Skip to content

chore: Release - #1934

Merged
degenaro merged 24 commits into
mainfrom
develop
Sep 10, 2025
Merged

chore: Release#1934
degenaro merged 24 commits into
mainfrom
develop

Conversation

@degenaro

@degenaro degenaro commented Sep 10, 2025

Copy link
Copy Markdown
Collaborator

Types of changes

  • Hot fix (emergency fix and release)
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Documentation (change which affects the documentation site)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Release (develop -> main)

Quality assurance (all should be covered).

  • My code follows the code style of this project.
  • Documentation for my change is up to date?
  • My PR meets testing requirements.
  • All new and existing tests passed.
  • All commits are signed-off.

Summary

Key links:

Before you merge

  • Ensure it is a 'squash commit' if not a release.
  • Ensure CI is currently passing
  • Check sonar. If you are working for a fork a maintainer will reach out, if required.

oscal-compass-bot Bot and others added 24 commits July 7, 2025 12:34
@oscal-compass-bot
chore: Merge back version tags and changelog into develop.
dde37af
@degenaro
fix 2 URLs failing htmlproofer during make docs-validate (#1920)
8aafb5d 
Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump datamodel-code-generator[http] from 0.25.3 to 0.33.0 (#…
b655f46 
…1918)

Bumps [datamodel-code-generator[http]](https://github.com/koxudaxi/datamodel-code-generator) from 0.25.3 to 0.33.0.
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Commits](koxudaxi/datamodel-code-generator@0.25.3...0.33.0)

---
updated-dependencies:
- dependency-name: datamodel-code-generator[http]
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump github/codeql-action from 3.28.13 to 3.29.11 (#1916)
3950083 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.13 to 3.29.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1b549b9...3c3833e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump actions/create-github-app-token from 1.12.0 to 2.1.1 (#…
7211962 
…1915)

Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1.12.0 to 2.1.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@d72941d...a8d6161)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump python-semantic-release/python-semantic-release (#1912)
94826da 
Bumps [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 9.8.8 to 10.3.1.
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@fe6b271...5b9d941)

---
updated-dependencies:
- dependency-name: python-semantic-release/python-semantic-release
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump cryptography from 44.0.2 to 45.0.6 (#1910)
9cec58e 
Bumps [cryptography](https://github.com/pyca/cryptography) from 44.0.2 to 45.0.6.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.2...45.0.6)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 45.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump paramiko from 3.5.0 to 4.0.0 (#1909)
a9bfc17 
* fix(deps): bump paramiko from 3.5.0 to 4.0.0

Bumps [paramiko](https://github.com/paramiko/paramiko) from 3.5.0 to 4.0.0.
- [Commits](paramiko/paramiko@3.5.0...4.0.0)

---
updated-dependencies:
- dependency-name: paramiko
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update pyproject.toml

Missing comma

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump urllib3 from 1.26.19 to 2.5.0 (#1897)
2fe4fb6 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.19 to 2.5.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.19...2.5.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump actions/download-artifact from 4.2.1 to 5.0.0 (#1911)
9acb8e9 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.2.1 to 5.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@95815c3...634f93c)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump SonarSource/sonarcloud-github-action (#1884)
823bf68 
Bumps [SonarSource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) from b42848bfdabac7fefc656c08af7a7864240124a3 to 13a24e453e2e6262f3bb0c5fa8241031e637a028.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases)
- [Commits](SonarSource/sonarcloud-github-action@b42848b...13a24e4)

---
updated-dependencies:
- dependency-name: SonarSource/sonarcloud-github-action
  dependency-version: 13a24e453e2e6262f3bb0c5fa8241031e637a028
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@d10n @degenaro
fix: unit test execution in PyCharm (#1755) (#1756)
929ee37 
* fix: unit test execution in PyCharm (#1755)

* Where does pathlib.Path('tests/data') resolve the path from? It's
  relative to the current working directory.
* Where is the tests/data directory? Relative to the tests.
* PyCharm has quirks related to the current working directory when
  running and debugging tests.
* By using __file__ to resolve the test data directory, we remove the
  non-guaranteed assumption that the current working directory is always
  at the root of the repository, and we replace that assumption with a
  value that is always correct regardless of current working directory.
* As a result, the unit tests can now be debugged in PyCharm, unit tests
  can be executed from any directory, and test execution continues to
  work in all the places it originally worked.

