You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [I] Dockerfile tool updates available (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 09:18:46 UTC, 1 replies.
- Re: [I] Archiving a flat release reports success but is reverted when the SVN removal fails (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 09:44:27 UTC, 1 replies.
- Re: [I] Hide exception details in Trusted Publisher authentication errors (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 10:02:19 UTC, 1 replies.
- Re: [I] Log and email warnings for Trusted Publisher authentication failures (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 10:35:12 UTC, 2 replies.
- Re: [I] Survey key strength enforcement and grandfathered keys (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 10:56:43 UTC, 3 replies.
- Re: [I] Reorganize User's guide around these chapters (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 11:31:01 UTC, 2 replies.
- Re: [I] Check form size before parsing the body (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 13:42:35 UTC, 2 replies.
- Re: [PR] Bump dompurify from 3.4.13 to 3.4.16 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/01 13:50:21 UTC, 1 replies.
- Re: [I] Omit filesystem paths from file-viewer errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 13:57:16 UTC, 1 replies.
- [I] Discuss: restructure of existing 3rd party distribution method (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/01 13:58:58 UTC, 5 replies.
- Re: [I] Handle empty strings in form string lists (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 14:03:29 UTC, 1 replies.
- [I] Adjust timing on requiring CAP for Release Archival (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 14:13:58 UTC, 4 replies.
- Re: [I] Set explicit LDAP connection and read timeouts (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 14:14:07 UTC, 1 replies.
- Re: [I] Enforce expedited vote-mode consistency in the database (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 14:24:30 UTC, 1 replies.
- Re: [PR] Bump mermaid from 11.16.1 to 12.0.0 in /bootstrap/source (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 14:25:20 UTC, 4 replies.
- Re: [I] Protect policy edits against concurrent updates (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 15:01:48 UTC, 1 replies.
- [I] Discuss email template storage (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 15:28:34 UTC, 13 replies.
- Re: [I] Hide JWT verification details in authentication errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 15:35:00 UTC, 1 replies.
- Re: [I] Update the tutorial for the beta. (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 15:41:59 UTC, 1 replies.
- Re: [I] Omit LDAP base DNs from user-facing errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 15:44:00 UTC, 1 replies.
- Re: [I] Hide SVN command details in announcement errors (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 15:48:57 UTC, 1 replies.
- Re: [I] Normalize session timeouts to three days (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 16:06:50 UTC, 1 replies.
- Re: [I] Review IP forwarding on the tooling VM (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 16:06:59 UTC, 3 replies.
- Re: [I] Revalidate IP restrictions for system JWTs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 16:24:08 UTC, 1 replies.
- [PR] Bump mavenVersion from 3.9.16 to 3.10.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/01 16:27:24 UTC, 1 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.100.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/01 16:27:48 UTC, 2 replies.
- Re: [PR] Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.99.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/01 16:27:52 UTC, 1 replies.
- Re: [I] Restrict state directory visibility (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 16:39:05 UTC, 1 replies.
- Re: [I] Sanitize SVN errors in task records (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 16:51:02 UTC, 1 replies.
- Re: [I] Check committee membership when associating signing keys (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 17:47:48 UTC, 1 replies.
- Re: [I] Discuss TLS DHE parameters (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 18:08:24 UTC, 2 replies.
- Re: [I] Update running and creating tests doc (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/01 18:43:57 UTC, 1 replies.
- Re: [I] Revalidate upstream support for step-up authentication (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 19:41:24 UTC, 2 replies.
- Re: [I] Discuss LDAP and PubSub backend authentication (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 21:12:49 UTC, 1 replies.
- Re: [I] Make suspicious authentication notifications (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 21:16:32 UTC, 2 replies.
- Re: [I] Discuss CSP violation reporting (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/01 21:28:55 UTC, 0 replies.
- Re: [I] Network I/O inside the announcement write transaction (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/02 00:00:28 UTC, 2 replies.
- Re: [I] Discuss cross-origin opener and resource policy headers (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/02 01:47:40 UTC, 1 replies.
- [I] Guide for PMCs moving from the current process (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 08:47:42 UTC, 1 replies.
- [I] Link the user guide to ASF policy and Infra docs (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 08:48:40 UTC, 1 replies.
