.freefair.lombok from 8.1.0 to 8.4
  • Bump io.freefair.maven-publish-java from 8.1.0 to 8.4
  • Bump org.owasp.dependencycheck from 8.3.1 to 9.0.7
  • Bump io.spring.dependency-management from 1.1.0 to 1.1.4

Libs

  • Bump edu.kit.datamanager:indexing-service from 0.9.0 to 1.0.0
  • Bump com.networknt:json-schema-validator from 1.0.88 to 1.1.0
  • Bump com.networknt:json-schema-validator from 1.0.87 to 1.0.88
  • Bump com.google.errorprone:error_prone_core from 2.20.0 to 2.23.0
  • Bump com.h2database:h2 from 2.1.214 to 2.2.224
  • Bump com.networknt:json-schema-validator from 1.0.85 to 1.1.0
  • Bump commons-io:commons-io from 2.13.0 to 2.15.1
  • Bump org.apache.tika:tika-core from 2.8.0 to 2.9.1
  • Bump org.javers:javers-core from 7.0.0 to 7.3.6
  • Bump org.javers:javers-spring-boot-starter-sql from 7.0.0 to 7.3.6
  • Bump org.postgresql:postgresql from 42.6.0 to 42.7.1
  • Bump org.springdoc:springdoc-openapi-starter-common from 2.1.0 to 2.3.0
  • Bump org.springdoc:springdoc-openapi-starter-webmvc-api from 2.1.0 to 2.3.0
  • Bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.1.0 to 2.3.0
  • Bump org.springframework:spring-messaging from 6.0.2 to 6.1.1
  • Bump org.springframework:spring-cloud-gateway-mvc from 4.0.6 to 4.1.0
  • Bump org.springframework:spring-cloud-starter-config from 4.0.3 to 4.1.0
  • Bump org.springframework:spring-cloud-starter-netflix-eureka-client from 4.0.2 to 4.1.0
  • Bump org.springframework.boot from 3.1.0 to 3.2.0
  • Bump org.springframework.data:spring-data-elasticsearch from 5.1.0 to 5.2.1
  • Bump org.apache.commons:commons-text from 1.10.0 to 1.11.0

1.3.0 - 2023-07-07

Security

Added

  • Add context path 'metastore' as default.
  • Add support for JSON schema 2020-12.

Fixed

  • Fixed: allowing empty SID in ACLs.

Changed

  • Bump JDK from 8 to 17.
  • Bump actions/setup-java from 2 to 3
  • Bump com.networknt:json-schema-validator from 1.0.84 to 1.0.85
  • Bump crazy-max/ghaction-docker-meta from 1 to 4
  • Bump docker/build-push-action from 2 to 4
  • Bump docker/setup-buildx-action from 1 to 2
  • Bump edu.kit.datamanager:repo-core from 1.1.2 to 1.2.1
  • Bump edu.kit.datamanager:service-base from 1.1.1 to 1.2.0
  • Bump io.freefair.lombok from 8.0.1 to 8.1.0
  • Bump javersVersion from 6.14.0 to 7.0.0
  • Bump org.springframework:spring-messaging from 5.3.26 to 5.3.27
  • Bump org.springframework.boot from 2.7.10 to 3.1.0
  • Bump org.springframework.cloud:spring-cloud-starter-config from 3.1.7 to 4.0.3
  • Bump org.springframework.cloud:spring-cloud-starter-netflix-eureka-client from 3.1.6 to 4.0.2
  • Bump org.springframework.data:spring-data-elasticsearch from 4.4.13 to 5.1.0
  • Bump org.springframework.restdocs:spring-restdocs-mockmvc from 2.0.7.RELEASE to 3.0.0
  • Bump springDocVersion from 1.7.0 to 2.1.0

1.2.3 - 2023-04-13

Added

  • Add CITATION.cff
  • Allow cli arguments for start script.
  • Enable configuration to organize internal storage of metadata documents (#241)

Fixed

  • Providing (invalid) version number while updating schema document may break old versions. (#245)
  • Trace log may slow down service. (#233)
  • Calling REST-Endpoint for UI fails if no page information is provided. (#264)
  • Problem running MetaStore standalone in a docker container. (#270)

Changed

  • Update several badges
  • Bump com.networknt:json-schema-validator from 1.0.78 to 1.0.79
  • Bump edu.kit.datamanager:repo-core from 1.1.1 to 1.1.2
  • Bump edu.kit.datamanager:service-base from 1.1.0 to 1.1.1
  • Bump gradle from 7.6 to 7.6.1.
  • Bump io.freefair.maven-publish-java from 6.6.3 to 8.0.1
  • Bump io.freefair.lombok from 6.6.3 to 8.0.1
  • Bump org.mockito:mockito-core from 5.1.1 to 5.3.0
  • Bump org.owasp.dependencycheck from 8.1.0 to 8.2.1
  • Bump org.postgresql:postgresql from 42.5.4 to 42.6.0
  • Bump org.springframework.boot from 2.7.9 to 2.7.10
  • Bump org.springframework.cloud:spring-cloud-starter-config from 3.1.5 to 3.1.6.
  • Bump org.springframework.data:spring-data-elasticsearch from 4.4.8 to 4.4.10.
  • Bump org.springframework:spring-messaging from 5.3.25 to 5.3.26
  • Bump springDocVersion from 1.6.14 to 1.7.0

