Tags

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgzxmo32IFzwot3hlvQ0i0Hoyoyh
45GtA87PqpHUh55hQAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQNlUgHF8nWFznl29ErIzQr5miPid/pXtWM6BeJ/yQKjzR1+9Is3gm9wgybSdvjQd+b
3F2X+QMv/U4ZNjp+QH5gc=
-----END SSH SIGNATURE-----

This version includes performance improvements
across several areas of the `Trudag` tool.
In this release, we added multiprocessing support
for linting tasks, which leads to faster execution.
We also introduced caching for items and the
reference builder. These changes improve the
overall experience, especially when working with larger graphs.

-**Trudag Tool Enhancements**
    - Linting tasks are now processed in parallel
    - Caching added for the reference builder and items
    - `set-link` now supports multiple links in one call
    - `set-link` now logs errors instead of raising them
    - Fixed broken links in the documentation
    - Small changes to data store values:
        - "Commit SHA" now stores whole sha rather than abbreviated version.
        - "Commit tag" appends the abbreviated commit sha.
    - Extended documentation and glossary for STPA.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQDZZB58U01WgmjtvHhygSvwVdhnViIIWyh2do85Wt4/aPfDtLVUYid/V5+x7GUPwOZ
izWMtGjXFGUomSkEdq1Aw=
-----END SSH SIGNATURE-----

v2025.07.23

The new `Remote Scoring` feature allows the integration of multiple trustable
graphs (hosted in external Git repositories) into the scoring process of the
local trustable graph. This update lays the groundwork for upcoming features
related to the consumption of external graphs and introduces improvements to user experience.

- **Trudag Tool Enhancements**
  - Added new reference type: `source code reference`
  - Redesigned the graph interface to simplify the addition of new backends
  - Introduced support for an ignore list file to exclude specific files from
  Trudag operations
  - Reference classes are now loaded from the entry point file location rather work
  directory
  - Added monitoring for validator execution time
  - Improved over exception handling and linting function
  - Updated documentation for usage with Doorstop
  - More explanatory user-facing messages
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQPMjsCJEYaGcd6TVCIAnfvKtVZxOgo7ieuOtb+xKrw2RkAiIYpEAblbxrhslWvrgwp
JYesetg4BOzNJ+T2zu9g8=
-----END SSH SIGNATURE-----

A new feature has landed: **`Data Store`**. This feature enables users to visualize
the progression of each expectation as a graph. Additionally, users can now
**slice the graph directly from the CLI** for more targeted insights.

This release also includes several **user experience improvements to the
`trudag` tool**.

- **Trudag Tool Enhancements**

- Nodes and edges are now organized by **name** and **source name**
- Introduced the new **`Data Store`** feature:
  - Graphical view of expectations
- CLI-based graph slicing
- Added more tests:
  - Including coverage for the `publish` command
- **Publish** command improvements:
  - Now runs faster
  - Outputs only SVG images
- Matrix calculations are now more efficient
- Removed **mutable object** from constructor interface
- Improved tracebacks for **validators** and **reference plugins**

- Documentation
  - Clarified behavior of **"inputs"**
  - Fixed pinned links in the **NEWS** section

- CI Pipeline Improvements
  - Fixed issues in linting stage
  - Added more tests
  - Added **Markdown linting**

- Misc
  - Fixed a known issue related to a hidden **Python 3.13** dependency

- All `trudag` commands require a **GitLab auth token** if a
  `public: false` reference of `type: gitlab` is present in the tree.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQFS5cjzuLrvoOXbKDmKDm4xwzS/bn8BryP0D9QPfatPMhO5bPOWn6TDuIqKMAHfIdR
vV3M8np9PC+ktgnVPsTgE=
-----END SSH SIGNATURE-----

Documentation improvements, ongoing implementation of dotstop (TSF-specific replacement for Doorstop) and documentation on the RAFIA process.

### Change Summary

- Added API references for trustable_compliance, graphalyzer and dotstop
- Added Lint and format checks using ruff
- Progess on implementation of dotstop
    - Read and write dotstop graphs and items natively from files
    - Reference management and reference plug-in support, including unit tests
    - YAML front matter schema
- Improved guidance for TA-MISBEHAVIOURS and associated glossary definitions
- RAFIA process documentation, illustrating some specific applications of TSF
- Renamed and expanded the TAs

Improved user instructions

### Changes

- Improved tool and getting started documentation
- Guidance on organisation of items and graphs
- Clarifications and improved guidance for TA items
- Criteria for SME assessments
- Clarified documentation about review and the review status field
- Small TSF tool improvements, including graduated colour maps for scores

## Known issues

* See list for previous release (unchanged)

Release of project in preparation for public launch.

### Changes

- Added licenses for documentation and tools
- Removed deprecated validator code
- Improved release job to publish package in project PyPi via twine
- Improved readability for text on coloured background in compliance report

## Known issues

* Mermaid diagram rendering is broken in the Compliance documentation
* Needs guidance on how to:
    - Import existing requirements into a TSF graph
    - Integrate TSF graphs from other projects
* Missing API reference pages for `trustable-compliance`
- Support for multi-repository usage of TSF is *experimental only* and
  has a number of known issues (see compliance/remote.md#pitfalls)

Interim release of project in its new context on gitlab.com

### Changes

* CI and tooling updated to build for the new context
* Theme and document generation configuration updated to a Trustable theme

### Resolved issues

* Guidance for TA-18 and TA-20 needs adding

### Known issues

* Mermaid diagram rendering is broken in the Compliance documentation
* Needs guidance on how to:
    - Import existing requirements into a TSF graph
    - Integrate TSF graphs from other projects
* Missing API reference pages for `trustable-compliance`
- Support for multi-repository usage of TSF is *experimental only* and
  has a number of known issues( see compliance/remote.md#pitfalls)