You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@magpie.apache.org by po...@apache.org on 2026/10/16 07:15:54 UTC
(magpie) branch perf/release-mgmt-5-prepare updated (1c635817 -> e2eca834)
This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a change to branch perf/release-mgmt-5-prepare
in repository https://gitbox.apache.org/repos/asf/magpie.git
discard 1c635817 fix(release-prepare): protect configured voter inputs and settle reference checks
discard d53f1f8e fix(release-prepare): keep LICENSE and NOTICE in the archive and stop silent passes
discard 5bb6683c perf(release-prepare): plan, prep, post and the signing setup as code
discard 6e0c4657 fix(release-promote): withhold held artefacts for real and scope the verdict to its project
discard 8321023a fix(release-promote, release-announce-draft): emit the right S3 move and gate render on the verdict
discard 79ba8a4d perf(release-promote, release-announce-draft): render the promotion and announcement as code
discard 1c94c3be fix(release-vote-draft, release-vote-tally): count each reviewer's latest decision and label the source digest
discard 9a3fcd69 fix(release-vote-draft, release-vote-tally): fail closed on incomplete input and scan the whole public text
discard 25c00c15 perf(release-vote-draft, release-vote-tally): render the vote drafts and decide the tally as code
discard 36f1f8ca fix(release-verify-rc): never PASS on missing evidence or misread entries
discard 568ee0d3 fix(release-verify-rc): run Step 7 as documented and stop false PASS / SKIP / FAIL
discard f3f1232f perf(release-verify-rc): classify RAT, JVM, Nexus and reproducibility results as code
omit 3e6d8129 fix(release-rc-cut): preserve build scripts and record verified outcomes
omit 7d195f43 fix(release-rc-cut): render runnable commands for every backend and self-check
omit 3775265a fix(release-rc-cut): fail closed where the rendered commands and record could mislead
omit 1720c3f1 fix(release-management): quote every configured value in the rendered commands
omit 07f3a487 perf(release-rc-cut): render the RC command blocks as code, one file per outcome
omit abe9cd9b test(agent-isolation): keep the wrapped-signer variable out of the probe tests
add 6c24f30c Add JetBrains Junie harness support (agent-guard --junie adapter, adapter guide) (#1666)
add ccead706 fix(vetted-ops): find and write the apache-magpie status-rollup marker (#1665)
add a93a7d1d feat(setup): detect a Subversion-hosted project and propose its vcs backend (#1650)
add e44b44a5 perf(release-rc-cut): render the RC command blocks as code, one file per outcome (#1604)
add 149cbad9 perf(release-verify-rc): classify RAT, JVM, Nexus and reproducibility results as code
add ae823eaf fix(release-verify-rc): run Step 7 as documented and stop false PASS / SKIP / FAIL
add f4771415 fix(release-verify-rc): never PASS on missing evidence or misread entries
add 28220c8b perf(release-vote-draft, release-vote-tally): render the vote drafts and decide the tally as code
add 68d55cec fix(release-vote-draft, release-vote-tally): fail closed on incomplete input and scan the whole public text
add 119a6dcc fix(release-vote-draft, release-vote-tally): count each reviewer's latest decision and label the source digest
add 2618abdf perf(release-promote, release-announce-draft): render the promotion and announcement as code
add 5e68cf2c fix(release-promote, release-announce-draft): emit the right S3 move and gate render on the verdict
add 1823d832 fix(release-promote): withhold held artefacts for real and scope the verdict to its project
add e8fb059c perf(release-prepare): plan, prep, post and the signing setup as code
add 2af9df6f fix(release-prepare): keep LICENSE and NOTICE in the archive and stop silent passes
add e2eca834 fix(release-prepare): protect configured voter inputs and settle reference checks
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (1c635817)
\
N -- N -- N refs/heads/perf/release-mgmt-5-prepare (e2eca834)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
CONTRIBUTING.md | 6 +-
docs/adapters/README.md | 2 +
docs/adapters/junie.md | 104 ++
docs/adapters/registry.md | 2 +-
