commits  

Messages by Date

• 2026/04/07 (tooling-docs) branch dependabot/uv/filelock-3.20.3 updated (8395a06 -> 7bf526b) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/requests-2.33.0 deleted (was 85ec4f6) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/virtualenv-20.36.1 deleted (was 1a30c72) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/pygments-2.20.0 updated (e4c2aa1 -> ef43e5a) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/pygments-2.20.0 deleted (was ef43e5a) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/urllib3-2.6.3 deleted (was 2e3ebab) github-bot
• 2026/04/07 (tooling-docs) branch main updated: Bump urllib3 from 2.5.0 to 2.6.3 (#82) wave
• 2026/04/07 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/07 (tooling-docs) branch main updated: Fix prechecks wave
• 2026/04/07 (tooling-docs) branch main updated: Update Pelican action version in workflow wave
• 2026/04/07 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/07 (tooling-docs) branch main updated: Update Pelican action version in workflow wave
• 2026/04/07 (tooling-docs) branch asf-site updated: Automatic Site Publish by Buildbot git-site-role
• 2026/04/07 (tooling-docs) branch main updated: Update Pelican action version in workflow wave
• 2026/04/07 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/pygments-2.20.0 created (now e4c2aa1) github-bot
• 2026/04/07 (tooling-docs) branch asf-site updated: Automatic Site Publish by Buildbot git-site-role
• 2026/04/07 (tooling-docs) branch main updated: Enable debug mode in build-pelican workflow wave
• 2026/04/07 (tooling-docs) branch asf-site updated: Automatic Site Publish by Buildbot git-site-role
• 2026/04/07 (tooling-docs) branch dependabot/uv/requests-2.33.0 created (now d6540de) github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/virtualenv-20.36.1 created (now 19463e9) github-bot
• 2026/04/07 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/07 (tooling-docs) branch dependabot/uv/filelock-3.20.3 created (now 8395a06) github-bot
• 2026/04/07 (tooling-docs) branch main updated: Update Pelican action version in workflow wave
• 2026/04/07 (tooling-trusted-releases) branch main updated (3fb4007b -> 9fa85cc7) sbp
• 2026/04/07 (tooling-trusted-releases) branch main updated (2e6c48b8 -> 3fb4007b) sbp
• 2026/04/07 (tooling-trusted-releases) branch sbp updated: Fix a problem with e2e admin tests sbp
• 2026/04/07 (tooling-trusted-releases) 01/01: Add tests for JS serialisation of multiple file uploads sbp
• 2026/04/07 (tooling-trusted-releases) branch sbp updated (031ac9a3 -> 3fb4007b) sbp
• 2026/04/07 (tooling-trusted-releases) 01/02: Add tests for JS serialisation of multiple file uploads sbp
• 2026/04/07 (tooling-trusted-releases) 02/02: Fix a problem with e2e admin tests sbp
• 2026/04/07 (tooling-trusted-releases) branch sbp updated (a2767494 -> 031ac9a3) sbp
• 2026/04/07 (tooling-trusted-releases) branch main updated (424bddf8 -> 2e6c48b8) arm
• 2026/04/07 (tooling-trusted-releases) branch arm updated: #1000 - make sure optional parameters get validated arm
• 2026/04/07 (tooling-trusted-releases) branch sbp updated (dcd8d9bb -> a2767494) sbp
• 2026/04/07 (tooling-trusted-releases) 01/01: Add tests for JS serialisation of multiple file uploads sbp
• 2026/04/07 (tooling-trusted-releases) branch main updated (75e749fa -> 424bddf8) arm
• 2026/04/07 (tooling-trusted-releases) branch arm updated: #1136 - change import paths to stop importing all tasks via SSH (-> writers -> announce -> message) module. arm
• 2026/04/07 (tooling-trusted-releases) branch arm updated: Add daily maintenance task arm
• 2026/04/07 (tooling-trusted-releases) 02/02: Inline comment to address worker auth arm
• 2026/04/07 (tooling-trusted-releases) branch arm updated (55714711 -> 0957bc0d) arm
• 2026/04/07 (tooling-trusted-releases) 01/02: #1009 - Validate committee key from URL against the form arm
• 2026/04/07 (tooling-agents) branch main updated: Fixing detail field in json export akm
• 2026/04/06 (tooling-agents) branch main updated: Adding trusted publishing and attack examples akm
• 2026/04/06 (tooling-trusted-releases) branch main updated: Bump actions/cache from 5.0.3 to 5.0.4 sbp
• 2026/04/06 (tooling-trusted-releases) branch dependabot/github_actions/actions/cache-5.0.4 deleted (was 93d32038) sbp
• 2026/04/06 (tooling-agents) branch main updated: Fixes and json export akm
