Skip to content

OSCAL 1.1.0 Release
Compare
Choose a tag to compare
@oscalbuilder oscalbuilder released this 25 Jul 21:28
· 55 commits to main since this release
v1.1.0
This tag was signed with the committer’s verified signature.
nikitawootten-nist
SSH Key Fingerprint: iKDbBlLQSSPanspP3GLCguiucunTBJZhlWn3tPsFpwU Learn about vigilant mode.
ef4df06
This commit was signed with the committer’s verified signature.
nikitawootten-nist
SSH Key Fingerprint: iKDbBlLQSSPanspP3GLCguiucunTBJZhlWn3tPsFpwU Learn about vigilant mode.

Summary

1.1.0 will be a minor release with important backwards-compatible enhances and bug-fixes around SSP, POA&M, profile, and cross-model metadata. Many of these feature enhancements have been pending release for over 12 months with neutral or positive community support.

Key takeaways and full details are below.

Changes: Key Takeaways

Models

  1. SSP: Change certain elements from required to optional for non-RMF use cases.
  2. SSP: improve constraints of links for cross-referencing components and indicating where components were imported from.
  3. POAM: add related-findings assembly.
  4. Profile: Remove with-parent-controls from the profile model.
  5. Metadata: add group attribute to props
  6. Metadata: add resource fragment to links (very useful for deep-linking into elements by UUID and point to sub-element UUID)
  7. Metadata: add actions assembly to track approvals or request for changes status.
  8. Metadata: correct how cross-references between controls and their parts are handled.
  9. ⚠️ Mapping: re previous discussion, mapping, by itself or within catalog, has been moved out of the v1.1.0 release.

Profile Resolution and Process Specs

  1. Aligning with model, remove with-parent-controls feature from Profile Resolution spec and unit tests.

Other

  1. Website updates to reference model docs to improve performance.
  2. ⚠️ We are going to include the website migration as part of the release (because of how GitHub works).

Details

Below is a list of every change that will be promoted from develop to a 1.1.0 release branch. The changes to models, docs, and code can be reviewed. All dependency changes from Dependabot and auto-committed website changes are excluded.

