Skip to content

chore: bump upstream version to 0.13.0 - #14

Merged
eschrewe merged 260 commits into
developfrom
chore/tx-0.13.0
Sep 3, 2026
Merged

chore: bump upstream version to 0.13.0#14
eschrewe merged 260 commits into
developfrom
chore/tx-0.13.0

Conversation

@eschrewe

@eschrewe eschrewe commented Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown

WHAT

  • merged release branch 0.13.0 from upstream tx repo
  • updated con-x-managed runtimes and extensions for tx 0.13.0 and edc 0.17.0 versions
  • added bootstrapping extension for agreement-retirement to mitigate a problem with tx-database-migration

dependabot Bot and others added 30 commits April 6, 2026 09:07
@dependabot
chore(deps): bump log4j2 from 2.25.3 to 2.25.4 (eclipse-tractusx#2724)
b5a5ced 
Bumps `log4j2` from 2.25.3 to 2.25.4.

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core-test` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-layout-template-json` from 2.25.3 to 2.25.4

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core-test
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-layout-template-json
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9 (ecl…
cdb6987 
…ipse-tractusx#2726)

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 10.8 to 10.9.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9..10.8)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump flyway from 12.2.0 to 12.3.0 (eclipse-tractusx#2727)
d5d5320 
Bumps `flyway` from 12.2.0 to 12.3.0.

Updates `org.flywaydb:flyway-core` from 12.2.0 to 12.3.0

Updates `org.flywaydb:flyway-database-postgresql` from 12.2.0 to 12.3.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump com.gradleup.shadow from 9.3.2 to 9.4.1 (eclipse-tr…
861417a 
…actusx#2725)

Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.3.2 to 9.4.1.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.3.2...9.4.1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump trufflesecurity/trufflehog from 3.93.8 to 3.94.2 (e…
a52ceba 
…clipse-tractusx#2723)

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.93.8 to 3.94.2.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@6c05c4a...6bd2d14)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.94.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump aws from 2.42.12 to 2.42.27 (eclipse-tractusx#2722)
7b29511 
Bumps `aws` from 2.42.12 to 2.42.27.

Updates `software.amazon.awssdk:s3` from 2.42.12 to 2.42.27

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.42.12 to 2.42.27

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.42.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.42.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@bmg13
refactoring: move DSP 0.8 implementation to tractusx edc (eclipse-tra…
d8418b1 
…ctusx#2694)

* Add dsp-spi-08 module.

* Add DSP08 API.

* Include Remaining Modules.

* Small Code Refactor.

* Update E2E testing.

* Small Code Cleanup.

* Fix Copy Right.

* Update Token-Interceptor Dependency.

* Update Settings File.
@dependabot
chore(deps): bump com.azure:azure-storage-blob from 12.33.2 to 12.33.3 (
1e2fc34 
eclipse-tractusx#2739)

Bumps [com.azure:azure-storage-blob](https://github.com/Azure/azure-sdk-for-java) from 12.33.2 to 12.33.3.
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@com.azure+azure-storage-blob_12.33.2...com.azure+azure-storage-blob_12.33.3)

---
updated-dependencies:
- dependency-name: com.azure:azure-storage-blob
  dependency-version: 12.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump io.qameta.allure:allure-junit5 from 2.33.0 to 2.34.0 (
fac7316 
eclipse-tractusx#2738)

Bumps [io.qameta.allure:allure-junit5](https://github.com/allure-framework/allure-java) from 2.33.0 to 2.34.0.
- [Release notes](https://github.com/allure-framework/allure-java/releases)
- [Commits](allure-framework/allure-java@2.33.0...2.34.0)

---
updated-dependencies:
- dependency-name: io.qameta.allure:allure-junit5
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump io.swagger.core.v3.swagger-gradle-plugin (eclipse-t…
e3eb7b0 
…ractusx#2735)

Bumps io.swagger.core.v3.swagger-gradle-plugin from 2.2.45 to 2.2.47.

