lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
3,422 Commits 1 Branch 0 Tags
4c5714ecb44c03216cfdf549ea1e1a6e7f38417c
Commit Graph

3422 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Avgustin Marinov
4c5714ecb4 Remove Log4j dependencies (#2374) 2025-04-25 16:21:54 +03:00
Avgustin Marinov
ffc550fcc7 Fix/db refactoring rename (#2365) 
* Refactor datbase - renaming

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

* Final refactoring

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

---------

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-25 16:08:23 +03:00
dependabot[bot]
4714f5edf2 Bump org.springframework.boot:spring-boot-starter-parent from 3.4.4 to 3.4.5 (#2373) 
* Bump org.springframework.boot:spring-boot-starter-parent

Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 3.4.4 to 3.4.5.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.4.4...v3.4.5)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update pom.xml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-25 09:38:29 +03:00
Avgustin Marinov
d2a41d1bff Feature/docker dbinit (#2371) 
* Standalone tool for initializing of hawkBit Database

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

* Add docker build for dbinit

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

---------

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-24 16:40:55 +03:00
Avgustin Marinov
323738bda9 Remove flywat from DDI & DMF servers (#2370) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-24 16:27:48 +03:00
Avgustin Marinov
df398c9a74 Standalone tool for initializing of hawkBit Database (#2369) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-24 16:27:28 +03:00
dependabot[bot]
6e24b6c33c Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 (#2368) 
Bumps org.apache.commons:commons-collections4 from 4.4 to 4.5.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-collections4
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-24 09:04:54 +03:00
Denislav Prinov
9563efa878 Merge pull request #2366 from bosch-io/feature/refactor-audit-log-description-field 
Refactoring the audit log message -> description field
 2025-04-22 13:23:44 +03:00
Denislav Prinov
7aa33cd96b Refactoring the audit log message -> description field 
Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>
 2025-04-22 08:11:53 +03:00
Avgustin Marinov
7486f54291 Add DS type to distrubution set unique key (#2364) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-17 10:00:18 +03:00
dependabot[bot]
aa8cb9d305 Bump vaadin.version from 24.7.1 to 24.7.2 (#2361) 
Bumps `vaadin.version` from 24.7.1 to 24.7.2.

Updates `com.vaadin:vaadin-bom` from 24.7.1 to 24.7.2

Updates `com.vaadin:vaadin-maven-plugin` from 24.7.1 to 24.7.2

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 24.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 24.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-16 09:02:27 +03:00
Avgustin Marinov
3481461536 Don't check robots.txt for license (#2359) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-15 15:20:38 +03:00
Avgustin Marinov
de4e58d0ee Add robots.txt to servers - not for bots (#2358) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-15 15:13:36 +03:00
Avgustin Marinov
00b129ad95 [#2343] Deny scheduled rollout creation when no HANDLE_ROLLOUT permission (#2357) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-15 13:44:15 +03:00
Avgustin Marinov
f4fb11535c [#1744] Add permissions to MgmtUserInfo (#2356) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-15 09:51:21 +03:00
Avgustin Marinov
9290ea194c [#1832] Fix root redirect to swagger ui (#2355) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-15 09:13:50 +03:00
dependabot[bot]
e48d6b3a96 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#2354) 
Bumps commons-io:commons-io from 2.18.0 to 2.19.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-15 08:24:15 +03:00
dependabot[bot]
b4bbef4c72 Bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 (#2353) 
Bumps org.apache.commons:commons-text from 1.13.0 to 1.13.1.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-14 08:55:23 +03:00
Avgustin Marinov
36fa915cbc Improve @Value properties (#2352) 
Implement recommendation from https://docs.spring.io/spring-boot/reference/features/external-config.html to use kebab case for @Values:

If you do want to use @Value, we recommend that you refer to property names using their canonical form (kebab-case using only lowercase letters). This will allow Spring Boot to use the same logic as it does when relaxed binding @ConfigurationProperties.

