Skip to content

chore(release): prepare v3.0.0 — Schema Foundation (BREAKING)#315

Merged
Daren9m merged 1 commit into
mainfrom
chore/release-v3.0.0
Apr 25, 2026
Merged

chore(release): prepare v3.0.0 — Schema Foundation (BREAKING)#315
Daren9m merged 1 commit into
mainfrom
chore/release-v3.0.0

Conversation

@Daren9m
Copy link
Copy Markdown
Collaborator

@Daren9m Daren9m commented Apr 25, 2026

Release prep for v3.0.0 — Schema Foundation: Provenance + Structured Remediation.

⚠️ BREAKING CHANGE. Consumers must update renderers. See `docs/SCHEMA-MIGRATION-3.0.md`.

Tracks #298.

What this PR does

  1. Bumps `CheckID.psd1` ModuleVersion 2.23.0 → 3.0.0
  2. Bumps `scripts/Build-Registry.py` SCHEMA_VERSION 2.23.0 → 3.0.0
  3. Regenerates `data/registry.json` (clean single-line diff — only `schemaVersion` changed)
  4. Moves CHANGELOG `[Unreleased]` into `## [3.0.0] - 2026-04-25`, capturing the full Schema Foundation milestone:
    • Breaking changes: structured remediation, dissolved override files, schema-strict required fields
    • Added: provenance fields, migration round-trip CI gate, consumer helpers (cmdlet + script), migration doc
    • Channel distribution: 898 portal / 69 portal+cli / 53 powershell+portal / 75 notes-only / 9 powershell / 1 graph

What this PR does NOT do

  • No tag pushed. Per CLAUDE.md, tag pushes require explicit user approval. After merging this PR, the tag step is yours.

Post-merge checklist (release tracker #298)

  • Approve tag: `git tag -a v3.0.0 -m "v3.0.0 — Schema Foundation (BREAKING)"`
  • Push tag: `git push origin v3.0.0`
  • Draft GitHub release with prominent breaking-change notice at the top
  • Publish release
  • Close milestone v3.0.0 (currently 9/10 closed; only Release v3.0.0 #298 release tracker open)
  • Comment on M365-Assess#738, M365-Remediate#239, StrykerScan#17 with the v3.0.0 release URL and migration doc link
  • Unblock v0.2 milestone (Fix HIPAA section symbol encoding corruption in standalone-checks.json #41) — comment confirming v3.0 has shipped

Test plan

  • Full Pester suite green locally (371 passed)
  • Build-Registry emits "[OK] 1105 checks, 20 frameworks, 0 dup-key violations, schema validated."
  • `registry.json` diff is one line (`schemaVersion` only)
  • CI passes on this PR

🤖 Generated with Claude Code

- Bump CheckID.psd1 ModuleVersion 2.23.0 → 3.0.0
- Bump scripts/Build-Registry.py SCHEMA_VERSION 2.23.0 → 3.0.0
- Regenerate data/registry.json with new schemaVersion (single-line diff)
- Move CHANGELOG.md [Unreleased] content into [3.0.0] section,
  capturing the Schema Foundation milestone (#260, #261, #262, #263,
  #264, #265, #266, #267).

Path A is complete:
- ✅ #266 round-trip test (PR #310)
- ✅ #262 + #263 dissolve overrides (PR #311)
- ✅ #261 + #264 structured remediation (PR #312)
- ✅ #265 consumer migration helper (PR #313)
- ✅ #267 migration doc (PR #314)

After this PR merges, the v3.0.0 release tracker (#298) checklist
remains:
- [ ] User approval to push tag (per CLAUDE.md)
- [ ] git tag -a v3.0.0 -m "v3.0.0 — Schema Foundation (BREAKING)"
- [ ] git push origin v3.0.0
- [ ] Draft + publish GitHub release with prominent breaking-change notice
- [ ] Close milestone v3.0.0
- [ ] Comment on M365-Assess#738, M365-Remediate#239, StrykerScan#17
  with the v3.0.0 release URL and migration doc link
- [ ] Unblock v0.2 milestone (#41) — comment confirming v3.0 shipped

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

Framework mapping count delta

Framework main this PR Δ Δ% Status
cis-controls-v8 1020 1020 0 +0.00% ✓ OK
cis-m365-v6 180 180 0 +0.00% ✓ OK
cisa-scuba 52 52 0 +0.00% ✓ OK
cmmc 1080 1080 0 +0.00% ✓ OK
eidsca 21 21 0 +0.00% ✓ OK
essential-eight 630 630 0 +0.00% ✓ OK
fedramp 1072 1072 0 +0.00% ✓ OK
gdpr 11 11 0 +0.00% ✓ OK
hipaa 501 501 0 +0.00% ✓ OK
iso-27001 1020 1020 0 +0.00% ✓ OK
iso-27002 1020 1020 0 +0.00% ✓ OK
iso-27017 1012 1012 0 +0.00% ✓ OK
mitre-attack 892 892 0 +0.00% ✓ OK
nis2 311 311 0 +0.00% ✓ OK
nist-800-171 1080 1080 0 +0.00% ✓ OK
nist-800-53 1072 1072 0 +0.00% ✓ OK
nist-csf 824 824 0 +0.00% ✓ OK
pci-dss 1052 1052 0 +0.00% ✓ OK
soc2 1103 1103 0 +0.00% ✓ OK
stig 13 13 0 +0.00% ✓ OK

Result: ✓ PASS — no framework mapping regressions detected.