---
updated-dependencies:
- dependency-name: io.swagger.core.v3.swagger-gradle-plugin
  dependency-version: 2.2.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump com.github.dasniko:testcontainers-keycloak (eclipse…
329a7f6 
…-tractusx#2734)

Bumps [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) from 4.1.1 to 4.2.0.
- [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases)
- [Commits](dasniko/testcontainers-keycloak@v4.1.1...v4.2.0)

---
updated-dependencies:
- dependency-name: com.github.dasniko:testcontainers-keycloak
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump trufflesecurity/trufflehog from 3.94.2 to 3.94.3 (e…
3f0e35d 
…clipse-tractusx#2732)

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.94.2 to 3.94.3.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@6bd2d14...47e7b7c)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.94.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump aws from 2.42.27 to 2.42.32 (eclipse-tractusx#2736)
16df4df 
Bumps `aws` from 2.42.27 to 2.42.32.

Updates `software.amazon.awssdk:s3` from 2.42.27 to 2.42.32

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.42.27 to 2.42.32

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.42.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.42.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @AndrYurk
chore(deps): bump io.opentelemetry.instrumentation:opentelemetry-log4…
550a9ee 
…j-appender-2.17 from 2.25.0-alpha to 2.27.0-alpha-SNAPSHOT (eclipse-tractusx#2737)

* chore(deps): bump io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17

Bumps io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 from 2.25.0-alpha to 2.27.0-alpha-SNAPSHOT.

---
updated-dependencies:
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17
  dependency-version: 2.27.0-alpha-SNAPSHOT
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 to 2.26.1-alpha

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: AndrYurk <andrii.yurkevych@cofinity-x.com>
@dependabot
chore(deps): bump actions/github-script from 7 to 9 (eclipse-tractusx…
b6f9437 
…#2731)

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pratapipatelbcone
feat: Rename IATP to dcp (eclipse-tractusx#2684)
c6ba728
@lgblaumeiser
infra: Migrate helm charts to use cloud pirates postgres charts (ecli…
edae6b2 
…pse-tractusx#2693)

* Migrate helm charts to use cloud pirates postgres charts

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Update helm docs

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Switch postgres enablement

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* helm docs again

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Adopt dependency test helm values

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Harmonize vault usage with bdrs

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Helm Docs update

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

---------

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@lgblaumeiser
feat: Use participant context id as identifier for did document regis…
47ea851 
…tration (eclipse-tractusx#2744)

* Use participant context id as identifier for did document registration

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Fix checkstyle issues

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

---------

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@lgblaumeiser
Adapt participant id in helm charts (eclipse-tractusx#2742)
63d6e20 
Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@arnoweiss
feat: extract BPN from BpnCredential instead of MembershipCredential (e…
df83169 
…clipse-tractusx#2740)
@Zead-Alshu22
Docs/edc extensions readmes (eclipse-tractusx#2711)
99b2e90 
* Readme for DCP-extension

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* Readme for bdrs-client-extension

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* Readme for connector discovery-extension

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* Readme for agreements extension

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* chore: central extensions readme

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* overview README deleted

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* high-level module intent

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

* revert agreements-Readme

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>

---------

Signed-off-by: Zead-Alshu22 <zead.alshukairi@planen-bauen40.de>
@lgblaumeiser
infra: Make upgrade base fix temporarily (eclipse-tractusx#2745)
4837068 
* Make upgrade base fix temporarily

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

* Revert to just adding a flag to the helm call

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

---------

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@dependabot
chore(deps): bump flyway from 12.3.0 to 12.4.0 (eclipse-tractusx#2752)
750d39d 
Bumps `flyway` from 12.3.0 to 12.4.0.

Updates `org.flywaydb:flyway-core` from 12.3.0 to 12.4.0

Updates `org.flywaydb:flyway-database-postgresql` from 12.3.0 to 12.4.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 12.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 12.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump io.swagger.core.v3.swagger-gradle-plugin (eclipse-t…
4f42ca8 
…ractusx#2751)

Bumps io.swagger.core.v3.swagger-gradle-plugin from 2.2.47 to 2.2.48.

---
updated-dependencies:
- dependency-name: io.swagger.core.v3.swagger-gradle-plugin
  dependency-version: 2.2.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump aws from 2.42.33 to 2.42.35 (eclipse-tractusx#2750)
f1ba78b 
Bumps `aws` from 2.42.33 to 2.42.35.

