Releases: phax/phoss-smp
Releases · phax/phoss-smp
phoss SMP 7.1.1
- Updated to xmlsec 3.0.4 for security reasons (CVE-2023-44483)
- Updated the default Peppol Truststore to not contain the outdated trusted certificates
- [SQL] Updated to PostgreSQL JDBC driver to 42.7.2 for security reasons (CVE-2024-1597)
- Improved the error handling on invalid Directory hostnames in the "SMP Settings" page
- Removed the fields "Physical address" from "Register at SML" and "Update SML Registration" pages
What's Changed
- Bump org.postgresql:postgresql from 42.7.1 to 42.7.2 in /phoss-smp-webapp-sql by @dependabot in #272
Full Changelog: phoss-smp-parent-pom-7.1.0...phoss-smp-parent-pom-7.1.1
phoss SMP 7.1.0
- Updated to peppol-commons 9.1.x
- Updated to phoss-directory 0.13.x
- Updated to eDEC Code List v8.7 with the known names
- Updated to the Peppol SMP 1.3.0 specification -> replaced all SHA-1 with SHA-256 for the signature
- The consistency checks for Peppol Identifiers were improved to avoid less invalid identifiers
- Syntactically invalid Document Type and Process IDs are now marked with a respective "Invalid" badge
- [SQL] Added new configuration properties
smp.flyway.jdbc.*
that allow the usage of a different database configuration for Flyway only
Full Changelog: phoss-smp-parent-pom-7.0.3...phoss-smp-parent-pom-7.1.0
phoss SMP 7.0.3
- Updated to ph-oton 9.2.0
- Updated to eDEC Code List v8.6 with the known names
- Added an explicit optical highlight on peppol-doctype-wildcard identifiers in the endpoint list
Full Changelog: phoss-smp-parent-pom-7.0.2...phoss-smp-parent-pom-7.0.3
phoss SMP 7.0.2
- Updated to BouncyCastle 1.75 for security reasons (CVE-2023-33201)
- [SQL] Updated to Flyway 9.21.0
Full Changelog: phoss-smp-parent-pom-7.0.1...phoss-smp-parent-pom-7.0.2
phoss SMP 7.0.1
- Updated to peppol-commons 9.0.6
- Updated to ph-commons 11.0.5, fixing CVE-2023-34612
- Fixed a potential exception when viewing BusinessCards with an unsupported country code
- [SQL] Updated to Flyway 9.20.0
Full Changelog: phoss-smp-parent-pom-7.0.0...phoss-smp-parent-pom-7.0.1
phoss SMP 7.0.0
- Fixed support for Surrogate characters for e.g. Japanese
- Using Java 11 as the baseline
- Using Servlet API 5.0.0 as the baseline: JakartaEE 9, Java 11+, Apache Tomcat v10.0.x, Jetty 11.x
What's Changed
Full Changelog: phoss-smp-parent-pom-7.0.0-rc1...phoss-smp-parent-pom-7.0.0
phoss SMP 7.0.0 RC1
- Using Java 11 as the baseline
- Using Servlet API 5.0.0 as the baseline: JakartaEE 9, Java 11+, Apache Tomcat v10.0.x, Jetty 11.x
- Updated to ph-commons 11
Full Changelog: phoss-smp-parent-pom-6.0.7...phoss-smp-parent-pom-7.0.0-rc1
phoss SMP 6.0.7
- Updated to Log4J 2.20.0
- Support for "User Tokens" for authentication at the REST API were added. That can be used as a replacement for BasicAuth. That makes the usage of the REST API more secure. See issue #196 - thanks @sakasaka19
- [SQL] Updated to Flyway 9.15.0
Full Changelog: phoss-smp-parent-pom-6.0.6...phoss-smp-parent-pom-6.0.7
phoss SMP 6.0.6
- Migrated web.xml to use Servlet API 3.0 XSD
- Fixed XSI schemaLocation for Oracle XSD in weblogic.xml
- Updated the known names to eDEC Code List v8.3.1
- Fixed an ArrayIndexOutOfBoundsException when a single $ character is contained in a configuration property with variable resolution enabled. See issue #234 - thanks @Kristieb
- Beautified the Certificate Information page to spot errors quicker
Full Changelog: phoss-smp-parent-pom-6.0.5...phoss-smp-parent-pom-6.0.6
phoss SMP 6.0.5
- [SQL] Updated to Flyway 9.10.0
- [SQL] Updated the PostgreSQL JDBC driver 42.5.1 (CVE-2022-41946)
- [SQL] Updated to Google ProtoBuf 3.21.12 for security reasons (CVE-2022-3509)