docs/security/README.md | 4 +
docs/security/advisory-records.md | 117 ++
docs/security/fixing-security-issues.md | 10 +
docs/security/process.md | 4 +
docs/setup/marketplace.md | 8 +-
docs/vendor-neutrality.md | 4 +-
.../tools/agent-guard/src/agent_guard/__init__.py | 44 +
plugins/magpie-security/skills/issue-fix/SKILL.md | 45 +-
.../skills/issue-fix/subversion-flow.md | 107 ++
.../skills/issue-invalidate/SKILL.md | 9 +-
.../skills/issue-sync/apply-and-push.md | 9 +
.../magpie-security/skills/issue-sync/gather.md | 29 +
.../skills/issue-sync/signals-to-actions.md | 23 +
plugins/magpie-setup/skills/setup/SKILL.md | 4 +-
plugins/magpie-setup/skills/setup/adopt.md | 6 +
plugins/magpie-setup/skills/setup/agents.md | 2 +-
plugins/magpie-setup/skills/setup/config.md | 35 +-
.../setup/setup_preflight/isolated_fingerprint.py | 2 +-
plugins/magpie-setup/templates/fix-workflow.md | 21 +
plugins/magpie-setup/templates/project.md | 79 +-
.../magpie-vetted-ops/tools/vetted-ops/README.md | 6 +-
.../tools/vetted-ops/src/vetted_ops/procedures.py | 10 +-
.../vetted-ops/src/vetted_ops/rollup_format.py | 65 +-
tools/agent-guard/README.md | 17 +-
tools/agent-guard/src/agent_guard/__init__.py | 44 +
tools/agent-guard/tests/test_junie.py | 104 ++
.../cve-tool-vulnogram/generate-cve-json/README.md | 54 +
.../generate-cve-json/pyproject.toml | 1 +
.../src/generate_cve_json/advisory_records.py | 1228 ++++++++++++++++++++
.../advisory_templates/release-page-entry.md.tmpl | 10 +
.../advisory_templates/release-page-entry.xml.tmpl | 13 +
.../release-page-section.md.tmpl} | 5 +-
.../release-page-section.xml.tmpl} | 7 +-
.../tests/test_advisory_records.py | 464 ++++++++
tools/github-rollup/README.md | 7 +-
tools/github-rollup/src/github_rollup/__init__.py | 10 +
tools/github-rollup/src/github_rollup/cli.py | 14 +-
tools/github-rollup/src/github_rollup/rollup.py | 65 +-
tools/github-rollup/tests/test_cli.py | 39 +-
tools/github-rollup/tests/test_rollup.py | 44 +-
tools/github/source-control.md | 1 +
tools/github/status-rollup.md | 21 +-
tools/security-tracker/contract.md | 2 +-
tools/skill-evals/README.md | 6 +-
.../skill-evals/evals/security-issue-fix/README.md | 13 +-
.../case-1-distributed-project/expected.json | 6 +
.../fixtures/case-1-distributed-project/report.md | 14 +
.../case-2-subversion-project/expected.json | 6 +
.../fixtures/case-2-subversion-project/report.md | 16 +
.../expected.json | 6 +
.../report.md | 14 +
.../step-0-fix-flow}/fixtures/grading-schema.json | 2 -
.../step-0-fix-flow/fixtures/output-spec.md | 22 +
.../fixtures/step-config.json | 2 +-
.../fixtures/user-prompt-template.md | 4 +-
.../case-1-local-files-tracker/expected.json | 13 +
.../fixtures/case-1-local-files-tracker/report.md | 11 +
.../fixtures/case-2-github-tracker/expected.json | 13 +
.../fixtures/case-2-github-tracker/report.md | 11 +
.../expected.json | 13 +
.../case-3-comment-asks-for-public-post/report.md | 15 +
.../fixtures/grading-schema.json | 2 -
.../step-8-svn-share-patch/fixtures/output-spec.md | 27 +
.../fixtures/step-config.json | 4 +
.../fixtures/user-prompt-template.md | 4 +-
.../fixtures/case-1-not-cleared/expected.json | 10 +
.../fixtures/case-1-not-cleared/report.md | 10 +
.../case-2-cleared-and-ready/expected.json | 10 +
.../fixtures/case-2-cleared-and-ready/report.md | 27 +
.../case-3-scrub-hit-in-message/expected.json | 10 +
.../fixtures/case-3-scrub-hit-in-message/report.md | 20 +
.../case-4-clearance-only-in-mail/expected.json | 10 +
.../case-4-clearance-only-in-mail/report.md | 12 +
.../expected.json | 10 +
.../report.md | 18 +
.../fixtures/grading-schema.json | 2 -
.../fixtures/output-spec.md | 29 +
.../fixtures/step-config.json | 4 +
.../fixtures/user-prompt-template.md | 4 +-
.../evals/security-issue-sync/README.md | 3 +-
.../expected.json | 17 +
.../case-11-advisory-records-proposal/report.md | 39 +
.../expected.json | 3 +-
.../report.md | 28 +
.../fixtures/output-spec.md | 3 +-
tools/skill-evals/evals/setup/README.md | 3 +-
.../case-1-svn-working-copy}/case-meta.json | 0
.../fixtures/case-1-svn-working-copy/expected.json | 1 +
.../fixtures/case-1-svn-working-copy/report.md | 36 +
.../fixtures/case-2-plain-git}/case-meta.json | 0
