1.5.1

Added

• Added commands to generate deterministic Obsidian Canvases from an active
  STIX graph or recursively from the current folder.
• Added a generated APT1 example Canvas with 46 object-note nodes and 30
  Relationship-note-backed edges.
• Opened .json files in the local STIX viewer and kept Bundle import available
  while that viewer is active.

Fixed

• Kept imported note paths unique when object IDs share the same shortened UUID
  prefix.
• Excluded Templates from broad folder and whole-vault scopes by default so
  intentionally incomplete templates do not produce false validation failures.
• Required a persisted type-matching STIX ID before version or revocation
  commands become available.
• Reworked validation reports to lead with plain-language messages and repair
  guidance while keeping internal diagnostic codes under technical details.

Security

• Documented that the Obsidian scorecard's three reported network calls are
  local antlr4ng token-buffer operations named fetch, not HTTP requests.

1.5.0

Added

• Added Intelligence Gap Tracker, Dissemination Review, Consumer Feedback, and
  Investigation Retrospective workflows, completing the 15-workflow library.
• Added searchable typed-note pickers for scalar and list STIX references so
  analysts do not need to copy note paths or object identifiers.

Fixed

• Aligned meta-object applicability, Extension Definition creator requirements,
  conditional Marking Definition fields, external-reference source names, and
  common embedded-reference targets with the normative STIX 2.1 specification.

1.2.0

Added

• Added atomic local Bundle import with a type-count preview, typed notes,
  internal wiki links, an import overview, and semantic round-trip coverage
  against the official 76-object OASIS APT1 example.
• Added STIX object version identities, latest-version reference resolution,
  commands for creating and revoking versions, and cross-version validation.
• Added an evidence-gated STIX 2.1 producer, consumer, markings, extensions,
  versioning, and Level 3 pattern-syntax conformance profile.
• Added a reviewable monthly contributor-wall refresh that excludes automated bot accounts.

Changed

• Simplified the STIX viewer to icon-led nodes in a Maltego-style component
  layout with object names and types, semantic connection labels, on-demand
  metadata references, and complete data shown on selection in the side panel.
• Changed generated templates and the property editor to expose required and
  present properties by default, with an explicit add-property workflow for
  optional and nested fields.
• Added complete command, settings, property-editor, nested-field, versioning,
  and end-to-end workflow documentation.
• Preserved valid external STIX references with warnings instead of rejecting
  them solely because their targets are outside the exported Bundle.
• Updated vault synchronization to propose the canonical OASIS APT1 Bundle and 76 pre-expanded browseable notes with a checksum manifest, while the separate vault owns its attribution and documentation and continues to exclude .obsidian state.
• Added opt-in Platinum, Gold, and Silver sponsor recognition to the project
  README without exposing private sponsors.
• Kept vault-owned documentation and attribution exclusively in the separate
  vault repository while synchronizing only generated templates and canonical
  example data from the plugin repository.

Fixed

• Matched Errata 01 granular-marking semantics by accepting exactly one of
  lang or marking_ref, rejecting circular self-markings, and enforcing the
  four fixed STIX TLP definitions.
• Advanced modified automatically when editing versioned objects, preserved
  immutable creator metadata, and prevented non-versioned Marking Definitions
  and SCOs from entering the version workflow.
• Added the OASIS validator's known-hash and duplicate-qualifier checks to the
  Level 3 STIX pattern parser.

1.1.0

Added

• Added a read-only interactive STIX viewer for local Bundle JSON, individual
  objects, object arrays, and connected Markdown note graphs, with pan, zoom,
  node arrangement, filtering, property inspection, and note navigation.
• Added locally bundled OASIS STIX visualization icons with explicit coverage
  fallbacks and the complete BSD 3-Clause attribution in source and release
  output.

Changed

• Kept the viewer and plugin explicitly desktop-only while supporting narrow
  desktop split panes and popout windows.

CTI STIX Workbench 1.0.1

Fixed

• Added Obsidian funding metadata so the plugin details page can link directly
  to GitHub Sponsors.