1.2.2 - 2023-02-28

Fixed

  • Add configuration to use the service behind a proxy. (#218)
  • Typos in README

Changed

  • Improve documentation on setting up the MetaStore framework using Docker.
  • Document directories are now set up as subfolders of the installation directory by default.
  • Bump io.freefair.lombok from 6.6.1 to 6.6.3
  • Bump io.freefair.maven-publish-java from 6.6.1 to 6.6.3
  • Bump javersVersion from 6.9.1 to 6.11.0
  • Bump json-schema-validator from 1.0.76 to 1.0.77
  • Bump org.postgresql:postgresql from 42.5.3 to 42.5.4
  • Bump org.springframework.boot from 2.7.8 to 2.7.9
  • Bump spring-cloud-gateway-mvc from 3.1.5 to 3.1.6
  • Bump spring-cloud-starter-netflix-eureka-client from 3.1.4 to 3.1.5
  • Bump spring-data-elasticsearch from 4.4.7 to 4.4.8

1.2.1 - 2023-02-13

Added

  • Add docker compose file for building whole framework (MetaStore, elasticsearch and UI)

Fixed

  • Fix wrong document format for indexing metadata documents. (#208)

Changed

  • Bump javersVersion from 6.8.2 to 6.9.1
  • Bump org.apache.tika:tika-core from 2.6.0 to 2.7.0
  • Bump org.mockito:mockito-core from 5.1.0 to 5.1.1
  • Bump org.owasp.dependencycheck from 8.0.2 to 8.1.0
  • Bump org.postgresql:postgresql from 42.5.1 to 42.5.3

1.2.0 - 2023-02-03

Security

Added

  • Add proxy for authenticated search via elasticsearch
  • Add commandline parser for reindexing elasticsearch
  • Add actuator endpoints for info and health (#184)
  • Add spring-data-elasticsearch 4.4.7

Fixed

  • Invalid input for resource identifier causes NPE (#198)
  • Hibernate validation was not enabled by default. (#191)
  • Check metadata directory for valid entry during startup (#185)

Changed

  • Bump commons-text from 1.9 to 1.10.0
  • Bump gradle from 7.5.1 to 7.6
  • Bump httpclient from 4.5.13 to 4.5.14
  • Bump io.freefair.lombok from 6.5.1 to 6.6.1
  • Bump io.freefair.maven-publish-java from 6.5.1 to 6.6.1
  • Bump io.spring.dependency-management from 1.0.14.RELEASE to 1.1.0
  • Bump javersVersion from 6.6.5 to 6.8.2
  • Bump json-schema-validator from 1.0.73 to 1.0.76
  • Bump mockito-core from 4.8.0 to 5.1.0
  • Bump org.owasp.dependencycheck from 7.2.1 to 8.0.2
  • Bump org.springframework.boot from 2.7.4 to 2.7.8
  • Bump postgresql from 42.5.0 to 42.5.1
  • Bump repo-core from 1.0.4 to 1.1.1
  • Bump service-base from 1.0.7 to 1.1.0
  • Bump springDocVersion from 1.6.11 to 1.6.14
  • Bump spring-boot from 2.7.4 to 2.7.6
  • Bump spring-cloud-starter-config from 3.1.4 to 3.1.5
  • Bump spring-cloud-gateway-mvc from 3.1.4 to 3.1.5
  • Bump spring-messaging from 5.3.23 to 5.3.25
  • Bump spring-restdocs-mockmvc:from 2.0.6.RELEASE to 2.0.7.RELEASE
  • Bump spring-security-config from 5.5.2 to 5.7.5
  • Bump spring-security-web from 5.7.2 to 5.7.5
  • Bump tika-core from 1.2.7 to 2.6.0
  • Bump xercesImpl from 2.12.1 to 2.12.2

1.1.0 - 2022-10-17

Security

  • Switch to 'eclipse-temurin' for docker due to end of support for 'openjdk'.

Added

  • More specific messages for creating/updating metadata documents.
  • Add ACL info for services to enable authorization.
  • Support for Keycloak tokens.

Changed

  • Update to service-base 1.0.7
  • Update to repo-core 1.0.4
  • Update to javers 6.6.5
  • Update to io.freefair.lombok 6.5.1
  • Update to org.owasp.dependencycheck 7.2.1
  • Update to spring-boot 2.7.4
  • Update to spring-doc 1.6.11
  • Update to spring-cloud 3.1.4
  • Update to spring-messaging 5.3.23
  • Update to postgresql 42.5.0
  • Update to h2 2.1.214
  • Update to gradle version 7.5.1
  • Get rid of powermock
  • Support for Java 17 (tests)
  • Remove jwt libraries (already part of service-base).

