Prepare for 0.14.0 release

Author: AlexBenny

.github/workflows/ci.yml

@@ -32,6 +32,8 @@ jobs:
       uses: actions/setup-java@v1
       with:
         java-version: 11
+    - name: Install sbt
+      uses: sbt/setup-sbt@v1
     - name: Run tests
       run: sbt +test
     - name: Check Scala formatting
@@ -52,6 +54,8 @@ jobs:
       uses: actions/setup-java@v1
       with:
         java-version: 11
+    - name: Install sbt
+      uses: sbt/setup-sbt@v1
     - name: Get current version
       id: ver
       run: echo "::set-output name=tag::${GITHUB_REF#refs/tags/}"
@@ -80,6 +84,8 @@ jobs:
       uses: actions/setup-java@v1
       with:
         java-version: 11
+    - name: Install sbt
+      uses: sbt/setup-sbt@v1
     - name: Docker login
       run: docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
       env:

CHANGELOG

@@ -1,3 +1,16 @@
+Version 0.14.0 (2024-12-20)
+---------------------------
+Install sbt in GitHub workflows
+Check if JSON entity exceeds max depth during conversion from String to Circe JSON
+Add max JSON depth check to /keygen endpoint
+Do not allow requests with too large payload
+Fix graceful shutdown to be more selective about when it sleeps
+Make maxJsonDepth in SelfSyntaxChecker.validateSchema configurable
+Add auth to validation endpoint
+Bump sbt-snowplow-release to 0.3.2
+Bump jackson to 2.15.0
+Change SLULA license from 1.0 to 1.1
+
 Version 0.12.1 (2024-03-29)
 ---------------------------
 Bump postgresql to 42.5.5 (#154)

LICENSE.md

@@ -1,18 +1,20 @@
 # Snowplow Limited Use License Agreement
 
-_Version 1.0, January 2024_
+_Version 1.1, November, 2024_
 
-This Snowplow Limited Use License Agreement, Version 1.0 (the “Agreement”) sets forth the terms on which Snowplow Analytics, Ltd. (“Snowplow”) makes available certain software (the “Software”). BY INSTALLING, DOWNLOADING, ACCESSING, OR USING ANY OF THE SOFTWARE, YOU AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO SUCH TERMS AND CONDITIONS, YOU MUST NOT USE THE SOFTWARE. IF YOU ARE RECEIVING THE SOFTWARE ON BEHALF OF A LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE ACTUAL AUTHORITY TO AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT ON BEHALF OF SUCH ENTITY. “Licensee” means you, an individual, or the entity on whose behalf you are receiving the Software.
+This Snowplow Limited Use License Agreement, Version 1.1 (the “Agreement”) sets forth the terms on which Snowplow Analytics, Ltd. (“Snowplow”) makes available certain software (the “Software”). BY INSTALLING, DOWNLOADING, ACCESSING, OR USING ANY OF THE SOFTWARE, YOU AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO SUCH TERMS AND CONDITIONS, YOU MUST NOT USE THE SOFTWARE. IF YOU ARE RECEIVING THE SOFTWARE ON BEHALF OF A LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE ACTUAL AUTHORITY TO AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT ON BEHALF OF SUCH ENTITY. “Licensee” means you, an individual, or the entity on whose behalf you are receiving the Software.
 
-## LICENSE GRANT AND CONDITIONS
+## 1. LICENSE GRANT AND CONDITIONS
 
-**1.1 License.** Subject to the terms and conditions of this Agreement, Snowplow hereby grants to Licensee a non-exclusive, royalty-free, worldwide, non-transferable, non-sublicensable license during the term of this Agreement to: (a) use the Software; (b) prepare modifications and derivative works of the Software; and (c) reproduce copies of the Software (the “License”). No right to distribute or make available the Software is granted under this License. Licensee is not granted the right to, and Licensee shall not, exercise the License for any Excluded Purpose.
+**1.1 License.** Subject to the terms and conditions of this Agreement, Snowplow hereby grants to Licensee a non-exclusive, royalty-free, worldwide, non-transferable, non-sublicensable license during the term of this Agreement to: (a) use the Software; (b) prepare modifications and derivative works of the Software; and (c) reproduce copies of the Software (the “License”). No right to distribute or make available the Software is granted under this License. Licensee is not granted the right to, and Licensee shall not, exercise the License for any Competing Use, and Licensee may exercise the License only for Non-Production Use or Non-Commercial Use.
 
