commits  

Messages by Thread

• (tooling-actions) branch main updated (5df10cc -> 73168e9) arm
  • (tooling-actions) 01/01: Actually use CP in publish arm
• (tooling-actions) branch main updated: Actually use CP in publish arm
• (tooling-actions) branch main updated: Fix publisher settings arm
• (tooling-trusted-releases) branch dave2wave-patch-1 created (now 7e67a15b) wave
  • (tooling-trusted-releases) 01/01: Add support for pyproject.toml and Docker in Dependabot wave
• (tooling-trusted-releases) branch version-comment-710 deleted (was 31c84149) akm
• (tooling-trusted-releases) branch main updated: Added comment; fixes #710 (#856) akm
• (tooling-trusted-releases) branch version-comment-710 created (now 31c84149) akm
  • (tooling-trusted-releases) 01/01: Added comment; fixes #710 akm
• (tooling-trusted-releases) branch ldap-search-limited-attributes deleted (was cfa8ea36) wave
• (tooling-trusted-releases) branch relpath-docs-721 deleted (was 3f8ef5cd) akm
• (tooling-trusted-releases) branch main updated: Adding to docs; fixes #721 (#854) akm
• (tooling-trusted-releases) branch fix-case-in-docs deleted (was c9d5f93c) wave
• (tooling-trusted-releases) branch main updated: Fix title case (#855) wave
• (tooling-trusted-releases) branch relpath-docs-721 updated (f8ae462a -> 3f8ef5cd) akm
• (tooling-trusted-releases) branch fix-case-in-docs created (now c9d5f93c) wave
  • (tooling-trusted-releases) 01/01: Fix title case wave
• (tooling-trusted-releases) branch svn-import-comment-662 deleted (was 04f806da) akm
• (tooling-trusted-releases) branch main updated: Adding comment for domain checking; fixes #662 (#853) akm
• (tooling-trusted-releases) branch relpath-docs-721 created (now f8ae462a) akm
  • (tooling-trusted-releases) 01/01: Adding to docs; fixes #721 akm
• (tooling-trusted-releases) branch svn-import-comment-662 updated (4d26a38d -> 04f806da) akm
• (tooling-trusted-releases) branch main updated: Add padding on table cells wave
• (tooling-trusted-releases) branch svn-import-comment-662 created (now 4d26a38d) akm
  • (tooling-trusted-releases) 01/01: Adding comment for domain checking; fixes #662 akm
• (tooling-trusted-releases) branch main updated: Add TLS security configuration docs (#852) wave
• (tooling-trusted-releases) branch add-ls-config-docs deleted (was fc97a0bd) wave
• (tooling-trusted-releases) branch main updated (65a03fbf -> ced33ae5) sbp
• (tooling-trusted-releases) branch sbp updated: Use GFM instead of CommonMark Markdown for the documentation sbp
• (tooling-trusted-releases) branch add-ls-config-docs updated: Clean up the linkage wave
• (tooling-trusted-releases) branch add-ls-config-docs updated: Update next section link in input-validation.md wave
• (tooling-trusted-releases) branch add-ls-config-docs updated: Create TLS security configuration documentation wave
• (tooling-trusted-releases) branch add-ls-config-docs created (now 65a03fbf) wave
• (tooling-trusted-releases) branch main updated (b280bcf1 -> 65a03fbf) sbp
• (tooling-trusted-releases) branch sbp updated: Check .zip structure using the extracted files only sbp
• (tooling-trusted-releases) branch main updated (d5047c89 -> b280bcf1) sbp
• (tooling-trusted-releases) branch sbp updated (5d6a978e -> b280bcf1) sbp
  • (tooling-trusted-releases) 01/01: Check .tar.gz structure using the extracted files only sbp
• (tooling-actions) branch main updated (0373712 -> 9c213fb) arm
  • (tooling-actions) 01/01: Fix name of workflow arm
• (tooling-trusted-releases) branch arm updated: Validate user ID of PATs on JWT usage arm