Fixed

1.0.1 - 2022-06-17

Security

Fixed

  • Docker: Add support for M1 chip architecture (#107)
  • Access public documents of other users is broken.(#100)
  • Fix bug ignoring type of related resource. (#105)
  • Fix bug not hiding revoked resources in listings.
  • Fix bugs using Swagger UI for REST calls.
  • Fix typos in documentation.

Changed

  • Update to service-base 1.0.3
  • Changed some labels in GUI

1.0.0 - 2022-03-29

Added

  • Finalized version of MetaStoreGui
  • Allow also IDs for metadata documents (#76)
  • Access filter for monitoring.

Fixed

  • Fix bug listing resources without proper authorization (#71)
  • Fix bug listing all metadata documents related to a specific schema
  • Fix a bug that can cause the metadata document/schema to become invalid due to an update. (#78)
  • Fix bug with path in Windows. (#88)
  • CSRF is now disabled by default. (#70)
  • Check ACLs while creating/updating records (#39)
  • Added missing spaces to swagger-ui.

Changed

  • Update to repo-core 1.0.2
  • Update to service-base 1.0.1
  • Update to postgresql 42.2.25
  • Downgrade library due to some issues regarding validation
    • json-schema-validator 1.0.64. -> 1.0.59 (#77)

0.3.7 - 2022-01-11

Added

  • First version of GUI for MetaStore.

0.3.6 - 2021-12-18

Security

  • Fix for CWE-611, CWE-776, CWE-827, CWE-352

Added

  • Code and Security analysis
  • Make CORS partly configurable

Changed

  • Update libraries:
    • Spring Boot 2.4.13
    • Spring Doc 1.5.13
    • Javers 6.5.3
    • DependencyCheck 6.5.0.1
    • json-schema-validator 1.0.64
    • netflix-eureka-client 3.0.5
    • service-base 0.3.2
    • repo-core 0.9.2

0.3.5 - 2021-12-13

Security

  • Fix for CVE-2021-44228

Fixed

  • OAS 3.0 is not available (#58)
  • Incorrect schema version in the metadata record (#59)
  • XML validation is not threadsafe. (#60)

Changed

  • Update to service-base version 0.3.1

0.3.4 - 2021-11-17

Fixed

  • Error handling versions for metadata documents (#55)

Changed

  • Building service all tests now enabled by default (use -Dprofile=minimal to execute only mandatory tests)
  • Update to repo-core version 0.9.1

0.3.3 - 2021-11-12

Fixed

  • Error handling versions for (schema/metadata) records (issues #52, #53)

0.3.2 - 2021-10-25

Fixed

  • Error regarding persistent identifiers.

0.3.1 - 2021-10-20

Fixed

  • Error starting docker due to missing bash.

0.3.0 - 2021-10-16

  • The code is now completely relying on the library of the kit-data-manager.

Added

  • Authentication based on JWT powered by KIT Data Manager. (#4)
  • Metadata (schema) records now also versioned.
  • OAI PMH protocol added (#6)
  • Customization is enabled even if framework will be started via docker (#41)

Fixed

  • Filtering metadata documents by resourceId, schemaId
  • Filtering schema documents by mimetype
  • Error while updating json schema documents without schema
  • Speedup guessing type for schema.
  • Updating document without changes will no longer create new version (#27)
  • Update schema via POST (#28)
  • Add hash of schema documents to record. (#38)
  • Drop tables at startup (default).

Changed

  • Metadata are now linked to specific version of a schema. (#30)
  • Attribute 'locked' from MetadataSchemaRecord changed to 'doNotSync' (#37)
  • Change in related schema and data (add identifier type to identifier)
  • Store all identifiers as global identifiers (type INTERNAL -> type URL)
  • For registering a schema mimetype is no longer mandatory.
  • Switch to gradle version 7.2
  • Update to Spring Boot 2.4.10
  • Update to service-base version 0.3.0

0.2.4 - date 2020-12-16

Added

  • Support for messaging

Changed

  • Update to service-base version 0.2.0

0.2.3 - date 2020-12-07

Fixed

  • New JSON schema will be validated by linked meta schema.

Changed

  • Metadata will be stored in a hierarchical structure

0.2.2 - date 2020-12-04

Fixed

  • Docker container loses all data when stopping and restarting the container
  • Update of the schema when the service runs in a docker container is now possible.

0.2.1 - date 2020-11-30

Fixed

  • Error serializing dates of metadata record
  • Input for REST-API should be a file

Changed

  • Update to service-base version 0.1.3

0.2.0 - date 2020-10-20

Added

  • Support for JSON

0.1.2 - date 2020-10-16

Added

  • Release management

Fixed

  • Build script no longer depends on git.

0.1.1 - date 2020-10-14

Added

  • Dockerization

Fixed

  • Typos in documentation
  • Swagger-UI (POST methods now handled correct but still broken)

0.1.0 - date 2020-08-07

Added

  • Registry for XSD files and support for XML metadata