You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by ar...@apache.org on 2026/09/16 09:49:48 UTC

(tooling-trusted-releases) branch production updated (43dd6b5e -> 7f9da5b2)

This is an automated email from the ASF dual-hosted git repository.

alitheg pushed a change to branch production
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git


    from 43dd6b5e #1559 - Don't double count ATR releases
     add 5e8c6459 #1067 - add freshness check for npm dependencies
     add e07fcddd Check for SBOM listed dependencies with a high maintenance risk
     add e1e383b6 Add license checking to the SBOM review task
     add dcfdf180 Update dependencies
     add 3ab54f8e #1577 - update database docs
     add ee3ceb01 Display more details about concerns in SBOM report pages
     add 9b3b9086 Update introduction docs
     add 5cbc4024 doc: add more upload options
     add 33b9b9cd #1386 - update SBOM docs
     add fc0a242d Add created date back into json file
     add c04e457a #1590 - some more wording tweaks and introduce strings module
     add 396d497c Move more strings to strings module and abstract some reused error messages
     add 7f9da5b2 Extract some duplicated code in distribution list pages

No new revisions were added by this update.

Summary of changes:
 .github/dependabot.yml                       |   8 +
 .pre-commit-config.yaml                      |   8 +
 atr/api/__init__.py                          |   3 +-
 atr/blueprints/common.py                     |   3 +-
 atr/catalog_site.py                          |   5 +-
 atr/db/interaction.py                        |   3 +-
 atr/docs/database.md                         |  75 ++++++--
 atr/docs/dependency-updates.md               |  24 ++-
 atr/docs/developer-guide.md                  |  15 +-
 atr/docs/index.md                            |   1 +
 atr/docs/introduction-to-atr.md              |  77 +++++++--
 atr/docs/resource-management.md              |   2 +-
 atr/docs/sbom-architecture.md                | 106 ++++++++++++
 atr/docs/sbom-workflows.md                   | 167 +++---------------
 atr/docs/staging-and-voting.md               |  11 +-
 atr/docs/trusted-publishing.md               |   2 +
 atr/errors.py                                |   8 +-
 atr/get/announce.py                          |   5 +-
 atr/get/checks.py                            |  22 +--
 atr/get/committees.py                        |   3 +-
 atr/get/compose.py                           |   9 +-
 atr/get/distribution.py                      |  87 ++--------
 atr/get/download.py                          |   2 +-
 atr/get/draft.py                             |   3 +-
 atr/get/finish.py                            |  83 ++-------
 atr/get/keys.py                              |   3 +-
 atr/get/manual.py                            |   5 +-
 atr/get/report.py                            |  11 +-
 atr/get/resolve.py                           |   3 +-
 atr/get/result.py                            |   5 +-
 atr/get/sbom.py                              | 198 ++++++++++++++++++++-
 atr/get/vote.py                              |  22 +--
 atr/get/voting.py                            |   3 +-
 atr/post/announce.py                         |   3 +-
 atr/post/distribution.py                     |   3 +-
 atr/post/vote.py                             |   3 +-
 atr/sbom/heatmap.py                          |  21 +--
 atr/sbom/licenses.py                         |   1 +
 atr/sbom/maintenance.py                      |  23 +++
 atr/sbom/observations.py                     | 115 ++++++++++++
 atr/sbom/streaming.py                        |  89 +++++++++-
 atr/server.py                                |   2 +
 atr/shared/distribution.py                   |  64 ++++++-
 atr/static/css/atr.css                       |  17 ++
 atr/storage/writers/vote.py                  |   3 +-
 atr/{blueprints/icons.py => strings.py}      |  16 +-
 atr/tasks/__init__.py                        |   8 +-
 atr/tasks/checks/__init__.py                 |   5 +-
 atr/tasks/checks/sbom.py                     | 111 +++++++++++-
 atr/tasks/task.py                            |   1 +
 atr/templates/check-selected-path-table.html |  12 +-
 atr/templates/check-selected.html            |   6 +-
 atr/templates/includes/topnav.html           |   5 +
 atr/web.py                                   |   5 +-
 bootstrap/context/bump.sh                    |   6 +-
 bootstrap/source/.npm-exclude-newer          |   1 +
 pip-audit.requirements                       |  20 +--
 scripts/check_npm_dependencies_updated.py    |  66 +++++++
 tests/unit/test_catalog_site.py              |  12 +-
 tests/unit/test_get_sbom_review.py           | 250 +++++++++++++++++++++++++++
 tests/unit/test_sbom_heatmap.py              |   2 +-
 tests/unit/test_sbom_licenses.py             |  29 ++++
 tests/unit/test_sbom_observations.py         | 170 ++++++++++++++++++
 tests/unit/test_sbom_review.py               | 243 +++++++++++++++++++++++---
 tests/unit/test_sbom_streaming.py            |  71 ++++++++
 tests/unit/test_task_finalise.py             |  32 ++++
 typestubs/cyclonedx/model/component.pyi      |   4 +
 uv.lock                                      | 247 +++++++++++++-------------
 68 files changed, 2058 insertions(+), 590 deletions(-)
 create mode 100644 atr/docs/sbom-architecture.md
 create mode 100644 atr/sbom/observations.py
 copy atr/{blueprints/icons.py => strings.py} (55%)
 create mode 100644 bootstrap/source/.npm-exclude-newer
 create mode 100755 scripts/check_npm_dependencies_updated.py
 create mode 100644 tests/unit/test_get_sbom_review.py
 create mode 100644 tests/unit/test_sbom_observations.py


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org