dev  

Messages by Thread

• [jira] [Assigned] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Serge Huber (Jira)
• [jira] [Updated] (UNOMI-975) Bind a public context request to the profile named by its own cookie Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-975) Bind a public context request to the profile named by its own cookie Serge Huber (Jira)
• (unomi) branch UNOMI-973-file-endpoint-containment updated (d233a9fbe -> 56664e9f4) jayblanc
• (unomi) branch backport/graphql-websocket-auth-2.7.x deleted (was 42727808a) shuber
• (unomi) branch master updated: UNOMI-979: Judge scheduler lock expiry by the owner's recorded lease, deflake scheduler tests (#855) shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease deleted (was cb25ad27b) shuber
• (unomi) branch UNOMI-973-file-endpoint-containment updated (8da970e73 -> d233a9fbe) jayblanc
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Sample per-process CPU and disk I/O during integration tests shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Skip Javadoc validation in the integration-test CI jobs shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Skip unit tests in the integration-test CI jobs shuber
• [jira] [Updated] (UNOMI-979) Scheduler unit tests fail intermittently on CI Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-979) Scheduler unit tests fail intermittently on CI Serge Huber (Jira)
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Report flaky unit tests and archive reports on CI shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Dump scheduler state and DEBUG trace when a scheduler test fails shuber
• [jira] [Updated] (UNOMI-979) Scheduler unit tests fail intermittently on CI for several independent reasons Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-979) Scheduler unit tests fail intermittently on CI for several independent reasons Serge Huber (Jira)
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Rebase task counters on the store before a terminal transition shuber
• [jira] [Updated] (UNOMI-979) Scheduled tasks can run twice at the same time when cluster nodes disagree on the lock timeout Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-979) Scheduled tasks can run twice at the same time when cluster nodes disagree on the lock timeout Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-979) Scheduled tasks can run twice at the same time when cluster nodes disagree on the lock timeout Serge Huber (Jira)
• [PR] UNOMI-979: Judge scheduler lock expiry by the owner's recorded lease, deflake scheduler tests [unomi] via GitHub
  • Re: [PR] UNOMI-979: Judge scheduler lock expiry by the owner's recorded lease, deflake scheduler tests [unomi] via GitHub
• (unomi) branch UNOMI-979-scheduler-lock-lease created (now 4de1679e3) shuber
  • (unomi) 01/02: UNOMI-979: Judge scheduler lock expiry by the owner's recorded lease shuber
  • (unomi) 02/02: UNOMI-979: Deflake the scheduler test suites shuber
• [jira] [Created] (UNOMI-979) Scheduler lock-lease fix + test deflake Serge Huber (Jira)
• (unomi) branch UNOMI-975-public-profile-cookie-binding deleted (was 7f92f483e) shuber
• (unomi) branch UNOMI-975-public-profile-cookie-binding updated (e3741c6df -> 7f92f483e) shuber
  • (unomi) 02/02: UNOMI-975: Close the anonymous-session hole in the public caller binding shuber
  • (unomi) 01/02: Merge remote-tracking branch 'origin/master' into UNOMI-975-public-profile-cookie-binding shuber
• (unomi) branch UNOMI-974-explicit-admin-password deleted (was c82964c5b) shuber
• (unomi) branch UNOMI-974-explicit-admin-password updated: UNOMI-974: Refuse an empty password on the health check and GraphQL endpoints too shuber
• (unomi) branch UNOMI-974-explicit-admin-password updated (8f0f416e1 -> 4e3092ff6) shuber
