EU Parliament Monitor v1.0.32

What's Changed

🏗️ Infrastructure & Performance

• Update release.yml use app for releas @pethers (#2539)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 7.0.0 @dependabot[bot] (#2537)
• build(deps-dev)(deps-dev): bump eslint-plugin-sonarjs from 4.1.0 to 4.2.0 in the development-dependencies group @dependabot[bot] (#2538)

📦 Dependencies

• Update release.yml use app for releas @pethers (#2539)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 7.0.0 @dependabot[bot] (#2537)
• build(deps-dev)(deps-dev): bump eslint-plugin-sonarjs from 4.1.0 to 4.2.0 in the development-dependencies group @dependabot[bot] (#2538)

⚙️ Component Updates

• Update release.yml use app for releas @pethers (#2539)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 7.0.0 @dependabot[bot] (#2537)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.32.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.32.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.32.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @pethers and dependabot[bot]

Full Changelog: v1.0.31...1.0.32

📦 Release Artifacts

• euparliamentmonitor-v1.0.32.zip - Full application package
• euparliamentmonitor-v1.0.32.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.32

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.32.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.31

What's Changed

🏗️ Infrastructure & Performance

• Update compile-agentic-workflows.yml gh-aw-0.82.9 @pethers (#2536)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2533)
• build(deps-dev)(deps-dev): bump tsx from 4.23.0 to 4.23.1 in the development-dependencies group @dependabot[bot] (#2529)
• [StepSecurity] Apply security best practices @step-security-bot (#2526)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2524)
• build(deps-dev)(deps-dev): bump eslint from 10.6.0 to 10.7.0 in the development-dependencies group @dependabot[bot] (#2522)

📦 Dependencies

• Update compile-agentic-workflows.yml gh-aw-0.82.9 @pethers (#2536)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2533)
• build(deps-dev)(deps-dev): bump tsx from 4.23.0 to 4.23.1 in the development-dependencies group @dependabot[bot] (#2529)
• [StepSecurity] Apply security best practices @step-security-bot (#2526)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2524)
• build(deps-dev)(deps-dev): bump eslint from 10.6.0 to 10.7.0 in the development-dependencies group @dependabot[bot] (#2522)

⚙️ Component Updates

• Update compile-agentic-workflows.yml gh-aw-0.82.9 @pethers (#2536)
• [StepSecurity] Apply security best practices @step-security-bot (#2526)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2524)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.31.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.31.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.31.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@Copilot, @dependabot[bot], @github-actions[bot], @pethers, @step-security-bot and dependabot[bot]

Full Changelog: v1.0.30...1.0.31

📦 Release Artifacts

• euparliamentmonitor-v1.0.31.zip - Full application package
• euparliamentmonitor-v1.0.31.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.31

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.31.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.30

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.42 to 1.3.43 in the production-dependencies group @dependabot[bot] (#2519)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.41 to 1.3.42 in the production-dependencies group @dependabot[bot] (#2518)
• build(deps-dev)(deps-dev): bump knip from 6.25.0 to 6.26.0 in the development-dependencies group @dependabot[bot] (#2516)
• build(deps-dev)(deps-dev): bump eslint-plugin-jsdoc from 63.0.12 to 63.0.13 in the development-dependencies group @dependabot[bot] (#2514)

📦 Dependencies

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.42 to 1.3.43 in the production-dependencies group @dependabot[bot] (#2519)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.41 to 1.3.42 in the production-dependencies group @dependabot[bot] (#2518)
• build(deps-dev)(deps-dev): bump knip from 6.25.0 to 6.26.0 in the development-dependencies group @dependabot[bot] (#2516)
• build(deps-dev)(deps-dev): bump eslint-plugin-jsdoc from 63.0.12 to 63.0.13 in the development-dependencies group @dependabot[bot] (#2514)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.30.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.30.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.30.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @pethers and dependabot[bot]

Full Changelog: v1.0.29...1.0.30

📦 Release Artifacts

• euparliamentmonitor-v1.0.30.zip - Full application package
• euparliamentmonitor-v1.0.30.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.30

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.30.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.29

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.40 to 1.3.41 in the production-dependencies group @dependabot[bot] (#2512)
• build(deps-dev)(deps-dev): bump prettier from 3.9.4 to 3.9.5 in the development-dependencies group @dependabot[bot] (#2510)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.39 to 1.3.40 in the production-dependencies group @dependabot[bot] (#2509)
• build(deps)(deps): bump actions/labeler from 6.1.0 to 6.2.0 in the github-actions group @dependabot[bot] (#2508)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 3 updates @dependabot[bot] (#2507)

📦 Dependencies

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.40 to 1.3.41 in the production-dependencies group @dependabot[bot] (#2512)
• build(deps-dev)(deps-dev): bump prettier from 3.9.4 to 3.9.5 in the development-dependencies group @dependabot[bot] (#2510)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.39 to 1.3.40 in the production-dependencies group @dependabot[bot] (#2509)
• build(deps)(deps): bump actions/labeler from 6.1.0 to 6.2.0 in the github-actions group @dependabot[bot] (#2508)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 3 updates @dependabot[bot] (#2507)