- [I] Documentation housekeeping (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 08:49:17 UTC, 1 replies.
- [I] Release manager worked examples (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 08:49:48 UTC, 1 replies.
- Re: [I] Rate-limit JWT-authenticated requests by user (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 09:54:55 UTC, 1 replies.
- Re: [I] Remove CAP for Release Archival (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 13:05:49 UTC, 0 replies.
- Re: [I] Add a concise guide to required signing-key settings (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/02 14:07:06 UTC, 0 replies.
- Re: [I] Document file handling in the user and developer guides (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/02 14:46:34 UTC, 1 replies.
- Re: [I] Hash PAT values retained in session cookies (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/02 15:02:12 UTC, 3 replies.
- Re: [I] Restrict hosts for remote key imports (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/02 16:36:21 UTC, 3 replies.
- Re: [I] Discuss validation of OAuth callback identity claims (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/02 16:37:57 UTC, 1 replies.
- Re: [I] Document and support admin notices for credential revocation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/02 16:58:12 UTC, 2 replies.
- Re: [I] [Discuss] Dependency release chains (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/03 00:53:37 UTC, 1 replies.
- [I] Redirect docs links to `atr` code to GitHub. (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/03 17:16:18 UTC, 3 replies.
- [I] Prepare for Glasgow conference track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/04 19:24:53 UTC, 1 replies.
- [I] ATR presentation (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/04 19:27:07 UTC, 6 replies.
- [I] ATR workshop (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/04 19:28:13 UTC, 5 replies.
- [I] ATR hackathon (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/04 19:29:35 UTC, 5 replies.
- Re: [I] Add cross-origin opener and resource policy headers (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/05 13:09:22 UTC, 1 replies.
- Re: [I] Add a CI test for applying migrations to a database with mocked data (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 14:42:04 UTC, 1 replies.
- Re: [I] Environmental hardening track (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 14:42:20 UTC, 0 replies.
- Re: [I] Documentation updates (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/05 15:46:23 UTC, 0 replies.
- Re: [I] Show in the UI that IPMC members' first round podling votes are binding (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 15:50:47 UTC, 2 replies.
- Re: [I] Self-hosted action runners for Distribution and other Workflows (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/05 16:37:46 UTC, 0 replies.
- [PR] Bump urllib3 from 2.7.0 to 2.8.0 (tooling-docs) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/05 17:21:07 UTC, 1 replies.
- [I] Change PURL format (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/05 18:46:56 UTC, 8 replies.
- Re: [I] Check ASVS 16.1.1 logging inventory requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 19:06:03 UTC, 0 replies.
- Re: [I] Check ASVS 16.3.3 security event logging in ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 19:11:49 UTC, 0 replies.
- Re: [I] Check ASVS 3.1.1 browser security documentation requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/05 19:13:51 UTC, 0 replies.
- [PR] Bump virtualenv from 20.36.1 to 21.7.13 (tooling-docs) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/05 19:15:06 UTC, 1 replies.
- [I] Align P6 environments (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/06 01:55:59 UTC, 1 replies.
- Re: [I] Reject CR/LF in email subjects (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 14:15:31 UTC, 1 replies.
- Re: [I] Require secure transport for the PubSub URL (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 14:53:43 UTC, 1 replies.
- Re: [I] Set explicit permissions for secrets backups (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 15:21:14 UTC, 4 replies.
- Re: [I] Set up IP blocking configuration for ATR (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 16:12:22 UTC, 1 replies.
- Re: [I] Bugs and discussions track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/06 16:17:11 UTC, 0 replies.
- Re: [I] Report worker-pool saturation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 18:36:10 UTC, 1 replies.
- Re: [I] Document browser feature requirements and behaviour when unavailable (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/06 19:31:14 UTC, 1 replies.
- [I] Search for subprojects shows all subprojects (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/10/06 19:56:01 UTC, 5 replies.
- [PR] Bump the codeql-action group with 2 updates (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/06 20:25:12 UTC, 3 replies.
- [I] unexpected key not in schema 'announce_release_template_url' in ASF yml (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/07 21:01:42 UTC, 5 replies.
- Re: [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 (tooling-actions) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/08 15:09:47 UTC, 0 replies.
