issues@tooling.apache.org, 2026-09

You are viewing a plain text version of this content. The canonical link for it is here.

- Re: [I] SBOM generated by Maven project - Paths Check Errors and so on (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/01 08:15:14 UTC, 14 replies.
- Re: [I] There is no user-tests mailing in beta (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/01 08:15:29 UTC, 0 replies.
- Re: [I] Make adjustments to PURLs, related to SBOMs and CLEs (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/01 08:17:32 UTC, 5 replies.
- Re: [I] ATR could not look up the archived vote thread on lists.apache.org (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/01 13:52:27 UTC, 1 replies.
- [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 14:09:39 UTC, 5 replies.
- [I] Support paging in the API function (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/01 14:18:43 UTC, 0 replies.
- [I] Client HEAD broke against server [main] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 14:24:50 UTC, 8 replies.
- Re: [I] PMC dashboard (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/01 16:04:05 UTC, 0 replies.
- [PR] Change log level from info to error for missing version in ATR [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/09/01 17:08:13 UTC, 1 replies.
- Re: [I] Publish snapshot version to https://repository.apache.org [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/09/01 17:27:16 UTC, 1 replies.
- Re: [I] Support uploads of mvn generated SBOMs [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/09/01 17:28:08 UTC, 1 replies.
- Re: [I] Unbounded Response Sizes on Multiple List Endpoints (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/01 19:29:08 UTC, 1 replies.
- Re: [I] System dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/01 20:07:21 UTC, 4 replies.
- [PR] Bump dulwich from 1.2.12 to 1.2.13 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 20:28:28 UTC, 2 replies.
- [PR] Bump the codeql-action group with 2 updates (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 20:29:04 UTC, 4 replies.
- [I] Cleanup consistency and validation issues (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/01 22:04:17 UTC, 21 replies.
- [I] Discuss committee change operations with Infra (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/01 22:18:54 UTC, 3 replies.
- [PR] #1554 - SVN rm on archive (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/02 13:09:50 UTC, 2 replies.
- [PR] #1517 - break purls down with more classifiers (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/02 13:38:01 UTC, 1 replies.
- Re: [I] Unbounded PGP Key Block Processing in Bulk Operations (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/02 14:21:46 UTC, 2 replies.
- [GH] #1554 - SVN rm on archive (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/02 15:05:55 UTC, 4 replies.
- Re: [I] OAuth Client Does Not Request Explicit Scopes (Principle of Least Privilege) (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 16:53:07 UTC, 2 replies.
- Re: [I] Better error experience when saving changes to a project where you have no rights (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/02 18:09:49 UTC, 2 replies.
- [I] There is no `user@maven.apache.org` ML (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/09/02 20:42:41 UTC, 2 replies.
- Re: [I] Follow svn pubsub for PMC changes (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 22:46:46 UTC, 1 replies.
- Re: [I] Follow podlings.xml for the status changes in podlings (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 22:49:05 UTC, 1 replies.
- [I] Move existing items to a tabbed dashboard page (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 22:59:12 UTC, 1 replies.
- Re: [I] Security dashboard (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 23:14:41 UTC, 1 replies.
- [I] Discuss with Security if Dashboards meet their requirements (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 23:15:24 UTC, 0 replies.
- Re: [I] Infra project dashboard to perform committee lifecycle actions (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/02 23:22:53 UTC, 2 replies.
- Re: [I] Admin dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 15:21:31 UTC, 1 replies.
- Re: [I] Move menu items to the dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 15:21:51 UTC, 1 replies.
- Re: [I] No "Revoke All Tokens for ALL Users" Global Capability (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 15:22:26 UTC, 1 replies.
- Re: [I] Add current user sessions view (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 15:23:05 UTC, 1 replies.
- Re: [I] Honor an uploaded .rat-excludes file in the RAT check (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/03 16:53:49 UTC, 2 replies.
- Re: [I] Make the vast majority of files compatible with `fix_order.sh`, and add to linting (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/03 17:17:18 UTC, 2 replies.
- [I] Add UI to show the check results of finished releases (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 17:28:14 UTC, 2 replies.
- [I] Automatically derive mailing list names (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/03 19:45:03 UTC, 4 replies.
- [PR] feat(util): automatically derive committee user mailing list names (#1567) (tooling-trusted-releases) - posted by "amasen02 (via GitHub)" <gi...@apache.org> on 2026/09/04 02:58:31 UTC, 8 replies.
