issues@tooling.apache.org, 2026-07

You are viewing a plain text version of this content. The canonical link for it is here.

- Re: [I] Project mapping analysis (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 11:22:37 UTC, 3 replies.
- Re: [PR] Bump actions/cache from 5.0.5 to 6.1.0 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/01 13:23:24 UTC, 0 replies.
- Re: [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/01 13:30:57 UTC, 0 replies.
- Re: [PR] Bump blake3 from 1.0.8 to 1.0.9 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 13:50:13 UTC, 1 replies.
- Re: [PR] Bump djlint from 1.39.2 to 1.39.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 13:50:48 UTC, 1 replies.
- [I] Add mandatory announcement field for download page URL if not already available (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/01 14:43:40 UTC, 2 replies.
- [I] Catalog non-attic projects and releases (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 16:42:08 UTC, 0 replies.
- Re: [I] Catalog projects and releases for each PMC from current data (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 16:49:56 UTC, 1 replies.
- Re: [I] Watch svn dist releases and catalog changes to projects and releases (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 16:50:04 UTC, 1 replies.
- [I] Catalog and seed attic releases (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 16:51:46 UTC, 2 replies.
- Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/01 16:58:14 UTC, 4 replies.
- [I] Email detected releases to a mailing list (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/01 17:03:01 UTC, 0 replies.
- [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/07/01 21:06:34 UTC, 2 replies.
- [I] to_uri_list Accepts Dangerous URI Schemes (javascript:, data:) Without Allowlist (tooling-trusted-releases) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/07/01 21:08:03 UTC, 0 replies.
- [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/07/01 21:08:49 UTC, 4 replies.
- [I] Concurrent Session Policy Not Documented (tooling-trusted-releases) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/07/01 21:11:12 UTC, 0 replies.
- Re: [I] {{KEYS_FILE}} in release template resolves to missing KEYS file (dist.apache.org path 404) (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/03 08:11:13 UTC, 2 replies.
- Re: [I] Resolve airflow-providers versioning in dist watcher and history catalog scripts (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/03 08:38:08 UTC, 1 replies.
- Re: [I] KEYS and artifact signature import (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/03 10:17:29 UTC, 3 replies.
- Re: [I] Send email when releases are made or seen (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/03 15:36:58 UTC, 1 replies.
- [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/07/03 15:44:40 UTC, 2 replies.
- Re: [I] Add tests for Tooling actions to the server (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/03 16:52:43 UTC, 1 replies.
- [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) - posted by "clr-apache (via GitHub)" <gi...@apache.org> on 2026/07/04 00:25:37 UTC, 4 replies.
- [I] validate_distribution_ssh_register targets a class missing from the Results union, so it always fails (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/05 09:09:08 UTC, 2 replies.
- [I] Irreversible filesystem move + prior-revision deletion happen before the DB promotion CAS (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/05 09:10:18 UTC, 3 replies.
- [I] pending→confirmed transition discards upload_date/api_url/web_url (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/05 09:12:13 UTC, 0 replies.
- [I] Several committee guards are missing (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/05 09:15:28 UTC, 2 replies.
- Re: [I] Do not allow keys to be deleted if they have been used to sign a release (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/06 15:19:05 UTC, 1 replies.
- Re: [I] Track per-project security metadata in ATR (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/06 15:33:18 UTC, 0 replies.
- Re: [I] save "Download Path Suffix" configuration (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/06 15:33:19 UTC, 0 replies.
- Re: [I] Alpha3 Track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/06 15:36:42 UTC, 0 replies.
- [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 16:14:09 UTC, 1 replies.
- [PR] Bump actions/cache from 5.0.5 to 6.1.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 16:14:23 UTC, 1 replies.
- Re: [I] Redirect a uniform release artifact url pattern into the ASF's preferred urls (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/06 16:23:54 UTC, 0 replies.
- [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 17:34:40 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 17:34:52 UTC, 1 replies.
- [PR] Bump actions/cache from 5.0.4 to 6.1.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 17:35:10 UTC, 1 replies.
