- e518d9e publicize CVEs in 1.21.0 by Dave Brondsema · 16 hours ago master
- e0f5586 optimize _get_site_notification in case of users with many projects by Dave Brondsema · 2 days ago
- b172c8f [#6054] inbound sender authentication by Carlos Cruz · 3 weeks ago
- 467bdd4 CHANGES updated for ASF release 1.21.0 by Dave Brondsema · 4 days ago rel/1.21.0
- d938172 strengthen _verify_return_to and tests for webob upgrade by Dave Brondsema · 7 days ago
- 745fe1a bumping webob 1.8.10 -> 1.8.11 by Guillermo Cruz · 7 days ago
- 2ac3817 update discussion thread logic for consistency by Dave Brondsema · 8 days ago
- 6456d71 add license to SECURITY.md by Dave Brondsema · 8 days ago
- f09fad9 retry test_markdown_many_bad_links a few times to avoid false-positive failures by Dave Brondsema · 8 days ago
- a1cae1f start a SECURITY.md by Dave Brondsema · 8 days ago
- e1dd8e4 increase ulimits on docker web to avoid "Too many open files" during test runs at least by Dave Brondsema · 8 days ago
- 534a0b1 Fix: Force push tests by Daniel Castillo · 8 days ago
- f00edcd [#11714] more Permissions-Policy values drop Feature-policy by Daniel Castillo · 3 weeks ago
- 065fd8c turn on scm.force_push.git.enabled by default by Dave Brondsema · 8 days ago
- c1313dd [#8622] Rework search result filtering by Kenton Taylor · 9 days ago
- 2476a67 [#12049] Fix for sync repo config command by Daniel Castillo · 10 days ago
- 1a2c209 [#8621] drop ftp/file/data url handlers by Dave Brondsema · 9 days ago
- 2f76400 [#8620] fix space handling in renamed files by Dave Brondsema · 9 days ago
- 33d27d1 [#8619] invalidate markdown caches by Dave Brondsema · 10 days ago db/8619
- 92173b8 [#8619] fix text_contains_hostname substring bypass by Dave Brondsema · 10 days ago
- 241598c [#8619] sanitize class/id on void elements too by Dave Brondsema · 10 days ago
- 9e70d61 [#8619] drop allowed iframe's body by Dave Brondsema · 10 days ago
- 17f1a88 [#8619] block SVG entirely, keep MathML by Dave Brondsema · 10 days ago
- 580d2a7 [#8619] iframe tracking better by Dave Brondsema · 10 days ago
- 86730b0 Add mongodb option for the jinja bytecode cache by Kenton Taylor · 3 weeks ago
- 1d04285 Prevent re-tracking revoked sessions by Carlos Cruz · 5 weeks ago
- 69f39dc publicize security fix by Dave Brondsema · 11 days ago
- 0253a63 Fix for CHANGES version by Daniel Castillo · 14 days ago dc/686
- dbeaa6d Added migrations instructions to changes, plus some fixes by Daniel Castillo · 2 weeks ago
- d2dbc13 New script to backfill allow forcepush flag by Daniel Castillo · 2 weeks ago
- afb3629 Fix for force push on new repos by Daniel Castillo · 2 weeks ago
- cdda319 Added scm.force_push.git.enabled flag by Daniel Castillo · 4 weeks ago
- cfee765 Force push enable of repos by Daniel Castillo · 4 weeks ago
- abc2dab CHANGES updated for ASF release 1.20.0 by Dave Brondsema · 2 weeks ago rel/1.20.0
- 94e1111 [#8616] align RestController lookups & checks with web controllers by Dave Brondsema · 3 weeks ago
- c432537 [#8614] Implement field level encryption for User and UserLoginDetails fields by Carlos Cruz · 7 weeks ago
