)]}' { "log": [ { "commit": "40e72dbc0d2409a34bddf5fc9e1338c0a14d9387", "tree": "bd7e3880962dd1e8ad90e0cd85c79e3d05895883", "parents": [ "f604247640cdad073439e9e74eabe9564601499d" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Jul 24 21:01:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 21:01:45 2026 +0200" }, "message": "Update Maven Wrapper to 3.3.4 and Maven to 3.9.16 (#503)\n\nSwitch to the script-only distribution type, pin the distribution\nSHA-256 checksum and protect the line endings of the wrapper scripts\nin `.gitattributes` (`mvnw.cmd` must keep CRLF for `cmd.exe`)." }, { "commit": "f604247640cdad073439e9e74eabe9564601499d", "tree": "257b51129ddbafe430b032bb41e1ebe84573fc64", "parents": [ "96cb371e4dc6116359c5ab84b91300aa550d10e3" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Jul 24 17:45:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 17:45:40 2026 +0200" }, "message": "Document the build lifecycle and troubleshooting (#488)\n\n* Document the build lifecycle and troubleshooting\n\nAdd two Antora pages describing what the Logging Parent POM adds to the\nMaven build:\n\n- `build-lifecycle.adoc`: the checks, generated artifacts, and POM\n transformations bound to `./mvnw verify`; the opt-in profiles (build\n modifiers and commands); and what is inherited from the ASF Parent POM.\n- `troubleshooting.adoc`: recipes for the two checks that are hardest to\n diagnose, the BND baseline API-compatibility check and the\n `requireUpperBoundDeps` dependency-convergence check, using real\n captured error output.\n\nWire both pages into the site navigation under a new \"Build\" group.\n\nAssisted-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* Address review remarks\n\n* Link to the Git documentation on .gitattributes and give an example\n that includes the mvnw.cmd CRLF exception.\n* Clarify that the release profile requires both the project version\n and every dependency to be non-SNAPSHOT.\n* Replace concrete version numbers in the troubleshooting recipes with\n x.y.z and a.b.c placeholders, explained in a note.\n* Point the changelog step of the MINOR recipe at the pending\n src/changelog/.\u003cmajor\u003e.x.x/ directory.\n* Fix bold/italic markup consistency (*not*).\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e" }, { "commit": "96cb371e4dc6116359c5ab84b91300aa550d10e3", "tree": "b9d8fa12939faf439a12c3a931015e8b6d4c77ed", "parents": [ "2bbed58b94867cdd8c5d6287c52aeaf054524372" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Jul 24 10:36:22 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 10:36:22 2026 +0200" }, "message": "Disable Maven Site plugin globally (#495)\n\nThe `antora` profile covered two separate concerns: generating the site\nwith Antora (correctly activated by the presence of `src/site/antora`)\nand disabling Maven Site plugin. Since no project uses Maven Site plugin\nany more, the `maven.site.skip` and `maven.site.deploy.skip` properties\nare now set globally, so modules without an Antora site (e.g. in Flume)\nno longer run Maven Site plugin during `mvn site`.\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e" }, { "commit": "2bbed58b94867cdd8c5d6287c52aeaf054524372", "tree": "7c2b52749ced16cdeb4e7475ea683357678d7ce4", "parents": [ "25cad9e5643334578c4818231402e0c73885dc2a" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Thu Jul 23 17:16:29 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 20:46:29 2026 +0530" }, "message": "Fix duplicate `exec-maven-plugin.version` from a bad merge (#496)\n\nCommit 873899ead0b997140568a1d5e1d227d2efa7135b (\"Add options to\nenable Develocity\") accidentally re-added an `exec-maven-plugin.version`\ndeclaration next to the existing one, most likely due to a badly\nresolved merge or rebase. Since then Dependabot has been bumping both\ndeclarations independently.\n\nMaven uses the last declaration, so dropping the first one does not\nchange the effective version (`3.6.3`). This was the only duplicate\nproperty in the POM.\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e" }, { "commit": "25cad9e5643334578c4818231402e0c73885dc2a", "tree": "7fadffc128dc78ac03fea0a4a266e11813d04634", "parents": [ "c6b1b0b7af847c32b59e30776d4be27ccf0f3da7" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Jul 22 15:55:52 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 22 13:55:52 2026 +0000" }, "message": "Simplify the `\u003cdevelopers\u003e` section (#490)\n\n* Simplify `\u003cdevelopers\u003e` section to stable team entries\n\nReplace the fixed list of named PMC members with two role-based team\nentries: the PMC (`dev@logging.apache.org`) for development matters and\nthe Security Team (`security@logging.apache.org`) as the security\ncontact. Both carry the ASF organization, a team/security page URL, and\na free-form role.\n\nA hand-maintained roster is always incomplete, its contact details go\nstale in immutable releases, and naming individuals implies a support\nobligation they have not signed up for. Git history and the project team\npage already track contributors accurately.\n\nThe section cannot be dropped entirely: Maven Central requires at least\none developer with a name and email. The two meta-entries satisfy that\nwhile pointing at durable, monitored channels. `\u003cdevelopers\u003e` is\ninherited by child projects, so a comment documents that these entries\nshould not be overridden downstream.\n\nAssisted-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* fix: restore Gary\u0027s entry\n\n* Simplify comment and remove individuals\n\n* fix: restore Gary\u0027s entry (again)\n\n---------\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "c6b1b0b7af847c32b59e30776d4be27ccf0f3da7", "tree": "33d7b63ddbbf78f9ef3edb36f8d1b8b1c70128fb", "parents": [ "f0c4237064dd4e574e0bffce1b32b7c2409480cd" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Thu Jun 18 10:21:23 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 18 10:21:23 2026 +0200" }, "message": "Document “draft trick” (#476)\n\n* Document “draft trick”\n\nThis change documents the “draft trick” introduced in #475 and applies it to the `main` branch.\n\n* fix: remove PAT references" }, { "commit": "f0c4237064dd4e574e0bffce1b32b7c2409480cd", "tree": "d1a37998549c076611e455cf0f7d1172cec8b23a", "parents": [ "2d294d41e966e745062ffa2aea300060aab49ccc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat May 02 22:56:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 22:56:36 2026 +0200" }, "message": "Bump the dependencies group across 1 directory with 18 updates (#474)\n\n* Bump the dependencies group across 1 directory with 18 updates\n\nBumps the dependencies group with 18 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `35` | `37` |\n| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `4.0.28` | `5.0.5` |\n| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `4.0.28` | `5.0.5` |\n| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.38.0` | `2.49.0` |\n| [de.skuzzle.enforcer:restrict-imports-enforcer-rule](https://github.com/skuzzle/restrict-imports-enforcer-rule) | `2.6.1` | `3.0.0` |\n| [com.palantir.javaformat:palantir-java-format](https://github.com/palantir/palantir-java-format) | `2.69.0` | `2.90.0` |\n| [org.eclipse.jgit:org.eclipse.jgit](https://github.com/eclipse-jgit/jgit) | `7.3.0.202506031305-r` | `7.6.0.202603022253-r` |\n| [biz.aQute.bnd:bnd-baseline-maven-plugin](https://github.com/bndtools/bnd) | `7.1.0` | `7.2.3` |\n| [biz.aQute.bnd:bnd-maven-plugin](https://github.com/bndtools/bnd) | `7.1.0` | `7.2.3` |\n| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.0` | `1.7.3` |\n| [org.codehaus.gmavenplus:gmavenplus-plugin](https://github.com/groovy/GMavenPlus) | `4.2.1` | `4.3.1` |\n| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |\n| [org.apache.maven.plugins:maven-artifact-plugin](https://github.com/apache/maven-artifact-plugin) | `3.6.0` | `3.6.1` |\n| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.0` | `4.9.8.3` |\n| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.44.5` | `3.4.0` |\n| [org.codehaus.mojo:xml-maven-plugin](https://github.com/mojohaus/xml-maven-plugin) | `1.1.0` | `1.2.1` |\n| [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) | `1.15.1` | `2.0.0` |\n| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.3` |\n\n\n\nUpdates `org.apache:apache` from 35 to 37\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\nUpdates `org.apache.groovy:groovy` from 4.0.28 to 5.0.5\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:groovy-ant` from 4.0.28 to 5.0.5\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:groovy-ant` from 4.0.28 to 5.0.5\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `com.google.errorprone:error_prone_core` from 2.38.0 to 2.49.0\n- [Release notes](https://github.com/google/error-prone/releases)\n- [Commits](https://github.com/google/error-prone/compare/v2.38.0...v2.49.0)\n\nUpdates `de.skuzzle.enforcer:restrict-imports-enforcer-rule` from 2.6.1 to 3.0.0\n- [Release notes](https://github.com/skuzzle/restrict-imports-enforcer-rule/releases)\n- [Changelog](https://github.com/skuzzle/restrict-imports-enforcer-rule/blob/master/CHANGELOG_LEGACY.md)\n- [Commits](https://github.com/skuzzle/restrict-imports-enforcer-rule/compare/v2.6.1...v3.0.0)\n\nUpdates `com.palantir.javaformat:palantir-java-format` from 2.69.0 to 2.90.0\n- [Release notes](https://github.com/palantir/palantir-java-format/releases)\n- [Commits](https://github.com/palantir/palantir-java-format/compare/2.69.0...2.90.0)\n\nUpdates `org.eclipse.jgit:org.eclipse.jgit` from 7.3.0.202506031305-r to 7.6.0.202603022253-r\n- [Commits](https://github.com/eclipse-jgit/jgit/compare/v7.3.0.202506031305-r...v7.6.0.202603022253-r)\n\nUpdates `biz.aQute.bnd:bnd-baseline-maven-plugin` from 7.1.0 to 7.2.3\n- [Release notes](https://github.com/bndtools/bnd/releases)\n- [Commits](https://github.com/bndtools/bnd/compare/7.1.0...7.2.3)\n\nUpdates `biz.aQute.bnd:bnd-maven-plugin` from 7.1.0 to 7.2.3\n- [Release notes](https://github.com/bndtools/bnd/releases)\n- [Commits](https://github.com/bndtools/bnd/compare/7.1.0...7.2.3)\n\nUpdates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.0 to 1.7.3\n- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)\n- [Commits](https://github.com/mojohaus/flatten-maven-plugin/compare/1.7.0...1.7.3)\n\nUpdates `org.codehaus.gmavenplus:gmavenplus-plugin` from 4.2.1 to 4.3.1\n- [Release notes](https://github.com/groovy/GMavenPlus/releases)\n- [Commits](https://github.com/groovy/GMavenPlus/compare/4.2.1...4.3.1)\n\nUpdates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.13...v0.8.14)\n\nUpdates `org.apache.maven.plugins:maven-artifact-plugin` from 3.6.0 to 3.6.1\n- [Release notes](https://github.com/apache/maven-artifact-plugin/releases)\n- [Commits](https://github.com/apache/maven-artifact-plugin/compare/maven-artifact-plugin-3.6.0...maven-artifact-plugin-3.6.1)\n\nUpdates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.0 to 4.9.8.3\n- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)\n- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.9.3.0...spotbugs-maven-plugin-4.9.8.3)\n\nUpdates `com.diffplug.spotless:spotless-maven-plugin` from 2.44.5 to 3.4.0\n- [Release notes](https://github.com/diffplug/spotless/releases)\n- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)\n- [Commits](https://github.com/diffplug/spotless/compare/maven/2.44.5...maven/3.4.0)\n\nUpdates `org.codehaus.mojo:xml-maven-plugin` from 1.1.0 to 1.2.1\n- [Release notes](https://github.com/mojohaus/xml-maven-plugin/releases)\n- [Commits](https://github.com/mojohaus/xml-maven-plugin/compare/1.1.0...xml-maven-plugin-1.2.1)\n\nUpdates `com.github.eirslett:frontend-maven-plugin` from 1.15.1 to 2.0.0\n- [Changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/eirslett/frontend-maven-plugin/compare/frontend-plugins-1.15.1...frontend-plugins-2.0.0)\n\nUpdates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.3\n- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)\n- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.5.1...3.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: biz.aQute.bnd:bnd-baseline-maven-plugin\n dependency-version: 7.2.3\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: biz.aQute.bnd:bnd-maven-plugin\n dependency-version: 7.2.3\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: com.diffplug.spotless:spotless-maven-plugin\n dependency-version: 3.4.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: com.github.eirslett:frontend-maven-plugin\n dependency-version: 2.0.0\n dependency-type: direct:development\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: com.github.spotbugs:spotbugs-maven-plugin\n dependency-version: 4.9.8.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: dependencies\n- dependency-name: com.google.errorprone:error_prone_core\n dependency-version: 2.49.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: com.palantir.javaformat:palantir-java-format\n dependency-version: 2.90.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: de.skuzzle.enforcer:restrict-imports-enforcer-rule\n dependency-version: 3.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: org.apache.groovy:groovy\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: org.apache.groovy:groovy-ant\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: org.apache.groovy:groovy-ant\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: org.apache.maven.plugins:maven-artifact-plugin\n dependency-version: 3.6.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: dependencies\n- dependency-name: org.apache:apache\n dependency-version: \u002737\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: dependencies\n- dependency-name: org.codehaus.gmavenplus:gmavenplus-plugin\n dependency-version: 4.3.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: org.codehaus.mojo:exec-maven-plugin\n dependency-version: 3.6.3\n dependency-type: direct:development\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: org.codehaus.mojo:flatten-maven-plugin\n dependency-version: 1.7.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: dependencies\n- dependency-name: org.codehaus.mojo:xml-maven-plugin\n dependency-version: 1.2.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: org.eclipse.jgit:org.eclipse.jgit\n dependency-version: 7.6.0.202603022253-r\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: dependencies\n- dependency-name: org.jacoco:jacoco-maven-plugin\n dependency-version: 0.8.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Generate changelog entries for #474\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: github-actions[bot] \u003c41898282+github-actions[bot]@users.noreply.github.com\u003e" }, { "commit": "2d294d41e966e745062ffa2aea300060aab49ccc", "tree": "89045970c4b376b53f2dc0e609874c163c267391", "parents": [ "20e51c189701756321b0061a8500ef878f2d2c1c" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sat May 02 21:36:56 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 21:36:56 2026 +0200" }, "message": "feat: add `process-dependabot-reusable` workflow (Bash-based alternative) (#419)\n\n* feat: add `process-dependabot-reusable` workflow (Bash-based alternative)\n\nThis PR introduces a **reusable GitHub Actions workflow**, `process-dependabot-reusable`, designed to streamline the handling of Dependabot pull requests across repositories — implemented entirely with **shell scripts**.\n\nThis serves as a Bash-based alternative to #418, which uses TypeScript.