-**1.2** For purposes of this Agreement, an “Excluded Purpose” is any use that is either a Competing Use or a Highly-Available Production Use, or both of them.
+**1.2 Definitions.** For purposes of this Agreement:
 
-* **1.2.1** A “Competing Use” is making available any on-premises or distributed software product, or any software-as-a-service, platform-as-a-service, infrastructure-as-a-service, or other similar online service, that competes with any products or services that Snowplow or any of its affiliates provides using the Software.
+* **1.2.1** “Competing Use” is making available any on-premises or distributed software product, or any software-as-a-service, platform-as-a-service, infrastructure-as-a-service, or other similar online service, that competes with any products or services that Snowplow or any of its affiliates provides using the Software.
 
-* **1.2.2** Highly-Available Production Use is any highly-available use, including without limitation any use where multiple instances of any Software component run concurrently to avoid a single point of failure, in a production environment, where production means use on live data.
+* **1.2.2** “Non-Production Use” means any use of the Software to process test or synthetic data to evaluate the sufficiency of the Software for use by Licensee.
+
+* **1.2.3** “Non-Commercial Use” is only: (a) personal use for research, experiment, personal study, or hobby projects, without any anticipated commercial application, or (b) use for teaching purposes by lecturers of a school or university.
 
 **1.3 Conditions.** In consideration of the License, Licensee’s use of the Software is subject to the following conditions:
 
@@ -22,8 +24,8 @@ This Snowplow Limited Use License Agreement, Version 1.0 (the “Agreement”) s
 
   ```
   This software is made available by Snowplow Analytics, Ltd.,
-  under the terms of the Snowplow Limited Use License Agreement, Version 1.0
-  located at https://docs.snowplow.io/limited-use-license-1.0
+  under the terms of the Snowplow Limited Use License Agreement, Version 1.1
+  located at https://docs.snowplow.io/limited-use-license-1.1
   BY INSTALLING, DOWNLOADING, ACCESSING, USING OR DISTRIBUTING ANY PORTION
   OF THE SOFTWARE, YOU AGREE TO THE TERMS OF SUCH LICENSE AGREEMENT.
   ```
@@ -32,23 +34,23 @@ This Snowplow Limited Use License Agreement, Version 1.0 (the “Agreement”) s
 
 **1.5 No Sublicensing.** The License does not include the right to sublicense the Software, however, each recipient to which Licensee provides the Software may exercise the Licenses so long as such recipient agrees to the terms and conditions of this Agreement.
 
-## TERM AND TERMINATION
+## 2. TERM AND TERMINATION
 
 This Agreement will continue unless and until earlier terminated as set forth herein. If Licensee breaches any of its conditions or obligations under this Agreement, this Agreement will terminate automatically and the License will terminate automatically and permanently.
 
-## INTELLECTUAL PROPERTY
+## 3. INTELLECTUAL PROPERTY
 
 As between the parties, Snowplow will retain all right, title, and interest in the Software, and all intellectual property rights therein. Snowplow hereby reserves all rights not expressly granted to Licensee in this Agreement. Snowplow hereby reserves all rights in its trademarks and service marks, and no licenses therein are granted in this Agreement.
 
-## DISCLAIMER
+## 4. DISCLAIMER
 
 SNOWPLOW HEREBY DISCLAIMS ANY AND ALL WARRANTIES AND CONDITIONS, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, AND SPECIFICALLY DISCLAIMS ANY WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE SOFTWARE.
 
