1. 2b6ec5f Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 26 hours ago main
  2. b0ef4e2 Merge pull request #758 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/commit-check/commit-check-action-2.6.0 by Jarek Potiuk · 26 hours ago
  3. bdffe5b pytest: enable colored output in CI (#757) by Jarek Potiuk · 29 hours ago
  4. 91e93b3 action-allowlist-review: bump commit-check/commit-check-action by dependabot[bot] · 34 hours ago
  5. c51b02d verify-action-build: fix RESULT panel cause on binary-download failure (#747) by Jarek Potiuk · 2 days ago
  6. 0d16f2e Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml by asfgit · 2 days ago
  7. 547aef8 Add pip-audit action with version and expiration (#756) by tison · 2 days ago
  8. 4ec78e9 verify-action-build: support Deno-based actions (deno task bundle) (#749) by Jarek Potiuk · 2 days ago
  9. e8b6918 Merge pull request #750 from apache/verify-action-build-consolidate-recursion by Jarek Potiuk · 2 days ago
  10. 2474a5a Merge pull request #754 from apache/dependabot/github_actions/dot-github/workflows/zizmorcore/zizmor-action-0.5.3 by Jarek Potiuk · 2 days ago
  11. d630252 build(deps): bump zizmorcore/zizmor-action in /.github/workflows by dependabot[bot] · 2 days ago
  12. 5c54054 verify-action-build: unified walker over the composite action graph by Jarek Potiuk · 3 days ago
  13. 40b6028 Merge pull request #745 from apache/verify-manual-action-workflow by Jarek Potiuk · 3 days ago
  14. 65329b4 docs: document verify_manual_action.yml and require doc updates for features by Jarek Potiuk · 3 days ago
  15. 4883581 Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 3 days ago
  16. df36e11 Merge pull request #720 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/JustinBeckwith/linkinator-action-2.4.2 by Jarek Potiuk · 3 days ago
  17. f14688b ci: verify manually opened allowlist PRs via verify-action-build by Jarek Potiuk · 3 days ago
  18. 9e95104 Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml by asfgit · 3 days ago
  19. 6b2ecfe Merge pull request #739 from chaokunyang/allow-dart-setup-dart-action by Jarek Potiuk · 3 days ago
  20. 87ca552 Merge pull request #743 from apache/verify-action-binary-download-check by Jarek Potiuk · 3 days ago
  21. f2cc7a7 verify-action-build: scan JS/TS sources for unverified downloads by Jarek Potiuk · 3 days ago
  22. 1aa04bd verify-action-build: add binary download verification check by Jarek Potiuk · 3 days ago
  23. 0abd7db Merge pull request #741 from apache/verify-action-build-dart-support by Jarek Potiuk · 3 days ago
  24. 12bce66 Merge pull request #742 from apache/dependabot/uv/rich-15.0.0 by Jarek Potiuk · 3 days ago
  25. c53c05c action-allowlist-review: bump JustinBeckwith/linkinator-action by dependabot[bot] · 3 days ago
  26. b4ef209 build(deps-dev): bump rich from 14.3.3 to 15.0.0 by dependabot[bot] · 3 days ago
  27. 79b9f22 Merge pull request #740 from apache/stash-uv-lock-with-cooldowns by Jarek Potiuk · 3 days ago
  28. 9f87136 verify-action-build: support Dart-based actions (setup-dart) by Jarek Potiuk · 3 days ago
  29. 6981364 Add stash uv.lock and enable exclude-newer cooldown across all pyprojects by Jarek Potiuk · 3 days ago
  30. 1d30905 Allow dart-lang/setup-dart v1.7.1 by 慕白 · 3 days ago
  31. e0f0ac7 Merge pull request #734 from apache/verify-action-cjs-mjs-support by Dave Fisher · 4 days ago
  32. 66ff315 verify-action-build: support .cjs and .mjs compiled bundle extensions by Jarek Potiuk · 5 days ago