\n\n### 🔄 Key Differences from #418\n\n* **Trigger**: Runs on `pull_request_target` (not `push`), which is required by the `dependabot/fetch-metadata` action.\n* **Implementation**: Written using **standard POSIX tools** with a few dependencies:\n\n * **`bash`** – some Bash-specific constructs are used\n * **`jq`** – for processing JSON output from `dependabot/fetch-metadata`\n * **`xmlstarlet`** – for parsing `pom.xml` and generating a changelog XML file\n * **`git`** – to commit and push any changes\n * **`gh`** – to enable \"auto-merge\" on the pull request\n\nThis approach avoids the Node.js/TypeScript toolchain and relies only on standard CLI tools commonly available in CI environments.\n\n* fix: Typos detected by Copilot\n\n* fix: install `xmlstarlet`\n\n* fix: replace `apt` with `apt-get`\n\nThe `apt` command is not recommended for scripting.\n\n* feat: Split Dependabot workflow into privileged and unprivileged parts\n\nThis change splits the Dependabot automation into two reusable workflows:\n\n* **Unprivileged workflow** (`analyze-dependabot-reusable`):\n Runs on `pull_request` with no permissions. It analyzes Dependabot PRs and generates metadata safely.\n\n* **Privileged workflow** (`process-dependabot-reusable`):\n Uses the metadata from the unprivileged step to generate changelog files and enable the \"auto-merge\" option. Requires access to our GPG key and Personal Access Token.\n\n* fix: limit the number of tokens\n\n* fix: drop all permissions by default\n\n* Apply suggestions from code review\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e\n\n* fix: switch to `dependabot/fetch-metadata`\n\n* fix: apply review suggestions\n\n* fix: extract PR data from caller of `process-dependabot-reusable`\n\n* fix: inline user-name and user-email\n\n* fix: add `changelog-path` and remove `xmlstarlet`\n\n* fix: sort inputs\n\n* fix: filters on PR user\n\n* fix: remove computable parameters\n\nRemoves the parameters that can be computed.\n\n* fix: refactor XML escaping\n\n* fix: debug `workflow_run` payload\n\n* fix: remove license line\n\n* fix: add comments to checks\n\n* fix: check order\n\n* fix: adapt to `ppkarwasz` organisation\n\n* Bump Dependabot workflow dependencies\n\n* Remove commit signing\n\n* Modify preconditions\n\n* Apply suggestions from code review\n\nCo-authored-by: Copilot \u003c175728472+Copilot@users.noreply.github.com\u003e\n\n* Move Dependabot workflows to #473\n\nThis changes:\n\n- Moves reusable workflows to the `gha/v0` branch (#473).\n- Creates Dependabot workflows for `logging-parent`.\n\n---------\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Copilot \u003c175728472+Copilot@users.noreply.github.com\u003e" }, { "commit": "20e51c189701756321b0061a8500ef878f2d2c1c", "tree": "7cfd6e64e02f45894b458c9b858728aab044d851", "parents": [ "59262d0380b3bc7da84a92b238a0051696f84da3" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Sat May 02 19:53:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 19:53:45 2026 +0200" }, "message": "Try to fix CI (#467)\n\nCo-authored-by: Piotr P. Karwasz \u003cpkarwasz-github@apache.org\u003e" }, { "commit": "59262d0380b3bc7da84a92b238a0051696f84da3", "tree": "07cbea4a72c006eecbe92320075f22e52a9e46da", "parents": [ "54ac85f293b024b55de1caa2cd338ec9993a4657" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sat May 02 19:49:25 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 02 19:49:25 2026 +0200" }, "message": "Restore Branch Protection rules (#471)\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "54ac85f293b024b55de1caa2cd338ec9993a4657", "tree": "70f294dc1a3bec5f9c464a9a68e7d1702f71563f", "parents": [ "9e3ceb49764393a90bb8182954329b83f3361e85" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Thu Apr 16 13:30:07 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 16 13:30:07 2026 +0200" }, "message": "Run build unconditionally (#462)\n\nWith `merge-dependabot` out of the way, the `build` workflow should run for all PRs." }, { "commit": "9e3ceb49764393a90bb8182954329b83f3361e85", "tree": "224fb5c1e6511f712713cb0db8ce2ac3a61b013a", "parents": [ "ae75ce2d015310a214da7f2913c30e10a2930566" ], "author": { "name": "Volkan Yazıcı", "email": "volkan@yazi.ci", "time": "Thu Apr 16 12:33:55 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 16 12:33:55 2026 +0200" }, "message": "Document that GHA workflows are moved to `gha/v0` (#455)\n\nCo-authored-by: Piotr P. Karwasz \u003cpkarwasz-github@apache.org\u003e" }, { "commit": "ae75ce2d015310a214da7f2913c30e10a2930566", "tree": "302d8c671c513c60404f8484ebb9421fdd3dfdb8", "parents": [ "5432b6c10a719c207d3e1e3f5c3fdd0ee89824d7" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:54:08 2026 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:54:08 2026 +0200" }, "message": "fix: change rule name\n" }, { "commit": "5432b6c10a719c207d3e1e3f5c3fdd0ee89824d7", "tree": "b8f999aad92a1f7152fc9e50d9739b5f160cf44a", "parents": [ "ac7c974797c5a5d10e7046bc27dec51d4fce75fc" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:49:09 2026 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:49:09 2026 +0200" }, "message": "fix: try with \"~DEFAULT_BRANCH\"\n" }, { "commit": "ac7c974797c5a5d10e7046bc27dec51d4fce75fc", "tree": "02e2b8242fd97cd1af7ed36c667864ddeaae449e", "parents": [ "7c5f6cd5a6a7435373c44f15030cff4a0e81b694" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:26:33 2026 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 23:26:33 2026 +0200" }, "message": "fix: restore protection on main\n" }, { "commit": "7c5f6cd5a6a7435373c44f15030cff4a0e81b694", "tree": "ab7f3d635bc9c8f9a7e6f7f4a46e6236f0410ab4", "parents": [ "6b3df11053b8c719f820f1c95b51847f7eec7503" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 22:44:55 2026 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 22:44:55 2026 +0200" }, "message": "fix validation errors in `.asf.yaml` file\n" }, { "commit": "6b3df11053b8c719f820f1c95b51847f7eec7503", "tree": "013fc3b0473a0fe8b36a2bb1c37c38b5ff47c23a", "parents": [ "1ac4b33af7a16cc7ba3f3638b1e4e507c32d2752" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 17:34:09 2026 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 17:34:09 2026 +0200" }, "message": "Switch from `app_slug` to numeric id\n" }, { "commit": "1ac4b33af7a16cc7ba3f3638b1e4e507c32d2752", "tree": "00227fd7ecbbd6d0c7b79a6d2396a46cd1f3e134", "parents": [ "f4a11e7c906e5aa0ecb0df542d97dfd5b90d9579" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 15 16:30:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 15 16:30:09 2026 +0200" }, "message": "Test GitHub Rulesets support in `.asf.yaml` (#456)\n\nThis change migrates branch protection from the deprecated [Protected Branches](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches) feature to [Rulesets](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets), using the new `rulesets` key added in apache/infrastructure-asfyaml#89.\n\n## WhyRulesets?\n\n- Rules are publicly visible at https://github.com/apache/logging-parent/rules\n- The same ruleset can be applied to multiple branches simultaneously\n- `app_slug` identifiers replace fragile numeric `app_id` values\n\nThe `required_signatures` rule was also dropped, as the project decided commit signing is not useful.