github-actions[bot]
37f2ceb8ef
[Release] Automated commit of .3rd-party/DEPENDENCIES changes
2025-10-01 06:22:35 +00:00
Avgustin Marinov
cf89861f1e
Fix Sonar Findings - add @Override ( #2712 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-10-01 09:15:14 +03:00
dependabot[bot]
e456c9b799
Bump vaadin.version from 24.9.0 to 24.9.1 ( #2711 )
...
Bumps `vaadin.version` from 24.9.0 to 24.9.1.
Updates `com.vaadin:vaadin-bom` from 24.9.0 to 24.9.1
Updates `com.vaadin:vaadin-maven-plugin` from 24.9.0 to 24.9.1
- [Release notes](https://github.com/vaadin/platform/releases )
- [Commits](https://github.com/vaadin/platform/compare/24.9.0...24.9.1 )
---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
dependency-version: 24.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
dependency-version: 24.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 09:11:52 +03:00
Avgustin Marinov
ccecf9b8d6
Rename READ_SOFTWARE_MODULE_DOWNLOAD to READ_SOFTWARE_MODULE_ARTIFACT ( #2710 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-30 16:13:41 +03:00
Avgustin Marinov
4b98d89ab0
Remove deprecated DOWNLOAD_REPOSITORY_ARTIFACT permission ( #2709 )
...
use READ_SOFTWARE_MODULE_DOWNLOAD
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-30 15:40:15 +03:00
Avgustin Marinov
4715278ee5
Sonar Findings ( #2708 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-30 09:30:23 +03:00
Avgustin Marinov
3714d408d0
Cleanup QL parse and tranform API ( #2707 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-29 16:36:41 +03:00
Avgustin Marinov
e747d55a38
Fix EntityMatcher case sentsitivity config ( #2706 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-29 15:08:21 +03:00
Stanislav Trailov
7e5984b3c9
Fix DDI Open Api Config ( #2703 )
...
* Fix DDI Open Api Config
Signed-off-by: strailov <Stanislav.Trailov@bosch.io >
* leave name as it is, change the header only
Signed-off-by: strailov <Stanislav.Trailov@bosch.io >
---------
Signed-off-by: strailov <Stanislav.Trailov@bosch.io >
2025-09-29 14:11:17 +03:00
Avgustin Marinov
ebfaa1d51e
Fix sonar findings ( #2705 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-29 13:19:08 +03:00
Avgustin Marinov
a2929757d8
Encapsulate time overdue into VirtualPropertyResolver ( #2704 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-29 13:14:40 +03:00
dependabot[bot]
618fe75649
Bump org.eclipse.persistence:org.eclipse.persistence.jpa ( #2695 )
...
Bumps [org.eclipse.persistence:org.eclipse.persistence.jpa](https://github.com/eclipse-ee4j/eclipselink ) from 4.0.7 to 4.0.8.
- [Release notes](https://github.com/eclipse-ee4j/eclipselink/releases )
- [Commits](https://github.com/eclipse-ee4j/eclipselink/compare/4.0.7...4.0.8 )
---
updated-dependencies:
- dependency-name: org.eclipse.persistence:org.eclipse.persistence.jpa
dependency-version: 4.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-26 17:22:02 +03:00
Avgustin Marinov
1919af4a9d
Remove VirtualPropertyReplacer ( #2701 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 17:17:38 +03:00
Avgustin Marinov
1954fbe829
Add simple value support for default query parser mapping ( #2700 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 17:09:42 +03:00
Avgustin Marinov
a6867219b1
Remove FieldValueConverter ( #2699 )
...
* (because) used only for ActionFields.STATUS
* could be part of new Node mapping mechanism
* simplify
* Deprecate ActionFields.STATUS, add / replace it with ActionFields.ACTIVE. In future STATUS will become the real action status (and DETAILSTATUS will be removed)
* Deprecate MgmtAction.getStatus add / replace it with MgmtAction.isActive. In future status will become the real action status (and detailStatus will be removed)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 16:57:10 +03:00
Avgustin Marinov
1abfa0a2f4
Add support for plugable QL for EntityManager ( #2698 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 15:39:21 +03:00
Avgustin Marinov
4434484d35
Deprecate VirtualPropertyReplacer ( #2697 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 14:56:32 +03:00
Avgustin Marinov
b181b66ee5
Extend Query Langage Support ( #2696 )
...
