commits  

Messages by Date

• 2026/03/19 (tooling-trusted-releases) branch arm updated (b451f601 -> 6cfd6132) arm
• 2026/03/19 (tooling-trusted-releases) 01/01: Move most of the admin routes over to "typed" decorators for param validation. Add test to make sure future decorator changes don't break routing. Simplify param checking. arm
• 2026/03/19 (tooling-trusted-releases) branch arm updated: Move most of the admin routes over to "typed" decorators for param validation. Add test to make sure future decorator changes don't break routing. Simplify param checking. arm
• 2026/03/19 (tooling-trusted-releases) branch update-email-alert-messages deleted (was 1a4cfdd7) sbp
• 2026/03/19 (tooling-trusted-releases) branch main updated: Make token change emails more clear sbp
• 2026/03/19 (tooling-trusted-releases) branch oauth-asvs-docs-681 deleted (was 9f84d0c4) sbp
• 2026/03/19 (tooling-trusted-releases) branch main updated: Adding OAuth docs; fixes #681 sbp
• 2026/03/19 (tooling-trusted-releases) branch form_validation_cache updated (f06eceab -> db847ae8) arm
• 2026/03/19 (tooling-trusted-releases) branch github_tp_validation updated (d12cb683 -> 1fcbd97f) arm
• 2026/03/19 (tooling-trusted-releases) branch arm updated (8ff670ac -> f3f49065) arm
• 2026/03/18 (tooling-trusted-releases) branch main updated (8ff670ac -> f3f49065) sbp
• 2026/03/18 (tooling-trusted-releases) branch sbp updated (5c63b351 -> f3f49065) sbp
• 2026/03/18 (tooling-trusted-releases) 01/01: Classify files by counting classification markers sbp
• 2026/03/18 (tooling-trusted-releases) branch oauth-asvs-docs-681 created (now 9f84d0c4) akm
• 2026/03/18 (tooling-trusted-releases) 01/01: Adding OAuth docs; fixes #681 akm
• 2026/03/18 (tooling-trusted-releases) branch arm updated (2f5e1b16 -> 8ff670ac) arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (98ccca02 -> d12cb683) arm
• 2026/03/18 (tooling-trusted-releases) branch main updated (2f5e1b16 -> 8ff670ac) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database deleted (was 8ff670ac) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database updated (d89304e6 -> 8ff670ac) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database updated (097baf40 -> d89304e6) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database updated (b4c0dbd8 -> 097baf40) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database updated (98a60623 -> b4c0dbd8) arm
• 2026/03/18 (tooling-trusted-releases) branch form_validation_cache updated (be0c7a0a -> f06eceab) arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (9d5f320a -> 98ccca02) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database updated (905e9234 -> 98a60623) arm
• 2026/03/18 (tooling-trusted-releases) branch arm updated (a912cec2 -> 2f5e1b16) arm
• 2026/03/18 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.3.1 deleted (was 8b88fd49) sbp
• 2026/03/18 (tooling-trusted-releases) branch main updated: Bump astral-sh/setup-uv from 7.3.0 to 7.3.1 sbp
• 2026/03/18 (tooling-trusted-releases) branch main updated (554490a0 -> 5c63b351) sbp
• 2026/03/18 (tooling-trusted-releases) branch main updated (a912cec2 -> 554490a0) sbp
• 2026/03/18 (tooling-trusted-releases) branch sbp updated: Fix typos in the third party license files sbp
• 2026/03/18 (tooling-trusted-releases) branch sbp updated: Search for license and notice files recursively in binary archives sbp
• 2026/03/18 (tooling-trusted-releases) branch rate_limiting deleted (was 2469e105) arm
• 2026/03/18 (tooling-trusted-releases) branch ssh_security_config deleted (was 1c982ca8) arm
• 2026/03/18 (tooling-trusted-releases) branch pending_dist_changes deleted (was 8ed69eb5) arm
• 2026/03/18 (tooling-trusted-releases) branch file_type_detection deleted (was 61f166f0) arm
• 2026/03/18 (tooling-trusted-releases) branch safe_committee_type deleted (was a1d8b129) arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (7838cfcc -> 9d5f320a) arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (fe52b96b -> 7838cfcc) arm