-## LIMITATION OF LIABILITY
+## 5. LIMITATION OF LIABILITY
 
 SNOWPLOW WILL NOT BE LIABLE FOR ANY DAMAGES OF ANY KIND, INCLUDING BUT NOT LIMITED TO LOST PROFITS OR ANY CONSEQUENTIAL, SPECIAL, INCIDENTAL, INDIRECT, OR DIRECT DAMAGES, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, ARISING OUT OF THIS AGREEMENT. THE FOREGOING SHALL APPLY TO THE EXTENT PERMITTED BY APPLICABLE LAW.
 
-## GENERAL
+## 6. GENERAL
 
 **6.1 Governing Law.** This Agreement will be governed by and interpreted in accordance with the laws of the state of Delaware, without reference to its conflict of laws principles. If Licensee is located within the United States, all disputes arising out of this Agreement are subject to the exclusive jurisdiction of courts located in Delaware, USA. If Licensee is located outside of the United States, any dispute, controversy or claim arising out of or relating to this Agreement will be referred to and finally determined by arbitration in accordance with the JAMS International Arbitration Rules. The tribunal will consist of one arbitrator. The place of arbitration will be in the State of Delaware, USA. The language to be used in the arbitral proceedings will be English. Judgment upon the award rendered by the arbitrator may be entered in any court having jurisdiction thereof.
 

README.md

@@ -27,6 +27,6 @@ Licensed under the [Snowplow Limited Use License Agreement][license]. _(If you a
 [roadmap]: https://github.com/snowplow/snowplow/projects/7
 [contributing]: https://docs.snowplow.io/docs/contributing/
 
-[license]: https://docs.snowplow.io/limited-use-license-1.0
+[license]: https://docs.snowplow.io/limited-use-license-1.1
 [license-image]: https://img.shields.io/badge/license-Snowplow--Limited--Use-blue.svg?style=flat
 [faq]: https://docs.snowplow.io/docs/contributing/limited-use-license-faq/

docker/docker-compose.yml

@@ -20,7 +20,7 @@ services:
       POSTGRES_PASSWORD: ${IGLU_DB_PASSWORD:-iglusecret}
   iglu-server:
     container_name: iglu-server
-    image: snowplow/iglu-server:${IGLU_VERSION:-0.11.0}
+    image: snowplow/iglu-server:${IGLU_VERSION:-0.14.0}
     command: --config /snowplow/config/config.hocon
     environment:
       IGLU_SUPER_API_KEY: ${IGLU_SUPER_API_KEY:-5fb4713d-73ad-4163-93a9-2b82f0177c5b}

project/BuildSettings.scala

@@ -37,13 +37,13 @@ object BuildSettings {
   )
 
   lazy val licenseSettings = Seq(
-    licenses += ("Snowplow Limited Use License Agreement", url("https://docs.snowplow.io/limited-use-license-1.0")),
+    licenses += ("Snowplow Limited Use License Agreement", url("https://docs.snowplow.io/limited-use-license-1.1")),
     headerLicense := Some(HeaderLicense.Custom(
       """|Copyright (c) 2014-present Snowplow Analytics Ltd. All rights reserved.
          |
          |This software is made available by Snowplow Analytics, Ltd.,
-         |under the terms of the Snowplow Limited Use License Agreement, Version 1.0
-         |located at https://docs.snowplow.io/limited-use-license-1.0
+         |under the terms of the Snowplow Limited Use License Agreement, Version 1.1
+         |located at https://docs.snowplow.io/limited-use-license-1.1
          |BY INSTALLING, DOWNLOADING, ACCESSING, USING OR DISTRIBUTING ANY PORTION
          |OF THE SOFTWARE, YOU AGREE TO THE TERMS OF SUCH LICENSE AGREEMENT.
          |""".stripMargin