- Re: [I] Show empty directories in the compose file list (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/04 08:12:13 UTC, 0 replies.
- Re: [I] Data browser must include paging (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/04 09:19:38 UTC, 1 replies.
- Re: [I] OSV API Unbounded Pagination and Detail Fetching (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/04 10:00:09 UTC, 1 replies.
- [I] Fix SVN imports (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/04 12:13:35 UTC, 2 replies.
- Re: [I] Fix an unknown error and the error handling associated with validation JSON SBOMs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/04 12:25:25 UTC, 1 replies.
- [PR] #1505 - first stab at moving config to DB and a UI for it (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/04 13:19:19 UTC, 2 replies.
- [GH] feat(util): automatically derive committee user mailing list names (#1567) (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 16:15:23 UTC, 0 replies.
- Re: [I] Review the display of signing subkeys throughout ATR (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/04 16:34:10 UTC, 0 replies.
- Re: [I] Project features from comdev website (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 17:21:25 UTC, 1 replies.
- Re: [I] Reporter features from comdev (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 17:21:44 UTC, 1 replies.
- [I] Create public `project_releases.json` file on the Release Catalog (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 18:18:51 UTC, 3 replies.
- Re: [I] Integration with Apache Committee Report Helper (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 21:11:06 UTC, 1 replies.
- Re: [I] Integrate ATR with projects vm (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 21:27:35 UTC, 0 replies.
- [I] Add missing tables to the database dashboard (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 21:46:46 UTC, 2 replies.
- [I] Some licenses strings for SBOMs are miscategorized (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 22:19:47 UTC, 6 replies.
- Re: [I] Automated review of dependencies with few maintainers aka "Bernies" (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 22:39:17 UTC, 3 replies.
- Re: [I] External SBOM functionality (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/04 22:40:09 UTC, 1 replies.
- Re: [I] Make adminship work like su (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 20:54:19 UTC, 0 replies.
- Re: [I] Manage ATR secrets using Bitwarden and Puppet Archive module (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 20:54:38 UTC, 0 replies.
- Re: [I] Update the tutorial (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 20:58:52 UTC, 0 replies.
- Re: [I] Update the tutorial for the beta. (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 20:59:56 UTC, 0 replies.
- [I] Add link to verification of release instructions to the catalog (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 21:13:13 UTC, 1 replies.
- [I] Make use of GH Releases or Tags in order to help users of the client know when to update (tooling-releases-client) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 21:21:54 UTC, 0 replies.
- [I] Make use of GH Releases or Tags in order to help users of the client know when to update (tooling-actions) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 21:22:57 UTC, 0 replies.
- [PR] Reorder and expand docs (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 21:50:17 UTC, 2 replies.
- [I] Update running and creating tests doc (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 22:00:17 UTC, 1 replies.
- [I] Update database docs (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/05 22:02:52 UTC, 1 replies.
- Re: [I] Comdev websites track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/07 15:11:30 UTC, 0 replies.
- Re: [I] Add logging framework to SBOM CLI (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/07 16:00:31 UTC, 0 replies.
- Re: [I] Database dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/07 16:03:37 UTC, 1 replies.
- Re: [I] Add OSS project heatmap (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/07 16:24:23 UTC, 4 replies.
- [PR] Bump version.slf4j from 1.7.36 to 2.0.19 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 16:47:24 UTC, 2 replies.
- [I] Move or remove keys admin menu items (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/07 18:19:40 UTC, 2 replies.
- [I] Error: Path cannot contain directory traversal (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/09/08 14:25:52 UTC, 2 replies.
- [I] Error: No ASFQuart session found (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/09/08 14:28:08 UTC, 2 replies.
- [I] Confusing UI (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/09/08 14:39:37 UTC, 3 replies.
- [I] Catalog landing page for bare PURL prefix (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/08 15:10:45 UTC, 4 replies.
- Re: [I] Automatically purge old releases on svn dist/release (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/08 16:08:51 UTC, 0 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.2 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 18:23:04 UTC, 2 replies.
- Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 18:23:06 UTC, 1 replies.
- Re: [I] Error: No ASFQuart session found when VOTING as contributor (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/08 19:54:50 UTC, 1 replies.
- [PR] Bump anchore/sbom-action from 0.24.0 to 0.24.2 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 20:53:16 UTC, 3 replies.