• 2026/03/18 (tooling-trusted-releases) 01/01: #892 - record check version in database (and fix a couple of type issues in tests) arm
• 2026/03/18 (tooling-trusted-releases) branch check_version_database created (now 905e9234) arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (7838cfcc -> fe52b96b) arm
• 2026/03/18 (tooling-trusted-releases) 01/01: #676 Validate exp and nbp when loading pydantic model for Github token. Attestable class updated to store and load model instead of dict. arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation updated (1c4f70a1 -> 7838cfcc) arm
• 2026/03/18 (tooling-trusted-releases) 01/01: #676 Validate exp and nbp when loading pydantic model for Github token. Attestable class updated to store and load model instead of dict. arm
• 2026/03/18 (tooling-trusted-releases) branch github_tp_validation created (now 1c4f70a1) arm
• 2026/03/18 (tooling-trusted-releases) branch form_validation_cache updated (c9838b2c -> be0c7a0a) arm
• 2026/03/18 (tooling-trusted-releases) branch form_validation_cache updated (61b7a88c -> c9838b2c) arm
• 2026/03/18 (tooling-trusted-releases) branch arm updated (3a99ce3b -> a912cec2) arm
• 2026/03/17 (tooling-trusted-releases) branch main updated (87b6591a -> a912cec2) sbp
• 2026/03/17 (tooling-trusted-releases) branch main updated (472d371e -> 87b6591a) sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated: Remove the code to write the unused attestable path files sbp
• 2026/03/17 (tooling-trusted-releases) branch main updated (3a99ce3b -> 472d371e) sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated: Get classifications either from the database or by recomputing sbp
• 2026/03/17 (tooling-trusted-releases) 01/01: Read hashes either from the database or by recomputing from disk sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated (45f2bfd0 -> 472d371e) sbp
• 2026/03/17 (tooling-trusted-releases) branch main updated (45f2bfd0 -> 3a99ce3b) arm
• 2026/03/17 (tooling-trusted-releases) branch arm updated: Renaming "_name" to "_key" throughout the codebase and database arm
• 2026/03/17 (tooling-trusted-releases) branch arm updated (3e2c570e -> 719c6fd1) arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (ec2a2eda -> 3e2c570e) arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key deleted (was 3e2c570e) arm
• 2026/03/17 (tooling-trusted-releases) branch arm updated (ece11fd3 -> 3e2c570e) arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (26eceed2 -> ec2a2eda) arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (77a4d274 -> 26eceed2) arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (cba6ee86 -> 77a4d274) arm
• 2026/03/17 (tooling-trusted-releases) branch main updated (caf1fc3e -> 45f2bfd0) sbp
• 2026/03/17 (tooling-trusted-releases) branch main updated (1ad84443 -> caf1fc3e) sbp
• 2026/03/17 (tooling-trusted-releases) branch main updated (ece11fd3 -> 1ad84443) sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated: Add tests for file metadata, including testing an alternative design sbp
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (0fa61735 -> cba6ee86) arm
• 2026/03/17 (tooling-trusted-releases) 02/02: Record file metadata change events in the database sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated (16853ca7 -> caf1fc3e) sbp
• 2026/03/17 (tooling-trusted-releases) 01/02: Ensure that relevant SQLite pragmas are set per connection sbp
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (8f4ec09b -> 0fa61735) arm
• 2026/03/17 (tooling-trusted-releases) branch main updated (a62f505c -> ece11fd3) arm
• 2026/03/17 (tooling-trusted-releases) 01/01: Ensure that relevant SQLite pragmas are set per connection sbp
• 2026/03/17 (tooling-trusted-releases) branch sbp updated (92011dd5 -> 16853ca7) sbp
• 2026/03/17 (tooling-trusted-releases) branch arm updated (2c8e4716 -> ece11fd3) arm