Updates `software.amazon.awssdk:s3` from 2.42.33 to 2.42.35

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.42.33 to 2.42.35

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.42.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.42.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84 (e…
52d6786 
…clipse-tractusx#2747)

Bumps [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) from 1.83 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump com.networknt:json-schema-validator (eclipse-tractu…
32024af 
…sx#2753)

Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@3.0.0...3.0.2)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @lgblaumeiser
chore(deps): bump org.eclipse.edc.edc-build from 1.1.6 to 1.4.0 (ecli…
ce2caf0 
…pse-tractusx#2749)

* chore(deps): bump org.eclipse.edc.edc-build from 1.1.6 to 1.4.0

Bumps org.eclipse.edc.edc-build from 1.1.6 to 1.4.0.

---
updated-dependencies:
- dependency-name: org.eclipse.edc.edc-build
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Adapt build file for new edc-build

Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@lgblaumeiser
Fix version for api-hub publication for 0.10.x (eclipse-tractusx#2757)
7aa5ef2 
Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
@lgblaumeiser
Update bugfix version of edc build (eclipse-tractusx#2756)
13518f3 
Signed-off-by: Lars Geyer-Blaumeiser <lars.blaumeiser@cofinity-x.com>
AndrYurk and others added 22 commits August 19, 2026 08:51
@AndrYurk
feat: DR recoverable refresh token (eclipse-tractusx#3005)
c97a34b 
* feat: DR recoverable refresh token

* feat: DR recoverable refresh token

* feat: add no configuration explanation
@dependabot
chore(deps): bump the cloud-sdks group with 2 updates (eclipse-tractu…
472138a 
…sx#3016)

Bumps the cloud-sdks group with 2 updates: software.amazon.awssdk:s3 and software.amazon.awssdk:s3-transfer-manager.


Updates `software.amazon.awssdk:s3` from 2.51.2 to 2.52.0

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.51.2 to 2.52.0

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.51.2 to 2.52.0

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump org.junit.platform:junit-platform-launcher (eclipse…
4d3bd87 
…-tractusx#3014)

Bumps the test-dependencies group with 1 update: [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework).


Updates `org.junit.platform:junit-platform-launcher` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

---
updated-dependencies:
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@AndrYurk
feat: update supported kubernetes versions (eclipse-tractusx#3017)
3848f90 
* feat: update supported kubernetes versions

* feat: update supported kubernetes versions

* feat: update supported kubernetes versions
@dependabot
chore(deps): bump the github-actions-all group across 1 directory wit…
9e87e2b 
…h 5 updates (eclipse-tractusx#3022)

Bumps the github-actions-all group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.1` | `2.21.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.96.0` | `3.97.0` |



Updates `step-security/harden-runner` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

Updates `github/codeql-action/init` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/upload-sarif` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `trufflesecurity/trufflehog` from 3.96.0 to 3.97.0
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@6f3c981...bcfcf73)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-all
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump postgres (eclipse-tractusx#3020)
f36ed66 
Bumps the docker-base-images group with 1 update in the /edc-tests/e2e-fixtures/src/testFixtures/resources directory: postgres.


Updates `postgres` from 18.4 to 18.6

---
updated-dependencies:
- dependency-name: postgres
  dependency-version: '18.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-base-images
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump the cloud-sdks group with 2 updates (eclipse-tractu…
61bdc76 
…sx#3019)

Bumps the cloud-sdks group with 2 updates: software.amazon.awssdk:s3 and software.amazon.awssdk:s3-transfer-manager.


Updates `software.amazon.awssdk:s3` from 2.52.0 to 2.53.0

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.52.0 to 2.53.0

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.52.0 to 2.53.0

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-sdks
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump the database group with 2 updates (eclipse-tractusx…
d61fb72 
…#3021)

Bumps the database group with 2 updates: org.flywaydb:flyway-core and org.flywaydb:flyway-database-postgresql.


Updates `org.flywaydb:flyway-core` from 13.2.0 to 13.3.0

Updates `org.flywaydb:flyway-database-postgresql` from 13.2.0 to 13.3.0

Updates `org.flywaydb:flyway-database-postgresql` from 13.2.0 to 13.3.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: database
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: database
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: database
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@AndrYurk
feat: make refresh token recoverable (eclipse-tractusx#3004)
c8998e5 
* feat: make refresh token recoverable

* feat: add validation of an exp claim

* feat: fix unit tests

* feat: fix unit tests

* feat: fix unit tests

* feat: add unit test

* feat: documentation improvement
@AndrYurk
fix: kafka and tsk-dcp flaky tests (eclipse-tractusx#3023)
729ec48
@bmg13
feat: include validation to Contract Definition Policies to version 0…
9347d78 
….13.0 (eclipse-tractusx#3013)

* Cd Policy Validations.

