dev  

Messages by Date

• 2026/05/22 Introduction: Tian Teng Tian Teng
• 2026/05/22 [I] ISSUE-015 - Headless invocation auth (per-agent API keys / service tokens / OIDC) — RFC (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-013 - DynamoDB backend missing bulk APIs (already filed upstream) (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-014 - Observability shows null userId for authenticated users on public endpoints (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-012 - `datetime.utcnow()` deprecation warnings across 23 call sites (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-011 - Pipeline import/export — chained agents to/from a git repository (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-010 - Session expiry produces generic "Failed to save" errors with no auth context (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-009 - Log line duplication during parallel agent execution — prints lack pass-name context (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-007 - Stop button for in-flight runs (cooperative cancellation) (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-008 - Per-agent environment variables — editor UI and runtime overlay (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-006 - Home page Running Jobs module — cross-agent view of "what's running" (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-005 - Runs page should subscribe by run_id instead of holding a per-request SSE stream (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-004 - Composer-LLM generates `{outputText: ...}` regardless of declared multi-key output schema (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-002 - Resource scoping not implemented — every authenticated user sees every agent, demo, and deployment (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-003 - Multi-tenant non-blocking runtime — runs should survive tab close, deploy, and concurrent users (tooling-gofannon) via GitHub
• 2026/05/22 [I] ISSUE-001 - AttributeError on settings.AUTH_CONFIG_PATH crashes every unauthenticated request with HTTP 500 (tooling-gofannon) via GitHub
• 2026/05/22 [I] TODOs (tooling-gofannon) via GitHub
• 2026/05/22 Re: [I] ASVS scan of log4net (tooling-agents) via GitHub
• 2026/05/22 Re: [I] Context compaction agent — cheap-LLM summarize, expensive-LLM consume (tooling-agents) via GitHub
• 2026/05/22 Re: [I] ASVS scan of log4net (tooling-agents) via GitHub
• 2026/05/22 Re: [I] ASVS scan of log4net (tooling-agents) via GitHub
• 2026/05/22 Re: [I] Context compaction agent — cheap-LLM summarize, expensive-LLM consume (tooling-agents) via GitHub
• 2026/05/22 [I] Context compaction agent — cheap-LLM summarize, expensive-LLM consume (tooling-agents) via GitHub
• 2026/05/22 Re: [PR] Clarify Maven groupId guidance (tooling-trusted-releases) via GitHub
• 2026/05/22 [PR] Clarify Maven groupId guidance (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] Audit calibration: model under-classifies Type B/C/D gaps when rubric mandates Critical (tooling-agents) via GitHub
• 2026/05/22 Re: [I] Audit calibration: model under-classifies Type B/C/D gaps when rubric mandates Critical (tooling-agents) via GitHub
• 2026/05/22 Re: [I] Audit produces zero Critical findings when severityThreshold is set; move filtering to consolidate phase (tooling-agents) via GitHub
• 2026/05/22 Re: [I] Audit produces zero Critical findings when severityThreshold is set; move filtering to consolidate phase (tooling-agents) via GitHub
• 2026/05/22 [PR] Adjusting severity guidance (tooling-agents) via GitHub
• 2026/05/22 [I] Create a list of user OAuth sessions (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Add SBOM workflows documentation (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Add SBOM workflows documentation (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/05/22 [PR] Add SBOM workflows documentation (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] DOAP files in port of projects.apache.org (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] Refactor UX for email recipients (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/05/22 [GH] Document API documentation access policy (tooling-trusted-releases) via GitHub
• 2026/05/22 [GH] Track the staging revision of a recorded distribution (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Ignore (tooling-trusted-releases) via GitHub
• 2026/05/22 [PR] Ignore (tooling-trusted-releases) via GitHub
• 2026/05/22 [GH] Track the staging revision of a recorded distribution (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Fix e2e failures in main (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Fix e2e failures in main (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [I] Allow modification of project display name (tooling-trusted-releases) via GitHub
• 2026/05/22 Re: [PR] Make project display name editable from the metadata tab (tooling-trusted-releases) via GitHub
• 2026/05/22 [GH] Track the staging revision of a recorded distribution (tooling-trusted-releases) via GitHub
• 2026/05/22 [I] Improve API responses to maintain safe types (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [PR] [INFRA] Set up default rulesets for default and release branches (tooling-docs) via GitHub
• 2026/05/21 [PR] Track the staging revision of a recorded distribution (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Distribution record form returns HTTP 500 when a non-stageable platform is selected (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Distribution record form rejects valid Maven groupIds containing dots (tooling-trusted-releases) via GitHub
• 2026/05/21 [PR] Document API documentation access policy (tooling-trusted-releases) via GitHub
• 2026/05/21 [PR] Fix e2e failures in main (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Refactor UX for email recipients (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Add a "historical only" flag for outdated keys (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Add a "historical only" flag for outdated keys (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Alpha3 Track (tooling-trusted-releases) via GitHub