- Re: [PR] Bump actions/cache from 5.0.4 to 5.0.5 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 17:35:12 UTC, 1 replies.
- Re: [PR] Bump astral-sh/setup-uv from 8.0.0 to 8.2.0 (tooling-actions) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/06 17:59:13 UTC, 0 replies.
- Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/06 19:11:33 UTC, 5 replies.
- [I] Admin page for seeding Projects and Artifact Catalog (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/06 19:52:54 UTC, 1 replies.
- Re: [I] Add committee permissions (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/07 13:15:57 UTC, 1 replies.
- [I] Release archival actions (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/07 15:40:36 UTC, 2 replies.
- [I] Apply project and artifact catalog seeds (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/07 15:57:38 UTC, 0 replies.
- Re: [I] Committee release catalog schema and model complete (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/07 16:22:56 UTC, 0 replies.
- [I] Order of tiles on Releases page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/07 16:43:54 UTC, 1 replies.
- Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/07 19:47:28 UTC, 7 replies.
- Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 12:54:27 UTC, 4 replies.
- [I] Beta documentation updates (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 13:12:51 UTC, 0 replies.
- [I] Make banner message configurable by environment (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 13:19:00 UTC, 4 replies.
- [PR] Bump actions/setup-java from 5.3.0 to 5.5.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 16:34:01 UTC, 1 replies.
- Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 16:34:03 UTC, 1 replies.
- [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/08 16:35:35 UTC, 3 replies.
- [PR] Update components (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 18:05:01 UTC, 1 replies.
- [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 19:00:39 UTC, 6 replies.
- [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 19:13:10 UTC, 2 replies.
- [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 19:21:43 UTC, 8 replies.
- [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 19:24:22 UTC, 4 replies.
- [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 19:39:20 UTC, 7 replies.
- [I] No obvious way how to resolve concerns (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 19:49:27 UTC, 4 replies.
- [I] Specifying revision is harmful/not needed (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 20:04:56 UTC, 7 replies.
- [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 20:06:00 UTC, 5 replies.
- [I] Security concern about stack-traces (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/08 20:15:14 UTC, 4 replies.
- Re: [I] Rework the users guide component page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/08 20:45:42 UTC, 0 replies.
- [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/07/09 04:24:10 UTC, 3 replies.
- Re: [I] Security (defense-in-depth) concern about stack-traces (tooling-releases-client) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 12:58:48 UTC, 1 replies.
- Re: [I] Document the scope of ATR (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 13:48:32 UTC, 1 replies.
- Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 14:08:00 UTC, 1 replies.
- [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 14:12:14 UTC, 1 replies.
- [I] Document SLSA attestations (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 14:15:15 UTC, 1 replies.
- [I] Revisit build attestations and SLSA (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/09 16:10:20 UTC, 0 replies.
- [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/09 19:09:20 UTC, 13 replies.
- Re: [PR] [INFRA] Set up default rulesets for default and release branches (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/09 19:12:19 UTC, 0 replies.
- [I] Files not found for release with multiple directory (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/09 20:18:22 UTC, 3 replies.
- Re: [PR] Add SBOM workflows documentation (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/07/10 11:16:46 UTC, 0 replies.
- [PR] Bump soupsieve from 2.8 to 2.8.4 (tooling-docs) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/10 13:17:08 UTC, 1 replies.
- [I] Document SBOM workflow for users (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 14:21:51 UTC, 0 replies.
- [I] Update the tutorial (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 14:22:45 UTC, 0 replies.
- Re: [I] Missing Centralized Documentation of Resource-Intensive Operations (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 14:27:38 UTC, 2 replies.
- Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 14:33:36 UTC, 2 replies.
- [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 15:46:29 UTC, 2 replies.
- Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 16:56:43 UTC, 1 replies.
- [I] Add management options for KEYS files, and remove regenerate all (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 16:57:02 UTC, 2 replies.
- [I] Signing SBOMs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 16:59:56 UTC, 5 replies.
- Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 18:00:29 UTC, 1 replies.
- [I] Fix the embargoed release wording (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 18:30:46 UTC, 3 replies.