• 2026/03/17 (tooling-trusted-releases) 02/02: #840: rename types to *Key arm
• 2026/03/17 (tooling-trusted-releases) 01/02: #840: safe committee name type - without validation arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated (a80c948c -> 76ff8416) arm
• 2026/03/17 (tooling-trusted-releases) 01/01: SQL migration arm
• 2026/03/17 (tooling-trusted-releases) branch name_to_key updated: SQL migration arm
• 2026/03/16 (tooling-trusted-releases) branch logout-is-now-a-post deleted (was 21f83b6e) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated: Logout is a POST (#876) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (838e9a65 -> 92011dd5) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (d61a7a4b -> 838e9a65) sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Add simple unit tests for release file states sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Add a table for release file states to the database sbp
• 2026/03/16 (tooling-trusted-releases) branch name_to_key created (now e8adf482) arm
• 2026/03/16 (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-config-standard-40.0.0 deleted (was 200b2479) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-17.4.0 deleted (was 98a7f75e) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 deleted (was 47ac3d6f) github-bot
• 2026/03/16 (tooling-trusted-releases) branch main updated (d3c91a45 -> d61a7a4b) sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Update aiosqlite sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (89872ad8 -> d3c91a45) sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Comment out Dependabot pre-commit checks until cooldowns are supported sbp
• 2026/03/16 (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 updated (f63c17cb -> 47ac3d6f) github-bot
• 2026/03/16 (tooling-trusted-releases) branch main updated (fa2ec300 -> 89872ad8) sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated (bd33b7f1 -> 89872ad8) sbp
• 2026/03/16 (tooling-trusted-releases) 01/01: Update dependencies sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (7dda4775 -> fa2ec300) sbp
• 2026/03/16 (tooling-trusted-releases) 01/01: Add file classifications to attestable data sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (8ea85a9c -> 7dda4775) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (7d3aad2b -> 8ea85a9c) sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
• 2026/03/16 (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 created (now f63c17cb) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/uv/pydantic-core-2.42.0 created (now 381cdc14) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-17.4.0 created (now 98a7f75e) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-config-standard-40.0.0 created (now 200b2479) github-bot
• 2026/03/16 (tooling-trusted-releases) branch dependabot/pre_commit/https-/github.com/oxc-project/mirrors-oxlint-1.56.0 created (now 463b7fd1) github-bot
• 2026/03/16 (tooling-trusted-releases) 02/02: #840: rename types to *Key arm
• 2026/03/16 (tooling-trusted-releases) branch arm updated (a1d8b129 -> 2c8e4716) arm
• 2026/03/16 (tooling-trusted-releases) 01/02: #840: safe committee name type - without validation arm
• 2026/03/16 (tooling-trusted-releases) 02/02: Add tests relating to classifications in attestable data sbp
• 2026/03/16 (tooling-trusted-releases) 01/02: Add file classifications to attestable data sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated (75e226b1 -> 7dda4775) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated (650d1437 -> 7d3aad2b) sbp
• 2026/03/16 (tooling-trusted-releases) 01/01: Add `pre-commit` hooks to dependabot.yml sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated: Add tests relating to classifications in attestable data sbp
• 2026/03/16 (tooling-trusted-releases) 01/01: Add file classifications to attestable data sbp
• 2026/03/16 (tooling-trusted-releases) branch sbp updated (be396bcc -> 9dede0a2) sbp
