You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by gi...@apache.org on 2026/10/22 18:52:33 UTC
(tooling-trusted-releases) branch dependabot/github_actions/codeql-action-9159e49961 updated (509d7e00 -> 01215182)
This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch dependabot/github_actions/codeql-action-9159e49961
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
discard 509d7e00 Bump the codeql-action group with 2 updates
add 82deb3d6 Update certifi due to PYSEC-2026-4320, and other dependencies
add 78306300 Move heatmap unreviewed warning up the page
add c3765ab1 Add Maven plugin mention on the compose upload page
add fad89bee Fix version parsing for two segment versions and ordering on page
add 8e83e44c #1727 - Multi-repository support for source uploads and compare check.
add 011b61c7 #1761 - Change client test data to exempt from SHA check
add 58c94a75 Require committee lists to be present during login
add ae3260ad Update certificate bundles in Alpine and in programs
add c321a35e Bump astral-sh/setup-uv from 10.2.0 to 10.3.0
add 8dec92ae Dependency updates
add 6d418771 #1750 - update attic page and a couple of small fixes
add 66264b22 Remove RAT excludes that ignore bin, core, and tags directories
add ea356a09 Document how RAT excludes work
add 9bf1f41a Use fail safe curl flags on the vote page
add 215187c7 Use attestable data as the source of RAT exclusions in checks
add baf0560d Link to RAT exclusion inputs from check result tables
add ffb6cf01 Change caption on Attic and Incubator cards
add 7e2b4a5b #1749 - add activity feed to catalog site
add e74ca0cf Update uv in CI and containers
add 01215182 Bump the codeql-action group across 1 directory with 2 updates
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (509d7e00)
\
N -- N -- N refs/heads/dependabot/github_actions/codeql-action-9159e49961 (01215182)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/analyze.yml | 4 +-
.github/workflows/build.yml | 4 +-
.github/workflows/codeql.yaml | 4 +-
.github/workflows/tool-freshness.yml | 4 +-
Dockerfile.alpine | 10 +-
atr/api/__init__.py | 64 +++++
atr/attestable.py | 78 ++++--
atr/catalog_site.py | 248 ++++++++++++++---
atr/cle.py | 17 +-
atr/cycles.py | 46 +++-
atr/datasources/apache.py | 5 +-
atr/db/interaction.py | 55 ++--
atr/docs/input-validation.md | 13 +-
atr/docs/license-checks.md | 19 +-
atr/docs/release-catalog.md | 3 +
atr/docs/trusted-publishing.md | 66 ++++-
atr/get/draft.py | 55 ++++
atr/get/projects.py | 4 +-
atr/get/result.py | 47 ++++
atr/get/upload.py | 42 ++-
atr/get/vote.py | 2 +-
atr/models/api.py | 53 ++++
atr/models/args.py | 1 +
atr/models/attestable.py | 9 +
atr/models/sql.py | 12 +
atr/post/draft.py | 40 +++
atr/post/upload.py | 10 +-
atr/server.py | 4 +-
atr/sessions.py | 6 +-
atr/shared/draft.py | 11 +
atr/shared/projects.py | 3 +-
atr/source.py | 81 ++++--
atr/ssh.py | 9 +
atr/storage/datatypes.py | 3 +
atr/storage/readers/releases.py | 18 ++
atr/storage/writers/release.py | 71 +++++
atr/storage/writers/revision.py | 26 +-
atr/storage/writers/ssh.py | 3 +
atr/tasks/__init__.py | 4 +-
atr/tasks/checks/compare.py | 73 +++--
atr/tasks/checks/rat.py | 14 +-
atr/tasks/quarantine.py | 3 +
atr/templates/catalog_site/attic.html | 62 ++++-
atr/templates/catalog_site/heatmap.html | 2 +-
atr/templates/catalog_site/index.html | 8 +-
atr/templates/check-selected-path-table.html | 7 +
atr/templates/draft-tools.html | 19 ++
atr/templates/report-selected-path.html | 5 +
atr/util.py | 7 +-
bootstrap/context/Dockerfile | 5 +-
....15_91de479d.py => 0135_2026.10.21_7e613682.py} | 20 +-
pip-audit.requirements | 22 +-
pyproject.toml | 2 +-
tests/Dockerfile.e2e | 4 +
tests/Dockerfile.playwright | 5 +-
tests/e2e/vote/test_get.py | 2 +-
tests/unit/test_api_release_source.py | 113 ++++++++
tests/unit/test_attestable.py | 23 ++
tests/unit/test_catalog_site.py | 70 +++++
tests/unit/test_checks_compare.py | 116 ++++++--
tests/unit/test_checks_rat.py | 35 ++-
tests/unit/test_cle.py | 11 +
tests/unit/test_create_revision.py | 36 +--
tests/unit/test_cycles.py | 53 +++-
.../draft.py => tests/unit/test_get_result.py | 24 +-
tests/unit/test_quarantine_task.py | 1 +
tests/unit/test_release_writer_archive_sources.py | 146 ++++++++++
tests/unit/test_sessions.py | 40 ++-
tests/unit/test_source.py | 142 +++++++++-
tests/unit/test_trusted_project.py | 114 ++++++++
tests/unit/test_upload_json.py | 60 ++---
tests/unit/test_validate.py | 11 +-
uv.lock | 293 +++++++++++----------
73 files changed, 2190 insertions(+), 512 deletions(-)
copy migrations/versions/{0109_2026.07.15_91de479d.py => 0135_2026.10.21_7e613682.py} (65%)
create mode 100644 tests/unit/test_api_release_source.py
copy atr/shared/draft.py => tests/unit/test_get_result.py (54%)
create mode 100644 tests/unit/test_release_writer_archive_sources.py
create mode 100644 tests/unit/test_trusted_project.py
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org