  33. 4a6aae0 Merge pull request #733 from apache/verify-action-multistage-from by Jarek Potiuk · 4 days ago
  34. e5f7872 Merge pull request #737 from apache/fix-dependabot-cooldown-in-readme by Jarek Potiuk · 4 days ago
  35. c0f1e0d Update README with current 0 day cooldown by Dave Fisher · 4 days ago
  36. aff2200 Merge pull request #714 from apache/docs/workflow-automation-diagrams by Dave Fisher · 4 days ago
  37. 6954913 Merge pull request #735 from apache/remove-matlab-run-tests-v3.1.0 by Dave Fisher · 4 days ago
  38. 75f87e4 README: add a full-pipeline summary diagram by Jarek Potiuk · 4 days ago
  39. c07be58 README: split auto-expiration into its own section by Jarek Potiuk · 4 days ago
  40. 7ee0884 Document allowlist automation workflows in README by Jarek Potiuk · 8 days ago
  41. 82e524b Remove matlab-actions/run-tests v3.1.0 from approved actions by Jarek Potiuk · 5 days ago
  42. 8c99ebc Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 5 days ago
  43. e51f02a Merge pull request #722 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/azure/setup-kubectl-5.1.0 by Jarek Potiuk · 5 days ago
  44. 4241b82 Merge pull request #729 from apache/dependabot/uv/pelican/types-beautifulsoup4-gte-4.12.0.20250516 by Jarek Potiuk · 5 days ago
  45. 67a2d12 Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 5 days ago
  46. b01202e Merge pull request #730 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.1.0 by Jarek Potiuk · 5 days ago
  47. 37a5181 Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml by asfgit · 5 days ago
  48. 920669c Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 5 days ago
  49. cdc3250 Merge pull request #731 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/burnett01/rsync-deployments-8.0.5 by Jarek Potiuk · 5 days ago
  50. 07dfe1d verify-action-build: skip pin warning for multi-stage FROM references by Jarek Potiuk · 5 days ago
  51. 49df447 Merge pull request #674 from apache/retry-build-approved-lockfiles by Jarek Potiuk · 5 days ago
  52. 7ebe16a Merge pull request #716 from apache/stash-restore-retry-download by Jarek Potiuk · 5 days ago
  53. 5517022 ci: restore credentials on test-site checkout for pelican publish by Jarek Potiuk · 5 days ago
  54. b05768e stash: add pyproject.toml and scope pelican lint workflow by Jarek Potiuk · 8 days ago
  55. cc0f6b6 stash/restore: rewrite download helper and its tests in Python by Jarek Potiuk · 8 days ago
  56. 05dc3b7 stash/restore: extract download script and add bash unit tests by Jarek Potiuk · 8 days ago
  57. 7f85218 stash/restore: add retry-count and fail-on-download inputs by Jarek Potiuk · 8 days ago
  58. 840aad2 action-allowlist-review: bump burnett01/rsync-deployments by dependabot[bot] · 5 days ago
  59. 27a7a95 Merge pull request #725 from kevinjqliu/kevinjqliu/improve-security-posture by Jarek Potiuk · 5 days ago
  60. 54f1e20 zizmor: ignore[secrets-outside-env] by Kevin Liu · 5 days ago
  61. c03d13e more zizmor fixes by Kevin Liu · 5 days ago
  62. af1c575 action-allowlist-review: bump astral-sh/setup-uv by dependabot[bot] · 5 days ago
  63. 1d77a69 Remove Expired Refs by asfgit · 6 days ago
  64. 205f2fd Update types-beautifulsoup4 requirement in /pelican by dependabot[bot] · 6 days ago
  65. 39bca9b zizmor auto-fix by Kevin Liu · 6 days ago
  66. edb0a91 remove cooldown by Kevin Liu · 6 days ago
  67. 0588b6d remove cooldown by Kevin Liu · 6 days ago
  68. 82efd49 improvements by Kevin Liu · 6 days ago
