1. 3add82b Merge pull request #83 from apache/coheigea/group-codeql by Colm O hEigeartaigh · 11 days ago master
  2. 04bf26f Group codeql updates by Colm O hEigeartaigh · 11 days ago
  3. fd74114 Merge pull request #82 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.9 by Colm O hEigeartaigh · 11 days ago
  4. 467997b Merge pull request #81 from apache/dependabot/github_actions/github/codeql-action/init-4.37.9 by Colm O hEigeartaigh · 11 days ago
  5. 7499a68 Merge pull request #80 from apache/dependabot/github_actions/actions/setup-java-6.0.0 by Colm O hEigeartaigh · 11 days ago
  6. 0ffb803 Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 by dependabot[bot] · 12 days ago
  7. cfbe79e Bump github/codeql-action/init from 4.37.8 to 4.37.9 by dependabot[bot] · 12 days ago
  8. c95acbb Bump actions/setup-java from 5.7.0 to 6.0.0 by dependabot[bot] · 12 days ago
  9. 0e879e1 Merge pull request #79 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.8 by Colm O hEigeartaigh · 2 weeks ago
  10. e51c750 Merge pull request #78 from apache/dependabot/github_actions/github/codeql-action/init-4.37.8 by Colm O hEigeartaigh · 2 weeks ago
  11. 3e812ac Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 by dependabot[bot] · 2 weeks ago
  12. d5f236b Bump github/codeql-action/init from 4.37.7 to 4.37.8 by dependabot[bot] · 2 weeks ago
  13. 3d7ee6a Merge pull request #77 from apache/coheigea/policy-isolation by Colm O hEigeartaigh · 3 weeks ago
  14. 1ee3cbe Isolate downloaded policies from the main registry by Colm O hEigeartaigh · 3 weeks ago
  15. e145fc7 Merge pull request #76 from apache/coheigea/ipv6 by Colm O hEigeartaigh · 3 weeks ago
  16. b6bd67c Also exclude some IPv6 addresses by Colm O hEigeartaigh · 3 weeks ago
  17. 882b5fc Merge pull request #75 from apache/coheigea/reference-pinning by Colm O hEigeartaigh · 3 weeks ago
  18. 3435acf Check all DNS entries for the host to see if they are allowed and pin the address used by Colm O hEigeartaigh · 3 weeks ago
  19. 95aa250 Merge pull request #73 from apache/coheigea/policy-reference-timeout by Colm O hEigeartaigh · 3 weeks ago
  20. a767dec Add a bound on the maximum total time allowed to fetch a remote policy document through `PolicyReference` by Colm O hEigeartaigh · 3 weeks ago
  21. 0e180aa Merge pull request #72 from apache/coheigea/subtree-budget by Colm O hEigeartaigh · 3 weeks ago
  22. 754397e Adding subtree budget by Colm O hEigeartaigh · 3 weeks ago
  23. 97e7911 Merge pull request #71 from apache/coheigea/intersection by Colm O hEigeartaigh · 3 weeks ago
  24. 5f6e316 Adding policy intersection budget by Colm O hEigeartaigh · 3 weeks ago
  25. 9861426 Merge pull request #70 from apache/coheigea/policy-comparator-budget by Colm O hEigeartaigh · 3 weeks ago
  26. a577368 Adding a policy comparator budget by Colm O hEigeartaigh · 3 weeks ago
  27. 032fcc3 Merge pull request #69 from apache/coheigea/threat-model-normalize by Colm O hEigeartaigh · 3 weeks ago
  28. efaf37d Updating the threat model with the policy normalize behaviour by Colm O hEigeartaigh · 3 weeks ago
  29. 0d4c467 Merge pull request #68 from apache/coheigea/alternative-cap by Colm O hEigeartaigh · 3 weeks ago
  30. d63930b Add a cap on max normalized components by Colm O hEigeartaigh · 3 weeks ago
  31. 6bf2ff4 Merge pull request #67 from apache/coheigea/reference-expansions by Colm O hEigeartaigh · 3 weeks ago
  32. 74b3bbe Merge pull request #66 from apache/coheigea/public-parser by Colm O hEigeartaigh · 3 weeks ago
  33. dfcbf59 Put limit on reference expansions by Colm O hEigeartaigh · 3 weeks ago
