1. e0327d9 Merge pull request #59 from apache/dependabot/github_actions/github/codeql-action-4.37.3 by Colm O hEigeartaigh · 3 days ago master
  2. 25f93f7 Bump github/codeql-action from 4.37.1 to 4.37.3 by dependabot[bot] · 4 days ago
  3. 52a1c16 Updating website for 3.2.3 release by Colm O hEigeartaigh · 7 days ago
  4. 20d34b9 Merge pull request #58 from apache/dependabot/github_actions/github/codeql-action-4.37.1 by Colm O hEigeartaigh · 9 days ago
  5. 523b5ce Bump github/codeql-action from 4.37.0 to 4.37.1 by dependabot[bot] · 10 days ago
  6. 890d7d1 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 10 days ago
  7. a1300b3 [maven-release-plugin] prepare release neethi-3.2.3 by Colm O hEigeartaigh · 10 days ago neethi-3.2.3
  8. d2690a7 Merge pull request #57 from apache/dependabot/github_actions/actions/setup-java-5.6.0 by Colm O hEigeartaigh · 10 days ago
  9. 3cb5e11 Merge pull request #55 from apache/dependabot/github_actions/github/codeql-action-4.37.0 by Colm O hEigeartaigh · 10 days ago
  10. 66aa6fc Bump actions/setup-java from 5.4.0 to 5.6.0 by dependabot[bot] · 11 days ago
  11. a26db28 Merge pull request #56 from potiuk/asf-security/threat-model-2026-07-20 by Colm O hEigeartaigh · 11 days ago
  12. eca5ee2 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) by Jarek Potiuk · 11 days ago
  13. c9b4b92 Bump github/codeql-action from 4.36.3 to 4.37.0 by dependabot[bot] · 3 weeks ago
  14. 58558a1 Merge pull request #53 from apache/coheigea/threat-model by Colm O hEigeartaigh · 3 weeks ago
  15. 18055e1 Update threat model and remove draft by Colm O hEigeartaigh · 3 weeks ago
  16. 63c2a59 Merge pull request #52 from apache/coheigea/policy-containing-primitive by Colm O hEigeartaigh · 3 weeks ago
  17. c28789c Merge pull request #32 from potiuk/asf-security/draft-threat-model-2026-05-30 by Colm O hEigeartaigh · 3 weeks ago
  18. 113d784 Policy Containing Primitive fix by Colm O hEigeartaigh · 3 weeks ago
  19. bbd6eb8 Merge pull request #51 from apache/coheigea/remote-bytes by Colm O hEigeartaigh · 3 weeks ago
  20. 8c9f0ee Enforce the amount of bytes that can be read from the remote reference by Colm O hEigeartaigh · 3 weeks ago
  21. d278c9d Merge pull request #50 from apache/coheigea/policy-builder by Colm O hEigeartaigh · 3 weeks ago
  22. a609146 Add limits for max depth, attributes, elements in a policy by Colm O hEigeartaigh · 3 weeks ago
  23. 4a8d608 Merge pull request #49 from apache/coheigea/policy-intersection by Colm O hEigeartaigh · 3 weeks ago
  24. 76f9a22 Fixing policy intersection bug by Colm O hEigeartaigh · 3 weeks ago coheigea/policy-intersection
  25. b27b701 Merge pull request #48 from apache/coheigea/policy-alternatives by Colm O hEigeartaigh · 3 weeks ago
  26. d356ede normalization alternative limit can be bypassed through ExactlyOne aggregation by Colm O hEigeartaigh · 3 weeks ago
  27. 35fe524 Merge pull request #47 from apache/coheigea/circular-reference-no-id by Colm O hEigeartaigh · 3 weeks ago
  28. 39870cf Detect cycles when there is no Policy Id by Colm O hEigeartaigh · 3 weeks ago
  29. fd0a698 Merge pull request #46 from apache/dependabot/github_actions/actions/setup-java-5.4.0 by Colm O hEigeartaigh · 3 weeks ago
  30. 3f1fd7d Merge pull request #45 from apache/dependabot/github_actions/github/codeql-action-4.36.3 by Colm O hEigeartaigh · 3 weeks ago
  31. 1f31101 Bump actions/setup-java from 5 to 5.4.0 by dependabot[bot] · 3 weeks ago
  32. bcb7b21 Bump github/codeql-action from 4.35.5 to 4.36.3 by dependabot[bot] · 3 weeks ago
  33. 07c925f Bump actions/checkout from 6 to 7 by dependabot[bot] · 4 weeks ago
