1. c3ccd1a Merge pull request #93 from apache/dependabot/github_actions/codeql-action-271845e79b by Colm O hEigeartaigh · 2 days ago master
  2. 7186cb6 Bump the codeql-action group with 2 updates by dependabot[bot] · 3 days ago
  3. 879529e Merge pull request #92 from apache/dependabot/github_actions/codeql-action-e40781d787 by Colm O hEigeartaigh · 8 days ago
  4. 33162f7 Merge pull request #91 from apache/dependabot/github_actions/actions/setup-java-6.1.0 by Colm O hEigeartaigh · 8 days ago
  5. dfd9027 Bump the codeql-action group with 2 updates by dependabot[bot] · 9 days ago
  6. 767bbf0 Bump actions/setup-java from 6.0.1 to 6.1.0 by dependabot[bot] · 10 days ago
  7. 7cd6372 Merge pull request #90 from apache/dependabot/github_actions/codeql-action-9159e49961 by Colm O hEigeartaigh · 2 weeks ago
  8. f5bc2b4 Bump the codeql-action group with 2 updates by dependabot[bot] · 2 weeks ago
  9. c4de31a Merge pull request #89 from apache/dependabot/github_actions/codeql-action-4b2c77c676 by Colm O hEigeartaigh · 4 weeks ago
  10. 4bc5f5f Bump the codeql-action group with 2 updates by dependabot[bot] · 4 weeks ago
  11. afa04ee Switching http: to https in the site by Colm O hEigeartaigh · 4 weeks ago
  12. 74959ac Downgrading the rat plugin to work on Java 8 by Colm O hEigeartaigh · 5 weeks ago
  13. dd60561 Merge pull request #87 from apache/dependabot/github_actions/codeql-action-c83b7ed659 by Colm O hEigeartaigh · 5 weeks ago
  14. bb9d96a Merge pull request #86 from apache/dependabot/maven/org.apache-apache-40 by Colm O hEigeartaigh · 5 weeks ago
  15. dc9fbf3 Bump the codeql-action group with 2 updates by dependabot[bot] · 5 weeks ago
  16. 3664c05 Bump org.apache:apache from 39 to 40 by dependabot[bot] · 5 weeks ago
  17. 6d4eccb Updating website for 3.2.4 release by Colm O hEigeartaigh · 6 weeks ago
  18. 806894b [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 6 weeks ago
  19. 901c6bf [maven-release-plugin] prepare release neethi-3.2.4 by Colm O hEigeartaigh · 6 weeks ago neethi-3.2.4
  20. fdaf27e Add memory exhaustion protection to Axiom path as well by Colm O hEigeartaigh · 6 weeks ago
  21. fac343f Merge pull request #85 from apache/dependabot/github_actions/actions/setup-java-6.0.1 by Colm O hEigeartaigh · 6 weeks ago
  22. 4b558d8 Merge pull request #84 from apache/dependabot/github_actions/codeql-action-03ad6eec6c by Colm O hEigeartaigh · 6 weeks ago
  23. 1a37b43 Bump actions/setup-java from 6.0.0 to 6.0.1 by dependabot[bot] · 6 weeks ago
  24. dbab4c6 Bump the codeql-action group with 2 updates by dependabot[bot] · 6 weeks ago
  25. 3add82b Merge pull request #83 from apache/coheigea/group-codeql by Colm O hEigeartaigh · 8 weeks ago
  26. 04bf26f Group codeql updates by Colm O hEigeartaigh · 8 weeks ago
  27. fd74114 Merge pull request #82 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.9 by Colm O hEigeartaigh · 8 weeks ago
  28. 467997b Merge pull request #81 from apache/dependabot/github_actions/github/codeql-action/init-4.37.9 by Colm O hEigeartaigh · 8 weeks ago
  29. 7499a68 Merge pull request #80 from apache/dependabot/github_actions/actions/setup-java-6.0.0 by Colm O hEigeartaigh · 8 weeks ago
  30. 0ffb803 Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 by dependabot[bot] · 8 weeks ago
  31. cfbe79e Bump github/codeql-action/init from 4.37.8 to 4.37.9 by dependabot[bot] · 8 weeks ago
  32. c95acbb Bump actions/setup-java from 5.7.0 to 6.0.0 by dependabot[bot] · 8 weeks ago
  33. 0e879e1 Merge pull request #79 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.8 by Colm O hEigeartaigh · 9 weeks ago
  34. e51c750 Merge pull request #78 from apache/dependabot/github_actions/github/codeql-action/init-4.37.8 by Colm O hEigeartaigh · 9 weeks ago
