DEMIS-portal-core v4.4.9, Sealed Store in zero-lab, new ISiK branch for IPS ValueSet

DEMIS-portal-core

• New tag/release: v4.4.9
• origin/main: 2 new commits ("Release v4.4.9", "Publish Release v4.4.9").
• 14 files changed (152 insertions, 324 deletions).

gematik.github.io

• origin/master: 1 new commit ("created new html pages").
• 2 files changed (24 insertions, 24 deletions).

spec-ISiK-Basismodul

• New branch: origin/stufe-6/basis/add-ips-vs-ptdata-2386 (16 commits)
• Contents of the branch:
  • Removal of the LOINC ValueSet "Pregnancy Status", replaced by the IPS ValueSet; the pregnancy status example and the release notes were updated accordingly.
  • Revisions to the "Zielbild" document on the ISiK Encounter and Case model (including #1348, #1349).
  • CI: IG template pinned to release v0.0.1 (PTDATA-2366, #1345); IG publisher image pinned to tag v2.3.4 instead of latest (PTDATA-2412, #1346).
  • ICU changes: release notes ICU 6.0.1 (PTDATA-2350, PR #1340) and fix PTDATA-2389 (CPP instead of ICP, cerebral perfusion pressure, PR #1341).
  • SUSHI-generated artifacts updated (ig-publisher).

zero-lab

• origin/main: 36 new commits; 280 files changed (28,102 insertions, 1,081 deletions).
• Deleted branches: bugfix/pkcs12-kdf-limits, chore/backlog-api-lint, chore/docs-reorganise, chore/unit-docs-tool-neutral.
• Merged pull requests: #68 (feat/store), #69 (chore/cleanups), #70 (chore/go-stdlib-uuid), #71 (fix/secrets-in-logs-and-kdf), #72 (feat/ti-cli-pki-connector).
• Topics:
  • Sealed Store (TASK-103.x): specification spec/store for a shared Sealed Store for the CLIs; Go module go/store with a files backend, go/sqlitestore as SQLite backend; Rust module ti-store (renamed from ti-cache) with SQLite and files backends; ti: store profiles, cache.db, profile commands (list/use/delete/show), store doctor/trace, key rotation, rewrap and store maintenance; Go/Rust interop matrix.
  • Security/logging: secrets removed from bff, pdp and pep logs (TASK-123); VAU KDF input held in its own buffer (TASK-124); rustls-webpki and webpki-root-certs updated (RUSTSEC-2026-0382/0383).
  • ti-cli / PKI: probe by access path, card terminal and PIN status, inspect without TSL, verify --at evaluates OCSP at the reference time (including TASK-43, -32, -118, -121); ti pki verify --nist-only documented (TASK-39); ti-idpd: card signs asynchronously (TASK-60).
  • Go/Rust toolchain: Go 1.27; standard library UUID instead of ksuid and google/uuid, crypto/hkdf instead of x/crypto/hkdf (TASK-92); rsa 0.10.0-rc.19 with pkcs1 rc.5 (TASK-117); CGO_ENABLED=0 (TASK-68).
  • Build/tests: just check and check-full; kv/postgres expiry based on the database clock (TASK-107); connector E2E tests with recipes ignored (TASK-52).
  • Backlog: updates including TASK-95, TASK-120 (ti helpers plan) and TASK-120.1–.6.

At a glance

• New release: DEMIS-portal-core v4.4.9.
• New branch in spec-ISiK-Basismodul: stufe-6/basis/add-ips-vs-ptdata-2386 (LOINC ValueSet Pregnancy Status replaced by the IPS ValueSet).
• zero-lab: 36 commits on main, 5 merged PRs, 280 files changed; Sealed Store for the CLIs in Go and Rust.
• zero-lab: 4 branches deleted; secrets removed from bff, pdp and pep logs.
• gematik.github.io: 1 commit with new HTML pages.