BCGov Crow - v0.11.3

BCGov Crow - v0.11.3

Release type

Patch release

Summary

Crow adds security-control assurance checks that tests
cited as evidence actually exercise production controls rather than
reproducing their behavior inside the test.

Highlights

• Security-control assurance traces a cited test's actions and assertions to
  its production enforcement point, including calls made through helpers,
  mocks, and callbacks.
• Tests that perform a cleanup or authorization sequence themselves no longer
  count as evidence that the production control works.

Changes

• Security-relevant data retention, deletion, and credential revocation are
  explicit control-assurance review targets.
• Reviewers consider other valid tests before reporting a coverage gap and
  hand replacement-test requirements to the testing workflow.

Validation

• Crow asset validation: Passed - 0 errors, 0 warnings.
• Package dry run: Passed - 206 files.
• Archive inspection: Passed - 206 entries, including the
  updated security review assets; no evidence or session-state paths.
• Additional checks: Security review synthesis and release draft tests passed;
  Sonar quality gate passed with 0 new-code issues (the generic scanner does
  not analyze bundled C# examples).

Artifacts

• Archive: bcgov-crow-0.11.3.zip
• SHA-256 file: bcgov-crow-0.11.3.zip.sha256
• SHA-256: e16fcb99270f68e4ef0aa61216048d9fc1fdffd939827375dea976c07ec84c2f

Installation

Install the tagged release globally:

apm install bcgov/crow#v0.11.3 --global --target copilot

Or install the packaged archive:

apm install .\build\bcgov-crow-0.11.3.zip --global --target copilot