commits  

Messages by Date

• 2026/01/23 (tooling-trusted-releases) branch main updated: Use the LDAP admins cache when checking whether the user is an admin sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Cache admins from LDAP using a server task sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Add a cache module with admin functions, and tests sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Fix a couple of small documentation issues sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Fixes #555 sbp
• 2026/01/23 (tooling-trusted-releases) branch security-docs-555 deleted (was 183517d) sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Only change perms if necessary sbp
• 2026/01/23 (tooling-trusted-releases) 01/01: Add an LDAP search that discovers admin users sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated (8d7a9d7 -> 809056b) sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: Add an LDAP search that discovers admin users sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: docs: document generated source file detection and exclusions (Fixes #477) sbp
• 2026/01/23 (tooling-trusted-releases) branch main updated: #535 - Add rate limiting on PAT and JWT endpoints arm
• 2026/01/23 (tooling-trusted-releases) branch main updated: Don't set up rate limits in testing arm
• 2026/01/23 (tooling-trusted-releases) branch main updated: #535 - Add specific rate limits to security-focused endpoints. Make sure user ID is logged in more cases (including 429s) arm
• 2026/01/23 (tooling-trusted-releases) branch main updated: #535 - Only proxyfix in non-local arm
• 2026/01/23 (tooling-trusted-releases) branch main updated: Log useragents arm
• 2026/01/23 (tooling-trusted-releases) branch main updated (b63b2e6 -> 2469e10) arm
• 2026/01/23 (tooling-trusted-releases) 01/01: #535 - Add global and API rate limits and proxyfix middleware. arm
• 2026/01/23 (tooling-trusted-releases) branch rate_limiting created (now 2469e10) arm
• 2026/01/23 (tooling-trusted-releases) branch main updated (77bb20b -> b63b2e6) arm
• 2026/01/22 (tooling-trusted-releases) branch main updated (61a012c -> 77bb20b) sbp
• 2026/01/22 (tooling-trusted-releases) 02/02: Update new code akm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Document how to contribute documentation sbp
• 2026/01/22 (tooling-trusted-releases) branch main updated: Remove the outdated implementation plan sbp
• 2026/01/22 (tooling-trusted-releases) branch security-docs-555 updated (a780a74 -> 183517d) akm
• 2026/01/22 (tooling-trusted-releases) 01/02: Update storage interface error messages akm
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages-redux deleted (was 16191b5) sbp
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages-redux created (now 16191b5) akm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Fixes #486 sbp
• 2026/01/22 (tooling-trusted-releases) branch improve-documentation-486 deleted (was 3d6ff6b) sbp
• 2026/01/22 (tooling-trusted-releases) branch improve-documentation-486 updated (559986e -> 3d6ff6b) akm
• 2026/01/22 (tooling-actions) branch main updated: Use the new tagging feature to download only maven files via rsync arm
• 2026/01/22 (tooling-trusted-releases) branch main updated (98d99a5 -> 3299763) arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging deleted (was 3dce55d) arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (d3fba2b -> 3dce55d) arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (14de809 -> d3fba2b) arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (fca23a4 -> 14de809) arm
• 2026/01/22 (tooling-releases-client) branch dependabot/github_actions/actions/upload-artifact-6.0.0 created (now e7d291d) github-bot
• 2026/01/22 (tooling-releases-client) branch dependabot/github_actions/astral-sh/setup-uv-7.2.0 created (now 4c3b0d8) github-bot
• 2026/01/22 (tooling-releases-client) branch dependabot/github_actions/actions/checkout-6.0.2 created (now 718ea35) github-bot
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (95ed430 -> fca23a4) arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (9517a6e -> 95ed430) arm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Configure session cookie security attributes (#574) wave
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (d1e357f -> 9517a6e) arm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Show tracebacks in development environments sbp
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages updated (81381de -> b097679) wave
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages updated (b097679 -> 972ed31) wave
• 2026/01/22 (tooling-trusted-releases) branch session-cookie-security deleted (was 67a19c5) wave