• 2026/04/06 (tooling-trusted-releases) branch main updated (ed6b219a -> dcd8d9bb) sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated (03f4030d -> ed6b219a) sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Remove the unused file upload staging mechanism sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated (355be9be -> 03f4030d) sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated (6965b23c -> 355be9be) sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Remove unused code in the GET upload module sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Combine multiple uploaded files into a single JS request sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Add a JSON response mode for when files are added sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated (5e2f4a3e -> 6965b23c) sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated: Bump astral-sh/setup-uv from 7.6.0 to 8.0.0 sbp
• 2026/04/06 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 deleted (was 21368f5a) sbp
• 2026/04/06 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 created (now 21368f5a) github-bot
• 2026/04/06 (tooling-trusted-releases) branch main updated (c925e495 -> 5e2f4a3e) sbp
• 2026/04/06 (tooling-actions) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 deleted (was 1c09f31) sbp
• 2026/04/06 (tooling-actions) branch main updated: Bump astral-sh/setup-uv from 7.6.0 to 8.0.0 sbp
• 2026/04/06 (tooling-actions) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 updated (48ae9c3 -> 1c09f31) github-bot
• 2026/04/06 (tooling-actions) branch dependabot/github_actions/actions/cache-5.0.4 deleted (was 0b606f5) sbp
• 2026/04/06 (tooling-actions) branch main updated: Bump actions/cache from 4.2.0 to 5.0.4 sbp
• 2026/04/06 (tooling-actions) branch main updated: Fix YAML style sbp
• 2026/04/06 (tooling-actions) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 created (now 48ae9c3) github-bot
• 2026/04/06 (tooling-trusted-releases) branch main updated (12945998 -> c925e495) sbp
• 2026/04/06 (tooling-releases-client) branch main updated: Update models sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated (148c14d2 -> 5e2f4a3e) sbp
• 2026/04/06 (tooling-trusted-releases) 01/01: Run code and dependency scans each Tuesday rather than Monday sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Run code and dependency scans on Tuesday rather than Monday sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
• 2026/04/06 (tooling-releases-client) branch main updated: Add an ASF action checker sbp
• 2026/04/06 (tooling-releases-client) branch main updated: Bump actions/upload-artifact from 6.0.0 to 7.0.0 sbp
• 2026/04/06 (tooling-releases-client) branch dependabot/github_actions/actions/upload-artifact-7.0.0 deleted (was abc4b55) sbp
• 2026/04/06 (tooling-releases-client) branch main updated: Bump astral-sh/setup-uv from 6.4.3 to 8.0.0 sbp
• 2026/04/06 (tooling-releases-client) branch main updated: Bump actions/cache from 5.0.3 to 5.0.4 sbp
• 2026/04/06 (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 deleted (was 883b4ca) sbp
• 2026/04/06 (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.4 deleted (was 9d30ab6) sbp
• 2026/04/06 (tooling-releases-client) branch dependabot/uv/pygments-2.20.0 deleted (was 255fb31) github-bot
• 2026/04/06 (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-8.0.0 created (now 883b4ca) github-bot
• 2026/04/06 (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-7.6.0 deleted (was 17091b6) github-bot
• 2026/04/06 (tooling-trusted-releases) branch main updated (1753b22c -> 12945998) sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Skip expensive permissions enforcement in development mode sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated (1bac8a96 -> 1753b22c) sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated (957a90b1 -> 1753b22c) sbp
• 2026/04/06 (tooling-trusted-releases) 01/01: Add an age and inactivity column to the releases list for admins sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated: Add an age and inactivity column to the releases list for admins sbp
• 2026/04/06 (tooling-trusted-releases) branch main updated (81611e5f -> 1bac8a96) sbp
• 2026/04/06 (tooling-trusted-releases) branch sbp updated (026834ba -> 1bac8a96) sbp
• 2026/04/06 (tooling-trusted-releases) 01/01: Ensure that attestation files are read only after writing sbp
• 2026/04/05 (tooling-trusted-releases) branch main updated: Fix image style on tutorial page wave
• 2026/04/04 (tooling-actions) branch main updated: Update allowlist-checker.yml for action paths wave
• 2026/04/04 (tooling-actions) branch main updated: Add scan-glob option to allowlist-checker workflow wave
• 2026/04/04 (tooling-trusted-releases) branch main updated: Update allowlist-check action version wave
• 2026/04/04 (tooling-actions) branch main updated: Fix indentation and remove duplicate 'with' statement wave
• 2026/04/04 (tooling-actions) branch main updated: Add allowlist-checker workflow configuration wave