• 2026/05/21 [PR] Make project display name editable from the metadata tab (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Display name validator rejects Apache Empire-db and Apache mod_* projects (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Display name validator rejects Apache Empire-db and Apache mod_* projects (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Display name validator rejects Apache Empire-db and Apache mod_* projects (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Project model track (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Project model track (tooling-trusted-releases) via GitHub
• 2026/05/21 [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Make email address selection in OpenPGP key generation clearer (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Explain the consequences of OpenPGP committee association (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Assure that Committee and Project metadata are validated (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Assure that Committee and Project metadata are validated (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Expose project label in project list (https://release-test.apache.org/projects) (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Clarify "atr.project" parameter in https://github.com/apache/tooling-atr-maven-plugin/blob/main/src/site/markdown/usage.md#basic-upload [tooling-atr-maven-plugin] via GitHub
• 2026/05/21 Re: [I] Clarify "atr.project" parameter in https://github.com/apache/tooling-atr-maven-plugin/blob/main/src/site/markdown/usage.md#basic-upload [tooling-atr-maven-plugin] via GitHub
• 2026/05/21 Re: [I] Clarify "atr.project" parameter in https://github.com/apache/tooling-atr-maven-plugin/blob/main/src/site/markdown/usage.md#basic-upload [tooling-atr-maven-plugin] via GitHub
• 2026/05/21 Re: [I] Expose project label in project list (https://release-test.apache.org/projects) (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Expose project label in project list (https://release-test.apache.org/projects) (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Mailing recipient per type (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Mailing recipient per type (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] When no valid signature is found provide a link to upload the GPG public key (tooling-trusted-releases) via GitHub
• 2026/05/21 Re: [I] Deploy self hosted GitHub action runners for distribution workflows (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from POM [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Is swhid-rs identically vendored or we will maintain it? (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Investigate remote promotion of artifacts on third party platforms (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Add SWHID identifiers for release verification (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Is swhid-rs identically vendored or we will maintain it? (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Is swhid-rs identically vendored or we will maintain it? (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] ASVS scan of log4net (tooling-agents) via GitHub
• 2026/05/20 Re: [I] Is swhid-rs identically vendored or we will maintain it? (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Populate project metadata from POM [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 [I] Is swhid-rs identically vendored or we will maintain it? (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] chore: Correct project URLs in metadata (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [PR] chore: Correct project URLs in metadata (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] chore: Correct project URLs in metadata (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 [PR] chore: Correct project URLs in metadata (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] Bump pyo3 from 0.23.5 to 0.24.1 (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from POM [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 [PR] Bump pyo3 from 0.23.5 to 0.24.1 (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [PR] Bump gix from 0.72.1 to 0.83.0 in /swhid-rs (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 [PR] Configure Maven project for SCM publish and site deployment [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 [PR] Bump gix from 0.72.1 to 0.83.0 in /swhid-rs (tooling-asfswhid) via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Develop software supply chain risks FAQ (tooling-docs) via GitHub
• 2026/05/20 Re: [PR] Bump idna from 3.11 to 3.15 (tooling-docs) via GitHub
• 2026/05/20 Re: [PR] [INFRA] Set up default rulesets for default and release branches (tooling-docs) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Plugin release [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Add SWHID identifiers for release verification (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Plugin release [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Tie ATR server into the rsync path of svn dist artifacts (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Add SWHID identifiers for release verification (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Principal Authorization Cache Lacks Purge for Inactive Users (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Principal Authorization Cache Lacks Purge for Inactive Users (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] LDAP state in dev/debug/test modes and users (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] pre-commit: we can add `checkmake` a linter for Makefiles. It scans Makefiles for potential issues based on configurable rules. (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] pre-commit: we can add `checkmake` a linter for Makefiles. It scans Makefiles for potential issues based on configurable rules. (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] pre-commit: we can add `checkmake` a linter for Makefiles. It scans Makefiles for potential issues based on configurable rules. (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Implement basic attestations as a proof of concept (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Implement basic attestations as a proof of concept (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from POM [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Consider Sigstore or other alternatives to local signing (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Consider Sigstore or other alternatives to local signing (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Review Maven ATR plugin and make recommendations (tooling-trusted-releases) via GitHub