\n\n## Testing strategy\n\nThe `.asf.yaml` file for Rulesets is only processed from the default branch. This means any mistake on `main` cannot be corrected without direct push access, which itself would be blocked by the broken rule. To avoid that trap, this PR:\n\n1. Applies the new ruleset only to `test/rulesets`, leaving `main` temporarily unprotected\n2. This allows direct fixes to `main` if the ruleset turns out to be misconfigured\n\nOnce the ruleset is verified to be correct on test/rulesets, a follow-up PR will apply it to `main` and restore full protection." }, { "commit": "f4a11e7c906e5aa0ecb0df542d97dfd5b90d9579", "tree": "141f8529bb123230fd5744014e835182088dfc7b", "parents": [ "0d490002c3bc5143dc29eb1834958897db3962f1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 13:11:27 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 13:11:27 2025 +0000" }, "message": "Update `@antora/cli` to version `` (#436)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "0d490002c3bc5143dc29eb1834958897db3962f1", "tree": "aca293f7ca16ea1ee2c5b081cae11e54c1970b53", "parents": [ "a37d5508e3c85425451f08f6f0bdf215e330dfd1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:51:47 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:51:47 2025 +0000" }, "message": "Update `sha.js` to version `2.4.12` (#434)\n\n" }, { "commit": "a37d5508e3c85425451f08f6f0bdf215e330dfd1", "tree": "89019bd2c2b94518c4459ffb323b457821c25f83", "parents": [ "31f60d4af7ff9227f9ec06bdfa1546c5a306d105" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:51:33 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:51:33 2025 +0000" }, "message": "Update `actions/setup-java` to version `5.0.0` (#433)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "31f60d4af7ff9227f9ec06bdfa1546c5a306d105", "tree": "1c705faa18ac1c19b729360aa869af15fa7b430c", "parents": [ "e638779c83c74df55e4f03e165f2fbd550206fe9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:51:18 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:51:18 2025 +0000" }, "message": "Update `actions/cache` to version `4.2.4` (#431)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "e638779c83c74df55e4f03e165f2fbd550206fe9", "tree": "33db2270f95d76fcc0ed8806b58dbb0fba5e125b", "parents": [ "1df0c2e40753cff942f89c0c20fa706c20c6a343" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:51:09 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:51:09 2025 +0000" }, "message": "Update `com.gradle:develocity-maven-extension` to version `2.1` (#429)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "1df0c2e40753cff942f89c0c20fa706c20c6a343", "tree": "9717960195e85506a1df0b766d0e3b6d24e56920", "parents": [ "2b8c1eaaecd4e0b5baf06cb900df965df8ca8d69" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:50:56 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:50:56 2025 +0000" }, "message": "Update `org.apache:apache` to version `35` (#416)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "2b8c1eaaecd4e0b5baf06cb900df965df8ca8d69", "tree": "a7988ff146e294db5a435530ce2bef8bdd9fd957", "parents": [ "69894fb46c8900c4977adc9d660406f60be6b9b7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:50:10 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:50:10 2025 +0000" }, "message": "Update `brace-expansion` to version `1.1.12` (#414)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "69894fb46c8900c4977adc9d660406f60be6b9b7", "tree": "50f72e9e10b35cfa69a09bb3e710a371732c7075", "parents": [ "56684f717dd7edb8e40683f08d28902cc5370387" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:49:34 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:49:34 2025 +0000" }, "message": "Update `org.codehaus.gmavenplus:gmavenplus-plugin` to version `` (#426)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "56684f717dd7edb8e40683f08d28902cc5370387", "tree": "782aeeb8c1b82b589a234803deab49695ac9225a", "parents": [ "fe3d4172ebe32b7c962909a56c372a475c7de16c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Sep 12 12:48:04 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 12 12:48:04 2025 +0000" }, "message": "Update `org.apache.groovy:groovy` to version `` (#430)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "fe3d4172ebe32b7c962909a56c372a475c7de16c", "tree": "981ce8f3fa402acf9cf2a7169ed434111b97f9f4", "parents": [ "e61addc585f8b7a39df87ad12437aa7d1ae38f7d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 07 12:32:06 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 07 12:32:06 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.69.0` (#423)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "e61addc585f8b7a39df87ad12437aa7d1ae38f7d", "tree": "2757f75ec571a42e040a5b3cae02ed3353703cb9", "parents": [ "2d8130878fd77c3b145f0cba855f1790e3d37d18" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 30 15:16:16 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 30 15:16:16 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.29.0` (#412)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "2d8130878fd77c3b145f0cba855f1790e3d37d18", "tree": "fde43c317ae3778f7fb87e5f6a155308b5b1edf3", "parents": [ "285472ad411cd34e89630ee2f9b1d4f4ab8c6873" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon Jun 30 13:09:46 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 30 13:09:46 2025 +0200" }, "message": "feat: Restrict permissions in reusable workflows (#421)\n\n### feat: Restrict permissions in reusable workflows\n\nThis update limits the `GITHUB_TOKEN` permissions granted to reusable workflows, ensuring they operate with only the permissions strictly necessary for their function.\n\nAlthough GitHub ensures that reusable workflows cannot exceed the permissions granted by the calling workflow, [GitHub documentation](https://docs.github.com/en/actions/sharing-automations/reusing-workflows#access-and-permissions) recommends that they explicitly declare the minimal permissions they require. This practice helps prevent misuse in scenarios where a caller might over-provision permissions.\n\n#### 🔐 Updated Permissions by Workflow:\n\n- **`contents: write`**\n Required only by:\n - `deploy-release-reusable`\n - `deploy-site-reusable`\n These workflows need write access to push changes to Git branches.\n For all other workflows, we now explicitly set `contents: none`.\n\n- **`security-events: write`**\n Required only by:\n - `codeql-analysis-reusable`\n - `scorecards-analysis-reusable`\n These workflows need this permission to upload security scanning results.\n\nBy scoping permissions tightly, we improve our workflows’ security posture without impacting functionality.\n\n* Remove `profile: ~`\n\n### fix: Clarify workflow-level `permissions` setting\n\nAdd a comment explaining that setting `permissions` at the workflow level defines the **default** permissions for all jobs.\nTo enforce the principle of least privilege, the default is set to `{}` (no permissions), requiring each job to explicitly declare only what it needs.\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "285472ad411cd34e89630ee2f9b1d4f4ab8c6873", "tree": "67d3789cbc286fcc70cda97f7b86e5069e3217c8", "parents": [ "27d5c802a6593c0bd2ebf5ad682d01703130b637" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Jun 13 21:36:33 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 13 21:36:33 2025 +0200" }, "message": "Start new development cycle (`12.1.2`) (#413)\n\n* Prepare release notes for version `12.1.1`\n\n* Update the `project.build.outputTimestamp` property\n\n* Start next development cycle\n\n---------\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "27d5c802a6593c0bd2ebf5ad682d01703130b637", "tree": "7fe99901192e8dd683ea4dbbdc842e356ac1e3de", "parents": [ "12bdb036166b026b52a7a4bc57dd860e20779c66" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 11:37:21 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 11:37:21 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.68.0` (#410)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "12bdb036166b026b52a7a4bc57dd860e20779c66", "tree": "98d8a4c3b009154fcb22cc66a61ce60449b16ee8", "parents": [ "e6f8ac33ed2dbe043dc37ffaf82be6828c860b0e" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Tue Jun 10 13:27:37 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 13:27:37 2025 +0200" }, "message": "Fix incorrect key syntax in `actions/cache/save` (#411)\n\nThe `key` parameter for the `actions/cache/save` action introduced in #409 is not evaluated due to missing expression syntax." }, { "commit": "e6f8ac33ed2dbe043dc37ffaf82be6828c860b0e", "tree": "f0adeef22f918a03c951cd2dcd388bf5a107cbe8", "parents": [ "3b4379f2336f8656883e0628ef82c55db61080dc" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Tue Jun 10 11:38:28 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 11:38:28 2025 +0200" }, "message": "Improve Node.js caching using `package-lock.json` (#409)\n\nThis PR updates the caching strategy for Node.js dependencies to base the cache key on the contents of `package-lock.json`, rather than the `node` or `node_modules` directories.