commits  

Messages by Date

• 2026/01/21 (tooling-trusted-releases) 01/01: #556 - narrow exception handling and fail on specific errors arm
• 2026/01/21 (tooling-trusted-releases) branch main updated: #556 - narrow exception handling and fail on specific errors arm
• 2026/01/21 (tooling-actions) branch main updated (1a0b9de -> 64485ed) arm
• 2026/01/21 (tooling-actions) 01/01: Enable automatic publishing arm
• 2026/01/21 (tooling-actions) branch main updated: Enable automatic publishing arm
• 2026/01/20 (tooling-trusted-releases) branch hsts-header deleted (was d97220a) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add HSTS response header (#566) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated (587307b -> 5b98a81) wave
• 2026/01/20 (tooling-trusted-releases) branch hsts-header created (now d97220a) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Add HSTS response header wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Remove PMC table and submission instructions wave
• 2026/01/20 (tooling-trusted-releases) branch test-pr-template deleted (was 3cfb3ac) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Test PR template wave
• 2026/01/20 (tooling-trusted-releases) branch test-pr-template created (now 3cfb3ac) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Create pull request template for contributions wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Update docs #557 (#565) wave
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 deleted (was 698f699) wave
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 updated: Fixes #557 akm
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 created (now 175660d) akm
• 2026/01/20 (tooling-trusted-releases) branch thread-count deleted (was 8f58cef) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Thread count sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Fix SSH host key permissions if necessary after creation sbp
• 2026/01/20 (tooling-actions) branch main updated: Update script for staging artifacts, set up Central deploy arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Thread count wave
• 2026/01/20 (tooling-trusted-releases) branch thread-count created (now 8f58cef) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Prevent enumeration sbp
• 2026/01/20 (tooling-trusted-releases) branch prevent-enumeration deleted (was 198e6b7) sbp
• 2026/01/20 (tooling-trusted-releases) branch prevent-enumeration created (now 198e6b7) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Prevent enumeration wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Disallow writing to release files after staging sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a function to change file permissions recursively sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Ensure that the permissions of secret files are correct sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a warning about the risks of using mkcert (from @sebbASF) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a lint to check imports in the models sbp
• 2026/01/20 (tooling-trusted-releases) branch copy-sbom-models deleted (was 323c53d) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Copy SBOM models to remove interdependencies sbp
• 2026/01/20 (tooling-trusted-releases) 01/01: Copy SBOM models to remove interdependencies sbp
• 2026/01/20 (tooling-trusted-releases) branch copy-sbom-models created (now 323c53d) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Require subject template hashes only from forms and not from the API sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated (3287b50 -> 6e564c9) sbp
• 2026/01/20 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.2.0 deleted (was 0750b74) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated (72c31ca -> 3287b50) sbp
• 2026/01/20 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.0 deleted (was a51b5d2) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Split failed and in-progress task results, format error message better arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts deleted (was d39011a) arm
• 2026/01/20 (tooling-trusted-releases) branch main updated: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts updated (35cb9c9 -> d39011a) arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts updated (6bfe896 -> 35cb9c9) arm
• 2026/01/19 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.2.0 created (now 0750b74) github-bot
• 2026/01/19 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.0 created (now a51b5d2) github-bot
