commits  

Messages by Thread

• (tooling-trusted-releases) branch sbp updated: Remove the code to write the unused attestable path files sbp
• (tooling-trusted-releases) branch main updated (3a99ce3b -> 472d371e) sbp
• (tooling-trusted-releases) branch sbp updated: Get classifications either from the database or by recomputing sbp
• (tooling-trusted-releases) branch sbp updated (45f2bfd0 -> 472d371e) sbp
  • (tooling-trusted-releases) 01/01: Read hashes either from the database or by recomputing from disk sbp
• (tooling-trusted-releases) branch main updated (45f2bfd0 -> 3a99ce3b) arm
• (tooling-trusted-releases) branch arm updated: Renaming "_name" to "_key" throughout the codebase and database arm
• (tooling-trusted-releases) branch arm updated (3e2c570e -> 719c6fd1) arm
• (tooling-trusted-releases) branch name_to_key updated (ec2a2eda -> 3e2c570e) arm
• (tooling-trusted-releases) branch name_to_key deleted (was 3e2c570e) arm
• (tooling-trusted-releases) branch arm updated (ece11fd3 -> 3e2c570e) arm
• (tooling-trusted-releases) branch name_to_key updated (26eceed2 -> ec2a2eda) arm
• (tooling-trusted-releases) branch name_to_key updated (77a4d274 -> 26eceed2) arm
• (tooling-trusted-releases) branch name_to_key updated (cba6ee86 -> 77a4d274) arm
• (tooling-trusted-releases) branch main updated (caf1fc3e -> 45f2bfd0) sbp
• (tooling-trusted-releases) branch main updated (1ad84443 -> caf1fc3e) sbp
• (tooling-trusted-releases) branch main updated (ece11fd3 -> 1ad84443) sbp
• (tooling-trusted-releases) branch sbp updated: Add tests for file metadata, including testing an alternative design sbp
• (tooling-trusted-releases) branch name_to_key updated (0fa61735 -> cba6ee86) arm
• (tooling-trusted-releases) branch sbp updated (16853ca7 -> caf1fc3e) sbp
  • (tooling-trusted-releases) 01/02: Ensure that relevant SQLite pragmas are set per connection sbp
  • (tooling-trusted-releases) 02/02: Record file metadata change events in the database sbp
• (tooling-trusted-releases) branch name_to_key updated (8f4ec09b -> 0fa61735) arm
• (tooling-trusted-releases) branch main updated (a62f505c -> ece11fd3) arm
• (tooling-trusted-releases) branch sbp updated (92011dd5 -> 16853ca7) sbp
  • (tooling-trusted-releases) 01/01: Ensure that relevant SQLite pragmas are set per connection sbp
• (tooling-trusted-releases) branch arm updated (2c8e4716 -> ece11fd3) arm
  • (tooling-trusted-releases) 01/02: #840: safe committee name type - without validation arm
  • (tooling-trusted-releases) 02/02: #840: rename types to *Key arm
• (tooling-trusted-releases) branch name_to_key updated (a80c948c -> 76ff8416) arm
  • (tooling-trusted-releases) 01/01: SQL migration arm
• (tooling-trusted-releases) branch name_to_key updated: SQL migration arm
• (tooling-trusted-releases) branch logout-is-now-a-post deleted (was 21f83b6e) sbp
• (tooling-trusted-releases) branch main updated: Logout is a POST (#876) sbp
• (tooling-trusted-releases) branch main updated (838e9a65 -> 92011dd5) sbp
• (tooling-trusted-releases) branch main updated (d61a7a4b -> 838e9a65) sbp
• (tooling-trusted-releases) branch sbp updated: Add simple unit tests for release file states sbp
• (tooling-trusted-releases) branch sbp updated: Add a table for release file states to the database sbp
• (tooling-trusted-releases) branch name_to_key created (now e8adf482) arm
• (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-config-standard-40.0.0 deleted (was 200b2479) github-bot
• (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-17.4.0 deleted (was 98a7f75e) github-bot
