issues@tooling.apache.org, 2026-06

You are viewing a plain text version of this content. The canonical link for it is here.

- Re: [I] ASVS scan of superset/superset-core (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/01 01:10:28 UTC, 3 replies.
- Re: [I] Request feedback from users more prominently (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 01:55:34 UTC, 2 replies.
- [I] Add recent models to config (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/01 02:35:58 UTC, 0 replies.
- Re: [PR] System PATs (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 10:36:34 UTC, 0 replies.
- Re: [I] Vote finish email - non-binding - full email address (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 10:39:14 UTC, 1 replies.
- Re: [I] Assure that Committee and Project metadata are validated (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 10:41:21 UTC, 0 replies.
- Re: [I] Rework finished releases UX to a Catalog UX (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 13:37:52 UTC, 3 replies.
- Re: [I] Committee/project auto update should only include data from Whimsy (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 13:42:21 UTC, 2 replies.
- [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 15:23:09 UTC, 0 replies.
- Re: [I] Tie ATR server into the rsync path of svn dist artifacts (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 15:24:54 UTC, 1 replies.
- Re: [I] Finish feature complete (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 15:26:45 UTC, 0 replies.
- Re: [I] Project schema and models complete (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 15:32:05 UTC, 0 replies.
- Re: [I] Distribution record form returns HTTP 500 when a non-stageable platform is selected (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/01 15:39:16 UTC, 0 replies.
- Re: [I] Require two approvals for important actions (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 15:59:30 UTC, 1 replies.
- Re: [I] Update catalog during ATR releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 16:28:59 UTC, 0 replies.
- Re: [I] Links on https://release-test.apache.org/docs/authorization-security to python code are 404s (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 17:31:13 UTC, 4 replies.
- Re: [I] Documents GitHub * workflow paths (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 17:41:55 UTC, 0 replies.
- Re: [I] Investigate remote promotion of artifacts on third party platforms (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 17:47:59 UTC, 2 replies.
- Re: [I] Get `find . -ls` output from `archive.apache.org/dist` (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 18:22:26 UTC, 1 replies.
- Re: [I] Catalog projects and releases for each PMC from current data (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 18:25:35 UTC, 6 replies.
- Re: [I] Watch svn dist releases and catalog changes to projects and releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 19:21:16 UTC, 0 replies.
- [PR] Update working branch (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 21:33:15 UTC, 1 replies.
- Re: [PR] Normalize the display of the phase (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 22:33:47 UTC, 4 replies.
- Re: [I] ASVS scan of superset/superset-frontend (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/01 22:34:33 UTC, 2 replies.
- Re: [I] ASVS scan of superset/superset (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/01 22:37:11 UTC, 2 replies.
- [I] Revisit the UX and access to the revision page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/01 23:04:58 UTC, 5 replies.
- Re: [I] ASVS scan of superset (tooling-agents) - posted by "rusackas (via GitHub)" <gi...@apache.org> on 2026/06/02 00:01:54 UTC, 8 replies.
- Re: [I] ASVS scan of superset/superset-websocket (tooling-agents) - posted by "rusackas (via GitHub)" <gi...@apache.org> on 2026/06/02 00:53:35 UTC, 2 replies.
- Re: [I] ASVS scan of superset/superset-extensions-cli (tooling-agents) - posted by "rusackas (via GitHub)" <gi...@apache.org> on 2026/06/02 00:53:53 UTC, 3 replies.
- Re: [I] ASVS scan of superset/superset-embedded-sdk (tooling-agents) - posted by "rusackas (via GitHub)" <gi...@apache.org> on 2026/06/02 00:53:59 UTC, 2 replies.
- Re: [I] Change the navigation element on phase pages (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/02 10:47:43 UTC, 0 replies.
- Re: [I] Add a podling test committee and project (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/02 13:24:49 UTC, 0 replies.
- [I] PMC and Project catalog api endpoints should include a CLE feed (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 16:39:59 UTC, 1 replies.
- [I] PMC, Project, and Release Catalog API endpoints should include references to any SBOMs (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 16:42:29 UTC, 1 replies.
- Re: [I] Redirect a uniform release artifact url pattern into the ASF's preferred urls (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 16:49:42 UTC, 0 replies.
- Re: [I] Discuss integrations with ECMA standards (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 16:56:21 UTC, 1 replies.
- [PR] Fix code refs in docs (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 19:39:38 UTC, 1 replies.
- [PR] Add issues link to footer (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/02 19:54:41 UTC, 1 replies.