\n\n### Problem\n\nCurrently, caching is ineffective because:\n\n* The cache key relies on `node` and `node_modules` directories.\n* These directories are not checked into the repository and therefore don’t exist when the cache is computed.\n\n### Solution\n\nUpdate the cache key to use the contents of `package-lock.json`, which is a reliable representation of the dependency tree:\n\n* If `package-lock.json` **is not committed**, the cache behavior remains unchanged.\n* If it **is committed**, caching will function as expected, restoring and saving dependencies based on lockfile changes.\n\n### Additional Changes\n\n* Commit `package-lock.json` in the `logging-parent` repository to evaluate the effectiveness of this approach.\n* Reverts the use of `npm-shrinkwrap.json` introduced in #367.\n" }, { "commit": "3b4379f2336f8656883e0628ef82c55db61080dc", "tree": "92de5f1647a7cc9a8e76b3c73d4fb908b6e9464d", "parents": [ "0725f820af4f6457969e76d17944ac2884b58fda" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:13:22 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:13:22 2025 +0000" }, "message": "Update `com.gradle:common-custom-user-data-maven-extension` to version `2.0.3` (#407)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "0725f820af4f6457969e76d17944ac2884b58fda", "tree": "f3eecf9f4805a588eb624dfc48dd035c8ea09a8e", "parents": [ "430175585a324baf9ca2a4704f330617adcfb5d8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:11:49 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:11:49 2025 +0000" }, "message": "Update `org.eclipse.jgit:org.eclipse.jgit` to version `7.3.0.202506031305-r` (#405)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "430175585a324baf9ca2a4704f330617adcfb5d8", "tree": "4728293ff839110f3413473a05e5012e4e756657", "parents": [ "908b2f326eb0caf89fce13997d87ccd266bcef46" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:11:37 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:11:37 2025 +0000" }, "message": "Update `gradle/develocity-actions` to version `1.4` (#404)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "908b2f326eb0caf89fce13997d87ccd266bcef46", "tree": "df107193798a5130f382dbe3d50d09ddc2c0a2ca", "parents": [ "2bf3dfcc15c58bfb8031b96937b8957682066bc2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:11:27 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:11:27 2025 +0000" }, "message": "Update `org.codehaus.mojo:build-helper-maven-plugin` to version `3.6.1` (#403) (#403)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "2bf3dfcc15c58bfb8031b96937b8957682066bc2", "tree": "c228ee873eba561921154a3922196628eee875a6", "parents": [ "91180a240c56ec3429ee167d44f4694ff242cb23" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:11:09 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:11:09 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.19` (#402)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "91180a240c56ec3429ee167d44f4694ff242cb23", "tree": "62ef24ff394e7e201296fba8f90c721a409dbc46", "parents": [ "4fb23ab56e0b5b0e97e2388d52c190c429fedf93" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:11:03 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:11:03 2025 +0000" }, "message": "Update `ossf/scorecard-action` to version `2.4.2` (#399)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "4fb23ab56e0b5b0e97e2388d52c190c429fedf93", "tree": "111f2f014ca5f71f1541c8ae323355c7b389e83c", "parents": [ "71fa39a229300cce8028784a228d3ac084f34227" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:10:39 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:10:39 2025 +0000" }, "message": "Update `com.gradle:develocity-maven-extension` to version `2.0.1` (#398)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "71fa39a229300cce8028784a228d3ac084f34227", "tree": "788fbc3a52bd60e2bad7e167deb08af260d5811c", "parents": [ "2c9b96e340d96d9bf92ff9f09b735193aec14490" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:10:35 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:10:35 2025 +0000" }, "message": "Update `com.diffplug.spotless:spotless-maven-plugin` to version `2.44.5` (#397)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "2c9b96e340d96d9bf92ff9f09b735193aec14490", "tree": "87e6db5c1840a844e0d74879c910a6baa050bc05", "parents": [ "d30bd6427caf00e66f8dbcc841ef9a50e1fb3cde" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 09:09:42 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 09:09:42 2025 +0000" }, "message": "Update `org.codehaus.mojo:exec-maven-plugin` to version `3.5.1` (#396)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "d30bd6427caf00e66f8dbcc841ef9a50e1fb3cde", "tree": "13a61a17c028c7303c47b877b4d93a363a218425", "parents": [ "7b83a8c760014d345e0b9a71d82b4c3f99893266" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 10 08:58:32 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 08:58:32 2025 +0000" }, "message": "Update `org.apache.groovy:groovy` to version `4.0.27` (#395)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "7b83a8c760014d345e0b9a71d82b4c3f99893266", "tree": "ee8208dffcbabca702a2802b9dd5d5fb37f86c31", "parents": [ "0eea0ffbcba03c14a9cce2a5d002b53be521e6db" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Tue Jun 10 10:57:09 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 10 10:57:09 2025 +0200" }, "message": "Improve reliability of reproducibility verification (#406)\n\nThis change introduces a separate cache specifically for the verify-reproducibility workflow to ensure it does not reuse artifacts cached by other workflows.\nBy isolating its cache, we ensure that reproducibility checks are based solely on artifacts built within the same workflow, improving the reliability and accuracy of the verification.\n\nCloses #388" }, { "commit": "0eea0ffbcba03c14a9cce2a5d002b53be521e6db", "tree": "ba528c1e366a02056edb76959d633e5d0e275f5f", "parents": [ "740c69a8dfaa56674aa48bfecfc46fdf6397b7ce" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Jun 04 07:11:43 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 04 07:11:43 2025 +0200" }, "message": "Fix staging of binary distribution archive (#401)\n\n* Fix staging of binary distribution archive\n\nDue to the replacement of Maven Deploy Plugin with Nexus Staging Plugin, the staging process of the binary distribution archive fails.\n\nSince the Nexus Staging Plugin also creates a local staging folder in `target/nexus-staging/staging`, this change simply reuses the already existing folder to retrieve all the published artifacts.