- a565108 do github rate-limit logic on 429 status codes too by Dave Brondsema · 3 weeks ago
- 9fca825 [#8614] Decrypt social networks returned by the profile rest api by Carlos Cruz · 3 weeks ago
- ee99615 [#8614] Add support for nested lists and tests to the field conversion script by Carlos Cruz · 7 weeks ago
- 62864a6 [#8614] Add backing encrypted fields for User and UserLoginDetails fields by Carlos Cruz · 7 weeks ago
- c0a25ef bump gitpython 3.1.57 -> 3.1.59 by Guillermo Cruz · 4 weeks ago
- 15efa51 [#6687] change most feed links to Atom version instead of RSS, since Atom is less weird by Dave Brondsema · 4 weeks ago
- bacea15 [#6687] mark rss <guid> as not a link by Dave Brondsema · 4 weeks ago
- 9f4ec61 upgrade ming by Dave Brondsema · 4 weeks ago
- 692240e bumping cryptography 49.0.0 -> 50.0.0 by Guillermo Cruz · 4 weeks ago
- 6b0c8e3 [#8615] update .pre-commit-config.yaml versions by Dave Brondsema · 5 weeks ago db/8615
- fc814e9 [#8615] Upgrade boto3 1.42.89 -> 1.43.52, and its deps: botocore,s3transfer by Dave Brondsema · 6 weeks ago
- 7f44482 [#8615] Upgrade pre_commit 4.5.1 -> 4.6.0, and its deps: distlib,python-discovery,virtualenv,filelock,platformdirs,identify by Dave Brondsema · 6 weeks ago
- 300031a [#8615] Upgrade gunicorn 25.3.0 -> 26.0.0, and its deps: packaging by Dave Brondsema · 6 weeks ago
- 923abc7 [#8615] Upgrade pytest 9.0.3 -> 9.1.1, and its deps: packaging by Dave Brondsema · 6 weeks ago
- e0e4127 [#8615] Upgrade ruff 0.15.10 -> 0.15.22 by Dave Brondsema · 6 weeks ago
- c8744d9 [#8615] Upgrade wrapt 2.1.2 -> 2.2.2 by Dave Brondsema · 6 weeks ago
- 6eb02c5 [#8615] Upgrade TurboGears2 2.5.0 -> no upgrade, and its deps: repoze.lru by Dave Brondsema · 6 weeks ago
- f5df043 [#8615] Upgrade pysolr 3.11.0 -> no upgrade, and its deps: charset-normalizer,requests,idna,certifi by Dave Brondsema · 6 weeks ago
- 7c015dc [#8615] Upgrade Pypeline 0.7.0 -> no upgrade, and its deps: nh3,Genshi,docutils,textile,regex by Dave Brondsema · 6 weeks ago
- 26b7b0c [#8615] Upgrade Ming 0.17.1 -> no upgrade, and its deps: pymongo,pytz by Dave Brondsema · 6 weeks ago
- 3179412 [#8615] Upgrade lxml 6.1.0 -> 6.1.1 by Dave Brondsema · 6 weeks ago
- afbe96d [#8615] Upgrade idna 3.15 -> 3.18 by Dave Brondsema · 6 weeks ago
- a1e9d41 [#8615] Upgrade faust-cchardet 2.1.19 -> 2.2.1 by Dave Brondsema · 6 weeks ago
- 1a55559 [#8615] Upgrade defopt 7.0.0 -> no upgrade, and its deps: docutils by Dave Brondsema · 6 weeks ago
- 098fcfd [#8615] Upgrade decorator 5.2.1 -> 5.3.1 by Dave Brondsema · 6 weeks ago
- 0832d49 [#8615] Upgrade beaker-session-jwt 1.0.4 -> no upgrade, and its deps: Beaker,cffi,pymongo,joserfc by Dave Brondsema · 6 weeks ago
- 5bcbd7c [#8615] Upgrade Beaker 1.13.0 -> 1.14.1 by Dave Brondsema · 6 weeks ago
- 9f6cb5e [#8615] Upgrade beautifulsoup4 4.14.3 -> 4.15.0, and its deps: typing_extensions,soupsieve by Dave Brondsema · 6 weeks ago
- 60a0a73 [#8615] Upgrade ActivityStream 0.5.1 -> no upgrade, and its deps: pymongo by Dave Brondsema · 6 weeks ago
- e89361f update CLAUDE.md by Dave Brondsema · 5 weeks ago
