7.0.0-dev.39
Ingestion - FpML Confirmation model to CDM model Ingest
Background
As outlined in the Implementation Update Q2 2025, the ingest functions for FpML Confirmation to CDM can be contributed to the CDM 7-dev branch. This enables early testing by the CDM community.
This milestone provides an opportunity to gather feedback, validate the implementation, and ensure alignment with community needs.
What is being released?
This release contains functions to ingest data from the FpML Confirmation model into CDM. This PR includes:
- Ingest functions for mapping FpML Confirmation to CDM
- Regression tests (test packs and expected results)
FpML as Runemodel as an upstream dependency
Ingest functions
Ingest functions have been written to map the attributes from a FpML as Rune model type to a CDM type. For example, the function cdm.ingest.fpml.confirmation.message.Ingest_FpmlConfirmationToTradeState maps from the FpML as Rune type fpml.confirmation.Document to the CDM type cdm.event.common.TradeState.
func Ingest_FpmlConfirmationToTradeState:
[ingest XML]
inputs:
fpmlDocument fpml.Document (0..1)
output:
tradeState TradeState (0..1)
These functions can be found in multiple namespaces within cdm.ingest.fpml.
Regression tests - test packs and expectations
The mapping functions have been validated using the same ingestion test packs as the existing Synonym ingestion, and provide an equivalent mapping coverage.
The test packs and expectations for the FpML Confirmation Ingest functions can be found in the folder ingest.
FpML as Rune model
The FpML Confirmation schemas (.xsd) has been imported into a FpML as Rune model, where each schema type has a corresponding Rune data type. e.g. FpML <dataDocument> has been imported into the model as type fpml.confirmation.DataDocument.
This model is hosted as a public Github repository, see FpML as Rune. FpML as Rune is an upstream dependency of CDM.
Backward compatibility
This release contains a new set of Rune namespaces containing ingest functions, so there are no backwards compatibility concerns.
Review directions
Changes can be reviewed in PR: 3996
Infrastructure - Security Update
What is being released?
Third-party software libraries updated to comply with the “Common Vulnerabilities and Exposures” standard (CVE, https://www.cve.org/).
npm/axiosupgraded from version 0.25.0 to 0.30.1, see GHSA-jr5f-v2jv-69x6 for further detailsnpm/image-sizeupgraded from version 1.2.0 to 1.2.1, see GHSA-m5qc-5hw7-8vg7 for further detailsnpm/trimupgraded from version 0.0.1 to 0.0.3, see CVE-2020-7753 for further details
Review Directions
Changes can be reviewed in PR: #3998