- [PR] Bump ruff from 0.16.4 to 0.16.5 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 20:56:33 UTC, 3 replies.
- [PR] Bump sqlmodel from 0.0.39 to 0.0.42 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 20:56:50 UTC, 3 replies.
- [PR] Bump dulwich from 1.2.12 to 1.2.14 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 20:56:58 UTC, 3 replies.
- [I] Cleanup project catalog (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/08 23:36:53 UTC, 4 replies.
- Re: [I] FAQs on ATR for legal release policy (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/09 15:26:47 UTC, 2 replies.
- Re: [I] Incubator documentation for release management (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/09 16:52:15 UTC, 1 replies.
- [I] Bug: Paging on the ATR current release page loses filter state (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/09 23:00:49 UTC, 2 replies.
- [I] Create a notifications@ list for the ATR beta server to report to (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/10 16:49:25 UTC, 3 replies.
- [I] Fix "Distribute" labels (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/10 18:39:24 UTC, 5 replies.
- [I] security: pin all pre-commit hooks to SHA (tooling-trusted-releases) - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/09/10 23:49:21 UTC, 1 replies.
- [I] security: pin all pre-commit hooks to SHA (tooling-docs) - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/09/11 00:54:00 UTC, 0 replies.
- Re: [I] ATR policy documentation improvements (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/11 14:15:20 UTC, 0 replies.
- Re: [I] Fix a client side ReDoS problem (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/11 14:37:12 UTC, 1 replies.
- [PR] Allow release announcements to the foundation mailing list (tooling-trusted-releases) - posted by "tisonkun (via GitHub)" <gi...@apache.org> on 2026/09/11 14:40:22 UTC, 0 replies.
- [GH] Fix release announcement recipients and sandboxed rsync uploads (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/11 16:22:04 UTC, 1 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.98.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/11 16:24:56 UTC, 2 replies.
- Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/11 16:33:16 UTC, 2 replies.
- Re: [PR] Fix release announcement recipients and sandboxed rsync uploads (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/11 16:36:06 UTC, 1 replies.
- [I] Fix duplicate keys in SBOM augmentation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/11 16:57:08 UTC, 2 replies.
- [I] Committee lifecycle track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/11 18:24:22 UTC, 0 replies.
- Re: [I] Catalog dashboard (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/11 18:28:39 UTC, 0 replies.
- Re: [I] Other Platform Distribution track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/12 17:00:24 UTC, 0 replies.
- [I] Study GitHub action `anchore/sbom-action` (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/13 16:19:50 UTC, 6 replies.
- Re: [I] pending→confirmed transition discards upload_date/api_url/web_url (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/14 11:33:37 UTC, 0 replies.
- [I] Add a blocking check if there are artifacts in dist/dev (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/14 16:21:28 UTC, 0 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 16:27:57 UTC, 0 replies.
- Re: [I] Study replacing repository.apache.org (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/14 18:42:21 UTC, 1 replies.
- Re: [I] Follow pubsub for PMC changes (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/14 18:50:29 UTC, 0 replies.
- [PR] Update the `updates-to-docs` branch (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/14 21:32:32 UTC, 1 replies.
- [PR] Update docs with stubbed expanded section 1.X (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/14 22:25:34 UTC, 1 replies.
- [I] https://releases.apache.org/catalog/asyncband shows two copies of release 0.7.2 (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/09/14 23:20:45 UTC, 3 replies.
- Re: [I] Reorganize User's guide around these chapters (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/15 00:31:27 UTC, 3 replies.
- Re: [I] No Documented Risk-Based Remediation Timeframes for Vulnerable Components (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 08:21:47 UTC, 0 replies.
- Re: [I] General Library Update Timeframe Is Enforced but Undocumented as Policy (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 08:22:06 UTC, 0 replies.
- Re: [I] Concurrent Session Policy Not Documented (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 08:22:27 UTC, 0 replies.
- Re: [I] Missing Authorization Documentation for Distribution/SSH/Keys/Policy/Project Operations (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 08:22:55 UTC, 0 replies.
- [I] Dockerfile tool updates available (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 09:16:25 UTC, 3 replies.
- Re: [I] No Update Timeframe or Monitoring for Dockerfile-Installed External Tools (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 13:31:14 UTC, 1 replies.
- [PR] Bump mermaid from 11.16.1 to 11.17.2 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 14:27:13 UTC, 2 replies.
