You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by sb...@apache.org on 2026/04/24 20:01:18 UTC
(tooling-trusted-releases) branch altera updated (c8229307 -> e45a885c)
This is an automated email from the ASF dual-hosted git repository.
sbp pushed a change to branch altera
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
from c8229307 Rename distribute to publish in the announcement UI
add 12dfbfd1 Add missing JS
add 60bfe60a #1071 - Add SBOM generation
add 2196f1e0 #1071 - SBOM generation: docker caching
add 279815ab #1071 - SBOM generation: add to main CI
add 99ef386e Use shared field validation for policy form data
add 9a2875b8 #463/#464 - mirror correct schema for data from datasource
add b5cada54 #1069 - SHA check for CycloneDX and Syft installer
add e7220681 Add an rsync size limit per file, above which the file is skipped
add 33411c46 Clear JWTs when the page display status changes
add 4408f253 Add a wheelhouse for a temporary version of rpgp-py 0.19.6
add 667681e9 Update dependencies, including the rpgp-py wheelhouse
add 6f047be1 Fix a problem with resetting SSH state in Playwright tests
add 1182d3cd Fix a problem with e2e tests
new e45a885c Classify some JAR files as source
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/generatesbom.yml | 39 +++++++++
.pre-commit-config.yaml | 2 +-
Dockerfile.alpine | 14 +++-
atr/classify.py | 8 +-
atr/datasources/apache.py | 18 +++-
atr/models/api.py | 24 +++++-
atr/models/validation.py | 16 ++++
atr/shared/projects.py | 6 +-
atr/ssh.py | 19 +++--
.../src/{ignore-form-change.js => form-confirm.js} | 18 ++--
atr/static/js/ts/create-a-jwt.js | 47 ++++++++---
atr/static/js/ts/create-a-jwt.js.map | 2 +-
atr/static/ts/create-a-jwt.ts | 63 ++++++++++----
atr/storage/writers/policy.py | 7 +-
atr/util.py | 8 +-
pip-audit.requirements | 18 ++--
playwright/test.py | 22 +++--
pyproject.toml | 11 ++-
tests/e2e/tokens/helpers.py | 16 +++-
tests/e2e/tokens/test_post.py | 9 +-
tests/unit/test_policy_update_args.py | 79 ++++++++++++++++++
.../conftest.py => unit/test_ssh_rsync_write.py} | 44 +++++-----
uv.lock | 96 +++++++++++-----------
wheelhouse/rpgp-py-v0.19.6.html | 15 ++++
24 files changed, 429 insertions(+), 172 deletions(-)
create mode 100644 .github/workflows/generatesbom.yml
copy atr/static/js/src/{ignore-form-change.js => form-confirm.js} (68%)
create mode 100644 tests/unit/test_policy_update_args.py
copy tests/{e2e/tokens/conftest.py => unit/test_ssh_rsync_write.py} (56%)
create mode 100644 wheelhouse/rpgp-py-v0.19.6.html
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
(tooling-trusted-releases) 01/01: Classify some JAR files as source
Posted by sb...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
sbp pushed a commit to branch altera
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
commit e45a885cd66925d4726d550f962077721a4a7b71
Author: Sean B. Palmer <se...@miscoranda.com>
AuthorDate: Fri Apr 24 21:00:57 2026 +0100
Classify some JAR files as source
---
atr/classify.py | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/atr/classify.py b/atr/classify.py
index 541ecb2a..1b5882fb 100644
--- a/atr/classify.py
+++ b/atr/classify.py
@@ -110,6 +110,8 @@ _SRC_SOURCE_RE: Final[re.Pattern[str]] = re.compile(r"(^|[-_.])(project|source|s
_TOKEN_SPLIT_RE: Final[re.Pattern[str]] = re.compile(r"[-_.]+")
+_UNCLASSIFIED_SOURCE_SUFFIXES: Final[frozenset[str]] = frozenset({"-source.jar", "-sources.jar", "-src.jar"})
+
class FileType(enum.Enum):
BINARY = "binary"
@@ -138,7 +140,7 @@ def archive_marker_counts(stem: str, path: pathlib.PurePath) -> tuple[int, int,
return source_count, binary_count, docs_count
-async def classify(
+async def classify( # noqa: C901
path: safe.RelPath,
base_path: safe.StatePath | None = None,
source_matcher: Callable[[str], bool] | None = None,
@@ -170,6 +172,10 @@ async def classify(
return FileType.BINARY
stem = path_str[: search.start()]
if not any(path_str.endswith(suffix) for suffix in detection.QUARANTINE_ARCHIVE_SUFFIXES):
+ if any(path_str.endswith(suffix) for suffix in _UNCLASSIFIED_SOURCE_SUFFIXES):
+ # This is a temporary workaround for some archives that are not yet quarantined
+ # TODO: Remove this once these archives are quarantined
+ return FileType.SOURCE
return FileType.BINARY
if archive_cache_dir is not None:
marker = await _content_markers(archive_cache_dir)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org