You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by gi...@apache.org on 2026/09/08 20:55:43 UTC
(tooling-trusted-releases) branch dependabot/github_actions/codeql-action-b632086d0b updated (63ee46f8 -> 1866998f)
This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch dependabot/github_actions/codeql-action-b632086d0b
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
discard 63ee46f8 Bump the codeql-action group with 2 updates
add 1839e8a1 #1544 - fix classifier-style SBOM matching
add 57328e2f Paginate artifacts on dynamic catalogue pages
add 432555c6 Make the releases page render more efficiently
add 52dbbc11 Remove CRC-24 checking
add 7aaa110a Split key blocks into certificates more efficiently
add 040e0d43 Prevent resource saturation from KEYS files, but leave big margins
add 680bafc0 Remove code for the entirely unused KEYS import task
add 838f9ffe Improve the error handling for editing metadata
add c118b3ba Allow admins to modify metadata directly
add 1ad82a79 Place the standard limit on KEYS file sizes read from SVN
add 803189cc Use lenient decode when reading KEYS files
add a4621e46 #1499 - Empty dirs in file list
add 2be3f6d6 Combine several admin routes into a dashboard about users
add 92f4a5d8 Add an admin user dashboard form to revoke all user PATs and JWTs
add 76cda0ed Show a list of all current user sessions in the admin users dashboard
add 6506ad99 Add paging to check results and do not show note results
add 364ee1f3 #1517 - break purls down with more classifiers
add f2db7e73 #1517 - Update scid to sid
add 2ff645f9 Change user to users in incorrectly named mailing list addresses
add 1bb79302 Count check results in database queries for efficiency
add 48dc8b0f Paginate check results in the vote phase
add c27cbcba Fix the style of navigation tab links
add 68cd2939 Paginate the list of files on compose pages
add 45d062d6 Paginate the admin list of user sessions
add 3631f270 Add paging to outbound OSV API requests
add 9aae1ff1 Add a system dashboard for admins
add 7c978059 #1544 - improve SBOM pairing
add ce7a14c8 Show the check results of finished releases
add 406e81d5 Remove the SBOM tool score limits, and combine both output streams
add 44feb705 Fix a problem with importing from SVN
add b76c6ba4 Improve the UI documentation for SVN imports
add f71c5de2 Add a catalogue dashboard for admins
add 9791215f #1439 - hide non-signing keys
add e2deffd3 Do not continue to load logos in tests if they start to fail
add f962d39e #1574 - Add link to verification instructions
add 87f3015e #1564 - catalog dashboard
add 208dead6 #1517 - another update to PURL prefixes
add 56ad482d Add a tabbed admin database dashboard
add dfcc468c #1149 - Add logging framework to SBOM CLI
add 9a2009d7 Fix some problems with SBOM license identifier recognition
add 4e986095 Remove a validation which is currently inapplicable
add 8c86a592 Make a couple of small improvements to the distribution watcher
add 2c01c327 Make adjustments to the database dashboard
add 482a3c5c #1572 - add all tables with sensitive redactions
add 46214552 #1554 - SVN rm on archive
add 877f4d76 #1430 - RAT excludes URL
add 9efc3fb5 Base PURL landing page
add 33a6fba2 Add SBOM heatmap analysis code for use in tasks
add 0dd4d7c8 Fix a download path bug and add a regression test
add 75157b6a Allow report pages to be viewed by the public
add 1866998f Bump the codeql-action group across 1 directory with 2 updates
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (63ee46f8)
\
N -- N -- N refs/heads/dependabot/github_actions/codeql-action-b632086d0b (1866998f)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/codeql.yaml | 4 +-
atr/admin/__init__.py | 2985 ++++++++++----------
.../templates/admin-blank.html} | 2 +-
atr/admin/templates/admin-catalog.html | 14 -
atr/admin/templates/browse-as.html | 22 +-