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a temporary state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a subversion state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a generated secrets state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Create local certificates automatically if they do not exist sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (691b986 -> 4388deb) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (3096084 -> 691b986) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (f38dac1 -> 3096084) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a curated secrets state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix an error in the e2e tests documentation sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Do not attempt to manage Hypercorn logs from the ATR server sbp
• 2026/01/19 (tooling-trusted-releases) 01/01: Make Maven check use the web URLs instead of the search.maven api arm
• 2026/01/19 (tooling-trusted-releases) branch maven_check_artifacts created (now 6bfe896) arm
• 2026/01/19 (tooling-trusted-releases) branch main updated: Render pending and failed distribution tasks for non-finish releases arm
• 2026/01/19 (tooling-actions) 01/01: Make sure validation error causes a failure arm
• 2026/01/19 (tooling-actions) branch main updated (6f73530 -> a8e63ef) arm
• 2026/01/19 (tooling-actions) branch main updated: Make sure validation error causes a failure arm
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix some problems with looking up secret configuration values sbp
• 2026/01/19 (tooling-actions) branch main updated: Handle validation errors in failure step arm
• 2026/01/19 (tooling-trusted-releases) branch main updated (0cc6d63 -> bfde376) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix some problems with looking up secret configuration values sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add the runtime state directory to the list of directories to create sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Document how to debug e2e test failures sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a logs state directory sbp
• 2026/01/19 (tooling-releases-client) branch main updated: Revise README for clarifying TUI sbp
• 2026/01/19 (tooling-actions) branch main updated: Update njord plugin arm
• 2026/01/19 (tooling-actions) 01/01: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) branch main updated (e89f471 -> 3b2b16e) arm
• 2026/01/19 (tooling-actions) 01/01: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) branch main updated (3e8cf6d -> e89f471) arm
• 2026/01/19 (tooling-actions) branch main updated: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) 01/01: Set tag in POM arm
• 2026/01/19 (tooling-actions) branch main updated (afcf3e4 -> 2aff89d) arm
• 2026/01/19 (tooling-actions) branch main updated: Set tag in POM arm
• 2026/01/19 (tooling-actions) branch main updated: Move options to pom arm
• 2026/01/19 (tooling-actions) branch main updated: Try setting all the settings the hard way arm
• 2026/01/19 (tooling-actions) branch main updated: Try adding CLI options to validate arm
• 2026/01/16 (tooling-trusted-releases) branch main updated: Remove hardcoded tooling committee wave
• 2026/01/16 (tooling-trusted-releases) branch main updated: Add issuer and audience to JWTs sbp
• 2026/01/16 (tooling-trusted-releases) branch dependabot/uv/pyasn1-0.6.2 deleted (was 9dc25d3) github-bot
• 2026/01/16 (tooling-trusted-releases) branch main updated: Update dependencies due to CVE-2026-23490 sbp
• 2026/01/16 (tooling-trusted-releases) branch main updated: Manage the server secret key using ASFQuart sbp
• 2026/01/16 (tooling-trusted-releases) branch dependabot/uv/pyasn1-0.6.2 created (now 9dc25d3) github-bot
• 2026/01/16 (tooling-trusted-releases) branch main updated: Remove the ability to configure CSRF protection sbp
• 2026/01/16 (tooling-trusted-releases) branch main updated: Remove unused code in a comment sbp
• 2026/01/16 (tooling-trusted-releases) branch main updated: Increase the entropy of the jti field in JWTs sbp
• 2026/01/16 (tooling-trusted-releases) branch dependabot/uv/pynacl-1.6.2 deleted (was 9ff47da) github-bot
• 2026/01/16 (tooling-trusted-releases) branch main updated (26ee9d1 -> 85bc177) sbp
• 2026/01/16 (tooling-trusted-releases) 01/01: Remove the dependency on PyNaCl due to CVE-2025-69277 sbp
• 2026/01/16 (tooling-trusted-releases) branch dependabot/uv/pynacl-1.6.2 created (now 9ff47da) github-bot
• 2026/01/16 (tooling-trusted-releases) branch main updated: Remove the dependency on PyNaCl due to CVE-2025-69277 sbp
• 2026/01/16 (tooling-trusted-releases) branch main updated: Migrate state files with extensive checks sbp
• 2026/01/16 (tooling-trusted-releases) branch safe-migrate-path deleted (was 5d5436f) sbp
