From 47f0c01539e12e6543130370e40d3dc803923a91 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Nov 2024 15:25:07 +0000 Subject: [PATCH 01/10] Bump mkdocs-material from 9.5.42 to 9.5.43 in the mkdocs group Bumps the mkdocs group with 1 update: [mkdocs-material](https://github.com/squidfunk/mkdocs-material). Updates `mkdocs-material` from 9.5.42 to 9.5.43 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.42...9.5.43) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mkdocs ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 5dd68388..de83be63 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,7 +2,7 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 mkdocs-include-markdown-plugin==7.0.0 mkdocs-table-reader-plugin==3.1.0 -mkdocs-material==9.5.42 +mkdocs-material==9.5.43 mkdocs-material-extensions==1.3.1 mkdocstrings==0.26.2 mkdocstrings-python==1.12.2 From 14fb136a24e7e309e8b58177879b91649a45d2f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 Nov 2024 15:28:16 +0000 Subject: [PATCH 02/10] Bump the mkdocs group with 2 updates Bumps the mkdocs group with 2 updates: [mkdocs-material](https://github.com/squidfunk/mkdocs-material) and [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings). Updates `mkdocs-material` from 9.5.43 to 9.5.44 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.43...9.5.44) Updates `mkdocstrings` from 0.26.2 to 0.27.0 - [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases) - [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/mkdocstrings/compare/0.26.2...0.27.0) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mkdocs - dependency-name: mkdocstrings dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mkdocs ... Signed-off-by: dependabot[bot] --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index de83be63..dfedca55 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,9 +2,9 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 mkdocs-include-markdown-plugin==7.0.0 mkdocs-table-reader-plugin==3.1.0 -mkdocs-material==9.5.43 +mkdocs-material==9.5.44 mkdocs-material-extensions==1.3.1 -mkdocstrings==0.26.2 +mkdocstrings==0.27.0 mkdocstrings-python==1.12.2 mkdocs-print-site-plugin==2.6.0 dataclasses-json==0.6.7 From fc2c7009658e52d3c919c4b0e6d74fc83651c484 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 17:29:10 +0000 Subject: [PATCH 03/10] Bump mkdocs-include-markdown-plugin in the mkdocs group Bumps the mkdocs group with 1 update: [mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin). Updates `mkdocs-include-markdown-plugin` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/mondeja/mkdocs-include-markdown-plugin/releases) - [Commits](https://github.com/mondeja/mkdocs-include-markdown-plugin/compare/v7.0.0...v7.0.1) --- updated-dependencies: - dependency-name: mkdocs-include-markdown-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mkdocs ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index dfedca55..73642feb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 -mkdocs-include-markdown-plugin==7.0.0 +mkdocs-include-markdown-plugin==7.0.1 mkdocs-table-reader-plugin==3.1.0 mkdocs-material==9.5.44 mkdocs-material-extensions==1.3.1 From 0f6dd40ae31cc38972ce12567c7e423abfe90c69 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Dec 2024 11:28:11 -0500 Subject: [PATCH 04/10] Bump the mkdocs group with 2 updates (#653) * Bump the mkdocs group with 2 updates Bumps the mkdocs group with 2 updates: [mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin) and [mkdocs-material](https://github.com/squidfunk/mkdocs-material). Updates `mkdocs-include-markdown-plugin` from 7.0.1 to 7.1.2 - [Release notes](https://github.com/mondeja/mkdocs-include-markdown-plugin/releases) - [Commits](https://github.com/mondeja/mkdocs-include-markdown-plugin/compare/v7.0.1...v7.1.2) Updates `mkdocs-material` from 9.5.44 to 9.5.46 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.44...9.5.46) --- updated-dependencies: - dependency-name: mkdocs-include-markdown-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mkdocs - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mkdocs ... Signed-off-by: dependabot[bot] * bump mkdocs-include-markdown-plugin to 7.1.2 --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Allen D. Householder --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 73642feb..61996317 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,8 +1,8 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 -mkdocs-include-markdown-plugin==7.0.1 +mkdocs-include-markdown-plugin==7.1.2 mkdocs-table-reader-plugin==3.1.0 -mkdocs-material==9.5.44 +mkdocs-material==9.5.46 mkdocs-material-extensions==1.3.1 mkdocstrings==0.27.0 mkdocstrings-python==1.12.2 From 7a6b03a0fab2ba0033108fc6839e0c9660bf65d7 Mon Sep 17 00:00:00 2001 From: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com> Date: Tue, 3 Dec 2024 16:04:45 +0100 Subject: [PATCH 05/10] SSVC JSON Schema 2020-12 (#654) - change `definitions`to `$defs` Co-authored-by: Allen D. Householder --- data/schema/v1/Decision_Point-1-0-1.schema.json | 8 ++++---- .../schema/v1/Decision_Point_Group-1-0-1.schema.json | 6 +++--- .../Decision_Point_Value_Selection-1-0-1.schema.json | 12 ++++++------ 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/data/schema/v1/Decision_Point-1-0-1.schema.json b/data/schema/v1/Decision_Point-1-0-1.schema.json index 168cb8f0..75b573d9 100644 --- a/data/schema/v1/Decision_Point-1-0-1.schema.json +++ b/data/schema/v1/Decision_Point-1-0-1.schema.json @@ -3,7 +3,7 @@ "title": "Decision Point schema definition", "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point-1-0-1.schema.json", "description": "Decision points are the basic building blocks of SSVC decision functions. Individual decision points describe a single aspect of the input to a decision function.", - "definitions": { + "$defs": { "schemaVersion": { "description": "Schema version used to represent this Decision Point", "type": "string", @@ -37,7 +37,7 @@ "additionalProperties": false, "properties": { "schemaVersion": { - "$ref": "#/definitions/schemaVersion" + "$ref": "#/$defs/schemaVersion" }, "namespace": { "type": "string", @@ -65,7 +65,7 @@ "type": "array", "minItems": 1, "items": { - "$ref": "#/definitions/decision_point_value" + "$ref": "#/$defs/decision_point_value" } } }, @@ -80,5 +80,5 @@ ] } }, - "$ref": "#/definitions/decision_point" + "$ref": "#/$defs/decision_point" } diff --git a/data/schema/v1/Decision_Point_Group-1-0-1.schema.json b/data/schema/v1/Decision_Point_Group-1-0-1.schema.json index b1c1a4e7..7ff2f5dd 100644 --- a/data/schema/v1/Decision_Point_Group-1-0-1.schema.json +++ b/data/schema/v1/Decision_Point_Group-1-0-1.schema.json @@ -2,7 +2,7 @@ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "Decision Points Group schema definition", "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Group-1-0-1.schema.json", - "definitions": { + "$defs": { "schemaVersion": { "description": "Schema version used to represent Decision Point Group", "type": "string", @@ -13,7 +13,7 @@ "additionalProperties": false, "properties": { "schemaVersion": { - "$ref": "#/definitions/schemaVersion" + "$ref": "#/$defs/schemaVersion" }, "version": { "type": "string", @@ -44,6 +44,6 @@ ] } }, - "$ref": "#/definitions/decision_point_group" + "$ref": "#/$defs/decision_point_group" } diff --git a/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json b/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json index 48c9e562..b7bd1b8a 100644 --- a/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json +++ b/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json @@ -1,7 +1,7 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json", - "definitions": { + "$defs": { "id": { "type": "string", "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.", @@ -66,16 +66,16 @@ }, "properties": { "id": { - "$ref": "#/definitions/id" + "$ref": "#/$defs/id" }, "role": { - "$ref": "#/definitions/role" + "$ref": "#/$defs/role" }, "schemaVersion": { - "$ref": "#/definitions/schemaVersion" + "$ref": "#/$defs/schemaVersion" }, "timestamp": { - "$ref": "#/definitions/timestamp" + "$ref": "#/$defs/timestamp" }, "selections": { "description" : "An array of Decision Points and their Values that were down-selected or evaluated ", @@ -83,7 +83,7 @@ "type": "array", "minItems": 1, "items": { - "$ref": "#/definitions/SsvcdecisionpointselectionSchema" + "$ref": "#/$defs/SsvcdecisionpointselectionSchema" } } }, From 679610194d4062d5638aeb6df6d0f561a0c415c9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Dec 2024 10:51:47 -0500 Subject: [PATCH 06/10] Bump mkdocs-material from 9.5.46 to 9.5.48 in the mkdocs group (#656) Bumps the mkdocs group with 1 update: [mkdocs-material](https://github.com/squidfunk/mkdocs-material). Updates `mkdocs-material` from 9.5.46 to 9.5.48 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.46...9.5.48) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mkdocs ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 61996317..4e1475fd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,7 +2,7 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 mkdocs-include-markdown-plugin==7.1.2 mkdocs-table-reader-plugin==3.1.0 -mkdocs-material==9.5.46 +mkdocs-material==9.5.48 mkdocs-material-extensions==1.3.1 mkdocstrings==0.27.0 mkdocstrings-python==1.12.2 From 86217d11549fa50f0d9d0ebc220eb65988684595 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Dec 2024 13:22:59 -0500 Subject: [PATCH 07/10] Bump the mkdocs group across 1 directory with 2 updates (#660) --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 4e1475fd..9ac62b55 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,10 +2,10 @@ mkdocs==1.6.1 mkdocs-bibtex==2.16.2 mkdocs-include-markdown-plugin==7.1.2 mkdocs-table-reader-plugin==3.1.0 -mkdocs-material==9.5.48 +mkdocs-material==9.5.49 mkdocs-material-extensions==1.3.1 mkdocstrings==0.27.0 -mkdocstrings-python==1.12.2 +mkdocstrings-python==1.13.0 mkdocs-print-site-plugin==2.6.0 dataclasses-json==0.6.7 thefuzz==0.22.1 From 20cd039037ac2ef0f6997bfa4687649b00b4ad61 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Dec 2024 13:24:20 -0500 Subject: [PATCH 08/10] Bump scikit-learn from 1.5.2 to 1.6.0 (#658) --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 9ac62b55..839b8c99 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,6 +10,6 @@ mkdocs-print-site-plugin==2.6.0 dataclasses-json==0.6.7 thefuzz==0.22.1 pandas==2.2.3 -scikit-learn==1.5.2 +scikit-learn==1.6.0 jsonschema==4.23.0 networkx==3.4.2 From 311a170001a227400dc12a5fb6d85e633a2777d6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jan 2025 11:03:44 -0500 Subject: [PATCH 09/10] Bump scikit-learn from 1.6.0 to 1.6.1 (#661) Bumps [scikit-learn](https://github.com/scikit-learn/scikit-learn) from 1.6.0 to 1.6.1. - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.6.0...1.6.1) --- updated-dependencies: - dependency-name: scikit-learn dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 839b8c99..7a27ea0b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,6 +10,6 @@ mkdocs-print-site-plugin==2.6.0 dataclasses-json==0.6.7 thefuzz==0.22.1 pandas==2.2.3 -scikit-learn==1.6.0 +scikit-learn==1.6.1 jsonschema==4.23.0 networkx==3.4.2 From 8f0123dfc27edf3a70b078c6416332b5bd40bad6 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Thu, 16 Jan 2025 16:43:49 -0500 Subject: [PATCH 10/10] Spelling error fix in Decision Point Value Selection cvvs to cvss (#664) * Spelling error fix in Decision Point Value Selection cvvs to cvss * Moved CVE-1969 to recommend CVE-1900 example see https://github.com/CVEProject/cve-schema/releases * Also fixed for Issue #665 --- .../v1/Decision_Point_Value_Selection-1-0-1.schema.json | 4 ++-- ...json => CVE-1900-1234-Decision_Point_Value_Selection.json} | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) rename data/schema_examples/{CVE-1969-0000-Decision_Point_Value_Selection.json => CVE-1900-1234-Decision_Point_Value_Selection.json} (94%) diff --git a/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json b/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json index b7bd1b8a..59022e04 100644 --- a/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json +++ b/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json @@ -5,7 +5,7 @@ "id": { "type": "string", "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.", - "examples": ["CVE-2024-101010","VU#11111","GHSA-11a1-22b2-33c3"] + "examples": ["CVE-1900-1234","VU#11111","GHSA-11a1-22b2-33c3"] }, "role": { "type": "string", @@ -35,7 +35,7 @@ "description": "SSVC Namespace that were used for defining the evaluated Decision Points", "title": "namespace", "type": "string", - "examples": ["ssvc","cvvsv4"] + "examples": ["ssvc","cvssv4"] }, "values": { "description": "Evaluated values of the Decision Point", diff --git a/data/schema_examples/CVE-1969-0000-Decision_Point_Value_Selection.json b/data/schema_examples/CVE-1900-1234-Decision_Point_Value_Selection.json similarity index 94% rename from data/schema_examples/CVE-1969-0000-Decision_Point_Value_Selection.json rename to data/schema_examples/CVE-1900-1234-Decision_Point_Value_Selection.json index 5ec025a4..d6ad58c7 100644 --- a/data/schema_examples/CVE-1969-0000-Decision_Point_Value_Selection.json +++ b/data/schema_examples/CVE-1900-1234-Decision_Point_Value_Selection.json @@ -1,5 +1,5 @@ { - "id": "CVE-1969-0000", + "id": "CVE-1900-1234", "timestamp": "2021-09-29T15:29:44Z", "schemaVersion": "1-0-1", "selections": [