chore: Updated securit vulnerability

DEPENDENCIES

@@ -57,10 +57,10 @@ maven/mavencentral/net.minidev/json-smart/2.5.1, Apache-2.0, approved, #19431
 maven/mavencentral/org.apache.commons/commons-lang3/3.14.0, Apache-2.0, approved, #11677
 maven/mavencentral/org.apache.logging.log4j/log4j-api/2.23.1, Apache-2.0, approved, #13368
 maven/mavencentral/org.apache.logging.log4j/log4j-to-slf4j/2.23.1, Apache-2.0, approved, #15121
-maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-core/10.1.34, Apache-2.0 AND (EPL-2.0 OR (GPL-2.0 WITH Classpath-exception-2.0)) AND CDDL-1.0 AND (CDDL-1.1 OR (GPL-2.0-only WITH Classpath-exception-2.0)) AND EPL-2.0, approved, #15195
-maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-el/10.1.34, Apache-2.0, approved, #6997
-maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-websocket/10.1.34, Apache-2.0, approved, #7920
-maven/mavencentral/org.apache.tomcat/tomcat-annotations-api/10.1.34, Apache-2.0, approved, #8196
+maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-core/10.1.36, Apache-2.0 AND (EPL-2.0 OR (GPL-2.0 WITH Classpath-exception-2.0)) AND CDDL-1.0 AND (CDDL-1.1 OR (GPL-2.0-only WITH Classpath-exception-2.0)) AND EPL-2.0, approved, #15195
+maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-el/10.1.36, Apache-2.0, approved, #6997
+maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-websocket/10.1.36, Apache-2.0, approved, #7920
+maven/mavencentral/org.apache.tomcat/tomcat-annotations-api/10.1.36, Apache-2.0, approved, #8196
 maven/mavencentral/org.apiguardian/apiguardian-api/1.1.2, Apache-2.0, approved, #17641
 maven/mavencentral/org.assertj/assertj-core/3.25.3, Apache-2.0, approved, #12585
 maven/mavencentral/org.awaitility/awaitility/4.2.2, Apache-2.0, approved, #14178

README.md

@@ -15,7 +15,7 @@ Architecture communication and documentation are defined in [ARC42](docs/archite
 
 ```shell
 Software version: 2.1.18
-Helm Chart version: 2.1.26
+Helm Chart version: 2.1.27
 ```
 
 

charts/sdfactory/Chart.yaml

@@ -38,7 +38,7 @@ sources:
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: "2.1.26"
+version: "2.1.27"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/sdfactory/README.md

@@ -1,6 +1,6 @@
 # sdfactory
 
-![Version: 2.1.26](https://img.shields.io/badge/Version-2.1.26-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.1.18](https://img.shields.io/badge/AppVersion-2.1.18-informational?style=flat-square)
+![Version: 2.1.27](https://img.shields.io/badge/Version-2.1.27-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.1.18](https://img.shields.io/badge/AppVersion-2.1.18-informational?style=flat-square)
 
 Helm Charts for SD Factory application. Self-Description Factory component is responsible for the creation of Self Descriptions.
 

docs/api/openAPI.yaml

@@ -1,6 +1,6 @@
 #################################################################################
-# Copyright (c) 2024 T-Systems International GmbH
-# Copyright (c) 2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2024, 2025 T-Systems International GmbH
+# Copyright (c) 2024, 2025 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -20,11 +20,11 @@
 