• 2026/01/22 (tooling-trusted-releases) branch main updated: Restore the ASFQuart default setting for SameSite sbp
• 2026/01/22 (tooling-trusted-releases) branch main updated (1f62359 -> c7a5d9d) arm
• 2026/01/22 (tooling-trusted-releases) branch no-traceback-on-error-html deleted (was 2a722f8) wave
• 2026/01/22 (tooling-trusted-releases) branch main updated: No traceback on error html page (#578) wave
• 2026/01/22 (tooling-trusted-releases) branch no-traceback-on-error-html updated (622fe3b -> 2a722f8) wave
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages updated (c412118 -> 81381de) wave
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (65cc07f -> d1e357f) arm
• 2026/01/22 (tooling-trusted-releases) branch storage-interface-error-messages updated (4cb9b74 -> c412118) wave
• 2026/01/22 (tooling-trusted-releases) branch main updated (8818629 -> c7fac9f) arm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Send email through the storage interface and add audit logging sbp
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated: #475 - Remove endpoint as not needed for distribution any more arm
• 2026/01/22 (tooling-trusted-releases) 01/03: #475 - add tagging field to release policy arm
• 2026/01/22 (tooling-trusted-releases) 02/03: #475 - Add endpoint to get tagging spec for a release arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (1b36fbd -> 35b3d99) arm
• 2026/01/22 (tooling-trusted-releases) 03/03: #476 - allow rsync to specify a tag as part of the URL arm
• 2026/01/22 (tooling-trusted-releases) branch main updated: Add some e2e token tests sbp
• 2026/01/22 (tooling-trusted-releases) branch main updated: Notify users on authentication credentials change sbp
• 2026/01/22 (tooling-trusted-releases) branch notify-users-on-pat deleted (was 419a162) sbp
• 2026/01/22 (tooling-trusted-releases) branch main updated: #549 and #471 - implement structured logging when running not in debug mode arm
• 2026/01/22 (tooling-trusted-releases) 01/02: #475 - add tagging field to release policy arm
• 2026/01/22 (tooling-trusted-releases) 02/02: #475 - Add endpoint to get tagging spec for a release arm
• 2026/01/22 (tooling-trusted-releases) branch atr_tagging updated (03dcb51 -> 1b36fbd) arm
• 2026/01/21 (tooling-trusted-releases) branch no-traceback-on-error-html created (now 622fe3b) wave
• 2026/01/21 (tooling-trusted-releases) 01/01: No traceback on error html page wave
• 2026/01/21 (tooling-trusted-releases) branch notify-users-on-pat updated (3d9fb43 -> 419a162) wave
• 2026/01/21 (tooling-trusted-releases) 01/01: Fixes #486 akm
• 2026/01/21 (tooling-trusted-releases) branch improve-documentation-486 created (now 559986e) akm
• 2026/01/21 (tooling-trusted-releases) 01/01: Update storage interface error messages wave
• 2026/01/21 (tooling-trusted-releases) branch storage-interface-error-messages created (now 4cb9b74) wave
• 2026/01/21 (tooling-trusted-releases) 01/01: Fixes #555 akm
• 2026/01/21 (tooling-trusted-releases) branch security-docs-555 created (now a780a74) akm
• 2026/01/21 (tooling-trusted-releases) 01/01: Configure session cookie security attributes wave
• 2026/01/21 (tooling-trusted-releases) branch session-cookie-security created (now 67a19c5) wave
• 2026/01/21 (tooling-trusted-releases) 01/01: Notify users on authentication credentials change wave
• 2026/01/21 (tooling-trusted-releases) branch notify-users-on-pat created (now 3d9fb43) wave
• 2026/01/21 (tooling-trusted-releases) branch main updated: Add too large a payload handler (#572) wave
• 2026/01/21 (tooling-trusted-releases) branch 413-errors deleted (was 0197394) wave
• 2026/01/21 (tooling-trusted-releases) branch main updated (3af4e0e -> bd4462e) sbp
• 2026/01/21 (tooling-trusted-releases) branch main updated (9ff6af3 -> 3af4e0e) sbp
• 2026/01/21 (tooling-trusted-releases) branch 413-errors updated: Do not produce extra stacktraces wave
• 2026/01/21 (tooling-trusted-releases) branch main updated: Use sentence case in headings sbp
• 2026/01/21 (tooling-trusted-releases) branch 413-errors updated: Correct message wave
• 2026/01/21 (tooling-trusted-releases) 01/01: Too large a payload handler wave
• 2026/01/21 (tooling-trusted-releases) branch 413-errors created (now 48f279b) wave
• 2026/01/21 (tooling-trusted-releases) branch main updated: Fix unparenthesized subexpressions sbp
• 2026/01/21 (tooling-trusted-releases) branch main updated: Run pre-commit hooks on pushes to the primary development branches sbp
• 2026/01/21 (tooling-trusted-releases) branch main updated: Downgrade Biome to allow lints to run in CI sbp
• 2026/01/21 (tooling-trusted-releases) branch main updated: Fix Markdown issues detected by linting sbp
• 2026/01/21 (tooling-trusted-releases) branch table-formatting-fix deleted (was 168c15e) sbp
