Changelog

The overarching project is guided by https://catena-x.net and all development work is covered in https://eclipse-tractusx.github.io.

All notable changes on the overarching level are documented in this file. Refer to component repositories for specific content, changelog and documentation.

The format is based on Keep a Changelog.

Tractus-X operates on YY.0M.MICRO Calendar Versioning for overarching, quarterly Releases. Semantic Versioning remains unchanged for all components.

[24.03] - 2024-03-08​

Added​

Updated​

Unchanged, untested​

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10

• Connection to an external Clearing House service for the entire Catena-X ecosystem is required. The Gaia-X compliance service should generally be capable of recognizing all companies that are able to register with the Catena-X Portal.

• Conformity to Asset Administration Shell v3.0, API live example (AAS) is given. The DTR “/query” interface is finally deprecated and no longer available with this Release as announced. Details can be found in the changelog of the respective component.

• EDC provides no new release compared to 23.12 but only patches: EDC version 0.5.4 is part of 24.03 with the following limitations: Standard Security Tests have been performed, but it is strongly recommended for each EDC operator to apply own security measures. Especially the Dynamic Application Security Testing (DAST) needs to be executed for each specific operation environment and instance. Tractus-X release guidelines (TRGs) have been fulfilled.

• FOSS components developed and pre-tested to TRL6 with artificial test data only

• No crosscheck of functionality in verification environment

• No execution of Load-, Performance- or Penetration Tests

• No assignment of Export Control Classification Numbers (ECCN) to FOSS components

• GeoBlocking recommended for Operations (GBaaS)

• Security concept (overall) recommended for Operations

• Listed components in "Unchanged, untested" category were not verified in combination with the current Release package and are only compatible with Catena-X Standards as specified. Use at your own risk at this time.

Runtime​

• Tested on Kubernetes versions: 1.27.3

• Tested with PostgreSQL versions: 15

  • Three exceptions apply for

    • Golden Record Business Partner Number (BPN) Service
    • Managed Identity Wallet (MIW)
    • Managed Service Orchestrator (MSO)

    Those components violate TRG 5.07 as they still operate on Postgresql DB Version 14.x (not 15), but have been successfully tested for the current Release.

Using helm with central helm registry​

You can search all released helm charts with the following commands:

helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx-dev
helm search repo tractusx-dev --versions

For installation details, please see the referenced Repositories / Releases.

[23.12] - 2023-12-08​

Added​

Changed​

Unchanged, untested​

All components listed here have not seen any update since their previous Release. No specific regression tests executed.

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10\ Connection to an external Clearing House service for the entire Catena-X ecosystem is required. The Gaia-X compliance service should generally be capable of recognizing all companies that are able to register with the Catena-X Portal.
• Conformity to Asset Administration Shell v3.0, API live example (AAS) is given. For compatibility reasons, the deprecated DTR query interface “/query” will additionally be supported until Q1/2024. Details can be found in the changelog of the respective component.
• EDC provides no new release compared to 23.09 but only patches: EDC version 0.5.3 is part of 23.12 with the following limitations:\ Standard Security Tests have been performed, but it is strongly recommended for each EDC operator to apply own security measures. Especially the Dynamic Application Security Testing (DAST) needs to be executed for each specific operation environment and instance.\ Tractus-X release guidelines (TRGs) 5.11, 7.01, 7.05 and 7.07 had not been fulfilled with v0.5.3. All of those are now addressed from 0.6.0-rc2 on.
• MIW interim version 0.2.0 had passed functional E2E-testing within boundaries of the Catena-X consortia, but faced severe Security issues. MIW version 0.3.0 as part of the current Release package addresses all known Security issues, but did explicitly not undergo any functional E2E-testing (again).
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No crosscheck of functionality in verification environment
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Security concept (overall) recommended for Operations

Runtime​

• Tested on Kubernetes versions: 1.27.3
• Tested with PostgreSQL versions: 15

Using helm with central helm registry​

You can search all released helm charts with the following commands:

helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx-dev
helm search repo tractusx-dev --versions

For installation details, please see the referenced Repositories / Releases.

[23.09] - 2023-09-08​

Tractus-X has switched to YY.0M.MICRO Calendar Versioning for overarching, quarterly Releases. Therefore, the previous working title of Release 23.09 was 3.2.0. Semantic Versioning remains unchanged for all components.

Added​

Changed​

Unchanged, untested (see known knowns)​

Deprecated​

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10\ Connection to an external Clearing House service for the entire Catena-X ecosystem is required. The Gaia-X compliance service should generally be capable of recognizing all companies that are able to register with the Catena-X Portal.
• Conformity to Asset Administration Shell v3.0, API live example (AAS) is given. For compatibility reasons, an older version of the DTR query interface “/query” will additionally be supported until the end of 2023. Details can be found in the changelog of the respective component.
• Country Risk was not verified in combination with the current Release package. Use at your own risk. The component will either be deprecated or fully re-integrated in the next Release.
• Traceability KIT was not verified in combination with the current Release package and is only compatible with Catena-X Standards as specified. Use at your own risk at this time, but expect an updated KIT version shortly.
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No crosscheck of functionality in verification environment (STABLE, Pre-PROD)
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Security concept (overall) recommended for Operations

Runtime​

• Tested on Kubernetes versions: 1.25.6
• Tested with PostgreSQL versions: 15

Using helm with central helm registry​

You can search all released helm charts with the following commands:

helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx-dev
helm search repo tractusx-dev --versions

For installation details, please see the referenced Repositories / Releases.