• 2026/05/20 [I] Populate project metadata from POM [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Consider moving the PubSub code to ASFQuart (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Consider moving the PubSub code to ASFQuart (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] GPG detection (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Principal Authorization Cache Lacks Purge for Inactive Users (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Sequential Template Substitution Allows Variable Injection in Email Templates (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Sequential Template Substitution Allows Variable Injection in Email Templates (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: Blocking error with jdo-3.3-SNAPSHOT-source-release Sean Palmer
• 2026/05/20 Re: Blocking error with jdo-3.3-SNAPSHOT-source-release Dave Fisher
• 2026/05/20 Re: [I] Allow lightweight checks to skip files per archive (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Allow lightweight checks to skip files per archive (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Principal Authorization Cache Lacks Purge for Inactive Users (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Plugin release [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 [I] When no valid signature is found provide a link to upload the GPG public key (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Use SPF envelope-from, or CC otherwise, unredacted, for vote tabulation (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Use SPF envelope-from, or CC otherwise, unredacted, for vote tabulation (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: Blocking error with jdo-3.3-SNAPSHOT-source-release Craig Russell
• 2026/05/20 Re: [I] Fix the Dependabot alert about uuid in Mermaid (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Fix the Dependabot alert about uuid in Mermaid (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Move project description to the metadata tab and make it editable. (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Project display name vs label (tooling-trusted-releases) via GitHub
• 2026/05/20 [PR] Bump webpack-dev-server from 5.2.3 to 5.2.4 in /website (tooling-gofannon) via GitHub
• 2026/05/20 Re: [I] Plugin release [tooling-atr-maven-plugin] via GitHub
• 2026/05/20 Re: [I] Automated review of dependencies with few maintainers (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Mailing recipient per type (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Use SPF envelope-from, or CC otherwise, unredacted, for vote tabulation (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Expose project label in project list (https://release-test.apache.org/projects) (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Populate project metadata from pom.xml (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Move project description to the metadata tab and make it editable. (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Project display name vs label (tooling-trusted-releases) via GitHub
• 2026/05/20 Re: [I] Allow modification of project display name (tooling-trusted-releases) via GitHub
• 2026/05/19 [I] ASVS scan of mina (tooling-agents) via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset-websocket (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset-core (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset-frontend (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset-extensions-cli (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset/superset-embedded-sdk (tooling-agents) via GitHub
• 2026/05/19 [I] ASVS scan of superset (tooling-agents) via GitHub
• 2026/05/19 Re: [I] Expose project label in project list (https://release-test.apache.org/projects) (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Allow Deletion/Archiving from project details (like https://release-test.apache.org/projects/maven-source-plugin) (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Allow Deletion/Archiving from project details (like https://release-test.apache.org/projects/maven-source-plugin) (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Allow modification of project display name (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Project display name vs label (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Project display name vs label (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Move project description to the metadata tab and make it editable. (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Clarify source of project description (tooling-trusted-releases) via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 [PR] Bump idna from 3.11 to 3.15 (tooling-docs) via GitHub
• 2026/05/19 Re: [I] Clarify "atr.project" parameter in https://github.com/apache/tooling-atr-maven-plugin/blob/main/src/site/markdown/usage.md#basic-upload [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 Re: [I] Plugin release [tooling-atr-maven-plugin] via GitHub
• 2026/05/19 Re: [I] Publish plugin documentation [tooling-atr-maven-plugin] via GitHub

• Earlier messages