- [PR] Bump djlint from 1.45.0 to 1.46.1 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 14:27:22 UTC, 2 replies.
- [PR] Bump alembic from 1.19.1 to 1.19.2 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 14:27:46 UTC, 2 replies.
- [PR] Bump aiosmtplib from 5.1.2 to 5.1.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 14:27:53 UTC, 2 replies.
- Re: [I] No Documented Update Timeframe for npm/Frontend Dependencies (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 14:30:35 UTC, 0 replies.
- Re: [I] ASVS documentation issues track (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/15 14:30:46 UTC, 0 replies.
- Re: [I] SBOM Tooling Track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/15 20:10:44 UTC, 0 replies.
- [PR] explicit SVN/ASF distribution area (tooling-trusted-releases) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/09/15 21:26:29 UTC, 1 replies.
- [GH] explicit SVN/ASF distribution area (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/15 21:48:37 UTC, 2 replies.
- Re: [I] Document the scope of ATR (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/15 21:58:50 UTC, 1 replies.
- [PR] point to ATR Trusted Publishing documentation (tooling-actions) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/09/16 06:39:15 UTC, 2 replies.
- [PR] Fix link to Trusted Publishing in documentation (tooling-trusted-releases) - posted by "tisonkun (via GitHub)" <gi...@apache.org> on 2026/09/16 08:24:19 UTC, 3 replies.
- Re: [I] Document SBOM workflow for users (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/16 09:38:12 UTC, 0 replies.
- Re: [PR] Bump the codeql-action group across 1 directory with 2 updates (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/16 13:02:26 UTC, 0 replies.
- [I] Add `make docs` to precommit checks (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/16 14:28:09 UTC, 2 replies.
- [I] Client HEAD broke against server [arm] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 14:50:56 UTC, 2 replies.
- [I] Improve provenance data in ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/16 15:05:55 UTC, 3 replies.
- Re: [I] Discuss if we need self hosted GitHub action runners for distribution workflows (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/16 15:59:42 UTC, 1 replies.
- [I] Self-hosted action runners for Distribution and other Workflows (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/16 16:02:42 UTC, 0 replies.
- [I] Environmental hardening track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/16 16:20:47 UTC, 0 replies.
- [I] Foundation integrations track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/16 16:29:28 UTC, 0 replies.
- [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.23 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 16:24:00 UTC, 2 replies.
- [I] Periodically check and log and notify about validation and consistency errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/17 18:02:57 UTC, 2 replies.
- Re: [I] Discuss upstreaming of certain components (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/17 18:08:18 UTC, 5 replies.
- [I] During beta 2 track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/17 19:10:54 UTC, 0 replies.
- [I] Document the use of ASF modules (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/17 21:34:55 UTC, 2 replies.
- [PR] Bump soupsieve from 2.8.4 to 2.9 (tooling-docs) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 01:48:04 UTC, 4 replies.
- Re: [I] Move appropriate dist watcher config into the database (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/18 14:41:44 UTC, 1 replies.
- [I] Allow an announcement to be queued until downloads become available (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/18 15:24:28 UTC, 1 replies.
- [I] Add polling to make the download status clear (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/18 15:27:26 UTC, 2 replies.
- Re: [I] Allow admin toggle of presentations vote resolution bypass (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/18 16:57:53 UTC, 1 replies.
- [I] Home page add a link to each project's catalog (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/18 19:56:30 UTC, 1 replies.
- [PR] Add the `upload-source-to-atr` action (tooling-actions) - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/09/18 20:23:36 UTC, 16 replies.
- [PR] Bump anyio from 4.12.0 to 4.14.2 (tooling-docs) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 21:25:07 UTC, 2 replies.
- [GH] Add the `upload-source-to-atr` action (tooling-actions) - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/09/19 09:51:11 UTC, 2 replies.
- Re: [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 (tooling-actions) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/19 17:17:52 UTC, 0 replies.
- [I] Tooling actions assure release-on-atr is production quality (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/19 17:30:24 UTC, 3 replies.
- [I] Test `release-on-atr` action and move to production quality (tooling-actions) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/19 17:33:56 UTC, 1 replies.
- [I] Research which PMCs are currently enabled to release via CI and what types of artifacts (tooling-actions) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/19 17:49:47 UTC, 14 replies.