- 5a37238 get_tool_data should return ming-deinstrumented objects, so changes to them can't sync back to the database unexpectedly by Dave Brondsema · 9 weeks ago
- a0d47b3 bumping gitpython 3.1.50 -> 3.1.57 by Guillermo Cruz · 6 weeks ago
- 4b20727 Adding missing license to CLAUDE.md by Guillermo Cruz · 6 weeks ago
- 1a0343d [#8613] Implement field level encryption for user preferences email address by Carlos Cruz · 8 weeks ago
- fb55494 added CLAUDE.md by Guillermo Cruz · 8 weeks ago
- 93857a0 [#8613] Add encrypted field for user preferences email address by Carlos Cruz · 8 weeks ago
- 4b3b05d make test more reliable (not reliant on fetching "url":"https://httpbin.org/image/png" by Dave Brondsema · 6 weeks ago
- 81208e1 enable webp screenshots & attachments by Dave Brondsema · 7 weeks ago db/webp
- 1a5e508 bumping Pillow 12.2.0 -> 12.3. by Guillermo Cruz · 8 weeks ago
- ad248b0 bumping soupsieve 2.8.3 -> 2.8.4 by Guillermo Cruz · 8 weeks ago
- c7a0209 [#8610] Implement field level encryption for Users email addresses by Carlos Cruz · 3 months ago
- 79f1f64 [#8610] Add support for list fields to field conversion script by Carlos Cruz · 3 months ago
- 4a81f02 [#8610] Add encrypted field for Users email addresses by Carlos Cruz · 3 months ago
- 0ec1fd9 bump joserfc 1.6.4 -> 1.7.2 by Guillermo Cruz · 10 weeks ago
- 7538a9e config pip in rebuild-all.sh to install in a more compatible way for LSPs by Dillon Walls · 10 weeks ago
- 8e10408 stringify some ids by Dave Brondsema · 2 months ago db/solr_nones
- d1ccfec don't pass sort=None etc to solr by Dave Brondsema · 2 months ago
- 2b55895 get chained exception details into errormiddleware output by Dave Brondsema · 2 months ago
- 1f290c6 add docker/compose health checks and use --wait to check them by Dave Brondsema · 2 months ago
- e65e720 CHANGES updated for ASF release 1.19.1 by Dave Brondsema · 2 months ago rel/1.19.1
- da948e3 provide merged config to ming, so debug key is there by Dave Brondsema · 2 months ago
- a98de00 add timeouts to ApacheAccessHandler.py network requests by Dave Brondsema · 2 months ago
- 4569770 CHANGES updated for ASF release 1.19.0 by Dave Brondsema · 2 months ago
- 08e62a6 Update copyright year by Dave Brondsema · 2 months ago
- 35289fd [#8611] documentation and migration scripts by Dave Brondsema · 3 months ago
- ba9733e [#8611] put encryption settings into development.ini with a default that triggers a warning by Dave Brondsema · 3 months ago
- e95355a better escape_html that does quotes too by Dave Brondsema · 3 months ago
- 66e3ca1 bumping bleach 6.3.0 -> 6.4.0 by Guillermo Cruz · 3 months ago
- 2eccab5 [#8607] limit prefs able to set via form by Dave Brondsema · 3 months ago
- 0cfffd9 [#8607] use |tojson within JS by Dave Brondsema · 3 months ago
- f5ad949 [#8607] perm checks on ticket bulk edit & move by Dave Brondsema · 3 months ago
- 35130ea [#8607] require post for phone verification endpoints by Dave Brondsema · 3 months ago
- b696630 [#8607] validate links via rest by Dave Brondsema · 3 months ago
- d4dfbf5 [#8607] check domain when adding github auth token by Dave Brondsema · 3 months ago