\n\n* Fix job step name\n\n---------\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "740c69a8dfaa56674aa48bfecfc46fdf6397b7ce", "tree": "ee531bc4c8992a1f7c101536c1cab3b2e3dc13f6", "parents": [ "ec79bb517428d68f823b39b75504a75568a50b02" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:46:43 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:46:43 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.67.0` (#394) (#394)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "ec79bb517428d68f823b39b75504a75568a50b02", "tree": "a21a2cac57bd00af90dd5fa9ba1cf7fb0c33423d", "parents": [ "a9a665cfdde097b4b02c1d9835791f07ec8235c7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:43:48 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:43:48 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.18` (#393) (#393)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "a9a665cfdde097b4b02c1d9835791f07ec8235c7", "tree": "a5e1ffa02278b74bdfd1639a9ea268a7530a6333", "parents": [ "9cc6a56d0e526941609f53e59a3f7388bbe2a836" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:22:43 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:22:43 2025 +0000" }, "message": "Update `com.gradle:common-custom-user-data-maven-extension` to version `2.0.2` (#384) (#384)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "9cc6a56d0e526941609f53e59a3f7388bbe2a836", "tree": "fa318c2d07b9360c1ec4b28aa244d43b964b52f0", "parents": [ "e3ee0bb04d7762b87430e354457ab92775fafc68" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:22:24 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:22:24 2025 +0000" }, "message": "Update `com.h3xstream.findsecbugs:findsecbugs-plugin` to version `1.14.0` (#380) (#380)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e\nCo-authored-by: Piotr P. Karwasz \u003cpkarwasz-github@apache.org\u003e" }, { "commit": "e3ee0bb04d7762b87430e354457ab92775fafc68", "tree": "a168ce8a801bd3319a300ec2e4a9f64e490df676", "parents": [ "0b654003f5d162b58edaca8d98d7a3980f7588ed" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:22:09 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:22:09 2025 +0000" }, "message": "Update `org.eclipse.jgit:org.eclipse.jgit` to version `7.2.1.202505142326-r` (#387) (#387)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "0b654003f5d162b58edaca8d98d7a3980f7588ed", "tree": "62e4a425c1ee1a56625936bafd033f72e14a2186", "parents": [ "1bf7ff50ace3600237810ad7dacc9cc21a41fa6a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:21:48 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:21:48 2025 +0000" }, "message": "Update `dependabot/fetch-metadata` to version `2.4.0` (#386) (#386)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "1bf7ff50ace3600237810ad7dacc9cc21a41fa6a", "tree": "cc8daaed70be1796d317992d30944d6ca6a8bc99", "parents": [ "a5716a6341cbabb25eb9e487cf7b3dff33727ca6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:21:25 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:21:25 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.64.0` (#385) (#385)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "a5716a6341cbabb25eb9e487cf7b3dff33727ca6", "tree": "4563a48ab01747c23a1393a088e6efeaf3006527", "parents": [ "5cda5299af9a140521fec8d8d5fbe41421cd12a8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:20:25 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:20:25 2025 +0000" }, "message": "Update `org.codehaus.gmavenplus:gmavenplus-plugin` to version `4.2.0` (#383) (#383)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "5cda5299af9a140521fec8d8d5fbe41421cd12a8", "tree": "a3b3f6ef406cc14c34d9d60130c57300f1c5980d", "parents": [ "26b95a0f51d7b19541f3982f90ecbe4e93f38385" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:19:53 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:19:53 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.16` (#382) (#382)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "26b95a0f51d7b19541f3982f90ecbe4e93f38385", "tree": "119710924d5b1e7c4e68fac7f79091de13623432", "parents": [ "348fede6eea955ec120451e62b1be59e68a1e520" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 20:19:06 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:19:06 2025 +0000" }, "message": "Update `com.google.errorprone:error_prone_core` to version `2.38.0` (#381) (#381)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "348fede6eea955ec120451e62b1be59e68a1e520", "tree": "442a203ad24c7816ead446bf216dabb83cd5579e", "parents": [ "665e56163dd7e48829cea459aa757889d8b00316" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 19 22:06:23 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 22:06:23 2025 +0200" }, "message": "Update `fast-xml-parser` to version `` (#391) (#391)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e\nCo-authored-by: Piotr P. Karwasz \u003cpkarwasz-github@apache.org\u003e" }, { "commit": "665e56163dd7e48829cea459aa757889d8b00316", "tree": "9983fc89ea8e91eeee55f902d279c6c9cb46279f", "parents": [ "8e309e7e7f7db492c70db592a46cc9482aed2069" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon May 19 21:57:08 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 21:57:08 2025 +0200" }, "message": "Remove staging branch used in #367 (#392)\n\nThis removes the temporary testing site used in PR #367." }, { "commit": "8e309e7e7f7db492c70db592a46cc9482aed2069", "tree": "d5cf0b87e83ade7beb3c166616ce4c45e8f6723b", "parents": [ "6286ddc654e201622b2e86a3d951e0a69cc92c1f" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon May 19 21:55:50 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 21:55:50 2025 +0200" }, "message": "Use workflows on the same branch (#379)\n\n* Use workflows on the same branch\n\nSince most of the PRs to `logging-parent` modify the workflows, we should not run the reusable workflows from the `@main` branch, but from the same branch as the PR.\n\nThis PR changes all non-reusable workflows to use the `./.github/workflows/\u003cworkflow\u003e` syntax, which uses the workflow file from the same branch as the calling workflow.\n\n* fix: add examples of workflow usage" }, { "commit": "6286ddc654e201622b2e86a3d951e0a69cc92c1f", "tree": "f9864b205b682326d2b37e4d5fd146ee9fedffac", "parents": [ "5af05ca1db977090ea7ec766875748a73e62c9e0" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon May 19 21:24:17 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 21:24:17 2025 +0200" }, "message": "Enable auto-merge and update branch buttons (#390)\n\nSimilarly to apache/logging-log4j2#3662, this pull request enables the \"Auto-merge\" and \"Update branch\" buttons on PRs." }, { "commit": "5af05ca1db977090ea7ec766875748a73e62c9e0", "tree": "a405f0d6d2df685dd76aeb5abcbabb0fc7ef3d5f", "parents": [ "4551dd76ab5869821ff9d0242e3171e10c3d1875" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon May 19 20:55:47 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 19 20:55:47 2025 +0200" }, "message": "Lock Antora dependencies (#367)\n\nWe use [`npm-shrinkwrap.json`](https://docs.npmjs.com/cli/v11/configuring-npm/npm-shrinkwrap-json) to publish a locked list of dependency versions.\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "4551dd76ab5869821ff9d0242e3171e10c3d1875", "tree": "3d096eac8ca61cd9c4b65e11214f4c3102d32eef", "parents": [ "e26bebb190de6da0e5cccfc920f95747d62ad20a" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sat Apr 12 17:37:32 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Sat Apr 12 17:37:32 2025 +0200" }, "message": "Enable review-then-commit\n" }, { "commit": "e26bebb190de6da0e5cccfc920f95747d62ad20a", "tree": "81de402cf4663d02357e3ff1c994516d2f527906", "parents": [ "45eb583d9a89314ebbc2f2fcae61861771a0a660" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:45:41 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:45:41 2025 +0200" }, "message": "Try short name\n" }, { "commit": "45eb583d9a89314ebbc2f2fcae61861771a0a660", "tree": "586c14462ca24d47821c6b26bb37d2156040b3b9", "parents": [ "198c399ec33f78b0159916268fd06facf389ce6e" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:40:08 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:40:08 2025 +0200" }, "message": "Try complete job name\n" }, { "commit": "198c399ec33f78b0159916268fd06facf389ce6e", "tree": "66cd64ed704efde570a347e24ba79314639db987", "parents": [ "25e9a1d6e118707db3deeaf8ded0eeb509d4b5d6" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:34:04 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:34:04 2025 +0200" }, "message": "Try requiring build on `ubuntu-latest`\n" }, { "commit": "25e9a1d6e118707db3deeaf8ded0eeb509d4b5d6", "tree": "d2d29aff9d39a2c51359c4fde20d90efba13aadd", "parents": [ "e37fad28b96c8b88adb8c92e7d5d47886d116fda" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:27:03 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:27:03 2025 +0200" }, "message": "Revert \"Disable branch protection on `non-default`\"\n\nThis reverts commit e37fad28b96c8b88adb8c92e7d5d47886d116fda.