1. 31bf7f9 Fix typos by Alastair McFarlane · 7 hours ago main
  2. f41dac3 Update docs for SHA3-256 and SWHID. by Alastair McFarlane · 7 hours ago
  3. 215d899 #1720 - hide whole field when using template URL by Alastair McFarlane · 7 hours ago
  4. 004e639 Fix another rsync traversal issue by Alastair McFarlane · 29 hours ago
  5. ebba32a Fix landlock/rsync issue by Alastair McFarlane · 30 hours ago production
  6. 0372f32 SBOM report fixes by Alastair McFarlane · 30 hours ago
  7. 13289ac Update catalog header text by Alastair McFarlane · 2 days ago
  8. 3f3464c Don't prepend incubator to podling projects when detected through dist/archive by Alastair McFarlane · 2 days ago
  9. 4c61294 #1717 - show matching projects on search by Alastair McFarlane · 2 days ago
  10. e8642dd Bump the codeql-action group with 2 updates by dependabot[bot] · 3 days ago
  11. c58a764 Document the current browser security requirements by Sean B. Palmer · 3 days ago sbp
  12. 6cf196a Log a warning when the worker pool is full by Sean B. Palmer · 3 days ago
  13. 9a3f8b2 #1715 - change PURL format by Alastair McFarlane · 3 days ago
  14. e67a8f0 Links updates to production site by Alastair McFarlane · 3 days ago
  15. 3adc33f Disallow PubSub redirects to prevent downgrade to HTTP by Sean B. Palmer · 3 days ago
  16. 5c49bc0 Add comments describing email subject value validation by Sean B. Palmer · 3 days ago
  17. b32ca8c Add a template variable for linking to first round podling threads by Sean B. Palmer · 4 days ago
  18. e3555d5 Add prerequisite information for running locally, update deps. by Alastair McFarlane · 3 days ago
  19. ef163ce #1708 - release manager examples by Alastair McFarlane · 4 days ago
  20. 4c9fa52 #1707 - broad documentation fixes by Alastair McFarlane · 4 days ago
  21. 9d9de4b #1700 - audit guidance for additional headers by Alastair McFarlane · 4 days ago
  22. 62ed0b3 Change vote terminology in emails by Sean B. Palmer · 4 days ago
  23. d63c803 Update dependencies by Sean B. Palmer · 4 days ago
  24. 7714802 Use updated terminology for podling votes by Sean B. Palmer · 4 days ago
  25. 32e7bb0 Allow any committer to vote in email voting mode by Sean B. Palmer · 4 days ago
  26. 5a75a07 Use clearer binding vote terminology for podling votes by Sean B. Palmer · 4 days ago
  27. d8d4c7a Test database migrations with synthetic data by Sean B. Palmer · 4 days ago
  28. 1881ebb #1704 - add email templates from URL, with default fallback by Alastair McFarlane · 4 days ago
  29. 101f7e2 Fix bug with SHA setting on new upload by Alastair McFarlane · 4 days ago
  30. b77ab6b #1665 - remove key upload from downloads.a.o, and make page clearer on per-PMC KEYS behaviour by Alastair McFarlane · 4 days ago
  31. 7272610 Show options after revoking user PATs, including a new email option by Sean B. Palmer · 7 days ago
  32. 4e1e820 Do not include the PAT to JWT form in production by Sean B. Palmer · 7 days ago
  33. a788acd #1706 - update links out to external docs by Alastair McFarlane · 7 days ago
  34. 69d6ea4 Avoid network I/O during a write transaction by Sean B. Palmer · 7 days ago
  35. 0fc2de3 Improve and expand the user guide to uploading files by Sean B. Palmer · 7 days ago
  36. 4aa2560 Document file handling constraints in the developer guide by Sean B. Palmer · 7 days ago
  37. 1d5f991 #1705 - guide for PMCs moving to ATR by Alastair McFarlane · 7 days ago
  38. de2abf8 #1666 - pull key signing requirements into a single place and document clearly by Alastair McFarlane · 7 days ago
  39. baf2685 Report errors in docker start by Alastair McFarlane · 7 days ago
  40. 43a71a0 #1703 - remove CAP approval for release archiving by Alastair McFarlane · 7 days ago
  41. 4e1e6eb #1658 - pick up user from JWT for rate limiting by Alastair McFarlane · 7 days ago
  42. 3a32a27 #1650 - force key strength per policy by Alastair McFarlane · 8 days ago
  43. f6f5439 Update documentation relating to Playwright tests by Sean B. Palmer · 8 days ago
  44. e8b25bb Remove DHE-RSA SSL protocols by Dave Fisher · 8 days ago
  45. e832b17 Check the committee membership of signing key owners by Sean B. Palmer · 8 days ago
  46. 8aaffae Do not display SVN details in task errors by Sean B. Palmer · 8 days ago
  47. fa536a9 Update the documentation about accessing the tutorial by Sean B. Palmer · 8 days ago
  48. da8db72 Enforce IP restrictions on system JWTs by Sean B. Palmer · 8 days ago
  49. b744080 Expire sessions when they are more than three days old by Sean B. Palmer · 8 days ago
  50. f5b6f57 Remove SVN diagnostics from announcement errors by Sean B. Palmer · 8 days ago