  1. defe67ee0 Mapping model relocation 1/2: delete from develop (#1850)
  2. 2d502f9b1 Added changes for #1798 (#1842)
  3. bc7efd38b 1797 allow local definition of asset type prop values (#1821)
  4. e5d24f910 Remove with-parent-controls developmental feature (#1819)
  5. be98b429c Removed default-mode to avoid apply-template loop when the stylesheet is applied to a document. (#1804)
  6. 7f5bf8051 Validating the current SP 800-53 catalog in oscal-content results in a missing key violation. This fixes that. (#1808)
  7. 7e43b9a92 Only build and test with container on upstream (#1817)
  8. 10c5efbb9 Add missing $ in Linux build setup steps (#1779)
  9. 97dcbc1ac Update Style for Generating Reference Model Anchors at Build Time (#1789)
  10. ff951bd00 Feature profile resolution unittesting a (#1770)
  11. d43713a59 Specify classpath for Saxon under XSpec for #1743. (#1744)
  12. 574def6d0 Remove optional leveraged-authorization prop on implemented req. (#1729)
  13. e1861c198 Add the with-parent-controls for #1662. (#1717)
  14. adfae0828 Fix CSS for choice elements in outline docs (#1687)
  15. d54cf495c Profile resolution how-to readmes (#1666)
  16. 59ef15d23 Compatibility with Saxon 10 and 11 (#1685)
  17. b267c6a0f Require (Warn) port start and end when protocol is specified. (#1674)
  18. fb8a0833c Fix Docker container build for local dev and debugging (#1598)
  19. 95461753e Fix rel path from XSLT transform source issue, fix #1603. (#1604)
  20. d92a3b0cd Fixed improper use of allowed-values/allow-other. Ensured that all props in the OSCAL namespace are properly closed and all link rels are open for extension. (#1579)
  21. 49ba917ad Fixed syntax errors in metapaths (#1574)
  22. 48a24583a Adds a constraint and index of by-component objects to support provided-by relation in links #1022 (#1452)
  23. 0889a5a0c Added resource-fragment flag to link. (#1527)
  24. 30fae9d13 Add possible Schematron documentation checks (#1501)
  25. 9a1583e25 reduced the amount of 'OSCAL' references in data type documentation. (#1531)
  26. 354fe57ea Add profile checks with Schematron for usnistgov/oscal-content#128. (#1513)
  27. a332ff061 Fix broken uri-use page links in updated reference docs of develop branch (#1518)
  28. f3371cc35 POAM related finding support, fixes #1120 (#1478)
  29. 9e5793701 Support additional control-origination props #784 (#1460)
  30. 61e19ef6f Updated data type documentation adding a note about why NCName was deprecated. Fixes #1105 (#1480)
  31. d5b66f6b0 Test modify phase, plus minor XSLT enhancements (#1321)
  32. 988817c4b Updates to OSCAL Metaschema documentation and constraints (#1263)
  33. e5fa65f2b Implement opr:oscal-version and v:compare functions. (#1420)
  34. 22f423e7a Add actions assembly to encode an action (i.e. approval) and its role, party, and approval date. (#1052) (#1429)
  35. 46e21da20 Added JSON value key for relationship type. This missing value key was discovered as part of #1458. (#1462)
  36. 0ed533b5e Update metaschema submodule for #1454. (#1455)
  37. e93f12bb0 Fixed errors in profile resolution top-level tests based on content errors.
  38. bc7b89206 imported-from relations for #1023. (#1403)
  39. b43142a80 Create <define-assembly name="impact"> (fix #1129) (#1171)
  40. d3e475abc Adding link to whitelist
  41. b8d5eccac More broken link fixes.
  42. 6fb55e948 Fixed broken links.
  43. 63b6e8688 Fixing broken links
  44. b4f048501 Add assessment-assets assembly to local-definitions assembly in POAM model. #1291 (#1417)
  45. 6c80f4f9a Updates mapping model documentation to fix a copy and paste error. (#1409)
  46. 3a75b0f0c Add grouping construct to props for #1064. (#1412)
  47. 4ef21bbd6 Added legacy Withdrawn status with deprecation entry (#1419)
  48. b972ec3f9 Profile alter model adjustments (#1418)
  49. 1f01b5be2 Add remarks field to Profile model modify.alter (add/remove). #1018 (#1404)
  50. 3ca36fbae Follow keep instruction for back-matter resources (#1378)
  51. 76ff697a6 Test finish phase, plus minor XSLT enhancements and fixes (#1377)
  52. dfb56e077 Profile Resolution spec: updated names of 'remove' directives (#1381)
  53. 0dcc24319 Clarify how to determine target catalog oscal-version (#1386)
  54. dc6a9b5d5 Profile Resolution Spec clarification: validation of imported catalogs and profiles (#1380)
  55. 35798154f Update metaschema-docs
  56. 6a7375b6c Fixes to correct metaschema validation errors.
  57. feec035ef Update metaschema
  58. d145dfe47 Support for control mapping (#1150)
  59. ef28023d2 Test merge phase, plus minor XSLT enhancements (#1207)
  60. e88369d80 Profile resolver: Metadata tests and way of determining top UUID (#1175)
  61. 48af7dcb3 Iterate over sequence of characters, not positions (#1163)
  62. 9c0e21ae3 Nonrecursive UUID functions plus XSpec tests (#1158)
  63. 4b0126071 Use XSpec variable instead of entity (#1136)
  64. ee95ed8ad Profile resolver selection: XSpec additions and minor XSLT enhancements (#1101)
  65. 98d2a7a19 reverting part constraints, since these are already handled
  66. 84a7d45a1 Release 1.0 metaschema adjustments (#1065)

Full Changelog: v1.0.5...v1.1.0

Assets 36
0 Join discussion