- [PR] Refactor ATR client to use reusable HTTP utility methods [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/02 21:25:23 UTC, 2 replies.
- Re: [PR] Add `@since` annotations for ATR plugin parameters and Mojos [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/02 21:26:54 UTC, 1 replies.
- [PR] Bump actions/checkout from 6.0.2 to 6.0.3 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/02 23:46:50 UTC, 1 replies.
- [PR] Bump com.fasterxml.jackson.core:jackson-annotations from 2.21 to 2.22 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/02 23:46:54 UTC, 1 replies.
- [PR] Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/02 23:47:01 UTC, 1 replies.
- Re: [I] ISSUE-009 - Log line duplication during parallel agent execution — prints lack pass-name context (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/03 08:36:05 UTC, 1 replies.
- Re: [I] Automated review of dependencies with few maintainers (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/03 15:47:42 UTC, 1 replies.
- Re: [I] Automated review of dependencies with few maintainers aka "Bernies" (tooling-trusted-releases) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/06/03 16:06:28 UTC, 2 replies.
- [I] ISSUE-016 - Clean up progress log in the runs page (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/03 17:38:05 UTC, 0 replies.
- Re: [I] ASVS scan of airflow/airflow-core (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/03 20:42:23 UTC, 1 replies.
- [PR] Bump aiohttp from 3.13.5 to 3.14.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/03 23:19:38 UTC, 2 replies.
- Re: [I] ASVS scan of airflow/task-sdk (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/04 00:31:51 UTC, 1 replies.
- [PR] Bump docker/build-push-action from 7.1.0 to 7.2.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/04 00:42:41 UTC, 2 replies.
- [PR] Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/04 00:44:37 UTC, 2 replies.
- [I] define tooling-atr-maven-plugin project in ATR [tooling-atr-maven-plugin] - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/04 06:17:47 UTC, 2 replies.
- [I] ISSUE-017 - Upgrade uvicorn to gunicorn in Dockerfile.api (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/04 06:43:58 UTC, 0 replies.
- [I] SBOM Report contains false warning baout METDATA.AUTHOR (tooling-trusted-releases) - posted by "bodewig (via GitHub)" <gi...@apache.org> on 2026/06/04 08:43:19 UTC, 0 replies.
- [PR] Add Jackson BOM for centralized dependency management [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/04 14:00:40 UTC, 1 replies.
- Re: [I] SBOM Report contains false warning about missing METADATA.AUTHOR (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/04 14:58:43 UTC, 7 replies.
- [PR] Bump org.wiremock:wiremock-standalone from 3.13.1 to 3.13.2 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/04 16:29:54 UTC, 1 replies.
- [PR] Bump org.junit:junit-bom from 6.0.3 to 6.1.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/04 16:30:03 UTC, 1 replies.
- Re: [I] ASVS scan of airflow/providers/google (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/04 18:42:16 UTC, 1 replies.
- [PR] init ATR project metadada [tooling-atr-maven-plugin] - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/04 21:54:31 UTC, 14 replies.
- [I] Wrong mail list used for db-jdo releases (tooling-trusted-releases) - posted by "clr-apache (via GitHub)" <gi...@apache.org> on 2026/06/05 00:19:59 UTC, 7 replies.
- [I] ISSUE-018 - Fix cleared data store orphans (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/05 06:58:09 UTC, 0 replies.
- Re: [I] Add SWHID identifiers for release verification (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/05 12:07:00 UTC, 5 replies.
- [I] NPM now has staging and trusted releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/05 14:15:03 UTC, 0 replies.
- [I] Support uploads of mvn generated SOMs [tooling-atr-maven-plugin] - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/05 16:00:38 UTC, 5 replies.
- [PR] Add `release-start` mojo [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/05 18:04:51 UTC, 18 replies.
- [I] Time since runs inaccurate (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:37:48 UTC, 0 replies.
- Re: [I] ISSUE-007 - Stop button for in-flight runs (cooperative cancellation) (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:39:31 UTC, 1 replies.
- Re: [I] ISSUE-003 - Multi-tenant non-blocking runtime — runs should survive tab close, deploy, and concurrent users (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:40:58 UTC, 1 replies.
- [I] Cleanup on runs (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:41:35 UTC, 2 replies.
- Re: [I] ISSUE-004 - Composer-LLM generates `{outputText: ...}` regardless of declared multi-key output schema (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:43:56 UTC, 1 replies.
- Re: [I] ISSUE-006 - Home page Running Jobs module — cross-agent view of "what's running" (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:45:43 UTC, 1 replies.