⚙️ Component Updates

• build(deps)(deps): bump actions/labeler from 6.1.0 to 6.2.0 in the github-actions group @dependabot[bot] (#2508)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.29.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.29.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.29.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @pethers and dependabot[bot]

Full Changelog: v1.0.28...1.0.29

📦 Release Artifacts

• euparliamentmonitor-v1.0.29.zip - Full application package
• euparliamentmonitor-v1.0.29.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.29

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.29.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.28

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2506)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.38 to 1.3.39 in the production-dependencies group @dependabot[bot] (#2505)
• Use TypeScript 7 RC side-by-side with TypeScript 6 compatibility @copilot-swe-agent[bot] (#2504)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2503)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.36 to 1.3.37 in the production-dependencies group @dependabot[bot] (#2502)
• build(deps-dev)(deps-dev): bump @types/node from 26.1.0 to 26.1.1 in the development-dependencies group @dependabot[bot] (#2501)

🔒 Security & Compliance

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2506)

📝 Documentation

• Use TypeScript 7 RC side-by-side with TypeScript 6 compatibility @copilot-swe-agent[bot] (#2504)

📦 Dependencies

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2506)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.38 to 1.3.39 in the production-dependencies group @dependabot[bot] (#2505)
• Use TypeScript 7 RC side-by-side with TypeScript 6 compatibility @copilot-swe-agent[bot] (#2504)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2503)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.36 to 1.3.37 in the production-dependencies group @dependabot[bot] (#2502)
• build(deps-dev)(deps-dev): bump @types/node from 26.1.0 to 26.1.1 in the development-dependencies group @dependabot[bot] (#2501)

⚙️ Component Updates

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2506)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2503)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.28.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.28.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.28.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot]

Full Changelog: v1.0.27...1.0.28

📦 Release Artifacts

• euparliamentmonitor-v1.0.28.zip - Full application package
• euparliamentmonitor-v1.0.28.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.28

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.28.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.27

What's Changed

• [aw] Upgrade available @github-actions[bot] (#2500)

🏗️ Infrastructure & Performance

• build(deps)(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 in the github-actions group @dependabot[bot] (#2499)
• build(deps)(deps): bump the github-actions group with 2 updates @dependabot[bot] (#2498)
• build(deps-dev)(deps-dev): bump knip from 6.24.0 to 6.25.0 in the development-dependencies group @dependabot[bot] (#2497)
• build(deps)(deps): bump markdown-it-anchor from 9.2.0 to 9.2.1 in the production-dependencies group @dependabot[bot] (#2496)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2494)

🔒 Security & Compliance

• build(deps)(deps): bump the github-actions group with 2 updates @dependabot[bot] (#2498)

📦 Dependencies

• build(deps)(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 in the github-actions group @dependabot[bot] (#2499)
• build(deps)(deps): bump the github-actions group with 2 updates @dependabot[bot] (#2498)
• build(deps-dev)(deps-dev): bump knip from 6.24.0 to 6.25.0 in the development-dependencies group @dependabot[bot] (#2497)
• build(deps)(deps): bump markdown-it-anchor from 9.2.0 to 9.2.1 in the production-dependencies group @dependabot[bot] (#2496)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2494)

⚙️ Component Updates

• build(deps)(deps): bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.2 in the github-actions group @dependabot[bot] (#2499)
• build(deps)(deps): bump the github-actions group with 2 updates @dependabot[bot] (#2498)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.27.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.27.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.27.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @github-actions[bot], @pethers, dependabot[bot] and github-actions[bot]

Full Changelog: v1.0.26...1.0.27

📦 Release Artifacts

• euparliamentmonitor-v1.0.27.zip - Full application package
• euparliamentmonitor-v1.0.27.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.27

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.27.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.26

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.35 to 1.3.36 in the production-dependencies group @dependabot[bot] (#2493)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 3 updates @dependabot[bot] (#2492)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.34 to 1.3.35 in the production-dependencies group @dependabot[bot] (#2490)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2489)

📦 Dependencies

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.35 to 1.3.36 in the production-dependencies group @dependabot[bot] (#2493)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 3 updates @dependabot[bot] (#2492)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.34 to 1.3.35 in the production-dependencies group @dependabot[bot] (#2490)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2489)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.26.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.26.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.26.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @pethers and dependabot[bot]

Full Changelog: v1.0.25...1.0.26

📦 Release Artifacts

• euparliamentmonitor-v1.0.26.zip - Full application package
• euparliamentmonitor-v1.0.26.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.26

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.26.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.25

What's Changed

• [aw] Upgrade available @github-actions[bot] (#2488)

🏗️ Infrastructure & Performance

• build(deps-dev)(deps-dev): bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11 in the development-dependencies group @dependabot[bot] (#2487)
• build(deps-dev)(deps-dev): bump tsx from 4.22.5 to 4.23.0 in the development-dependencies group @dependabot[bot] (#2486)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.32 to 1.3.34 in the production-dependencies group across 1 directory @dependabot[bot] (#2485)
• build(deps-dev)(deps-dev): bump tsx from 4.22.4 to 4.22.5 in the development-dependencies group @dependabot[bot] (#2484)