- [I] Improvement in template URL in UI (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/08 20:45:14 UTC, 2 replies.
- [I] Retire project in ATR (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/11 17:35:07 UTC, 1 replies.
- Re: [I] Add a suggestion for when SHA-256 is mixed with SHA-512 (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 13:34:20 UTC, 2 replies.
- Re: [I] Remove commented out LDAP checks and replace with an explanation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 14:10:08 UTC, 2 replies.
- [PR] Replace Rat by RAT and use ALL for exclusion config (tooling-trusted-releases) - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/10/12 14:54:36 UTC, 6 replies.
- Re: [I] Let users terminate individual or all active sessions (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 15:11:14 UTC, 2 replies.
- Re: [I] Log logout events (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 15:32:53 UTC, 2 replies.
- [I] Review which RAT standard exclusions are used by default (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 15:41:22 UTC, 9 replies.
- Re: [PR] fix: Replace Rat by RAT (tooling-trusted-releases) - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/10/12 15:49:50 UTC, 3 replies.
- Re: [I] Limit form list fields to 1000 items (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 16:14:20 UTC, 2 replies.
- [I] Discuss how to make biome more convenient in pre-commit (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 16:24:06 UTC, 0 replies.
- Re: [I] Create a small inventory of all application logs (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 17:57:26 UTC, 2 replies.
- Re: [I] Add a check for crashed quarantines (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/12 19:04:43 UTC, 2 replies.
- [I] Show version of RAT being used and integrate RAT into dependabot (tooling-trusted-releases) - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/10/12 21:58:15 UTC, 6 replies.
- [I] Add a client section to the documentation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 13:27:53 UTC, 2 replies.
- Re: [I] Integration with Apache Committee Report Helper (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 13:55:19 UTC, 1 replies.
- [I] Support for multi-repository releases (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/13 14:01:11 UTC, 1 replies.
- [I] Security forced releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 14:06:31 UTC, 8 replies.
- [I] PMC members can force completion of vote early (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 14:07:46 UTC, 3 replies.
- [I] When a Ratis release was archived two artifacts were not removed (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 14:11:39 UTC, 3 replies.
- Re: [I] Document SLSA attestations (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 14:15:29 UTC, 0 replies.
- [I] Check into creating source sboms using syft (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/13 14:19:38 UTC, 1 replies.
- Re: [I] Require HTTPS in SVN trusted-URL validation (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 14:48:22 UTC, 1 replies.
- Re: [I] Explicitly configure LDAP TLS versions and cipher suites (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 15:02:32 UTC, 1 replies.
- Re: [I] Bound vote duration and upload content in API models (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 16:04:51 UTC, 1 replies.
- Re: [PR] Bump version.slf4j from 1.7.36 to 2.0.20 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/13 16:23:14 UTC, 2 replies.
- Re: [I] Add the secondary path containment check to upload_files (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 19:36:02 UTC, 1 replies.
- Re: [I] CC and BCC fields in vote and announcement forms should be radio buttons (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/13 19:58:07 UTC, 1 replies.
- [I] Rename project keys (tooling-trusted-releases) - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/13 20:41:39 UTC, 0 replies.
- [PR] Bump apache/infrastructure-actions/allowlist-check from 69afc125e535c4c41e7f1b7470f583087e0f344b to 1a529f6db9a40ded1cc91759e638ef3e1b39b7b5 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/13 21:24:02 UTC, 0 replies.
- [PR] Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.102.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/13 21:33:23 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.4 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/13 21:33:38 UTC, 1 replies.
- Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.3 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/13 21:33:43 UTC, 1 replies.
- [PR] Bump apache/infrastructure-actions/allowlist-check from 69afc125e535c4c41e7f1b7470f583087e0f344b to 1a529f6db9a40ded1cc91759e638ef3e1b39b7b5 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/14 01:04:00 UTC, 0 replies.
- [I] Why use SHA3 when policy is to use SHA? (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/10/14 10:31:26 UTC, 4 replies.
- [PR] [CI] Pin pre-commit hooks to SHA for security (tooling-docs) - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/10/14 14:53:54 UTC, 0 replies.
- [I] Use the project download path with `--auto-publish` (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/14 15:03:46 UTC, 0 replies.
- [I] Include the tally when resolving a vote (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/14 15:04:51 UTC, 2 replies.
