v1.3.0

v1.3.0 — 21 June 2026

• Improved NIS2 updated with Implementing Regulation (EU) 2024/2690 — new reference file covering all 13 Annex sections with audit-level sub-points, scope limited to DNS/cloud/datacentre/MSP/MSSP/trust-service entities, significant-incident thresholds (€500k or 5% of annual turnover); SKILL.md description, Key Articles, and Gap Assessment workflow updated; plugin bumped to v1.1.0 (#52, h/t @klausagnoletti).
  Thank you, @klausagnoletti !

• Fix Plugin validation errors resolved for four plugins — nis2 and ccpa had invalid skills array and stray category key in plugin.json; vn-pdpl and eu-cra marketplace entries had bare-string author instead of {name, email} object; three regression tests added to tests/test_plugin_structure.py to catch recurrence (#54)

• Improved Monthly GRC Updates expanded to all 30 frameworks (was 24 in May); June 2026 edition flags seven major changes: FedRAMP CR26, GDPR Digital Omnibus, HIPAA timeline reversal, CSRD ESRS delegated act, SWIFT CSCF v2026, CCPA enforcement, EU CRA notified-body framework; May 2026 moved to archive; change-indicator legend added

• Fix Corrected per-skill eval stats that had diverged across grc-skills-eval-results.html, index.html, and README.md — GDPR (100%/96%/+4%, was 88%/88%/±0%), SWIFT CSP (44%/+56%, was 48%/+52%), LGPD (76%/+24%, was 80%/+20%), EU AI Act (76%/+24% in README, was 88%/+12%), DPDPA accordion header (96%/80%/+16%, was 100%/83%/+17%)

• New tests/test_eval_consistency.py — 10 automated checks enforcing cross-file stat parity, accordion-vs-summary-table parity, delta arithmetic, skill count (30), and a no-regression guard; CI workflow added at .github/workflows/eval-consistency.yml