* add option for parser replacement - so, one could replace the query language and don't use RSQL
* add easy way to modify query root Node
* add easy Node modification utilities
* code refactored and naming more 'QL' than 'RSQL' oriented
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-26 14:19:25 +03:00
github-actions[bot]
d0fe120a3b
[Release] Automated commit of .3rd-party/DEPENDENCIES changes
2025-09-26 02:29:24 +00:00
Avgustin Marinov
c906c2f2eb
Type Access Controllers enabled by default if AC is enabled ( #2694 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-25 16:53:19 +03:00
dependabot[bot]
d91dd1f577
Bump org.sonatype.central:central-publishing-maven-plugin ( #2693 )
...
Bumps [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin ) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits )
---
updated-dependencies:
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
dependency-version: 0.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-25 08:42:35 +03:00
github-actions[bot]
c0bf210e0f
[Release] Automated commit of .3rd-party/DEPENDENCIES changes
2025-09-24 08:25:50 +00:00
Avgustin Marinov
14b5d1b29d
Simplify scan workflow ( #2692 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-24 11:20:02 +03:00
Avgustin Marinov
b26a12f733
Remove unnecessary dash call ( #2691 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-24 11:06:06 +03:00
Avgustin Marinov
a37d5304fe
Fix dash scan ( #2690 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-24 10:55:46 +03:00
Avgustin Marinov
1a44acf503
Fix role hierarchy (missing new line) ( #2689 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-24 10:12:26 +03:00
Avgustin Marinov
c20ee8bdf3
Fix fine-grained permissions config ( #2688 )
...
* disabled by default
* evaluaton context considers fine-grained only when acm is enabled
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-24 09:40:27 +03:00
Avgustin Marinov
e7765bf4d2
Add suppor for deeper RSQL search ( #2682 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-23 17:15:48 +03:00
Avgustin Marinov
b702ea41d1
Implement Action Access Control ( #2687 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-23 13:31:17 +03:00
Avgustin Marinov
9ab0a8628e
First level suppor for RsqlQueryFields shortcut support ( #2686 )
...
* now it is possible to have a showrtcut for a sub attributes (i.e. calling it directly with enum name, e.g. type -> type.key) with directly specifying the defaultSubEntityAttribute
* no need to have single sub attribute in order to have a default sub attribute
* added TYPE search field for TargetFields (sinonim of targettype)
* targettype is deprecated - to be decided if and when to be removed
* returned back "type" direct search (with meaning type.key) for DistributionSet and SoftwareModule as non-depricated
* add serche with "type" as type.key for Target
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-23 10:56:26 +03:00
dependabot[bot]
d98ab779a2
Bump org.codehaus.mojo:flatten-maven-plugin from 1.7.2 to 1.7.3 ( #2685 )
...
Bumps [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin ) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases )
- [Commits](https://github.com/mojohaus/flatten-maven-plugin/compare/1.7.2...1.7.3 )
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
dependency-version: 1.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-23 08:50:23 +03:00
Avgustin Marinov
117f2bf683
Fix Sonar Findings ( #2683 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-19 16:01:57 +03:00
Avgustin Marinov
8bdcc51985
Add actions contxt management ( #2680 )
...
* based on TARGET permissions - action is accessible iff it its target is accessible
* add some more (id) serch fields
* (backward incompatible) software module search supports now search by name (type.name) and the old search by type (indead by type key) is now with type.key
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-19 15:47:20 +03:00
Avgustin Marinov
dce133dfae
Add some id based searches and software module search by type ( #2681 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-19 15:45:43 +03:00
Avgustin Marinov
e19b11290d
Fix Sonar Findings ( #2679 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-19 10:25:18 +03:00
Avgustin Marinov
5fecfbffc9
Bump Spring Boot to 3.5.6 ( #2678 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-18 17:01:29 +03:00
Avgustin Marinov
7980b5defb
Remove Java security context serialization ( #2677 )
...
Remove Java security context serialization - it is replaced by JSON security context serialization (optimized as size). Backward incompatible change.
Java security context serialization was not used in default hawkbit runtime out of the box. So, it's assumed none uses it.
Anyway, if anyone has enabled it, he could, in order to keep backward compatibility, get the java security context serialization from the previous hawkbit releases/commits and register it again as a spring bean in his hawkbit extension.