  35. 3e812ac Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 by dependabot[bot] · 9 weeks ago
  36. d5f236b Bump github/codeql-action/init from 4.37.7 to 4.37.8 by dependabot[bot] · 9 weeks ago
  37. 3d7ee6a Merge pull request #77 from apache/coheigea/policy-isolation by Colm O hEigeartaigh · 10 weeks ago
  38. 1ee3cbe Isolate downloaded policies from the main registry by Colm O hEigeartaigh · 10 weeks ago
  39. e145fc7 Merge pull request #76 from apache/coheigea/ipv6 by Colm O hEigeartaigh · 10 weeks ago
  40. b6bd67c Also exclude some IPv6 addresses by Colm O hEigeartaigh · 10 weeks ago
  41. 882b5fc Merge pull request #75 from apache/coheigea/reference-pinning by Colm O hEigeartaigh · 10 weeks ago
  42. 3435acf Check all DNS entries for the host to see if they are allowed and pin the address used by Colm O hEigeartaigh · 10 weeks ago
  43. 95aa250 Merge pull request #73 from apache/coheigea/policy-reference-timeout by Colm O hEigeartaigh · 10 weeks ago
  44. a767dec Add a bound on the maximum total time allowed to fetch a remote policy document through `PolicyReference` by Colm O hEigeartaigh · 10 weeks ago
  45. 0e180aa Merge pull request #72 from apache/coheigea/subtree-budget by Colm O hEigeartaigh · 10 weeks ago
  46. 754397e Adding subtree budget by Colm O hEigeartaigh · 10 weeks ago
  47. 97e7911 Merge pull request #71 from apache/coheigea/intersection by Colm O hEigeartaigh · 2 months ago
  48. 5f6e316 Adding policy intersection budget by Colm O hEigeartaigh · 2 months ago
  49. 9861426 Merge pull request #70 from apache/coheigea/policy-comparator-budget by Colm O hEigeartaigh · 2 months ago
  50. a577368 Adding a policy comparator budget by Colm O hEigeartaigh · 2 months ago
  51. 032fcc3 Merge pull request #69 from apache/coheigea/threat-model-normalize by Colm O hEigeartaigh · 2 months ago
  52. efaf37d Updating the threat model with the policy normalize behaviour by Colm O hEigeartaigh · 2 months ago
  53. 0d4c467 Merge pull request #68 from apache/coheigea/alternative-cap by Colm O hEigeartaigh · 2 months ago
  54. d63930b Add a cap on max normalized components by Colm O hEigeartaigh · 2 months ago
  55. 6bf2ff4 Merge pull request #67 from apache/coheigea/reference-expansions by Colm O hEigeartaigh · 2 months ago
  56. 74b3bbe Merge pull request #66 from apache/coheigea/public-parser by Colm O hEigeartaigh · 2 months ago
  57. dfcbf59 Put limit on reference expansions by Colm O hEigeartaigh · 2 months ago
  58. d21f0a7 Fixing recursion case for nested policy by Colm O hEigeartaigh · 2 months ago
  59. 5fdc360 Merge pull request #64 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.7 by Colm O hEigeartaigh · 2 months ago
  60. 0bb9232 Merge pull request #65 from apache/dependabot/github_actions/github/codeql-action/init-4.37.7 by Colm O hEigeartaigh · 2 months ago
  61. 739062e Bump github/codeql-action/init from 4.37.6 to 4.37.7 by dependabot[bot] · 2 months ago
  62. 083e548 Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 by dependabot[bot] · 2 months ago
  63. 599918a Merge pull request #62 from apache/dependabot/github_actions/github/codeql-action/init-4.37.6 by Colm O hEigeartaigh · 3 months ago
  64. 6b578a8 Merge pull request #63 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.6 by Colm O hEigeartaigh · 3 months ago
  65. 5402d04 Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 by dependabot[bot] · 3 months ago
  66. 90af0b6 Bump github/codeql-action/init from 4.37.4 to 4.37.6 by dependabot[bot] · 3 months ago
  67. a8f72c7 Switch to pin GitHub actions by Colm O hEigeartaigh · 3 months ago