  69. 8a059be Merge pull request #717 from apache/fix-pelican-lint-install by Dave Fisher · 6 days ago
  70. cb86454 action-allowlist-review: bump azure/setup-kubectl by dependabot[bot] · 7 days ago
  71. 18e77ef Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 8 days ago
  72. c32dbf6 action-allowlist-review: bump lhotari/sandboxed-trivy-action (#718) by dependabot[bot] · 8 days ago
  73. 6586806 Update actions.yml and approved_patterns.yml based on .github/actions/for-dependabot-triggered-reviews/action.yml by asfgit · 8 days ago
  74. 662969f action-allowlist-review: bump zizmorcore/zizmor-action (#719) by dependabot[bot] · 8 days ago
  75. 62baf56 Stop running transitive-failures check on pull_request (#721) by Jarek Potiuk · 8 days ago
  76. db0dc48 Update approved_patterns.yml and .github/actions/for-dependabot-triggered-reviews/action.yml based on actions.yml by asfgit · 8 days ago
  77. e70372a Merge pull request #712 from raboof/use-cooldown-except-for-reviews by Jarek Potiuk · 8 days ago
  78. e488982 dependabot: apply cooldown except for action reviews by Arnout Engelen · 8 days ago
  79. 0be6156 pelican: force colorized mypy / pylint output in lint job by Jarek Potiuk · 8 days ago
  80. 7c1762f pelican: drop unrecognized suggestion-mode from pylintrc by Jarek Potiuk · 8 days ago
  81. 4a254f4 pelican: alphabetize imports in plugin_paths.py to retrigger lint by Jarek Potiuk · 8 days ago
  82. e0ad006 pelican: pin minimum versions on types-* dev dependencies by Jarek Potiuk · 8 days ago
  83. b86a85b pelican: rename lint job to lint-pelican by Jarek Potiuk · 8 days ago
  84. 085fd63 pelican: set pelican/ as default working-directory for lint job by Jarek Potiuk · 8 days ago
  85. b14f98b pelican: drop mypy --cache-dir override in lint workflow by Jarek Potiuk · 8 days ago
  86. 8bda72d pelican: enable uv cache in lint workflow by Jarek Potiuk · 8 days ago
  87. 16f5ca0 pelican: collapse lint install step into `uv run` by Jarek Potiuk · 8 days ago
  88. 7998f82 pelican: drive lint workflow via `uv sync` and dev group by Jarek Potiuk · 8 days ago
  89. e51e171 pelican: install lint deps from pyproject.toml by Jarek Potiuk · 8 days ago
  90. ff46f5e Update approved_patterns.yml and .github/workflows/dummy.yml based on actions.yml by asfgit · 8 days ago
  91. f123dda Merge pull request #713 from ppkarwasz/feat/dependabot-fetch-metadata by Jarek Potiuk · 8 days ago
  92. afd710d Merge remote-tracking branch 'apache/main' into feat/dependabot-fetch-metadata by Piotr P. Karwasz · 8 days ago
  93. efa596f Update approved_patterns.yml and .github/workflows/dummy.yml based on actions.yml by asfgit · 8 days ago
  94. b4a41f0 Update actions.yml and approved_patterns.yml based on .github/workflows/dummy.yml by asfgit · 8 days ago
  95. f293ca3 Merge pull request #704 from apache/dependabot/github_actions/commit-check/commit-check-action-2.5.0 by Jarek Potiuk · 8 days ago
  96. a146bac Merge pull request #705 from apache/dependabot/github_actions/leafo/gh-actions-luarocks-6.0.0 by Jarek Potiuk · 8 days ago
  97. f86d224 Update actions.yml and approved_patterns.yml based on .github/workflows/dummy.yml by asfgit · 8 days ago
  98. 23f839e Merge pull request #706 from apache/dependabot/github_actions/docker/build-push-action-7.1.0 by Jarek Potiuk · 8 days ago
  99. 268f2d6 Merge pull request #707 from apache/dependabot/uv/pytest-9.0.3 by Jarek Potiuk · 8 days ago
  100. eb979df Merge pull request #710 from apache/dependabot/github_actions/pelican/actions/setup-python-6.2.0 by Jarek Potiuk · 8 days ago