  34. c977a73 Bump actions/cache from 5 to 6 by dependabot[bot] · 4 weeks ago
  35. 511537f Bump org.apache:apache from 38 to 39 by dependabot[bot] · 4 weeks ago
  36. 0039f44 Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 by dependabot[bot] · 10 weeks ago
  37. 9ca3a09 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by dependabot[bot] · 7 weeks ago
  38. f001b5a Add draft project security threat-model document by Jarek Potiuk · 9 weeks ago
  39. e9cef85 Merge pull request #29 from apache/dependabot/github_actions/github/codeql-action-4.35.5 by Colm O hEigeartaigh · 2 months ago
  40. 0ce27f9 Bump github/codeql-action from 4.35.4 to 4.35.5 by dependabot[bot] · 2 months ago
  41. 9fe3592 Excluding .asf.yaml from rat check by Colm O hEigeartaigh · 2 months ago
  42. 6e50396 Merge pull request #28 from apache/infrastructure-ruleset-bot/default-branch-protection by Colm O hEigeartaigh · 2 months ago
  43. aa5d1e0 Set up default protection ruleset for default and release branches by The Apache Software Foundation · 3 months ago infrastructure-ruleset-bot/default-branch-protection
  44. 333d6e4 Merge pull request #27 from apache/dependabot/github_actions/github/codeql-action-4.35.4 by Colm O hEigeartaigh · 3 months ago
  45. 55efad8 Merge pull request #26 from apache/dependabot/maven/org.apache-apache-38 by Colm O hEigeartaigh · 3 months ago
  46. c37da7a Bump github/codeql-action from 4.35.3 to 4.35.4 by dependabot[bot] · 3 months ago
  47. ebda197 Bump org.apache:apache from 37 to 38 by dependabot[bot] · 3 months ago
  48. c721f7e Merge pull request #25 from apache/dependabot/github_actions/github/codeql-action-4.35.3 by Colm O hEigeartaigh · 3 months ago
  49. d61fb35 Bump github/codeql-action from 4 to 4.35.3 by dependabot[bot] · 3 months ago
  50. 4d59a8d Correcting checksum link by Colm O hEigeartaigh · 3 months ago
  51. 92fd57d Adding security site by Colm O hEigeartaigh · 3 months ago
  52. 206b85d Updating website for 3.2.2 release by Colm O hEigeartaigh · 3 months ago
  53. 4a49683 Fixing Fluido skin for website by Colm O hEigeartaigh · 3 months ago
  54. 10ca5f0 Fixing site by Colm O hEigeartaigh · 3 months ago
  55. 08faa6b [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 3 months ago
  56. 2351df2 [maven-release-plugin] prepare release neethi-3.2.2 by Colm O hEigeartaigh · 3 months ago neethi-3.2.2
  57. 3099a3f Adding test for last commit by Colm O hEigeartaigh · 3 months ago
  58. 9069bcf Put a limit on the number of nested policies by Colm O hEigeartaigh · 3 months ago
  59. 26f81a6 Don't follow redirects for policies by Colm O hEigeartaigh · 3 months ago
  60. 42867c2 Improving XML processing in tests by Colm O hEigeartaigh · 3 months ago
  61. 196862e Forbidding references to link-local addresses by Colm O hEigeartaigh · 3 months ago
  62. 23197a9 Add connection timeouts to policy reference by Colm O hEigeartaigh · 3 months ago
  63. a488afc Minor fixes by Colm O hEigeartaigh · 3 months ago
  64. 721d1ed Missing XML hardening step by Colm O hEigeartaigh · 3 months ago
  65. 49a5368 Adding some unit tests by Colm O hEigeartaigh · 3 months ago
  66. 7a38f2b Detect circular policy references by Colm O hEigeartaigh · 3 months ago
  67. 7cf2056 Adding StaxToDOMConverter unit tests by Colm O hEigeartaigh · 3 months ago
  68. bcff4ec Fixing entity reference parsing by Colm O hEigeartaigh · 3 months ago
  69. ee4bce0 Harden XMLStreamReader creation by Colm O hEigeartaigh · 3 months ago
  70. 696e248 Only allow http/https for remote policy referenes by Colm O hEigeartaigh · 3 months ago