- Re: [I] Build ATR production server (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 18:42:40 UTC, 1 replies.
- [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 18:52:00 UTC, 4 replies.
- [I] Remove the downloads area feature (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 18:59:58 UTC, 11 replies.
- [PR] Adjust downloads menu target (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/10 20:44:02 UTC, 8 replies.
- Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/11 07:50:04 UTC, 0 replies.
- Re: [PR] Bump com.palantir.javaformat:palantir-java-format from 2.93.0 to 2.94.0 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/11 08:09:22 UTC, 0 replies.
- Re: [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/11 14:43:19 UTC, 0 replies.
- Re: [PR] Bump org.apache:apache from 38 to 39 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/11 14:54:05 UTC, 0 replies.
- Re: [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/07/11 15:16:16 UTC, 0 replies.
- [I] The `atr check concerns` requires revision (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/12 22:43:24 UTC, 2 replies.
- [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/12 22:48:45 UTC, 2 replies.
- [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/12 22:55:29 UTC, 2 replies.
- [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/12 23:20:43 UTC, 3 replies.
- [I] When required resources are down what happens (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/13 13:21:03 UTC, 13 replies.
- [I] Client HEAD broke against server [main] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 15:46:16 UTC, 2 replies.
- [I] Client HEAD broke against server [arm] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 15:50:01 UTC, 10 replies.
- [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:14:31 UTC, 2 replies.
- [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:25:17 UTC, 1 replies.
- [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:25:31 UTC, 1 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:25:39 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:25:43 UTC, 1 replies.
- [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.20 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 16:25:51 UTC, 2 replies.
- [I] Client SBOM functionality (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/13 16:57:10 UTC, 3 replies.
- [I] Enhance SBOM report (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/13 17:00:03 UTC, 1 replies.
- [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/13 17:01:50 UTC, 4 replies.
- [I] Allow checksum generation without signature (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/13 17:03:22 UTC, 2 replies.
- [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 17:34:56 UTC, 1 replies.
- [I] Generated SBOM missing spec information for CDX check (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/14 13:04:43 UTC, 2 replies.
- [I] Do not record recurring tasks in the database, but log them to a file instead (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/14 15:59:35 UTC, 2 replies.
- [I] Ensure that uploaded files are streamed (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/14 16:02:05 UTC, 0 replies.
- [PR] Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 16:23:55 UTC, 1 replies.
- [PR] Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 16:23:56 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.1 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 20:23:20 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.36.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 20:24:51 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.36.2 to 4.36.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 20:25:58 UTC, 1 replies.
- [PR] Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 20:26:13 UTC, 1 replies.
- [PR] Bump docker/build-push-action from 7.2.0 to 7.3.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 20:26:22 UTC, 1 replies.
- [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/15 09:50:49 UTC, 4 replies.
- [PR] Bump js-yaml from 3.14.2 to 3.15.0 in /website (tooling-gofannon) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 12:48:27 UTC, 0 replies.
- [GH] #1400 - Initial stab at SBOM check (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/15 12:59:20 UTC, 1 replies.
- [PR] Bump the codeql-action group with 2 updates (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 13:05:57 UTC, 3 replies.
- Re: [PR] Bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 13:06:03 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action/init from 4.36.3 to 4.37.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 13:06:07 UTC, 1 replies.
- [PR] Bump advanced-security/dismiss-alerts from 2.0.2 to 2.0.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 13:06:33 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/15 13:06:45 UTC, 1 replies.
- [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/15 16:28:36 UTC, 6 replies.
- [I] Expired keys accepted for signing check (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/16 10:39:05 UTC, 7 replies.
- [I] Make some check results more prominent, CTA style (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/16 14:42:03 UTC, 2 replies.
- [PR] Bump actions/setup-java from 5.5.0 to 5.6.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/16 16:24:23 UTC, 0 replies.
- [I] Review the handling and treatment of signing subkeys throughout ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/16 16:52:13 UTC, 2 replies.
- [I] Ensure that key revocation is tracked for signature verification (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/16 16:57:22 UTC, 3 replies.
- [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/07/16 19:40:50 UTC, 2 replies.
