Release 1.4.3

What's Changed (comparing to 1.2.2)

Updates in Data Models and API (new optional fields)

• All Data Models:
  • optional field schemaVersion field (default - 0)
• Account:
  • optional field productIDs (see PROPOSE_ADD_ACCOUNT and acount.proto)
• Model:
  • optional fields enhancedSetupFlowOptions, enhancedSetupFlowTCUrl, enhancedSetupFlowTCRevision, enhancedSetupFlowTCDigest, enhancedSetupFlowTCFileSize, maintenanceUrl, discoveryCapabilitiesBitmask, commissioningFallbackUrl (see ADD_MODEL and model.proto)
• PKI
  • optional field crlSignerDelegator (see ADD_REVOCATION_DISTRIBUTION_POINT, UPDATE_REVOCATION_DISTRIBUTION_POINT)
  • optional field isNoc (see certificate.proto and the new NOC-related commands below)

New Data Models and API

• PKI
  • REMOVE_PAI
  • GET_CERTS_BY_SKID
  • ADD_NOC_ROOT (RCAC)
  • REVOKE_NOC_ROOT (RCAC)
  • REMOVE_NOC_ROOT (RCAC)
  • ADD_NOC_ICA (ICAC)
  • REVOKE_NOC_ICA (ICAC)
  • REMOVE_NOC_ICA (ICAC)
  • GET_NOC_ROOT_BY_VID (RCACs)
  • GET_NOC_BY_VID_AND_SKID (RCACs/ICACs)
  • GET_NOC_ICA_BY_VID (ICACs)
  • GET_REVOKED_NOC_ROOT (RCAC)
  • GET_ALL_NOC_ROOT (RCACs)
  • GET_ALL_NOC_ICA (ICACs)
  • GET_ALL_REVOKED_NOC_ROOT (RCACs)

Updates in Query (Read) API

• The following query commands return both PAA/PAI and NOC (RCAC/ICAC): GET_CERT, GET_REVOKED_CERT, GET_ALL_CERTS, GET_ALL_REVOKED_CERTS, GET_CERTS_BY_SUBJECT, GET_CHILD_CERTS
  • Either isNoc field should be analyzed to distinguish between the certificate type, or dedicated PAA-related commands should be used (see below)
• Please note, that the following query API calls still return only PAAs (they haven't been changed): GET_ALL_PAA, GET_ALL_REVOKED_PAA, GET_ALL_PROPOSED_PAA, GET_ALL_REJECTED_PAA, GET_ALL_PROPOSED_PAA_TO_REVOKE, GET_PROPOSED_PAA, GET_REJECTED_PAA, GET_PROPOSED_PAA_TO_REVOKE

Updates in Logic and API

• PKI
  • Supported delegation of PAAs/PAIs crlSignerDelegator in Revocation Distribution Point: ADD_REVOCATION_DISTRIBUTION_POINT, UPDATE_REVOCATION_DISTRIBUTION_POINT
  • An option to revoke child certificates in the chain revokeChild (default - false): PROPOSE_REVOKE_PAA, REVOKE_PAI
• Auth/Model
  • PID scoped Accounts: ADD_MODEL, PROPOSE_ADD_ACCOUNT
• Fixed static validation of URL fields (mostly in model.proto and model_version.proto)

Other

• Transaction broadcasting block mode has been removed from the updated cosmos-sdk. Starting from this version, dcl has only two modes: sync and async, with the default being sync. In this mode, to obtain the actual result of a transaction (txn), an additional query call with the txHash must be executed. For example: dcld query tx txHash - where txHash represents the hash of the previously executed transaction.
• Due to upgrading cosmovisor to v1.3.0 in Docker and shell files, the node starting command has changed from cosmovisor start to cosmovisor run start

Documentation Updates

• Ledger Nano Support (HSM for Account keys)
• Improved transactions.md
• Updates in Upgrade and troubleshooting guide Pool Upgrade How To

Full List of Issues

https://github.com/zigbee-alliance/distributed-compliance-ledger/milestone/6

Full Changelog

v1.2.2...v1.4.3

• Latest release binary version in upgrade tests increment by @DenisRybas in #511
• #523 PID scoped Accounts by @Abdulbois in #530
• Add NOC root certificate transactions design doc by @akarabashov in #529
• Update the NOC root certificate design based on discussion feedback by @akarabashov in #534
• Compliance module unit tests refactoring by @DenisRybas in #514
• #519 Query Certificates with subjectKeyId by @Abdulbois in https://github.com/zigbee...