  71. 3cbf4da NEETHI-24 - Adding a doap by Colm O hEigeartaigh · 6 months ago
  72. 3b69637 Switching to https links by Colm O hEigeartaigh · 6 months ago
  73. 5bd4c2e Merge pull request #21 from apache/dependabot/maven/org.apache-apache-37 by Colm O hEigeartaigh · 7 months ago
  74. fe76a87 Bump org.apache:apache from 36 to 37 by dependabot[bot] · 7 months ago
  75. f57618f Merge pull request #20 from apache/dependabot/maven/org.apache-apache-36 by Colm O hEigeartaigh · 7 months ago
  76. 9376eab Bump org.apache:apache from 35 to 36 by dependabot[bot] · 7 months ago
  77. b5710a9 Merge pull request #18 from apache/dependabot/github_actions/actions/checkout-6 by Colm O hEigeartaigh · 7 months ago
  78. cb651e0 Merge pull request #19 from apache/dependabot/github_actions/actions/cache-5 by Colm O hEigeartaigh · 7 months ago
  79. 7dc775b Bump actions/cache from 4 to 5 by dependabot[bot] · 8 months ago
  80. 4ce4dc8 Adding cooldown for dependabot by Colm O hEigeartaigh · 8 months ago
  81. b13d467 Bump actions/checkout from 5 to 6 by dependabot[bot] · 8 months ago
  82. ef02e69 Merge pull request #15 from apache/dependabot/maven/org.apache.felix-maven-bundle-plugin-5.1.9 by Colm O hEigeartaigh · 9 months ago
  83. fcef7f8 Merge pull request #16 from apache/dependabot/maven/org.apache.maven.scm-maven-scm-provider-svnexe-2.2.1 by Colm O hEigeartaigh · 9 months ago
  84. c41648e Merge pull request #17 from apache/dependabot/maven/org.apache.maven.plugins-maven-project-info-reports-plugin-3.9.0 by Colm O hEigeartaigh · 9 months ago
  85. 7e372f4 Bump org.apache.maven.plugins:maven-project-info-reports-plugin by dependabot[bot] · 9 months ago
  86. be1c41b Bump org.apache.maven.scm:maven-scm-provider-svnexe from 1.11.2 to 2.2.1 by dependabot[bot] · 9 months ago
  87. 47e4441 Bump org.apache.felix:maven-bundle-plugin from 5.1.2 to 5.1.9 by dependabot[bot] · 9 months ago
  88. 3b54c1c Merge pull request #14 from apache/dependabot/maven/org.apache.maven.scm-maven-scm-api-2.2.1 by Colm O hEigeartaigh · 9 months ago
  89. 35fd73e Merge pull request #13 from apache/dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.21.0 by Colm O hEigeartaigh · 9 months ago
  90. 9109d50 Merge pull request #12 from apache/dependabot/maven/org.apache.maven.wagon-wagon-scm-3.5.3 by Colm O hEigeartaigh · 9 months ago
  91. 2dc56c6 Merge pull request #11 from apache/dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.14 by Colm O hEigeartaigh · 9 months ago
  92. af8f1e2 Bump org.apache.maven.scm:maven-scm-api from 1.11.2 to 2.2.1 by dependabot[bot] · 9 months ago
  93. ac4bdb0 Bump org.apache.maven.plugins:maven-site-plugin from 3.9.1 to 3.21.0 by dependabot[bot] · 9 months ago
  94. b005f5f Bump org.apache.maven.wagon:wagon-scm from 3.4.3 to 3.5.3 by dependabot[bot] · 9 months ago
  95. 7697936 Bump org.jacoco:jacoco-maven-plugin from 0.8.7 to 0.8.14 by dependabot[bot] · 9 months ago
  96. c5db167 Merge pull request #9 from apache/dependabot/maven/org.apache.maven.plugins-maven-javadoc-plugin-3.12.0 by Colm O hEigeartaigh · 9 months ago
  97. e0d666b Merge pull request #6 from apache/dependabot/maven/org.apache.maven.plugins-maven-scm-publish-plugin-3.3.0 by Colm O hEigeartaigh · 9 months ago
  98. 64d2591 Merge pull request #4 from apache/dependabot/github_actions/actions/setup-java-5 by Colm O hEigeartaigh · 9 months ago
  99. f7b6523 Bump org.apache.maven.plugins:maven-scm-publish-plugin by dependabot[bot] · 9 months ago
  100. b63775f Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.2.0 to 3.12.0 by dependabot[bot] · 9 months ago