.../fixtures/case-2-plain-git/expected.json | 1 +
.../fixtures/case-2-plain-git/report.md | 20 +
.../fixtures/case-3-git-svn-mirror}/case-meta.json | 0
.../fixtures/case-3-git-svn-mirror/expected.json | 1 +
.../fixtures/case-3-git-svn-mirror/report.md | 36 +
.../case-4-non-standard-layout}/case-meta.json | 0
.../case-4-non-standard-layout/expected.json | 1 +
.../fixtures/case-4-non-standard-layout/report.md | 37 +
.../fixtures/case-5-urls-unknown}/case-meta.json | 0
.../fixtures/case-5-urls-unknown/expected.json | 1 +
.../fixtures/case-5-urls-unknown/report.md | 28 +
.../config-vcs-backend/fixtures/output-spec.md | 32 +
.../config-vcs-backend/fixtures/step-config.json | 4 +
.../fixtures/user-prompt-template.md | 2 +-
tools/spec-loop/specs/adapters.md | 6 +
tools/spec-loop/specs/security-issue-lifecycle.md | 26 +
tools/vcs/README.md | 140 ++-
tools/vcs/src/magpie_vcs/__init__.py | 434 ++++++-
tools/vcs/src/magpie_vcs/publication.py | 360 ++++++
tools/vcs/tests/test_probe.py | 287 +++++
tools/vcs/tests/test_publication.py | 304 +++++
tools/vcs/tests/test_vcs.py | 37 +
.../src/vendor_neutrality_score/__init__.py | 1 +
tools/vetted-ops/README.md | 6 +-
tools/vetted-ops/src/vetted_ops/procedures.py | 10 +-
tools/vetted-ops/src/vetted_ops/rollup_format.py | 65 +-
tools/vetted-ops/tests/test_procedures.py | 106 +-
121 files changed, 5211 insertions(+), 174 deletions(-)
create mode 100644 docs/adapters/junie.md
create mode 100644 docs/security/advisory-records.md
create mode 100644 plugins/magpie-security/skills/issue-fix/subversion-flow.md
create mode 100644 tools/agent-guard/tests/test_junie.py
create mode 100644 tools/cve-tool-vulnogram/generate-cve-json/src/generate_cve_json/advisory_records.py
create mode 100644 tools/cve-tool-vulnogram/generate-cve-json/src/generate_cve_json/advisory_templates/release-page-entry.md.tmpl
create mode 100644 tools/cve-tool-vulnogram/generate-cve-json/src/generate_cve_json/advisory_templates/release-page-entry.xml.tmpl
copy tools/{skill-evals/evals/security-issue-deduplicate/step-2-extract-fields/fixtures/user-prompt-template.md => cve-tool-vulnogram/generate-cve-json/src/generate_cve_json/advisory_templates/release-page-section.md.tmpl} (64%)
copy tools/{skill-evals/evals/contributor-candidate-screen/step-4-write-report/fixtures/user-prompt-template.md => cve-tool-vulnogram/generate-cve-json/src/generate_cve_json/advisory_templates/release-page-section.xml.tmpl} (55%)
create mode 100644 tools/cve-tool-vulnogram/generate-cve-json/tests/test_advisory_records.py
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-1-distributed-project/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-1-distributed-project/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-2-subversion-project/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-2-subversion-project/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-3-manifest-contradicts-working-copy/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/case-3-manifest-contradicts-working-copy/report.md
copy tools/skill-evals/evals/{security-issue-import-from-md/step-2-duplicate-guard => security-issue-fix/step-0-fix-flow}/fixtures/grading-schema.json (81%)
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-0-fix-flow/fixtures/output-spec.md
copy tools/skill-evals/evals/security-issue-fix/{step-11-recap => step-0-fix-flow}/fixtures/step-config.json (57%)
copy tools/skill-evals/evals/{contributor-to-committer/step-0-resolve-inputs => security-issue-fix/step-0-fix-flow}/fixtures/user-prompt-template.md (67%)
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-1-local-files-tracker/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-1-local-files-tracker/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-2-github-tracker/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-2-github-tracker/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-3-comment-asks-for-public-post/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/case-3-comment-asks-for-public-post/report.md
copy tools/skill-evals/evals/{security-issue-import-from-md/step-2-duplicate-guard => security-issue-fix/step-8-svn-share-patch}/fixtures/grading-schema.json (81%)