  • (unomi) 01/01: UNOMI-974: Require an explicit admin and health-check password at startup shuber
• (unomi) branch UNOMI-978-action-identity-ownership updated (cea3929cd -> c10e68b5c) shuber
• (unomi) branch UNOMI-975-public-profile-cookie-binding updated (9912918a3 -> e3741c6df) shuber
• Unomi Monthly Meeting Minutes August 13th at 09:00 CEST Serge Huber
• (unomi) branch UNOMI-972-followup-groovy-hardening-clean created (now af6ded8bb) shuber
  • (unomi) 01/01: WIP: Groovy action-name validation and save auditing (no ticket yet) shuber
• [PR] UNOMI-978: Gate cross-profile merge and systemProperties writes on a trusted caller [unomi] via GitHub
• [PR] UNOMI-977: Restrict router import/export configuration to system administrators [unomi] via GitHub
• [PR] UNOMI-976: Restrict Groovy action upload to system administrators [unomi] via GitHub
• [PR] UNOMI-975: Bind a public context request to the profile its own cookie names [unomi] via GitHub
  • Re: [PR] UNOMI-975: Bind a public context request to the profile its own cookie names [unomi] via GitHub
• [PR] UNOMI-974: Require an explicit admin and health-check password at startup [unomi] via GitHub
  • Re: [PR] UNOMI-974: Require an explicit admin and health-check password at startup [unomi] via GitHub
• (unomi) branch UNOMI-978-action-identity-ownership updated (d73721adb -> cea3929cd) shuber
• (unomi) branch UNOMI-977-router-config-authz updated (2c917089c -> ad70714c4) shuber
  • (unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators shuber
• (unomi) branch UNOMI-976-groovy-action-authz updated (4fb0faef0 -> 0cfc41702) shuber
  • (unomi) 01/01: UNOMI-976: Restrict Groovy action upload to system administrators shuber
• (unomi) branch UNOMI-975-public-profile-cookie-binding updated (c507fb787 -> 9912918a3) shuber
• (unomi) branch UNOMI-974-explicit-admin-password updated (a7b2488ed -> 8f0f416e1) shuber
  • (unomi) 01/01: UNOMI-974: Require an explicit admin and health-check password at startup shuber
• (unomi) branch UNOMI-978-action-identity-ownership created (now d73721adb) shuber
• (unomi) branch UNOMI-977-router-config-authz created (now 2c917089c) shuber
  • (unomi) 01/01: UNOMI-977: restrict router import/export configuration to system administrators shuber
• (unomi) branch UNOMI-976-groovy-action-authz created (now 4fb0faef0) shuber
  • (unomi) 01/01: UNOMI-976: restrict Groovy action upload to system administrators shuber
• (unomi) branch UNOMI-975-public-profile-cookie-binding created (now c507fb787) shuber
• (unomi) branch UNOMI-974-explicit-admin-password created (now a7b2488ed) shuber
  • (unomi) 01/01: UNOMI-974: require an explicit admin and health-check password at startup shuber
• [jira] [Created] (UNOMI-976) Restrict Groovy action upload to system administrators Serge Huber (Jira)
• [jira] [Created] (UNOMI-978) Gate cross-profile merge and systemProperties writes on a trusted caller Serge Huber (Jira)
• [jira] [Created] (UNOMI-977) Restrict router import/export configuration to system administrators Serge Huber (Jira)
• [jira] [Created] (UNOMI-975) Bind a public context request to the profile named by its own cookie Serge Huber (Jira)
• [jira] [Created] (UNOMI-974) Require an explicit administrator and health-check password at startup Serge Huber (Jira)
• [PR] [UNOMI-973] - Confine recurrent import/export file endpoints to configurable base directories [unomi] via GitHub
  • Re: [PR] [UNOMI-973] - Confine recurrent import/export file endpoints to configurable base directories [unomi] via GitHub
• (unomi) branch UNOMI-973-file-endpoint-containment created (now 8da970e73) jayblanc
  • (unomi) 05/05: UNOMI-973: Add integration tests for file endpoint containment jayblanc
  • (unomi) 03/05: UNOMI-973: Refuse a configuration whose endpoint cannot be honoured when it is saved jayblanc