- [PR] #1417 - Support for subkeys (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/17 11:00:42 UTC, 4 replies.
- Re: [I] Attic process track (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/17 11:19:05 UTC, 2 replies.
- [I] Add a cooldown period to pre-commit configuration (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/17 19:23:30 UTC, 1 replies.
- [I] Inefficient queries are causing very long page loads (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/20 14:02:37 UTC, 2 replies.
- [I] Improve the UX of check results (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/20 14:39:48 UTC, 2 replies.
- [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 16:30:03 UTC, 1 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 16:41:01 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 8.3.0 to 8.3.2 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 17:40:27 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.5.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 17:40:50 UTC, 1 replies.
- [I] Recycle the ATR cap-test token (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/20 23:34:01 UTC, 3 replies.
- Re: [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/07/21 00:11:24 UTC, 7 replies.
- [I] CAP approval of archived release leaves extra notifications (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/21 12:55:16 UTC, 2 replies.
- [I] Emit the project's effective apache-rat excludes as a .rat-excludes file at upload time [tooling-atr-maven-plugin] - posted by "ascheman (via GitHub)" <gi...@apache.org> on 2026/07/21 15:14:54 UTC, 6 replies.
- [I] Honor an uploaded .rat-excludes file in the RAT check (tooling-trusted-releases) - posted by "ascheman (via GitHub)" <gi...@apache.org> on 2026/07/21 15:15:16 UTC, 10 replies.
- [I] Set up IP blocking configuration for ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/21 16:25:20 UTC, 0 replies.
- [PR] fix: In ReleaseManager.record() (atr/storage/writers/distributions.py) (tooling-trusted-releases) - posted by "singlaamitesh (via GitHub)" <gi...@apache.org> on 2026/07/21 19:05:29 UTC, 0 replies.
- [PR] fix: Replaced the negative 'has any scheme' check in to_uri_list with a (tooling-trusted-releases) - posted by "singlaamitesh (via GitHub)" <gi...@apache.org> on 2026/07/21 19:05:36 UTC, 1 replies.
- [PR] fix: Verified the documentation gap by reading the storage writers, SSH (tooling-trusted-releases) - posted by "singlaamitesh (via GitHub)" <gi...@apache.org> on 2026/07/21 19:05:38 UTC, 2 replies.
- Re: [I] No Update Timeframe or Monitoring for Dockerfile-Installed External Tools (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 20:12:40 UTC, 1 replies.
- Re: [I] Study replacing repository.apache.org (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 20:26:49 UTC, 0 replies.
- Re: [I] OAuth Client Does Not Request Explicit Scopes (Principle of Least Privilege) (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 21:23:54 UTC, 1 replies.
- [I] Merge asfquart PRs and use main for ATR (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 23:00:09 UTC, 3 replies.
- [I] Manage ATR secrets using Bitwarden and Puppet Archive module (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 23:27:08 UTC, 0 replies.
- [I] Reorganize User's guide around these chapters (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 23:38:52 UTC, 0 replies.
- [I] Write Beta Announcement (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/21 23:45:17 UTC, 0 replies.
- [I] [Discuss] Dependency release chains (tooling-trusted-releases) - posted by "cstamas (via GitHub)" <gi...@apache.org> on 2026/07/22 02:51:23 UTC, 0 replies.
- [I] Review the display of signing subkeys throughout ATR (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/22 10:25:04 UTC, 0 replies.
- [I] Security dashboard (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/22 15:14:03 UTC, 0 replies.
- [I] Fix bugs associated with the `finished` directory (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/22 16:11:04 UTC, 2 replies.
- [I] Seeded podlings showing under incubator PMC (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/22 16:38:00 UTC, 1 replies.
- [I] Validate template variables on entry instead of on usage (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/22 16:48:20 UTC, 3 replies.
- [I] Improve the release directory page (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/22 17:09:32 UTC, 1 replies.
- [I] Live dist watcher not cataloging observed releases (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/22 17:10:51 UTC, 2 replies.
- [I] Improve vote forms (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/22 17:11:24 UTC, 2 replies.