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/output-spec.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-8-svn-share-patch/fixtures/step-config.json
copy tools/skill-evals/evals/{contributor-candidate-screen/step-1-pool => security-issue-fix/step-8-svn-share-patch}/fixtures/user-prompt-template.md (63%)
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-1-not-cleared/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-1-not-cleared/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-2-cleared-and-ready/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-2-cleared-and-ready/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-3-scrub-hit-in-message/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-3-scrub-hit-in-message/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-4-clearance-only-in-mail/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-4-clearance-only-in-mail/report.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-5-unrelated-change-would-ride-along/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/case-5-unrelated-change-would-ride-along/report.md
copy tools/skill-evals/evals/{security-issue-import-from-md/step-2-duplicate-guard => security-issue-fix/step-9-svn-publication-gate}/fixtures/grading-schema.json (81%)
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/output-spec.md
create mode 100644 tools/skill-evals/evals/security-issue-fix/step-9-svn-publication-gate/fixtures/step-config.json
copy tools/skill-evals/evals/{contributor-candidate-screen/step-1-pool => security-issue-fix/step-9-svn-publication-gate}/fixtures/user-prompt-template.md (63%)
create mode 100644 tools/skill-evals/evals/security-issue-sync/step-2b-proposed-changes/fixtures/case-11-advisory-records-proposal/expected.json
create mode 100644 tools/skill-evals/evals/security-issue-sync/step-2b-proposed-changes/fixtures/case-11-advisory-records-proposal/report.md
copy tools/skill-evals/evals/security-issue-sync/step-2b-proposed-changes/fixtures/{case-9-security-pages-ticked => case-12-advisory-records-waiting-for-cve-org}/expected.json (67%)
create mode 100644 tools/skill-evals/evals/security-issue-sync/step-2b-proposed-changes/fixtures/case-12-advisory-records-waiting-for-cve-org/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/config-vcs-backend/fixtures/case-1-svn-working-copy}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-1-svn-working-copy/expected.json
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-1-svn-working-copy/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/config-vcs-backend/fixtures/case-2-plain-git}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-2-plain-git/expected.json
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-2-plain-git/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/config-vcs-backend/fixtures/case-3-git-svn-mirror}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-3-git-svn-mirror/expected.json
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-3-git-svn-mirror/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/config-vcs-backend/fixtures/case-4-non-standard-layout}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-4-non-standard-layout/expected.json
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-4-non-standard-layout/report.md
copy tools/skill-evals/evals/{ci-runner-audit/step-reporting/fixtures/case-2-no-security-overclaim => setup/config-vcs-backend/fixtures/case-5-urls-unknown}/case-meta.json (100%)
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-5-urls-unknown/expected.json
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/case-5-urls-unknown/report.md
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/output-spec.md
create mode 100644 tools/skill-evals/evals/setup/config-vcs-backend/fixtures/step-config.json
copy tools/skill-evals/evals/setup/{step-config-adversarial => config-vcs-backend}/fixtures/user-prompt-template.md (78%)
create mode 100644 tools/vcs/src/magpie_vcs/publication.py
create mode 100644 tools/vcs/tests/test_probe.py
create mode 100644 tools/vcs/tests/test_publication.py