Release 1.4.3-pre1

v1.4.3-pre1

Updated openapi (#605)

Release 1.4.2

What's Changed (comparing to 1.2.2)

Full Changelog:
v1.2.2...v1.4.2

• #303 Upgrade Cosmos SDK, tendermint, golang and project dependencies
• #523 PID scoped Accounts
• Add NOC root certificate transactions design doc
• Update the NOC root certificate design based on discussion feedback
• #519 Query Certificates with subjectKeyId
• Update the NOC root certificate design
• #535 Enable providing serial number while revoking x509 certs
• #535 Add transaction command to remove non-root certificates
• #524 Implement adding and requesting root NOC certificates
• Support for forward and backward compatibility in DCL schemes
• #535 Make the revocation of child certificates optional
• #535 Enable checking VID matchings while adding x509 certificate
• #535 Enable adding non-root NOC(ICA) certificates
• #535 Enhancements to Adding, Revoking, and Removing Non-Root Certificates
• #524 Enable revocation of NOC root certificates
• #524 Enable revocation of NOC non-root certificates
• #502 Add SchemaVersion field into PKI, Compliance, Model and VendorInfo schemas
• #538 Add commissioner remote UI flow url field into model schema
• Update transactions.md document
• #531 Publish pai certificates for crl signer certificate verification
• Refactor update tests for sequential version upgrades starting from initial version
• Set CommissioningModeInitialStepsHint to 1 by default for standard flow
• Query NOC Root certificates by VID and SKID by
• #560 Enable removing NOC ICA certificates
• #524 Enable removing NOC root certificates
• Add instructions on how to use the Ledger Nano with DCL
• Improve error message texts
• Add schemaVersion field into NOC/ICA and auxiliary models
• #575 Rename CommissionerRemoteUiFlowUrl to ManagedAclExtensionRequestFlowUrl
• #547 Add new fields into Model entity
• Query NOC Intermediate by VID+SKID by @DenisRybas in #584
• Removed managedAclExtensionRequestFlowUrl from model by @DenisRybas in #586
• vid for PAIs by @DenisRybas in #585
• Docs clarification for NOC certs by @DenisRybas in #587
• Improve clarity on how to fetch account number by @smides-nest in #579
• Model fields fixes by @DenisRybas in #588
• Upgrade test 1.4.1 by @DenisRybas in #590
• Correct transactions documentation
• Update docs troubleshooting by @ashcherbakov in #591
• Fix macos version/runner by @ashcherbakov in #592
• Add validation for making Schema Version zero value by @Toktar in #594

Upgrade procedure

• The release must be applied via cosmovisor and Upgrade Proposal transactions, see pool-upgrade-how-to.md.
• The upgrade name must be equal to v1.4.
• The release must be applied to all nodes (Validators, Observers, Sentries, etc.)
• All upgraded nodes must be at 1.2.2 with cosmovisor enabled.
• It's recommended to enable the auto-download for cosmovisor on all nodes, see pool-upgrade-how-to.md.
• Adding new nodes to the running pool (Test Net in particular) must be done via one of the ways described in running-node-in-existing-network.md.

Release 1.4.2-pre1

v1.4.2-pre1

Register migration

Release 1.4.2-dev1

Merge pull request #592 from zigbee-alliance/fix/mac-release

Fix macos version/runner

Release 1.4.1

What's Changed (comparing to 1.2.2)

Full Changelog:
v1.2.2...v1.4.0
v1.4.0...v1.4.1

• #303 Upgrade Cosmos SDK, tendermint, golang and project dependencies
• #523 PID scoped Accounts
• Add NOC root certificate transactions design doc
• Update the NOC root certificate design based on discussion feedback
• #519 Query Certificates with subjectKeyId
• Update the NOC root certificate design
• #535 Enable providing serial number while revoking x509 certs
• #535 Add transaction command to remove non-root certificates
• #524 Implement adding and requesting root NOC certificates
• Support for forward and backward compatibility in DCL schemes
• #535 Make the revocation of child certificates optional
• #535 Enable checking VID matchings while adding x509 certificate
• #535 Enable adding non-root NOC(ICA) certificates
• #535 Enhancements to Adding, Revoking, and Removing Non-Root Certificates
• #524 Enable revocation of NOC root certificates
• #524 Enable revocation of NOC non-root certificates
• #502 Add SchemaVersion field into PKI, Compliance, Model and VendorInfo schemas
• #538 Add commissioner remote UI flow url field into model schema
• Update transactions.md document
• #531 Publish pai certificates for crl signer certificate verification
• Refactor update tests for sequential version upgrades starting from initial version
• Set CommissioningModeInitialStepsHint to 1 by default for standard flow
• Query NOC Root certificates by VID and SKID by
• #560 Enable removing NOC ICA certificates
• #524 Enable removing NOC root certificates
• Add instructions on how to use the Ledger Nano with DCL
• Improve error message texts
• Add schemaVersion field into NOC/ICA and auxiliary models
• #575 Rename CommissionerRemoteUiFlowUrl to ManagedAclExtensionRequestFlowUrl
• #547 Add new fields into Model entity
• Query NOC Intermediate by VID+SKID by @DenisRybas in #584
• Removed managedAclExtensionRequestFlowUrl from model by @DenisRybas in #586
• vid for PAIs by @DenisRybas in #585
• Docs clarification for NOC certs by @DenisRybas in #587
• Improve clarity on how to fetch account number by @smides-nest in #579
• Model fields fixes by @DenisRybas in #588
• Upgrade test 1.4.1 by @DenisRybas in #590
• Correct transactions documentation

Upgrade procedure

• The release must be applied via cosmovisor and Upgrade Proposal transactions, see pool-upgrade-how-to.md.
• The upgrade name must be equal to v1.4.
• The release must be applied to all nodes (Validators, Observers, Sentries, etc.)
• All upgraded nodes must be at 1.2.2 with cosmovisor enabled.
• It's recommended to enable the auto-download for cosmovisor on all nodes, see pool-upgrade-how-to.md.
• Adding new nodes to the running pool (Test Net in particular) must be done via one of the ways described in running-node-in-existing-network.md.