- Re: [I] ISSUE-008 - Per-agent environment variables — editor UI and runtime overlay (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/06 04:46:01 UTC, 1 replies.
- Re: [I] Support uploads of mvn generated SBOMs [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/06 09:39:10 UTC, 10 replies.
- [I] Publish snapshot version to https://repository.apache.org [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/06 15:03:50 UTC, 2 replies.
- [PR] Add CycloneDX Maven plugin for generating SBOM for plugin itself [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/06 15:18:05 UTC, 1 replies.
- [I] Bug: project defined via .asf.yaml not created in ATR (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/07 06:59:06 UTC, 10 replies.
- [I] Review docs about `Integration with Release Profile` [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/07 12:00:11 UTC, 6 replies.
- [I] Add source IP and request ID to auth audit log (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/07 12:56:25 UTC, 1 replies.
- [PR] fix inactivity message: candidate draft, not release nor project (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/07 13:56:23 UTC, 3 replies.
- [PR] Improvements in `apache-release-profile` IT [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/07 14:57:20 UTC, 2 replies.
- [PR] Clarify usage documentation [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/07 15:28:41 UTC, 1 replies.
- [PR] Configured plugin execution to run only at the root module by default [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/07 20:51:59 UTC, 2 replies.
- [I] Add a check to block documentation from SVN and downloads (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/08 15:08:27 UTC, 4 replies.
- [I] Add a check for the use of `pull_request_target` in project workflows (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/08 15:23:49 UTC, 0 replies.
- Re: [I] Check for uses of`pull_request_target` in project workflows (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/08 15:28:31 UTC, 1 replies.
- [I] Add prompt caching (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/08 20:59:15 UTC, 2 replies.
- [PR] Bump vitest from 2.1.9 to 3.2.6 in /webapp (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/08 22:45:51 UTC, 0 replies.
- Re: [I] Automatically delete unfinished releases (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/09 15:17:29 UTC, 1 replies.
- Re: [I] Improve API responses to maintain safe types (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/09 15:18:03 UTC, 0 replies.
- Re: [I] Use a prefix for all secret tokens, and inform selected third party scanners (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/09 16:02:44 UTC, 1 replies.
- [PR] Updated CycloneDX and ATR plugin configurations [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/09 16:41:22 UTC, 1 replies.
- Re: [I] Populate project metadata from POM [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/09 16:44:03 UTC, 0 replies.
- Re: [I] Plugin release [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/09 16:49:35 UTC, 29 replies.
- [PR] Bump actions/checkout from 6.0.2 to 6.0.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/09 20:23:58 UTC, 2 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.91.0 to 2.92.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/10 16:51:12 UTC, 1 replies.
- Re: [I] Work on the client before alpha3 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/10 18:44:55 UTC, 2 replies.
- [PR] Bump shell-quote from 1.8.3 to 1.8.4 in /website (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/10 20:19:55 UTC, 0 replies.
- [I] Use relative cooldowns in uv (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/11 14:38:56 UTC, 2 replies.
- [PR] Add security-team processing report for the opus-4.8 Airflow ASVS scans (tooling-agents) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/06/11 15:19:01 UTC, 2 replies.
- [I] Add OSS project heatmap (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/11 20:51:19 UTC, 1 replies.
- [I] Noisy secrets track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/11 21:38:57 UTC, 0 replies.
- [I] Noisy secrets python module (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/11 21:42:03 UTC, 0 replies.
- [I] Noisy secrets leak investigation (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/11 21:44:18 UTC, 0 replies.
- Re: [I] Catalog page and ATR Certified badge (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/06/12 11:16:02 UTC, 2 replies.
- [I] {{KEYS_FILE}} in release template resolves to missing KEYS file (dist.apache.org path 404) (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/12 17:10:24 UTC, 2 replies.
- [I] Ensure that deleting a TLP can't be done or causes no harm (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/12 17:32:06 UTC, 2 replies.
- [PR] Add support for creating release version in ATR by check-composing mojo [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/13 10:01:28 UTC, 2 replies.
- [I] Plugin should check of project existing in ATR [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/13 10:10:55 UTC, 1 replies.
- Re: [PR] Add support for creating release version in ATR by check-composing goal [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/14 10:09:21 UTC, 0 replies.
- Re: [I] Goal for creating version in ATR project [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/14 10:09:22 UTC, 0 replies.
- [I] Track per-project security metadata in ATR (tooling-trusted-releases) - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/06/15 13:33:47 UTC, 2 replies.
