STIGQter 2.0.0

2.0.0

• Read stable-release and STIG metadata from GitHub Pages, preserve offline/manual imports, and verify automatic archive downloads
• Add bounded HTTP downloads and validated catalog caching; report failed checks without suggesting a downgrade
• Share qmake build definitions and move UI test scenarios out of the application
• Separate persistence, classification, archives, and checklist parsers behind existing interfaces
• Import XCCDF results in a worker with per-file rollback; save remapped checks in a transaction
• Clean up workers and their thread-local database connections; save project snapshots atomically
• Preserve checklist fields during upgrades with indexed vulnerability matching, and write CKL/CKLB exports atomically through dedicated serializers
• Preserve CKLB not_a_finding results when importing exported checklists
• Use normalized paths for Windows bulk checklist exports and surface nested writer failures
• Consolidate GitHub Actions on Ubuntu 26.04 and build static Windows packages with pinned Qt 6.12 sources
• Gate releases on native Windows integration tests, portable/user-database startup and shutdown, live Pages TLS checks, and Ubuntu package installation
• Use stable major-version GitHub Actions tags for workflow dependencies
• Migrate NIST 800-53 controls to Revision 5 (RMF)
• Add support for cklb files
• Complete the STIG editor: edit, add, and delete checks and CCI mappings, and export a STIG to a re-importable XCCDF zip
• Add a system-wide classification marking that auto-escalates to the highest asset classification and marks generated reports (fixes #104)
• Prevent checklist edits from being lost when changing selection, filtering, exporting, or closing a tab
• Validate and migrate saved projects before atomically replacing the active database
• Add confirmations and selection-aware states for destructive actions
• Improve compact-window layouts and standard Ctrl/Shift multi-selection behavior
• Prevent programmatic STIG-list refreshes from prompting to remove assigned STIGs
• Preserve severity overrides when a replacement is cancelled, require justification, and clear stale justification when restoring the baseline
• Correct informational severity parsing and numeric release ordering, and upgrade checklists directly to the newest available STIG release
• Make short STIG searches immediate, expose previously hidden rule metadata, and remove per-row database lookups from checklist filtering
• Add fast checklist search across rule IDs, vulnerability IDs, titles, and STIG titles
• Show each checklist rule's status, CAT severity, and title without relying on color alone
• Add complete assessment progress counts, reviewed percentage, and next-not-reviewed navigation
• Make assessment filters readable, preserve selection across refreshes, and show autosave feedback
• Clarify the auto-saved working database and external .stigqter project snapshot workflow
• Add main-workflow readiness and empty states, persistent window/splitter preferences, and clearer progress feedback
• Centralize main-window busy and action availability state
• Make the integration workflow deterministic and restrict normal-side banner verification to UNCLASSIFIED and CUI

Windows x64 downloads:

• STIGQter-2.0.0-win64.zip: portable executable, license, release notes, and dependency source manifest.
• STIGQter-2.0.0-win64.exe: the same standalone executable. No separate Qt installation is required.
• SHA256SUMS-windows.txt: SHA-256 checksums for both downloads.

The Ubuntu 26.04 amd64 package and corresponding application source archive are also attached. Native Windows CI runs the integration suite, checks live GitHub Pages TLS, and verifies portable and normal-database startup and shutdown before release creation.