\n" }, { "commit": "e37fad28b96c8b88adb8c92e7d5d47886d116fda", "tree": "261ef8603e36f12481220cef0ecc2979141dc621", "parents": [ "45e242d4d6fc792c32fb267e629fbf0dacea87e6" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:20:45 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:20:45 2025 +0200" }, "message": "Disable branch protection on `non-default`\n" }, { "commit": "45e242d4d6fc792c32fb267e629fbf0dacea87e6", "tree": "d2d29aff9d39a2c51359c4fde20d90efba13aadd", "parents": [ "a9cbcc1a22112dcbaaf4d353d5a0f2bd0a6ea616" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:04:42 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Fri Apr 11 14:04:50 2025 +0200" }, "message": "Add protected branch for testing\n" }, { "commit": "a9cbcc1a22112dcbaaf4d353d5a0f2bd0a6ea616", "tree": "9353de8e4d6b9f8c5c68e67b8e37e116e814334f", "parents": [ "7e50723ac02f5be748202c1ac5e8f74dced0a6bf" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Fri Apr 11 10:22:18 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Fri Apr 11 10:22:18 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.63.0` (#377)\n" }, { "commit": "7e50723ac02f5be748202c1ac5e8f74dced0a6bf", "tree": "0073a358e2a3a47bd52ff523e1b46ba335bd7eaf", "parents": [ "208e38725a8e18c084260689e1f133ced2511e45" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Apr 09 10:46:08 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Apr 09 10:46:08 2025 +0000" }, "message": "Update `actions/setup-java` to version `4.7.1` (#376)\n" }, { "commit": "208e38725a8e18c084260689e1f133ced2511e45", "tree": "7bba07950f1491f84e7924d63fb38c176ebe45dd", "parents": [ "941d0834229959bf309385e01f807e4e6f50aa86" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Apr 09 10:26:17 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Apr 09 10:26:17 2025 +0000" }, "message": "Update `com.gradle:develocity-maven-extension` to version `2.0` (#375)\n" }, { "commit": "941d0834229959bf309385e01f807e4e6f50aa86", "tree": "5aa0f4bf184e8b7477141999bd3f6545d34ddf94", "parents": [ "f6d91efb046650e4b1905227c8944f19a5eafa50" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 09 08:14:23 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 09 08:14:23 2025 +0200" }, "message": "Prepare for next development cycle\n" }, { "commit": "f6d91efb046650e4b1905227c8944f19a5eafa50", "tree": "6f8f4d4d65639941174f5cd6c5f9ebb1d47c5447", "parents": [ "91e2a93c9ca4cf307fceda1b25b7b71aecc87eea", "c470a36f072ecb716e8aef7c5719d50ff9d1a9dc" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 09 08:13:06 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Apr 09 08:13:06 2025 +0200" }, "message": "Merge tag \u0027rel/12.1.0\u0027\n\nLink to vote:\nhttps://lists.apache.org/thread/g3d3jjsf77y8jh1870ch91cyqcxr8vhf\n" }, { "commit": "91e2a93c9ca4cf307fceda1b25b7b71aecc87eea", "tree": "9dbd02a1e2c335a759126ec830c4c7f1d6807b18", "parents": [ "a25e3aab972f916bba297ff98d59b83ef55df858" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 08 10:46:11 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 08 10:46:11 2025 +0000" }, "message": "Update `com.diffplug.spotless:spotless-maven-plugin` to version `2.44.4` (#372)\n" }, { "commit": "a25e3aab972f916bba297ff98d59b83ef55df858", "tree": "fa3b621c25be4cb7c923869d53d5b6dcc0331fd4", "parents": [ "9206282b1aa4b58a100662a80f7f5c3526f35137" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 08 10:25:40 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 08 10:25:40 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.15` (#371)\n" }, { "commit": "9206282b1aa4b58a100662a80f7f5c3526f35137", "tree": "1462df0fa27197b92398b908ce90d88d40e4dded", "parents": [ "139672f1046a5736a5e5562b727a958e254b61e8" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Apr 07 10:57:35 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Apr 07 10:57:35 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.62.0` (#370)\n" }, { "commit": "139672f1046a5736a5e5562b727a958e254b61e8", "tree": "defb8d93b9507d5273c36bf3d3fbc6ada0132855", "parents": [ "3989460864af392d9ab4f5233c7d5f02a06d791c" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Apr 07 10:55:22 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Apr 07 10:55:22 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.14` (#369)\n" }, { "commit": "3989460864af392d9ab4f5233c7d5f02a06d791c", "tree": "5868e38cd8061b6888e1e534817a9230807f949d", "parents": [ "63dbd70bda2dc09dc3a013c3a3c9e0018f46af49" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Apr 03 10:42:06 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Apr 03 10:42:06 2025 +0000" }, "message": "Update `org.jacoco:jacoco-maven-plugin` to version `0.8.13` (#368)\n" }, { "commit": "c470a36f072ecb716e8aef7c5719d50ff9d1a9dc", "tree": "f7fb1f7a8354af1db074d102a3ef223e0d97e497", "parents": [ "e9e2fa2cd30b3fc9cbcb8ae5cb6f9a80df0bb6ad" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 01 16:08:05 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Apr 01 16:08:05 2025 +0000" }, "message": "Update the `project.build.outputTimestamp` property\n" }, { "commit": "e9e2fa2cd30b3fc9cbcb8ae5cb6f9a80df0bb6ad", "tree": "03e59b80b5634c8481b40797c8601e3641def96a", "parents": [ "63dbd70bda2dc09dc3a013c3a3c9e0018f46af49" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Tue Apr 01 18:05:41 2025 +0200" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Tue Apr 01 18:05:41 2025 +0200" }, "message": "Prepare release notes for `12.1.0`\n" }, { "commit": "63dbd70bda2dc09dc3a013c3a3c9e0018f46af49", "tree": "dca9c60dbd31a90e966dd70ce7a32a4efadf98b7", "parents": [ "ef64f7b143cd506d60ebf0f3d7f51067f486341a" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Mar 26 13:23:54 2025 +0100" }, "committer": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Wed Mar 26 13:23:54 2025 +0100" }, "message": "Add `name` to `package.json`\n" }, { "commit": "ef64f7b143cd506d60ebf0f3d7f51067f486341a", "tree": "bc6dd9db652b22ce2d7cd8eaf6f7490e0a946ded", "parents": [ "85b8c04025a865a05bb75a47389422d1bccbc46f" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 26 10:11:51 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 26 10:11:51 2025 +0000" }, "message": "Update `de.skuzzle.enforcer:restrict-imports-enforcer-rule` to version `2.6.1` (#365)\n" }, { "commit": "85b8c04025a865a05bb75a47389422d1bccbc46f", "tree": "cba386c520ef2d4aad94ab30e80eb42d57965fc3", "parents": [ "d7eb3a68f899fd10ada30103ecdd36e0216fa5d3" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Mar 25 10:27:09 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Mar 25 10:27:09 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.13` (#364)\n" }, { "commit": "d7eb3a68f899fd10ada30103ecdd36e0216fa5d3", "tree": "45031743f0da8b93f6524998bf9c85c18b476f64", "parents": [ "dc95eeeeac4f833969d29cce9b2d1eb80f048bd9" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Mar 25 07:22:37 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Tue Mar 25 07:22:37 2025 +0000" }, "message": "Update `org.asciidoctor:asciidoctor-maven-plugin` to version `3.2.0` (#362)\n" }, { "commit": "dc95eeeeac4f833969d29cce9b2d1eb80f048bd9", "tree": "558ca3ef61ef4a42643e74b504e34d984175b00d", "parents": [ "9e3dda83cba64360283ed751ba05544add3fad1e" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 24 11:44:50 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 24 11:44:50 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.61.0` (#361)\n" }, { "commit": "9e3dda83cba64360283ed751ba05544add3fad1e", "tree": "60f85a15ca9fe1f9584b3269fd7761692e5f102a", "parents": [ "f8c0f3f6bb78d5993917317392654fd45411c8b7" ], "author": { "name": "Piotr P. Karwasz", "email": "pkarwasz-github@apache.org", "time": "Mon Mar 24 11:09:29 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Mar 24 11:09:29 2025 +0100" }, "message": "Fix deployment of test artifacts (#360)\n\n* Fix deployment of test artifacts\n\nDue to a difference between plugins used, if the `deploy` profile is activated, artifacts with `maven.deploy.skip` are being **deployed**.