Releases: CERTCC/SSVC
v2025.3.3
Maintenance release to update site design template and dependencies
What's Changed
- Bump pydantic from 2.10.6 to 2.11.1 by @dependabot in #768
- Bump the mkdocs group with 3 updates by @dependabot in #769
- Bump markdown-exec from 1.10.2 to 1.10.3 by @dependabot in #770
- Update site design template by @sei-renae in #771
Full Changelog: v2025.3.2...v2025.3.3
SSVC v2025.3.2
What's Changed
- Change docs copyright page to reflect new LICENSE wording by @sei-renae in #763
- Update namespace to ensure sufficient limits are established by @sei-vsarvepalli in #765
Full Changelog: v2025.3.1...v2025.3.2
SSVC v2025.3.1
What's Changed
- Update copyright & licensing statements by @sei-renae in #758
- Bump site deployment environment to python 3.12
Full Changelog: v2025.3...v2025.3.1
SSVC v2025.3
SSVC v2025.3 updates the json
format examples and adds some formality around our use of namespaces in the data object representations of SSVC objects. It also improves the presentation of the CWE list in the Exploitation decision point.
What's Changed
- Update json examples in repository by @ahouseholder in #727
- Fix deployment workflow by @ahouseholder in #732
- Convert cwes list to markdown with fewer rows and columns by @sei-renae in #737
- Add markdownlint make target by @ahouseholder in #744
- Add NameSpace Enum by @ahouseholder in #749
- Refactor SsvcDecisionPoint base class mixins by @ahouseholder in #743
Dependency updates
- Bump the mkdocs group with 2 updates by @dependabot in #730
- Bump markdown-exec from 1.10.0 to 1.10.1 by @dependabot in #746
- Bump the mkdocs group with 6 updates by @dependabot in #747
- Pin tj-actions/changed-files action to a specific sha1 by @ahouseholder in #750
- Bump tj-actions/changed-files from 46.0.1 to 46.0.3 by @dependabot in #757
- Bump markdown-exec from 1.10.1 to 1.10.2 by @dependabot in #756
- Bump mkdocstrings-python from 1.16.5 to 1.16.8 in the mkdocs group by @dependabot in #755
Full Changelog: v2025.2...v2025.3
v2025.2
This release
- Updates the json schemas
- Adds documentation for CVSS vector element based SSVC decision points
- Improves some back-end python to set up future development
- Adds a dockerized container for documentation development
- Fixes a few content bugs (broken links, etc.)
- Update dependencies
What's Changed
- fix unit test by @ahouseholder in #669
- Reformat python with black by @ahouseholder in #671
- Add versioned outcomes schema by @sei-vsarvepalli in #672
- Replace python dataclasses with pydantic dataclasses by @ahouseholder in #674
- Resolve Issue 678 by @sei-renae in #679
- Convert site to use inline python instead of relying on manual script to generate decision point examples by @ahouseholder in #683
- Fix json schema example by @sei-renae in #684
- Split CVSS equivalence sets by @ahouseholder in #685
- Update to schema_examples directory by @sei-vsarvepalli in #688
- Update FEMA Federal continuity directive link by @sei-renae in #692
- Add PR template by @ahouseholder in #694
- Add markdownlint workflow by @ahouseholder in #693
- Add semantic versioning validator to _Versioned mixin by @ahouseholder in #696
- Add CVSS vector elements as decision point docs by @ahouseholder in #691
- Updated mission_impact.md by @sei-bkoo in #706
- Add CVSS Qualitative Severity Rating Scale decision point by @ahouseholder in #712
- Dockerize the mkdocs dev server by @ahouseholder in #695
- Update schema JSON to use cross-referencing and force more validations by @sei-vsarvepalli in #704
Dependency Updates
- Bump mkdocs-bibtex from 2.16.2 to 3.0.0 by @dependabot in #668
- Bump mkdocs-material from 9.5.49 to 9.5.50 in the mkdocs group by @dependabot in #667
- Bump copyright by @ahouseholder in #670
- Bump mkdocs-bibtex from 3.0.0 to 4.1.0 by @dependabot in #675
- Bump pydantic from 2.10.3 to 2.10.6 by @dependabot in #676
- Bump the mkdocs group with 2 updates by @dependabot in #677
- Bump the mkdocs group with 3 updates by @dependabot in #680
- Bump the mkdocs group with 4 updates by @dependabot in #682
- Bump semver from 3.0.2 to 3.0.4 by @dependabot in #719
- Bump tj-actions/changed-files from 44 to 45 by @dependabot in #720
- Bump DavidAnson/markdownlint-cli2-action from 16 to 19 by @dependabot in #721
- Bump the mkdocs group across 1 directory with 3 updates by @dependabot in #722
New Contributors
- @sei-renae made their first contribution in #679
Full Changelog: v2024.3.9...v2025.2
v2024.3.9
This release converges feedback from the CSAF and CVE projects on the SSVC json schema. Also various dependency updates.