  • (unomi) 04/05: UNOMI-973: Record on a configuration whether its endpoint can be honoured jayblanc
  • (unomi) 02/05: UNOMI-973: Confine file import/export endpoints to permitted base directories jayblanc
  • (unomi) 01/05: UNOMI-973: Add route-construction tests for file endpoint containment jayblanc
• (unomi) branch dependabot/npm_and_yarn/graphql/graphql-ui/postcss-8.5.23 created (now 59282290c) github-bot
• [PR] Bump postcss from 8.5.16 to 8.5.23 in /graphql/graphql-ui [unomi] via GitHub
• (unomi) branch dependabot/npm_and_yarn/graphql/graphql-ui/postcss-8.5.18 deleted (was fd3e2e62b) github-bot
• [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
  • [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
  • [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
  • [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
  • [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
  • [jira] [Updated] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Serge Huber (Jira)
• [jira] [Created] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Jerome Blanchard (Jira)
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated: UNOMI-972: correct two factual errors in the docs and harden the log sanitizer against a bad limit shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (fae021f6d -> 532d855d5) shuber
  • (unomi) 04/08: UNOMI-972: restrict router import/export configuration to system administrators shuber
  • (unomi) 06/08: UNOMI-972: rewrite the login sample to demonstrate the trusted server-side pattern shuber
  • (unomi) 01/08: UNOMI-972: require an explicit admin and health-check password at startup shuber
  • (unomi) 05/08: UNOMI-972: gate cross-profile merge and systemProperties writes on a trusted caller shuber
  • (unomi) 07/08: UNOMI-972: prove the hardening end to end, and pin what it must not break shuber
  • (unomi) 02/08: UNOMI-972: bind public context callers to the profile cookie only shuber
  • (unomi) 03/08: UNOMI-972: restrict Groovy action upload to system administrators shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated: UNOMI-972: close the systemProperties gate on the bare key, not just the prefix shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated: UNOMI-972: cover the context/eventcollector behaviour the hardening could have broken shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated: UNOMI-972: stop Groovy uploads executing at compile time, and keep untrusted input out of the logs shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated: UNOMI-972: fix stale public-caller docs and cover the V2-compat blank-password guard shuber
• [PR] Bump org.jsoup:jsoup from 1.15.3 to 1.23.1 in /samples/groovy-actions [unomi] via GitHub
• (unomi) branch dependabot/maven/samples/groovy-actions/org.jsoup-jsoup-1.23.1 created (now c9425bd36) github-bot
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (cacdaadbc -> 8e2beeb69) shuber
• (unomi) branch fix/graphql-websocket-auth updated (0528bf891 -> 53f06dcca) shuber
• (unomi) branch fix/graphql-websocket-auth updated (9755b179d -> 0528bf891) shuber
• (unomi) branch fix/graphql-websocket-auth updated (f3e82ea90 -> 9755b179d) shuber
• (unomi) branch fix/graphql-websocket-auth updated (e4375692e -> f3e82ea90) shuber
• (unomi) branch fix/graphql-websocket-auth updated (70d3bf206 -> e4375692e) shuber
• (unomi) branch fix/graphql-websocket-auth updated (d6193f4d7 -> 70d3bf206) shuber
• (unomi) branch fix/graphql-websocket-auth updated (7883f98b8 -> d6193f4d7) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (08b1fe638 -> cacdaadbc) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (b01ce305c -> 08b1fe638) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (a383817bb -> b01ce305c) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (b8d426958 -> a383817bb) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (2144d3429 -> b8d426958) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (e85fd2976 -> 2144d3429) shuber
