Merge pull request #969 from stellar/release/6.0.0

Release `6.0.0` to `main`

Author: marwen-abid

.env.example

@@ -33,7 +33,7 @@ jobs:
           fi
 
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/automated_release_process.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install NodeJs
         uses: actions/setup-node@v6
@@ -100,12 +100,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install NodeJs
         uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Install dependencies
         working-directory: internal/serve/sep24frontend/app
@@ -128,7 +128,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -167,7 +167,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Setup Go
         uses: actions/setup-go@v6

.github/workflows/ci.yml

@@ -18,11 +18,11 @@ jobs:
     uses: ./.github/workflows/ci.yml # execute the callable ci.yml
     secrets: inherit # pass all secrets
 
-  anchor_platform_integration_check:
-    uses: ./.github/workflows/anchor_platform_integration_check.yml # execute the callable anchor_platform_integration_check.yml
+  internal_sep_validation:
+    uses: ./.github/workflows/internal_sep_validation.yml
     needs:
       - tests
-    secrets: inherit # pass all secrets
+    secrets: inherit
 
   e2e_integration_test:
     uses: ./.github/workflows/e2e_integration_test.yml # execute the callable e2e_integration_test.yml
@@ -36,8 +36,8 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - tests
-      - anchor_platform_integration_check
       - e2e_integration_test
+      - internal_sep_validation 
     steps:
       - name: Check if tag is not empty
         run: |
@@ -55,7 +55,7 @@ jobs:
             echo "TAGS=stellar/stellar-disbursement-platform-backend:${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
           fi
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Login to DockerHub
         uses: docker/[email protected]
@@ -78,10 +78,10 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - tests
-      - anchor_platform_integration_check
+      - internal_sep_validation
       - e2e_integration_test
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Login to DockerHub
         uses: docker/[email protected]

.github/workflows/docker_image_public_release.yml

@@ -88,17 +88,16 @@ jobs:
       CIRCLE_API_TYPE: ${{ matrix.CIRCLE_API_TYPE || 'TRANSFERS' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Cleanup data
         working-directory: internal/integrationtests/docker
         run: docker compose -f docker-compose-e2e-tests.yml down -v
         shell: bash
 
-      - name: Run Docker Compose for SDP, Anchor Platform and TSS
+      - name: Run Docker Compose for SDP and TSS
         working-directory: internal/integrationtests/docker
         run: docker compose -f docker-compose-e2e-tests.yml up --build -V -d
-        shell: bash
 
       - name: Install curl
         run: sudo apt-get update && sudo apt-get install -y curl
@@ -131,40 +130,29 @@ jobs:
           docker exec e2e-sdp-api sh -c "./stellar-disbursement-platform integration-tests create-data"
         shell: bash
 
-      - name: Restart Anchor Platform
+      - name: Verify SEP endpoints configuration
         run: |
-          docker restart e2e-anchor-platform
-        shell: bash
-
-      - name: Wait for the Anchor Platform to be up
-        run: |
-          wait_for_server() {
-            local endpoint=$1
-            local max_wait_time=$2
-
-            SECONDS=0
-            while ! curl -s $endpoint > /dev/null; do
-              echo "Waiting for server at $endpoint to be up... $SECONDS seconds elapsed"
-              sleep 4
-              if [ $SECONDS -ge $max_wait_time ]; then
-                echo "Server at $endpoint is not up after $max_wait_time seconds."
-                exit 1
-              fi
-            done
-            echo "Server at $endpoint is up."
-          }
-
-          wait_for_server http://localhost:8080/health 120
-          wait_for_server http://localhost:8085/health 120
+          echo "Checking stellar.toml configuration..."
+          TOML=$(curl -s http://localhost:8000/.well-known/stellar.toml)
+          
+          echo "Verifying SEP endpoints in stellar.toml..."
+          if echo "$TOML" | grep -q "TRANSFER_SERVER.*8000"; then
+            echo "✅ TOML correctly points to SEP-24 endpoints"
+          else
+            echo "❌ TOML does not point to SEP-24 endpoints"
+            echo "$TOML"
+            exit 1
+          fi
         shell: bash
 
       - name: Start integration test command
         run: |
+          echo "Running integration tests with native SDP SEP services"
           docker exec e2e-sdp-api sh -c "./stellar-disbursement-platform integration-tests start"
         shell: bash
 