- Re: [I] Infra documentation changes for Download pages (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/15 15:15:58 UTC, 0 replies.
- Re: [I] Infra documentation additions to describe using ATR in release creation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/15 15:27:26 UTC, 2 replies.
- Re: [I] Incubator documentation for release management (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/15 15:51:22 UTC, 0 replies.
- Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/15 15:56:01 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 16:15:34 UTC, 1 replies.
- [PR] Bump actions/checkout from 6.0.2 to 6.0.3 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 16:16:30 UTC, 1 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.92.0 to 2.93.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 16:32:28 UTC, 1 replies.
- Re: [I] Add a vote mode for security releases (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/15 16:34:58 UTC, 2 replies.
- [PR] Bump astral-sh/setup-uv from 8.0.0 to 8.2.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 17:36:05 UTC, 0 replies.
- Re: [PR] Bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 17:36:07 UTC, 1 replies.
- [PR] Bump actions/checkout from 6.0.2 to 6.0.3 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 17:37:07 UTC, 1 replies.
- [PR] Bump dompurify from 3.4.2 to 3.4.10 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 13:04:28 UTC, 2 replies.
- Re: [PR] Track the staging revision of a recorded distribution (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/16 14:12:13 UTC, 1 replies.
- [I] Add client tests to the server CI (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/16 14:50:34 UTC, 2 replies.
- Re: [I] Allow release managers to be designated (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/16 16:01:02 UTC, 1 replies.
- Re: [I] Add release manager storage permissions (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/16 16:01:55 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.2.0 to 5.3.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 16:30:52 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.7.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 16:43:53 UTC, 1 replies.
- [I] DNS changes for beta (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/16 19:30:35 UTC, 0 replies.
- [I] Operational training (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/16 19:34:37 UTC, 0 replies.
- [PR] Bump github/codeql-action from 3.36.2 to 4.36.2 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 20:24:52 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 20:25:35 UTC, 1 replies.
- [I] Verify find() bookmark pagination on a >10k-document namespace; add skip-based fallback if needed (tooling-gofannon) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/16 23:19:38 UTC, 0 replies.
- [I] Add tests for Tooling actions to the server (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/17 17:20:42 UTC, 0 replies.
- [I] ASVS scan of spark (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/18 04:15:56 UTC, 0 replies.
- [I] Use the Tooling LDAP group instead of the service group (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/18 15:23:53 UTC, 3 replies.
- [PR] Bump actions/checkout from 6.0.3 to 7.0.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/18 16:24:12 UTC, 1 replies.
- Re: [I] Rename misleading project property from LDAP (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/18 18:30:04 UTC, 1 replies.
- Re: [I] Explain the consequences of OpenPGP committee association (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/18 19:38:38 UTC, 1 replies.
- Re: [I] Make email address selection in OpenPGP key generation clearer (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/18 19:54:33 UTC, 1 replies.
- [I] PMCs with subproject KEYS files (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/18 20:38:12 UTC, 4 replies.
- [I] ASVS scan of nuttx (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/18 21:39:42 UTC, 0 replies.
- [I] ASVS scan of ambari (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/18 21:40:04 UTC, 0 replies.
- [I] ASVS scan of livy (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/18 21:40:16 UTC, 0 replies.
- [I] ASVS scan of hadoop (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:06:54 UTC, 0 replies.
- [I] ASVS scan of directory-ldap-api (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:07:18 UTC, 0 replies.
- [I] ASVS scan of directory-server (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:07:35 UTC, 0 replies.
- [I] ASVS scan of arrow (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:07:59 UTC, 0 replies.
- [I] ASVS scan of grails-core (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:09:43 UTC, 0 replies.
- [I] ASVS scan of fineract (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 01:10:21 UTC, 0 replies.
- [PR] Update ATR plugin version to 1.0.0-alpha-1 in documentation, POM, and code annotations [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/19 05:02:50 UTC, 1 replies.
- [PR] Bump dompurify from 3.4.9 to 3.4.11 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 13:22:51 UTC, 2 replies.
- [PR] Bump launch-editor from 2.12.0 to 2.14.1 in /website (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 14:08:44 UTC, 0 replies.
- [PR] upload SBOM signature and checksum [tooling-atr-maven-plugin] - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/19 15:14:11 UTC, 2 replies.
- Re: [I] Allow release managers to create special security releases (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/19 15:57:13 UTC, 8 replies.
- [I] SBOMs published by Maven build is not recognized (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/06/19 16:16:19 UTC, 10 replies.
