OSCAL 1.0.3 Release

[david-waltermire]

Note: This release contains defective JSON schemas that are missing required regular expressions. This has been corrected in the OSCAL 1.0.4 release. Please use the 1.0.4 release instead of this release.

What's Changed

• Improving link management under CI/CD #737, Switch Generated Website Content Link Checking to lychee from untitaker/hyperlink #1208 Updated link checker for generate website workflow and improve workflows. (PR Migrate Link Checker Action from untitaker/hyperlink to lychee #1231) @aj-stein-nist
• Clarification of link semantics in SSP model #1062 Clarifying system security plan cross-references (PR 1062 ssp link semantics #1167) @Rene2mt, @aj-stein-nist, @david-waltermire-nist
• SSP-Schema V1.0.0 and V1.0.1 Exceptions #1127, Patching Metaschema (XSLT M4 implementation) datatypes with new definitions #1186 Updated to latest Metaschema toolchain (PR Test Updated Character Groups for XML Schema Regexes for OSCAL Token Data Type #1161) @wendellpiez, @david-waltermire-nist, aj-stein-nist
  • Properly encode high-order Unicode characters in schemas (PR Redefined lexical constraint on 'token' datatype  metaschema#183)
  • Roll back token datatype to avoid problematic character references metaschema#181 Rolled back token datatype to avoid problematic character references
  • Double-escaped RegEx patterns in output JSON schema causing issues with some RegEx flavors metaschema#182 Fixed double-escaped RegEx patterns in output JSON schema causing issues with some RegEx flavors. @wendellpiez
  • Add support for durations metaschema#188 Added support for durations. @wendellpiez, @david-waltermire-nist
  • Adjusted data types in generated XML and JSON schemas. @wendellpiez, @david-waltermire-nist
  • Corrected pruning of unused definitions during XML and JSON schema generation. (PR Correctly pruning unused definitions in metaschema composition metaschema#199) @wendellpiez, @aj-stein-nist, @david-waltermire-nist
• Best way to submit grammar fixes in OSCAL schemas #1193 Grammar fixes to assessment-common metaschema only. (PR Grammar fixes to assessment-common metaschema #1224) @guyzyl
• Misleading XML Schema documentation for control-implementation implemented-requirement #1194 Clarified the semantics of implemented-requirement in a component definition as only a suggestion of how to implement. (PR clarified the semantics of implemented-requirement in a component def… #1232) @david-waltermire-nist
• git-cheat-sheet.md needs update (master branch was renamed main) #1198 Replaced master with main in the git-cheat-sheet.md file' (PR for issue 1198 #1200) @iMichaela
• set-parameter in the context of an SSP is ambiguously defined #1206 Clarified use of set-parameter and how to determine the effective value. (PR clarified use of set-parameter and how to determine the effective value #1234) @david-waltermire-nist
• Automatically Add New Issues to Issue Triage Projects for Developer Review #1209, Test GitHub Action for Triage Works After usnistgov/OSCAL#1210 Merge #1212 Added Issue Triage automation to project. (PR Add Issue Triage automation to project for usnistgov/OSCAL#1209. #1210) @aj-stein-nist
• Update SSP reference documentation for import-profile element #1211 Clarified use of profile and catalog in import-profile/@href. (PR Clarified referencing a profile or catalog in import-profile #1227) @david-waltermire-nist
• requirements.txt not loaded outside of Docker context #1216 Ensured GitHub Actions Installs Python Dependencies Like Local Docker Environment. (PR Ensure GitHub Actions Installs Python Dependencies Like Local Docker Environment oscal-content#103)
• OSCAL Pages - Country Code regex bug #1220 Corrected metadata/location/address/country regex (PR Corrected metadata/location/address/country regex #1226) @david-waltermire-nist
• Bump minimist from 1.2.5 to 1.2.6 in /build (PR Bump minimist from 1.2.5 to 1.2.6 in /build #1195) @dependabot
• Changed GitHub links to point to main branch instead of master branch. (PR Fix GitHub links pointing to master branch #1225) @guyzyl
• Normalized enumerated namespace values to use http prefix consistently (PR Normalize enumerated namespace values to use http prefix consistently #1233) @david-waltermire-nist
  • Normalized enumerated namespace values to use http prefix consistently; created deprecation entries where needed.
  • Updated examples to be consistent with namespace values.
  • Added deprecation entries for old values.
• Fixed typo in the word "separately" (PR Fix typo in the word "separately" #1235) @galtm
• Boolean handling workaround for workflow_call vs workflow_dispatch bug. (PR Fix Broken Booleans Only in workflow_call Conditional Cheecks #1236) @aj-stein-nist
• Improved actions workflow and steps for package release automation. (PR Improve GHA workflow and steps for package release automation. #1240) @aj-stein-nist, @david-waltermire-nist
• Removed unneeded Ruby dependencies. @david-waltermire-nist
• Reordered tools listing alphabetically. @david-waltermire-nist
• Add Ignyte to tools page. (PR #Add Ignyte: OSCAL software built under DoD CRADA #1197) @caseykulasa

Notable Changes

To fix a number of data type related issues, the underlying type system used in the generated OSCAL XML and JSON schemas was replaced. This change resulted in different names for simple and complex types for data types in XML schemas and some adjustments in data type definitions in JSON schemas. This may cause some issues with schema binding approaches that generate code from the XML or JSON schemas. In such instances, you may need to further customize your binding configurations or make some code adjustments resulting from differently generated code.

Full Changelog: v1.0.2...v1.0.3

---

This discussion was created from the release OSCAL 1.0.3 Release.