 openapi: 3.0.0
 info:
-  version: Release3
+  version: TagusRelease
   title: SD-Factory API
   description: API for creating and storing the Verifiable Credentials
 paths:
-  /api/rel3/selfdescription:
+  /api/tagus/selfdescription:
     post:
       summary: Creates a Verifiable Credential and returns it
       operationId: selfdescriptionPost
@@ -49,24 +49,32 @@ paths:
                     externalId: ID01234-123-4321
                     type: LegalParticipant
                     holder: BPNL000000000000
-                    issuer: CAXSDUMMYCATENAZZ
+                    name: CAXSDUMMYCATENAZZ
                     registrationNumber:
                       - type: taxID
                         value: o12345678
-                    headquarterAddress.country: DE
-                    legalAddress.country: DE
-                    bpn: BPNL000000000000
+                    headquarterAddress.countrySubdivisionCode: DE-BY
+                    legalAddress.countrySubdivisionCode: DE-NW
               ServiceOffering:
                 description: payload to create ServiceOffering
                 value:
                   externalId: ID01234-123-4321
                   type: ServiceOffering
                   holder: BPNL000000000000
+                  termsAndConditions:
+                    gx:URL: https://raw.githubusercontent.com/eclipse-tractusx/sd-factory/main/LICENSE
+                    gx:hash: A8789884DECDE0E00D75FA204A78E0A000
                   issuer: CAXSDUMMYCATENAZZ
                   providedBy: https://participant.url
+                  policy: https://policy.url
                   aggregationOf: https://aggr1.url, https://aggr2.url
-                  termsAndConditions: https://raw.githubusercontent.com/eclipse-tractusx/sd-factory/main/LICENSE
-                  policies: policy1, policy2
+                  dataProtectionRegime:
+                    - GDPR2016
+                  dataAccountExport:
+                    gx:requestType: API
+                    gx:accessType: digital
+                    gx:formatType: application/json
+                  connectorUrl: https://company.connector-url.org/
       responses:
         '202':
           description: request has been accepted for processing
@@ -84,14 +92,17 @@ components:
           type: string
         holder:
           type: string
-        issuer:
-          type: string
         externalId:
           type: string
+        attachment:
+          type: array
+          description: any VC that can be attached to a resource
+          items: { }
+          minItems: 1
+          maxItems: 10
       required:
         - type
         - holder
-        - issuer
         - externalId
     RegistrationNumberSchema:
       type: object
@@ -102,7 +113,6 @@ components:
           description: the mean to request data retrieval
           enum:
             - taxID
-            - local
             - vatID
             - EUID
             - EORI
@@ -118,6 +128,8 @@ components:
         - $ref: '#/components/schemas/SelfDescriptionSchema'
         - type: object
           properties:
+            name:
+              type: string
             registrationNumber:
               type: array
               uniqueItems: true
@@ -126,32 +138,60 @@ components:
               description: A list of registration numbers
               items:
                 $ref: '#/components/schemas/RegistrationNumberSchema'
-            headquarterAddress.country:
-              type: string
-            legalAddress.country:
+            headquarterAddress.countrySubdivisionCode:
               type: string
-            bpn:
+            legalAddress.countrySubdivisionCode:
               type: string
           required:
             - registrationNumber
-            - headquarterAddress.country
-            - legalAddress.country
-            - bpn
+            - headquarterAddress.countrySubdivisionCode
+            - legalAddress.countrySubdivisionCode
     ServiceOfferingSchema:
       type: object
       allOf:
         - $ref: '#/components/schemas/SelfDescriptionSchema'
         - type: object
           properties:
+            aggregationOf:
+              type: array
+              uniqueItems: true
+              minItems: 1
+              maximum: 512
+              items:
+                type: string
+                format: uri
+            termsAndConditions:
+              type: object
+              properties:
+                gx:URL:
+                  type: string
+                gx:hash:
+                  type: string
             providedBy:
               type: string
               format: uri
-            aggregationOf:
-              type: string
-            termsAndConditions:
+            policy:
               type: string
-            policies:
+              format: uri
+            dataProtectionRegime:
+              type: array
+              uniqueItems: true
+              minItems: 1
+              maximum: 10
+              items:
+                type: string
+            dataAccountExport:
+              type: object
+              properties:
+                gx:requestType:
+                  type: string
+                gx:accessType:
+                  type: string
+                gx:formatType:
+                  type: string
+            connectorUrl:
               type: string
+              format: uri
           required:
             - providedBy
 security:

pom.xml

@@ -39,7 +39,7 @@
         <resource.delimiter>^</resource.delimiter>
         <spring-cloud.version>4.1.3</spring-cloud.version>
         <dash-tool.version>1.0.3-SNAPSHOT</dash-tool.version>
-        <tomcat.version>10.1.34</tomcat.version>
+        <tomcat.version>10.1.36</tomcat.version>
     </properties>
     <dependencies>
         <dependency>
@@ -54,6 +54,7 @@
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-core</artifactId>
+            <version>${tomcat.version}</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>

src/main/resources/static/SDFactoryApi-Tagus.yml

@@ -93,7 +93,7 @@ paths:
                     - GDPR2016
                   dataAccountExport:
                     gx:requestType: API
-                    gx:accessType:
+                    gx:accessType: digital
                     gx:formatType: application/json
                   connectorUrl: https://company.connector-url.org/
                   attachment:
@@ -246,7 +246,7 @@ components:
                 gx:hash:
                   type: string
             providedBy:
-              type: String
+              type: string
               format: uri
             policy:
               type: string
@@ -272,6 +272,5 @@ components:
               format: uri
           required:
             - providedBy
-            - connectorUrl
 security:
   - bearerAuth: []