# Summary OSCAL 1.1.1 is a [patch release](https://github.com/usnistgov/OSCAL/blob/89aa8114a66309342725369f2dc5c586090a7c7b/versioning-and-branching.md#versioning) with minor model improvements, documentation, and artifact release changes that are backwards compatible. # Changes: Key Take-aways ## Models 1. Allow non-FISMA/RMF use cases for SSP information type impact levels. 2. Remove obsolete model documentation for `biblio` elements in `back-matter/resources`. ## Profile Resolution and Process Specs 1. Change spec for more practical definition of `metadata/last-modified`. ## Other 1. Update schema validation links in OSCAL model definitions. 1. Generate OSCAL model definitions with and without external XML entities (XXEs). # Details 1. [ac6397d68](https://github.com/usnistgov/OSCAL/commit/ac6397d68) Produce Metaschemas without XXEs ([#1665](https://github.com/usnistgov/OSCAL/pull/#1665)) ([#1901](https://github.com/usnistgov/OSCAL/pull/#1901)) 1. [563ecb305](https://github.com/usnistgov/OSCAL/commit/563ecb305) Adjusted language for `metadata:last-modified` ([#1900](https://github.com/usnistgov/OSCAL/pull/#1900)) 1. [e78291b87](https://github.com/usnistgov/OSCAL/commit/e78291b87) Bump build/metaschema-xslt from `ac4bd7e` to `10f72aa` ([#1886](https://github.com/usnistgov/OSCAL/pull/#1886)) 1. [bb454ed44](https://github.com/usnistgov/OSCAL/commit/bb454ed44) Adjusted `information-type/*-impact` constraints ([#1888](https://github.com/usnistgov/OSCAL/pull/#1888)) 1. [1680e13ff](https://github.com/usnistgov/OSCAL/commit/1680e13ff) Corrects references identified in [#1883](https://github.com/usnistgov/OSCAL/pull/#1883) ([#1884](https://github.com/usnistgov/OSCAL/pull/#1884)) # Appendix ## Detailed Commit Log **Note for NIST developers:** the output below is from executing the following command against the release branch (`main`) on a developer workstation: `git log origin/main..origin/develop --pretty=oneline --abbrev-commit`. 1. [8bc3c0045](https://github.com/usnistgov/OSCAL/commit/8bc3c0045) Bump build/metaschema-xslt from `10f72aa` to `034e92b` ([#1902](https://github.com/usnistgov/OSCAL/pull/1902)) 1. [ac6397d68](https://github.com/usnistgov/OSCAL/commit/ac6397d68) Produce Metaschemas without XXEs ([#1665](https://github.com/usnistgov/OSCAL/pull/1665)) ([#1901](https://github.com/usnistgov/OSCAL/pull/1901)) 1. [563ecb305](https://github.com/usnistgov/OSCAL/commit/563ecb305) Adjusted language for `metadata:last-modified` ([#1900](https://github.com/usnistgov/OSCAL/pull/1900)) 1. [5b187b26b](https://github.com/usnistgov/OSCAL/commit/5b187b26b) Bump actions/checkout from 3.5.3 to 3.6.0 ([#1903](https://github.com/usnistgov/OSCAL/pull/1903)) 1. [53cbe3d00](https://github.com/usnistgov/OSCAL/commit/53cbe3d00) Bump org.apache.maven.plugins:maven-dependency-plugin in /build ([#1878](https://github.com/usnistgov/OSCAL/pull/1878)) 1. [e78291b87](https://github.com/usnistgov/OSCAL/commit/e78291b87) Bump build/metaschema-xslt from `ac4bd7e` to `10f72aa` ([#1886](https://github.com/usnistgov/OSCAL/pull/1886)) 1. [01a985003](https://github.com/usnistgov/OSCAL/commit/01a985003) Add `--quiet` to the resolver test mvn download ([#1898](https://github.com/usnistgov/OSCAL/pull/1898)) 1. [54f25db65](https://github.com/usnistgov/OSCAL/commit/54f25db65) Bump actions/setup-node from 3.7.0 to 3.8.1 ([#1894](https://github.com/usnistgov/OSCAL/pull/1894)) 1. [bb454ed44](https://github.com/usnistgov/OSCAL/commit/bb454ed44) Adjusted `information-type/*-impact` constraints ([#1888](https://github.com/usnistgov/OSCAL/pull/1888)) 1. [1680e13ff](https://github.com/usnistgov/OSCAL/commit/1680e13ff) Corrects references identified in [#1883](https://github.com/usnistgov/OSCAL/pull/1883) ([#1884](https://github.com/usnistgov/OSCAL/pull/1884)) 1. [e5b6e790b](https://github.com/usnistgov/OSCAL/commit/e5b6e790b) Bump markdown-link-check from 3.10.2 to 3.11.2 in /build ([#1864](https://github.com/usnistgov/OSCAL/pull/1864)) 1. [948e88ad0](https://github.com/usnistgov/OSCAL/commit/948e88ad0) Bump actions/checkout from 3.3.0 to 3.5.3 ([#1863](https://github.com/usnistgov/OSCAL/pull/1863)) 1. [2a908809d](https://github.com/usnistgov/OSCAL/commit/2a908809d) Bump actions/setup-node from 3.6.0 to 3.7.0 ([#1854](https://github.com/usnistgov/OSCAL/pull/1854))))
Last changed by  
 
Alexander Stein
150

Read more

oscal-cli 1.0.3 Release Brief

oscal-cli 1.0.2 is a patch release with improvements and changes that are backwards compatible, specifically updating liboscal-java and metaschema-framework dependencies to make use of the OSCAL v1.1.1 models and the underlying use of the Metaschema Framework.

2/2/2024
liboscal-java 3.0.3 Release Brief

oscal-cli 1.0.3 is a patch release with improvements and changes that are backwards compatible, specifically updating liboscal-java and metaschema-framework dependencies to make use of the OSCAL v1.1.2 models and the underlying use of the Metaschema Framework. This release also fixes a bug to properly reference embeeded resource files in the release.

2/1/2024
Demo Video script for metaschema-cli

Download from Maven

1/22/2024
Value stream issue management for usnistgov/OSCAL#1688

We propose in this draft document with a non-exhaustive list of value streams. A value stream is a thematic collection of work items, varying in scope of work by quantity or quality (large epics to small issues), but still relate to the same theme in that work. There are different kinds of work items, with some nested like epics with user stories within them. It is counter-intuitive to talk an epic nested with epics, so we will label each one as a value stream. For organizational purposes, we organize the value streams grouped by high-level use cases in OSCAL. This grouping may be beneifical to link the resulting value of work completed in a value stream to a downstream developer making OSCAL-enabled tooling.

1/5/2024
Read more from Alexander Stein
Published on HackMD