- [PR] add sensitive sign step in the example with link to policy (tooling-actions) - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/09/20 08:36:52 UTC, 1 replies.
- [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 13:53:39 UTC, 2 replies.
- [PR] Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 16:53:59 UTC, 1 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 17:55:20 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 17:55:33 UTC, 1 replies.
- [I] Subprojects where all releases are archived should be archived (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/21 20:45:11 UTC, 1 replies.
- [I] Discuss design flaw with managing the SHA of the release (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/21 20:57:48 UTC, 2 replies.
- [PR] Bump org.apache:apache from 39 to 40 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 17:47:34 UTC, 1 replies.
- Re: [I] Discuss and fix bugs and flaws with managing the SHA of the release (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/22 18:46:24 UTC, 7 replies.
- [PR] Bump docker/build-push-action from 7.3.0 to 7.4.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 20:34:03 UTC, 1 replies.
- [PR] Bump docker/setup-buildx-action from 4.3.0 to 4.4.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 20:34:13 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 20:34:22 UTC, 1 replies.
- [PR] Bump apache/infrastructure-actions/allowlist-check from 1.0.2 to 1.0.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 20:34:27 UTC, 1 replies.
- Re: [PR] Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/23 14:33:54 UTC, 0 replies.
- [I] tooling-actions HEAD broke against server [arm] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 10:14:49 UTC, 1 replies.
- [I] KEYS file generated by ATR not imported with gpg--import (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/24 22:32:24 UTC, 7 replies.
- [PR] Bump version.slf4j from 1.7.36 to 2.0.20 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 16:23:44 UTC, 0 replies.
- [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 16:24:02 UTC, 0 replies.
- [I] Show in the UI that IPMC members' first round podling votes are binding (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/28 13:18:32 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 16:55:18 UTC, 1 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.99.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 16:58:51 UTC, 0 replies.
- [PR] Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 18:16:37 UTC, 1 replies.
- [I] Dist watcher removed the asyncband 0.7.3 release preview after ATR's own automatic publish (tooling-trusted-releases) - posted by "orthur2 (via GitHub)" <gi...@apache.org> on 2026/09/29 10:18:04 UTC, 3 replies.
- Re: [I] Add log sealing (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/29 16:25:21 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.3 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 16:31:06 UTC, 0 replies.
- Re: [I] During beta track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/29 16:34:55 UTC, 0 replies.
- Re: [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/29 16:36:19 UTC, 1 replies.
- Re: [I] Add an `e2e` branch for running the e2e tests in CI (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/09/29 16:51:46 UTC, 2 replies.
- [I] Mark fields managed by .asf.yaml (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/09/29 19:11:18 UTC, 2 replies.
- [I] How to allow for the two rounds of Incubator votes to overlap (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/29 19:17:22 UTC, 0 replies.
- [I] Bug fix track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/29 19:20:16 UTC, 0 replies.
- [I] Remove commented out LDAP checks and replace with an explanation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/29 19:28:21 UTC, 2 replies.
- [PR] Bump mermaid from 11.16.1 to 12.0.0 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 20:24:45 UTC, 0 replies.
- [PR] Bump apache/infrastructure-actions/allowlist-check from 1.0.3 to 1.0.4 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 20:25:24 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 20:25:40 UTC, 1 replies.
- [I] Completed Tracks (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/09/29 21:28:28 UTC, 1 replies.
- [I] Archiving a flat release reports success but is reverted when the SVN removal fails (tooling-trusted-releases) - posted by "orthur2 (via GitHub)" <gi...@apache.org> on 2026/09/30 02:38:24 UTC, 1 replies.
- [I] Nightly e2e tests are failing [main] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 12:53:41 UTC, 1 replies.
- [I] Document and support admin notices for credential revocation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 18:48:15 UTC, 0 replies.
- [I] Let users terminate individual or all active sessions (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 18:48:18 UTC, 0 replies.
- [I] Revalidate upstream support for step-up authentication (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 18:48:20 UTC, 1 replies.
- [I] Survey key strength enforcement and grandfathered keys (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 18:48:23 UTC, 2 replies.
- [I] Set explicit LDAP connection and read timeouts (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 18:48:25 UTC, 0 replies.
- [I] Log logout events (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:03:36 UTC, 1 replies.
- [I] Log and email warnings for Trusted Publisher authentication failures (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:03:42 UTC, 2 replies.
- [I] Log authorization denials and add an irregular events dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:03:46 UTC, 1 replies.