       - name: Docker logs
         if: always()
         working-directory: internal/integrationtests/docker
         run: docker compose -f docker-compose-e2e-tests.yml logs && docker compose -f docker-compose-e2e-tests.yml down
-        shell: bash
+        shell: bash

.github/workflows/e2e_integration_test.yml

@@ -1,19 +1,20 @@
-name: SDP<>AnchorPlatform Integration
+name: Internal SEP Services Validation
+# this workflow tests that SDP's SEP implementations adhere to Stellar's SEP specifications
 
 on:
   push:
     branches:
       - main
   pull_request:
-  workflow_call: # allows this workflow to be called from another workflow
+  workflow_call:
 
 permissions:
   contents: read
 
 jobs:
-  anchor-integration:
+  internal-sep-validation:
     runs-on: ubuntu-latest
-    environment: "Anchor Integration Tests"
+    environment: "Internal SEP Tests"
     env:
       DISTRIBUTION_PUBLIC_KEY: ${{ vars.DISTRIBUTION_PUBLIC_KEY }}
       DISTRIBUTION_SEED: ${{ vars.DISTRIBUTION_SEED }}
@@ -23,23 +24,25 @@ jobs:
       SEP10_SIGNING_PRIVATE_KEY: ${{ vars.SEP10_SIGNING_PRIVATE_KEY }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
-      - name: Run Docker Compose for SDP and Anchor Platform
+      - name: Run Docker Compose for SDP
         working-directory: dev
-        run: docker compose -f docker-compose-sdp-anchor.yml down && docker compose -f docker-compose-sdp-anchor.yml up --build -d
+        run: |
+          export SEP10_CLIENT_ATTRIBUTION_REQUIRED=false
+          docker compose -f docker-compose-sdp.yml down && docker compose -f docker-compose-sdp.yml up --build -d
 
       - name: Install curl
         run: sudo apt-get update && sudo apt-get install -y curl
 
-      - name: Wait for localhost:8080/health
+      - name: Wait for localhost:8000/health
         timeout-minutes: 5
         run: |
-          until curl --output /dev/null --silent --head --fail http://localhost:8080/health; do
-            echo 'Waiting for anchor-platform to be up and running...'
+          until curl --output /dev/null --silent --fail http://localhost:8000/health; do
+            echo 'Waiting for SDP to be up and running...'
             sleep 15
           done
-          echo 'Anchor-platform is up and running.'
+          echo 'SDP is up and running.'
 
       - name: Install NodeJs
         uses: actions/setup-node@v6
@@ -54,4 +57,4 @@ jobs:
       - name: Docker logs
         if: always()
         working-directory: dev
-        run: docker compose -f docker-compose-sdp-anchor.yml logs && docker compose -f docker-compose-sdp-anchor.yml down
+        run: docker compose -f docker-compose-sdp.yml logs && docker compose -f docker-compose-sdp.yml down

…ws/anchor_platform_integration_check.yml …ub/workflows/internal_sep_validation.yml.github/workflows/anchor_platform_integration_check.yml renamed to .github/workflows/internal_sep_validation.yml .github/workflows/anchor_platform_integration_check.yml renamed to .github/workflows/internal_sep_validation.yml

@@ -30,14 +30,14 @@ jobs:
     environment: "Receiver Registration - E2E Integration Tests (Stellar)"
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Cleanup data
         working-directory: internal/integrationtests/docker
         run: docker compose -f docker-compose-e2e-tests.yml down -v
         shell: bash
 
-      - name: Run Docker Compose for SDP, Anchor Platform and TSS
+      - name: Run Docker Compose for SDP and TSS
         working-directory: internal/integrationtests/docker
         run: docker compose -f docker-compose-e2e-tests.yml up --build -V -d
         shell: bash

.github/workflows/singletenant_to_multitenant_db_migration_test.yml

@@ -11,8 +11,10 @@
 # Output of the go coverage tool, specifically when used with LiteIDE
 *.out
 
-# Environment file
+# Environment files
 .env
+.env.*
+!.env.example
 
 # subproject used for testing:
 v1_compatibility/stellar-relief-backoffice-backend
@@ -25,6 +27,9 @@ stellar-disbursement-platform-backend
 .idea
 .cursor
 
+# Local HTTPS certificates
+dev/certs/
+
 # Rust & Soroban
 target/
-test_snapshots/
+test_snapshots/

