IRS release 4.5.0

[ds-psosnowski]

IRS release 4.5.0 with HELM

Added

• Added helper script for building documentation locally.
• Added new job parameter flag "auditContractNegotiation" which toggles setting contractAgreementId in Shells and Submodels
• Added "contractAgreementId" field to Submodel model
• Added Integration Tests for the entire IRS flow using stubbed responses of Discovery Service, Semantic Hub, EDC, Digital Twin Registry and BPDM Pool

Changed

• Dataspace Discovery Service handles multiple EDC-Urls received for BPN now
• Updated license header to "Copyright (c) 2021,2024 Contributors to the Eclipse Foundation"
• Changed lookupGlobalAssetIds to lookupShellsByBPN, which provides full object.
• Suppressed CVE-2024-20932 from graal-sdk-21.2.0.jar because this is not applicable for IRS.
• Updated configuration of DISCOVERY_REST_TEMPLATE from ess.discovery.* to digitalTwinRegistry.discovery.* and discovery finder URL from digitalTwinRegistry.discoveryFinderUrl to digitalTwinRegistry.discovery.discoveryFinderUrl
• Redesigned Shell object - wrapped payload and added "contractAgreementId" field
• Changed structure of Policy creation to match EDC format
• Update irs-registry-client to 1.6.0-SNAPSHOT

Fixed

• Update to Spring Boot 3.1.8. This fixes the following CVEs:
  • CVE-2023-6378 serialization vulnerability in logback
  • CVE-2023-51074 json-path v2.8.0 stack overflow
  • CVE-2024-22233 Spring Framework server Web DoS Vulnerability

HELM:

Added

• Added configuration parameters oauth2.semantics.clientId,oauth2.semantics.clientSecret, oauth2.discovery.clientId,oauth2.discovery.clientSecret, oauth2.bpdm.clientId,oauth2.bpdm.clientSecret

Removed

• Removed configuration parameters oauth2.clientId,oauth2.clientSecret, portal.oauth2.clientId,portal.oauth2.clientSecret

Changed

• Changed configuration for discovery finder url from digitalTwinRegistry.discoveryFinderUrl to discovery.discoveryFinderUrl

[ds-jhartmann]

LGTM