Release version 2026.08.28 of the Baseline - #542
Merged
Conversation
Each compiled version page's External Frameworks table now links the framework's Gemara mapping document on grc.store, and the reverse crosswalk generator (previously unused by the site) renders one section per framework and is wired into the Pages build as devel-crosswalk.md. A new --artifact-version compile flag pins the grc.store links to a published release tag; unset, they point at the latest version. Signed-off-by: Eddie Knight <knight@linux.com>
Compiled RC page set (controls, checklist, and the new external framework crosswalk), linked from the versions list. Release notes for 2026-08-26 are drafted but stay commented out until the release, which will also promote the page to Current Version per the usual process. Signed-off-by: Eddie Knight <knight@linux.com>
Compiles the devel pages the same way web-publish.yml does (including the new crosswalk) and serves the site with Jekyll at 127.0.0.1:4000. devel-crosswalk.md joins the other generated devel pages in .gitignore. Signed-off-by: Eddie Knight <knight@linux.com>
…base An empty artifact id now yields an empty URL from artifactURL rather than a link to the bare grc.store namespace, with a test covering the pinned, unpinned, and empty cases. The 2026-08-26 RC page is regenerated against main after ossf#540, which removed the unmapped framework metadata rows and the framework lexicon entries (including the duplicate PSSCRM term) and linked each per-control framework relation to its row in the External Frameworks table — where the new Mapping Document column links to grc.store. Signed-off-by: Eddie Knight <knight@linux.com>
SLSA was the one framework ossf#540 left in the lexicon, so it still rendered as a glossary entry alongside its External Frameworks row. The validator now rejects any lexicon term or synonym that shadows a mapping-reference id, so a framework can't reappear in the glossary. asLink mapped every non-letter to '-', but kramdown deletes '/' when deriving a heading id, so each [CI/CD Pipeline] link pointed at the dead anchor #ci-cd-pipeline instead of #cicd-pipeline. Drop '/' the way '.' already is, with a test pinning the anchor scheme. RC page regenerated; historical release pages are left as released. Signed-off-by: Eddie Knight <knight@linux.com>
Converts the release-candidate pages to the final release: pages recompiled with grc.store mapping links pinned to v2026.08.28, nav and index updated to make v2026.08.28 the current version, and the drafted release notes published.
Contributor
|
I don't see a corresponding issue, which would give you the full checklist to follow. Not a requirement, but a Good Idea™ |
Contributor
I do see that you added some instructions to |
Contributor
Author
|
Ah, thanks for flagging @funnelfiasco, I forgot we had the issue template |
funnelfiasco
approved these changes
Aug 28, 2026
puerco
approved these changes
Aug 28, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release version 2026.08.28 of the Baseline
Closes #543
This PR cuts the v2026.08.28 release and ships the website tooling it depends on.
See the published section in
docs/release_notes.md.Website & tooling changes
--artifact-version v2026.08.28, pinning every grc.store mapping link to this release's tag.make devcompiles the pages and serves the site locally for review.#ci-cd-pipelineanchors dropped, validator now rejects lexicon terms that shadow mapping-reference ids.CONTRIBUTING.md("Cutting a Release").Reviewing
Run
make devand browse http://127.0.0.1:4000 for a final check before approving.Known dead links, expected: the pinned mapping-document links on the new version page (
…/versions/v2026.08.28) will 404 until the post-merge GitHub Release runspublish.yaml. This is not a bug in the PR.