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-11 16:46:34 +03:00
dependabot[bot]
44dd714fb5 Bump org.eclipse.persistence:org.eclipse.persistence.jpa (#2351) 
Bumps [org.eclipse.persistence:org.eclipse.persistence.jpa](https://github.com/eclipse-ee4j/eclipselink) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/eclipse-ee4j/eclipselink/releases)
- [Commits](https://github.com/eclipse-ee4j/eclipselink/compare/4.0.5...4.0.6)

---
updated-dependencies:
- dependency-name: org.eclipse.persistence:org.eclipse.persistence.jpa
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-10 11:10:07 +03:00
Avgustin Marinov
2b270ddad7 Provide option to disable distributed lock (#2350) 
by setting hawkbit.lock=inMemory the distributed lock could be disabled, e.g. on DDI/DMF servers

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-09 15:36:57 +03:00
Avgustin Marinov
7c881587b6 Fixes order and conditions for TenantMetricsConfiguration (#2348) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-09 13:20:40 +03:00
Avgustin Marinov
c1b7723c0f Register tenant metrics only if there is TenantResolver (#2347) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-09 11:35:15 +03:00
Fin Maaß
5e209bfecc remove references to anonymous controller support (#2345) 
`hawkbit.server.ddi.security.authentication.anonymous.enabled` is no
longer supported, so remove the references to it.

Signed-off-by: Fin Maaß <f.maass@vogl-electronic.com>
 2025-04-08 17:59:15 +03:00
Avgustin Marinov
ee26dff6f9 Add rollout and autoasigments metric (#2344) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-08 15:37:57 +03:00
Avgustin Marinov
65c103c435 Add tenant tag to http and repository metrics (#2342) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-08 11:13:32 +03:00
Denislav Prinov
07448f56da Merge pull request #2341 from bosch-io/feature/audit-logger-aspect-bean 
Ensure AuditLoggingAspect Bean Registration
 2025-04-04 11:33:43 +03:00
Denislav Prinov
23e3c0bc43 Ensure AuditLoggingAspect Bean Registration 
Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>
 2025-04-04 11:30:24 +03:00
dependabot[bot]
f0dba91efb Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13 (#2340) 
Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.12 to 0.8.13.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.12...v0.8.13)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-04 08:36:52 +03:00
Avgustin Marinov
764c02279e Fix distributed lock registration 2025-04-02 16:32:44 +03:00
Avgustin Marinov
2af5439b39 Clustering: Add distributed lock (#2333) 
To support sync of activities in cluster setups

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-02 12:25:08 +03:00
Avgustin Marinov
32990ab2ea Add CORS support for DDI API (#2337) 
For instance if used in remote swagger or web apps

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-04-02 09:01:02 +03:00
dependabot[bot]
29f7c0eb0b Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.3 (#2335) 
Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.2...surefire-3.5.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-01 10:36:47 +03:00
dependabot[bot]
769af05ba4 Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.2 to 3.5.3 (#2334) 
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.2...surefire-3.5.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-01 10:34:16 +03:00
Denislav Prinov
4af7fe3252 Merge pull request #2336 from bosch-io/feature/audit-log-wildcard 
Audit log wildcard * introduction to include all parameters by default
 2025-04-01 10:26:37 +03:00
Denislav Prinov
c6d89f6c83 Audit log wildcard * introduction to include all parameters by default 
Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>
 2025-04-01 10:02:26 +03:00
Denislav Prinov
23154d70cc Audit Logging in HawkBit (#2314) 
* Introduction of Audit Logging in hawkBit

Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>

* Introduction of Audit Logging in hawkBit

Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>

* Refactoring:

* applied code formatter
* audit moved into hawkbit-security-core
* minimize dependences
* use AuditorAware to retrieve user - so to be compatible with the logs into DB

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>

* Move audit entities to security core

Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>

* Introduce audit log method types

Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>

---------

Signed-off-by: Denislav Prinov <denislav.prinov@bosch.com>
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
Co-authored-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-31 08:51:54 +03:00
dependabot[bot]
bbc725d6a7 Bump vaadin.version from 24.7.0 to 24.7.1 (#2331) 
Bumps `vaadin.version` from 24.7.0 to 24.7.1.

