GIScience/openrouteservice v10.0.0 on GitHub

What's Changed

feat: enhance vulnerability scanning workflow to build and scan images by @MichaelsJP in #2345
feat: consider heat stress in isochrones by @aoles in #2363
feat: update to Spring Boot 4 by @takb in #2393
feat: Add optional parameter ors.engine.preparation_type by @robck in #2417

feat: distroless slim image by @MichaelsJP in #2387
feat: pin base images by digest by @MichaelsJP in #2346
feat: attach SBOM and max-mode provenance attestations on push by @MichaelsJP in #2347
feat: add OCI title/description/documentation labels to base image by @MichaelsJP in #2364
feat: Disable file logging to finally support read-only for the slim image by @MichaelsJP in #2367
feat: harden slim tomcat by @MichaelsJP in #2368
fix: let the slim image run under an arbitrary UID by @MichaelsJP in #2366

fix: penalize routing through service ways by @jarinox in #2313
fix: more realistic travel speeds for HGVs by @jarinox in #2329
fix: update minio to 9.0.3 to fix CVE by @MichaelsJP in #2334
fix: pass branch through to reusable Docker build workflow by @MichaelsJP in #2340
fix: give the healthcheck a start-period so it survives longer graph loading by @MichaelsJP in #2365
fix: change the healthcheck to a 10s interval per k8s defaults by @MichaelsJP in #2369
fix: declare the JAXB and javax.xml.bind dependencies explicitly by @MichaelsJP in #2388
fix: Update tomcat.version to 11.0.25 to address security vulnerability by @MichaelsJP in #2413
fix: cycling-electric slower than cycling-regular by @jarinox in #2328

ci: replace grype with trivy for CVE scan by @MichaelsJP in #2335
ci: bump image versions by @koebi in #2336
ci: trivy scan fixes for vuln, secrets and dockerfile scanner by @MichaelsJP in #2337
feat: Update to Java 25 (latest LTS) by @takb in #2382
ci: set top-level permissions on the workflows by @MichaelsJP in #2385
docs: document csv extra info #1974 by @AzazelSensei in #2394
ci: move build layout resolution into the build-docker-image action by @MichaelsJP in #2403
ci: add a shared trivy-scan action and audit the published images by @MichaelsJP in #2404
ci: scan images in the job that builds them by @MichaelsJP in #2405
ci: Introduce trivy gates by @MichaelsJP in #2407
docs: openvex unfixable glibc cves by @MichaelsJP in #2409
ci: checkov iac scanning by @MichaelsJP in #2412
build: reduce warnings in the maven build / at application boot time by @takb in #2421
build(deps): bump nanoid from 3.3.16 to 3.3.19 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #2419

Full Changelog: v9.10.0...v10.0.0