* Cd Policy Validations.

* Cd Policy Validations.

* Fix Catalog Tests.

* Fix DcpConsumerPull Tests.

* Fix DcpConsumerPull Tests.

* Fix NegotiateEdrTest Tests.

* Fix NegotiateEdrTest Tests.

* Fix ProviderPushBase Tests.

* Fix CatalogTestDspV08 Tests.

* Fix KafkaPullEndToEnd Tests.

* Fix ContractDefinitionPoliciesValidators Tests.

* Fix Small Checkstyle.

* Fix PolicyHelperFunctions V4.

* Fix AbstractDcpConsumerPull Tests.

* Fix AbstractDcpConsumerPull Tests.
@eclipse-tractusx-bot
Prepare release 0.13.0-rc4
8f1ce79
@eclipse-tractusx-bot
Update DEPENDENCIES file
871fc97
@AndrYurk
feat: fix security vulnerabilities (eclipse-tractusx#3025)
0c41a74
@eclipse-tractusx-bot
Update DEPENDENCIES file
116e6d1
@AndrYurk
fix : enforcedPlatform is not allowed for published component (eclips…
4fde370 
…e-tractusx#3029)
@eclipse-tractusx-bot
Update DEPENDENCIES file
ed19520
@eclipse-tractusx-bot
Prepare release 0.13.0
c4a24a6
@eclipse-tractusx-bot
Update DEPENDENCIES file
964d33d
@eschrewe
Merge remote-tracking branch 'upstream/release/0.13.0' into chore/tx-…
45a0c17 
…0.13.0

# Conflicts:
#	charts/tractusx-connector/templates/deployment-controlplane.yaml
#	charts/tractusx-connector/templates/deployment-dataplane.yaml
#	charts/tractusx-connector/values.yaml
@eschrewe
chore: update tx 0.13.0
d0f5e35
@eschrewe
fix: mem setting
6df9717
github-advanced-security[bot]
github-advanced-security Bot found potential problems Sep 2, 2026
View reviewed changes
Comment thread .github/actions/generate-and-publish-allure-report/action.yml Dismissed
Comment thread .github/actions/publish-docker-image/action.yml Dismissed
Comment thread .github/actions/publish-latest-versioned-snapshot/action.yml Dismissed
Comment thread .github/actions/publish-maven-artifacts/action.yml Dismissed
Comment thread .github/actions/run-deployment-test/action.yml Dismissed
Comment thread .github/workflows/publish-openapi-ui.yml Dismissed
Comment thread .github/workflows/publish-openapi-ui.yml Dismissed
Comment thread .github/workflows/upgradeability-test.yaml Dismissed
Comment thread .github/workflows/verify.yaml Dismissed
Comment thread .github/workflows/workflow-security-lint.yaml Dismissed
github-advanced-security[bot]
github-advanced-security Bot found potential problems Sep 2, 2026
View reviewed changes
Comment thread .github/actions/publish-docker-image/action.yml Dismissed
@eschrewe
eschrewe requested a review from mhellmeier September 2, 2026 07:46
@mhellmeier mhellmeier changed the title Chore/tx 0.13.0 chore: dump upstream version to 0.13.0 Sep 2, 2026
mhellmeier
mhellmeier approved these changes Sep 3, 2026
View reviewed changes

@mhellmeier mhellmeier left a comment •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR is okay for me, since it is "only" a merge of the latest upstream code into our development branch.

The notices from the GitHub Advanced Security Bot mention the hashes and authors of the GitHub Actions. This is okay and the current state-of-the-art practice recommended by the Eclipse Foundation to increase pipeline security and prevent malicious version tags.
Further, most of the pipeline actions are only used in the upstream repository but are not used in this repository and thus disabled.

@eschrewe eschrewe changed the title chore: dump upstream version to 0.13.0 chore: bump upstream version to 0.13.0 Sep 3, 2026
@eschrewe
eschrewe merged commit a8e7461 into develop Sep 3, 2026
9 checks passed
@eschrewe
eschrewe deleted the chore/tx-0.13.0 branch September 3, 2026 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mhellmeier mhellmeier mhellmeier approved these changes
+1 more reviewer
@github-advanced-security github-advanced-security[bot] github-advanced-security[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.