CHANGELOG.md

CHANGELOG

v0.4.0 (2024-09-25)

Chore

• chore: Merge back version tags and changelog into develop. (fa1b53d)

Feature

• feat: adds fedramp-transform command implementation (#39)

This changes adds the initial implementation for populating FedRAMP document templates with information from OSCAL SSPs with FedRAMP extensions

Signed-off-by: Jennifer Power <[email protected]> (2136659)

Unknown

• Merge pull request #57 from oscal-compass/develop

chore: fedramp plugin release (73522ca)

v0.3.0 (2024-09-16)

Breaking

• feat: updates content and git submodule for FedRAMP Rev5 validation (#22)

• feat: updates content from FedRAMP Rev4 to Rev5

Updates FedRAMP submodule to the latest commit

The location of the XSLT has changed from the repository to the OSCAL release so the NIST submodule was removed and the download_oscal_converters script was added

BREAKING CHANGE: This drops support for Rev4 validation

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]>

• test: adds assertions to validate command unit tests

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (d09c742)

Build

• build(deps): bump actions/checkout from 2 to 4 (#51)

Bumps actions/checkout from 2 to 4.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ...

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (ba4e976)

Chore

• chore(deps): bump trestle version to major version 3 (#44)

• chore(deps): updates trestle to new major version

Signed-off-by: Jennifer Power <[email protected]>

• chore(deps): drops python 3.8 support, adds 3.10 and 3.11

Aligns supported python versions with compliance-trestle

Signed-off-by: Jennifer Power <[email protected]>

• chore: replaces pkg_resources with importlib.resources

pkg_resources is deprecated in Python 3.11

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (b16607d)

• chore: Merge back version tags and changelog into develop. (7b6cc41)

• chore: add updates information for move to new org (#35)

• docs: updates README and setup.cfg with new organization

Signed-off-by: Jennifer Power <[email protected]>

• docs: updates CODE OF CONDUCT to match compliance-trestle

Signed-off-by: Jennifer Power <[email protected]>

• docs: updates issue templates with new organization and repo information

Signed-off-by: Jennifer Power <[email protected]>

• ci: updates workflow files with correct organization information

Signed-off-by: Jennifer Power <[email protected]>

• docs: updates MAINTAINER.md

• docs: updates CONTRIBUTING.md with trestle guidance

Signed-off-by: Jennifer Power <[email protected]>

• docs: fixes grammatical errors in contributing doc

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (9556b6d)

• chore: updates actions on the python-push.yml (#30)

• chore: removes windows dev tool install from python-push.yml

Signed-off-by: Jennifer Power <[email protected]>

• chore: removes direct-merge-action from python-push.yml

Signed-off-by: Jennifer Power <[email protected]>

• ci: removes sonar job and combines lint and test into build

This alter the CI Trestle Deploy workflow to match the compliance-trestle workflow

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (bffa6ed)

• chore: Merge back version tags and changelog into develop. (4420c46)

Ci

• ci: updates github actions and adds dependabot configuration (#49)

• build(deps): updates GitHub Actions versions in CI

• feat: adds dependabot for automated updates

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (623f787)

• ci: updates workflow for v9 of semantic release (#46)

• fix: pins semantic release to version v7 and adds an optional minor flag

The latest version of semantic-release does not support setup.cfg. Pinning to the same version as compliance-trestle so the upgrades can be made in sync. This project is still in beta so adding an option to force minor releases for breaking changes.

Signed-off-by: Jennifer Power <[email protected]>

• chore: fixes formatting on Makefile

Signed-off-by: Jennifer Power <[email protected]>

• chore: set MINOR variable on python-push.yml

• refactor: updates semantic release to 9.8.0

Align semantic release update logic with trestle

Signed-off-by: Jennifer Power <[email protected]>

• chore: moves MINOR env logic from Makefile

This is handled through pyproject.toml

Signed-off-by: Jennifer Power <[email protected]>

• ci(deps): updates actions/checkout to v4 in python-push workflow

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> (7a5ec63)

• ci: adds commitlint configuration for CI PR linting check (#24)

Signed-off-by: Jennifer Power <[email protected]> (3c8ed8c)

Documentation

• docs: updates CODE_OF_CONDUCT to CNCF (#45)

Signed-off-by: Jennifer Power <[email protected]> (d95a894)

• docs: updates README with fixed linked and setup information (#26)

Signed-off-by: Jennifer Power <[email protected]> (3bb0291)

Feature

• feat: updates python dependencies for fedramp plugin (#21)

• feat: update to use trestle version 2

Update trestle to version 2.5.1 Adds initial code changes for trestle v2 API Updates pre-commit configuration

---

Signed-off-by: Jennifer Power <[email protected]>

• feat: Remove saxonc configuration

Signed-off-by: Ekaterina Nikonova <[email protected]>

• feat: updates project to use saxonc-he version 12.4.1

Official python wheel packages are available for saxonc home edition. This updates the code and setup config to use that version.

