v0.18.0

What's Changed

Breaking changes

• feat: set data-plane-signaling as default by @ndr-brt in #5694
• feat(dps): implement suspend/resume cases by @ndr-brt in #5709
• feat: adopt conformsTo from dct by @wolf4ood in #5780
• feat: identity is carried in sub claim by @paullatzelsperger in #5813
• feat: implement token-exchange auth for HashiCorp Vault by @paullatzelsperger in #5821

Bugfixes

• fix: make VP holder property optional by @paullatzelsperger in #5697
• fix: remove address validation from AssetService, fix metadata deserialization by @ndr-brt in #5720
• fix: add missing breaklease on TransferProcess protocol service by @ndr-brt in #5729
• fix: flaky tests by @wolf4ood in #5742
• fix: add schema validation for cel expression testing by @wolf4ood in #5761
• fix: properly map name and description in JwtToVerifiableCredentialTransformer by @paullatzelsperger in #5787
• fix: add participant context filter when getting transferTypes by @wolf4ood in #5786
• fix: add missing breakLease calls in ContractNegotiationProtocolServiceImpl by @ndr-brt in #5788
• fix: start message inverted fields by @wolf4ood in #5797

New Features & Improvements

• feat: permit JWT parsing without signature verification by @ndr-brt in #5670
• feat(dps): add JWT claims validation on DPS oauth2 authorization by @ndr-brt in #5689
• feat: move out default state machine impl from controlplane-core by @wolf4ood in #5691
• feat: validate JWKS for DPS Oauth2 by @ndr-brt in #5692
• feat: virtual transfer e2e using DCP protocol by @wolf4ood in #5699
• feat: add cel testing endpoint by @wolf4ood in #5701
• feat: move tck test for virtual connector by @wolf4ood in #5711
• feat: edc virtual boms by @wolf4ood in #5713
• feat: reduce crawler logs on ConnectException by @ndr-brt in #5725
• feat: store claims on agreement also on provider side by @ndr-brt in #5727
• feat: multi profile support for virtual edc by @wolf4ood in #5738
• feat: publish EDC events to NATS by @paullatzelsperger in #5741
• test: add DPS TCK test execution by @ndr-brt in #5732
• feat: add profile field by @wolf4ood in #5747
• feat: comply with DPS async tests by @ndr-brt in #5754
• feat: add validation of profile/protocol field in v5 management api by @wolf4ood in #5752
• feat: dataspace profile context api for participant context by @wolf4ood in #5756
• feat: dataspace profile configuration by @wolf4ood in #5765
• chore: provide TokenValidationService as default by @paullatzelsperger in #5766
• feat: discovery endpoint by @wolf4ood in #5768
• feat: add configurable json-schema by @wolf4ood in #5772
• feat: bind Asset to Distribution by @ndr-brt in #5779
• feat: set encryption disabled by default by @ndr-brt in #5781
• feat: add profile based validation for policy definition by @wolf4ood in #5785
• refactor: discovery response improvements by @wolf4ood in #5789
• feat: user @configuration context instead of @SettingContext by @ndr-brt in #5791
• feat: scope model (Scope + ScopeMatcher) for scope-based authz by @paullatzelsperger in #5804
• feat: move authorization elevation from roles to scopes by @paullatzelsperger in #5805
• feat: provide asset property for CatalogAsset type by @ndr-brt in #5796
• feat: register CallbackClient default service by @ndr-brt in #5815
• feat: make admin elevation scope configurable by @paullatzelsperger in #5816
• feat: propagate trace context to NATS event headers by @paullatzelsperger in #5824
• feat: add profile field in DSP versions by @wolf4ood in #5825
• build: bump TCK libs to stable versions by @ndr-brt in #5828

Dependencies

• build(deps): bump jetty from 12.1.7 to 12.1.8 by @dependabot[bot] in #5681
• build(deps): bump com.google.crypto.tink:tink from 1.20.0 to 1.21.0 by @dependabot[bot] in #5683
• build(deps): bump com.gradleup.shadow from 9.3.1 to 9.4.1 by @dependabot[bot] in #5703
• build(deps): bump atomikos from 6.0.0 to 6.0.1 by @dependabot[bot] in #5704
• build(deps): bump swagger from 2.2.42 to 2.2.49 by @dependabot[bot] in #5716
• build(deps): bump testcontainers from 2.0.4 to 2.0.5 by @dependabot[bot] in #5717
• build(deps): bump jackson from 2.21.2 to 2.21.3 by @dependabot[bot] in #5735
• build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 by @dependabot[bot] in #5718
• build(deps): bump jetty from 12.1.8 to 12.1.9 by @dependabot[bot] in #5734
• build(deps): bump cloudEvents from 4.0.1 to 4.0.2 by @dependabot[bot] in #5751
• build(deps): bump swagger from 2.2.49 to 2.2.50 by @dependabot[bot] in #5749
• build: update hashicorp/vault test image to 2.0.1 by @ndr-brt in #5782
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9.1 by @dependabot[bot] in #5771
• build(deps): bump io.nats:jnats from 2.25.2 to 2.25.3 by @dependabot[bot] in #5818
• build(deps): bump io.micrometer:micrometer-core from 1.16.4 to 1.17.0 by @dependabot[bot] in #5817
• build(deps): bump gradle-wrapper from 9.5.0 to 9.5.1 by @dependabot[bot] in #5748

Documentation

• fix: add @context to QuerySpec, Criterion, IdResponse OpenAPI schemas by @mvanhorn in #5696
• docs: decision record about multiple profile support by @wolf4ood in #5736
• docs: decision record for scope-based API authorization by @paullatzelsperger in #5798
• docs: DR for dispatcher registry removal by @ndr-brt in #5811
• docs: add decision record for SPI module consolidation by @paullatzelsperger in #5831

Other Changes

• refactor: remove duplicated jwks resolver by @wolf4ood in #5702
• refactor: refactor ExtensionManager into CatalogCrawlerManager by @ndr-brt in #5730
• refactor: move processors tests out of manager tests by @ndr-brt in #5755
• refactor: merge catalog crawler related core modules by @ndr-brt in #5762
• build: fix DPS TCK tests, pin version to 1.0.0 by @ndr-brt in #5783
• chore: refactor profile configuration by @wolf4ood in #5794
• feat: make TransferProcessProtocolService call fail when update fails by @ndr-brt in #5793
• refactor: dcp scope config by @wolf4ood in #5795
• refactor: avoid dispatcher usage for event callbacks by @ndr-brt in #5808
• refactor: wire scope-based authz into v5 controllers, drop role-based filter by @paullatzelsperger in #5812
• refactor: get rid of dispatcher registry by @ndr-brt in #5814
• test: set unique, customizable, management api jsonld context by @ndr-brt in #5822
• test: extract json-ld expand test util method by @ndr-brt in #5823
• refactor: remove control-plane address parse/validation by @ndr-brt in #5830

New Contributors

• @mvanhorn made their first contribution in #5696

Full Changelog: v0.17.0...v0.18.0