• (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 deleted (was 47ac3d6f) github-bot
• (tooling-trusted-releases) branch main updated (d3c91a45 -> d61a7a4b) sbp
• (tooling-trusted-releases) branch sbp updated: Update aiosqlite sbp
• (tooling-trusted-releases) branch main updated (89872ad8 -> d3c91a45) sbp
• (tooling-trusted-releases) branch sbp updated: Comment out Dependabot pre-commit checks until cooldowns are supported sbp
• (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 updated (f63c17cb -> 47ac3d6f) github-bot
• (tooling-trusted-releases) branch main updated (fa2ec300 -> 89872ad8) sbp
• (tooling-trusted-releases) branch sbp updated (bd33b7f1 -> 89872ad8) sbp
  • (tooling-trusted-releases) 01/01: Update dependencies sbp
• (tooling-trusted-releases) branch main updated (7dda4775 -> fa2ec300) sbp
  • (tooling-trusted-releases) 01/01: Add file classifications to attestable data sbp
• (tooling-trusted-releases) branch main updated (8ea85a9c -> 7dda4775) sbp
• (tooling-trusted-releases) branch main updated (7d3aad2b -> 8ea85a9c) sbp
• (tooling-trusted-releases) branch dependabot/uv/aiosqlite-0.22.1 created (now f63c17cb) github-bot
• (tooling-trusted-releases) branch dependabot/uv/pydantic-core-2.42.0 created (now 381cdc14) github-bot
• (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-17.4.0 created (now 98a7f75e) github-bot
• (tooling-trusted-releases) branch dependabot/pre_commit/stylelint-config-standard-40.0.0 created (now 200b2479) github-bot
• (tooling-trusted-releases) branch dependabot/pre_commit/https-/github.com/oxc-project/mirrors-oxlint-1.56.0 created (now 463b7fd1) github-bot
• (tooling-trusted-releases) branch arm updated (a1d8b129 -> 2c8e4716) arm
  • (tooling-trusted-releases) 01/02: #840: safe committee name type - without validation arm
  • (tooling-trusted-releases) 02/02: #840: rename types to *Key arm
• (tooling-trusted-releases) branch sbp updated (75e226b1 -> 7dda4775) sbp
  • (tooling-trusted-releases) 01/02: Add file classifications to attestable data sbp
  • (tooling-trusted-releases) 02/02: Add tests relating to classifications in attestable data sbp
• (tooling-trusted-releases) branch main updated (650d1437 -> 7d3aad2b) sbp
  • (tooling-trusted-releases) 01/01: Add `pre-commit` hooks to dependabot.yml sbp
• (tooling-trusted-releases) branch sbp updated: Add tests relating to classifications in attestable data sbp
• (tooling-trusted-releases) branch sbp updated (be396bcc -> 9dede0a2) sbp
  • (tooling-trusted-releases) 01/01: Add file classifications to attestable data sbp
• (tooling-trusted-releases) branch dave2wave-patch-1 deleted (was 0bc52a47) sbp
• (tooling-trusted-releases) branch main updated: Add `pre-commit` hooks to dependabot.yml sbp
• (tooling-trusted-releases) branch form_validation_cache updated (c88f95fb -> 61b7a88c) arm
• (tooling-trusted-releases) branch dave2wave-patch-1 created (now 0bc52a47) wave
• (tooling-trusted-releases) branch form_validation_cache updated (4d27c3ba -> c88f95fb) arm
• (tooling-trusted-releases) branch form_validation_cache updated (8909e7e0 -> 4d27c3ba) arm
  • (tooling-trusted-releases) 01/01: #776 - implement 50k character limit for vote comment and support passing form errors through a cache in the form module instead of via flash in the session arm
• (tooling-trusted-releases) branch arm updated (758d0975 -> a1d8b129) arm
• (tooling-trusted-releases) branch safe_committee_type updated: #840: rename types to *Key arm
• (tooling-trusted-releases) branch form_validation_cache created (now 8909e7e0) arm