project/Dependencies.scala

@@ -18,7 +18,7 @@ object Dependencies {
 
   object V {
     val IgluCore   = "1.1.2"
-    val SchemaDdl  = "0.18.0"
+    val SchemaDdl  = "0.24.0"
     val IgluClient = "1.1.1"
 
     val Http4s     = "0.21.34"
@@ -34,7 +34,7 @@ object Dependencies {
     val Slf4j      = "1.7.36"
     val ScalaCache = "0.28.0"
     val Postgresql = "42.5.5"
-    val Jackson    = "2.14.1"
+    val Jackson    = "2.15.0"
     val Snakeyaml  = "2.0"
     val Guava      = "32.0.0-jre"
 

project/plugins.sbt

@@ -5,5 +5,5 @@ addSbtPlugin("com.typesafe.sbt" % "sbt-native-packager" % "1.7.3")
 addSbtPlugin("com.eed3si9n" % "sbt-buildinfo" % "0.9.0")
 addSbtPlugin("com.dwijnand" % "sbt-dynver" % "4.1.1")
 addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.4.2")
-addSbtPlugin("com.snowplowanalytics" % "sbt-snowplow-release" % "0.3.1")
+addSbtPlugin("com.snowplowanalytics" % "sbt-snowplow-release" % "0.3.2")
 addSbtPlugin("de.heikoseeberger" % "sbt-header" % "5.10.0")

src/main/resources/application.conf

@@ -1,8 +1,8 @@
 # Copyright (c) 2014-present Snowplow Analytics Ltd. All rights reserved.
 #
 # This software is made available by Snowplow Analytics, Ltd.,
-# under the terms of the Snowplow Limited Use License Agreement, Version 1.0
-# located at https://docs.snowplow.io/limited-use-license-1.0
+# under the terms of the Snowplow Limited Use License Agreement, Version 1.1
+# located at https://docs.snowplow.io/limited-use-license-1.1
 # BY INSTALLING, DOWNLOADING, ACCESSING, USING OR DISTRIBUTING ANY PORTION
 # OF THE SOFTWARE, YOU AGREE TO THE TERMS OF SUCH LICENSE AGREEMENT.
 
@@ -24,6 +24,7 @@
       "enable": false
       "maxAge": "365 days"
     }
+    "maxPayloadSize": 100000
   }
 
   "database" {
@@ -59,6 +60,8 @@
     "schemaPublished": []
   }
 
+  "maxJsonDepth": 40
+
   preTerminationPeriod: "1 seconds"
   preTerminationUnhealthy: false
 

src/main/scala/com/snowplowanalytics/iglu/server/Config.scala

@@ -2,8 +2,8 @@
  * Copyright (c) 2014-present Snowplow Analytics Ltd. All rights reserved.
  *
  * This software is made available by Snowplow Analytics, Ltd.,
- * under the terms of the Snowplow Limited Use License Agreement, Version 1.0
- * located at https://docs.snowplow.io/limited-use-license-1.0
+ * under the terms of the Snowplow Limited Use License Agreement, Version 1.1
+ * located at https://docs.snowplow.io/limited-use-license-1.1
  * BY INSTALLING, DOWNLOADING, ACCESSING, USING OR DISTRIBUTING ANY PORTION
  * OF THE SOFTWARE, YOU AGREE TO THE TERMS OF SUCH LICENSE AGREEMENT.
  */
@@ -51,7 +51,8 @@ case class Config(
   superApiKey: Option[UUID],
   preTerminationPeriod: FiniteDuration,
   preTerminationUnhealthy: Boolean,
-  license: Config.License
+  license: Config.License,
+  maxJsonDepth: Int
 )
 
 object Config {
@@ -220,7 +221,8 @@ object Config {
     idleTimeout: Option[FiniteDuration],
     maxConnections: Option[Int],
     threadPool: ThreadPool,
-    hsts: Config.Hsts
+    hsts: Config.Hsts,
+    maxPayloadSize: Long
   )
 
   implicit val httpConfigCirceEncoder: Encoder[Http] =