- [I] Make `staging` optional and remove `details` in `atr distribution record` (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/14 15:06:01 UTC, 2 replies.
- [I] Support CC and BCC for release announcements (tooling-releases-client) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/14 15:07:05 UTC, 2 replies.
- Re: [I] Verify ASVS 13.3.4 key-rotation requirements (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/14 18:33:02 UTC, 1 replies.
- [PR] Bump anchore/sbom-action from 0.24.2 to 0.24.3 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/14 20:55:14 UTC, 1 replies.
- [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.24 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/14 22:14:37 UTC, 1 replies.
- Re: [I] CSP violation reporting pilot (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/15 05:03:14 UTC, 2 replies.
- [I] Discuss design of page with SHA3 and SWHID for revisions adding vote signing of mechanisms (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/15 05:18:57 UTC, 0 replies.
- Re: [I] Check whether there are corresponding artifacts in dist/dev throughout (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 15:01:37 UTC, 1 replies.
- Re: [I] How to allow for the two rounds of Incubator votes to overlap (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 15:28:22 UTC, 2 replies.
- Re: [I] Noisy secrets track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 15:55:42 UTC, 2 replies.
- Re: [I] Noisy secrets leak investigation (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 15:59:24 UTC, 1 replies.
- Re: [I] Discuss with Security if Dashboards meet their requirements (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 19:14:25 UTC, 1 replies.
- [I] Discuss CRA attestations needed (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/16 19:45:45 UTC, 0 replies.
- [I] Nightly e2e tests are failing [main] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/10/17 01:23:41 UTC, 2 replies.
- [I] Redefine Reproduciblity (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 05:20:47 UTC, 0 replies.
- [I] Fix up PMC projects (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 05:24:39 UTC, 0 replies.
- [I] upload check according to mask or pattern (tooling-trusted-releases) - posted by "DaanHoogland (via GitHub)" <gi...@apache.org> on 2026/10/17 09:14:59 UTC, 4 replies.
- [I] verifying binding votes (tooling-trusted-releases) - posted by "DaanHoogland (via GitHub)" <gi...@apache.org> on 2026/10/17 09:19:55 UTC, 0 replies.
- Re: [I] Noisy secrets python module (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 16:20:19 UTC, 1 replies.
- [I] Inform GitHub about our noisy secret pattern. (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 16:21:27 UTC, 1 replies.
- Re: [I] Use a prefix for all secret tokens, and inform selected third party scanners (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 16:22:54 UTC, 1 replies.
- Re: [I] Study replacing repository.apache.org (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 17:07:02 UTC, 1 replies.
- Re: [I] Operational training (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/17 20:24:47 UTC, 0 replies.
- [PR] Allow hidden files when comparing release source trees (tooling-trusted-releases) - posted by "tisonkun (via GitHub)" <gi...@apache.org> on 2026/10/18 10:56:35 UTC, 1 replies.
- [I] New Policy around Reproducible Releases (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/18 15:04:17 UTC, 1 replies.
- [I] Improved Artifact Checks Track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/18 15:35:35 UTC, 0 replies.
- [I] Run comprehensive license and notice AI skill as a check (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/18 15:39:32 UTC, 2 replies.
- [I] Attempt to address old artifact release dates for 2014-10-30 (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 08:32:26 UTC, 4 replies.
- [I] Commit SHA on upload inconsistency (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 08:34:48 UTC, 2 replies.
- [I] Create activity endpoint (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 08:36:29 UTC, 4 replies.
- [I] Attic catalog page - reorganise (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 09:03:37 UTC, 2 replies.
- Re: [I] Maven - Rename project keys (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 10:20:54 UTC, 5 replies.
- Re: [I] Maven - Retire project in ATR (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/19 11:18:20 UTC, 5 replies.
- Re: [I] Log authorization denials and add an irregular events dashboard (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/19 15:19:56 UTC, 1 replies.
- Re: [I] Ensure that all attempts to bypass security controls are logged with reasons (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/19 15:20:06 UTC, 1 replies.
- Re: [I] Improve and document contextual validation rules (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/19 16:44:11 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/19 17:29:04 UTC, 1 replies.