  • (tooling-trusted-releases) 01/01: #776 - implement 50k character limit for vote comment and support passing form errors through a cache in the form module instead of via flash in the session arm
• (tooling-trusted-releases) branch safe_committee_type updated (1a4dbeea -> d5f00254) arm
  • (tooling-trusted-releases) 01/01: #840: safe committee name type - without validation arm
• (tooling-trusted-releases) branch arm updated (13448a2e -> 758d0975) arm
• (tooling-trusted-releases) branch main updated: Trivial title and example changes wave
• (tooling-trusted-releases) branch main updated (5c64f83d -> be396bcc) sbp
• (tooling-trusted-releases) branch main updated (d9163560 -> 5c64f83d) sbp
• (tooling-trusted-releases) branch sbp updated: Add some more classification tests sbp
• (tooling-trusted-releases) branch main updated (4d446395 -> d9163560) sbp
• (tooling-trusted-releases) branch sbp updated: Use the full classifier during checks sbp
• (tooling-trusted-releases) branch main updated (f798d55c -> 4d446395) sbp
• (tooling-trusted-releases) branch main updated (41294d6c -> f798d55c) sbp
• (tooling-trusted-releases) branch sbp updated: Fix e2e tests due to changes in the user interface for rechecking files sbp
• (tooling-trusted-releases) branch sbp updated: Add unit tests for classification sbp
• (tooling-trusted-releases) branch sbp updated: Fix the precedence of how to determine classification sbp
• (tooling-trusted-releases) branch sbp updated (c9a1bc33 -> 41294d6c) sbp
• (tooling-trusted-releases) branch main updated: Moving asfquart doc in sbp
• (tooling-trusted-releases) branch asfquart-doc deleted (was cbdc57ed) sbp
• (tooling-trusted-releases) branch openapi-viewer-500-883 deleted (was 253fb09a) sbp
• (tooling-trusted-releases) branch main updated: Adding a pydantic json schema for output; fixes #883 sbp
• (tooling-trusted-releases) branch dependabot/uv/pyjwt-2.12.0 deleted (was b3f5f72a) github-bot
• (tooling-trusted-releases) branch main updated (13448a2e -> c9a1bc33) sbp
• (tooling-trusted-releases) branch sbp updated (b0a18494 -> c9a1bc33) sbp
  • (tooling-trusted-releases) 01/01: Update dependencies due to CVE-2026-32597 sbp
• (tooling-trusted-releases) branch dependabot/uv/pyjwt-2.12.0 created (now b3f5f72a) github-bot
• (tooling-trusted-releases) branch openapi-viewer-500-883 created (now 253fb09a) akm
  • (tooling-trusted-releases) 01/01: Adding a pydantic json schema for output; fixes #883 akm
• (tooling-trusted-releases) branch main updated (b0a18494 -> 13448a2e) arm
• (tooling-trusted-releases) branch arm updated (5c191004 -> 13448a2e) arm
  • (tooling-trusted-releases) 01/01: #870 - Get email from CC if sent from external domain via mailing list and include name in tabulated votes arm
• (tooling-trusted-releases) branch arm updated (2b7a65b3 -> 5c191004) arm
  • (tooling-trusted-releases) 01/01: #870 - Get email from CC if sent from external domain via mailing list and include name in tabulated votes arm
• (tooling-trusted-releases) branch main updated (e9f86d89 -> b0a18494) sbp
• (tooling-trusted-releases) branch sbp updated: Allow consecutive fresh checks for debugging sbp
• (tooling-trusted-releases) branch logout-is-now-a-post updated (73c06eaf -> 21f83b6e) wave
• (tooling-trusted-releases) branch arm updated: #870 - Get email from CC if sent from external domain via mailing list arm
• (tooling-trusted-releases) branch main updated (ec5ac5b3 -> e9f86d89) sbp
• (tooling-trusted-releases) branch sbp updated: Fix toggling the global cache for check results sbp
• (tooling-trusted-releases) branch sbp updated (e5c186ad -> ec5ac5b3) sbp
• (tooling-trusted-releases) branch sbp updated: Add a variant of the license header sbp
