go/dpop v1.0.0-beta.1, ref-idp-server 30.1.1 and TPM attestation in zeta

gematik.github.io

• origin/master: 1 commit ("created new html pages"), 3 files changed (+24/−24).

ref-idp-server

• New tag/release: 30.1.1
• origin/master: 1 commit (R30.1.1), 19 files changed (+144/−110).
• New branch: origin/publishInternalRelease-127 with 15 commits containing release states from R29.2.5 to R30.1.1 (including R29.3.0–R29.3.3, R30.0.1, R30.0.2, R30.0.3, R30.0.5, R30.0.9, R30.0.11, R30.1.0, R30.1.1). Also included: "Update docker image path in README.md".

spec-erp-t-prescription

• origin/develop: 4 commits, 8 files changed (+23/−15).
  • Version set to 1.3.0, publication files added, date updated, action adjusted.

spec-ISiK-Basismodul

• origin/main-stufe-6: 6 commits, 4 files changed (+6/−4).
  • Topic PTDATA-2414 (ICP SNOMED display): CI filter for the display conflict in validation added, ICP example switched to the German SNOMED display, then reverted to the international SNOMED display ("Weg A"). Pull request #1347 merged; plus automatically generated FHIR/SUSHI artifacts.
• origin/stufe-6/basis/add-ips-vs-ptdata-2386: 2 commits, 9 files changed (+11/−95). Example display value updated, SUSHI artifacts updated (PTDATA-2386).
• Branch deleted: origin/stufe-6/fix/all/icp-display-filter-PTDATA-2414.

zero-lab

• New tag/release: go/dpop/v1.0.0-beta.1
• New branch: origin/feat/dpop-rfc9449 with 15 commits. Contents include:
  • go/dpop: RFC 9449 based on go-jose with provenance tests; pdp, pep, bff and zaddy switched to the new API (TASK-95 step 1); release notes for go/dpop v1.0.0-beta.1.
  • ti-cli: probe by access path, card terminal and PIN status, inspect without TSL, verify --at checks OCSP at the reference time. ti-idpd: card signs asynchronously (TASK-60); rustls-webpki and webpki-root-certs updated to versions following RUSTSEC-2026-0382/0383.
  • Secrets removed from the logs of bff, pdp and pep (TASK-123); VAU KDF input placed in its own buffer (TASK-124).
  • go/metsubushi builds with golang:1.27; backlog entries (including TASK-95, TASK-120, TASK-125 to TASK-128); .gitignore for Cargo target directories.
  • Included merges: PR #69, #70, #71, #72.
• origin/main: 12 commits, 87 files changed (+4096/−1178).
  • PR #73 (feat/dpop-rfc9449) and PR #74 (chore/sync-dpop-beta) merged.
  • pdp: DPoP proof for every DPoP-bound token, independent of the grant (TASK-129).
  • Go modules in the repo pinned to main, dpop to v1.0.0-beta.1; just sync tidies outside the workspace and handles pre-release tags.
  • Backlog: withdrawn mimetype in oidf (TASK-132).
  • compose: Postgres 18, volumes under /var/lib/postgresql.

zeta

• origin/feature/zeta-stufe-2: 11 commits, 48 files changed (+371/−153).
  • DCR request schema updated to version 1.2.4, generation of signed_hash_puk_client_sig specified more precisely; DCR request/response schemas adjusted for TPM attestation.
  • Documentation: prerequisites and client permissions for TPM attestation on Windows; API documentation and diagrams on key generation and attestation of the ZETA Client updated.
  • Images and PlantUML files for the macOS key generation flow removed; images regenerated from source files.
  • .gitattributes added for LF line endings in shell scripts.

At a glance

• Releases/tags: 30.1.1 (ref-idp-server) and go/dpop/v1.0.0-beta.1 (zero-lab).
• New branches: publishInternalRelease-127 (ref-idp-server, 15 commits) and feat/dpop-rfc9449 (zero-lab, 15 commits).
• zero-lab: 12 commits on main (87 files, +4096/−1178), including DPoP per RFC 9449 and removal of secrets from logs.
• spec-erp-t-prescription: version 1.3.0 set on develop.
• zeta: 11 commits on DCR schemas (version 1.2.4) and TPM attestation on feature/zeta-stufe-2.