- [I] ASVS scan of sling (tooling-agents) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/06/19 18:43:44 UTC, 0 replies.
- [PR] Bump vite from 7.3.2 to 7.3.5 in /webapp (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 21:10:23 UTC, 0 replies.
- [PR] Bump vite from 7.3.2 to 7.3.5 in /webapp/packages/webui (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/20 12:55:34 UTC, 0 replies.
- [I] Assure artifact release date is recorded (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 16:10:23 UTC, 2 replies.
- [I] KEYS and artifact signature import (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 16:47:01 UTC, 1 replies.
- Re: [I] Do not allow keys to be deleted if they have been used to sign a release (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 16:57:05 UTC, 4 replies.
- Re: [I] Disallowed File Detection Occurs After Storage, Not At Upload Time (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 17:13:30 UTC, 2 replies.
- Re: [I] Integration with Apache Committee Report Helper (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 17:28:19 UTC, 0 replies.
- Re: [I] ATR logo request (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 17:36:15 UTC, 1 replies.
- Re: [I] Consider using DPoP (RFC 9449) for API tokens (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 17:38:34 UTC, 0 replies.
- Re: [I] Set a 14 day cooldown for npm packages in Dependabot (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/20 17:40:56 UTC, 2 replies.
- [I] Comdev websites track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/21 17:25:18 UTC, 0 replies.
- [I] Distribution track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/21 18:19:02 UTC, 0 replies.
- [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/22 16:25:09 UTC, 0 replies.
- [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/06/22 21:55:50 UTC, 1 replies.
- [I] Update the tutorial for the beta. (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/23 15:43:24 UTC, 0 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.93.0 to 2.94.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/23 16:27:26 UTC, 0 replies.
- [I] Rework the users guide component page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/23 17:37:21 UTC, 0 replies.
- [PR] Bump ws in /website (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/24 02:54:59 UTC, 0 replies.
- [PR] Update `.markdown-lint.yml` with comment linking to the rules (tooling-docs) - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/06/24 07:34:57 UTC, 1 replies.
- [I] Attic process track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/24 13:40:21 UTC, 0 replies.
- Re: [I] Consider adding a system role to the storage interface (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/24 14:22:37 UTC, 9 replies.
- Re: [I] Use the infra contingent approvals vote system for arbitrary vote topics (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/24 16:24:16 UTC, 0 replies.
- [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/24 16:24:18 UTC, 0 replies.
- [I] Make adminship work like su (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/25 14:27:51 UTC, 0 replies.
- [PR] Split service writes into distinct capability sets (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/25 16:14:39 UTC, 1 replies.
- Re: [I] Migrate to Python 3.14 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/25 16:23:40 UTC, 5 replies.
- [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/25 16:23:58 UTC, 0 replies.
- [I] Admin dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/25 19:16:54 UTC, 0 replies.
- Re: [I] Keep the `atr.util` module organized and limited moving out like functionality (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/25 19:18:39 UTC, 1 replies.
- Re: [I] Improve session testing by using more realistic workflows (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/25 19:28:42 UTC, 0 replies.
- [I] save "Download Path Suffix" configuration (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/29 06:29:00 UTC, 2 replies.
- [I] error 500 when a download suffix is reused (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/06/29 06:36:31 UTC, 0 replies.
- [PR] Bump actions/checkout from 6.0.3 to 7.0.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 16:14:14 UTC, 1 replies.
- [PR] Bump org.apache:apache from 38 to 39 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 16:25:05 UTC, 0 replies.
- [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 16:25:15 UTC, 0 replies.
- [PR] Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 17:09:39 UTC, 0 replies.
- [PR] Bump actions/checkout from 6.0.3 to 7.0.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 17:34:40 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.2.0 to 5.3.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 17:34:49 UTC, 1 replies.
- [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 18:45:02 UTC, 2 replies.
- [I] Client HEAD broke against server [main] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 19:22:55 UTC, 2 replies.
- Re: [I] error 500 when a download path suffix is reused (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/06/29 19:48:02 UTC, 1 replies.
- [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 16:37:18 UTC, 2 replies.
- [I] Project mapping analysis (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/06/30 17:07:49 UTC, 0 replies.
- [PR] Bump actions/cache from 5.0.5 to 6.1.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 20:23:36 UTC, 0 replies.
- [PR] Bump blake3 from 1.0.8 to 1.0.9 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 20:23:45 UTC, 0 replies.
- [PR] Bump djlint from 1.39.2 to 1.39.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 20:24:01 UTC, 0 replies.
- [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 20:25:04 UTC, 0 replies.