  34. d21f0a7 Fixing recursion case for nested policy by Colm O hEigeartaigh · 3 weeks ago
  35. 5fdc360 Merge pull request #64 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.7 by Colm O hEigeartaigh · 3 weeks ago
  36. 0bb9232 Merge pull request #65 from apache/dependabot/github_actions/github/codeql-action/init-4.37.7 by Colm O hEigeartaigh · 3 weeks ago
  37. 739062e Bump github/codeql-action/init from 4.37.6 to 4.37.7 by dependabot[bot] · 4 weeks ago
  38. 083e548 Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 by dependabot[bot] · 4 weeks ago
  39. 599918a Merge pull request #62 from apache/dependabot/github_actions/github/codeql-action/init-4.37.6 by Colm O hEigeartaigh · 5 weeks ago
  40. 6b578a8 Merge pull request #63 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.6 by Colm O hEigeartaigh · 5 weeks ago
  41. 5402d04 Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 by dependabot[bot] · 5 weeks ago
  42. 90af0b6 Bump github/codeql-action/init from 4.37.4 to 4.37.6 by dependabot[bot] · 5 weeks ago
  43. a8f72c7 Switch to pin GitHub actions by Colm O hEigeartaigh · 5 weeks ago
  44. 234d101 Merge pull request #61 from apache/dependabot/github_actions/actions/setup-java-5.7.0 by Colm O hEigeartaigh · 5 weeks ago
  45. 863f2f4 Merge pull request #60 from apache/dependabot/github_actions/github/codeql-action-4.37.4 by Colm O hEigeartaigh · 5 weeks ago
  46. 8cce36d Bump actions/setup-java from 5.6.0 to 5.7.0 by dependabot[bot] · 5 weeks ago
  47. 540d2be Bump github/codeql-action from 4.37.3 to 4.37.4 by dependabot[bot] · 6 weeks ago
  48. e0327d9 Merge pull request #59 from apache/dependabot/github_actions/github/codeql-action-4.37.3 by Colm O hEigeartaigh · 7 weeks ago
  49. 25f93f7 Bump github/codeql-action from 4.37.1 to 4.37.3 by dependabot[bot] · 7 weeks ago
  50. 52a1c16 Updating website for 3.2.3 release by Colm O hEigeartaigh · 7 weeks ago
  51. 20d34b9 Merge pull request #58 from apache/dependabot/github_actions/github/codeql-action-4.37.1 by Colm O hEigeartaigh · 7 weeks ago
  52. 523b5ce Bump github/codeql-action from 4.37.0 to 4.37.1 by dependabot[bot] · 8 weeks ago
  53. 890d7d1 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 8 weeks ago
  54. a1300b3 [maven-release-plugin] prepare release neethi-3.2.3 by Colm O hEigeartaigh · 8 weeks ago neethi-3.2.3
  55. d2690a7 Merge pull request #57 from apache/dependabot/github_actions/actions/setup-java-5.6.0 by Colm O hEigeartaigh · 8 weeks ago
  56. 3cb5e11 Merge pull request #55 from apache/dependabot/github_actions/github/codeql-action-4.37.0 by Colm O hEigeartaigh · 8 weeks ago
  57. 66aa6fc Bump actions/setup-java from 5.4.0 to 5.6.0 by dependabot[bot] · 8 weeks ago
  58. a26db28 Merge pull request #56 from potiuk/asf-security/threat-model-2026-07-20 by Colm O hEigeartaigh · 8 weeks ago
  59. eca5ee2 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) by Jarek Potiuk · 8 weeks ago
  60. c9b4b92 Bump github/codeql-action from 4.36.3 to 4.37.0 by dependabot[bot] · 9 weeks ago
  61. 58558a1 Merge pull request #53 from apache/coheigea/threat-model by Colm O hEigeartaigh · 9 weeks ago
  62. 18055e1 Update threat model and remove draft by Colm O hEigeartaigh · 9 weeks ago
  63. 63c2a59 Merge pull request #52 from apache/coheigea/policy-containing-primitive by Colm O hEigeartaigh · 9 weeks ago
  64. c28789c Merge pull request #32 from potiuk/asf-security/draft-threat-model-2026-05-30 by Colm O hEigeartaigh · 9 weeks ago
  65. 113d784 Policy Containing Primitive fix by Colm O hEigeartaigh · 9 weeks ago
  66. bbd6eb8 Merge pull request #51 from apache/coheigea/remote-bytes by Colm O hEigeartaigh · 9 weeks ago