Updates `com.vaadin:vaadin-bom` from 24.7.0 to 24.7.1

Updates `com.vaadin:vaadin-maven-plugin` from 24.7.0 to 24.7.1

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-28 07:32:05 +02:00
Avgustin Marinov
70949769de Migrate to jdk 21 (#2295) 
* docker containers using images with jre 21
* project is still building with target java 17 - so jar artifacts are java 17 compatible
* provided option to have different version for client libraries (e.g. ddi and management REST api)

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-27 09:28:28 +02:00
Avgustin Marinov
21ec2e581a Fix AMQP retries when attribute characters are invalid (#2327) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-26 16:53:48 +02:00
Avgustin Marinov
836f3dc20f Remove unnecessary @PreAuthorize annotations of implementations of annotatad methods (#2326) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-26 16:53:25 +02:00
dependabot[bot]
a0c5a2f26e Bump org.springdoc:springdoc-openapi-starter-webmvc-ui (#2328) 
Bumps [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) from 2.8.5 to 2.8.6.
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](https://github.com/springdoc/springdoc-openapi/compare/v2.8.5...v2.8.6)

---
updated-dependencies:
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-26 08:36:12 +02:00
Avgustin Marinov
4e113f9483 Hibernate: use default HibernateJpaConfiguration (#2325) 
Condifure properties via HibernatePropertiesCustomizer

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-21 16:48:14 +02:00
Avgustin Marinov
36d8ab47ad Bump spring boot to 3.4.4 (#2324) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-21 11:24:22 +02:00
dependabot[bot]
70608122ac Bump com.mycila:license-maven-plugin from 4.6 to 5.0.0 (#2323) 
Bumps [com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin) from 4.6 to 5.0.0.
- [Release notes](https://github.com/mathieucarbou/license-maven-plugin/releases)
- [Commits](https://github.com/mathieucarbou/license-maven-plugin/compare/license-maven-plugin-4.6...v5.0.0)

---
updated-dependencies:
- dependency-name: com.mycila:license-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-21 08:39:53 +02:00
Avgustin Marinov
56a1fd7ea2 Add multi-tenancy guide (doc/site) (#2322) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-20 15:21:57 +02:00
Avgustin Marinov
b2dcc19f5d [#2191] Remove DB2 and MS SQL support (#2321) 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
 2025-03-20 13:43:56 +02:00
dependabot[bot]
124be74212 Bump org.springframework.cloud:spring-cloud-starter-openfeign (#2320) 
Bumps [org.springframework.cloud:spring-cloud-starter-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/spring-cloud/spring-cloud-openfeign/releases)
- [Commits](https://github.com/spring-cloud/spring-cloud-openfeign/compare/v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-starter-openfeign
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-20 10:27:22 +02:00
dependabot[bot]
6193bc3492 Bump vaadin.version from 24.6.7 to 24.7.0 (#2319) 
Bumps `vaadin.version` from 24.6.7 to 24.7.0.

Updates `com.vaadin:vaadin-bom` from 24.6.7 to 24.7.0

Updates `com.vaadin:vaadin-maven-plugin` from 24.6.7 to 24.7.0

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-20 10:26:49 +02:00
dependabot[bot]
c863e375e5 Bump org.springframework.cloud:spring-cloud-dependencies (#2318) 
Bumps [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release) from 2024.0.0 to 2024.0.1.
- [Release notes](https://github.com/spring-cloud/spring-cloud-release/releases)
- [Commits](https://github.com/spring-cloud/spring-cloud-release/compare/v2024.0.0...v2024.0.1)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-20 10:26:19 +02:00