zero-lab: jwz 0.1.0 and TLS/PKI validation; DEMIS-stage-public 2.1.0

api-vzd

• New branch: origin/dependabot/github_actions/FirelyTeam/firely-terminal-pipeline-0.10.1
  • Contains the commit "Bump FirelyTeam/firely-terminal-pipeline from 0.8.24 to 0.10.1" and the commits from main.
  • The branch origin/dependabot/github_actions/FirelyTeam/firely-terminal-pipeline-0.10.0 was deleted.
• origin/main: 6 new commits (6 files, +130/−5).
  • New and updated PlantUML sequence diagrams for FHIR_AF_10472: appTagSuche and Kassen.
  • 3 of the 6 commits come from the GitHub Action "GeneratePlantumlImages".

app-referencevalidator

• Branch origin/REFV-WIP-Migration-HL7: 2 new commits (11 files, +326/−160).
  • CLI extended with validation of invalid instances in modules.
  • Bug fixing.

DEMIS-Helm-Charts

• origin/main: 2 new commits (3 files, +878/−858).
  • Release 1.3.2 of are-gateway.
  • Release 1.2.2 of are-notification-processing-service.

DEMIS-stage-public

• New tag/release: 2.1.0
• origin/main: 2 new commits (22 files, +2167/−68): "Release 2.1.0" and "Publish Release 2.1.0".

fhir-ti-common

• Branch origin/feature/eu-laboratory-2-1-0: 1 commit (8 files, +945/−952).
  • Update to hl7.fhir.eu.laboratory 2.1.0 with corrections.
• Branch origin/fix/remove-device-defintion: 1 commit (3 files, −3).
  • Removes the DeviceDefinition profiles (bvitg_74 dgLP, GKV-SV_33 TI Common).
• Branch origin/fix/vs-binding: 2 commits (3 files, +2/−86).
  • bvitg_19: binding of the test profile VS changed from "example" to "extensible".
  • Switch to the shared dev container Dockerfile.

zero-lab

• New tag/release: rust/jwz/v0.1.0
  • Commit "release: jwz 0.1.0"; jwz can be published to crates.io (package limited to sources, guide, README and license); TASK-22 recorded in the backlog as "jwz 0.1.0 on crates.io".
  • Mutation score at 0.1.0: 0.885.
  • The README lists the supported RFCs, the design principles and the verification methods.
• origin/main: 119 new commits (430 files, +21423/−2126). Topics:
  • TLS/PKI validation (TASK-97, TASK-98 with 98.1–98.5, TASK-229, TASK-237):
    • New merge spec/go-pki-validation (Go TLS verification under spec/pki-validation).
    • Go: tipki/titls with ti and web profiles, tls.Config per profile, bounded verdict cache, swapped TI snapshot, NewWebHTTPClient, tipki/fetch for TSL download and refresh in all environments, benchmarks per profile (just tls-bench).
    • Rust: ti-tls with rustls verifiers and client configuration for both profiles, verdict reuse, fuzz target; ti-pki with ECDSA over curves and hashes for web paths.
    • idpd: HTTP client is a mandatory constructor parameter without a default; idpd, openid, oidf, pdp, pep/proxy use internet clients in the web profile.
    • epa: records system only with configured TLS verification; zero-epa in the ti profile via its own TSL.
    • zaddy: klauspost/compress v1.20.2 due to GO-2026-6865.
  • ti-cli:
    • probe verifies every https endpoint under its profile (ePA under ti).
    • probe shows existing networks in one line.
    • -k performs no certificate check in probe.
    • -k applies to downloads only.
  • jwz:
    • Key generation with up to 64 draws (brainpoolP256r1) (TASK-230).
    • Mutation testing: just mutants-record with job count as a parameter.
    • TASK-238 in the backlog: mutation score counts timeouts twice.
  • Backlog: TASK-22, TASK-97, TASK-98, TASK-228, TASK-229, TASK-230, TASK-235, TASK-237 marked as done; newly created TASK-232 to TASK-234, TASK-236, TASK-238.

At a glance

• 2 new tags/releases: 2.1.0 (DEMIS-stage-public) and rust/jwz/v0.1.0 (zero-lab).
• zero-lab: 119 commits on main (430 files), including changes to TLS/PKI validation in Go and Rust.
• DEMIS-Helm-Charts: are-gateway 1.3.2 and are-notification-processing-service 1.2.2.
• fhir-ti-common: 3 branches with changes, including an update to hl7.fhir.eu.laboratory 2.1.0.
• api-vzd: 1 new Dependabot branch (firely-terminal-pipeline 0.10.1), 1 deleted (0.10.0).