What's Changed
- Merge #627 into publish by @ahouseholder in #628
- Schema fix by @ahouseholder in #634
- Publish changes from #635 by @ahouseholder in #636
- Publish JSON schema base change to 2020-12 by @ahouseholder in #643
- Publish fix for decision point reference doc spacing by @ahouseholder in #646
- Bump mkdocs-material from 9.5.42 to 9.5.43 in the mkdocs group by @dependabot in #647
- Bump the mkdocs group with 2 updates by @dependabot in #648
- Bump mkdocs-include-markdown-plugin from 7.0.0 to 7.0.1 in the mkdocs group by @dependabot in #651
- Bump the mkdocs group with 2 updates by @dependabot in #653
- SSVC JSON Schema 2020-12 by @tschmidtb51 in #654
- Bump mkdocs-material from 9.5.46 to 9.5.48 in the mkdocs group by @dependabot in #656
- Bump the mkdocs group across 1 directory with 2 updates by @dependabot in #660
- Bump scikit-learn from 1.5.2 to 1.6.0 by @dependabot in #658
- Bump scikit-learn from 1.6.0 to 1.6.1 by @dependabot in #661
- Spelling error fix in Decision Point Value Selection cvvs to cvss by @sei-vsarvepalli in #664
New Contributors
- @tschmidtb51 made their first contribution in #654
Full Changelog: v2024.3.8...v2024.3.9
SSVC v2024.3.8
Fixes spacing issues affecting HTML layout in decision point reference documentation.
What's Changed
- Updates from mkdocs latest version for space issues by @sei-vsarvepalli in #645
Full Changelog: v2024.3.7...v2024.3.8
SSVC v2024.3.7
What's Changed
- Bump mkdocs-include-markdown-plugin from 6.2.2 to 7.0.0 by @dependabot in #638
- Bump networkx from 3.4.1 to 3.4.2 by @dependabot in #639
- Change json schema base to 2020-12 by @sei-vsarvepalli in #642
Full Changelog: v2024.3.6...v2024.3.7
SSVC v2024.3.6
This release is primarily to address schema changes for CVE data record compatibility.
What's Changed
- Schema/issue 631 by @sei-vsarvepalli in #633
- Wrong URL in the ID field for Decision_Point_Value_Selection-1-0-1.schema.json by @sei-vsarvepalli in #635
Dependency updates
- Bump the mkdocs group with 3 updates by @dependabot in #629
- Bump the mkdocs group with 2 updates by @dependabot in #632
- Bump networkx from 3.3 to 3.4.1 by @dependabot in #630
Full Changelog: v2024.3.5...v2024.3.6
SSVC v2024.3.5
Fixes a schema bug in v2024.3.4
What's Changed
- Bump mkdocs-material from 9.5.36 to 9.5.39 in the mkdocs group by @dependabot in #626
- schema URL's ID field is garbled by @sei-vsarvepalli in #627
Full Changelog: v2024.3.4...v2024.3.5