v1.3.0

Changelog

🚀 Features

• feat: Update AssessmentLog to include Evidence (ADR-0022) @eddie-knight (#421)

🧰 Maintenance

• docs: create ADR 0022 for Evidence in AssessmentLog @jpower432 (#420)
• ci: add CodeQL analysis workflow configuration @jpower432 (#418)
• chore(deps): bump jekyll-remote-theme from 0.5.0 to 0.5.1 in /docs in the dependencies group @dependabot[bot] (#415)
• chore(deps): bump jekyll-remote-theme from 0.4.3 to 0.5.0 in /docs in the dependencies group @dependabot[bot] (#413)
• chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#414)
• chore: bumps tutorial content to v1.2.0 @hbraswelrh (#412)
• docs: Update license statements @eddie-knight (#411)

See details of all code changes since previous release

v1.2.0

Changelog

🚀 Features

• feat(riskcatalog): optional rank for risk prioritization (#339) @sonupreetam (#395)

🧰 Maintenance

• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 0.6.0 to 1.0.1 @dependabot[bot] (#409)
• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml from 0.6.0 to 1.0.1 @dependabot[bot] (#408)
• chore: migrate testdata to v1 @hbraswelrh (#410)
• docs: add client-side site search to the sidebar @eddie-knight (#401)
• chore(deps): bump jekyll-seo-tag from 2.8.0 to 2.9.0 in /docs in the dependencies group @dependabot[bot] (#405)

See details of all code changes since previous release

v1.1.0

Changelog

🚀 Features

• feat: adds mapping document tutorial @hbraswelrh (#354)
• feat: add backward compatibility check for stable CUE schemas @Satarupa22-SD (#374)

🧰 Maintenance

• chore: bump ospo-reusable-workflows release.yaml to v1.0.1 @jmeridth (#407)
• chore(deps): bump nokogiri from 1.19.2 to 1.19.3 in /docs @dependabot[bot] (#403)
• docs: list ADRs on the ADR index page @eddie-knight (#398)
• docs: add GitHub icon link to site header @eddie-knight (#399)
• docs: link roadmap page to live project board @eddie-knight (#400)
• docs: update with latest features @eddie-knight (#396)
• chore: Makefile for deps management @eddie-knight (#393)
• ci: dewonkify termlinker command @eddie-knight (#394)
• chore: updates tutorial content v1 references @hbraswelrh (#392)
• chore(deps): bump html-proofer from 5.2.0 to 5.2.1 in /docs in the dependencies group across 1 directory @dependabot[bot] (#384)
• docs: updates lexicon to conform to Gemara schema @jpower432 (#388)
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the dependencies group @dependabot[bot] (#389)
• chore(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 @dependabot[bot] (#390)

See details of all code changes since previous release

v1.0.0

Changelog

🚀 Features

• feat: Lexicon Schema @eddie-knight (#382)
• feat: add group and accepted method validations @jpower432 (#373)
• feat: adds risk catalog tutorial @hbraswelrh (#358)
• feat: refactor MappingDocument to reduce duplication @jpower432 (#370)
• feat: adds gemara-documentation CODEOWNERS @hbraswelrh (#369)
• feat: add AuditLog schema @jpower432 (#360)
• feat: add PrincipleCatalog schema @jpower432 (#350)

🐛 Bug Fixes

• fix: make reference-id requirement on EntryMapping @jpower432 (#383)
• fix: add @go annotation to criteria-reference in auditlog @jpower432 (#380)
• fix(docs): add gemara-version to threat assessment tutorial @hbraswelrh (#379)
• fix: add group field to Principle and Principle to EntryType @jpower432 (#366)

🧰 Maintenance

• chore: remove prerelease fields from release drafter config @jpower432 (#387)
• chore(deps): bump addressable from 2.8.8 to 2.9.0 in /docs @dependabot[bot] (#385)
• chore(deps): bump actions/configure-pages from 5.0.0 to 6.0.0 @dependabot[bot] (#377)
• chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 @dependabot[bot] (#376)
• docs: ADR-0021 - Lexicon Schema @eddie-knight (#381)
• chore: updates tutorials with v1.0.0-rc.1 @hbraswelrh (#378)
• chore(deps): bump revanite-io/osps-baseline-action from 1.3.1 to 1.3.2 in the dependencies group @dependabot[bot] (#375)
• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 23927bfee44244f3242122814e8e5ac070dc6670 to a0cf79bd8756e0a9c1555bf4975eae7ce7a8e8dc @dependabot[bot] (#368)
• chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#367)
• chore: updates cue.mod to v1 @jpower432 (#365)
• chore: mark Layer 5 log and Layer 2 catalogs as stable @jpower432 (#363)
• ci: add prerelease settings to release drafter config @jpower432 (#364)
• chore(deps): bump json from 2.17.1 to 2.17.1.2 in /docs @dependabot[bot] (#361)