Some of the handling is slightly messy but that can be cleaned up by
making the task config files themselves not dependent on the CWD

Signed-off-by: d10n <d10n@redhat.com>

* fix: update new tests for cwd

Signed-off-by: d10n <d10n@redhat.com>

* fix: add comment

As requested in review

Signed-off-by: d10n <d10n@redhat.com>

* Fix code-format issue.

Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>

---------

Signed-off-by: d10n <d10n@redhat.com>
Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot
fix(deps): bump cryptography from 45.0.6 to 45.0.7 (#1924)
2a09b91 
Bumps [cryptography](https://github.com/pyca/cryptography) from 45.0.6 to 45.0.7.
- [Changelog](https://github.com/pyca/cryptography/blob/45.0.7/CHANGELOG.rst)
- [Commits](pyca/cryptography@45.0.6...45.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 45.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @degenaro
fix(deps): bump actions/cache from 4.2.3 to 4.2.4 (#1927)
4470d53 
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.3 to 4.2.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@5a3ec84...0400d5f)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#1925)
9d7c5ce 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@f49aabe...05b42c6)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot
fix(deps): bump SonarSource/sonarcloud-github-action (#1926)
3d6eddb 
Bumps [SonarSource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) from 13a24e453e2e6262f3bb0c5fa8241031e637a028 to ba3875ecf642b2129de2b589510c81a8b53dbf4e.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases)
- [Commits](SonarSource/sonarcloud-github-action@13a24e4...ba3875e)

---
updated-dependencies:
- dependency-name: SonarSource/sonarcloud-github-action
  dependency-version: ba3875ecf642b2129de2b589510c81a8b53dbf4e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @degenaro
fix(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1923)
98bd38f 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@jpower432 @degenaro
ci: add snyk license scanning to PR CI workflow (#1878)
82bc3bb 
* ci: add snyk license scanning to PR CI workflow

Currently snyk scans with pyproject.toml are only supported
with poetry. This solution installs dependencies into
a virtual environment and generates a temporary requirements.txt
for scanning.

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* fix: removes unnecessary line

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* fix: add newline to workflow file

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* fix: do not continue on error in synk scan job

Ensures the cleanup step is always run
without supressing errors

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* chore: add .synk file with pending license exceptions

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* docs: update FedRAMP doc templates link

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* chore: update .snyk to include pending exception

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* chore: revert docs change

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* chore: add slash at the end of fedramp link

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

* chore: update .snyk to correct paramiko license

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>

---------

Signed-off-by: Jennifer Power <barnabei.jennifer@gmail.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@degenaro
fix: bad part name/id when generate/assemble markdown (#1928)
428d880 
* fix bad part name/id when generate/assemble markdown

Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>

* Add test-case for catalog assemble with non-NCName values

Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump github/codeql-action from 3.29.11 to 3.30.1 (#1933)
5a9e53d 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.11 to 3.30.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3c3833e...f1f6e5f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1932)
3fb4ccc 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.2...08c6903)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump actions/stale from 9.1.0 to 10.0.0 (#1931)
2a048f2 
Bumps [actions/stale](https://github.com/actions/stale) from 9.1.0 to 10.0.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@5bef64f...3a9db7e)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump actions/cache from 4.2.3 to 4.2.4 (#1930)
719eb72 
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.3 to 4.2.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4.2.3...0400d5f)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@dependabot @degenaro
fix(deps): bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (#1929
adb68ef 
)

Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.12.4 to 1.13.0.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@76f52bc...ed0c539)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lou DeGenaro <lou.degenaro@gmail.com>
@degenaro degenaro self-assigned this Sep 10, 2025
@degenaro
degenaro requested a review from a team as a code owner September 10, 2025 13:57
@degenaro
degenaro requested review from a team, AleJo2995 and jpower432 and removed request for a team September 10, 2025 13:58
vikas-agarwal76
vikas-agarwal76 approved these changes Sep 10, 2025
View reviewed changes

@vikas-agarwal76 vikas-agarwal76 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@degenaro
degenaro requested review from a team September 10, 2025 15:30
jpower432
jpower432 approved these changes Sep 10, 2025
View reviewed changes

@jpower432 jpower432 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@degenaro
degenaro merged commit ee076e5 into main Sep 10, 2025
32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vikas-agarwal76 vikas-agarwal76 vikas-agarwal76 approved these changes
@AleJo2995 AleJo2995 Awaiting requested review from AleJo2995 AleJo2995 was automatically assigned from oscal-compass/compliance-trestle-reviewers
+1 more reviewer
@jpower432 jpower432 jpower432 approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

@degenaro degenaro

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@degenaro @jpower432 @vikas-agarwal76 @d10n