On 19/06/2025 15:10, Mark Thomas wrote:
All,

The Tomcat project has been using Bugzilla to track issues for more than 20 years.

Recently there has been a significant increase in abusive traffic targetting the ASF's Bugzilla instances - mostly AI scraping.

To protect the ASF Bugzilla instances and ensure that they remain usable for the community, the ASF has - with regret - configured all ASF Bugzilla instances to require authentication in order to access them.

If you need to search bugs, view a bug report, report a bug or otherwise interact with Bugzilla, you will need to login in first. If you don't have an ASF Bugzilla account, the link to create one is on the front page.

:(

While requiring authentication was a quick short term solution, some longer term solutions were discussed which includes migrating away from BugZilla. If we did so, GitHub issues is the obvious destination.

When we last discussed moving to GitHub issues in 2022 [1] the consensus was not to. Has that view changed since then?

I have no strong preference for either. My concerns are more around if we migrated, what would we migrate and how would we do it. We have a *lot* of historical data. We have a couple of smaller projects we can use to test any migration if we decide to go that way.

Mark



[1] https://lists.apache.org/thread/9dstc1j7ld1ol3rbm5zpm8wnx29jyold

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to