• 2026/03/16 (tooling-trusted-releases) branch dave2wave-patch-1 deleted (was 0bc52a47) sbp
• 2026/03/16 (tooling-trusted-releases) branch main updated: Add `pre-commit` hooks to dependabot.yml sbp
• 2026/03/16 (tooling-trusted-releases) branch form_validation_cache updated (c88f95fb -> 61b7a88c) arm
• 2026/03/16 (tooling-trusted-releases) branch dave2wave-patch-1 created (now 0bc52a47) wave
• 2026/03/16 (tooling-trusted-releases) branch form_validation_cache updated (4d27c3ba -> c88f95fb) arm
• 2026/03/16 (tooling-trusted-releases) branch form_validation_cache updated (8909e7e0 -> 4d27c3ba) arm
• 2026/03/16 (tooling-trusted-releases) 01/01: #776 - implement 50k character limit for vote comment and support passing form errors through a cache in the form module instead of via flash in the session arm
• 2026/03/16 (tooling-trusted-releases) branch arm updated (758d0975 -> a1d8b129) arm
• 2026/03/16 (tooling-trusted-releases) branch safe_committee_type updated: #840: rename types to *Key arm
• 2026/03/16 (tooling-trusted-releases) 01/01: #776 - implement 50k character limit for vote comment and support passing form errors through a cache in the form module instead of via flash in the session arm
• 2026/03/16 (tooling-trusted-releases) branch form_validation_cache created (now 8909e7e0) arm
• 2026/03/16 (tooling-trusted-releases) 01/01: #840: safe committee name type - without validation arm
• 2026/03/16 (tooling-trusted-releases) branch safe_committee_type updated (1a4dbeea -> d5f00254) arm
• 2026/03/16 (tooling-trusted-releases) branch arm updated (13448a2e -> 758d0975) arm
• 2026/03/15 (tooling-trusted-releases) branch main updated: Trivial title and example changes wave
• 2026/03/15 (tooling-trusted-releases) branch main updated (5c64f83d -> be396bcc) sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated (d9163560 -> 5c64f83d) sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated: Add some more classification tests sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated (4d446395 -> d9163560) sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated: Use the full classifier during checks sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated (f798d55c -> 4d446395) sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated (41294d6c -> f798d55c) sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated: Fix e2e tests due to changes in the user interface for rechecking files sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated: Add unit tests for classification sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated: Fix the precedence of how to determine classification sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated (c9a1bc33 -> 41294d6c) sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated: Moving asfquart doc in sbp
• 2026/03/15 (tooling-trusted-releases) branch asfquart-doc deleted (was cbdc57ed) sbp
• 2026/03/15 (tooling-trusted-releases) branch openapi-viewer-500-883 deleted (was 253fb09a) sbp
• 2026/03/15 (tooling-trusted-releases) branch main updated: Adding a pydantic json schema for output; fixes #883 sbp
• 2026/03/15 (tooling-trusted-releases) branch dependabot/uv/pyjwt-2.12.0 deleted (was b3f5f72a) github-bot
• 2026/03/15 (tooling-trusted-releases) branch main updated (13448a2e -> c9a1bc33) sbp
• 2026/03/15 (tooling-trusted-releases) 01/01: Update dependencies due to CVE-2026-32597 sbp
• 2026/03/15 (tooling-trusted-releases) branch sbp updated (b0a18494 -> c9a1bc33) sbp
• 2026/03/13 (tooling-trusted-releases) branch dependabot/uv/pyjwt-2.12.0 created (now b3f5f72a) github-bot
• 2026/03/13 (tooling-trusted-releases) branch openapi-viewer-500-883 created (now 253fb09a) akm
• 2026/03/13 (tooling-trusted-releases) 01/01: Adding a pydantic json schema for output; fixes #883 akm
• 2026/03/13 (tooling-trusted-releases) branch main updated (b0a18494 -> 13448a2e) arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated (5c191004 -> 13448a2e) arm