Signed-off-by: Jennifer Power <[email protected]>

• chore: removes pre-commit autoupdate from code-format and code-lint

The autoupdate feature is updating flake8 to a version that does not support Python 3.8

Signed-off-by: Jennifer Power <[email protected]>

• chore: drops python 3.7 support

Signed-off-by: Jennifer Power <[email protected]>

• chore: fixes linting errors

Signed-off-by: Jennifer Power <[email protected]>

• ci: updates Actions in CI workflow to match compliance-trestle

Signed-off-by: Jennifer Power <[email protected]>

---

Signed-off-by: Jennifer Power <[email protected]> Signed-off-by: Ekaterina Nikonova <[email protected]> Co-authored-by: Ekaterina Nikonova <[email protected]> (675f354)

Fix

• fix: updates build command to install deps into container (#55)

Signed-off-by: Jennifer Power <[email protected]> (868716f)

• fix: updates sonar job so it does not run on dependabot PRs (#53)

Signed-off-by: Jennifer Power <[email protected]> (daf39af)

• fix: add submodules update in Makefile (#18)

• fix: model extension

• fix: added submdules in Makefile

• fix: added toml dependency

Co-authored-by: Vikas <[email protected]> (278c994)

Unknown

• Merge pull request #56 from oscal-compass/develop

chore: fedramp release (23debac)

• Merge pull request #48 from oscal-compass/develop

chore: fedramp plugin release (1186c6a)

• Merge pull request #31 from oscal-compass/develop

chore: fedramp plugin release (0b78f39)

• Merge pull request #28 from IBM/develop

chore: fedramp plugin release (b2f3e21)

v0.2.1 (2021-12-22)

Chore

• chore: Merge back version tags and changelog into develop. (9f7e3b3)

Fix

• fix: updated readme.md (#10)

• fix: model extension

• fix: updated readme.md

• fix: updated mdformatting

Co-authored-by: Vikas <[email protected]> (5ad08fa)

Unknown

• Merge pull request #11 from IBM/develop

chore: release (78744fa)

v0.2.0 (2021-12-03)

Chore

• chore: Merge back version tags and changelog into develop. (16e766c)

Feature

• feat: added fedramp validation code (#2)

• added fedramp validation code

• corrected format and lint

• fix: Correcting build scripts to allow saxon installs.

Signed-off-by: Chris Butler <[email protected]>

• fix: correcting CI workflow.

Signed-off-by: Chris Butler <[email protected]>

• fix: correcting CI workflow.

Signed-off-by: Chris Butler <[email protected]>

• fix: correcting CI workflow.

Signed-off-by: Chris Butler <[email protected]>

• fix: correct environment for linux

Signed-off-by: Chris Butler <[email protected]>

• fix: correct environment for linux

Signed-off-by: Chris Butler <[email protected]>

• fix: setting up environment correctly across mac os and linux.

Signed-off-by: Chris Butler <[email protected]>

• fix: Added missing install script.

Signed-off-by: Chris Butler <[email protected]>

• fix: Test for ubuntu latest only.

Signed-off-by: Chris Butler <[email protected]>

• fix: remove more build options.

Signed-off-by: Chris Butler <[email protected]>

• fix: Add extra test verbosity

Signed-off-by: Chris Butler <[email protected]>

• fix: Ensure libraries have permission to copy.

Signed-off-by: Chris Butler <[email protected]>

• fix: Ensure libraries have permission to copy.

Signed-off-by: Chris Butler <[email protected]>

• fix: Correct mac os build path

Signed-off-by: Chris Butler <[email protected]>

• fix: Correct mac os build path

Signed-off-by: Chris Butler <[email protected]>

• fix: Stuff

Signed-off-by: Chris Butler <[email protected]>

• fix: Stuff

Signed-off-by: Chris Butler <[email protected]>

• fix: Get it done.