Pre-Release 1.4.1

What's Changed

• Query NOC Intermediate by VID+SKID by @DenisRybas in #584
• Removed managedAclExtensionRequestFlowUrl from model by @DenisRybas in #586
• vid for PAIs by @DenisRybas in #585
• Docs clarification for NOC certs by @DenisRybas in #587
• Improve clarity on how to fetch account number by @smides-nest in #579
• Model fields fixes by @DenisRybas in #588

New Contributors

• @smides-nest made their first contribution in #579

Full Changelog: v1.4.0...v1.4.1-pre2

v1.4.0

Changes and Fixes (comparing to 1.2.2)

• #303 Upgrade Cosmos SDK, tendermint, golang and project dependencies
• #523 PID scoped Accounts
• Add NOC root certificate transactions design doc
• Update the NOC root certificate design based on discussion feedback
• #519 Query Certificates with subjectKeyId
• Update the NOC root certificate design
• #535 Enable providing serial number while revoking x509 certs
• #535 Add transaction command to remove non-root certificates
• #524 Implement adding and requesting root NOC certificates
• Support for forward and backward compatibility in DCL schemes
• #535 Make the revocation of child certificates optional
• #535 Enable checking VID matchings while adding x509 certificate
• #535 Enable adding non-root NOC(ICA) certificates
• #535 Enhancements to Adding, Revoking, and Removing Non-Root Certificates
• #524 Enable revocation of NOC root certificates
• #524 Enable revocation of NOC non-root certificates
• #502 Add SchemaVersion field into PKI, Compliance, Model and VendorInfo schemas
• #538 Add commissioner remote UI flow url field into model schema
• Update transactions.md document
• #531 Publish pai certificates for crl signer certificate verification
• Refactor update tests for sequential version upgrades starting from initial version
• Set CommissioningModeInitialStepsHint to 1 by default for standard flow
• Query NOC Root certificates by VID and SKID by
• #560 Enable removing NOC ICA certificates
• #524 Enable removing NOC root certificates
• Add instructions on how to use the Ledger Nano with DCL
• Improve error message texts
• Add schemaVersion field into NOC/ICA and auxiliary models
• #575 Rename CommissionerRemoteUiFlowUrl to ManagedAclExtensionRequestFlowUrl
• #547 Add new fields into Model entity
• Correct transactions documentation

Full Changelog: v1.2.2...v1.4.0

Upgrade procedure

• The release must be applied via cosmovisor and Upgrade Proposal transactions, see pool-upgrade-how-to.md.
• The upgrade name must be equal to v1.4.
• The release must be applied to all nodes (Validators, Observers, Sentries, etc.)
• All upgraded nodes must be at 1.2.2 with cosmovisor enabled.
• It's recommended to enable the auto-download for cosmovisor on all nodes, see pool-upgrade-how-to.md.
• Adding new nodes to the running pool (Test Net in particular) must be done via one of the ways described in running-node-in-existing-network.md.

Pre Release v1.4.0-dev3

• Update cosmos-sdk to v0.47.8
• Update golang to 1.20

Release 1.2.2

Changes and Fixes (comparing to 0.12.0)

1. Update DCL Code for Approval count to ceiling instead of round #409
2. Feature: re-vote for pending #412
3. Feature: remove a proposal by the owner #287
4. Do not allow proposing Root certificate by non-Trustee #427
5. Deletion of Model Versions #421
6. Document subscribing to events via Tendermint WebSockets #414
7. Adding a Model requires "partNumber" and "productLabel" but those attributes should be optional #429
8. NFR: New Role with permission to add/update Vendor Info #430
9. Edit of DCL Compliance entry #464
10. Deletion of DCL Compliance entry #465
11. Set OTA for existing Model #466
12. DA PKI Revocation of PAI and VID-scoped PAA by Vendor #459
13. DA PKI Revocation of non-VID scoped PAAs by Vendor #479
14. Add a VID field for non-VID scoped PAAs (Root certificates) #477
15. A transaction for assigning a VID to non-VID scoped PAAs (root certificates) #478
16. Fix verification of certificates #503

Upgrade procedure

• The release must be applied via cosmovisor and Upgrade Proposal transactions, see pool-upgrade-how-to.md.
• The upgrade name must be equal to v1.2.
• The release must be applied to all nodes (Validators, Observers, Sentries, etc.)
• All upgraded nodes must be at 0.12.0 or 0.12.1 with cosmovisor enabled.
• It's recommended to enable the auto-download for cosmovisor on all nodes, see pool-upgrade-how-to.md.
• Adding new nodes to the running pool (Test Net in particular) must be done via one of the ways described in running-node-in-existing-network.md.