• (tooling-trusted-releases) branch sbp updated: Skip license checks for binary archives sbp
• (tooling-trusted-releases) branch sbp updated (121b7184 -> 864dd21d) sbp
  • (tooling-trusted-releases) 01/01: Allow LICENSE.txt and NOTICE.txt files sbp
• (tooling-trusted-releases) branch main updated (121b7184 -> ec5ac5b3) arm
• (tooling-trusted-releases) branch arm updated (20212d31 -> ec5ac5b3) arm
  • (tooling-trusted-releases) 01/02: #762 - Move SVN host to the task so it's no longer an input from form handling. arm
  • (tooling-trusted-releases) 02/02: #766 - Apply URL encoding to thread URLs arm
• (tooling-trusted-releases) branch arm updated: #766 - Apply URL encoding to thread URLs arm
• (tooling-trusted-releases) branch arm updated: #762 - Move SVN host to the task so it's no longer an input from form handling. arm
• (tooling-trusted-releases) branch arm updated (2e26ef9b -> 72337633) arm
• (tooling-trusted-releases) branch logout-is-now-a-post updated (7e53c017 -> 73c06eaf) wave
• (tooling-trusted-releases) branch logout-is-now-a-post created (now 7e53c017) wave
  • (tooling-trusted-releases) 01/01: Logout is a POST wave
• (tooling-trusted-releases) branch asfquart-doc updated (04a92595 -> cbdc57ed) akm
• (tooling-trusted-releases) branch asfquart-doc updated (ed7b31c5 -> 04a92595) akm
• (tooling-trusted-releases) branch main updated (e4ae4625 -> 121b7184) sbp
• (tooling-trusted-releases) branch sbp updated: Make some e2e compose tests more reliable sbp
• (tooling-trusted-releases) branch main updated (33cac1db -> e4ae4625) sbp
• (tooling-trusted-releases) branch asfquart-doc created (now ed7b31c5) akm
  • (tooling-trusted-releases) 01/01: Moving asfquart doc in akm
• (tooling-trusted-releases) branch main updated (e461dacd -> 33cac1db) sbp
• (tooling-trusted-releases) branch sbp updated: Rename interfaces and variables related to extracted archives sbp
• (tooling-trusted-releases) branch sbp updated: Set immutable permissions on extracted archive files and directories sbp
• (tooling-trusted-releases) branch main updated (72337633 -> e461dacd) sbp
• (tooling-trusted-releases) branch sbp updated: Move archives into a top level state directory sbp
• (tooling-trusted-releases) branch arm updated (3f1e8035 -> 2e26ef9b) arm
  • (tooling-trusted-releases) 01/01: #676 Validate exp and nbp when loading pydantic model for Github token. arm
• (tooling-trusted-releases) branch main updated (65f20eed -> 72337633) sbp
• (tooling-trusted-releases) branch main updated (d9f42be8 -> 65f20eed) sbp
• (tooling-trusted-releases) branch main updated (2ebee77e -> d9f42be8) sbp
• (tooling-trusted-releases) branch main updated (21b35c79 -> 2ebee77e) sbp
• (tooling-trusted-releases) branch sbp updated: Tolerate malformed NULL values in selected attestable policy fields sbp
• (tooling-trusted-releases) branch sbp updated: Add a linter to check the consistency of fields not accepting NULL sbp
• (tooling-trusted-releases) branch sbp updated: Ensure that datetime fields do not use SQL NULL as values sbp
• (tooling-trusted-releases) branch sbp updated (cdf4ce7d -> 2ebee77e) sbp
  • (tooling-trusted-releases) 01/01: Ensure that list fields do not use SQL NULL as values sbp
• (tooling-trusted-releases) branch arm updated (baaf563f -> 3f1e8035) arm
  • (tooling-trusted-releases) 01/01: #676 Validate exp and nbp when loading pydantic model for Github token. arm
• (tooling-trusted-releases) branch arm updated: #676 Validate exp and nbp when loading pydantic model for Github token. arm
• (tooling-trusted-releases) branch main updated (cdf4ce7d -> 21b35c79) arm