• 2026/01/16 (tooling-actions) branch main updated: Support no side files arm
• 2026/01/16 (tooling-trusted-releases) branch safe-migrate-path updated (571d87c -> 5d5436f) sbp
• 2026/01/16 (tooling-actions) branch main updated: Make sure the env var gets used arm
• 2026/01/16 (tooling-actions) branch main updated: Print files after writing arm
• 2026/01/16 (tooling-actions) branch main updated: Change working directory arm
• 2026/01/16 (tooling-actions) 01/01: Change expected repo layout - jar and pom arm
• 2026/01/16 (tooling-actions) branch main updated (7b2426d -> 826e918) arm
• 2026/01/16 (tooling-trusted-releases) 01/01: Migrate state files with extensive checks sbp
• 2026/01/16 (tooling-trusted-releases) branch safe-migrate-path created (now 571d87c) sbp
• 2026/01/16 (tooling-actions) 01/01: Change expected repo layout - jar and pom arm
• 2026/01/16 (tooling-actions) branch main updated (5f26520 -> 7b2426d) arm
• 2026/01/16 (tooling-actions) branch main updated (1398d00 -> 5f26520) arm
• 2026/01/16 (tooling-actions) 01/01: Change expected repo layout - jar and pom arm
• 2026/01/16 (tooling-actions) branch main updated: Change expected repo layout - jar and pom arm
• 2026/01/16 (tooling-actions) branch main updated: Try setting URL directly arm
• 2026/01/16 (tooling-actions) branch main updated (5dbae07 -> caa9d83) arm
• 2026/01/16 (tooling-actions) 01/01: Try to fix settings arm
• 2026/01/16 (tooling-actions) branch main updated: Try to fix settings arm
• 2026/01/16 (tooling-actions) 01/01: Assume the store name since listing and searching doesn't work arm
• 2026/01/16 (tooling-actions) branch main updated (9f10292 -> 1b6a41a) arm
• 2026/01/16 (tooling-actions) branch main updated: Additional logging arm
• 2026/01/16 (tooling-actions) 01/01: Make sure we actually print the store names arm
• 2026/01/16 (tooling-actions) branch main updated (5823ebf -> b24025a) arm
• 2026/01/16 (tooling-actions) branch main updated: Make sure we actually print the store names arm
• 2026/01/16 (tooling-trusted-releases) branch main updated: Add psutil as a dependency sbp
• 2026/01/16 (tooling-trusted-releases) branch main updated: Update dependencies sbp
• 2026/01/16 (tooling-actions) branch main updated: Some extra debug output arm
• 2026/01/16 (tooling-actions) branch main updated: Add debug arm
• 2026/01/16 (tooling-actions) branch main updated: Some logging fixes and working directory for maven arm
• 2026/01/16 (tooling-actions) branch main updated: Don't try to setup maven cache arm
• 2026/01/16 (tooling-actions) branch main updated: Move setup JDK to after we have a pom arm
• 2026/01/16 (tooling-actions) branch main updated: Don't squash settings file arm
• 2026/01/16 (tooling-trusted-releases) branch main updated: Change workflow to be a specific staging workflow and remove from passed args arm
• 2026/01/16 (tooling-actions) branch main updated: Change to a specific staging workflow arm
• 2026/01/16 (tooling-trusted-releases) branch scheduled_tasks deleted (was 8909630) arm
• 2026/01/16 (tooling-trusted-releases) 03/03: Move asf_uid to args model and tweak logic to clear scheduled tasks arm
• 2026/01/16 (tooling-trusted-releases) branch main updated (5e26ee1 -> 2e99ba3) arm
• 2026/01/16 (tooling-trusted-releases) 01/03: Add the ability to schedule future jobs. Worker claim updated to not claim future tasks. Metadata and workflow status tasks can schedule themselves. arm
• 2026/01/16 (tooling-trusted-releases) 02/03: Add scheduled column for tasks, allow asf_uid to be passed in task arguments arm
• 2026/01/16 (tooling-trusted-releases) branch scheduled_tasks updated (1da5583 -> 8909630) arm
• 2026/01/16 (tooling-trusted-releases) branch scheduled_tasks updated (cf1a2b9 -> 1da5583) arm
• 2026/01/15 (tooling-trusted-releases) branch main updated: Do not apply state subdirectory migrations when hot reloading sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated: Add a migration to use a database state subdirectory sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated: Add a migration to use a cache state subdirectory sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated (ce15cbe -> ea5b945) sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated: Add a migration to use an audit state subdirectory sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated: Check that the e2e container is running before starting the tests sbp
• 2026/01/15 (tooling-trusted-releases) branch main updated: Allow the state directory to be configured during setup sbp
• 2026/01/15 (tooling-trusted-releases) branch scheduled_tasks updated (f697ab2 -> cf1a2b9) arm
• 2026/01/15 (tooling-trusted-releases) branch scheduled_tasks updated (1970d50 -> f697ab2) arm