  68. 234d101 Merge pull request #61 from apache/dependabot/github_actions/actions/setup-java-5.7.0 by Colm O hEigeartaigh · 3 months ago
  69. 863f2f4 Merge pull request #60 from apache/dependabot/github_actions/github/codeql-action-4.37.4 by Colm O hEigeartaigh · 3 months ago
  70. 8cce36d Bump actions/setup-java from 5.6.0 to 5.7.0 by dependabot[bot] · 3 months ago
  71. 540d2be Bump github/codeql-action from 4.37.3 to 4.37.4 by dependabot[bot] · 3 months ago
  72. e0327d9 Merge pull request #59 from apache/dependabot/github_actions/github/codeql-action-4.37.3 by Colm O hEigeartaigh · 3 months ago
  73. 25f93f7 Bump github/codeql-action from 4.37.1 to 4.37.3 by dependabot[bot] · 3 months ago
  74. 52a1c16 Updating website for 3.2.3 release by Colm O hEigeartaigh · 3 months ago
  75. 20d34b9 Merge pull request #58 from apache/dependabot/github_actions/github/codeql-action-4.37.1 by Colm O hEigeartaigh · 3 months ago
  76. 523b5ce Bump github/codeql-action from 4.37.0 to 4.37.1 by dependabot[bot] · 3 months ago
  77. 890d7d1 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 3 months ago
  78. a1300b3 [maven-release-plugin] prepare release neethi-3.2.3 by Colm O hEigeartaigh · 3 months ago neethi-3.2.3
  79. d2690a7 Merge pull request #57 from apache/dependabot/github_actions/actions/setup-java-5.6.0 by Colm O hEigeartaigh · 3 months ago
  80. 3cb5e11 Merge pull request #55 from apache/dependabot/github_actions/github/codeql-action-4.37.0 by Colm O hEigeartaigh · 3 months ago
  81. 66aa6fc Bump actions/setup-java from 5.4.0 to 5.6.0 by dependabot[bot] · 3 months ago
  82. a26db28 Merge pull request #56 from potiuk/asf-security/threat-model-2026-07-20 by Colm O hEigeartaigh · 3 months ago
  83. eca5ee2 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) by Jarek Potiuk · 3 months ago
  84. c9b4b92 Bump github/codeql-action from 4.36.3 to 4.37.0 by dependabot[bot] · 4 months ago
  85. 58558a1 Merge pull request #53 from apache/coheigea/threat-model by Colm O hEigeartaigh · 4 months ago
  86. 18055e1 Update threat model and remove draft by Colm O hEigeartaigh · 4 months ago
  87. 63c2a59 Merge pull request #52 from apache/coheigea/policy-containing-primitive by Colm O hEigeartaigh · 4 months ago
  88. c28789c Merge pull request #32 from potiuk/asf-security/draft-threat-model-2026-05-30 by Colm O hEigeartaigh · 4 months ago
  89. 113d784 Policy Containing Primitive fix by Colm O hEigeartaigh · 4 months ago
  90. bbd6eb8 Merge pull request #51 from apache/coheigea/remote-bytes by Colm O hEigeartaigh · 4 months ago
  91. 8c9f0ee Enforce the amount of bytes that can be read from the remote reference by Colm O hEigeartaigh · 4 months ago
  92. d278c9d Merge pull request #50 from apache/coheigea/policy-builder by Colm O hEigeartaigh · 4 months ago
  93. a609146 Add limits for max depth, attributes, elements in a policy by Colm O hEigeartaigh · 4 months ago
  94. 4a8d608 Merge pull request #49 from apache/coheigea/policy-intersection by Colm O hEigeartaigh · 4 months ago
  95. 76f9a22 Fixing policy intersection bug by Colm O hEigeartaigh · 4 months ago coheigea/policy-intersection
  96. b27b701 Merge pull request #48 from apache/coheigea/policy-alternatives by Colm O hEigeartaigh · 4 months ago
  97. d356ede normalization alternative limit can be bypassed through ExactlyOne aggregation by Colm O hEigeartaigh · 4 months ago
  98. 35fe524 Merge pull request #47 from apache/coheigea/circular-reference-no-id by Colm O hEigeartaigh · 4 months ago
  99. 39870cf Detect cycles when there is no Policy Id by Colm O hEigeartaigh · 4 months ago
  100. fd0a698 Merge pull request #46 from apache/dependabot/github_actions/actions/setup-java-5.4.0 by Colm O hEigeartaigh · 4 months ago