This is an automated email from the ASF dual-hosted git repository.
sbp pushed a change to branch sbp
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
from 0ec0992c Add the arm branch to QA workflows
add beb2a2a8 Update check caching to use hash keys of inputs
add 61001c81 clarify: svn:dist not done by ATR yet (#649)
add 62d14ea6 Update warning banner text in base.html
add 24f891be Fix scheduling bug in distribution status check
add bc8d8531 Adjust alpha 2 banner message
add a0927d24 Add nbf claim to JWTs. Closes #675.
add ff331509 Reject "dangerous" JWT headers. Closes #673.
add 0c467bb2 Add LDAP validation to ASF sender IDs. Closes #654.
add 0f0e72fa Remove unverified_header_and_payload function as unused.
Closes #672.
add 7406bb29 Validate LDAP account of the initiating user when a task is
started. Closes #663.
new 325ebf38 Update dependencies
new 055ca95b Fix some lint errors found by the updated linters
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.pre-commit-config.yaml | 4 +-
atr/attestable.py | 71 +++--
atr/db/__init__.py | 8 +
atr/docs/checks.md | 2 +-
atr/docs/tasks.md | 2 +-
tests/e2e/sbom/helpers.py => atr/file_paths.py | 14 +-
atr/get/report.py | 11 +-
atr/{models/basic.py => hashes.py} | 24 +-
atr/jwtoken.py | 16 +-
atr/merge.py | 7 +-
atr/models/attestable.py | 8 +-
atr/models/sql.py | 2 +-
atr/static/js/src/upload-progress.js | 12 +-
atr/storage/readers/checks.py | 57 +++-
atr/storage/readers/releases.py | 36 +--
atr/storage/types.py | 3 +-
atr/storage/writers/revision.py | 7 +-
atr/tasks/__init__.py | 336 +++++++++++++++++++-----
atr/tasks/checks/__init__.py | 218 ++++++++++-----
atr/tasks/checks/compare.py | 5 +
atr/tasks/checks/hashing.py | 7 +
atr/tasks/checks/license.py | 16 +-
atr/tasks/checks/paths.py | 18 +-
atr/tasks/checks/rat.py | 7 +-
atr/tasks/checks/signature.py | 6 +
atr/tasks/checks/targz.py | 8 +
atr/tasks/checks/zipformat.py | 10 +-
atr/tasks/distribution.py | 15 +-
atr/tasks/message.py | 7 +
atr/templates/layouts/base.html | 2 +-
atr/util.py | 28 +-
atr/worker.py | 10 +
migrations/versions/0049_2026.02.11_5b874ed2.py | 37 +++
playwright/test.py | 4 +-
requirements-for-pip-audit.txt | 14 +-
tests/unit/recorders.py | 28 +-
tests/unit/test_cache.py | 10 +-
tests/unit/test_checks_compare.py | 5 +
tests/unit/test_message.py | 111 ++++++++
uv.lock | 86 +++---
40 files changed, 962 insertions(+), 310 deletions(-)
copy tests/e2e/sbom/helpers.py => atr/file_paths.py (66%)
copy atr/{models/basic.py => hashes.py} (54%)
create mode 100644 migrations/versions/0049_2026.02.11_5b874ed2.py
create mode 100644 tests/unit/test_message.py
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]