  51. bac86f6 Omit LDAP details from error responses by Sean B. Palmer · 8 days ago
  52. 0a205dd Do not show all JWT verification failure details by Sean B. Palmer · 8 days ago
  53. 1e747c3 Update Mermaid to 11.17.2 with a three day cooldown by Sean B. Palmer · 8 days ago
  54. 9aaa229 Ensure that concurrent policy edits are not silently lost by Sean B. Palmer · 8 days ago
  55. 029e59a Enforce expedited voting rules in the database schema by Sean B. Palmer · 8 days ago
  56. c934c67 Use a timeout when connecting to LDAP by Sean B. Palmer · 8 days ago
  57. 56a09a3 Filter out empty list values by Sean B. Palmer · 8 days ago
  58. 074e8a3 Do not show absolute paths in error messages by Sean B. Palmer · 8 days ago
  59. 72aaafe Update npm dependencies by Sean B. Palmer · 8 days ago
  60. fe0cdb1 #1653, #1693 - consistent logs and add email for TP auth failures. by Alastair McFarlane · 8 days ago
  61. 859a423 #1437 - documentation updates by Alastair McFarlane · 11 days ago
  62. 1aca36c #1621 - update syft by Alastair McFarlane · 9 days ago
  63. 76c0746 Update dependencies by Sean B. Palmer · 9 days ago
  64. 99156ba Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by dependabot[bot] · 10 days ago
  65. 5ee0546 Bump apache/infrastructure-actions/allowlist-check from 1.0.3 to 1.0.4 by dependabot[bot] · 10 days ago
  66. 6855f00 Bump the codeql-action group with 2 updates by dependabot[bot] · 10 days ago
  67. 43f4c2c Update the tutorial by Sean B. Palmer · 9 days ago
  68. d4ce1cc Support a legacy storage audit format by Sean B. Palmer · 10 days ago
  69. 8275f04 #1504 - fix e2e tests and update workflow by Alastair McFarlane · 9 days ago
  70. 1339a0f #1504 - fix e2e tests and create workflow to run them by Alastair McFarlane · 9 days ago
  71. b9351d6 #1636 - show asfyaml warning on edit by Alastair McFarlane · 9 days ago
  72. f02024b #1382 - a few updates after cross-checking by Alastair McFarlane · 9 days ago
  73. d514830 #1382 - update docs for trusted publishing and link from within the app by Alastair McFarlane · 9 days ago
  74. e16f921 Include exception detail in log by Alastair McFarlane · 10 days ago
  75. 3413a87 Fix duplicate keys for incubator releases by Alastair McFarlane · 10 days ago
  76. 825406f Seal the daily audit logs automatically by Sean B. Palmer · 10 days ago
  77. 478b04f #1635 - change path for checking revprops by Alastair McFarlane · 10 days ago
  78. d318a3c #1591 - pin pre-commit hooks and make a few fixes by Alastair McFarlane · 10 days ago
  79. 3a68126 Make audit log files group readable by Sean B. Palmer · 10 days ago
  80. f3aa6d9 Write unified daily audit logs by Sean B. Palmer · 11 days ago
  81. cda6768 Add a module to build daily audit logs by Sean B. Palmer · 11 days ago
  82. 36ab484 Add a module for log sealing using SLH-DSA signatures by Sean B. Palmer · 11 days ago
  83. 191367f Preserve timezone information across models by Sean B. Palmer · 11 days ago
  84. 6ad5f6e Add a regression test for distribution date timezone preservation by Sean B. Palmer · 11 days ago
  85. ec438f3 Preserve timezone information when parsing distribution upload dates by Sean B. Palmer · 11 days ago
  86. 9defffd Add dependencies for log sealing by Sean B. Palmer · 11 days ago
  87. b35583b Update dependencies by Sean B. Palmer · 11 days ago
  88. c01e00b Ensure that log timestamps are consistently formatted by Sean B. Palmer · 11 days ago
  89. f6615b6 #1624 - Move commit hash to upload form since it's set by other methods already by Alastair McFarlane · 11 days ago
  90. cc6f072 Ensure that OpenPGP serialisation does not drift from our requirements by Sean B. Palmer · 2 weeks ago
  91. eed485e Make OpenPGP formatting compatible with GnuPG in pages and endpoints by Sean B. Palmer · 2 weeks ago
  92. 5c4c92a Make KEYS output compatible with GnuPG by Sean B. Palmer · 2 weeks ago
  93. e9a32c7 #1616 - Update module docs by Alastair McFarlane · 2 weeks ago
  94. 625be4f Add rule type descriptions by Alastair McFarlane · 2 weeks ago
  95. 67c0c32 Add SHA to more pages by Alastair McFarlane · 2 weeks ago
  96. 1e417d6 Restore ability for staging to poll dist/atr while production still checks downloads.a.o by Alastair McFarlane · 2 weeks ago
  97. b674283 Add warning on manual upload after TP, and advise on re-updating SHA after upload. by Alastair McFarlane · 2 weeks ago
  98. 11409f5 Update action pin by Alastair McFarlane · 2 weeks ago
  99. 1223839 #1624 - allow setting explicit commit SHA in TP upload flow by Alastair McFarlane · 2 weeks ago
  100. 391252d Move dist watcher rules to catalog admin page by Alastair McFarlane · 2 weeks ago