• 2026/01/21 (tooling-trusted-releases) branch main updated: Removing tables, linted sbp
• 2026/01/21 (tooling-trusted-releases) branch table-formatting-fix created (now 168c15e) akm
• 2026/01/21 (tooling-trusted-releases) 01/01: Removing tables, linted akm
• 2026/01/21 (tooling-trusted-releases) branch main updated: Make the use of configuration more efficient in the server module sbp
• 2026/01/21 (tooling-trusted-releases) branch atr_tagging updated: #475 - Add endpoint to get tagging spec for a release arm
• 2026/01/21 (tooling-trusted-releases) branch atr_tagging created (now 999e4e2) arm
• 2026/01/21 (tooling-trusted-releases) 01/01: #475 - add tagging field to release policy arm
• 2026/01/21 (tooling-actions) branch main updated: Rename njord store to make it more obvious deployment came from ATR arm
• 2026/01/21 (tooling-actions) branch main updated: Wait before recording the distribution to give time to propagate arm
• 2026/01/21 (tooling-actions) 01/01: Pull correct secrets into env and fix staging arg arm
• 2026/01/21 (tooling-actions) branch main updated (0fafd8e -> 0cce9f3) arm
• 2026/01/21 (tooling-actions) branch main updated: Pull correct secrets into env arm
• 2026/01/21 (tooling-actions) branch main updated: Try to update URL in pom? arm
• 2026/01/21 (tooling-actions) branch main updated: Rename run for stg arm
• 2026/01/21 (tooling-trusted-releases) branch main updated (9af8b4c -> 44cdc6b) arm
• 2026/01/21 (tooling-trusted-releases) 01/01: #556 - narrow exception handling and fail on specific errors arm
• 2026/01/21 (tooling-trusted-releases) branch main updated: #556 - narrow exception handling and fail on specific errors arm
• 2026/01/21 (tooling-actions) branch main updated (1a0b9de -> 64485ed) arm
• 2026/01/21 (tooling-actions) 01/01: Enable automatic publishing arm
• 2026/01/21 (tooling-actions) branch main updated: Enable automatic publishing arm
• 2026/01/20 (tooling-trusted-releases) branch hsts-header deleted (was d97220a) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add HSTS response header (#566) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated (587307b -> 5b98a81) wave
• 2026/01/20 (tooling-trusted-releases) branch hsts-header created (now d97220a) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Add HSTS response header wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Remove PMC table and submission instructions wave
• 2026/01/20 (tooling-trusted-releases) branch test-pr-template deleted (was 3cfb3ac) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Test PR template wave
• 2026/01/20 (tooling-trusted-releases) branch test-pr-template created (now 3cfb3ac) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Create pull request template for contributions wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Update docs #557 (#565) wave
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 deleted (was 698f699) wave
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 updated: Fixes #557 akm
• 2026/01/20 (tooling-trusted-releases) branch clarify-instructions-557 created (now 175660d) akm
• 2026/01/20 (tooling-trusted-releases) branch thread-count deleted (was 8f58cef) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Thread count sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Fix SSH host key permissions if necessary after creation sbp
• 2026/01/20 (tooling-actions) branch main updated: Update script for staging artifacts, set up Central deploy arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Thread count wave
• 2026/01/20 (tooling-trusted-releases) branch thread-count created (now 8f58cef) wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Prevent enumeration sbp
• 2026/01/20 (tooling-trusted-releases) branch prevent-enumeration deleted (was 198e6b7) sbp
• 2026/01/20 (tooling-trusted-releases) branch prevent-enumeration created (now 198e6b7) wave
• 2026/01/20 (tooling-trusted-releases) 01/01: Prevent enumeration wave
• 2026/01/20 (tooling-trusted-releases) branch main updated: Disallow writing to release files after staging sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a function to change file permissions recursively sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Ensure that the permissions of secret files are correct sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a warning about the risks of using mkcert (from @sebbASF) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Add a lint to check imports in the models sbp
• 2026/01/20 (tooling-trusted-releases) branch copy-sbom-models deleted (was 323c53d) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Copy SBOM models to remove interdependencies sbp