• (tooling-trusted-releases) branch comment-out-file_name-in-uploads created (now dfc70f75) wave
  • (tooling-trusted-releases) 01/01: Drop file_name field in upload files wave
• (tooling-trusted-releases) branch main updated (85f9e894 -> d5047c89) arm
• (tooling-actions) branch main updated: Update maven central distribution for ntb files arm
• (tooling-trusted-releases) branch arm updated: Disable automated staging distributions for alpha. Filter automated distributions to only support Maven Central for now. arm
• (tooling-trusted-releases) branch main updated (21a8560c -> 85f9e894) arm
• (tooling-trusted-releases) branch arm updated: #698 - Hide JWT after 60s arm
• (tooling-trusted-releases) branch main updated (1a549cbf -> 21a8560c) arm
• (tooling-trusted-releases) branch arm updated: Remove ability to push custom args into GH workflows - unnecessary. Closes #771 arm
• (tooling-trusted-releases) branch main updated (c80e8e81 -> 1a549cbf) arm
• (tooling-trusted-releases) branch arm updated (a81c982c -> 1a549cbf) arm
  • (tooling-trusted-releases) 01/01: #643 - Add safe.RevisionNumber and utilise unsafe.UnsafeStr for remaining str types. arm
• (tooling-trusted-releases) branch document-public-API-endpoints-660 deleted (was a894e756) wave
• (tooling-trusted-releases) branch main updated: Adding docs about public API endpoints; fixes #660 (#849) wave
• (tooling-trusted-releases) branch document-public-API-endpoints-660 updated (a35f21f3 -> a894e756) akm
• (tooling-trusted-releases) branch document-public-API-endpoints-660 updated (e411317c -> a35f21f3) akm
• (tooling-trusted-releases) branch document-public-API-endpoints-660 created (now e411317c) akm
  • (tooling-trusted-releases) 01/01: Adding docs about public API endpoints; fixes #660 akm
• (tooling-trusted-releases) branch document-auth-bypass-659 deleted (was 748e1f23) wave
• (tooling-trusted-releases) branch main updated: Adding docs for auth bypass; fixes #659 (#848) wave
• (tooling-trusted-releases) branch document-auth-bypass-659 created (now 748e1f23) akm
  • (tooling-trusted-releases) 01/01: Adding docs for auth bypass; fixes #659 akm
• (tooling-trusted-releases) branch public-download-comment-665 deleted (was f11c6341) wave
• (tooling-trusted-releases) branch main updated: Adding comment about public download of release files; fixes #665 (#846) wave
• (tooling-trusted-releases) branch main updated: Adding comments for key and token deletion; fixes #664 (#847) wave
• (tooling-trusted-releases) branch token-deletion-comment-664 deleted (was d2415e27) wave
• (tooling-trusted-releases) branch message-sending-comment-670 deleted (was 21140868) wave
• (tooling-trusted-releases) branch main updated: Adding comment about sending mail to other committees; fixes #670 (#845) wave
• (tooling-trusted-releases) branch ssh-comment-674 deleted (was f936db9c) wave
• (tooling-trusted-releases) branch main updated: Adding comment; fixes #674 (#844) wave
• (tooling-trusted-releases) branch token-deletion-comment-664 created (now d2415e27) akm
  • (tooling-trusted-releases) 01/01: Adding comments for key and token deletion; fixes #664 akm
• (tooling-trusted-releases) branch public-download-comment-665 created (now f11c6341) akm
  • (tooling-trusted-releases) 01/01: Adding comment about public download of release files; fixes #665 akm
• (tooling-trusted-releases) branch message-sending-comment-670 created (now 21140868) akm
  • (tooling-trusted-releases) 01/01: Adding comment about sending mail to other committees; fixes #670 akm