  67. 8c9f0ee Enforce the amount of bytes that can be read from the remote reference by Colm O hEigeartaigh · 9 weeks ago
  68. d278c9d Merge pull request #50 from apache/coheigea/policy-builder by Colm O hEigeartaigh · 9 weeks ago
  69. a609146 Add limits for max depth, attributes, elements in a policy by Colm O hEigeartaigh · 9 weeks ago
  70. 4a8d608 Merge pull request #49 from apache/coheigea/policy-intersection by Colm O hEigeartaigh · 9 weeks ago
  71. 76f9a22 Fixing policy intersection bug by Colm O hEigeartaigh · 9 weeks ago coheigea/policy-intersection
  72. b27b701 Merge pull request #48 from apache/coheigea/policy-alternatives by Colm O hEigeartaigh · 9 weeks ago
  73. d356ede normalization alternative limit can be bypassed through ExactlyOne aggregation by Colm O hEigeartaigh · 9 weeks ago
  74. 35fe524 Merge pull request #47 from apache/coheigea/circular-reference-no-id by Colm O hEigeartaigh · 9 weeks ago
  75. 39870cf Detect cycles when there is no Policy Id by Colm O hEigeartaigh · 9 weeks ago
  76. fd0a698 Merge pull request #46 from apache/dependabot/github_actions/actions/setup-java-5.4.0 by Colm O hEigeartaigh · 9 weeks ago
  77. 3f1fd7d Merge pull request #45 from apache/dependabot/github_actions/github/codeql-action-4.36.3 by Colm O hEigeartaigh · 9 weeks ago
  78. 1f31101 Bump actions/setup-java from 5 to 5.4.0 by dependabot[bot] · 9 weeks ago
  79. bcb7b21 Bump github/codeql-action from 4.35.5 to 4.36.3 by dependabot[bot] · 10 weeks ago
  80. 07c925f Bump actions/checkout from 6 to 7 by dependabot[bot] · 2 months ago
  81. c977a73 Bump actions/cache from 5 to 6 by dependabot[bot] · 2 months ago
  82. 511537f Bump org.apache:apache from 38 to 39 by dependabot[bot] · 2 months ago
  83. 0039f44 Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 by dependabot[bot] · 4 months ago
  84. 9ca3a09 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by dependabot[bot] · 3 months ago
  85. f001b5a Add draft project security threat-model document by Jarek Potiuk · 4 months ago
  86. e9cef85 Merge pull request #29 from apache/dependabot/github_actions/github/codeql-action-4.35.5 by Colm O hEigeartaigh · 4 months ago
  87. 0ce27f9 Bump github/codeql-action from 4.35.4 to 4.35.5 by dependabot[bot] · 4 months ago
  88. 9fe3592 Excluding .asf.yaml from rat check by Colm O hEigeartaigh · 4 months ago
  89. 6e50396 Merge pull request #28 from apache/infrastructure-ruleset-bot/default-branch-protection by Colm O hEigeartaigh · 4 months ago
  90. aa5d1e0 Set up default protection ruleset for default and release branches by The Apache Software Foundation · 4 months ago infrastructure-ruleset-bot/default-branch-protection
  91. 333d6e4 Merge pull request #27 from apache/dependabot/github_actions/github/codeql-action-4.35.4 by Colm O hEigeartaigh · 4 months ago
  92. 55efad8 Merge pull request #26 from apache/dependabot/maven/org.apache-apache-38 by Colm O hEigeartaigh · 4 months ago
  93. c37da7a Bump github/codeql-action from 4.35.3 to 4.35.4 by dependabot[bot] · 4 months ago
  94. ebda197 Bump org.apache:apache from 37 to 38 by dependabot[bot] · 4 months ago
  95. c721f7e Merge pull request #25 from apache/dependabot/github_actions/github/codeql-action-4.35.3 by Colm O hEigeartaigh · 4 months ago
  96. d61fb35 Bump github/codeql-action from 4 to 4.35.3 by dependabot[bot] · 4 months ago
  97. 4d59a8d Correcting checksum link by Colm O hEigeartaigh · 5 months ago
  98. 92fd57d Adding security site by Colm O hEigeartaigh · 5 months ago
  99. 206b85d Updating website for 3.2.2 release by Colm O hEigeartaigh · 5 months ago
  100. 4a49683 Fixing Fluido skin for website by Colm O hEigeartaigh · 5 months ago