- [I] Discuss suspicious authentication notifications with Infra (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:03:50 UTC, 0 replies.
- [I] Hide JWT verification details in authentication errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:25 UTC, 0 replies.
- [I] Remind users before personal access tokens expire (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:27 UTC, 1 replies.
- [I] Rate-limit JWT-authenticated requests by user (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:33 UTC, 0 replies.
- [I] Discuss validation of OAuth callback identity claims (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:35 UTC, 0 replies.
- [I] Normalize session timeouts to three days (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:39 UTC, 1 replies.
- Re: [I] Revalidate IP restrictions for system JWTs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:14:43 UTC, 1 replies.
- [PR] Bump dompurify from 3.4.13 to 3.4.16 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 19:20:57 UTC, 0 replies.
- [I] Check committee membership when associating signing keys (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:21:54 UTC, 0 replies.
- [I] Reject CR/LF in email subjects (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:21:56 UTC, 1 replies.
- [I] Restrict hosts for remote key imports (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:22:03 UTC, 0 replies.
- [I] Add a concise guide to required signing-key settings (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:22:07 UTC, 1 replies.
- [I] Improve and document contextual validation rules (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:30:23 UTC, 1 replies.
- [I] Enforce expedited vote-mode consistency in the database (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:30:27 UTC, 0 replies.
- [I] Handle empty strings in form string lists (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:30:33 UTC, 0 replies.
- [I] Limit form list fields to 1000 items (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:30:35 UTC, 1 replies.
- [I] Bound vote duration and upload content in API models (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:09 UTC, 0 replies.
- [I] Check form size before parsing the body (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:12 UTC, 1 replies.
- [I] Remove key/value storage (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:18 UTC, 2 replies.
- [I] Protect policy edits against concurrent updates (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:24 UTC, 1 replies.
- [I] Discuss network I/O inside the announcement write transaction (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:28 UTC, 0 replies.
- [I] Document file handling in the user and developer guides (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:37:29 UTC, 1 replies.
- [I] Add project quotas and per-release artifact quotas (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:51:41 UTC, 1 replies.
- [I] Add the secondary path containment check to upload_files (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:51:46 UTC, 0 replies.
- [I] Discuss TLS DHE parameters (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:51:48 UTC, 0 replies.
- [I] Document source-control metadata handling for audits (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:51:54 UTC, 2 replies.
- [I] Verify ASVS 13.3.4 requirements for signing-key rotation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 19:52:06 UTC, 1 replies.
- [I] Explicitly configure LDAP TLS versions and cipher suites (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:00:33 UTC, 1 replies.
- [I] Require secure transport for the PubSub URL (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:00:39 UTC, 0 replies.
- [I] Require HTTPS in SVN trusted-URL validation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:00:41 UTC, 0 replies.
- [I] Report worker-pool saturation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:00:43 UTC, 0 replies.
- [I] Discuss LDAP and PubSub backend authentication (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:26 UTC, 0 replies.
- [I] Review IP forwarding on the tooling VM (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:28 UTC, 0 replies.
- [I] Discuss PAT values retained in session cookies (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:30 UTC, 0 replies.
- [I] Set explicit permissions for secrets backups (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:33 UTC, 0 replies.
- [I] Check ASVS 16.1.1 logging inventory requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:35 UTC, 1 replies.
- [I] Check ASVS 16.3.3 security event logging in ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:40 UTC, 1 replies.
- [I] Restrict state directory visibility (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:11:44 UTC, 0 replies.
- [I] Hide exception details in Trusted Publisher authentication errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:16:26 UTC, 0 replies.
- [I] Omit LDAP base DNs from user-facing errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:16:30 UTC, 0 replies.
- [I] Omit filesystem paths from file-viewer errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:16:32 UTC, 0 replies.
- [I] Hide SVN command details in announcement errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:16:34 UTC, 0 replies.
- [I] Sanitize SVN errors in task records (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:16:40 UTC, 0 replies.
- [I] Check ASVS 3.1.1 browser security documentation requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:20:36 UTC, 1 replies.
- [I] Discuss CSP violation reporting (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:20:41 UTC, 0 replies.
- [I] Discuss cross-origin opener and resource policy headers (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:20:43 UTC, 0 replies.
- [I] Add a check for crashed quarantines (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/09/30 20:20:45 UTC, 1 replies.