This is an automated email from the ASF dual-hosted git repository.
arm pushed a change to branch arm
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
discard 55714711 Inline comment to address worker auth
discard 4323f004 #1009 - Validate committee key from URL against the form
add cbec8f50 Add audit logging to key writer methods
add 3ca91532 Fix validation of release vote properties
add 026834ba Add conditional queries to perform atomic vote transitions
add bd3f4d69 Update allowlist-check action version
add 81611e5f Fix image style on tutorial page
add 1bac8a96 Ensure that attestation files are read only after writing
add 1753b22c Add an age and inactivity column to the releases list for
admins
add 12945998 Skip expensive permissions enforcement in development mode
add c925e495 Update dependencies
add 5e2f4a3e Run code and dependency scans each Tuesday rather than Monday
add 6965b23c Bump astral-sh/setup-uv from 7.6.0 to 8.0.0
add 355be9be Add a JSON response mode for when files are added
add 03f4030d Combine multiple uploaded files into a single JS request
add ed6b219a Remove unused code in the GET upload module
add dcd8d9bb Remove the unused file upload staging mechanism
add 75e749fa Bump actions/cache from 5.0.3 to 5.0.4
new 988323f1 #1009 - Validate committee key from URL against the form
new 0957bc0d Inline comment to address worker auth
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (55714711)
\
N -- N -- N refs/heads/arm (0957bc0d)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/dependabot.yml | 8 +-
.github/workflows/allowlistchecker.yml | 2 +-
.github/workflows/analyze.yml | 4 +-
.github/workflows/build.yml | 4 +-
.github/workflows/codeql.yaml | 4 +-
atr/admin/__init__.py | 42 ++++-
atr/admin/templates/all-releases.html | 8 +-
atr/attestable.py | 28 ++-
atr/get/upload.py | 24 ---
atr/paths.py | 6 -
atr/post/upload.py | 188 +++-----------------
atr/server.py | 3 +
atr/static/js/src/upload-progress-ui.js | 305 ++++++++++++++++++--------------
atr/static/js/src/upload-progress.js | 279 ++++++++---------------------
atr/storage/writers/keys.py | 63 ++++++-
atr/storage/writers/vote.py | 84 +++++++--
atr/templates/tutorial.html | 16 +-
atr/validate.py | 10 +-
pip-audit.requirements | 17 +-
tests/unit/test_admin_all_releases.py | 119 +++++++++++++
tests/unit/test_keys_writer.py | 57 +++++-
tests/unit/test_vote_resolution.py | 114 ++++++++++++
uv.lock | 179 +++++++++----------
23 files changed, 898 insertions(+), 666 deletions(-)
create mode 100644 tests/unit/test_admin_all_releases.py
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