• 2026/04/03 (tooling-trusted-releases) branch main updated (3ca91532 -> 026834ba) sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Add conditional queries to perform atomic vote transitions sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Add audit logging to key writer methods sbp
• 2026/04/03 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/03 (tooling-trusted-releases) branch main updated (886b4fee -> cbec8f50) sbp
• 2026/04/03 (tooling-trusted-releases) branch main updated (cbec8f50 -> 3ca91532) sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Fix validation of release vote properties sbp
• 2026/04/03 (tooling-trusted-releases) 02/02: Inline comment to address worker auth arm
• 2026/04/03 (tooling-trusted-releases) 01/02: #1009 - Validate committee key from URL against the form arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (6fe8c0e9 -> 55714711) arm
• 2026/04/03 (tooling-trusted-releases) branch main updated (990ebe2c -> 886b4fee) sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Fix an interpolation sbp
• 2026/04/03 (tooling-trusted-releases) branch arm updated: Inline comment to address worker auth arm
• 2026/04/03 (tooling-docs) branch asf-site updated: Commit build products github-bot
• 2026/04/03 (tooling-docs) branch main updated: Fix heading sbp
• 2026/04/03 (tooling-docs) branch asf-site updated: Automatic Site Publish by Buildbot git-site-role
• 2026/04/03 (tooling-docs) branch main updated (7e42b38 -> bcae95d) sbp
• 2026/04/03 (tooling-docs) 01/01: Add the Noisy Secrets draft specification sbp
• 2026/04/03 (tooling-docs) 01/01: Add the Noisy Secrets draft specification sbp
• 2026/04/03 (tooling-docs) branch main updated (bcae95d -> 899dfc8) sbp
• 2026/04/03 (tooling-docs) branch main updated: Add the Noisy Secrets draft specification sbp
• 2026/04/03 (tooling-trusted-releases) branch arm updated: #1009 - Validate committee key from URL against the form arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (4847ab29 -> 7c1ef86e) arm
• 2026/04/03 (tooling-trusted-releases) branch main updated (7c1ef86e -> 990ebe2c) sbp
• 2026/04/03 (tooling-trusted-releases) 01/01: Improve the permissions model around bulk key deletion for admins sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated (d7a7bc04 -> 990ebe2c) sbp
• 2026/04/03 (tooling-trusted-releases) branch main updated (e52dce14 -> 7c1ef86e) arm
• 2026/04/03 (tooling-trusted-releases) branch main updated: #964 - implement constrained safe path type for containment guarantees arm
• 2026/04/03 (tooling-trusted-releases) branch main updated (7a934b2a -> 3abfd5e8) arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (3abfd5e8 -> 4847ab29) arm
• 2026/04/03 (tooling-trusted-releases) branch safe_paths deleted (was 3abfd5e8) arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (7a934b2a -> 3abfd5e8) arm
• 2026/04/03 (tooling-trusted-releases) branch safe_paths updated (5c6c6515 -> 3abfd5e8) arm
• 2026/04/03 (tooling-trusted-releases) branch main updated: #1013 - use DB IntegrityError to warn user their project already exists. Fix small form validation bug. arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (8c7de341 -> 7a934b2a) arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated: #1010 - move distribution web validation to work on API calls as well, and support field-level errors in model_validator functions. arm
• 2026/04/03 (tooling-trusted-releases) branch main updated (e32be309 -> d7a7bc04) sbp
• 2026/04/03 (tooling-trusted-releases) branch main updated (a20fd81d -> e32be309) sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Remove the flag that skips SVN certificate checks sbp
• 2026/04/03 (tooling-trusted-releases) branch main updated (8c7de341 -> a20fd81d) sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated: Prevent pages from being cached by default sbp
• 2026/04/03 (tooling-trusted-releases) 01/01: Remove a completed reminder to update the Noisy Secrets specification sbp
• 2026/04/03 (tooling-trusted-releases) branch sbp updated (f24a7399 -> a20fd81d) sbp
• 2026/04/03 (tooling-trusted-releases) branch main updated (f24a7399 -> 8c7de341) arm
• 2026/04/03 (tooling-trusted-releases) branch arm updated (81ee214c -> 8c7de341) arm
• 2026/04/03 (tooling-trusted-releases) 01/01: #1010 - move distribution web validation to work on API calls as well, and support field-level errors in model_validator functions. arm
• 2026/04/03 (tooling-trusted-releases) branch safe_paths updated (36600088 -> 5c6c6515) arm
• 2026/04/03 (tooling-trusted-releases) branch safe_paths updated (e96cc590 -> 36600088) arm
• 2026/04/02 (tooling-agents) branch main updated: Minor fixes akm
• 2026/04/02 (tooling-agents) 01/02: Renaming dir akm
