v0.2.4 — Automated Upstream Sync

What's New

Automated Upstream FedRAMP/docs Sync (ENG-541)

Added a weekly GitHub Actions workflow that monitors the upstream FedRAMP/docs repository for changes, validates compatibility, and creates a GitHub issue assigned to Copilot for triage.

How it works:

• Lightweight git ls-remote check runs weekly (Mondays 06:00 UTC) — exits in ~5 seconds when nothing changed
• When upstream changes are detected: clones the repo, runs unit + integration tests against the new data, generates a change summary (commit log, diffstat, changed files)
• Creates a GitHub issue with full context so Copilot can propose any needed code updates
• Duplicate issue prevention via upstream-sync label check
• SHA-pinned actions following existing supply chain security conventions

Integration Test Suite

Added npm run test:integration — 6 tests that validate the indexer against the real upstream FedRAMP/docs repository:

• FRMR document indexing
• KSI item extraction with valid IDs
• Control mapping population
• Document type validation against known set
• Error handling verification
• Repo info availability

Changes:

• .github/workflows/upstream-sync.yml — weekly sync workflow
• .github/upstream-commit.sha — baseline upstream commit tracker
• tests/integration.test.ts — integration test suite
• vitest.integration.config.ts — separate vitest config (no fixture override, 60s timeout)
• vitest.config.ts — exclude integration tests from default npm test
• package.json — version bump + test:integration script
• CHANGELOG.md — release notes
• README.md — integration test documentation

Full Changelog: v0.2.3...v0.2.4