atr/admin/templates/catalog-committee.html | 2 +-
atr/admin/templates/current-release-delete.html | 2 +-
atr/admin/templates/current-releases.html | 185 +-
atr/admin/templates/data-browser.html | 213 +-
atr/admin/templates/ldap-lookup.html | 138 +-
atr/admin/templates/performance.html | 341 ++-
atr/admin/templates/revoke-user-ssh-keys.html | 118 +-
atr/admin/templates/revoke-user-tokens.html | 80 +-
atr/admin/templates/system-tokens.html | 108 +-
atr/admin/templates/update-catalog-site.html | 89 -
atr/admin/templates/update-keys.html | 107 -
atr/admin/templates/update-projects.html | 95 -
atr/admin/templates/validation.html | 58 +-
atr/analysis.py | 46 +-
atr/attestable.py | 52 +-
atr/catalog_site.py | 301 +-
atr/classify.py | 128 +-
atr/cle.py | 2 +-
atr/constants.py | 2 +
atr/db/__init__.py | 4 +
atr/db/interaction.py | 215 +-
atr/docs/authentication-security.md | 2 +-
atr/docs/authorization-security.md | 4 +-
atr/docs/checks.md | 2 +
atr/docs/input-validation.md | 1 -
atr/docs/resource-management.md | 2 +-
atr/docs/sbom-workflows.md | 2 +
atr/docs/tasks.md | 2 -
atr/get/catalog.py | 47 +-
atr/get/checks.py | 143 +-
atr/get/compose.py | 71 +-
atr/get/download.py | 2 +-
atr/get/keys.py | 1 +
atr/get/projects.py | 2 +
atr/get/release.py | 57 +-
atr/get/report.py | 95 +-
atr/get/result.py | 14 +-
atr/get/sbom.py | 68 +-
atr/get/upload.py | 8 +
atr/hashes.py | 6 +
atr/models/api.py | 4 +
atr/models/args.py | 16 +-
atr/models/attestable.py | 11 +
atr/models/results.py | 61 +
atr/models/sql.py | 29 +
atr/models/validation.py | 23 +
atr/{post/notifications.py => notify.py} | 41 +-
atr/pgp.py | 50 +-
atr/post/draft.py | 14 +-
atr/post/keys.py | 4 +-
atr/post/projects.py | 134 +-
atr/post/upload.py | 19 +-
atr/rat_excludes.py | 80 +
atr/render.py | 14 +
atr/sbom/cli.py | 41 +-
atr/sbom/constants/licenses.py | 5 +
atr/sbom/cyclonedx.py | 11 +-
atr/sbom/heatmap.py | 441 +++
atr/sbom/licenses.py | 13 +-
atr/sbom/osv.py | 60 +-
atr/sbom/spdx.py | 19 +-
atr/sbom/utilities.py | 29 +
atr/sessions.py | 13 +
atr/shared/catalog.py | 86 +-
atr/shared/keys.py | 8 +-
atr/shared/projects.py | 12 +
atr/shared/upload.py | 10 +-
atr/static/css/atr.css | 4 +-
atr/static/js/src/admin-update-form.js | 78 -
atr/storage/__init__.py | 8 +
atr/storage/datatypes.py | 10 +-
atr/storage/readers/checks.py | 55 +-
atr/storage/readers/releases.py | 99 +-
atr/storage/writers/announce.py | 41 +-
atr/storage/writers/catalogue.py | 47 +-
atr/storage/writers/keys.py | 105 +-
atr/storage/writers/policy.py | 1 +
atr/storage/writers/release.py | 350 ++-
atr/storage/writers/tokens.py | 11 +
atr/svn/__init__.py | 77 +-
atr/svn/dist.py | 3 +-
atr/svn/keys_reflect.py | 6 +-
atr/tasks/__init__.py | 32 +-
atr/tasks/cap.py | 27 +-
atr/tasks/checks/__init__.py | 19 +
atr/tasks/checks/paths.py | 12 +-
atr/tasks/checks/rat.py | 119 +-
atr/tasks/checks/sbom.py | 22 +-
atr/tasks/keys.py | 16 -
atr/tasks/sbom.py | 23 +-
atr/tasks/svn.py | 97 +-
atr/tasks/svnpub.py | 39 +
atr/templates/_catalog_version.html | 3 +
atr/templates/admin-form.html | 16 -
atr/templates/catalog.html | 40 +-
atr/templates/catalog_site/project.html | 19 +-
atr/templates/catalog_site/project_archive.html | 12 +-
atr/templates/catalog_site/purl.html | 57 +
atr/templates/check-selected-files.html | 34 +
atr/templates/check-selected-path-table.html | 42 +-
atr/templates/check-selected.html | 2 +-
atr/templates/includes/topnav.html | 109 +-
atr/templates/releases-finished.html | 4 +
atr/templates/report-selected-path.html | 191 +-
atr/util.py | 90 +-
atr/validate.py | 10 -
....31_f6b39be8.py => 0124_2026.09.02_b7e2f1a9.py} | 24 +-
....22_f67fc10f.py => 0125_2026.09.08_fbcb11d5.py} | 18 +-
playwright/test.py | 39 +-
tests/e2e/admin/helpers.py | 4 +-
tests/e2e/admin/test_revoke_ssh_keys.py | 4 +-
tests/e2e/admin/test_revoke_tokens.py | 4 +-
tests/e2e/helpers.py | 21 +-