• 2026/01/20 (tooling-trusted-releases) 01/01: Copy SBOM models to remove interdependencies sbp
• 2026/01/20 (tooling-trusted-releases) branch copy-sbom-models created (now 323c53d) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Require subject template hashes only from forms and not from the API sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated (3287b50 -> 6e564c9) sbp
• 2026/01/20 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.2.0 deleted (was 0750b74) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated (72c31ca -> 3287b50) sbp
• 2026/01/20 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.0 deleted (was a51b5d2) sbp
• 2026/01/20 (tooling-trusted-releases) branch main updated: Split failed and in-progress task results, format error message better arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts deleted (was d39011a) arm
• 2026/01/20 (tooling-trusted-releases) branch main updated: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts updated (35cb9c9 -> d39011a) arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) 01/01: Make Maven check use the CDN URLs instead of the search.maven api arm
• 2026/01/20 (tooling-trusted-releases) branch maven_check_artifacts updated (6bfe896 -> 35cb9c9) arm
• 2026/01/19 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.2.0 created (now 0750b74) github-bot
• 2026/01/19 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.0 created (now a51b5d2) github-bot
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a temporary state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a subversion state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a generated secrets state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Create local certificates automatically if they do not exist sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (691b986 -> 4388deb) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (3096084 -> 691b986) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated (f38dac1 -> 3096084) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a curated secrets state subdirectory sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix an error in the e2e tests documentation sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Do not attempt to manage Hypercorn logs from the ATR server sbp
• 2026/01/19 (tooling-trusted-releases) 01/01: Make Maven check use the web URLs instead of the search.maven api arm
• 2026/01/19 (tooling-trusted-releases) branch maven_check_artifacts created (now 6bfe896) arm
• 2026/01/19 (tooling-trusted-releases) branch main updated: Render pending and failed distribution tasks for non-finish releases arm
• 2026/01/19 (tooling-actions) 01/01: Make sure validation error causes a failure arm
• 2026/01/19 (tooling-actions) branch main updated (6f73530 -> a8e63ef) arm
• 2026/01/19 (tooling-actions) branch main updated: Make sure validation error causes a failure arm
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix some problems with looking up secret configuration values sbp
• 2026/01/19 (tooling-actions) branch main updated: Handle validation errors in failure step arm
• 2026/01/19 (tooling-trusted-releases) branch main updated (0cc6d63 -> bfde376) sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Fix some problems with looking up secret configuration values sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add the runtime state directory to the list of directories to create sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Document how to debug e2e test failures sbp
• 2026/01/19 (tooling-trusted-releases) branch main updated: Add a migration to use a logs state directory sbp
• 2026/01/19 (tooling-releases-client) branch main updated: Revise README for clarifying TUI sbp
• 2026/01/19 (tooling-actions) branch main updated: Update njord plugin arm
• 2026/01/19 (tooling-actions) 01/01: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) branch main updated (e89f471 -> 3b2b16e) arm
• 2026/01/19 (tooling-actions) 01/01: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) branch main updated (3e8cf6d -> e89f471) arm
• 2026/01/19 (tooling-actions) branch main updated: Record status properly in ATR arm
• 2026/01/19 (tooling-actions) 01/01: Set tag in POM arm
• 2026/01/19 (tooling-actions) branch main updated (afcf3e4 -> 2aff89d) arm
• 2026/01/19 (tooling-actions) branch main updated: Set tag in POM arm
• 2026/01/19 (tooling-actions) branch main updated: Move options to pom arm
• 2026/01/19 (tooling-actions) branch main updated: Try setting all the settings the hard way arm
• 2026/01/19 (tooling-actions) branch main updated: Try adding CLI options to validate arm

• Earlier messages
• Later messages