\nThis change fixes it.\n\n* Add changelog entry\n\n* Improve changelog\n\n---------\n\nCo-authored-by: Volkan Yazıcı \u003cvolkan@yazi.ci\u003e" }, { "commit": "f8c0f3f6bb78d5993917317392654fd45411c8b7", "tree": "dab445604aa8f8032de369f743b9d71e4cc1b495", "parents": [ "f71f2924949815e9bc05c47b4ed4353558158472" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 22 08:09:09 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 22 08:09:09 2025 +0100" }, "message": "Update `actions/upload-artifact` to version `4.6.2` (#359) (#359)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "f71f2924949815e9bc05c47b4ed4353558158472", "tree": "573d0652aaac76712fa289bbea278bdf1a0ca1dc", "parents": [ "f652e5b654a34cfb00f89dd9e4379cbea69244fb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 22 08:08:40 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 22 08:08:40 2025 +0100" }, "message": "Bump github/codeql-action from 3.28.11 to 3.28.12 (#358)\n\n* Update `github/codeql-action` to version `3.28.12` (#358)\n\n* Fix version comment\n\n---------\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e\nCo-authored-by: Piotr P. Karwasz \u003cpkarwasz-github@apache.org\u003e" }, { "commit": "f652e5b654a34cfb00f89dd9e4379cbea69244fb", "tree": "6bf94475a7b6ac2e7913c2e4eba9bab63b126db4", "parents": [ "4b67729ce884f760b9fc602ab3547bd34ac6871f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 22 08:03:58 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 22 08:03:58 2025 +0100" }, "message": "Update `com.google.errorprone:error_prone_core` to version `2.37.0` (#356) (#356)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "4b67729ce884f760b9fc602ab3547bd34ac6871f", "tree": "c99a1fd88009944ae0e0dcf2027f962bdb1d9ba9", "parents": [ "0e77c186ade26bc9c7c1c1667615843cdb7ad2d1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 22 08:03:43 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 22 08:03:43 2025 +0100" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.60.0` (#354) (#354)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "0e77c186ade26bc9c7c1c1667615843cdb7ad2d1", "tree": "a1a978e5e9ac1205fa26778fddcd203e22e98c87", "parents": [ "0b584655d182e9df90e1ef3d740ecb0d6fba07e8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 22 08:03:19 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 22 08:03:19 2025 +0100" }, "message": "Update `org.apache:apache` to version `34` (#353) (#353)\n\nCo-authored-by: ASF Logging Services RM \u003cprivate@logging.apache.org\u003e" }, { "commit": "0b584655d182e9df90e1ef3d740ecb0d6fba07e8", "tree": "87d3710bb4c1511299e023a486ec90087e4576fe", "parents": [ "b12acecb06d7a83d68453dac2aab4ec43042c6bc" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Mar 20 11:06:28 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Mar 20 11:06:28 2025 +0000" }, "message": "Update `actions/cache` to version `4.2.3` (#357)\n" }, { "commit": "b12acecb06d7a83d68453dac2aab4ec43042c6bc", "tree": "9eb78bacbab9221faebb2083f9e5a3d586405202", "parents": [ "1fde38edae76862e7a8d1735c19b467f5d11ac15" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Mar 20 10:35:29 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Thu Mar 20 10:35:29 2025 +0000" }, "message": "Update `org.eclipse.jgit:org.eclipse.jgit` to version `7.2.0.202503040940-r` (#355)\n" }, { "commit": "1fde38edae76862e7a8d1735c19b467f5d11ac15", "tree": "4f9a72f9c3ce8914a4354985253fdf3d64fa2d67", "parents": [ "ded182e3ab29a8f84644d96386f387181234f7af" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 19 10:09:11 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 19 10:09:11 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.59.0` (#352)\n" }, { "commit": "ded182e3ab29a8f84644d96386f387181234f7af", "tree": "03988d58c756999d187dacf5dab8f77650334a3e", "parents": [ "7d3ea56f0052fe80640a77e623ab72994a8b2afe" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Tue Mar 18 13:10:58 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 18 13:10:58 2025 +0100" }, "message": "Improve resilience to script injection (#344)\n\n* Improve resilience to script injection\n\nThis change removes all direct usages of GitHub expressions to prevent potential script injections.\n\n**Note**: The GitHub expressions modified in this PR only come from **trusted** sources, so these problems are not exploitable. We wish, however, to prevent possible errors in the future.\n\n* Remove old changelog directory\n\n* Move `PROJECT_ID` from job to steps" }, { "commit": "7d3ea56f0052fe80640a77e623ab72994a8b2afe", "tree": "542ff259b3c8f01212af6602b43ffab7f6e0a9a6", "parents": [ "253079669a3843ff1f28b6e36277611ea9b81ae7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 18 08:19:37 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 18 08:19:37 2025 +0100" }, "message": "Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#336)\n\nBumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.0 to 4.6.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "253079669a3843ff1f28b6e36277611ea9b81ae7", "tree": "85d6387471ab6430d147c7e77b52483844c9f8b8", "parents": [ "fc10c9b39d3a4d0ad7116b18eb039f0da418fb9d" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 17 10:54:28 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 17 10:54:28 2025 +0000" }, "message": "Update `github/codeql-action` to version `3.28.11` (#350)\n" }, { "commit": "fc10c9b39d3a4d0ad7116b18eb039f0da418fb9d", "tree": "4b920c90dea8929d72b9f3cb5c717f7f8df0a97c", "parents": [ "5f60d1d77e6766bbb142dc2a6216b59a298ab525" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 17 10:41:05 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Mon Mar 17 10:41:05 2025 +0000" }, "message": "Update `com.github.spotbugs:spotbugs-maven-plugin` to version `4.9.3.0` (#349)\n" }, { "commit": "5f60d1d77e6766bbb142dc2a6216b59a298ab525", "tree": "04ac7eda9868a81079d967ec9b24f2eca89e6ece", "parents": [ "1dfcd4b8ab9b0dd7af85264d5a7584691b405f56" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Fri Mar 14 14:03:57 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 14 14:03:57 2025 +0100" }, "message": "Add CodeQL run for GitHub Actions (#343)\n\n* Add CodeQL run for GitHub Actions\n\nCodeQL now supports analysis of GitHub Action scripts.\n\n* Add permissions\n\n* Remove old pre-release changelog" }, { "commit": "1dfcd4b8ab9b0dd7af85264d5a7584691b405f56", "tree": "462cf7719ff332f2ebccca0543a4b133d5682789", "parents": [ "5ee49bb2a619ff4b51fd793988b57083c0c4a8a2" ], "author": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 12 10:30:07 2025 +0000" }, "committer": { "name": "ASF Logging Services RM", "email": "private@logging.apache.org", "time": "Wed Mar 12 10:30:07 2025 +0000" }, "message": "Update `com.palantir.javaformat:palantir-java-format` to version `2.58.0` (#348)\n" } ], "next": "5ee49bb2a619ff4b51fd793988b57083c0c4a8a2" }