## mondoohq/cnspec — v14.2.0…v14.3.0-rc.1

_17 commits._

### Backend
- **🧹 Bump mql to v14.3.0-rc.1 (#4200)** (736d462)
- **🐛 linux: restart auditd without the service command on AlmaLinux 9 (#4149)** (71340a7)
- **✨ content: restore the Cloudflare inventory query pack (#4187)** (64192dd)
- **🐛 ai: map AI Security checks to the correct NIS-2, SOC 2 and HIPAA controls (#4185)** (7c98f45)
- **✨ policy: record why a migration exists (#4186)** (1ca8c39)
- **🐛 m365: check what the titles promise, and align docs with the queries (#4181)** (ce47290)
- **⭐ scan: report scan start upstream (ReportAssetActivityStarted) (#4180)** (42f3144)
- **⭐ policy: ReportAssetActivityStarted RPC (#4178)** (b26aee5)
- **📝 docs: never identify a customer in commits, prs or code (#4177)** (74e3646)
- **🐛 aws: limit the IAM wildcard policy check to customer-managed policies (#4174)** (5fb36f7)
- **✨ policy: extract check remediations as code with policy graph remediation (#4176)** (d9c4040)
- **🐛 reporter: report every query a shared code id stands for (#4134)** (b5aaa51)
- **🐛 ci: dispatch the packer bump from goreleaser, since release:published no longer fires (#4172)** (893212c)

### Chore
- **build(deps): bump the codeql-action group with 3 updates (#4189)** (ef8afd9)
- **build(deps): bump dawidd6/action-download-artifact from 24 to 25 (#4190)** (6d6e7e5)
- **build(deps): bump crate-ci/typos from 1.50.2 to 1.50.3 (#4191)** (4c5a1a2)
- **build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#4188)** (36667ae)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mondoohq/cnspec?utm_source=github-action)._