Signed-off-by: Chris Butler <[email protected]>

• fix: Fix paths.

Signed-off-by: Chris Butler <[email protected]>

• fix: Fix paths.

Signed-off-by: Chris Butler <[email protected]>

• added command and updated saxonc install on MacOS

• updated code linting

• updated saxonc install on MacOS

• fix: update macos script

• fix: macos sxcript

• fix: macos

• fix: macos script

• fix macos

• fix: Ensure saxon is available to bdist testing

Signed-off-by: Chris Butler <[email protected]>

• fix: Ensure saxon is available to bdist testing

Signed-off-by: Chris Butler <[email protected]>

• fix: Much more logging in the test script

Signed-off-by: Chris Butler <[email protected]>

• fix: ensure explicit export of of environmental variables.

Signed-off-by: Chris Butler <[email protected]>

• fix: ensure explicit export of of environmental variables.

Signed-off-by: Chris Butler <[email protected]>

• fix: Checking github env.

Signed-off-by: Chris Butler <[email protected]>

• fix: Checking github env.

Signed-off-by: Chris Butler <[email protected]>

• fix: Checking github env.

Signed-off-by: Chris Butler <[email protected]>

• fix: Envirnonmental variables passing.

Signed-off-by: Chris Butler <[email protected]>

• fix: Remove uneeded if statement.

Signed-off-by: Chris Butler <[email protected]>

• fix: Checking pythonpath.

Signed-off-by: Chris Butler <[email protected]>

• fix: correct source.

Signed-off-by: Chris Butler <[email protected]>

• fix: correct source.

Signed-off-by: Chris Butler <[email protected]>

• fix: correct source.

Signed-off-by: Chris Butler <[email protected]>

Co-authored-by: Vikas <[email protected]> Co-authored-by: Chris Butler <[email protected]> (1c365ab)

Fix

• fix: fedramp validate command to extend from CommandBase (#8)

• fix: model extension

• fix: updated command to use CommandBase instead of CommandPlusDocs

• fix: update code formatting

• fix: update setup for right trestle version

Co-authored-by: Vikas <[email protected]> (caf61ae)

• fix: Correct build pipeline for prod (#7)

Signed-off-by: Chris Butler <[email protected]> (533fda9)

• fix: model extension (#5)

Co-authored-by: Vikas <[email protected]> (1c20dd5)

Unknown

• Merge pull request #9 from IBM/develop

chore: trestle-fedramp release (5e84457)

• Merge pull request #6 from IBM/develop

chore: Trestle fedramp release (b62633b)

v0.1.0 (2021-11-11)

Feature

• feat: Add changelog marker for semantic release.

Signed-off-by: Chris Butler <[email protected]> (8905afd)

• feat: Initial CI setup.

Signed-off-by: Chris Butler <[email protected]> (6271821)

Fix

• fix: Setting floor coverage to 0

Signed-off-by: Chris Butler <[email protected]> (d32cac4)

• fix: Correcting PR linting pipeline

Signed-off-by: Chris Butler <[email protected]> (0600f2a)

• fix: Adding bdist test scripts.

Signed-off-by: Chris Butler <[email protected]> (f84e1bf)

• fix: Correcting mdformat.

Signed-off-by: Chris Butler <[email protected]> (f3b8c18)

Unknown

• Merge pull request #4 from IBM/develop

Test release (e8fa012)

• Merge pull request #3 from IBM/feat/CI

chore: Ensuring CI is setup correctly. (58ade78)

• Chore: Ensuring CI is setup correctly.

Signed-off-by: Chris Butler <[email protected]> (68b7c97)

• Merge pull request #1 from IBM/feat/initial_ci_setup

feat: Initial CI setup. (af66c86)

• fix:Updating sonar setup

Signed-off-by: Chris Butler <[email protected]> (cfb6f37)

• fix:Updating sonar setup

Signed-off-by: Chris Butler <[email protected]> (2a3131d)

• fix:Cleaned up CI pipelines

Signed-off-by: Chris Butler <[email protected]> (32f0b0a)

• fix:Cleaned up CI pipelines

Signed-off-by: Chris Butler <[email protected]> (56c5c5e)

• Initial commit (44298fe)