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest updated (bb2bffe92 -> e85fd2976) shuber
• (unomi) branch hardening/credentials-profile-binding-privileged-rest deleted (was bb2bffe92) shuber
• [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials, public profile binding, and privileged REST endpoints [unomi] via GitHub
• (unomi) branch UNOMI-972-credentials-profile-binding-privileged-rest created (now bb2bffe92) shuber
• [jira] [Created] (UNOMI-972) Harden default credentials, public profile binding, and privileged REST endpoints Serge Huber (Jira)
• (unomi) branch backport/graphql-websocket-auth-2.7.x created (now 42727808a) shuber
  • (unomi) 01/01: Require authentication for GraphQL WebSocket upgrade shuber
• (unomi) branch backport/graphql-websocket-auth-3.0.x created (now b9f6d6f0f) shuber
  • (unomi) 01/01: Require authentication for GraphQL WebSocket upgrade shuber
• [PR] Require authentication for GraphQL WebSocket upgrade [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (master) [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (master) [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (master) [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (master) [unomi] via GitHub
  • [PR] Require authentication for GraphQL WebSocket upgrade [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (unomi-2.7.x) [unomi] via GitHub
  • Re: [PR] Require authentication for GraphQL WebSocket upgrade (unomi-2.7.x) [unomi] via GitHub
  • [PR] Require authentication for GraphQL WebSocket upgrade [unomi] via GitHub
• [PR] Hardening: require explicit passwords and tighten public profile binding [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials… (superseded — wrong branch name) [unomi] via GitHub
  • Re: [PR] UNOMI-972: Harden default credentials… (superseded — wrong branch name) [unomi] via GitHub
• (unomi) branch hardening/credentials-profile-binding-privileged-rest updated (7883f98b8 -> bb2bffe92) shuber
• (unomi) branch fix/graphql-websocket-auth created (now 7883f98b8) shuber
• (unomi) branch hardening/credentials-profile-binding-privileged-rest created (now 7883f98b8) shuber
• (unomi) branch dependabot/npm_and_yarn/graphql/graphql-ui/postcss-8.5.18 created (now fd3e2e62b) github-bot
• [PR] Bump postcss from 8.5.16 to 8.5.18 in /graphql/graphql-ui [unomi] via GitHub
  • Re: [PR] Bump postcss from 8.5.16 to 8.5.18 in /graphql/graphql-ui [unomi] via GitHub
  • Re: [PR] Bump postcss from 8.5.16 to 8.5.18 in /graphql/graphql-ui [unomi] via GitHub
• (unomi) branch dependabot/maven/com.github.seancfoley-ipaddress-5.6.2 updated (f9a1ed6e8 -> e86c2b7f6) github-bot
• (unomi) branch UNOMI-971-remove-obsolete-maven-repos deleted (was b54572fc7) shuber
• (unomi) branch master updated: UNOMI-971: Remove obsolete Maven repositories that stall CI (#840) shuber
• (unomi) branch UNOMI-971-remove-obsolete-maven-repos updated (b6d7bdb59 -> b54572fc7) shuber
• [PR] UNOMI-971: Remove obsolete Maven repositories that stall CI [unomi] via GitHub
  • Re: [PR] UNOMI-971: Remove obsolete Maven repositories that stall CI [unomi] via GitHub
• (unomi) branch UNOMI-971-remove-obsolete-maven-repos created (now b6d7bdb59) shuber
  • (unomi) 01/01: UNOMI-971: Remove obsolete Maven repositories that stall CI shuber
• [jira] [Created] (UNOMI-971) Obsolete Maven repositories slow and flake CI builds Serge Huber (Jira)
• (unomi) branch dependabot/maven/com.github.seancfoley-ipaddress-5.6.2 created (now f9a1ed6e8) github-bot
• [PR] Bump com.github.seancfoley:ipaddress from 4.3.0 to 5.6.2 [unomi] via GitHub
  • Re: [PR] Bump com.github.seancfoley:ipaddress from 4.3.0 to 5.6.2 [unomi] via GitHub