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-18 14:46:51 +03:00
Avgustin Marinov
4444fc92bc
Finalize and polish fine-grained permission (Follow up) ( #2676 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-18 12:02:40 +03:00
Florian Kromer
a71bc924d0
docs: fix architecture overview reference ( #2670 )
2025-09-18 09:20:56 +03:00
dependabot[bot]
5e3fa0be10
Bump org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.82 ( #2675 )
...
Bumps [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java ) from 1.81 to 1.82.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
dependency-version: '1.82'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-18 09:17:47 +03:00
dependabot[bot]
c1f2fd75fc
Bump vaadin.version from 24.8.7 to 24.9.0 ( #2673 )
...
Bumps `vaadin.version` from 24.8.7 to 24.9.0.
Updates `com.vaadin:vaadin-bom` from 24.8.7 to 24.9.0
Updates `com.vaadin:vaadin-maven-plugin` from 24.8.7 to 24.9.0
- [Release notes](https://github.com/vaadin/platform/releases )
- [Commits](https://github.com/vaadin/platform/compare/24.8.7...24.9.0 )
---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
dependency-version: 24.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.vaadin:vaadin-maven-plugin
dependency-version: 24.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-18 09:17:26 +03:00
dependabot[bot]
f8aee3b2eb
Bump maven.surefire.plugin.version from 3.5.3 to 3.5.4 ( #2668 )
...
Bumps `maven.surefire.plugin.version` from 3.5.3 to 3.5.4.
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.3...surefire-3.5.4 )
Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.3...surefire-3.5.4 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-version: 3.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
dependency-version: 3.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-18 09:16:21 +03:00
Stanislav Trailov
2f2f0d68e1
Fix Simple UI Login ( #2674 )
...
Signed-off-by: strailov <Stanislav.Trailov@bosch.io >
2025-09-17 16:11:00 +03:00
Florian Kromer
ade9904d21
fix: maxAssingments required property in MgmtSoftwareModuleTypeRequestBodyPost ( #2671 )
...
resolves #2669
2025-09-16 10:51:29 +03:00
Vasil Ilchev
5deb519e7c
Fix X_DistributionSet IMPLY_READ DISTRIBUTION_SET_TYPE ( #2666 )
...
Co-authored-by: vasilchev <vasil.ilchev@bosch.com >
2025-09-15 19:09:44 +03:00
Vasil Ilchev
2cffd89d15
Fix permission length permit (32chars) on SOFTWARE_MODULE_DOWNLOAD_AR… ( #2665 )
...
* Fix permission length permit (32chars) on SOFTWARE_MODULE_DOWNLOAD_ARTIFACT -> SM_DOWNLOAD_ARTIFACT
Fix missing DISTRIBUTION_SET imply read DISTRIBUTION_SET_TYPE
* change to SOFTWARE_MODULE_DOWNLOAD as more intuitive
---------
Co-authored-by: vasilchev <vasil.ilchev@bosch.com >
2025-09-15 14:58:44 +03:00
Vasil Ilchev
20768a550c
Sync property naming convention ( #2664 )
...
Co-authored-by: vasilchev <vasil.ilchev@bosch.com >
2025-09-10 14:55:51 +03:00
Avgustin Marinov
2d45e2a76c
Fix Json serializer defaults ( #2663 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-10 10:56:19 +03:00
Avgustin Marinov
6e334d4888
Add support for "username" to be set as auditor ( #2661 )
...
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-09 17:05:05 +03:00
Avgustin Marinov
ae3a004da0
Finalize and polish fine-grained permission ( #2660 )
...
* Remove _REPOSITORY_ permissions -> replaced with _SOFTWARE_MODULE_, _SOFTWARE_MODULE_TYPE_, _DISTRIBUTION_SET_, _DISTRIBUTION_SET_TYPE_ permissions
* Still kept _ROLE_REPOSITORY_ADMIN_ role granting all repository fine-graned permissions
* Added dedicated _TARGET_TYPE_ permission set - the _TARGET_ permissions just grant _READ_TARGET_TYPE_ (analogically _SOFTWARE_MODULE_ permissions grant _READ_SOFTWARE_MODULE_TYPE_ and _DISTRIBUTION_SET_ grants _READ_DISTRIBUTON_SET_TYPE_
* Hierarcy is not configurable - could be completely replaced by setting spring application property org.eclipse.hawkbit.hierarchy or could be extended by adding rules using org.eclipse.hawkbit.hierarchy.ext
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com >
2025-09-09 15:42:11 +03:00