- Re: [I] Investigate remote promotion of artifacts on third party platforms (tooling-trusted-releases) - posted by "andrewmusselman (via GitHub)" <gi...@apache.org> on 2026/07/22 19:09:32 UTC, 1 replies.
- [PR] Bump dompurify from 3.4.11 to 3.4.12 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/23 02:11:19 UTC, 2 replies.
- [I] Static release catalog website (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/23 18:07:23 UTC, 2 replies.
- [I] Consider more extensive project validation before a release can be created (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/24 15:11:51 UTC, 5 replies.
- [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.21 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/24 16:28:33 UTC, 0 replies.
- [I] Allow more tasks to be retried (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/27 13:55:04 UTC, 6 replies.
- [PR] Prevent stale task workers from overwriting newer task results (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/27 16:39:18 UTC, 2 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 16:57:41 UTC, 1 replies.
- [PR] Bump actions/setup-python from 6.3.0 to 7.0.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 16:57:48 UTC, 1 replies.
- [I] Bug catalog atr certified logo unconstrained (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:16:01 UTC, 1 replies.
- [I] Improvement catalog use a pill button for artifacts.json (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:19:43 UTC, 1 replies.
- [I] Retired incubator podlings are not in the Attic (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:24:00 UTC, 1 replies.
- [I] Incubator page should be where current an retired podlings are cataloged (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:29:03 UTC, 0 replies.
- [I] The attic page is special (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:33:52 UTC, 1 replies.
- [I] Main catalog page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:41:41 UTC, 1 replies.
- [I] Footer add trademark attribution (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 17:48:16 UTC, 1 replies.
- [PR] Bump actions/setup-python from 6.3.0 to 7.0.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 18:14:09 UTC, 1 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 18:14:15 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.5.0 to 5.6.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 18:14:40 UTC, 1 replies.
- [PR] Add trademarks to the footer (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 18:57:25 UTC, 1 replies.
- [I] Catalog project page provide a link to the KEYS (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/27 20:00:08 UTC, 1 replies.
- Re: [I] Incubator page should be where current and retired podlings are cataloged (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/28 15:19:51 UTC, 0 replies.
- [I] Show top-level project releases on PMC page (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/28 15:56:37 UTC, 1 replies.
- [I] PMC datamodel changes (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/28 15:58:50 UTC, 1 replies.
- [I] SBOM public domain licenses are category A (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/28 17:03:33 UTC, 2 replies.
- [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.1 to 1.1.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 18:30:11 UTC, 0 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 18:30:21 UTC, 0 replies.
- [I] Add a CI test for applying migrations to a database with mocked data (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/28 19:43:01 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 20:48:57 UTC, 1 replies.
- [PR] Bump actions/setup-python from 6.3.0 to 7.0.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 20:49:15 UTC, 1 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 20:49:40 UTC, 1 replies.
- [I] Add .htaccess rewrite rule for purl support (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/28 22:00:46 UTC, 2 replies.
- [I] Render releases with cycle information (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/29 15:05:40 UTC, 1 replies.
- [I] Remove the finished folder and replace it with metadata (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/29 18:15:37 UTC, 0 replies.
- [I] Ensure that storage interface methods are all bound to committee where appropriate (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/29 19:01:05 UTC, 2 replies.
- [I] Fix remaining problems with task management (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/29 19:03:28 UTC, 0 replies.
- [I] Fix a potential regular expression denial of service attack (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/29 19:06:22 UTC, 0 replies.
- Re: [I] FAQs on ATR for legal release policy (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/30 15:20:00 UTC, 0 replies.
- [I] SBOM facility revision (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/30 16:26:09 UTC, 0 replies.
- [I] Look into Fluo releases missing from catalog (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/30 16:49:43 UTC, 0 replies.
- [I] Resolve duplication/crossover between ATR catalog page and static catalog page (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/30 16:51:28 UTC, 2 replies.
- [I] External SBOM functionality (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/07/30 17:19:26 UTC, 0 replies.
- [I] Metadata for ATR releases should include a vote thread url (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/07/30 22:36:56 UTC, 1 replies.