.gitignore

@@ -4,6 +4,46 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [6.0.0](https://github.com/stellar/stellar-disbursement-platform-backend/releases/tag/6.0.0) ([diff](https://github.com/stellar/stellar-disbursement-platform-backend/compare/5.0.0...6.0.0))
+
+### 🚨Potential Breaking Changes
+
+- Remove case insensitivity from asset code comparisons [#967](https://github.com/stellar/stellar-disbursement-platform-backend/pull/967)
+- Decommission Anchor Platform and add support for SEP-10 and SEP-24 endpoints in the SDP [#834](https://github.com/stellar/stellar-disbursement-platform-backend/pull/834)
+    - Add SEP10 /auth endpoints
+    - Add SEP24 /info endpoints
+    - Add SEP24 interactive deposit endpoint
+    - Remove Anchor Platform integration from the SDP and deprecate related env variables.
+
+### Added
+
+- Add Launch Wizard through `make setup` command to simplify initial setup and mainnet configuration for docker compose [#875](https://github.com/stellar/stellar-disbursement-platform-backend/pull/875)
+    - Add `--env-file` command line argument to support multiple environment file contexts [#963](https://github.com/stellar/stellar-disbursement-platform-backend/pull/963) 
+- Add HTTPS mode to setup wizard [#957](https://github.com/stellar/stellar-disbursement-platform-backend/pull/957)
+- Add configurable database connection pool settings to prevent idle connection buildup in multi-tenant deployments [#932](https://github.com/stellar/stellar-disbursement-platform-backend/pull/932)
+
+### Changed
+
+- Default Max Open Connections per pool changed from 30 to 20 to prevent idle connection buildup in multi-tenant deployments [#932](https://github.com/stellar/stellar-disbursement-platform-backend/pull/932)
+- Make docker compose environment variables configurable via `.env` file and add documentation [#953](https://github.com/stellar/stellar-disbursement-platform-backend/pull/953)
+- Update Stellar Go SDK dependency from `github.com/stellar/go` to `github.com/stellar/go-stellar-sdk` [#956](https://github.com/stellar/stellar-disbursement-platform-backend/pull/956)
+
+### Fixed
+
+- Fix HTML validation to allow apostrophes in invitation messages while maintaining security against XSS attacks [#931](https://github.com/stellar/stellar-disbursement-platform-backend/pull/931)
+- Refactor to replace float64 with shopspring decimal [#936](https://github.com/stellar/stellar-disbursement-platform-backend/pull/936)
+- `channel-accounts ensure` command should have a minimum of 1 [#939](https://github.com/stellar/stellar-disbursement-platform-backend/pull/939)
+
+### Security and Dependencies
+
+- Upgrade React to 19.2.1 in SEP-24 frontend to address CVE-2025-66478 and CVE-2025-55182 [#968](https://github.com/stellar/stellar-disbursement-platform-backend/pull/968)
+- Bump the minor-and-patch group with 5 updates [#961](https://github.com/stellar/stellar-disbursement-platform-backend/pull/961)
+- Bump the minor-and-patch group across 1 directory with 12 updates [#955](https://github.com/stellar/stellar-disbursement-platform-backend/pull/955)
+- Bump actions/checkout from 5 to 6 in the all-actions group [#954](https://github.com/stellar/stellar-disbursement-platform-backend/pull/954)
+- Bump js-yaml from 4.1.0 to 4.1.1 in the npm_and_yarn group [#947](https://github.com/stellar/stellar-disbursement-platform-backend/pull/947)
+- Bump golang from 1.25.3-alpine to 1.25.4-alpine in the all-docker group [#940](https://github.com/stellar/stellar-disbursement-platform-backend/pull/940)
+- Bump the minor-and-patch group with 7 updates [#933](https://github.com/stellar/stellar-disbursement-platform-backend/pull/933)
+
 ## [5.0.0](https://github.com/stellar/stellar-disbursement-platform-backend/releases/tag/5.0.0) ([diff](https://github.com/stellar/stellar-disbursement-platform-backend/compare/4.1.0...5.0.0))
 
 ### Added

CHANGELOG.md

@@ -3,7 +3,7 @@
 # To push:
 #    make docker-push
 
-FROM golang:1.25.3-alpine AS build
+FROM golang:1.25.4-alpine AS build
 ARG GIT_COMMIT
 
 ENV CGO_ENABLED=0 GOOS=linux