[3.1.0] - 2023-05-17​

Added​

Fixed​

• n/a

Changed​

Unchanged​

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10 Connection to an external Clearing House service for the entire Catena-X ecosystem required. The Gaia-X compliance service should generally be capable to recognize all companies that are able to register with the Catena-X Portal.
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No crosscheck of functionality in verification environment (Pre-PROD)
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Security concept (overall) recommended for Operations
• Managed Identity Wallet (MIW) version 3.3.2 has passed all functional tests with the current Release package; yet this version faces a Security vulnerability with regards to libraries used (CVE-2023-0464, GHSA-fj2w-wfgv-mwq6). These issues have been addressed in MIW version 3.3.3 (no other functional changes); however MIW 3.3.3 is not part of this release.

Runtime​

• Tested on Kubernetes versions: 1.24.6
• Tested with PostgreSQL versions: 14

Using helm with central helm registry​

You can search all released helm charts with the following commands:

helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx-dev
helm search repo tractusx-dev --versions

For installation details, please see the referenced Repositories / Releases.

[3.0.1] - 2023-03-24​

Added​

• n/a

Fixed​

Changed​

Unchanged​

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10 Connection to an external Clearing House service for the entire Catena-X ecosystem required. The Gaia-X compliance service should generally be capable to recognize all companies that are able to register with the Catena-X Portal.
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No crosscheck of functionality in verification environment (Pre-PROD)
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Security concept (overall) recommended for Operations

Runtime​

• Tested on Kubernetes versions: 1.24.6
• Tested with PostgreSQL versions: 14

Using helm with central helm registry​

You can search all released helm charts with the following commands:

helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx-dev
helm search repo tractusx-dev --versions

For installation details, please see the referenced Repositories / Releases.

[3.0.0] - 2023-03-03​

Added​

• Connector KIT, v1.0.0
• Business Partner KIT, v1.0.0
• Data Chain KIT, v1.0.0
• Country Risk, Frontend v1.1.0, Backend v1.0.3
• Digital Product Pass, v0.4.6
• Trace-X Traceability Application, v1.1.0

Changed​

• Autosetup Service, Frontend v1.4.7, Backend v1.4.6
• Digital Twin Registry, v0.2.0-M3-multi-tenancy
• Dynamic Attribute Provisioning Service (DAPS), v1.7.1
• DAPS Registration Service, v1.0.5
• Eclipse Data Space Connector (EDC), v0.1.6
• Golden Record Business Partner Number (BPN) Service, v3.0.3
• Item Relationship Service (IRS), v2.3.0
• Managed Identity Wallet (MIW), v3.3.2
• Portal, v1.0.0 for Registration, Frontend, Backend and Assets
• Self Description (SD) Factory, v2.0.0
• Semantic Hub, v0.1.0-M3

Known knowns​

• Relevant components and interfaces developed considering Gaia-X Trust Framework - 22.10\ Connection to an external Clearing House service for the entire Catena-X ecosystem required.\ The Gaia-X compliance service should generally be capable to recognize all companies that are able to register with the Catena-X Portal.
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No crosscheck of functionality in verification environment (Pre-PROD)
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Security concept (overall) recommended for Operations

Runtime​

• Tested on Kubernetes versions: 1.24.6
• Tested with PostgreSQL versions: 14

[2.1.0] - 2022-12-21​

Added​

• Portal, v0.6.0
• Managed Identity Wallet (MIW), v2.1.0
• Simple Data Exchanger (SDE), v1.7.0
• Autosetup Service, v1.0.1
• DAPS Registration Service, v1.0.5
• Self Description (SD) Factory, v1.0.6
• Semantic Hub, v0.1.0M1
• Item Relationship Service (IRS), v1.3.0

Known knowns​

• Developed considering Gaia-X Trust Framework - 22.04
• FOSS components developed and pre-tested to TRL6 with artificial test data only
• Restricted crosscheck of functionality in verification environment: Smoke-tests did not verify
  • Approval of company registration
  • Mutiple user onboarding
  • Registration of EDC and associated SD validations
  • IRS
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)

Runtime​

• Tested on Kubernetes versions: 1.24.3
• Tested with PostgreSQL versions: 14

[2.0.0] - 2022-12-14​

Added​

• Eclipse Data Space Connector (EDC), v0.1.2
• Golden Record Business Partner Number (BPN) Service, v2.0.0
• Dynamic Attribute Provisioning Service (DAPS), v1.7.1
• Digital Twin Registry, v0.2.0M2

Known knowns​

• FOSS components developed and pre-tested to TRL6 with artificial test data only
• No execution of Load-, Performance- or Penetration Tests
• No assignment of Export Control Classification Numbers (ECCN) to FOSS components
• GeoBlocking recommended for Operations (GBaaS)
• Portal (Registration) as well as Managed Identity Wallet scope required for full functionality; yet both are unreleased at this point in time and can be expected with Release 2.1.0
• Released Helm Chart missing for EDC v0.1.2; can be expected with Release 2.1.0

Runtime​

• Tested on Kubernetes versions: 1.24.3
• Tested with PostgreSQL versions: 14