• (tooling-trusted-releases) branch ssh-comment-674 created (now f936db9c) akm
  • (tooling-trusted-releases) 01/01: Adding comment; fixes #674 akm
• (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.3.1 created (now 8b88fd49) github-bot
• (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-7.3.0 deleted (was 4b3f130) github-bot
• (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-7.3.1 created (now c1c5b79) github-bot
• (tooling-trusted-releases) branch arm updated (a72a347a -> a81c982c) arm
  • (tooling-trusted-releases) 01/01: #643 - Add safe.RevisionNumber and utilise unsafe.UnsafeStr for remaining str types. arm
• (tooling-trusted-releases) branch arm updated: #643 - Add safe.RevisionNumber and utilise unsafe.UnsafeStr for remaining str types. arm
• (tooling-trusted-releases) branch main updated (498bc10e -> 5fb88cfc) arm
• (tooling-trusted-releases) branch arm updated: Use PAT hash as part of issued JWT. Closes #828. arm
• (tooling-trusted-releases) branch main updated (8fd6be8a -> 498bc10e) arm
• (tooling-trusted-releases) branch arm updated: Wrap safe types in str before starting SVN import. Closes #838 arm
• (tooling-trusted-releases) branch main updated (5d6a978e -> 8fd6be8a) arm
• (tooling-trusted-releases) branch arm updated (eadf18d4 -> 8fd6be8a) arm
  • (tooling-trusted-releases) 01/01: Use release name from URL and compare to the form to ensure no malicious/accidental use. Closes #655 arm
• (tooling-trusted-releases) branch main updated (b5222e27 -> 5d6a978e) sbp
• (tooling-trusted-releases) branch sbp updated: Additionally detect source files by stem infix sbp
• (tooling-trusted-releases) branch main updated (769e6257 -> b5222e27) sbp
• (tooling-trusted-releases) branch sbp updated: Detect source archives by stem suffix sbp
• (tooling-trusted-releases) branch main updated (de57b293 -> 769e6257) sbp
• (tooling-trusted-releases) branch main updated (d7719568 -> de57b293) sbp
• (tooling-trusted-releases) branch sbp updated: Only extract archives added before quarantining once sbp
• (tooling-trusted-releases) branch sbp updated (4e7d3111 -> de57b293) sbp
  • (tooling-trusted-releases) 01/01: Always extract any archives uploaded before quarantine code was added sbp
• (tooling-trusted-releases) branch sbp updated (c72286c1 -> 4e7d3111) sbp
  • (tooling-trusted-releases) 01/01: Always extract any archives uploaded before quarantine code was added sbp
• (tooling-trusted-releases) branch sbp updated: Always extract any archives uploaded before quarantine code was added sbp
• (tooling-trusted-releases) branch main updated (c7d06743 -> d7719568) sbp
• (tooling-trusted-releases) branch main updated (427a333e -> c7d06743) sbp
• (tooling-trusted-releases) branch sbp updated: Update exarch and other dependencies sbp
• (tooling-trusted-releases) branch main updated (df73c600 -> 427a333e) sbp
• (tooling-trusted-releases) branch sbp updated: Add forms to allow quarantine error messages to be dismissed sbp
• (tooling-trusted-releases) branch sbp updated: Propagate archive extraction error messages sbp
• (tooling-trusted-releases) branch main updated (8e210963 -> df73c600) sbp
• (tooling-trusted-releases) branch sbp updated (ecd6fe61 -> df73c600) sbp
  • (tooling-trusted-releases) 01/01: Use JSON mode when serialising any Pydantic model in the API sbp
• (tooling-trusted-releases) branch main updated: block published endpoints when not testing wave
• (tooling-trusted-releases) branch main updated (eadf18d4 -> ecd6fe61) sbp
• (tooling-trusted-releases) branch sbp updated (83eeaf2a -> ecd6fe61) sbp