tests/e2e/projects/test_asf_yaml_roundtrip.py | 2 +-
tests/unit/test_admin_data_browser.py | 67 +
tests/unit/test_admin_delete_committee_keys.py | 60 -
tests/unit/test_announce_auto_archive.py | 38 +
tests/unit/test_asf_yaml_export.py | 14 +
tests/unit/test_attestable.py | 13 +
tests/unit/test_catalog.py | 62 +
tests/unit/test_catalog_site.py | 405 +++
tests/unit/test_catalogue_writer.py | 86 +-
tests/unit/test_checker_stats.py | 9 +-
tests/unit/test_checks_rat.py | 74 +
tests/unit/test_checks_reader_paging.py | 100 +
tests/unit/test_checks_tally.py | 103 +
tests/unit/test_cle.py | 4 +-
tests/unit/test_compose_polling.py | 8 +-
tests/unit/test_decompose.py | 1 +
tests/unit/test_download.py | 63 +
tests/unit/test_get_checks_filestats.py | 28 +-
tests/unit/test_get_sbom_tally.py | 18 +-
tests/unit/test_keys_post.py | 22 +
tests/unit/test_keys_reflect.py | 35 +
tests/unit/test_keys_update_gate.py | 20 +-
tests/unit/test_keys_writer.py | 60 +-
tests/unit/test_pgp.py | 37 +
tests/unit/test_projects_post_access.py | 76 +
tests/unit/test_rat_excludes.py | 87 +
tests/unit/test_release_archive_approval.py | 18 +
tests/unit/test_release_writer_archive.py | 115 +
tests/unit/test_releases_catalog.py | 108 +-
.../unit/test_render_page_nav.py | 22 +-
tests/unit/test_report_access.py | 70 +
tests/unit/test_report_reconciliation.py | 12 +-
tests/unit/test_sbom_candidates.py | 59 +
tests/unit/test_sbom_cyclonedx.py | 48 +
tests/unit/test_sbom_heatmap.py | 362 +++
tests/unit/test_sbom_licenses.py | 39 +
tests/unit/test_sbom_osv.py | 52 +
tests/unit/test_sbom_previous.py | 41 +
tests/unit/test_svn_errors.py | 66 +
tests/unit/test_svn_import.py | 54 +
.../unit/test_svn_import_base_path.py | 26 +-
tests/unit/test_svn_unpublish_writer.py | 623 ++++
tests/unit/test_svnpub_unpublish.py | 87 +
...tifications_writer.py => test_tokens_writer.py} | 37 +-
tests/unit/test_util.py | 14 +
163 files changed, 8651 insertions(+), 3828 deletions(-)
copy atr/{templates/layouts/base-admin.html => admin/templates/admin-blank.html} (66%)
delete mode 100644 atr/admin/templates/admin-catalog.html
delete mode 100644 atr/admin/templates/update-catalog-site.html
delete mode 100644 atr/admin/templates/update-keys.html
delete mode 100644 atr/admin/templates/update-projects.html
copy atr/{post/notifications.py => notify.py} (54%)
create mode 100644 atr/rat_excludes.py
create mode 100644 atr/sbom/heatmap.py
delete mode 100644 atr/static/js/src/admin-update-form.js
delete mode 100644 atr/templates/admin-form.html
create mode 100644 atr/templates/catalog_site/purl.html
create mode 100644 atr/templates/check-selected-files.html
copy migrations/versions/{0116_2026.07.31_f6b39be8.py => 0124_2026.09.02_b7e2f1a9.py} (62%)
copy migrations/versions/{0111_2026.07.22_f67fc10f.py => 0125_2026.09.08_fbcb11d5.py} (71%)
create mode 100644 tests/unit/test_admin_data_browser.py
delete mode 100644 tests/unit/test_admin_delete_committee_keys.py
create mode 100644 tests/unit/test_catalog_site.py
create mode 100644 tests/unit/test_checks_reader_paging.py
create mode 100644 tests/unit/test_checks_tally.py
create mode 100644 tests/unit/test_download.py
create mode 100644 tests/unit/test_projects_post_access.py
create mode 100644 tests/unit/test_rat_excludes.py
copy atr/shared/activity.py => tests/unit/test_render_page_nav.py (61%)
create mode 100644 tests/unit/test_report_access.py
create mode 100644 tests/unit/test_sbom_cyclonedx.py
create mode 100644 tests/unit/test_sbom_heatmap.py
create mode 100644 tests/unit/test_svn_import.py
copy atr/shared/activity.py => tests/unit/test_svn_import_base_path.py (55%)
create mode 100644 tests/unit/test_svn_unpublish_writer.py
create mode 100644 tests/unit/test_svnpub_unpublish.py
copy tests/unit/{test_notifications_writer.py => test_tokens_writer.py} (59%)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org