@github-actions
Copy link
Copy Markdown

Content enrichment population

Overall (1105 checks): rationale 26.3% (291/1105) • impact 26.3% (291/1105) • references 26.3% (291/1105)

Framework n rationale impact references
cis-controls-v8 1020 25.1% (256/1020) 25.1% (256/1020) 25.1% (256/1020)
cis-m365-v6 180 100.0% (180/180) 100.0% (180/180) 100.0% (180/180)
cisa-scuba 52 100.0% (52/52) 100.0% (52/52) 100.0% (52/52)
cmmc 1080 26.3% (284/1080) 26.3% (284/1080) 26.3% (284/1080)
eidsca 21 100.0% (21/21) 100.0% (21/21) 100.0% (21/21)
essential-eight 630 22.2% (140/630) 22.2% (140/630) 22.2% (140/630)
fedramp 1072 27.1% (291/1072) 27.1% (291/1072) 27.1% (291/1072)
gdpr 11 100.0% (11/11) 100.0% (11/11) 100.0% (11/11)
hipaa 501 33.3% (167/501) 33.3% (167/501) 33.3% (167/501)
iso-27001 1020 26.6% (271/1020) 26.6% (271/1020) 26.6% (271/1020)
iso-27002 1020 26.6% (271/1020) 26.6% (271/1020) 26.6% (271/1020)
iso-27017 1012 26.0% (263/1012) 26.0% (263/1012) 26.0% (263/1012)
mitre-attack 892 30.7% (274/892) 30.7% (274/892) 30.7% (274/892)
nis2 311 25.7% (80/311) 25.7% (80/311) 25.7% (80/311)
nist-800-171 1080 26.3% (284/1080) 26.3% (284/1080) 26.3% (284/1080)
nist-800-53 1072 27.1% (291/1072) 27.1% (291/1072) 27.1% (291/1072)
nist-csf 824 30.9% (255/824) 30.9% (255/824) 30.9% (255/824)
pci-dss 1052 26.3% (277/1052) 26.3% (277/1052) 26.3% (277/1052)
soc2 1103 26.4% (291/1103) 26.4% (291/1103) 26.4% (291/1103)
stig 13 100.0% (13/13) 100.0% (13/13) 100.0% (13/13)

Informational only — does not gate the build. The hard release-gate for Critical/High enrichment lives in #281 (v3.2.0).

@Daren9m Daren9m merged commit b7e87bb into main Apr 25, 2026
8 checks passed
@Daren9m Daren9m deleted the chore/release-v3.0.0 branch April 25, 2026 10:31
@Daren9m Daren9m mentioned this pull request Apr 30, 2026
9 tasks
Daren9m added a commit that referenced this pull request May 1, 2026
- Bump CheckID.psd1 ModuleVersion 3.0.0 -> 3.4.0
- Bump scripts/Build-Registry.py SCHEMA_VERSION 3.0.0 -> 3.4.0
- Bump data/registry.json schemaVersion 3.0.0 -> 3.4.0 (single-line)
- Move CHANGELOG [Unreleased] content into [3.4.0] - 2026-04-30 with
  theme summary; new empty [Unreleased] above

Theme: Authoritative Narrative Audit & Coverage Closure (M#42).
14 domain pattern catalogs (#326-#340) + CIS M365 v6 enrichment
infrastructure (#347) with consumer-side prose ingestion model.

Additive-only release — no breaking changes. Schema gained optional
fields (sectionNumber, assessmentStatus, cisSafeguardsByVersion,
defaultValue, references on cis-m365-v6 mapping; cisAuthored block
on frameworkMapping); existing v3.0 consumers continue to work
unchanged.

Reconciles the gap between M#42 milestone closing on GitHub and
no v3.4.0 tag being cut at the time. After this PR merges, the
v3.4.0 tag will be pushed pending user approval per established
release pattern (see v3.0.0 prep #315).

Note: ENTRA-SSPR-001 rebadge (#355) and CIS v6.0.1 reconciliation
(#352) are included in this release scope (closed against Backlog
milestone but shipped in the v3.0.0..main window). Misfiled-milestone
cleanup will follow as Step 1.5 of the broader semver reconciliation
plan.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant