@mitre/hdf-schema 3.6.0-rc.3 → 3.6.0-rc.5

package/README.md

@@ -189,6 +189,15 @@ All schemas use **JSON Schema draft/2020-12**.
 Interactive schema reference documentation is published at:
 **<https://mitre.github.io/hdf-libs/schemas/>**
 
+### What's new in v3.6.0
+
+- **No structural schema changes.** Every document type and primitive is structurally identical to v3.5.x: no fields, enum values, or constraints were added, removed, renamed, or tightened. v3.5.x documents validate unchanged under v3.6.0, and documents produced under v3.6.0 validate against the v3.5.x schemas.
+- **`previousChecksum` semantics stated precisely** (description-only, on `Standalone_Override`, `Status_Override`, and the POA&M element) — each amendment's checksum is recorded by the *next* one, so an in-place edit is detectable only for an amendment that has a later one chained to it. The chain is not tamper-proof: the final amendment, the document envelope, deleted trailing amendments, and a wholesale recompute are outside what it can detect; use `signature` for non-repudiation. The field is omitted (not `null`) on the first amendment. This is the contract `hdf amend verify` enforces.
+- **Schema descriptions reflowed into paragraphs** and the source files pretty-printed one value per line. Cosmetic in the source, but the bundled `dist/schemas/` descriptions now carry paragraph breaks, which IDE tooltips render.
+- **`computeEffectiveStatus` helper delegates to the canonical status ladder** in `@mitre/hdf-utilities`. **Behavior change** for `@mitre/hdf-schema/helpers` consumers: the helper no longer returns a pre-set `effectiveStatus` verbatim, and it now applies the governing non-expired `statusOverrides` entry and the error roll-up ahead of the impact-0 `notApplicable` short-circuit, matching the CLI and converters.
+- **`@mitre/hdf-schema/testhdf` sub-path export** — test-only builders (`req`, `baseline`, `doc`, `results`, `baselineDoc`, `override`, `amendments`, `system`, `plan`, `evidencePackage`, `changeEvent`, `comparison`, and friends) that construct schema-valid documents for downstream test suites, with a Go counterpart at `github.com/mitre/hdf-libs/hdf-schema/testhdf/go`.
+- **Compatibility.** Fully compatible in both directions at the schema level. The only behavior change is in the `computeEffectiveStatus` helper above.
+
 ### What's new in v3.5.0
 
 - **`hdf-requirement-change-event` document type** — a new schema for the continuous-monitoring change-event stream (ADR-0005): per-requirement events (`new`/`absent`/`updated`/`fixed`/`regressed`) with a full after-state, thin before-state, and per-key sequence, chained for deterministic replay from a seed. Produced by `hdf events derive`.

package/dist/helpers.d.ts

@@ -124,8 +124,8 @@ export function createCvss(
 ): Cvss;
 
 export function severityToImpact(severity: null): null;
-export function severityToImpact(severity: string): number;
-export function severityToImpact(severity: string | null): number | null;
+export function severityToImpact(severity: string | undefined): number;
+export function severityToImpact(severity: string | null | undefined): number | null;
 
 export function impactToSeverity(impact: null): null;
 export function impactToSeverity(impact: number): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitre/hdf-schema",
-  "version": "3.6.0-rc.3",
+  "version": "3.6.0-rc.5",
   "description": "JSON schemas and multi-language type definitions for Heimdall Data Format (HDF)",
   "publishConfig": {
     "access": "public"
@@ -65,7 +65,7 @@
   "dependencies": {
     "ajv": "^8.17.0",
     "ajv-formats": "^3.0.0",
-    "@mitre/hdf-utilities": "^3.6.0-rc.3"
+    "@mitre/hdf-utilities": "^3.6.0-rc.5"
   },
   "devDependencies": {
     "@hyperjump/json-schema": "^1.17.2",