See details of all code changes since previous release

v1.0.0-rc.2

Changelog

🚀 Features

• feat: Lexicon Schema @eddie-knight (#382)
• feat: add group and accepted method validations @jpower432 (#373)

🐛 Bug Fixes

• fix: add @go annotation to criteria-reference in auditlog @jpower432 (#380)
• fix(docs): add gemara-version to threat assessment tutorial @hbraswelrh (#379)

🧰 Maintenance

• docs: ADR-0021 - Lexicon Schema @eddie-knight (#381)
• chore: updates tutorials with v1.0.0-rc.1 @hbraswelrh (#378)
• chore(deps): bump revanite-io/osps-baseline-action from 1.3.1 to 1.3.2 in the dependencies group @dependabot[bot] (#375)

See details of all code changes since previous release

v1.0.0-rc.1

Changelog

🚀 Features

• feat: adds risk catalog tutorial @hbraswelrh (#358)
• feat: refactor MappingDocument to reduce duplication @jpower432 (#370)
• feat: adds gemara-documentation CODEOWNERS @hbraswelrh (#369)

🐛 Bug Fixes

• fix: add group field to Principle and Principle to EntryType @jpower432 (#366)

🧰 Maintenance

• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 23927bfee44244f3242122814e8e5ac070dc6670 to a0cf79bd8756e0a9c1555bf4975eae7ce7a8e8dc @dependabot[bot] (#368)
• chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#367)
• chore: updates cue.mod to v1 @jpower432 (#365)

See details of all code changes since previous release

v1.0.0-rc.0

Changelog

🚀 Features

• feat: add AuditLog schema @jpower432 (#360)
• feat: add PrincipleCatalog schema @jpower432 (#350)

🧰 Maintenance

• chore: mark Layer 5 log and Layer 2 catalogs as stable @jpower432 (#363)
• ci: add prerelease settings to release drafter config @jpower432 (#364)
• chore(deps): bump json from 2.17.1 to 2.17.1.2 in /docs @dependabot[bot] (#361)

See details of all code changes since previous release

v0.23.0

Changelog

🚀 Features

• refactor: reorganize CUE files by artifact-type @jpower432 (#355)

🧰 Maintenance

• refactor: reorganize CUE files by artifact-type @jpower432 (#355)

See details of all code changes since previous release

v0.22.0

Changelog

🚀 Features

• feat: changed families and categories to groups (ADR-0020) @eddie-knight (#359)
• feat: ADR-0019, added capability catalog type @eddie-knight (#351)
• feat: consolidate shared fields into #Catalog @eddie-knight (#356)
• feat: add layer6 EnforcementLog schema @jpower432 (#336)

🐛 Bug Fixes

• fix: re-number duplicate ADR 0014 @eddie-knight (#353)
• fix: remove hidden validation fields in mapping and layer 1 @jpower432 (#343)
• fix: enforce non-empty list constraints on all array fields @jpower432 (#344)
• fix: update control import statement to match latest schema @gvauter (#349)
• fix: replace Zero with Minimal in RiskAppetite enum @jpower432 (#346)
• fix: add strength to mapping document entries @jpower432 (#348)
• fix: adds missing colon to threat-assessment-guide @hbraswelrh (#347)

🧰 Maintenance

• docs: Log rejected proposal for "group" catalogs @eddie-knight (#357)
• refactor: add common base types for Log collection types @jpower432 (#352)
• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 4207841bec4e1e360a791af5f8f90e7ff8fa28dd to 23927bfee44244f3242122814e8e5ac070dc6670 @dependabot[bot] (#345)

See details of all code changes since previous release

v0.21.0

Changelog

🚀 Features

• feat: Add risk catalog to layer 3 @Satarupa22-SD (#324)

🐛 Bug Fixes

• fix: updates RiskCatalog to reference RiskCategory and add artifact type @jpower432 (#342)
• fix: make imports nillable in layer2 @jpower432 (#341)
• fix: go type annotations @eddie-knight (#340)

See details of all code changes since previous release