  • (tooling-trusted-releases) 01/01: Extract quarantined archives to a staging directory first sbp
• (tooling-trusted-releases) branch main updated (ea3edfa0 -> eadf18d4) arm
• (tooling-trusted-releases) branch arm updated: Add some missing underscore prefixes and an explicit notfound route - use that route on test/login when disabled (for #784) arm
• (tooling-trusted-releases) branch main updated (83eeaf2a -> ea3edfa0) arm
• (tooling-trusted-releases) branch arm updated (b0df9efe -> ea3edfa0) arm
• (tooling-trusted-releases) branch arm updated (5548787b -> b0df9efe) arm
  • (tooling-trusted-releases) 02/03: Add taint tracking types to API routes arm
  • (tooling-trusted-releases) 01/03: Prefix some unused variables arm
• (tooling-trusted-releases) branch arm updated (014db8aa -> 5548787b) arm
• (tooling-trusted-releases) branch main updated (e6463a0b -> 83eeaf2a) sbp
• (tooling-trusted-releases) branch sbp updated: Record 3-way merge metadata on revisions sbp
• (tooling-trusted-releases) branch taint_tracking_types deleted (was 014db8aa) arm
• (tooling-trusted-releases) branch arm updated (e6463a0b -> 014db8aa) arm
• (tooling-trusted-releases) branch arm updated (f819673b -> e6463a0b) arm
• (tooling-trusted-releases) branch taint_tracking_types updated (11845920 -> 014db8aa) arm
• (tooling-trusted-releases) branch main updated (1105ff5d -> e6463a0b) sbp
• (tooling-trusted-releases) branch sbp updated: Make report e2e tests more consistent sbp
• (tooling-trusted-releases) branch sbp updated (67efe112 -> e6463a0b) sbp
  • (tooling-trusted-releases) 01/01: Render templates synchronously sbp
• (tooling-trusted-releases) branch main updated: Adjust topnav menu if ALLOW_TESTS sbp
• (tooling-trusted-releases) branch adjust-topnav-menu-tests deleted (was cef6b62e) sbp
• (tooling-trusted-releases) branch taint_tracking_types updated (7182ec99 -> 11845920) arm
• (tooling-trusted-releases) branch taint_tracking_types updated (f9aa859a -> 7182ec99) arm
• (tooling-trusted-releases) branch taint_tracking_types updated (dab49c31 -> f9aa859a) arm
• (tooling-trusted-releases) branch main updated (67efe112 -> f819673b) arm
• (tooling-trusted-releases) branch taint_tracking_types updated (2a4fbfef -> dab49c31) arm
• (tooling-trusted-releases) branch arm updated (89ceac6c -> f819673b) arm
  • (tooling-trusted-releases) 01/01: #763 - Convert to defusedxml arm
• (tooling-trusted-releases) branch taint_tracking_types updated (66d53925 -> 2a4fbfef) arm
• (tooling-trusted-releases) branch update-email-alert-messages created (now 1a4cfdd7) wave
  • (tooling-trusted-releases) 01/01: Make token change emails more clear wave
• (tooling-trusted-releases) branch adjust-topnav-menu-tests updated (e62fe2c2 -> cef6b62e) wave
• (tooling-trusted-releases) branch adjust-topnav-menu-tests created (now e62fe2c2) wave
  • (tooling-trusted-releases) 01/01: Adjust topnav menu if ALLOW_TESTS wave
• (tooling-trusted-releases) branch main updated (a2b82c02 -> 67efe112) sbp
• (tooling-trusted-releases) branch sbp updated: Add an admin route to invalidate all JWTs by rotating the signing key sbp
• (tooling-trusted-releases) branch taint_tracking_types updated (34b19fed -> 66d53925) arm
• (tooling-trusted-releases) branch main updated (63a61445 -> a2b82c02) sbp
• (tooling-trusted-releases) branch sbp updated: Document code policies sbp
• (tooling-trusted-releases) branch main updated (31569feb -> 63a61445) sbp
• (tooling-trusted-releases) branch main updated (3aa22ffb -> 31569feb) sbp
• (tooling-trusted-releases) branch main updated (8c3875c2 -> 3aa22ffb) sbp