CTI STIX Workbench 1.0.0

Added

• Added catalog-driven creation and editing for every standard STIX 2.1 object
  type and predefined SCO extension, with generated analyst-ready vault
  templates kept in a separate public template repository.
• Added active-note, Canvas, folder, and whole-vault scopes for graph
  validation and deterministic Bundle export, including progress, cancellation,
  confirmation, and collision-safe output handling.
• Added Canvas parsing, semantic relationship and marking validation, STIX
  pattern conformance checks, and an actionable validation report UI.
• Added generated catalog, conformance-evidence, documentation-link, runtime
  boundary, large-vault, and release-package verification gates.
• Added automated pull requests that synchronize only the safe generated
  template tree to the public CTI Investigation Vault repository.

Fixed

• Prevented cancelled scoped exports from persisting object identities or
  writing a Bundle after cancellation was requested.
• Required granular marking selectors to resolve owned STIX properties instead
  of accepting inherited JavaScript properties.
• Preserved nested predefined-extension field guidance in generated templates
  and removed excess generated whitespace.

Changed

• Declared the plugin desktop-only because full-vault and Canvas workflows use
  desktop Obsidian capabilities.
• Expanded CI and release checks to verify generated coverage, documentation,
  runtime boundaries, dependency audit results, production builds, and exact
  three-file release packages before a draft release can be reviewed.
• Reworked the public documentation around the analyst workflow, local-first
  data handling, support, funding, contribution, and licensing boundaries.

0.1.3

Fixed

• Flattened the plugin package into Obsidian's conventional repository-root
  layout so Marketplace source scanners resolve the implementation, metadata,
  build configuration, tests, and real type dependencies without workspace
  indirection.
• Added a zero-warning, type-aware Obsidian Marketplace lint gate while
  preserving the committed declaration contracts for generated STIX schema and
  pattern modules.
• Made release validation reject prefixed, prerelease, mismatched, duplicate,
  or metadata-inconsistent versions and require non-empty matching changelog
  notes.

Changed

• Added a default-branch release dispatch that creates and pushes an annotated
  numeric tag, builds the release in the same run, attests all three plugin
  assets with GitHub provenance, and creates a notes-backed draft for manual
  review before publication.
• Switched development and CI to a Corepack-pinned pnpm toolchain and added
  weekly Dependabot updates for JavaScript dependencies and GitHub Actions.
• Split the clean analyst vault into its own downloadable template repository,
  removed the obsolete in-repository design notes, and refreshed the public
  project documentation and funding links.

0.1.2

Fixed

• Exposed Obsidian, TypeScript, ESLint, and parser type dependencies at the
  public repository root so automated source review can resolve the plugin's
  workspace sources.
• Added reproducible declaration-only contracts for generated STIX schema and
  pattern modules while keeping generated runtime code out of source control.

Changed

• Made lint inspect committed source directly instead of generating validation
  runtime files first, so clean-checkout type-resolution failures cannot be
  hidden by the local build.

CTI STIX Workbench 0.1.1 — Obsidian Review Fixes

This patch addresses the automated Obsidian source-review findings from the initial alpha release.

Fixed

• Validate untrusted frontmatter before reading or writing STIX data
• Use popout-compatible Web Crypto globals
• Prevent nested values from rendering as [object Object]
• Remove deprecated and unsupported property-editor API usage
• Add searchable settings for Obsidian 1.13 while retaining the Obsidian 1.8.10 fallback
• Run Obsidian’s official ESLint review rules in CI

The plugin remains local-first, offline, and free for commercial use.

CTI STIX Workbench 0.1.0 — Initial Alpha

The first public alpha of CTI STIX Workbench: a local-first Obsidian plugin for building cyber threat intelligence investigations and exporting them as STIX 2.1 Bundles.

Highlights

• Author CTI using linked Obsidian notes and STIX 2.1 templates
• Validate STIX objects and relationships locally
• Discover investigations through notes, links, Graph view, and Canvas
• Export stable STIX 2.1 Bundles
• Deterministic identifiers for STIX Cyber-observable Objects
• Offline operation with no telemetry or remote validation
• Open-source and free for commercial use

This is an alpha release. Back up important vaults and review validation results before sharing exported intelligence.