• 2026/03/13 (tooling-trusted-releases) 01/01: #870 - Get email from CC if sent from external domain via mailing list and include name in tabulated votes arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated (2b7a65b3 -> 5c191004) arm
• 2026/03/13 (tooling-trusted-releases) 01/01: #870 - Get email from CC if sent from external domain via mailing list and include name in tabulated votes arm
• 2026/03/13 (tooling-trusted-releases) branch main updated (e9f86d89 -> b0a18494) sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated: Allow consecutive fresh checks for debugging sbp
• 2026/03/13 (tooling-trusted-releases) branch logout-is-now-a-post updated (73c06eaf -> 21f83b6e) wave
• 2026/03/13 (tooling-trusted-releases) branch arm updated: #870 - Get email from CC if sent from external domain via mailing list arm
• 2026/03/13 (tooling-trusted-releases) branch main updated (ec5ac5b3 -> e9f86d89) sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated: Fix toggling the global cache for check results sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated (e5c186ad -> ec5ac5b3) sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated: Add a variant of the license header sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated: Skip license checks for binary archives sbp
• 2026/03/13 (tooling-trusted-releases) 01/01: Allow LICENSE.txt and NOTICE.txt files sbp
• 2026/03/13 (tooling-trusted-releases) branch sbp updated (121b7184 -> 864dd21d) sbp
• 2026/03/13 (tooling-trusted-releases) branch main updated (121b7184 -> ec5ac5b3) arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated (20212d31 -> ec5ac5b3) arm
• 2026/03/13 (tooling-trusted-releases) 02/02: #766 - Apply URL encoding to thread URLs arm
• 2026/03/13 (tooling-trusted-releases) 01/02: #762 - Move SVN host to the task so it's no longer an input from form handling. arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated: #766 - Apply URL encoding to thread URLs arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated: #762 - Move SVN host to the task so it's no longer an input from form handling. arm
• 2026/03/13 (tooling-trusted-releases) branch arm updated (2e26ef9b -> 72337633) arm
• 2026/03/12 (tooling-trusted-releases) branch logout-is-now-a-post updated (7e53c017 -> 73c06eaf) wave
• 2026/03/12 (tooling-trusted-releases) branch logout-is-now-a-post created (now 7e53c017) wave
• 2026/03/12 (tooling-trusted-releases) 01/01: Logout is a POST wave
• 2026/03/12 (tooling-trusted-releases) branch asfquart-doc updated (04a92595 -> cbdc57ed) akm
• 2026/03/12 (tooling-trusted-releases) branch asfquart-doc updated (ed7b31c5 -> 04a92595) akm
• 2026/03/12 (tooling-trusted-releases) branch main updated (e4ae4625 -> 121b7184) sbp
• 2026/03/12 (tooling-trusted-releases) branch sbp updated: Make some e2e compose tests more reliable sbp
• 2026/03/12 (tooling-trusted-releases) branch main updated (33cac1db -> e4ae4625) sbp
• 2026/03/12 (tooling-trusted-releases) branch asfquart-doc created (now ed7b31c5) akm
• 2026/03/12 (tooling-trusted-releases) 01/01: Moving asfquart doc in akm
• 2026/03/12 (tooling-trusted-releases) branch main updated (e461dacd -> 33cac1db) sbp
• 2026/03/12 (tooling-trusted-releases) branch sbp updated: Rename interfaces and variables related to extracted archives sbp
• 2026/03/12 (tooling-trusted-releases) branch sbp updated: Set immutable permissions on extracted archive files and directories sbp
• 2026/03/12 (tooling-trusted-releases) branch main updated (72337633 -> e461dacd) sbp
• 2026/03/12 (tooling-trusted-releases) branch sbp updated: Move archives into a top level state directory sbp
• 2026/03/12 (tooling-trusted-releases) branch arm updated (3f1e8035 -> 2e26ef9b) arm
• 2026/03/12 (tooling-trusted-releases) 01/01: #676 Validate exp and nbp when loading pydantic model for Github token. arm

• Earlier messages
• Later messages