📦 Dependencies

• build(deps-dev)(deps-dev): bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11 in the development-dependencies group @dependabot[bot] (#2487)
• build(deps-dev)(deps-dev): bump tsx from 4.22.5 to 4.23.0 in the development-dependencies group @dependabot[bot] (#2486)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.32 to 1.3.34 in the production-dependencies group across 1 directory @dependabot[bot] (#2485)
• build(deps-dev)(deps-dev): bump tsx from 4.22.4 to 4.22.5 in the development-dependencies group @dependabot[bot] (#2484)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.25.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.25.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.25.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @github-actions[bot], @pethers, dependabot[bot] and github-actions[bot]

Full Changelog: v1.0.24...1.0.25

📦 Release Artifacts

• euparliamentmonitor-v1.0.25.zip - Full application package
• euparliamentmonitor-v1.0.25.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.25

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.25.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.24

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2483)
• build(deps)(deps): bump markdown-it from 14.2.0 to 14.3.0 in the production-dependencies group @dependabot[bot] (#2482)
• build(deps-dev)(deps-dev): bump knip from 6.23.0 to 6.24.0 in the development-dependencies group @dependabot[bot] (#2481)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2480)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2479)

🔒 Security & Compliance

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2483)

📦 Dependencies

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2483)
• build(deps)(deps): bump markdown-it from 14.2.0 to 14.3.0 in the production-dependencies group @dependabot[bot] (#2482)
• build(deps-dev)(deps-dev): bump knip from 6.23.0 to 6.24.0 in the development-dependencies group @dependabot[bot] (#2481)
• build(deps-dev)(deps-dev): bump the development-dependencies group with 2 updates @dependabot[bot] (#2480)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2479)

⚙️ Component Updates

• build(deps)(deps): bump the github-actions group with 3 updates @dependabot[bot] (#2483)
• build(deps)(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group @dependabot[bot] (#2479)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.24.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.24.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.24.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@dependabot[bot], @pethers and dependabot[bot]

Full Changelog: v1.0.23...1.0.24

📦 Release Artifacts

• euparliamentmonitor-v1.0.24.zip - Full application package
• euparliamentmonitor-v1.0.24.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.24

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.24.zip -R Hack23/euparliamentmonitor

EU Parliament Monitor v1.0.23

What's Changed

🏗️ Infrastructure & Performance

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.31 to 1.3.32 in the production-dependencies group @dependabot[bot] (#2478)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.30 to 1.3.31 in the production-dependencies group @dependabot[bot] (#2476)
• chore(deps): refresh npm dependencies and lockfile to clear audit findings @copilot-swe-agent[bot] (#2475)

📦 Dependencies

• build(deps)(deps): bump european-parliament-mcp-server from 1.3.31 to 1.3.32 in the production-dependencies group @dependabot[bot] (#2478)
• build(deps)(deps): bump european-parliament-mcp-server from 1.3.30 to 1.3.31 in the production-dependencies group @dependabot[bot] (#2476)
• chore(deps): refresh npm dependencies and lockfile to clear audit findings @copilot-swe-agent[bot] (#2475)

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🏛️ Architecture & Documentation

Document	Description
Architecture	C4 architecture models and system overview
Security Architecture	Security design and controls
Threat Model	STRIDE threat analysis
Data Model	Data structures and relationships
Flowchart	Process flows with security controls
State Diagram	State transitions and lifecycles
Mindmap	Conceptual relationships
SWOT Analysis	Strategic analysis
CRA Assessment	Cyber Resilience Act assessment
API Documentation	TypeDoc-generated API reference

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
• ✅ npm Provenance — Verified package publishing with attestation
• ✅ CodeQL Security Scanning — Automated vulnerability detection
• ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify euparliamentmonitor-1.0.23.zip -R Hack23/euparliamentmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

EU Parliament Monitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

📦 Release Artifacts

Artifact	Description	Verification
euparliamentmonitor-1.0.23.zip	Full application package	SHA-256 checksum, SLSA attestation
euparliamentmonitor-1.0.23.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
npm package	euparliamentmonitor	npm audit signatures

All artifacts are signed and attested using GitHub's SLSA Level 3 build provenance.

🚀 Deployment

• Primary: https://euparliamentmonitor.com
• Documentation: https://euparliamentmonitor.com/docs/
• API Docs: https://euparliamentmonitor.com/docs/api/
• npm: https://www.npmjs.com/package/euparliamentmonitor

🏗️ Built With

• Node.js: 25.x
• TypeScript: 6.0.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Playwright: 1.x
• European Parliament MCP Server: 1.x

👥 Contributors

@Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot]

Full Changelog: v1.0.22...1.0.23

📦 Release Artifacts

• euparliamentmonitor-v1.0.23.zip - Full application package
• euparliamentmonitor-v1.0.23.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

npm install euparliamentmonitor@1.0.23

Published with npm provenance for supply chain security.

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Report
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify euparliamentmonitor-v1.0.23.zip -R Hack23/euparliamentmonitor