Skip to content

EU Parliament Monitor v1.0.92

Choose a tag to compare

View all tags
@hack23-automation hack23-automation released this 19 Oct 07:28
· 39 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.92
e7a6404

What's Changed

🏗️ Infrastructure & Performance

  • build(deps): bump european-parliament-mcp-server from 1.4.64 to 1.4.66 in the production-dependencies group @dependabot[bot] (#2836)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2835)
  • build(deps-dev): bump eslint-plugin-jsdoc from 65.3.8 to 65.3.11 in the development-dependencies group @dependabot[bot] (#2834)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2833)
  • build(deps): bump markdown-it from 15.0.2 to 15.0.3 in the production-dependencies group @dependabot[bot] (#2832)
  • build(deps-dev): bump happy-dom from 21.0.1 to 21.0.3 in the development-dependencies group @dependabot[bot] (#2831)
  • build(deps-dev): bump the development-dependencies group with 5 updates @dependabot[bot] (#2830)
  • build(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2829)
  • build(deps): bump european-parliament-mcp-server from 1.4.63 to 1.4.64 in the production-dependencies group @dependabot[bot] (#2828)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2826)

🔄 Code Quality & Refactoring

  • build(deps): bump markdown-it from 15.0.2 to 15.0.3 in the production-dependencies group @dependabot[bot] (#2832)

🔒 Security & Compliance

📝 Documentation

  • Update Code of Conduct badge in CONTRIBUTING.md @pethers (#2827)

📦 Dependencies

  • build(deps): bump european-parliament-mcp-server from 1.4.64 to 1.4.66 in the production-dependencies group @dependabot[bot] (#2836)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2835)
  • build(deps-dev): bump eslint-plugin-jsdoc from 65.3.8 to 65.3.11 in the development-dependencies group @dependabot[bot] (#2834)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2833)
  • build(deps): bump markdown-it from 15.0.2 to 15.0.3 in the production-dependencies group @dependabot[bot] (#2832)
  • build(deps-dev): bump happy-dom from 21.0.1 to 21.0.3 in the development-dependencies group @dependabot[bot] (#2831)
  • build(deps-dev): bump the development-dependencies group with 5 updates @dependabot[bot] (#2830)
  • build(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2829)
  • build(deps): bump european-parliament-mcp-server from 1.4.63 to 1.4.64 in the production-dependencies group @dependabot[bot] (#2828)
  • build(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2826)

🧪 Test Coverage Improvements

  • build(deps): bump markdown-it from 15.0.2 to 15.0.3 in the production-dependencies group @dependabot[bot] (#2832)

⚙️ Component Updates

📊 Release Metrics & Evidence

Test Coverage
API Documentation
E2E Tests

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document Description
Architecture C4 architecture models and system overview
Security Architecture Security design and controls
Threat Model STRIDE threat analysis
Data Model Data structures and relationships
Flowchart Process flows with security controls
State Diagram State transitions and lifecycles
Mindmap Conceptual relationships
SWOT Analysis Strategic analysis
CRA Assessment Cyber Resilience Act assessment
API Documentation TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

SLSA 3
OpenSSF Scorecard
OpenSSF Best Practices

This release includes:

  • ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
  • ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
  • ✅ npm Provenance — Verified package publishing with attestation
  • ✅ CodeQL Security Scanning — Automated vulnerability detection
  • ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.92.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Hack23 ISMS
Information Security Policy
Open Source Policy
Secure Development

Compliance Frameworks

ISO 27001:2022
NIST CSF 2.0
CIS Controls v8.1

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact Description Verification
euparliamentmonitor-1.0.92.zip Full application package SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.92.spdx.json SBOM (SPDX format) SBOM attestation
*.intoto.jsonl SLSA attestations gh attestation verify
npm package euparliamentmonitor npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

🏗️ Built With

  • Node.js: 25.x
  • TypeScript: 6.0.x
  • Chart.js: 4.5.x
  • D3.js: 7.9.x
  • Vitest: 4.x
  • Playwright: 1.x
  • European Parliament MCP Server: 1.x

👥 Contributors

@pethers, @dependabot[bot] and @Copilot

Full Changelog: v1.0.91...1.0.92

📦 Release Artifacts

  • euparliamentmonitor-v1.0.92.zip - Full application package
  • euparliamentmonitor-v1.0.92.spdx.json - SBOM (Software Bill of Materials)
  • *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.92

Published with npm provenance for supply chain security.

📚 Documentation

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.92.zip -R Hack23/euparliamentmonitor

Contributors

pethers
Assets 7
Loading