Skip to content

OSCAL 1.1.1 Release
Compare
Choose a tag to compare
@oscalbuilder oscalbuilder released this 12 Sep 19:51
· 32 commits to main since this release
v1.1.1
This tag was signed with the committer’s verified signature.
Arminta-Jenkins-NIST Arminta Jenkins
SSH Key Fingerprint: hhTN7L8M7FXCrMRUbiMlISD6NFkjINJLcCvSfMjvy6Q Learn about vigilant mode.
f24dd56
This commit was signed with the committer’s verified signature.
Arminta-Jenkins-NIST Arminta Jenkins
SSH Key Fingerprint: hhTN7L8M7FXCrMRUbiMlISD6NFkjINJLcCvSfMjvy6Q Learn about vigilant mode.

Summary

OSCAL 1.1.1 is a patch release with minor model improvements, documentation, and artifact release changes that are backwards compatible.

Changes: Key Take-aways

Models

  1. Allow non-FISMA/RMF use cases for SSP information type impact levels.
  2. Remove obsolete model documentation for biblio elements in back-matter/resources.

Profile Resolution and Process Specs

  1. Change spec for more practical definition of metadata/last-modified.

Other

  1. Update schema validation links in OSCAL model definitions.
  2. Generate OSCAL model definitions with and without external XML entities (XXEs).

Details

  1. ac6397d68 Produce Metaschemas without XXEs (#1665) (#1901)
  2. 563ecb305 Adjusted language for metadata:last-modified (#1900)
  3. e78291b87 Bump build/metaschema-xslt from ac4bd7e to 10f72aa (#1886)
  4. bb454ed44 Adjusted information-type/*-impact constraints (#1888)
  5. 1680e13ff Corrects references identified in #1883 (#1884)

Appendix

Detailed Commit Log

Note for NIST developers: the output below is from executing the following command against the release branch (main) on a developer workstation: git log origin/main..origin/develop --pretty=oneline --abbrev-commit.

  1. 8bc3c0045 Bump build/metaschema-xslt from 10f72aa to 034e92b (#1902)
  2. ac6397d68 Produce Metaschemas without XXEs (#1665) (#1901)
  3. 563ecb305 Adjusted language for metadata:last-modified (#1900)
  4. 5b187b26b Bump actions/checkout from 3.5.3 to 3.6.0 (#1903)
  5. 53cbe3d00 Bump org.apache.maven.plugins:maven-dependency-plugin in /build (#1878)
  6. e78291b87 Bump build/metaschema-xslt from ac4bd7e to 10f72aa (#1886)
  7. 01a985003 Add --quiet to the resolver test mvn download (#1898)
  8. 54f25db65 Bump actions/setup-node from 3.7.0 to 3.8.1 (#1894)
  9. bb454ed44 Adjusted information-type/*-impact constraints (#1888)
  10. 1680e13ff Corrects references identified in #1883 (#1884)
  11. e5b6e790b Bump markdown-link-check from 3.10.2 to 3.11.2 in /build (#1864)
  12. 948e88ad0 Bump actions/checkout from 3.3.0 to 3.5.3 (#1863)
  13. 2a908809d Bump actions/setup-node from 3.6.0 to 3.7.0 (#1854)
Assets 48
0 Join discussion