Highlights

• New endpoint POST /depsn-service/pseudonym/translate — resolves an external (project-based) pseudonym to its corresponding internal pseudonym, without reversing to patient data (IDAT). No Apache configuration change required.
• compose.sh helper script — replaces manual -f chains when starting or stopping the stack. Use flags (--monitoring, --keycloak, --pseudo, --debug) instead of spelling out each compose file.
• Eyematics bloom filter profile — a second patient-matching profile alongside NUM-Codex, configurable via BF_EYEMATICS_* parameters.
• Pseudonymization request statistics — new Grafana dashboard tracking per-client request counters (single / batch / Parameters interface). Prometheus now scrapes the pseudonymization service(s) directly.
• Reduced database write load — the pseudonymization service now skips spurious writes for unchanged records.

Added

• compose.sh — helper script for launching compose stacks. Flags select which overlay files to include (--pseudo, --keycloak, --monitoring, --debug); file order is always deterministic. Each included file is automatically paired with a matching *.override.yml if present.
• Debug overlay docker-compose.debug.yml — passes -D DEBUG to httpd, exposing Prometheus UI, Spring Cloud Config Server, and per-service actuator metrics through the proxy. Do not use on production.
• Security response headers on the reverse proxy: Strict-Transport-Security (HSTS, 1 year), X-Frame-Options SAMEORIGIN, X-Content-Type-Options nosniff, Referrer-Policy strict-origin-when-cross-origin.
• Prometheus now scrapes the pseudonymization service(s) directly for per-client usage counters; new Grafana dashboard Pseudonymization Request Statistics provisioned automatically.
• WRITE_PROVENANCE — controls whether a FHIR Provenance entry is appended to each processed bundle (defaults to true).
• Bloom filter profile for eyematics (BF_EYEMATICS_* parameters).
• Per-service version parameters replacing the unified VERSION parameter: VERSION_CONFIG_SERVER, VERSION_WEBAPP_BACKEND, VERSION_WEBAPP_HOME, VERSION_WEBAPP_FRONTEND, VERSION_PSEUDONYMIZATION, VERSION_DEPSEUDONYMIZATION, VERSION_INTERFACE, VERSION_MONITORING.
• New endpoint POST /depsn-service/pseudonym/translate — resolves an external pseudonym to its internal counterpart without returning patient IDAT; exposed via existing reverse proxy rules.

Changed

• Actuator /prometheus endpoints removed from the default Apache proxy config; now only exposed via the debug overlay (--debug).
• Directory listing disabled in httpd.conf.
• Renamed NUM-Codex bloom filter parameters (previously prefixed LEVEL_1_BF_, now BF_NUMCODEX_*).

Fixed

• httpd.conf: invalid Options directive that prevented the reverse proxy from starting in some configurations.
• Debug overlay now activates via httpd -D DEBUG command override instead of volume-mounting a separate config file.
• CI test infrastructure: container readiness check now waits for port 443; SSL test certificate renewed.

Service updates

• Pseudonymization service — skips spurious database writes for unchanged records, reducing write load in deployments with high lookup-to-create ratios.
• Home page — service status table now shows each service’s version independently, reflecting the new per-service versioning.

Removed

• VERSION env parameter (replaced by per-service version parameters).