- [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 (tooling-releases-client) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/19 17:29:11 UTC, 1 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.1.0 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/19 17:30:22 UTC, 1 replies.
- Re: [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/19 17:30:29 UTC, 1 replies.
- [PR] Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (tooling-actions) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/19 18:19:30 UTC, 1 replies.
- [I] Fix some issues with symlinks in the comparison task (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/19 18:36:05 UTC, 2 replies.
- Re: [I] Improve session testing by using more realistic workflows (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/19 19:45:02 UTC, 3 replies.
- [PR] Use push for PR Automation [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/20 08:42:09 UTC, 1 replies.
- Re: [I] Prevent the reuse of detached session objects in database commit contexts (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/20 11:40:57 UTC, 0 replies.
- [I] Add script detection and a few more languages to ATR checks (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/20 15:19:21 UTC, 2 replies.
- [I] Stop unexpected RAT structures being reported as success (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/20 15:20:39 UTC, 2 replies.
- [I] Add RAT tests to CI (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/20 15:22:11 UTC, 2 replies.
- [I] Add the RAT JAR details to the RAT check cache key (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/20 15:23:17 UTC, 3 replies.
- [I] Ensure that multiple detected RAT licenses use the ASF precedence (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/20 15:24:28 UTC, 2 replies.
- [I] Discuss ATR managed project OpenPGP key pairs (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/20 19:38:22 UTC, 0 replies.
- [PR] Build on push only for main branch and fix concurrency in Verify workflow [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/20 20:13:52 UTC, 1 replies.
- [PR] Remove Maven API dependencies from ATR client package [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/20 21:05:49 UTC, 1 replies.
- [PR] Use local copy of ATR logo on the site [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/20 21:26:55 UTC, 1 replies.
- [PR] Bump mermaid from 11.17.2 to 12.1.0 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/20 23:12:34 UTC, 3 replies.
- [PR] Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/20 23:13:23 UTC, 1 replies.
- [I] Client HEAD broke against server [arm] (tooling-trusted-releases) - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/10/21 15:40:22 UTC, 1 replies.
- Re: [I] Email to announce Beta (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/21 19:32:55 UTC, 1 replies.
- [PR] Try ubuntu-26.04 instead of ubuntu-latest [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/21 19:54:34 UTC, 1 replies.
- Re: [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3 [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/21 20:28:41 UTC, 0 replies.
- [I] Bug: Curl should use -fsS here (tooling-trusted-releases) - posted by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/10/22 08:25:03 UTC, 2 replies.
- [I] Releases imported incorrectly (tooling-trusted-releases) - posted by "jungm (via GitHub)" <gi...@apache.org> on 2026/10/22 18:25:14 UTC, 0 replies.
- Re: [I] TomEE - Releases imported incorrectly (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/22 18:45:12 UTC, 3 replies.
- [I] Discuss ATR workflow procedures with OpenDAL (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/22 19:41:29 UTC, 1 replies.
- Re: [PR] Bump the codeql-action group across 1 directory with 2 updates (tooling-trusted-releases) - posted by "sbp (via GitHub)" <gi...@apache.org> on 2026/10/22 19:42:55 UTC, 0 replies.
- [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.3 to 2.22.4 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/22 19:45:38 UTC, 0 replies.
- [PR] Bump dompurify from 3.4.16 to 3.4.17 in /bootstrap/source (tooling-trusted-releases) - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/22 21:07:42 UTC, 3 replies.
- [PR] Upload files with /api/release/store instead of /api/release/upload [tooling-atr-maven-plugin] - posted by "slawekjaranowski (via GitHub)" <gi...@apache.org> on 2026/10/22 21:48:47 UTC, 0 replies.
- Re: [I] External SBOM functionality (tooling-trusted-releases) - posted by "alitheg (via GitHub)" <gi...@apache.org> on 2026/10/23 13:28:44 UTC, 0 replies.
- [I] Lockdown tooling actions (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/23 18:52:45 UTC, 1 replies.
- [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.1.0 to 1.1.1 [tooling-atr-maven-plugin] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/23 19:30:41 UTC, 0 replies.
- [I] During beta 3 track (tooling-trusted-releases) - posted by "dave2wave (via GitHub)" <gi...@apache.org> on 2026/10/23 19:34:56 UTC, 0 replies.