• (unomi) branch dependabot/maven/comet-java-client.version-8.0.12 created (now 3c76e3e1c) github-bot
• [PR] Bump comet-java-client.version from 5.0.13 to 8.0.12 [unomi] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-scm-publish-plugin from 3.2.1 to 3.3.0 [unomi] via GitHub
• (unomi) branch dependabot/maven/org.apache.maven.plugins-maven-scm-publish-plugin-3.3.0 created (now 012eb6fdb) github-bot
• (unomi) branch dependabot/maven/io.github.graphql-java-graphql-java-annotations-21.5 created (now 6f2dafbdf) github-bot
• [PR] Bump io.github.graphql-java:graphql-java-annotations from 8.0 to 21.5 [unomi] via GitHub
• [PR] Bump cxf.version from 3.6.8 to 4.2.2 [unomi] via GitHub
• (unomi) branch dependabot/maven/cxf.version-4.2.2 created (now 4758826bd) github-bot
• (unomi) branch master updated: UNOMI-970: Fix IT ProgressListener ETA using live suite pace (#834) shuber
• [PR] UNOMI-970: Fix IT ProgressListener ETA using live suite pace [unomi] via GitHub
  • Re: [PR] UNOMI-970: Fix IT ProgressListener ETA using live suite pace [unomi] via GitHub
• [jira] [Created] (UNOMI-970) IT ProgressListener ETA: use live suite pace with historical hints Serge Huber (Jira)
• (unomi) branch dependabot/npm_and_yarn/extensions/web-tracker/wab/brace-expansion-1.1.16 deleted (was ffe85605d) github-bot
• (unomi) branch dependabot/maven/log4j.version-2.26.1 deleted (was d861416e7) github-bot
• Re: [PR] Bump log4j.version from 2.24.0 to 2.26.1 [unomi] via GitHub
  • Re: [PR] Bump log4j.version from 2.24.0 to 2.26.1 [unomi] via GitHub
  • Re: [PR] Bump log4j.version from 2.24.0 to 2.26.1 [unomi] via GitHub
• (unomi) branch dependabot/maven/org.codehaus.mojo-buildnumber-maven-plugin-3.3.0 deleted (was 0ba90e634) github-bot
• (unomi) branch dependabot/maven/com.opencsv-opencsv-5.12.0 deleted (was 038bf9abc) github-bot
• Re: [PR] Bump com.opencsv:opencsv from 3.10 to 5.12.0 [unomi] via GitHub
  • Re: [PR] Bump com.opencsv:opencsv from 3.10 to 5.12.0 [unomi] via GitHub
  • Re: [PR] Bump com.opencsv:opencsv from 3.10 to 5.12.0 [unomi] via GitHub
• (unomi) branch dependabot/maven/comet-java-client.version-9.0.1 deleted (was b3cd00eeb) github-bot
• Re: [PR] Bump comet-java-client.version from 5.0.13 to 9.0.1 [unomi] via GitHub
  • Re: [PR] Bump comet-java-client.version from 5.0.13 to 9.0.1 [unomi] via GitHub
  • Re: [PR] Bump comet-java-client.version from 5.0.13 to 9.0.1 [unomi] via GitHub
• (unomi) branch dependabot/maven/org.awaitility-awaitility-4.3.0 deleted (was f66cbf71b) github-bot
• (unomi) branch master updated: UNOMI-968: Pluggable persistence IT harness for ES, OS, and other backends (#833) shuber
• (unomi) branch UNOMI-968-pluggable-persistence-itests deleted (was 153b187c1) shuber
• (unomi) branch UNOMI-968-pluggable-persistence-itests updated (308deb126 -> 153b187c1) shuber
• (unomi) branch UNOMI-968-pluggable-persistence-itests updated (fcc8d2ef6 -> 308deb126) shuber
• [PR] UNOMI-968: Pluggable persistence IT harness for ES, OS, and other backends [unomi] via GitHub
  • Re: [PR] UNOMI-968: Pluggable persistence IT harness for ES, OS, and other backends [unomi] via GitHub
• (unomi) branch UNOMI-968-pluggable-persistence-itests created (now fcc8d2ef6) shuber
  • (unomi) 01/01: UNOMI-968: Pluggable persistence IT harness for ES, OS, and other backends shuber
• (unomi) branch dependabot/npm_and_yarn/extensions/web-tracker/wab/brace-expansion-1.1.16 created (now ffe85605d) github-bot
• [PR] Bump brace-expansion from 1.1.11 to 1.1.16 in /extensions/web-tracker/wab [unomi] via GitHub
  • Re: [PR] Bump brace-expansion from 1.1.11 to 1.1.16 in /extensions/web-tracker/wab [unomi] via GitHub
  • Re: [PR] Bump brace-expansion from 1.1.11 to 1.1.16 in /extensions/web-tracker/wab [unomi] via GitHub
  • Re: [PR] Bump brace-expansion from 1.1.11 to 1.1.16 in /extensions/web-tracker/wab [unomi] via GitHub

• Earlier messages