• (tooling-trusted-releases) branch safe_committee_type created (now 1a4dbeea) arm
  • (tooling-trusted-releases) 01/01: #840: safe committee name type - without validation arm
• (tooling-trusted-releases) branch arm updated (1925e905 -> 21b35c79) arm
  • (tooling-trusted-releases) 02/02: #765: use safe values for distribution params arm
  • (tooling-trusted-releases) 01/02: #671 - validate https scheme for github oidc arm
• (tooling-trusted-releases) branch arm updated (4bac0ea9 -> 1925e905) arm
  • (tooling-trusted-releases) 01/01: #765: use safe values for distribution params arm
• (tooling-trusted-releases) branch arm updated (b2fd75de -> 4bac0ea9) arm
  • (tooling-trusted-releases) 01/01: #765: use safe values for distribution params arm
• (tooling-trusted-releases) branch arm updated (16386f54 -> b2fd75de) arm
  • (tooling-trusted-releases) 01/01: #765: usafe safe values for distribution params arm
• (tooling-trusted-releases) branch arm updated: #765: usafe safe values for distribution params arm
• (tooling-trusted-releases) branch document-cascades-517 created (now 86089205) akm
  • (tooling-trusted-releases) 01/01: Adding docs for cascading; fixes #517 akm
• (tooling-trusted-releases) branch main updated (50979b02 -> cdf4ce7d) sbp
• (tooling-trusted-releases) branch sbp updated: Allow binary suffixes on archive roots sbp
• (tooling-trusted-releases) branch main updated (996965f6 -> 50979b02) sbp
• (tooling-trusted-releases) branch sbp updated: Classify binary files from infix and suffix filename components sbp
• (tooling-trusted-releases) branch main updated (afc8c087 -> 996965f6) sbp
• (tooling-trusted-releases) branch main updated (0150111c -> afc8c087) sbp
• (tooling-trusted-releases) branch main updated (7c8efdd4 -> 0150111c) sbp
• (tooling-trusted-releases) branch sbp updated: Make e2e voting tests more reliable sbp
• (tooling-trusted-releases) branch main updated (47a304da -> 7c8efdd4) sbp
• (tooling-trusted-releases) branch sbp updated: Set length limits on reads of KEYS, LICENSE, and NOTICE files sbp
• (tooling-trusted-releases) branch main updated (e4f18ee6 -> 47a304da) sbp
• (tooling-trusted-releases) branch sbp updated: Remove Referrer-Policy, which is now set in the frontend proxy sbp
• (tooling-trusted-releases) branch main updated (952b889a -> e4f18ee6) sbp
• (tooling-trusted-releases) branch dependabot/uv/aiofiles-25.1.0 deleted (was adfedf2a) github-bot
• (tooling-trusted-releases) branch dependabot/uv/aiosmtplib-5.1.0 deleted (was c67a04cb) github-bot
• (tooling-trusted-releases) branch dependabot/uv/email-validator-2.3.0 deleted (was e9603ba9) github-bot
• (tooling-trusted-releases) branch dependabot/uv/rich-14.3.3 deleted (was 101d01c7) github-bot
• (tooling-trusted-releases) branch dependabot/uv/ldap3-2.10.2rc3 deleted (was 119b9b5c) github-bot
• (tooling-trusted-releases) branch main updated (aee82146 -> 952b889a) sbp
• (tooling-trusted-releases) branch sbp updated: Ensure that emails cannot contain null bytes sbp
• (tooling-trusted-releases) branch main updated (54e6af48 -> aee82146) sbp
• (tooling-trusted-releases) branch main updated (c550a9d4 -> 54e6af48) sbp
• (tooling-trusted-releases) branch sbp updated: Remove unnecessary archive integrity checks sbp
• (tooling-trusted-releases) branch main updated (93da3dcf -> c550a9d4) sbp
• (tooling-trusted-releases) branch sbp updated: Give each check its own version number for result cache key construction sbp
• (tooling-trusted-releases) branch main updated (4d725a75 -> 93da3dcf) sbp

• Earlier messages
• Later messages