• (tooling-trusted-releases) branch sbp updated: Fix parentheses sbp
• (tooling-trusted-releases) branch sbp updated: Add a script to fix function ordering in common locations sbp
• (tooling-trusted-releases) branch sbp updated (7c939006 -> 3aa22ffb) sbp
  • (tooling-trusted-releases) 01/01: Omit hashes from PAT records sbp
• (tooling-trusted-releases) branch main updated (1b8ec694 -> 8c3875c2) sbp
• (tooling-trusted-releases) branch sbp updated: Omit hashes from PAT records sbp
• (tooling-trusted-releases) branch sbp updated: Add a note about widening types to check with exarch sbp
• (tooling-trusted-releases) branch sbp updated (192c9881 -> 1b8ec694) sbp
• (tooling-trusted-releases) branch add-starttls-for-smtp deleted (was d694e28d) sbp
• (tooling-trusted-releases) branch main updated: Add start_tls to SMTP connection sbp
• (tooling-trusted-releases) branch main updated: New ATR logo topnav treatment sbp
• (tooling-trusted-releases) branch atr-logo-topnav deleted (was 328c88d7) sbp
• (tooling-trusted-releases) branch main updated (57e1065a -> 192c9881) sbp
• (tooling-trusted-releases) branch sbp updated (f7a2fe04 -> 192c9881) sbp
  • (tooling-trusted-releases) 01/01: Use a strict structured subset of LDAP results only sbp
• (tooling-trusted-releases) branch main updated: Use session asf_uid when adding ssh key and pat sbp
• (tooling-trusted-releases) branch use-session-asf-uid-for-ssh-keys-tokens deleted (was 233e8d06) sbp
• (tooling-trusted-releases) branch arm updated: #763 - Convert to defusedxml arm
• (tooling-trusted-releases) branch arm updated (8c39c33c -> 1efa36a9) arm
• (tooling-trusted-releases) branch taint_tracking_types updated (3c783f43 -> 34b19fed) arm
  • (tooling-trusted-releases) 01/03: Prefix some unused variables arm
  • (tooling-trusted-releases) 02/03: Add taint tracking types to API routes arm
• (tooling-trusted-releases) branch taint_tracking_types updated (7c5dc03a -> 3c783f43) arm
• (tooling-trusted-releases) branch atr-logo-topnav updated (25541e8f -> 328c88d7) wave
• (tooling-trusted-releases) branch atr-logo-topnav updated (53770478 -> 25541e8f) wave
• (tooling-trusted-releases) branch atr-logo-topnav updated (828167e8 -> 53770478) wave
• (tooling-trusted-releases) branch atr-logo-topnav updated: New atr logo topnav treatment wave
• (tooling-trusted-releases) branch atr-logo-topnav created (now 1efa36a9) wave
• (tooling-trusted-releases) branch main updated: FIs and rename atr logo and badge wave
• (tooling-trusted-releases) branch main updated: ATR certified badge wave
• (tooling-trusted-releases) branch main updated: ATR_logo,svg wave
• (tooling-trusted-releases) branch add-starttls-for-smtp updated (ad7efe7d -> d694e28d) wave
• (tooling-trusted-releases) branch add-starttls-for-smtp updated (392a47a8 -> ad7efe7d) wave
• (tooling-trusted-releases) branch add-starttls-for-smtp created (now 392a47a8) wave
  • (tooling-trusted-releases) 01/01: Add start_tls to smtp connection wave
• (tooling-trusted-releases) branch ldap-search-limited-attributes created (now cfa8ea36) wave
  • (tooling-trusted-releases) 01/01: Search ldap returning limited attributes wave
• (tooling-trusted-releases) branch use-session-asf-uid-for-ssh-keys-tokens created (now 233e8d06) wave
  • (tooling-trusted-releases) 01/01: Use session asf_uid when adding ssh key and pat wave
• (tooling-trusted-releases) branch main updated (0dd29c63 -> f7a2fe04) sbp
• (tooling-trusted-releases) branch sbp updated: Add guidance about the application/json media type sbp

• Earlier messages
• Later messages