• 2026/04/02 (tooling-agents) branch main updated (1c71cc0 -> 98608bf) akm
• 2026/04/02 (tooling-agents) 02/02: Pushing github review code up akm
• 2026/04/02 (tooling-agents) branch main updated: Updating monitoring akm
• 2026/04/02 (tooling-trusted-releases) branch main updated (02787d1f -> f24a7399) sbp
• 2026/04/02 (tooling-trusted-releases) branch main updated (7d013b90 -> 02787d1f) sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Improve key deletion methods in the storage interface sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Move key association management to the storage interface sbp
• 2026/04/02 (tooling-agents) branch main updated: Bucketing categories akm
• 2026/04/02 (tooling-trusted-releases) branch main updated (f6f97de9 -> 7d013b90) sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Check LDAP account status during SSH authentication sbp
• 2026/04/02 (tooling-trusted-releases) branch main updated (3f8e016e -> f6f97de9) sbp
• 2026/04/02 (tooling-trusted-releases) branch main updated (81ee4cfb -> 3f8e016e) sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Remove the admin route that shows environment variables sbp
• 2026/04/02 (tooling-agents) branch main updated: Trusted publishing, monitoring script akm
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
• 2026/04/02 (tooling-trusted-releases) branch main updated (f34f4a0a -> 81ee4cfb) sbp
• 2026/04/02 (tooling-trusted-releases) 01/01: Add an implementation of Noisy Secrets, and tests sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated (f9cfcf22 -> 81ee4cfb) sbp
• 2026/04/02 (tooling-trusted-releases) 01/02: Initial safe path work arm
• 2026/04/02 (tooling-trusted-releases) branch safe_paths updated (b2261127 -> e96cc590) arm
• 2026/04/02 (tooling-trusted-releases) branch arm updated (403efc3c -> f34f4a0a) arm
• 2026/04/02 (tooling-trusted-releases) branch main updated: Update to MFA-supporting OAuth endpoints arm
• 2026/04/02 (tooling-trusted-releases) 01/03: Add an implementation of Noisy Secrets, and tests sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated (3c04a833 -> f9cfcf22) sbp
• 2026/04/02 (tooling-trusted-releases) 02/03: Update dependencies sbp
• 2026/04/02 (tooling-trusted-releases) 03/03: Remove the admin route that shows environment variables sbp
• 2026/04/02 (tooling-trusted-releases) branch main updated (eab9c374 -> 403efc3c) arm
• 2026/04/02 (tooling-trusted-releases) 01/02: Initial safe path work arm
• 2026/04/02 (tooling-trusted-releases) branch safe_paths created (now b2261127) arm
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
• 2026/04/02 (tooling-trusted-releases) branch sbp updated: Add an implementation of Noisy Secrets, and tests sbp
• 2026/04/02 (tooling-trusted-releases) 01/01: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
• 2026/04/02 (tooling-trusted-releases) branch arm updated (1a979baf -> 403efc3c) arm
• 2026/04/02 (tooling-trusted-releases) branch arm updated: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
• 2026/04/02 (tooling-trusted-releases) branch mode_updates deleted (was f9990cae) arm
• 2026/04/02 (tooling-trusted-releases) branch mode_updates updated (93a52190 -> f9990cae) arm
• 2026/04/02 (tooling-trusted-releases) branch arm updated (bf391606 -> eab9c374) arm
• 2026/04/02 (tooling-trusted-releases) branch arm created (now bf391606) arm
• 2026/04/01 (tooling-agents) branch main updated: Update GH workflow analysis code akm
• 2026/04/01 (tooling-agents) branch main updated: Adding GH workflow analysis akm
• 2026/04/01 (tooling-trusted-releases) branch main updated (448024d1 -> 7a877399) sbp
• 2026/04/01 (tooling-trusted-releases) branch main updated (a50d92d9 -> eab9c374) sbp
• 2026/04/01 (tooling-trusted-releases) branch sbp updated: Remove the pip-audit ignore for CVE-2026-4539 sbp
• 2026/04/01 (tooling-trusted-releases) branch sbp updated: Handle phase mismatches and add further checking sbp
• 2026/04/01 (tooling-trusted-releases) branch main updated (ca216273 -> a50d92d9) sbp
• 2026/04/01 (tooling-trusted-releases) branch main updated (7a877399 -> ca216273) sbp
• 2026/04/01 (tooling-trusted-releases) branch sbp updated: Constrain allowed phases when creating a revision sbp
• 2026/04/01 (tooling-trusted-releases) 01/01: Migrate code from asfpy to the pubsub module sbp
• 2026/04/01 (tooling-trusted-releases) branch sbp updated (6f110cdc -> 7a877399) sbp
• 2026/04/01 (tooling-trusted-releases) branch sbp updated (473002ea -> 6f110cdc) sbp
• 2026/04/01 (tooling-trusted-releases) 01/01: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
• 2026/04/01 (tooling-trusted-releases) branch arm updated: #992 - Fix safe types on ignore form arm

• Earlier messages
• Later messages