• 2026/01/15 (tooling-trusted-releases) branch scheduled_tasks updated (bef00c5 -> 1970d50) arm
• 2026/01/15 (tooling-trusted-releases) branch scheduled_tasks updated (31d91cc -> bef00c5) arm
• 2026/01/15 (tooling-trusted-releases) branch main updated: Add support for Maven staging (repository.a.o) - using 4443 Nexus 3 new version arm
• 2026/01/15 (tooling-trusted-releases) 01/01: Add the ability to schedule future jobs. Worker claim updated to not claim future tasks. Metadata and workflow status tasks can schedule themselves. arm
• 2026/01/15 (tooling-trusted-releases) branch scheduled_tasks created (now 31d91cc) arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Document the parts of the filesystem used by the storage interface sbp
• 2026/01/14 (tooling-trusted-releases) branch main updated: Fix the style of nested lists sbp
• 2026/01/14 (tooling-trusted-releases) branch main updated: Use the revision counter when creating new revisions sbp
• 2026/01/14 (tooling-trusted-releases) branch main updated: Change workflow unique ID to be sightly more meaningful arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Add a separate revision counter table sbp
• 2026/01/14 (tooling-actions) branch main updated (48b99a9 -> 908ce3f) arm
• 2026/01/14 (tooling-actions) branch main updated: Update README.md to use the wording proposed by @Jai-76 sbp
• 2026/01/14 (tooling-actions) branch main updated: Fix the checkout example in the upload action documentation sbp
• 2026/01/14 (tooling-trusted-releases) branch main updated: Fix a missing condition arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Better messages for distributions arm
• 2026/01/14 (tooling-actions) branch main updated (c1973d4 -> d3c70c1) arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Attempt to render completed tasks using workflowstatus entries arm
• 2026/01/14 (tooling-actions) 01/01: Send phase back to ATR on distribute arm
• 2026/01/14 (tooling-actions) branch main updated: Send phase back to ATR on distribute arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Add a new page about components to the user guide sbp
• 2026/01/14 (tooling-actions) branch main updated: Some more data missing from distribution arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Add a documentation paragraph explaining more about components sbp
• 2026/01/14 (tooling-trusted-releases) branch main updated: Fix new record argument validation arm
• 2026/01/14 (tooling-actions) branch main updated: Add extra reporting line arm
• 2026/01/14 (tooling-actions) branch main updated (9d3ec7b -> 1faca03) arm
• 2026/01/14 (tooling-actions) 01/01: Fix one report and add back an env var arm
• 2026/01/14 (tooling-actions) 01/01: Change distribute endpoint again arm
• 2026/01/14 (tooling-actions) branch main updated: Change distribute endpoint again arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Support the new distribution record function arm
• 2026/01/14 (tooling-actions) branch main updated: Fix one report and add back an env var arm
• 2026/01/14 (tooling-actions) branch main updated: Use correct endpoint arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Fix refresh button and remove CSP change. Try to convert ID to int. arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Allow phase and UID to be passed out to workflows arm
• 2026/01/14 (tooling-trusted-releases) 01/01: Attempt to render completed tasks using workflowstatus entries arm
• 2026/01/14 (tooling-trusted-releases) branch main updated (c783072 -> 41e3948) arm
• 2026/01/14 (tooling-actions) branch main updated: Add some extra statuses arm
• 2026/01/14 (tooling-actions) branch main updated: Send correct status values arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Attempt to render completed tasks using workflowstatus entries arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Update git reference (was working before anyway) arm
• 2026/01/14 (tooling-actions) branch main updated: Fix workflow name for status reporting arm
• 2026/01/14 (tooling-trusted-releases) branch main updated: Accept string from github arm
• 2026/01/14 (tooling-actions) branch main updated: Fix missing SSH port arm
• 2026/01/13 (tooling-trusted-releases) branch main updated: Improve the instructions to submit a pull request sbp
• 2026/01/13 (tooling-trusted-releases) branch main updated: Ensure that interpolated LDAP variables are always escaped sbp
• 2026/01/13 (tooling-trusted-releases) branch main updated: Update dependencies due to CVE-2026-22701 sbp
• 2026/01/13 (tooling-actions) branch main updated: Fix values being sent arm

• Earlier messages
• Later messages